|
general protection fault in bnep_session
prio:high
driver-core
|
7 |
syz |
error |
|
1395 |
57d |
718d
|
27/29 |
never |
9b851b09b392
Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
|
|
KASAN: slab-use-after-free Read in __dynamic_dev_dbg
prio:normal
driver-core
media
|
19 |
syz, C |
|
|
587 |
21m |
56d
|
26/29 |
never |
118a3590a408
media: imon: fix use-after-free in display_close via dev_dbg
|
|
KASAN: slab-use-after-free Read in sysfs_emit
prio:high
driver-core
fs
|
19 |
syz, C |
|
|
22 |
21d |
97d
|
26/29 |
never |
af452b9e0133
media: redrat3: fix UAF in probe error path leaving rc device registered
|
|
INFO: task hung in remove_one
prio:low
fs
driver-core
|
1 |
syz |
error |
|
349 |
1h30m |
674d
|
27/29 |
never |
b3217bdb0091
netdevsim: drop the ability to change max_vfs via debugfs
|
|
WARNING in update_rq_clock (2)
prio:low
driver-core
|
-1 |
syz, C |
error |
|
2475 |
56m |
132d
|
2/29 |
never |
sched/core: Do not touch SMT siblings that have not joined the core yet
sched/core: Do not touch SMT siblings that have not joined the core yet
|
|
KASAN: slab-use-after-free Read in debugfs_u32_get (2)
prio:normal
driver-core
fs
|
19 |
syz |
|
|
1 |
137d |
147d
|
29/29 |
105d |
2e996ca81f95
netdevsim: remove ethtool debugfs files before freeing netdev
|
|
possible deadlock in assign_fw
driver-core
|
4 |
syz, C |
done |
|
185 |
153d |
857d
|
29/29 |
119d |
d3ec78f8f8d4
firmware_loader: Fix recursive lock in device_cache_fw_images()
|
|
memory leak in debugfs_change_name
driver-core
fs
|
3 |
syz, C |
|
|
1 |
342d |
338d
|
29/29 |
294d |
d412ff9e26eb
debugfs: Fix memleak in debugfs_change_name().
|
|
KASAN: slab-use-after-free Read in driver_remove_file
driver-core
fs
|
19 |
syz, C |
error |
done |
296 |
341d |
470d
|
29/29 |
295d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
WARNING in driver_unregister (2)
driver-core
|
-1 |
syz, C |
error |
|
3214 |
339d |
494d
|
29/29 |
308d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
INFO: rcu detected stall in dummy_timer (4)
usb
driver-core
|
1 |
syz, C |
inconclusive |
done |
25 |
425d |
1586d
|
29/29 |
362d |
eecd203ada43
media: imon: make send_packet() more robust
|
|
WARNING in sysfs_emit_at
driver-core
fs
|
-1 |
syz, C |
|
|
2 |
431d |
427d
|
29/29 |
378d |
9dfec4a51df9
USB: core: remove the move buf action
|
|
INFO: task hung in uevent_show (2)
driver-core
|
1 |
syz, C |
inconclusive |
|
8325 |
494d |
732d
|
29/29 |
482d |
dc1771f71854
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
|
|
KASAN: slab-use-after-free Read in software_node_notify_remove
acpi
driver-core
|
19 |
syz, C |
done |
|
28 |
562d |
584d
|
28/29 |
519d |
bc2c46426f2d
software node: Prevent link creation failure from causing kobj reference count imbalance
|
|
KASAN: use-after-free Read in netdev_unregister_kobject
driver-core
pm
|
19 |
syz, C |
error |
|
6281 |
702d |
933d
|
28/29 |
695d |
27aabf27fd01
Bluetooth: fix use-after-free in device_for_each_child()
|
|
INFO: task hung in uevent_show
usb
driver-core
|
1 |
syz, C |
done |
|
9704 |
821d |
882d
|
28/29 |
750d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
INFO: rcu detected stall in rtnl_newlink (4)
driver-core
sctp
fs
|
1 |
syz, C |
error |
|
9 |
910d |
986d
|
25/29 |
903d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
KASAN: slab-use-after-free Read in __fput (2)
fs
driver-core
|
19 |
syz, C |
done |
|
6 |
927d |
932d
|
25/29 |
903d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
general protection fault in usb_hub_create_port_device
driver-core
|
2 |
syz, C |
done |
done |
4 |
1157d |
1163d
|
25/29 |
1056d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
general protection fault in serio_handle_event
driver-core
|
2 |
syz, C |
done |
done |
6 |
1152d |
1160d
|
25/29 |
1056d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
general protection fault in nfc_register_device
driver-core
