linux-next boot error: BUG: unable to handle kernel NULL pointer dereference in mempool_init_node
ceph
fs
|
|
|
|
12 |
1499d |
1501d
|
1/28 |
never |
kasan-simplify-kasan_poison_kfree-temp-fix
|
INFO: task hung in remove_inode_hugepages
fs
mm
|
C |
done |
|
52 |
73d |
165d
|
1/28 |
never |
INFO: task hung in remove_inode_hugepages
|
kernel BUG in free_bprm
fs
mm
|
C |
done |
|
445 |
45d |
46d
|
1/28 |
never |
exec: NULL out bprm->argv0 when it is an ERR_PTR
|
INFO: task hung in io_sq_thread_stop
fs
io-uring
|
C |
done |
|
211 |
1404d |
1564d
|
1/28 |
never |
io_uring: don't sleep schedule in SQPOLL thread if we need to park
|
linux-next boot error: WARNING in kmem_cache_free
fs
|
|
|
|
45 |
1639d |
1643d
|
1/28 |
never |
mm, slab/slub: improve error reporting and overhead of cache_from_obj()-fix
|
KCSAN: data-race in __ep_remove / __fput (5)
fs
|
|
|
|
1 |
91d |
91d
|
28/28 |
5d04h |
6474353a5e3d
epoll: annotate racy check
|
KCSAN: data-race in __fsnotify_parent / __fsnotify_recalc_mask (5)
fs
|
|
|
|
15 |
83d |
170d
|
28/28 |
38d |
35ceae44742e
fsnotify: Avoid data race between fsnotify_recalc_mask() and fsnotify_object_watched()
|
kernel BUG in submit_bh_wbc (3)
nilfs
fs
|
C |
done |
|
18 |
61d |
68d
|
28/28 |
38d |
6ed469df0bfb
nilfs2: fix kernel bug due to missing clearing of buffer delay flag
|
KASAN: slab-use-after-free Read in lockref_get_not_dead (2)
fs
|
syz |
error |
|
1 |
110d |
106d
|
28/28 |
60d |
4e32c25b58b9
libfs: fix get_stashed_dentry()
|
WARNING: lock held when returning to user space in ns_ioctl
fs
|
C |
done |
|
147 |
145d |
156d
|
27/28 |
129d |
280e36f0d5b9
nsfs: use cleanup guard
|
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed
fs
|
C |
|
|
23 |
150d |
153d
|
27/28 |
129d |
f60d38cb02d0
pidfs: when time ns disabled add check for ioctl
|
INFO: rcu detected stall in rtnl_newlink (4)
fs
batman
|
C |
error |
|
9 |
220d |
296d
|
25/28 |
212d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
KASAN: slab-use-after-free Read in __fput (2)
fs
|
C |
done |
|
6 |
236d |
242d
|
25/28 |
212d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
general protection fault in __ep_remove
fs
|
C |
|
|
1 |
257d |
257d
|
25/28 |
212d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
WARNING: ODEBUG bug in bdev_super_lock (2)
fs
|
C |
done |
|
3 |
250d |
247d
|
25/28 |
212d |
22650a99821d
fs,block: yield devices early
|
kernel BUG at fs/inode.c:LINE! (2)
fs
|
C |
done |
unreliable |
322 |
227d |
1576d
|
25/28 |
214d |
319c15174757
epoll: take epitem list out of struct file
|
WARNING in stashed_dentry_prune (2)
fs
|
C |
done |
|
54 |
239d |
248d
|
25/28 |
216d |
9d9539db8638
pidfs: remove config option
|
WARNING in __sk_destruct
batman
fs
|
|
|
|
2 |
267d |
299d
|
25/28 |
253d |
2a750d6a5b36
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
|
WARNING in stashed_dentry_prune
fs
|
C |
done |
|
20 |
284d |
283d
|
25/28 |
254d |
9d9539db8638
pidfs: remove config option
|
WARNING: ODEBUG bug in bdev_super_lock
fs
|
C |
|
|
3 |
257d |
268d
|
25/28 |
254d |
59a55a63c246
fs,block: get holder during claim
|
KASAN: slab-use-after-free Read in sys_io_cancel
fs
|
C |
done |
|
894 |
255d |
293d
|
25/28 |
255d |
28468cbed92e
Revert "fs/aio: Make io_cancel() generate completions again"
|
BUG: sleeping function called from invalid context in __getblk_gfp
fs
|
C |
error |
done |
3673 |
359d |
754d
|
25/28 |
255d |
f123dc86388c
sysv: don't call sb_bread() with pointers_lock held
|
BUG: sleeping function called from invalid context in __bread_gfp
fs
|
C |
error |
done |
359 |
352d |
753d
|
25/28 |
276d |
6f861765464f
fs: Block writes to mounted block devices
|
possible deadlock in pipe_write
fs
|
C |
inconclusive |
|
181 |
328d |
1006d
|
25/28 |
325d |
055ca8355991
fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
|
INFO: trying to register non-static key in debugfs_file_get
fs
|
|
|
|
289 |
366d |
366d
|
25/28 |
333d |
88ac06a9f938
Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
|
WARNING in debugfs_file_get
fs
|
|
|
|
239 |
367d |
384d
|
25/28 |
333d |
88ac06a9f938
Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
|
WARNING in pagemap_scan_pmd_entry
fs
|
C |
inconclusive |
|
48 |
379d |
401d
|
25/28 |
335d |
0dff1b407def
mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
|
WARNING in page_copy_sane
fs
mm
|
C |
done |
|
3 |
464d |
460d
|
25/28 |
366d |
a08c7193e4f1
mm/filemap: remove hugetlb special casing in filemap.c
|
INFO: rcu detected stall in statfs
fs
|
|
|
|
1 |
496d |
496d
|
23/28 |
436d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
