|
general protection fault in bnep_session
prio:high
driver-core
|
7 |
syz |
error |
|
1395 |
41d |
702d
|
27/29 |
never |
9b851b09b392
Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
|
|
KASAN: slab-use-after-free Read in __dynamic_dev_dbg
prio:normal
driver-core
media
|
19 |
syz, C |
|
|
537 |
1d06h |
40d
|
20/29 |
never |
118a3590a408
media: imon: fix use-after-free in display_close via dev_dbg
|
|
KASAN: slab-use-after-free Read in sysfs_emit
prio:high
driver-core
fs
|
19 |
syz, C |
|
|
22 |
5d06h |
81d
|
20/29 |
never |
af452b9e0133
media: redrat3: fix UAF in probe error path leaving rc device registered
|
|
general protection fault in seq_read_iter (2)
prio:low
fs
driver-core
|
19 |
|
|
|
4 |
68d |
172d
|
27/29 |
never |
net: add missing ref_tracker_dir_exit() to net_passive_dec()
|
|
INFO: task hung in remove_one
prio:low
fs
driver-core
|
1 |
syz |
error |
|
334 |
1d05h |
658d
|
27/29 |
never |
b3217bdb0091
netdevsim: drop the ability to change max_vfs via debugfs
|
|
KASAN: slab-use-after-free Read in rpm_suspend
driver-core
pm
|
19 |
|
|
|
3 |
314d |
411d
|
29/29 |
158d |
29ab76827761
PM: runtime: Fix a race condition related to device removal
|
|
KASAN: slab-use-after-free Read in driver_remove_file
driver-core
fs
|
19 |
syz, C |
error |
done |
296 |
325d |
454d
|
29/29 |
279d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
INFO: rcu detected stall in dummy_timer (4)
usb
driver-core
|
1 |
syz, C |
inconclusive |
done |
25 |
409d |
1571d
|
29/29 |
346d |
eecd203ada43
media: imon: make send_packet() more robust
|
|
possible deadlock in path_openat (3)
fs
driver-core
|
4 |
|
|
|
1 |
421d |
421d
|
29/29 |
362d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
KASAN: slab-use-after-free Read in software_node_notify_remove
acpi
driver-core
|
19 |
syz, C |
done |
|
28 |
546d |
568d
|
28/29 |
503d |
bc2c46426f2d
software node: Prevent link creation failure from causing kobj reference count imbalance
|
|
INFO: task hung in uevent_show
usb
driver-core
|
1 |
syz, C |
done |
|
9704 |
805d |
866d
|
28/29 |
734d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
WARNING: refcount bug in get_taint
driver-core
net
|
13 |
|
|
|
2 |
791d |
817d
|
27/29 |
791d |
2fe5273f149c
net/smc: prevent UAF in inet_create()
|
|
INFO: rcu detected stall in rtnl_newlink (4)
driver-core
sctp
fs
|
1 |
syz, C |
error |
|
9 |
894d |
970d
|
25/29 |
887d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
KASAN: slab-use-after-free Read in __fput (2)
fs
driver-core
|
19 |
syz, C |
done |
|
6 |
911d |
916d
|
25/29 |
887d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
memory leak in class_create
usb
driver-core
|
3 |
syz, C |
|
|
9 |
1256d |
1274d
|
22/29 |
1213d |
ddaf098ea779
driver core: class: properly reference count class_dev_iter()
|
|
KASAN: slab-use-after-free Read in class_register
usb
driver-core
|
19 |
syz, C |
done |
|
13 |
1306d |
1304d
|
22/29 |
1236d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
KMSAN: uninit-value in r871xu_drv_init
usb
driver-core
|
7 |
syz, C |
|
|
7342 |
1588d |
2699d
|
22/29 |
1340d |
