|
BUG: unable to handle kernel paging request in cirrus_primary_plane_helper_atomic_update
prio:high
dri
virt
|
8 |
C |
|
|
35 |
62d |
70d
|
27/29 |
never |
92312d333bf7
drm/cirrus-qemu: Validate BAR0 size during probe
|
|
WARNING in __drm_atomic_helper_set_config
prio:high
usb
dri
|
-1 |
syz, C |
|
|
19 |
36d |
86d
|
25/29 |
never |
755c94d178b7
drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN
|
|
WARNING in drm_property_add_enum
prio:high
usb
dri
|
-1 |
syz, C |
error |
|
271 |
48d |
70d
|
27/29 |
never |
500cb24cd61b
drm/gud: NUL-terminate TV mode names read from the device
|
|
WARNING in drm_plane_create_rotation_property
prio:high
usb
dri
|
-1 |
syz, C |
error |
|
12 |
46d |
66d
|
27/29 |
never |
cb732d027aa1
drm/gud: validate GUD_ROTATION_0 is present in supported rotations
|
|
KASAN: slab-out-of-bounds Read in drm_property_add_enum
prio:high
usb
dri
|
17 |
syz, C |
error |
|
111 |
48d |
67d
|
27/29 |
never |
da1ea35fea67
drm/gud: validate TV mode names before creating enum property
|
|
WARNING in virtio_gpu_free_vbufs
prio:high
dri
virt
|
-1 |
|
|
|
13 |
52d |
84d
|
27/29 |
never |
61d85f99b5a5
drm/virtio: reclaim pending vbufs before tearing down vqs
|
|
WARNING in dma_resv_add_fence
prio:high
media
dri
|
-1 |
syz, C |
|
|
7 |
166d |
170d
|
29/29 |
102d |
9af1b6e175c8
drm/virtio: use uninterruptible resv lock for plane updates
drm/virtio: use uninterruptible resv lock for plane updates
|
|
KASAN: slab-use-after-free Read in dma_buf_fd
actionable
prio:high
dri
media
|
19 |
|
|
|
21 |
160d |
228d
|
29/29 |
102d |
ead6680f354f
dma-buf: fix UAF in dma_buf_fd() tracepoint
|
|
WARNING in drm_prime_destroy_file_private (3)
dri
prio:high
|
-1 |
syz, C |
error |
|
183 |
162d |
165d
|
29/29 |
146d |
dc366607c41c
drm: Replace old pointer to new idr
|
|
WARNING in drm_atomic_helper_wait_for_vblanks (5)
dri
|
-1 |
syz |
|
|
464 |
168d |
320d
|
29/29 |
157d |
79ae8510b5b8
drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks()
|
|
WARNING in drm_wait_one_vblank (2)
dri
|
-1 |
syz, C |
error |
|
3650 |
291d |
815d
|
29/29 |
291d |
f050da08a4ed
drm/vblank: Increase timeout in drm_wait_one_vblank()
|
|
WARNING in __ww_mutex_wound
dri
|
-1 |
syz, C |
|
|
16832 |
421d |
452d
|
29/29 |
381d |
21924af67d69
locking: Fix __clear_task_blocked_on() warning from __ww_mutex_wound() path
|
|
divide error in drm_mode_vrefresh
dri
|
2 |
syz, C |
done |
|
15 |
676d |
1222d
|
28/29 |
537d |
9398332f23fa
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
|
|
KMSAN: uninit-value in drm_mode_setcrtc
dri
|
7 |
syz, C |
|
|
41 |
1049d |
1226d
|
25/29 |
1008d |
3823119b9c2b
drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
6e455f5dcdd1
drm/crtc: fix uninitialized variable use
|
|
general protection fault in drm_crtc_next_vblank_start
dri
|
2 |
syz, C |
done |
|
4 |
1304d |
1301d
|
22/29 |
1235d |
6f1ccbf07453
drm/vblank: Fix for drivers that do not drm_vblank_init()
|
|
WARNING in vkms_get_vblank_timestamp
dri
|
-1 |
syz |
error |
|
41 |
1238d |
1298d
|
22/29 |
1235d |
f2c7ca890182
drm/atomic-helper: Don't set deadline for modesets
|
|
general protection fault in dma_fence_array_first
dri
media
|
2 |
syz, C |
done |
|
7 |
1670d |
1670d
|
22/29 |
1291d |
21d139d73f77
dma-buf/sync-file: fix logic error in new fence merge code
|
|
general protection fault in sg_alloc_append_table_from_pages
dri
media
|
11 |
syz, C |
done |
|
477 |
1371d |
1838d
|
22/29 |
1339d |
2b6dd600dd72
udmabuf: validate ubuf->pagecount
|
|
general protection fault in release_udmabuf
dri
media
|
8 |
syz, C |
inconclusive |
|
31 |
1477d |
1528d
|
22/29 |
1339d |
d9c04a1b7a15
udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
|
|
KASAN: use-after-free Read in udl_get_urb_timeout
dri
usb
|
19 |
syz, C |
done |
|
142 |
1495d |
1525d
|
22/29 |
1339d |
ed9605a66b62
Revert "drm/udl: Kill pending URBs at suspend and disconnect"
|
|
general protection fault in virtio_gpu_array_put_free
dri
virt
|
2 |
|
|
|
4 |
1749d |
1786d
|
22/29 |
1339d |
6b79f96f4a23
drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
|
|
