Applied filters: Label=subsystems:fbdev (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
KASAN: slab-out-of-bounds Read in fbcon_prepare_logo prio:high fbdev 19 syz, C 1873 7d15h 570d 15/29 never 94e6a058b168 fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo
KASAN: global-out-of-bounds Read in soft_cursor (3) fbdev 19 90 5h05m 42d 28/29 never e033cbf3975a fbdev: bitblit: bound-check glyph index in bit_cursor()
KASAN: slab-use-after-free Read in fb_mode_is_equal actionable prio:high fbdev 19 3 105d 100d 29/29 65d 2c1c805c65fb fbdev: fix use-after-free in store_modes()
KASAN: global-out-of-bounds Read in bit_putcs (3) fbdev 17 syz, C 58 327d 779d 29/29 254d 18c4ef4e765a fbdev: bitblit: bound-check glyph index in bit_putcs*
KASAN: vmalloc-out-of-bounds Write in imageblit (5) fbdev 21 syz, C 1075 323d 374d 29/29 323d 3637d34b35b2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
KASAN: vmalloc-out-of-bounds Write in imageblit (4) fbdev 21 syz, C 3869 378d 758d 29/29 378d af0db3c1f898 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
UBSAN: array-index-out-of-bounds in fbcon_info_from_console fbdev 15 3 591d 594d 29/29 437d cedc1b63394a fbcon: Make sure modelist not set on unregistered console
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3) fbdev btrfs 10 syz, C 4 725d 738d 28/29 696d 5b97eebcce1b fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
WARNING in dlfb_submit_urb/usb_submit_urb (2) fbdev usb -1 syz, C 2 1223d 1219d 22/29 1174d ed9de4ed3987 fbdev: udlfb: Fix endpoint check
general protection fault in soft_cursor fbdev 11 syz, C 3 1210d 1210d 22/29 1174d d78bd6cc6827 fbcon: Fix null-ptr-deref in soft_cursor
UBSAN: shift-out-of-bounds in fbcon_set_font fbdev -1 syz, C error 3 1327d 1328d 22/29 1198d 2b09d5d36498 fbcon: Check font dimension limits
KASAN: vmalloc-out-of-bounds Write in imageblit (2) fbdev 21 syz, C done 701 1476d 1764d 22/29 1302d 566f9c9f8933 vt: Clear selection before changing the font
WARNING in dlfb_submit_urb/usb_submit_urb usb fbdev -1 syz, C done 481 1374d 2636d 22/29 1302d aaf7dbe07385 video: fbdev: udlfb: properly check endpoint type
memory leak in fbcon_set_font (2) fbdev 3 syz, C 1 1383d 1383d 22/29 1302d 3c3bfb8586f8 fbdev: fbcon: release buffer when fbcon_do_set_font() failed
BUG: unable to handle kernel paging request in bitfill_aligned (3) fbdev 8 syz, C unreliable 11 1487d 1530d 22/29 1302d a5a923038d70 fbdev: fbcon: Properly revert changes when vc_resize() failed
BUG: unable to handle kernel paging request in bitfill_aligned (2) fbdev 21 syz, C inconclusive done 26 1723d 2130d 20/29 1589d 0499f419b76f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
BUG: unable to handle kernel paging request in vga16fb_fillrect fbdev 8 syz, C inconclusive 14 1776d 1892d 20/29 1773d 8c28051cdcbe fbmem: don't allow too huge resolutions
KMSAN: kernel-infoleak in fb_cmap_to_user fbdev 9 syz, C 439 1890d 2041d 20/29 1773d 19ab233989d0 fbdev: zero-fill colormap in fbcmap.c
BUG: unable to handle kernel paging request in vga16fb_imageblit (2) fbdev 8 syz, C done 27 1955d 2324d 20/29 1773d ffb324e6f874 tty: vt: always invoke vc->vc_sw->con_resize callback
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor fbdev 10 syz, C done 21 1999d 2132d 20/29 1773d 01faae5193d6 drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
KASAN: vmalloc-out-of-bounds Write in imageblit fbdev 21 syz, C 104 1788d 2081d 20/29 1773d 3b0c40612471 tty: Fix out-of-bound vmalloc access in imageblit
memory leak in dlfb_usb_probe usb fbdev 3 syz, C 3 2101d 2104d 20/29 1987d 5c0e4110f751 udlfb: Fix memory leak in dlfb_usb_probe
BUG: unable to handle kernel paging request in cfb_imageblit fbdev 8 syz, C done done 30 2130d 2173d 15/29 2095d a49145acfb97 fbmem: add margin check to fb_check_caps()
KASAN: slab-out-of-bounds Read in soft_cursor fbdev 17 syz, C done 218 2171d 2479d 15/29 2132d 988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
KASAN: use-after-free Read in bit_putcs fbdev 19 syz, C 12 2179d 2398d 15/29 2132d 988d0763361b vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
KASAN: global-out-of-bounds Read in fbcon_get_font fbdev 17 syz, C inconclusive inconclusive 41 2177d 2474d 15/29 2132d 5af08640795b fbcon: Fix global-out-of-bounds read in fbcon_get_font()
KASAN: global-out-of-bounds Read in fbcon_resize fbdev 17 syz, C error 673 2188d 2220d 15/29 2169d ec0972adecb3 fbcon: Fix user font detection test at fbcon_resize().
KASAN: slab-out-of-bounds Read in fbcon_scrolldelta fbdev 17 1 2195d 2195d 15/29 2169d 50145474f6ef fbcon: remove soft scrollback code
KASAN: global-out-of-bounds Read in bit_putcs fbdev 17 syz, C done 262 2185d 2478d 15/29 2184d 39b3cffb8cf3 fbcon: prevent user font height or width change from causing potential out-of-bounds access bc5269ca7650 vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
KASAN: use-after-free Read in fbcon_cursor fbdev 19 syz done error 10 2224d 2468d 15/29 2184d f8d1653daec0 vt: defer kfree() of vc_screenbuf in vc_do_resize()
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned fbdev 21 syz, C 475 2245d 2479d 15/29 2187d 033724d68642 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
general protection fault in fbcon_switch fbdev 2 1 2366d 2366d 15/29 2322d b139f8b00db4 fbcon: fix null-ptr-deref in fbcon_switch