Applied filters: WithRepro (drop) Label=subsystems:fbdev (drop)

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
KASAN: global-out-of-bounds Read in bit_putcs (3) fbdev	17	syz, C			58	290d	742d	29/29	217d	18c4ef4e765a fbdev: bitblit: bound-check glyph index in bit_putcs*
KASAN: vmalloc-out-of-bounds Write in imageblit (5) fbdev	21	syz, C			1075	287d	337d	29/29	286d	3637d34b35b2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
KASAN: vmalloc-out-of-bounds Write in imageblit (4) fbdev	21	syz, C			3869	341d	721d	29/29	341d	af0db3c1f898 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3) fbdev btrfs	10	syz, C			4	688d	701d	28/29	659d	5b97eebcce1b fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb	-1	syz, C			2	1186d	1182d	22/29	1137d	ed9de4ed3987 fbdev: udlfb: Fix endpoint check
general protection fault in soft_cursor fbdev	11	syz, C			3	1173d	1173d	22/29	1137d	d78bd6cc6827 fbcon: Fix null-ptr-deref in soft_cursor
UBSAN: shift-out-of-bounds in fbcon_set_font fbdev	-1	syz, C	error		3	1290d	1291d	22/29	1161d	2b09d5d36498 fbcon: Check font dimension limits
KASAN: vmalloc-out-of-bounds Write in imageblit (2) fbdev	21	syz, C	done		701	1439d	1727d	22/29	1265d	566f9c9f8933 vt: Clear selection before changing the font
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev	-1	syz, C	done		481	1337d	2599d	22/29	1265d	aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
memory leak in fbcon_set_font (2) fbdev	3	syz, C			1	1346d	1346d	22/29	1265d	3c3bfb8586f8 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
BUG: unable to handle kernel paging request in bitfill_aligned (3) fbdev	8	syz, C	unreliable		11	1450d	1493d	22/29	1265d	a5a923038d70 fbdev: fbcon: Properly revert changes when vc_resize() failed
BUG: unable to handle kernel paging request in bitfill_aligned (2) fbdev	21	syz, C	inconclusive	done	26	1686d	2093d	20/29	1552d	0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
BUG: unable to handle kernel paging request in vga16fb_fillrect fbdev	8	syz, C	inconclusive		14	1739d	1855d	20/29	1736d	8c28051cdcbe fbmem: don't allow too huge resolutions
KMSAN: kernel-infoleak in fb_cmap_to_user fbdev	9	syz, C			439	1853d	2004d	20/29	1736d	19ab233989d0 fbdev: zero-fill colormap in fbcmap.c
BUG: unable to handle kernel paging request in vga16fb_imageblit (2) fbdev	8	syz, C	done		27	1918d	2287d	20/29	1736d	ffb324e6f874 tty: vt: always invoke vc->vc_sw->con_resize callback
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor fbdev	10	syz, C	done		21	1962d	2095d	20/29	1736d	01faae5193d6 drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
KASAN: vmalloc-out-of-bounds Write in imageblit fbdev	21	syz, C			104	1751d	2044d	20/29	1736d	3b0c40612471 tty: Fix out-of-bound vmalloc access in imageblit
memory leak in dlfb_usb_probe usb fbdev	3	syz, C			3	2064d	2067d	20/29	1950d	5c0e4110f751 udlfb: Fix memory leak in dlfb_usb_probe
BUG: unable to handle kernel paging request in cfb_imageblit fbdev	8	syz, C	done	done	30	2093d	2136d	15/29	2058d	a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: slab-out-of-bounds Read in soft_cursor fbdev	17	syz, C	done		218	2134d	2442d	15/29	2095d	988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
KASAN: use-after-free Read in bit_putcs fbdev	19	syz, C			12	2142d	2361d	15/29	2095d	988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
KASAN: global-out-of-bounds Read in fbcon_get_font fbdev	17	syz, C	inconclusive	inconclusive	41	2140d	2437d	15/29	2095d	5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: global-out-of-bounds Read in fbcon_resize fbdev	17	syz, C	error		673	2151d	2183d	15/29	2132d	ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
KASAN: global-out-of-bounds Read in bit_putcs fbdev	17	syz, C	done		262	2148d	2441d	15/29	2147d	39b3cffb8cf3 fbcon: prevent user font height or width change from causing potential out-of-bounds access bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
KASAN: use-after-free Read in fbcon_cursor fbdev	19	syz	done	error	10	2187d	2431d	15/29	2147d	f8d1653daec0 vt: defer kfree() of vc_screenbuf in vc_do_resize()
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned fbdev	21	syz, C			475	2208d	2442d	15/29	2150d	033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.