|
11 |
syz, C |
done |
|
190 |
1058d |
1171d
|
25/29 |
1056d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
general protection fault in wpan_phy_register
driver-core
|
2 |
syz, C |
done |
done |
7 |
1149d |
1156d
|
25/29 |
1056d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
general protection fault in hci_register_dev
driver-core
|
2 |
syz, C |
unreliable |
done |
4 |
1154d |
1161d
|
25/29 |
1056d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
KMSAN: uninit-value in ieee802154_subif_start_xmit
driver-core
bpf
|
8 |
syz, C |
done |
|
119 |
1197d |
1193d
|
23/29 |
1126d |
db2baf82b098
bpf: Fix an incorrect verification success with movsx insn
|
|
WARNING in class_register
usb
driver-core
|
-1 |
syz, C |
done |
|
10 |
1321d |
1320d
|
23/29 |
1189d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
memory leak in class_create
usb
driver-core
|
3 |
syz, C |
|
|
9 |
1272d |
1290d
|
22/29 |
1229d |
ddaf098ea779
driver core: class: properly reference count class_dev_iter()
|
|
general protection fault in xpad_probe
driver-core
|
2 |
syz, C |
done |
|
24 |
1288d |
1310d
|
22/29 |
1252d |
53bea86b5712
Revert "Input: xpad - fix support for some third-party controllers"
|
|
KASAN: slab-use-after-free Read in class_register
usb
driver-core
|
19 |
syz, C |
done |
|
13 |
1322d |
1320d
|
22/29 |
1252d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
KASAN: use-after-free Read in dev_uevent
driver-core
|
19 |
syz |
|
|
54 |
1363d |
2336d
|
22/29 |
1356d |
16b1941eac2b
usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
|
|
general protection fault in i2c_setup_smbus_alert
acpi
driver-core
usb
|
2 |
syz, C |
done |
|
20 |
1723d |
1741d
|
22/29 |
1356d |
8302532f47bb
i2c: smbus: Check for parent device before dereference
|
|
general protection fault in __pm_runtime_resume (2)
driver-core
pm
|
2 |
syz, C |
error |
|
7 |
1695d |
1704d
|
22/29 |
1356d |
32cb08e95869
Bluetooth: hci_uart: add missing NULL check in h5_enqueue
|
|
BUG: corrupted list in hci_conn_add_sysfs
bluetooth
driver-core
|
19 |
syz, C |
error |
done |
9 |
1511d |
1510d
|
22/29 |
1356d |
448a496f7606
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
|
|
KMSAN: uninit-value in r871xu_drv_init
usb
driver-core
|
7 |
syz, C |
|
|
7342 |
1604d |
2715d
|
22/29 |
1356d |
0458e5428e5e
staging: rtl8712: fix uninit-value in r871xu_drv_init()
d1b57669732d
staging: rtl8712: fix uninit-value in usb_read8() and friends
|
|
WARNING in component_del
dri
driver-core
|
-1 |
syz, C |
done |
|
6 |
1737d |
1759d
|
22/29 |
1356d |
c853685d11c0
usb: core: Unregister device on component_add() failure
|
|
KASAN: use-after-free Read in driver_register
usb
driver-core
|
19 |
syz, C |
|
|
131 |
1599d |
1650d
|
22/29 |
1356d |
5f0b5f4d50fa
usb: gadget: fix race when gadget driver register via ioctl
|
|
WARNING in driver_unregister
usb
driver-core
input
|
-1 |
syz, C |
|
|
1 |
1633d |
1629d
|
22/29 |
1356d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
memory leak in __mdiobus_register
driver-core
usb
|
3 |
syz, C |
|
|
1 |
1877d |
1873d
|
20/29 |
1709d |
ab609f25d198
net: mdiobus: Fix memory leak in __mdiobus_register
ca6e11c337da
phy: mdio: fix memory leak
|
|
memory leak in bsg_register_queue
driver-core
usb
|
3 |
syz, C |
|
|
1 |
1892d |
1888d
|
20/29 |
1709d |
1a0db7744e45
scsi: bsg: Fix device unregistration
|
|
KASAN: null-ptr-deref Write in __pm_runtime_resume
driver-core
pm
|
12 |
syz, C |
done |
|
108 |
1723d |
1901d
|
20/29 |
1709d |
2fc7acb69fa3
Bluetooth: hci_uart: fix GPF in h5_recv
|
|
memory leak in kobject_set_name_vargs (4)
driver-core
|
3 |
syz, C |
|
|
171 |
1895d |
2182d
|
20/29 |
1828d |
8fd0c1b0647a
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
|
|
memory leak in snd_ctl_led_register
driver-core
usb
|
3 |
syz, C |
|
|
1 |
2014d |
2004d
|
20/29 |
1828d |
3ae72f6ab9c1
ALSA: control led: fix memory leak in snd_ctl_led_register