possible deadlock in inode_add_bytes
fs
|
C |
done |
|
124 |
523d |
522d
|
23/28 |
436d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
INFO: task hung in pipe_release (4)
fs
|
C |
done |
|
51 |
528d |
528d
|
23/28 |
436d |
0f71c9caf267
udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
|
KASAN: slab-use-after-free Read in test_bdev_super_fc
fs
|
C |
done |
|
7 |
502d |
505d
|
23/28 |
436d |
aca740cecbe5
fs: open block device after superblock creation
|
general protection fault in splice_to_socket
fs
|
C |
done |
|
4 |
555d |
558d
|
23/28 |
449d |
ca2d49f77ce4
splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
|
KASAN: null-ptr-deref Write in get_block (2)
fs
|
C |
error |
|
11 |
544d |
578d
|
23/28 |
449d |
ea2b62f30589
fs/sysv: Null check to prevent null-ptr-deref bug
|
KCSAN: data-race in inotify_handle_inode_event / inotify_remove_from_idr
fs
|
|
|
|
363 |
593d |
607d
|
22/28 |
538d |
c915d8f5918b
inotify: Avoid reporting event with invalid wd
|
possible deadlock in do_writepages
fs
mm
|
|
|
|
15 |
604d |
607d
|
22/28 |
538d |
00d873c17e29
ext4: avoid deadlock in fs reclaim with page writeback
|
KASAN: null-ptr-deref Read in ida_free (3)
fs
|
C |
error |
|
4 |
636d |
632d
|
22/28 |
561d |
cb2239c198ad
fs: drop peer group ids under namespace lock
|
KMSAN: uninit-value in ondemand_readahead
fs
mm
|
C |
|
|
221 |
659d |
823d
|
22/28 |
561d |
3e35102666f8
fs/cramfs/inode.c: initialize file_ra_state
|
INFO: task hung in write_cache_pages (2)
mm
fs
|
C |
done |
|
36 |
589d |
660d
|
22/28 |
561d |
fb3592c41a44
migrate_pages: fix deadlock in batched migration
|
KMSAN: uninit-value in vfs_write
fs
|
C |
|
|
3 |
685d |
655d
|
22/28 |
561d |
2b4c99f7d9a5
can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
|
KASAN: use-after-free Read in mas_next_nentry
fs
|
C |
error |
done |
343 |
774d |
969d
|
22/28 |
666d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
linux-next boot error: kernel BUG in putname
fs
|
|
|
|
1 |
858d |
858d
|
22/28 |
666d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
kernel panic: corrupted stack end in tun_chr_close
fs
|
|
|
|
1 |
957d |
957d
|
22/28 |
666d |
b81d591386c3
riscv: Increase stack size under KASAN
|
INFO: rcu detected stall in sys_lsetxattr
fs
|
C |
done |
|
2 |
977d |
976d
|
22/28 |
666d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
upstream boot error: general protection fault in __proc_create
fs
|
|
|
|
1 |
860d |
860d
|
22/28 |
666d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
INFO: rcu detected stall in sys_setxattr (2)
fs
|
C |
done |
|
3 |
977d |
976d
|
22/28 |
666d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
general protection fault in __dentry_path (2)
fs
|
C |
error |
|
174 |
971d |
981d
|
22/28 |
666d |
5c697c367a66
KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
|
WARNING in mntput_no_expire (3)
fs
|
C |
inconclusive |
|
29 |
715d |
1131d
|
22/28 |
666d |
a91714312eb1
percpu_ref_init(): clean ->percpu_count_ref on failure
|
kernel panic: stack is corrupted in ksys_write
fs
|
|
|
|
1 |
839d |
835d
|
22/28 |
666d |
b81d591386c3
riscv: Increase stack size under KASAN
|
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume
fs
|
C |
done |
done |
1 |
845d |
844d
|
22/28 |
666d |
9f0933ac026f
fscache: fix OOB Read in __fscache_acquire_volume
|
KASAN: use-after-free Read in do_sync_mmap_readahead
fs
mm
|
|
|
|
1 |
945d |
940d
|
22/28 |
666d |
dcfa24ba6899
filemap: Cache the value of vm_flags
|
usb-testing boot error: general protection fault in rcu_core
mm
fs
|
|
|
|
23 |
839d |
858d
|
22/28 |
666d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
KASAN: null-ptr-deref Write in io_file_get_normal
io-uring
fs
|
C |
done |
|
107 |
911d |
995d
|
22/28 |
666d |
d5361233e9ab
io_uring: drop the old style inflight file tracking
|
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header
fs
|
|
|
|
1 |
844d |
844d
|
22/28 |
666d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
memory leak in iovec_from_user
fs
io-uring
|
C |
|
|
1 |
983d |
979d
|
22/28 |
666d |
323b190ba2de
io_uring: free iovec if file assignment fails
|
KCSAN: data-race in do_epoll_wait / do_epoll_wait
fs
|
|
|
|
83 |
941d |
1150d
|
22/28 |
666d |
d679ae94fdd5
list: fix a data-race around ep->rdllist
|
usb-testing boot error: general protection fault in __register_sysctl_table (2)
fs
|
|
|
|
1 |
843d |
843d
|
22/28 |
666d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
general protection fault in hugetlbfs_parse_param
fs
mm
|
C |
|
|
5 |
782d |
793d
|
22/28 |
666d |
26215b7ee923