WARNING in component_del
dri
|
-1 |
syz, C |
done |
|
6 |
1720d |
1741d
|
22/29 |
1339d |
c853685d11c0
usb: core: Unregister device on component_add() failure
|
|
KASAN: out-of-bounds Write in virtio_gpu_cmd_set_scanout
dri
virt
|
21 |
|
|
|
1 |
1817d |
1817d
|
20/29 |
1692d |
5bd4f20de8ac
virtio-gpu: fix possible memory allocation failure
|
|
KMSAN: kernel-infoleak in compat_drm_wait_vblank
dri
|
9 |
|
|
|
37 |
2026d |
2071d
|
20/29 |
1810d |
de066e116306
drm/compat: Clear bounce structures
drm/compat: Clear bounce structures
|
|
riscv/fixes boot error: WARNING in vkms_vblank_simulate
dri
|
-1 |
|
|
|
13 |
2011d |
2035d
|
20/29 |
1810d |
b4142fc4d52d
drm/vkms: fix misuse of WARN_ON
|
|
WARNING in vkms_vblank_simulate (2)
dri
|
-1 |
syz, C |
error |
|
77748 |
1811d |
2185d
|
20/29 |
1810d |
b4142fc4d52d
drm/vkms: fix misuse of WARN_ON
|
|
general protection fault in udmabuf_create
dri
media
|
2 |
syz, C |
done |
|
2 |
1905d |
1902d
|
20/29 |
1810d |
b9770b0b6eac
udmabuf: fix general protection fault in udmabuf_create
|
|
KASAN: use-after-free Read in drm_getunique
dri
|
19 |
syz |
inconclusive |
|
2 |
1971d |
1971d
|
20/29 |
1810d |
b436acd1cf7f
drm: Fix use-after-free read in drm_getunique()
|
|
general protection fault in drm_atomic_set_crtc_for_connector
dri
|
2 |
syz, C |
unreliable |
|
586 |
2168d |
2165d
|
20/29 |
1836d |
0003b687ee6d
drm: fix oops in drm_atomic_set_crtc_for_connector
|
|
general protection fault in drm_client_buffer_vunmap
usb
dri
|
2 |
syz, C |
unreliable |
done |
247 |
2053d |
2155d
|
20/29 |
2021d |
874a52f9b693
drm/fb-helper: only unmap if buffer not null
|
|
kernel BUG at drivers/dma-buf/dma-buf.c:LINE!
dri
media
|
-1 |
syz |
error |
done |
11 |
2173d |
2423d
|
19/29 |
2055d |
e722a295cf49
staging: ion: remove from the tree
|
|
KASAN: use-after-free Read in dmabuffs_dname
media
dri
|
19 |
|
|
|
1 |
2427d |
2423d
|
15/29 |
2276d |
4ab59c3c638c
dma-buf: Move dma_buf_release() from fops to dentry_ops
|
|
KASAN: use-after-free Read in vkms_dumb_create
dri
|
19 |
syz |
done |
|
2 |
2376d |
2372d
|
15/29 |
2291d |
0ea2ea42b31a
drm/vkms: Hold gem object while still in-use
|
|
upstream boot error: KASAN: slab-out-of-bounds Write in virtio_gpu_object_create
dri
virt
|
-1 |
|
|
|
6 |
2384d |
2393d
|
15/29 |
2310d |
b513b0d4563a
drm/virtio: fix OOB in virtio_gpu_object_create
|
|
WARNING in idr_destroy
dri
|
-1 |
syz, C |
done |
|
5 |
2412d |
2427d
|
15/29 |
2384d |
b216a8e7908c
drm/lease: fix WARNING in idr_destroy
|
|
KASAN: use-after-free Read in vgem_gem_dumb_create
dri
|
19 |
syz, C |
done |
|
15 |
2447d |
2458d
|
15/29 |
2384d |
4b848f20eda5
drm/vgem: Close use-after-free race in vgem_gem_create
|
|
WARNING in drm_mode_createblob_ioctl
dri
|
-1 |
syz, C |
done |
|
7 |
2545d |
2568d
|
15/29 |
2482d |
5bf8bec3f4ce
drm: limit to INT_MAX in create_blob ioctl
|
|
WARNING in dma_buf_vunmap
dri
media
|
-1 |
syz, C |
done |
done |
17 |
2865d |
2903d
|
13/29 |
2540d |
62dcb4f41836
media: vb2: check memory model for VIDIOC_CREATE_BUFS
|
|
KASAN: use-after-free Read in drm_gem_object_release
dri
|
19 |
syz, C |
|
|
480 |
2769d |
2921d
|
12/29 |
2753d |
21d2b1227323
drm/vgem: fix use-after-free when drm_gem_handle_create() fails
|
|
WARNING in __flush_work (2)
dri
|
-1 |
syz, C |
|
|
38 |
2787d |
2788d
|
11/29 |
2768d |
b30b61ff6b1d
drm/vkms: Fix flush_work() without INIT_WORK().
|
|
INFO: trying to register non-static key in __flush_work
dri
|
-1 |
syz, C |
|
|
5255 |
2788d |
2857d
|
11/29 |
2768d |
b30b61ff6b1d
drm/vkms: Fix flush_work() without INIT_WORK().
|
|
WARNING: lock held when returning to user space in set_property_atomic
dri
|
4 |
syz, C |
|
|
145 |
2843d |
2856d
|
11/29 |
2788d |
4089e272ac61
gpu/drm: Fix lock held when returning to user space.
|
|
WARNING in vkms_plane_duplicate_state
dri
|
-1 |
syz, C |
|
|
108 |
2861d |
2894d
|
11/29 |
2844d |
7cdf33ab02e0
drm/vkms: Fix plane duplicate_state
|
|
WARNING in drm_modeset_lock_all
dri
|
-1 |
|
|
|
35 |
3278d |
3285d
|
4/29 |
3176d |
d18d1a5ac811
drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all
|