|
|
WARNING in input_register_device
usb
input
driver-core
|
-1 |
syz, C |
error |
done |
11 |
2045d |
2196d
|
20/29 |
1828d |
b4104180a2ef
kobject_uevent: remove warning in init_uevent_argv()
|
|
BUG: corrupted list in kobject_add_internal (3)
bluetooth
driver-core
|
8 |
syz, C |
inconclusive |
|
3 |
1863d |
1968d
|
20/29 |
1828d |
92fe24a7db75
Bluetooth: skip invalid hci_sync_conn_complete_evt
|
|
KASAN: use-after-free Read in firmware_fallback_sysfs
driver-core
|
19 |
syz, C |
error |
|
16514 |
1910d |
2109d
|
20/29 |
1828d |
75d95e2e39b2
firmware_loader: fix use-after-free in firmware_fallback_sysfs
|
|
WARNING in internal_create_group
driver-core
fs
|
-1 |
syz, C |
inconclusive |
|
20 |
1892d |
1946d
|
20/29 |
1828d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
BUG: corrupted list in kobject_add_internal
bluetooth
driver-core
|
8 |
syz, C |
done |
done |
9 |
2224d |
2287d
|
15/29 |
2186d |
a46b7ed4d52d
Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
|
|
INFO: rcu detected stall in cleanup_net (4)
driver-core
|
1 |
syz, C |
done |
|
5 |
2258d |
2254d
|
15/29 |
2224d |
b5b73b26b3ca
taprio: Fix allowing too small intervals
|
|
general protection fault in start_creating
fs
driver-core
|
2 |
syz, C |
done |
|
106 |
2330d |
2359d
|
15/29 |
2308d |
d56f5136b010
KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
|
|
KMSAN: uninit-value in simple_attr_read
driver-core
fs
|
7 |
syz, C |
|
|
6 |
2379d |
2449d
|
15/29 |
2376d |
a65cab7d7f05
libfs: fix infoleak in simple_attr_read()
|
|
WARNING: kobject bug in ib_register_device
driver-core
|
-1 |
syz, C |
done |
|
14 |
2414d |
2452d
|
15/29 |
2376d |
7aefa6237cfe
RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET
|
|
BUG: corrupted list in __dentry_kill (2)
driver-core
fs
|
8 |
syz, C |
done |
|
4945 |
2526d |
2526d
|
15/29 |
2458d |
a3d1e7eb5abe
simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
|
|
WARNING in kfree
driver-core
fs
|
-1 |
syz, C |
done |
|
2 |
2631d |
2630d
|
13/29 |
2584d |
43ce4c1feadb
vfs: Add a single-or-reconfig keying to vfs_get_super()
|
|
KASAN: use-after-free Read in device_release_driver_internal
usb
driver-core
|
19 |
syz, C |
|
|
5 |
2644d |
2668d
|
12/29 |
2623d |
c52873e5a1ef
usb: cdc-acm: make sure a refcount is taken early enough
|
|
general protection fault in rcu_core
driver-core
|
2 |
syz |
done |
|
1 |
2682d |
2681d
|
12/29 |
2633d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
memory leak in kobject_set_name_vargs
driver-core
|
3 |
syz, C |
|
|
12 |
2689d |
2723d
|
12/29 |
2681d |
4f488fbca2a8
cfg80211: fix memory leak of wiphy device name
|
|
general protection fault in sisusb_probe
driver-core
usb
|
2 |
syz, C |
|
|
3 |
2740d |
2743d
|
12/29 |
2701d |
9a5729f68d3a
USB: sisusbvga: fix oops in error path of sisusb_probe
|
|
general protection fault in __dev_printk
usb
driver-core
|
2 |
syz, C |
|
|
300 |
2752d |
2765d
|
12/29 |
2725d |
ef61eb43ada6
USB: yurex: Fix protection fault after device removal
|
|
KASAN: stack-out-of-bounds Read in string
usb
driver-core
|
17 |
syz, C |
|
|
46 |
2759d |
2770d
|
12/29 |
2737d |
c01c348ecdc6
USB: core: Fix unterminated string returned by usb_string()
|
|
KASAN: use-after-free Read in kobject_put
driver-core
|
19 |
syz, C |
|
|
12 |
2814d |
2945d
|
11/29 |
2785d |
e20a2e9c42c9
Bluetooth: Fix decrementing reference count twice in releasing socket
|
|
WARNING in sysfs_remove_group
driver-core
fs
|
-1 |
syz, C |
|
|
11125 |
3048d |
3302d
|
8/29 |
3047d |
d3349b6b3c37
loop: remember whether sysfs_create_group() was done
|
|
WARNING in dev_vprintk_emit
driver-core
|
-1 |
syz, C |
|
|
77 |
3093d |
3220d
|
5/29 |
3079d |
814596495dd2
cfg80211: further limit wiphy names to 64 bytes
|
|
WARNING: kobject bug in device_add
driver-core
|
-1 |
syz, C |
|
|
563 |
3109d |
3149d
|
5/29 |
3109d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|