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
|
BUG: unable to handle kernel paging request in truncate_inode_partial_folio
fs
mm
|
C |
error |
|
4 |
867d |
906d
|
22/28 |
666d |
84ac013046cc
secretmem: fix unhandled fault in truncate
|
kernel BUG in ntfs_read_inode_mount
fs
|
|
|
|
1 |
1069d |
1069d
|
22/28 |
666d |
714fbf2647b1
ntfs: add sanity check on allocation size
|
kernel panic: corrupted stack end in lo_ioctl
fs
mm
|
|
|
|
4 |
672d |
794d
|
22/28 |
666d |
b81d591386c3
riscv: Increase stack size under KASAN
|
general protection fault in legacy_parse_param
fs
|
C |
done |
|
20 |
1005d |
1267d
|
22/28 |
666d |
ecff30575b5a
LSM: general protection fault in legacy_parse_param
|
KASAN: use-after-free Read in io_rsrc_node_ref_zero
fs
|
C |
done |
|
3 |
1034d |
1033d
|
22/28 |
666d |
80912cef18f1
io_uring: disallow modification of rsrc_data during quiesce
|
KASAN: use-after-free Read in add_wait_queue
fs
io-uring
|
C |
done |
done |
13 |
998d |
1005d
|
22/28 |
666d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll
fs
io-uring
|
C |
done |
|
3 |
949d |
948d
|
22/28 |
666d |
aa184e8671f0
io_uring: don't attempt to IOPOLL for MSG_RING requests
|
possible deadlock in snd_hrtimer_callback (2)
fs
|
C |
inconclusive |
|
582 |
870d |
1136d
|
22/28 |
666d |
96b097091c66
ALSA: pcm: Use deferred fasync helper
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
BUG: unable to handle kernel paging request in eventfd_ctx_put
fs
|
C |
done |
|
7 |
790d |
819d
|
22/28 |
666d |
7353633814f6
KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
|
KMSAN: uninit-value in tomoyo_path_chown
fs
|
C |
|
|
13763 |
823d |
824d
|
22/28 |
666d |
f52d74b190f8
open: always initialize ownership fields
|
KASAN: use-after-free Read in filp_close
io-uring
fs
|
C |
done |
|
17 |
707d |
936d
|
22/28 |
666d |
40a1926022d1
fix the breakage in close_fd_get_file() calling conventions change
|
usb-testing boot error: kernel BUG in putname
fs
|
|
|
|
1 |
843d |
843d
|
22/28 |
666d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
KASAN: use-after-free Read in mas_next_entry
fs
|
C |
error |
|
16 |
776d |
790d
|
22/28 |
666d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
UBSAN: array-index-out-of-bounds in io_submit_sqes
fs
|
|
|
|
4 |
934d |
935d
|
22/28 |
666d |
fcde59feb1af
io_uring: add io_op_defs 'def' pointer in req init and issue
|
kernel panic: corrupted stack end in loop_control_ioctl
fs
|
|
|
|
2 |
787d |
872d
|
22/28 |
666d |
b81d591386c3
riscv: Increase stack size under KASAN
|
possible deadlock in snd_timer_notify (2)
fs
|
|
|
|
151 |
870d |
1134d
|
22/28 |
666d |
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
WARNING: still has locks held in io_ring_submit_lock
fs
io-uring
|
C |
done |
|
3 |
950d |
950d
|
22/28 |
666d |
e7637a492b9f
io_uring: fix locking state for empty buffer group
|
KCSAN: data-race in call_rcu / rcu_gp_kthread
fs
|
|
|
|
1 |
1258d |
1257d
|
20/28 |
1018d |
2431774f04d1
rcu: Mark accesses to rcu_state.n_force_qs
|
general protection fault in io_uring_register
fs
io-uring
|
syz |
done |
|
1 |
1198d |
1194d
|
20/28 |
1018d |
41d3a6bd1d37
io_uring: pin SQPOLL data before unlocking ring lock
|
KASAN: use-after-free Write in io_queue_worker_create
fs
io-uring
|
C |
unreliable |
|
132 |
1101d |
1111d
|
20/28 |
1018d |
71a85387546e
io-wq: check for wq exit after adding new worker task_work
e47498afeca9
io-wq: remove spurious bit clear on task_work addition
|
possible deadlock in io_flush_timeouts
fs
|
|
|
|
5 |
1119d |
1121d
|
20/28 |
1018d |
6af3f48bf615
io_uring: fix link traversal locking
|
INFO: task hung in io_uring_del_tctx_node
io-uring
fs
|
C |
unreliable |
|
37 |
1020d |
1184d
|
20/28 |
1018d |
8bab4c09f24e
io_uring: allow conditional reschedule for intensive iterators
|
KASAN: use-after-free Write in io_submit_one
fs
|
C |
done |
|
11 |
1105d |
1143d
|
20/28 |
1018d |
75feae73a280
block: fix single bio async DIO error handling
|
KCSAN: data-race in call_rcu / rcu_gp_fqs_loop
fs
|
|
|
|
1 |
1155d |
1153d
|
20/28 |
1018d |
2431774f04d1
rcu: Mark accesses to rcu_state.n_force_qs
|
inconsistent lock state in io_poll_remove_all
fs
|
|
|
|
63 |
1119d |
1121d
|
20/28 |
1018d |
6af3f48bf615
io_uring: fix link traversal locking
|
WARNING in inc_nlink (2)
fs
|
C |
inconclusive |
done |
21 |
1019d |
1356d
|
20/28 |
1018d |
97f044f690ba
fuse: don't increment nlink in link()
|
possible deadlock in io_worker_cancel_cb
fs
io-uring
|
C |
done |
|
9 |
1099d |
1104d
|
20/28 |
1018d |
d800c65c2d4e
io-wq: drop wqe lock before creating new worker
|