0458e5428e5e
staging: rtl8712: fix uninit-value in r871xu_drv_init()
d1b57669732d
staging: rtl8712: fix uninit-value in usb_read8() and friends
|
|
WARNING in component_del
dri
driver-core
|
-1 |
syz, C |
done |
|
6 |
1721d |
1743d
|
22/29 |
1340d |
c853685d11c0
usb: core: Unregister device on component_add() failure
|
|
KASAN: use-after-free Read in driver_register
usb
driver-core
|
19 |
syz, C |
|
|
131 |
1583d |
1634d
|
22/29 |
1340d |
5f0b5f4d50fa
usb: gadget: fix race when gadget driver register via ioctl
|
|
WARNING in driver_unregister
usb
driver-core
input
|
-1 |
syz, C |
|
|
1 |
1617d |
1613d
|
22/29 |
1340d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
kernel panic: corrupted stack end in loop_control_ioctl
driver-core
fs
|
2 |
|
|
|
2 |
1462d |
1547d
|
22/29 |
1340d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
upstream boot error: BUG: unable to handle kernel paging request in __init_work
driver-core
pm
|
-1 |
|
|
|
1 |
1534d |
1534d
|
22/29 |
1340d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: null-ptr-deref Write in __pm_runtime_resume
driver-core
pm
|
12 |
syz, C |
done |
|
108 |
1707d |
1885d
|
20/29 |
1693d |
2fc7acb69fa3
Bluetooth: hci_uart: fix GPF in h5_recv
|
|
BUG: corrupted list in kobject_add_internal (3)
bluetooth
driver-core
|
8 |
syz, C |
inconclusive |
|
3 |
1847d |
1952d
|
20/29 |
1812d |
92fe24a7db75
Bluetooth: skip invalid hci_sync_conn_complete_evt
|
|
KASAN: use-after-free Read in firmware_fallback_sysfs
driver-core
|
19 |
syz, C |
error |
|
16514 |
1894d |
2094d
|
20/29 |
1812d |
75d95e2e39b2
firmware_loader: fix use-after-free in firmware_fallback_sysfs
|
|
WARNING in internal_create_group
driver-core
fs
|
-1 |
syz, C |
inconclusive |
|
20 |
1876d |
1930d
|
20/29 |
1812d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
KASAN: use-after-free Read in lockref_get
driver-core
fs
|
19 |
|
|
|
7 |
2335d |
2434d
|
15/29 |
2231d |
bad8e64fb19d
blktrace: fix debugfs use after free
|
|
INFO: task hung in __do_sys_reboot
driver-core
|
1 |
|
|
|
1554 |
2247d |
2303d
|
15/29 |
2231d |
b292b50b0efc
driver core: Fix probe_count imbalance in really_probe()
|
|
general protection fault in start_creating
fs
driver-core
|
2 |
syz, C |
done |
|
106 |
2314d |
2343d
|
15/29 |
2292d |
d56f5136b010
KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
|
|
KASAN: use-after-free Read in device_release_driver_internal
usb
driver-core
|
19 |
syz, C |
|
|
5 |
2628d |
2652d
|
12/29 |
2607d |
c52873e5a1ef
usb: cdc-acm: make sure a refcount is taken early enough
|
|
memory leak in kobject_set_name_vargs
driver-core
|
3 |
syz, C |
|
|
12 |
2673d |
2707d
|
12/29 |
2665d |
4f488fbca2a8
cfg80211: fix memory leak of wiphy device name
|
|
KASAN: use-after-free Read in kobject_put
driver-core
|
19 |
syz, C |
|
|
12 |
2798d |
2929d
|
11/29 |
2769d |
e20a2e9c42c9
Bluetooth: Fix decrementing reference count twice in releasing socket
|
|
WARNING in sysfs_remove_group
driver-core
fs
|
-1 |
syz, C |
|
|
11125 |
3032d |
3286d
|
8/29 |
3031d |
d3349b6b3c37
loop: remember whether sysfs_create_group() was done
|