|
KASAN: slab-use-after-free Read in fb_mode_is_equal
actionable
prio:high
fbdev
|
19 |
|
|
|
3 |
43d |
38d
|
29/29 |
3d00h |
2c1c805c65fb
fbdev: fix use-after-free in store_modes()
|
|
KASAN: global-out-of-bounds Read in bit_putcs (3)
fbdev
|
17 |
C |
|
|
58 |
264d |
716d
|
29/29 |
191d |
18c4ef4e765a
fbdev: bitblit: bound-check glyph index in bit_putcs*
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (5)
fbdev
|
21 |
C |
|
|
1075 |
261d |
312d
|
29/29 |
261d |
3637d34b35b2
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (4)
fbdev
|
21 |
C |
|
|
3869 |
316d |
695d
|
29/29 |
316d |
af0db3c1f898
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
|
|
UBSAN: array-index-out-of-bounds in fbcon_info_from_console
fbdev
|
15 |
|
|
|
3 |
528d |
532d
|
29/29 |
375d |
cedc1b63394a
fbcon: Make sure modelist not set on unregistered console
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3)
fbdev
btrfs
|
10 |
C |
|
|
4 |
663d |
676d
|
28/29 |
633d |
5b97eebcce1b
fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
|
|
WARNING in dlfb_submit_urb/usb_submit_urb (2)
fbdev
usb
|
-1 |
C |
|
|
2 |
1161d |
1157d
|
22/29 |
1112d |
ed9de4ed3987
fbdev: udlfb: Fix endpoint check
|
|
general protection fault in soft_cursor
fbdev
|
11 |
C |
|
|
3 |
1148d |
1148d
|
22/29 |
1112d |
d78bd6cc6827
fbcon: Fix null-ptr-deref in soft_cursor
|
|
UBSAN: shift-out-of-bounds in fbcon_set_font
fbdev
|
-1 |
C |
error |
|
3 |
1265d |
1266d
|
22/29 |
1135d |
2b09d5d36498
fbcon: Check font dimension limits
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (2)
fbdev
|
21 |
C |
done |
|
701 |
1414d |
1701d
|
22/29 |
1239d |
566f9c9f8933
vt: Clear selection before changing the font
|
|
WARNING in dlfb_submit_urb/usb_submit_urb
usb
fbdev
|
-1 |
C |
done |
|
481 |
1312d |
2573d
|
22/29 |
1239d |
aaf7dbe07385
video: fbdev: udlfb: properly check endpoint type
|
|
memory leak in fbcon_set_font (2)
fbdev
|
3 |
C |
|
|
1 |
1321d |
1321d
|
22/29 |
1239d |
3c3bfb8586f8
fbdev: fbcon: release buffer when fbcon_do_set_font() failed
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (3)
fbdev
|
8 |
C |
unreliable |
|
11 |
1425d |
1468d
|
22/29 |
1239d |
a5a923038d70
fbdev: fbcon: Properly revert changes when vc_resize() failed
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (2)
fbdev
|
21 |
C |
inconclusive |
done |
26 |
1660d |
2068d
|
20/29 |
1526d |
0499f419b76f
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
|
|
BUG: unable to handle kernel paging request in vga16fb_fillrect
fbdev
|
8 |
C |
inconclusive |
|
14 |
1713d |
1830d
|
20/29 |
1711d |
8c28051cdcbe
fbmem: don't allow too huge resolutions
|
|
KMSAN: kernel-infoleak in fb_cmap_to_user
fbdev
|
9 |
C |
|
|
439 |
1828d |
1978d
|
20/29 |
1711d |
19ab233989d0
fbdev: zero-fill colormap in fbcmap.c
|
|
BUG: unable to handle kernel paging request in vga16fb_imageblit (2)
fbdev
|
8 |
C |
done |
|
27 |
1893d |
2262d
|
20/29 |
1711d |
ffb324e6f874
tty: vt: always invoke vc->vc_sw->con_resize callback
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor
fbdev
|
10 |
C |
done |
|
21 |
1937d |
2070d
|
20/29 |
1711d |
01faae5193d6
drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit
fbdev
|
21 |
C |
|
|
104 |
1725d |
2018d
|
20/29 |
1711d |
3b0c40612471
tty: Fix out-of-bound vmalloc access in imageblit
|
|
memory leak in dlfb_usb_probe
usb
fbdev
|
3 |
C |
|
|
3 |
2039d |
2041d
|
20/29 |
1925d |
5c0e4110f751
udlfb: Fix memory leak in dlfb_usb_probe
|
|
BUG: unable to handle kernel paging request in cfb_imageblit
fbdev
|
8 |
C |
done |
done |
30 |
2067d |
2111d
|
15/29 |
2032d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
KASAN: slab-out-of-bounds Read in soft_cursor
fbdev
|
17 |
C |
done |
|
218 |
2108d |
2417d
|
15/29 |
2069d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
KASAN: use-after-free Read in bit_putcs
fbdev
|
19 |
C |
|
|
12 |
2116d |
2336d
|
15/29 |
2069d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
KASAN: global-out-of-bounds Read in fbcon_get_font
fbdev
|
17 |
C |
inconclusive |
inconclusive |
41 |
2115d |
2412d
|
15/29 |
2069d |
5af08640795b
fbcon: Fix global-out-of-bounds read in fbcon_get_font()
|
|
KASAN: global-out-of-bounds Read in fbcon_resize
fbdev
|
17 |
C |
error |
|
673 |
2126d |
2158d
|
15/29 |
2107d |
ec0972adecb3
fbcon: Fix user font detection test at fbcon_resize().
|
|
KASAN: slab-out-of-bounds Read in fbcon_scrolldelta
fbdev
|
17 |
|
|
|
1 |
2133d |
2132d
|
15/29 |
2107d |
50145474f6ef
fbcon: remove soft scrollback code
|
|
KASAN: global-out-of-bounds Read in bit_putcs
fbdev
|
17 |
C |
done |
|
262 |
2123d |
2416d
|
15/29 |
2122d |
39b3cffb8cf3
fbcon: prevent user font height or width change from causing potential out-of-bounds access
bc5269ca7650
vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
|
|
KASAN: use-after-free Read in fbcon_cursor
fbdev
|
19 |
syz |
done |
error |
10 |
2162d |
2406d
|
15/29 |
2122d |
f8d1653daec0
vt: defer kfree() of vc_screenbuf in vc_do_resize()
|
|
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned
fbdev
|
21 |
C |
|
|
475 |
2182d |
2417d
|
15/29 |
2125d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
general protection fault in fbcon_switch
fbdev
|
2 |
|
|
|
1 |
2304d |
2303d
|
15/29 |
2259d |
b139f8b00db4
fbcon: fix null-ptr-deref in fbcon_switch
|