INFO: task hung in io_uring_try_cancel_requests
fs
io-uring
|
C |
error |
|
41 |
1108d |
1150d
|
20/28 |
1018d |
f75d118349be
io_uring: harder fdinfo sq/cq ring iterating
|
WARNING in io_try_cancel_userdata (2)
fs
|
|
|
|
1 |
1125d |
1121d
|
20/28 |
1018d |
617a89484deb
io_uring: fail cancellation for EXITING tasks
|
WARNING in signalfd_cleanup
fs
io-uring
|
C |
done |
|
201 |
1065d |
1080d
|
20/28 |
1018d |
791f3465c4af
io_uring: fix UAF due to missing POLLFREE handling
|
INFO: rcu detected stall in newstat
fs
usb
|
C |
unreliable |
done |
4 |
1113d |
1236d
|
20/28 |
1018d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
INFO: task hung in io_uring_cancel_generic (2)
io-uring
fs
|
C |
done |
|
97 |
1102d |
1129d
|
20/28 |
1018d |
78a780602075
io_uring: ensure task_work gets run as part of cancelations
|
INFO: rcu detected stall in io_wqe_worker (2)
fs
io-uring
|
C |
done |
|
2 |
1151d |
1151d
|
20/28 |
1018d |
c5e0321e43de
Revert "devlink: Remove not-executed trap policer notifications"
|
possible deadlock in io_poll_double_wake (3)
io-uring
fs
|
C |
error |
done |
703 |
1074d |
1347d
|
20/28 |
1018d |
aa43477b0402
io_uring: poll rework
|
INFO: task hung in io_wqe_worker
fs
io-uring
|
C |
unreliable |
|
3 |
1160d |
1156d
|
20/28 |
1018d |
1d5f5ea7cb7d
io-wq: remove worker to owner tw dependency
|
KASAN: null-ptr-deref Read in filp_close (2)
fs
|
C |
|
|
3 |
1257d |
1366d
|
20/28 |
1137d |
3b0462726e7e
cgroup: verify that source is a string
9b5b872215fe
file: fix close_range() for unshare+cloexec
|
WARNING in io_sq_thread_park
fs
|
|
|
|
1 |
1369d |
1369d
|
20/28 |
1137d |
a185f1db59f1
io_uring: do ctx sqd ejection in a clear context
|
possible deadlock in snd_timer_notify
fs
|
|
|
|
119 |
1139d |
1245d
|
20/28 |
1137d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
memory leak in io_sqe_buffers_register
fs
|
C |
|
|
2 |
1330d |
1331d
|
20/28 |
1137d |
bb6659cc0ad3
io_uring: Fix memory leak in io_sqe_buffers_register()
|
WARNING in io_link_timeout_fn
fs
io-uring
|
C |
done |
|
2 |
1318d |
1318d
|
20/28 |
1137d |
447c19f3b507
io_uring: fix ltout double free on completion race
|
WARNING: suspicious RCU usage in count (2)
fs
mm
|
|
|
|
1 |
1309d |
1309d
|
20/28 |
1137d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
general protection fault in io_commit_cqring (2)
fs
io-uring
|
C |
done |
|
82 |
1349d |
1363d
|
20/28 |
1137d |
51520426f4bc
io_uring: handle setup-failed ctx in kill_timeouts
|
INFO: task hung in io_sq_thread_park (2)
fs
io-uring
|
syz |
done |
|
2 |
1259d |
1255d
|
20/28 |
1137d |
46fee9ab02cb
io_uring: remove double poll entry on arm failure
|
KCSAN: data-race in __io_uring_cancel / io_uring_try_cancel_requests
fs
|
|
|
|
3 |
1302d |
1304d
|
20/28 |
1137d |
b16ef427adf3
io_uring: fix data race to avoid potential NULL-deref
|
WARNING in __percpu_ref_exit (2)
fs
|
C |
error |
done |
31 |
1138d |
1377d
|
20/28 |
1137d |
a298232ee6b9
io_uring: fix link timeout refs
|
INFO: task hung in __io_uring_cancel
fs
io-uring
|
C |
done |
|
5 |
1275d |
1341d
|
20/28 |
1137d |
28090c133869
io_uring: fix work_exit sqpoll cancellations
|
possible deadlock in _snd_pcm_stream_lock_irqsave (2)
fs
|
|
|
|
120 |
1138d |
1245d
|
20/28 |
1137d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
memory leak in create_io_worker
io-uring
fs
|
C |
|
|
5 |
1160d |
1199d
|
20/28 |
1137d |
66e70be72288
io-wq: fix memory leak in create_io_worker()
|
WARNING in io_wqe_enqueue
io-uring
fs
|
C |
done |
|
13 |
1296d |
1296d
|
20/28 |
1137d |
e6ab8991c5d0
io_uring: fix false WARN_ONCE
|
possible deadlock in snd_pcm_period_elapsed (2)
fs
|
|
|
|
52 |
1139d |
1245d
|
20/28 |
1137d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
WARNING in io_poll_double_wake
fs
io-uring
|
C |
done |
done |
1124 |
1239d |
1340d
|
20/28 |
1137d |
a890d01e4ee0
io_uring: fix poll requests leaking second poll entries
|
general protection fault in cdev_del (2)
fs
|
C |
error |
|
45 |
1271d |
1549d
|
20/28 |
1137d |
8a12f8836145
net: hso: fix null-ptr-deref during tty device unregistration
0a360e8b65d6
tty: n_gsm: check error while registering tty devices
|
INFO: task hung in io_wq_put_and_exit
io-uring
fs
|
C |
unreliable |
|
628 |
1138d |
1199d
|
20/28 |
1137d |
3b33e3f4a6c0
io-wq: fix silly logic error in io_task_work_match()
|
possible deadlock in do_fcntl
usb
fs
|
C |
done |
|
245 |
1213d |
1545d
|
20/28 |
1137d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
WARNING: suspicious RCU usage in kernel_execve
fs
mm
|
|
|
|
1 |
1274d |
1274d
|
20/28 |
1137d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
