|
KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
prio:high
fbdev
|
19 |
syz, C |
|
|
1756 |
19h00m |
548d
|
2/29 |
never |
fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo
|
|
KASAN: global-out-of-bounds Read in soft_cursor (3)
fbdev
|
19 |
|
|
|
41 |
14h45m |
20d
|
27/29 |
never |
e033cbf3975a
fbdev: bitblit: bound-check glyph index in bit_cursor()
|
|
KASAN: slab-use-after-free Read in fb_mode_is_equal
actionable
prio:high
fbdev
|
19 |
|
|
|
3 |
83d |
78d
|
29/29 |
43d |
2c1c805c65fb
fbdev: fix use-after-free in store_modes()
|
|
KASAN: global-out-of-bounds Read in bit_putcs (3)
fbdev
|
17 |
syz, C |
|
|
58 |
305d |
757d
|
29/29 |
232d |
18c4ef4e765a
fbdev: bitblit: bound-check glyph index in bit_putcs*
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (5)
fbdev
|
21 |
syz, C |
|
|
1075 |
302d |
352d
|
29/29 |
301d |
3637d34b35b2
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (4)
fbdev
|
21 |
syz, C |
|
|
3869 |
356d |
736d
|
29/29 |
356d |
af0db3c1f898
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
|
|
UBSAN: array-index-out-of-bounds in fbcon_info_from_console
fbdev
|
15 |
|
|
|
3 |
569d |
572d
|
29/29 |
415d |
cedc1b63394a
fbcon: Make sure modelist not set on unregistered console
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3)
fbdev
btrfs
|
10 |
syz, C |
|
|
4 |
703d |
716d
|
28/29 |
674d |
5b97eebcce1b
fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
|
|
WARNING in dlfb_submit_urb/usb_submit_urb (2)
fbdev
usb
|
-1 |
syz, C |
|
|
2 |
1201d |
1197d
|
22/29 |
1152d |
ed9de4ed3987
fbdev: udlfb: Fix endpoint check
|
|
general protection fault in soft_cursor
fbdev
|
11 |
syz, C |
|
|
3 |
1188d |
1188d
|
22/29 |
1152d |
d78bd6cc6827
fbcon: Fix null-ptr-deref in soft_cursor
|
|
UBSAN: shift-out-of-bounds in fbcon_set_font
fbdev
|
-1 |
syz, C |
error |
|
3 |
1305d |
1306d
|
22/29 |
1176d |
2b09d5d36498
fbcon: Check font dimension limits
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (2)
fbdev
|
21 |
syz, C |
done |
|
701 |
1454d |
1742d
|
22/29 |
1280d |
566f9c9f8933
vt: Clear selection before changing the font
|
|
WARNING in dlfb_submit_urb/usb_submit_urb
usb
fbdev
|
-1 |
syz, C |
done |
|
481 |
1352d |
2614d
|
22/29 |
1280d |
aaf7dbe07385
video: fbdev: udlfb: properly check endpoint type
|
|
memory leak in fbcon_set_font (2)
fbdev
|
3 |
syz, C |
|
|
1 |
1361d |
1361d
|
22/29 |
1280d |
3c3bfb8586f8
fbdev: fbcon: release buffer when fbcon_do_set_font() failed
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (3)
fbdev
|
8 |
syz, C |
unreliable |
|
11 |
1465d |
1508d
|
22/29 |
1280d |
a5a923038d70
fbdev: fbcon: Properly revert changes when vc_resize() failed
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (2)
fbdev
|
21 |
syz, C |
inconclusive |
done |
26 |
1701d |
2108d
|
20/29 |
1567d |
0499f419b76f
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
|
|
BUG: unable to handle kernel paging request in vga16fb_fillrect
fbdev
|
8 |
syz, C |
inconclusive |
|
14 |
1754d |
1870d
|
20/29 |
1751d |
8c28051cdcbe
fbmem: don't allow too huge resolutions
|
|
KMSAN: kernel-infoleak in fb_cmap_to_user
fbdev
|
9 |
syz, C |
|
|
439 |
1868d |
2019d
|
20/29 |
1751d |
19ab233989d0
fbdev: zero-fill colormap in fbcmap.c
|
|
BUG: unable to handle kernel paging request in vga16fb_imageblit (2)
fbdev
|
8 |
syz, C |
done |
|
27 |
1933d |
2302d
|
20/29 |
1751d |
ffb324e6f874
tty: vt: always invoke vc->vc_sw->con_resize callback
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor
fbdev
|
10 |
syz, C |
done |
|
21 |
1977d |
2110d
|
20/29 |
1751d |
01faae5193d6
drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit
fbdev
|
21 |
syz, C |
|
|
104 |
1766d |
2059d
|
20/29 |
1751d |
3b0c40612471
tty: Fix out-of-bound vmalloc access in imageblit
|
|
memory leak in dlfb_usb_probe
usb
fbdev
|
3 |
syz, C |
|
|
3 |
2079d |
2082d
|
20/29 |
1965d |
5c0e4110f751
udlfb: Fix memory leak in dlfb_usb_probe
|
|
BUG: unable to handle kernel paging request in cfb_imageblit
fbdev
|
8 |
syz, C |
done |
done |
30 |
2108d |
2151d
|
15/29 |
2073d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
KASAN: slab-out-of-bounds Read in soft_cursor
fbdev
|
17 |
syz, C |
done |
|
218 |
2149d |
2457d
|
15/29 |
2110d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
KASAN: use-after-free Read in bit_putcs
fbdev
|
19 |
syz, C |
|
|
12 |
2157d |
2376d
|
15/29 |
2110d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
KASAN: global-out-of-bounds Read in fbcon_get_font
fbdev
|
17 |
syz, C |
inconclusive |
inconclusive |
41 |
2155d |
2452d
|
15/29 |
2110d |
5af08640795b
fbcon: Fix global-out-of-bounds read in fbcon_get_font()
|
|
KASAN: global-out-of-bounds Read in fbcon_resize
fbdev
|
17 |
syz, C |
error |
|
673 |
2166d |
2198d
|
15/29 |
2147d |
ec0972adecb3
fbcon: Fix user font detection test at fbcon_resize().
|
|
KASAN: slab-out-of-bounds Read in fbcon_scrolldelta
fbdev
|
17 |
|
|
|
1 |
2173d |
2173d
|
15/29 |
2147d |
50145474f6ef
fbcon: remove soft scrollback code
|
|
KASAN: global-out-of-bounds Read in bit_putcs
fbdev
|
17 |
syz, C |
done |
|
262 |
2163d |
2456d
|
15/29 |
2162d |
39b3cffb8cf3
fbcon: prevent user font height or width change from causing potential out-of-bounds access
bc5269ca7650
vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
|
|
KASAN: use-after-free Read in fbcon_cursor
fbdev
|
19 |
syz |
done |
error |
10 |
2202d |
2446d
|
15/29 |
2162d |
f8d1653daec0
vt: defer kfree() of vc_screenbuf in vc_do_resize()
|
|
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned
fbdev
|
21 |
syz, C |
|
|
475 |
2223d |
2457d
|
15/29 |
2165d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
general protection fault in fbcon_switch
fbdev
|
2 |
|
|
|
1 |
2344d |
2344d
|
15/29 |
2300d |
b139f8b00db4
fbcon: fix null-ptr-deref in fbcon_switch
|