Applied filters: WithRepro (drop) Label=subsystems:fbdev (drop)

Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Closed	Patch
KASAN: global-out-of-bounds Read in bit_putcs (3) fbdev	17	syz, C			58	280d	732d	29/29	207d	18c4ef4e765a fbdev: bitblit: bound-check glyph index in bit_putcs*
KASAN: vmalloc-out-of-bounds Write in imageblit (5) fbdev	21	syz, C			1075	277d	328d	29/29	277d	3637d34b35b2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
KASAN: vmalloc-out-of-bounds Write in imageblit (4) fbdev	21	syz, C			3869	332d	711d	29/29	332d	af0db3c1f898 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3) fbdev btrfs	10	syz, C			4	678d	691d	28/29	649d	5b97eebcce1b fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb	-1	syz, C			2	1176d	1172d	22/29	1128d	ed9de4ed3987 fbdev: udlfb: Fix endpoint check
general protection fault in soft_cursor fbdev	11	syz, C			3	1163d	1163d	22/29	1128d	d78bd6cc6827 fbcon: Fix null-ptr-deref in soft_cursor
UBSAN: shift-out-of-bounds in fbcon_set_font fbdev	-1	syz, C	error		3	1281d	1281d	22/29	1151d	2b09d5d36498 fbcon: Check font dimension limits
KASAN: vmalloc-out-of-bounds Write in imageblit (2) fbdev	21	syz, C	done		701	1429d	1717d	22/29	1255d	566f9c9f8933 vt: Clear selection before changing the font
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev	-1	syz, C	done		481	1328d	2589d	22/29	1255d	aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
memory leak in fbcon_set_font (2) fbdev	3	syz, C			1	1337d	1336d	22/29	1255d	3c3bfb8586f8 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
BUG: unable to handle kernel paging request in bitfill_aligned (3) fbdev	8	syz, C	unreliable		11	1441d	1483d	22/29	1255d	a5a923038d70 fbdev: fbcon: Properly revert changes when vc_resize() failed
BUG: unable to handle kernel paging request in bitfill_aligned (2) fbdev	21	syz, C	inconclusive	done	26	1676d	2084d	20/29	1542d	0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
BUG: unable to handle kernel paging request in vga16fb_fillrect fbdev	8	syz, C	inconclusive		14	1729d	1845d	20/29	1727d	8c28051cdcbe fbmem: don't allow too huge resolutions
KMSAN: kernel-infoleak in fb_cmap_to_user fbdev	9	syz, C			439	1843d	1994d	20/29	1727d	19ab233989d0 fbdev: zero-fill colormap in fbcmap.c
BUG: unable to handle kernel paging request in vga16fb_imageblit (2) fbdev	8	syz, C	done		27	1909d	2277d	20/29	1727d	ffb324e6f874 tty: vt: always invoke vc->vc_sw->con_resize callback
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor fbdev	10	syz, C	done		21	1953d	2085d	20/29	1727d	01faae5193d6 drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
KASAN: vmalloc-out-of-bounds Write in imageblit fbdev	21	syz, C			104	1741d	2034d	20/29	1727d	3b0c40612471 tty: Fix out-of-bound vmalloc access in imageblit
memory leak in dlfb_usb_probe usb fbdev	3	syz, C			3	2055d	2057d	20/29	1941d	5c0e4110f751 udlfb: Fix memory leak in dlfb_usb_probe
BUG: unable to handle kernel paging request in cfb_imageblit fbdev	8	syz, C	done	done	30	2083d	2126d	15/29	2048d	a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: slab-out-of-bounds Read in soft_cursor fbdev	17	syz, C	done		218	2124d	2433d	15/29	2085d	988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
KASAN: use-after-free Read in bit_putcs fbdev	19	syz, C			12	2132d	2352d	15/29	2085d	988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
KASAN: global-out-of-bounds Read in fbcon_get_font fbdev	17	syz, C	inconclusive	inconclusive	41	2130d	2427d	15/29	2085d	5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: global-out-of-bounds Read in fbcon_resize fbdev	17	syz, C	error		673	2141d	2173d	15/29	2122d	ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
KASAN: global-out-of-bounds Read in bit_putcs fbdev	17	syz, C	done		262	2138d	2432d	15/29	2138d	39b3cffb8cf3 fbcon: prevent user font height or width change from causing potential out-of-bounds access bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
KASAN: use-after-free Read in fbcon_cursor fbdev	19	syz	done	error	10	2177d	2422d	15/29	2138d	f8d1653daec0 vt: defer kfree() of vc_screenbuf in vc_do_resize()
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned fbdev	21	syz, C			475	2198d	2432d	15/29	2141d	033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.