WARNING: refcount bug in __io_queue_sqe
fs
|
|
|
|
1 |
1339d |
1330d
|
20/28 |
1137d |
a298232ee6b9
io_uring: fix link timeout refs
|
BUG: unable to handle kernel NULL pointer dereference in kiocb_done
fs
io-uring
|
C |
unreliable |
done |
3 |
1205d |
1204d
|
20/28 |
1137d |
b8ce1b9d25cc
io_uring: don't submit half-prepared drain request
|
possible deadlock in io_uring_register
fs
|
|
|
|
16 |
1197d |
1199d
|
20/28 |
1137d |
009ad9f0c6ee
io_uring: drop ctx->uring_lock before acquiring sqd->lock
|
WARNING in io_try_cancel_userdata
fs
io-uring
|
syz |
unreliable |
|
4 |
1212d |
1216d
|
20/28 |
1137d |
dadebc350da2
io_uring: fix io_try_cancel_userdata race for iowq
|
KMSAN: kernel-infoleak in copy_page_to_iter (2)
fs
mm
|
C |
|
|
2099 |
1232d |
2291d
|
20/28 |
1137d |
ce3aba43599f
ext4: fix kernel infoleak via ext4_extent_header
|
KASAN: use-after-free Read in io_worker_handle_work
fs
|
|
|
|
2 |
1282d |
1312d
|
20/28 |
1137d |
3743c1723bfc
io-wq: Fix UAF when wakeup wqe in hash waitqueue
|
WARNING: suspicious RCU usage in proc_alloc_inode
fs
|
|
|
|
1 |
1279d |
1279d
|
20/28 |
1137d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
WARNING in mntput_no_expire (2)
fs
|
C |
done |
|
68 |
1145d |
1360d
|
20/28 |
1137d |
7d01ef7585c0
Make sure nd->path.mnt and nd->path.dentry are always valid pointers
|
WARNING: suspicious RCU usage in __fput
fs
|
|
|
|
1 |
1305d |
1305d
|
20/28 |
1137d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
general protection fault in __io_file_supports_nowait
fs
io-uring
|
C |
done |
done |
13 |
1202d |
1207d
|
20/28 |
1137d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
KASAN: use-after-free Read in bdev_evict_inode
fs
|
C |
unreliable |
|
1305 |
1221d |
1225d
|
20/28 |
1137d |
889c05cc5834
block: ensure the bdi is freed after inode_detach_wb
|
WARNING in pvr2_i2c_core_done
usb
fs
|
C |
error |
|
5780 |
1258d |
1914d
|
20/28 |
1137d |
f8194e5e63fd
media: pvrusb2: fix warning in pvr2_i2c_core_done
|
INFO: task hung in io_uring_cancel_generic
io-uring
fs
|
C |
unreliable |
|
151 |
1137d |
1259d
|
20/28 |
1137d |
1b48773f9fd0
io_uring: fix io_drain_req()
|
WARNING: suspicious RCU usage in getname_flags
fs
|
|
|
|
2 |
1266d |
1357d
|
20/28 |
1137d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
KASAN: use-after-free Read in __d_alloc (2)
fs
|
C |
unreliable |
|
6774 |
1179d |
1223d
|
20/28 |
1137d |
0766ec82e5fb
namei: Fix use after free in kern_path_locked
|
possible deadlock in f_getown
fs
|
C |
done |
done |
164 |
1215d |
1545d
|
20/28 |
1137d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
possible deadlock in snd_hrtimer_callback
fs
|
C |
done |
|
571 |
1138d |
1245d
|
20/28 |
1137d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
possible deadlock in io_sq_thread_finish
fs
|
C |
unreliable |
done |
4 |
1382d |
1385d
|
20/28 |
1137d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
WARNING: suspicious RCU usage in __alloc_file
fs
|
|
|
|
1 |
1325d |
1325d
|
20/28 |
1137d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
WARNING in io_rsrc_node_switch
io-uring
fs
|
C |
done |
|
174 |
1322d |
1332d
|
20/28 |
1137d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
WARNING in io_wq_submit_work (2)
io-uring
fs
|
C |
done |
done |
52 |
1196d |
1199d
|
20/28 |
1137d |
713b9825a4c4
io-wq: fix cancellation on create-worker failure
|
KASAN: null-ptr-deref Write in io_uring_cancel_sqpoll
fs
|
|
|
|
170 |
1139d |
1394d
|
20/28 |
1137d |
6d042ffb598e
io_uring: Check current->io_uring in io_uring_cancel_sqpoll
|
KASAN: stack-out-of-bounds Read in iov_iter_revert
fs
io-uring
|
C |
error |
|
14 |
1210d |
1227d
|
20/28 |
1137d |
89c2b3b74918
io_uring: reexpand under-reexpanded iters
|
WARNING in internal_create_group
fs
|
C |
inconclusive |
|
20 |
1202d |
1255d
|
20/28 |
1137d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
kernel BUG in remove_inode_hugepages
fs
mm
|
C |
unreliable |
|
3 |
1222d |
1222d
|
20/28 |
1137d |
c7b1850dfb41
hugetlb: don't pass page cache pages to restore_reserve_on_error
|
WARNING in io_wq_put
fs
io-uring
|
C |
unreliable |
|
3 |
1371d |
1382d
|
20/28 |
1137d |
f5d2d23bf0d9
io-wq: fix race around pending work on teardown
|
WARNING in io_uring_setup (2)
fs
io-uring
|
C |
done |
|
40 |
1322d |
1331d
|
20/28 |
1137d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
INFO: task can't die in d_alloc_parallel
fs
|
|
|
|
2 |
1446d |
1462d
|
20/28 |
1300d |
0ce20dd84089
mm: add Kernel Electric-Fence infrastructure
|
KASAN: use-after-free Read in idr_for_each (2)
io-uring
fs
|
C |
error |
done |
86 |
1376d |
1538d
|
20/28 |
1341d |
61cf93700fe6
io_uring: Convert personality_idr to XArray
|
INFO: task hung in io_uring_cancel_task_requests
fs
io-uring
|
C |
|
|
305 |
1375d |
1410d
|
20/28 |
1351d |
34343786ecc5
io_uring: unpark SQPOLL thread for cancelation
|
KASAN: use-after-free Read in tctx_task_work
fs
|
|
|
|
2 |
1394d |
1392d
|
20/28 |
1351d |
2c32395d8111
io_uring: fix __tctx_task_work() ctx race
|
KASAN: invalid-free in io_req_caches_free
fs
|
|
|
|
5 |
1395d |
1398d
|
20/28 |
1351d |
8e5c66c485a8
io_uring: clear request count when freeing caches
|
INFO: task hung in io_sq_thread_park
fs
io-uring
|
C |
unreliable |
|
263 |
1386d |
1391d
|
20/28 |
1351d |
3ebba796fa25
io_uring: ensure that SQPOLL thread is started for exit
|
memory leak in io_submit_sqes (2)
fs
io-uring
|
C |
|
|
1 |
1389d |
1388d
|
20/28 |
1351d |
f01272541d2c
io-wq: ensure all pending work is canceled on exit
|
possible deadlock in io_poll_double_wake (2)
io-uring
fs
|
C |
error |
error |
431 |
1351d |
1544d
|
20/28 |
1351d |
1c3b3e6527e5
io_uring: ignore double poll add on the same waitqueue head
|
inconsistent lock state in io_dismantle_req
fs
io-uring
|
C |
|
|
2 |
1419d |
1419d
|
20/28 |
1351d |
9ae1f8dd372e
io_uring: fix inconsistent lock state
|
general protection fault in io_sqe_files_unregister
fs
|
|
|
|
2 |
1443d |
1442d
|
19/28 |
1382d |
3e2224c5867f
io_uring: Fix return value from alloc_fixed_file_ref_node
|
kernel BUG at mm/page-writeback.c:LINE!
fs
mm
|
|
|
|
1 |
1452d |
1448d
|
19/28 |
1382d |
c2407cf7d22d
mm: make wait_on_page_writeback() wait for multiple pending writebacks
|
WARNING in io_uring_flush
fs
io-uring
|
C |
unreliable |
|
10 |
1426d |
1435d
|
19/28 |
1382d |
4325cb498cb7
io_uring: fix uring_flush in exit_files() warning
|
WARNING in percpu_ref_kill_and_confirm (2)
fs
|
C |
done |
|
71 |
1457d |
1465d
|
19/28 |
1382d |
9faadcc8abe4
io_uring: fix double io_uring free
|
WARNING in io_ring_ctx_wait_and_kill
fs
|
C |
done |
|
9 |
1437d |
1438d
|
19/28 |
1382d |
06585c497b55
io_uring: do sqo disable on install_fd error
|
INFO: task hung in __io_uring_files_cancel
io-uring
fs
|
C |
done |
|
30 |
1423d |
1490d
|
19/28 |
1382d |
bee749b187ac
io_uring: fix files cancellation
|
kernel BUG at include/linux/highmem.h:LINE!
fs
mm
|
C |
error |
|
32 |
1486d |
1491d
|
19/28 |
1382d |
0060ef3b4e6d
mm: support THPs in zero_user_segments
|
BUG: unable to handle kernel paging request in percpu_ref_exit
fs
|
C |
done |
|
3 |
1443d |
1441d
|
19/28 |
1382d |
3e2224c5867f
io_uring: Fix return value from alloc_fixed_file_ref_node
|
INFO: task can't die in io_sq_thread_stop
fs
|
|
|
|
1 |
1501d |
1497d
|
19/28 |
1382d |
65b2b213484a
io_uring: check kthread stopped flag when sq thread is unparked
|
general protection fault in io_disable_sqo_submit
fs
io-uring
|
C |
done |
|
124 |
1434d |
1438d
|
19/28 |
1382d |
b4411616c26f
io_uring: fix null-deref in io_disable_sqo_submit
|
WARNING in io_uring_cancel_task_requests
io-uring
fs
|
syz |
done |
|
69 |
1419d |
1422d
|
19/28 |
1382d |
70b2c60d3797
io_uring: fix sqo ownership false positive warning
|
inconsistent lock state in io_file_data_ref_zero
fs
|
C |
done |
|
7152 |
1465d |
1489d
|
19/28 |
1382d |
ac0648a56c1f
io_uring: use bottom half safe lock for fixed file data
|
BUG: corrupted list in io_file_get
fs
io-uring
|
C |
done |
|
3 |
1422d |
1422d
|
19/28 |
1382d |
f609cbb8911e
io_uring: fix list corruption for splice file_get
|
WARNING in io_wq_submit_work
fs
|
|
|
|
4 |
1429d |
1434d
|
19/28 |
1382d |
ca70f00bed6c
io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
|
possible deadlock in send_sigio (2)
fs
|
C |
done |
done |
40 |
1451d |
1564d
|
19/28 |
1382d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
memory leak in generic_parse_monolithic
fs
|
C |
|
|
11 |
1473d |
1498d
|
19/28 |
1382d |
4cb682964706
afs: Fix memory leak when mounting with multiple source parameters
|
KASAN: slab-out-of-bounds Write in record_print_text
fs
|
C |
done |
unreliable |
17 |
1423d |
1426d
|
19/28 |
1382d |
08d60e599954
printk: fix string termination for record_print_text()
|
possible deadlock in send_sigurg (2)
fs
|
C |
done |
|
25 |
1469d |
1520d
|
19/28 |
1382d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
possible deadlock in proc_pid_syscall (2)
fs
|
|
|
|
2 |
1566d |
1576d
|
19/28 |
1382d |
f7cfd871ae0c
exec: Transform exec_update_mutex into a rw_semaphore
78af4dc949da
perf: Break deadlock involving exec_update_mutex
|
WARNING in io_disable_sqo_submit
fs
|
C |
done |
|
9 |
1427d |
1435d
|
19/28 |
1382d |
6b393a1ff174
io_uring: fix false positive sqo warning on flush
|
KASAN: null-ptr-deref Read in filp_close
fs
|
C |
done |
|
9 |
1463d |
1464d
|
19/28 |
1382d |
fec8a6a69103
close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
6abc20f8f879
selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
|
possible deadlock in io_timeout_fn (2)
fs
|
|
|
|
4 |
1444d |
1450d
|
19/28 |
1382d |
4aa84f2ffa81
io_uring: dont kill fasync under completion_lock
|
KASAN: null-ptr-deref Write in kthread_use_mm
fs
io-uring
|
C |
done |
|
2 |
1510d |
1510d
|
15/28 |
1491d |
4b70cf9dea4c
io_uring: ensure consistent view of original task ->mm from SQPOLL
|
general protection fault in io_uring_show_cred
fs
|
C |
done |
|
4 |
1507d |
1506d
|
15/28 |
1491d |
6b47ab81c9a9
io_uring: use correct pointer for io_uring_show_cred()
|
KASAN: use-after-free Write in io_submit_sqes
fs
io-uring
|
C |
error |
|
2 |
1509d |
1508d
|
15/28 |
1491d |
cb8a8ae31074
io_uring: drop req/tctx io_identity separately
|
INFO: task can't die in corrupted
fs
|
C |
done |
|
4 |
1509d |
1536d
|
15/28 |
1496d |
86f33603f8c5
f2fs: handle errors of f2fs_get_meta_page_nofail
|
general protection fault in percpu_ref_exit
fs
|
C |
done |
|
3 |
1531d |
1534d
|
15/28 |
1496d |
7ea6bf2e6c40
percpu_ref: don't refer to ref->data if it isn't allocated
|
KASAN: use-after-free Read in fscache_alloc_cookie
fs
|
syz |
done |
|
1 |
1548d |
1548d
|
15/28 |
1496d |
1d0e850a49a5
afs: Fix cell removal
|
KASAN: use-after-free Read in io_wqe_worker
fs
io-uring
|
C |
error |
|
2 |
1545d |
1547d
|
15/28 |
1496d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
WARNING: suspicious RCU usage in io_init_identity
fs
|
|
|
|
1536 |
1522d |
1527d
|
15/28 |
1496d |
1e6fa5216a0e
io_uring: COW io_identity on mismatch
|
inconsistent lock state in xa_destroy
io-uring
fs
|
C |
|
|
755 |
1534d |
1534d
|
15/28 |
1496d |
ca6484cd308a
io_uring: no need to call xa_destroy() on empty xarray
|
INFO: task hung in io_uring_flush
io-uring
fs
|
C |
done |
done |
11 |
1586d |
1593d
|
15/28 |
1496d |
b7ddce3cbf01
io_uring: fix cancel of deferred reqs with ->files
|
KASAN: use-after-free Write in io_wq_worker_running
io-uring
fs
|
C |
error |
|
14 |
1538d |
1565d
|
15/28 |
1496d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
KMSAN: uninit-value in __fget_light (2)
fs
|
C |
|
|
18 |
1512d |
1522d
|
15/28 |
1496d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
possible deadlock in mnt_want_write
fs
|
C |
done |
done |
662 |
1535d |
2342d
|
15/28 |
1496d |
146d62e5a586
ovl: detect overlapping layers
|
general protection fault in __do_sys_io_uring_register
fs
|
|
|
|
80 |
1522d |
1529d
|
15/28 |
1496d |
55cbc2564ab2
io_uring: fix error path cleanup in io_sqe_files_register()
|
inconsistent lock state in io_uring_add_task_file
fs
|
|
|
|
1 |
1534d |
1534d
|
15/28 |
1496d |
ce765372bc44
io_uring: Fix use of XArray in __io_uring_files_cancel
|
KMSAN: uninit-value in qtree_entry_unused
fs
|
|
|
|
396 |
1500d |
1552d
|
15/28 |
1496d |
3d3dc274ce73
quota: clear padding in v2r1_mem2diskdqb()
|
general protection fault in io_poll_double_wake (2)
fs
io-uring
|
C |
error |
|
2 |
1546d |
1545d
|
15/28 |
1522d |
8706e04ed7d6
io_uring: always delete double poll wait entry on match
|
possible deadlock in io_write
fs
|
|
|
|
2 |
1543d |
1545d
|
15/28 |
1522d |
fad8e0de4426
io_uring: fix potential ABBA deadlock in ->show_fdinfo()
|
memory leak in do_eventfd
fs
|
C |
|
|
2 |
1580d |
1675d
|
15/28 |
1533d |
f65886606c2d
KVM: fix memory leak in kvm_io_bus_unregister_dev()
|
upstream boot error: KASAN: global-out-of-bounds Read in internal_create_group
fs
|
|
|
|
273 |
1579d |
1592d
|
15/28 |
1548d |
62c789270c0b
libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group
|
possible deadlock in __io_queue_deferred
fs
io-uring
|
C |
error |
|
1 |
1595d |
1593d
|
15/28 |
1556d |
7271ef3a93a8
io_uring: fix recursive completion locking on oveflow flush
|
WARNING in __kernel_read
fs
|
C |
done |
|
60 |
1564d |
1622d
|
15/28 |
1556d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
general protection fault in cdev_del
usb
fs
|
C |
|
|
315 |
1566d |
2034d
|
15/28 |
1556d |
e911e99a0770
usb: hso: check for return value in hso_serial_common_create()
|
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter
io-uring
fs
|
C |
done |
|
24 |
1582d |
1593d
|
15/28 |
1556d |
2dd2111d0d38
io_uring: Fix NULL pointer dereference in loop_rw_iter()
|
KASAN: use-after-free Read in io_async_task_func
fs
io-uring
|
syz |
error |
|
1 |
1593d |
1593d
|
15/28 |
1556d |
6d816e088c35
io_uring: hold 'ctx' reference around task_work queue + execute
|
WARNING in drop_nlink
fs
|
C |
done |
error |
1 |
1704d |
1700d
|
15/28 |
1556d |
facb03dddec0
fs/minix: don't allow getting deleted inodes
|
KASAN: use-after-free Read in ceph_mdsc_destroy
ceph
fs
|
|
|
|
4 |
1596d |
1612d
|
15/28 |
1556d |
a7caa88f8b72
ceph: fix use-after-free for fsc->mdsc
|
KASAN: use-after-free Read in path_init (2)
fs
|
C |
done |
|
29 |
1591d |
1592d
|
15/28 |
1556d |
24fb33d40d60
fix breakage in do_rmdir()
|
WARNING in __kernel_write
fs
|
C |
done |
|
522 |
1605d |
1625d
|
15/28 |
1556d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
KMSAN: uninit-value in get_block
fs
|
C |
|
|
13 |
1672d |
1675d
|
15/28 |
1556d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
KASAN: null-ptr-deref Write in get_block
fs
|
C |
done |
|
101 |
1622d |
1736d
|
15/28 |
1556d |
da27e0a0e5f6
fs/minix: check return value of sb_getblk()
|
memory leak in io_submit_sqes
fs
io-uring
|
C |
|
|
2 |
1573d |
1593d
|
15/28 |
1556d |
a36da65c4656
io_uring: fail poll arm on queue proc failure
|
KASAN: use-after-free Write in get_block
fs
|
C |
inconclusive |
inconclusive |
12 |
1639d |
1689d
|
15/28 |
1556d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
general protection fault in io_poll_double_wake
io-uring
fs
|
C |
done |
|
8 |
1560d |
1588d
|
15/28 |
1556d |
d4e7cd36a90e
io_uring: sanitize double poll handling
|
KASAN: use-after-free Read in lockref_get
fs
|
|
|
|
7 |
1660d |
1760d
|
15/28 |
1556d |
bad8e64fb19d
blktrace: fix debugfs use after free
|
KASAN: use-after-free Read in io_uring_setup (2)
fs
|
|
|
|
1 |
1605d |
1604d
|
15/28 |
1556d |
d1719f70d0a5
io_uring: don't touch 'ctx' after installing file descriptor
|
possible deadlock in io_timeout_fn
io-uring
fs
|
C |
done |
|
4 |
1591d |
1593d
|
15/28 |
1556d |
51a4cc112c7a
io_uring: defer file table grabbing request cleanup for locked requests
|
possible deadlock in lock_trace (3)
fs
|
syz |
inconclusive |
done |
69 |
1724d |
1859d
|
15/28 |
1585d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
possible deadlock in do_io_accounting (3)
fs
|
C |
inconclusive |
done |
39 |
1731d |
1821d
|
15/28 |
1585d |
76518d379885
proc: io_accounting: Use new infrastructure to fix deadlocks in execve
|
possible deadlock in proc_pid_personality
fs
|
syz |
inconclusive |
done |
3 |
1740d |
1750d
|
15/28 |
1585d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
WARNING: bad unlock balance in rcu_lock_release
fs
|
C |
inconclusive |
done |
1433 |
1726d |
2008d
|
15/28 |
1586d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
WARNING: bad unlock balance in rcu_core
fs
|
C |
inconclusive |
done |
3578 |
1722d |
2078d
|
15/28 |
1586d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
KASAN: use-after-free Write in fsnotify_detach_connector_from_object
fs
|
C |
done |
|
4 |
1648d |
1653d
|
15/28 |
1617d |
ef1548adada5
proc: Use new_inode not new_inode_pseudo
|
BUG: unable to handle kernel NULL pointer dereference in number
fs
|
|
|
|
1 |
1647d |
1643d
|
15/28 |
1617d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
INFO: task hung in locks_remove_posix
fs
input
usb
|
syz |
|
|
2231 |
1653d |
1675d
|
15/28 |
1617d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
linux-next boot error: general protection fault in tomoyo_get_local_path
fs
|
|
|
|
18 |
1675d |
1680d
|
15/28 |
1617d |
9d78edeaec75
proc: proc_pid_ns takes super_block as an argument
|
general protection fault in proc_kill_sb
fs
|
|
|
|
8 |
1643d |
1655d
|
15/28 |
1617d |
058f2e4da79b
proc: s_fs_info may be NULL when proc_kill_sb is called
|
INFO: trying to register non-static key in io_cqring_ev_posted (3)
fs
|
C |
done |
|
3 |
1676d |
1679d
|
15/28 |
1617d |
583863ed9181
io_uring: initialize ctx->sqo_wait earlier
|
BUG: unable to handle kernel NULL pointer dereference in unlock_page
mm
fs
|
|
|
|
1 |
1649d |
1649d
|
15/28 |
1617d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
general protection fault in start_creating
fs
|
C |
done |
|
106 |
1639d |
1669d
|
15/28 |
1617d |
d56f5136b010
KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_node_cpus (2)
fs
mm
|
|
|
|
9 |
1685d |
1852d
|
15/28 |
1617d |
314eeb43e5f2
rcu: Add *_ONCE() and data_race() to rcu_node ->exp_tasks plus locking
|
KASAN: use-after-free Read in blkdev_direct_IO
fs
|
C |
done |
error |
8 |
1963d |
1967d
|
15/28 |
1634d |
0eb6ddfb865c
block: Fix __blkdev_direct_IO() for bio fragments
|
KASAN: use-after-free Read in blkdev_bio_end_io
fs
|
C |
done |
error |
13 |
1953d |
1965d
|
15/28 |
1634d |
7b6620d7db56
block: remove REQ_NOWAIT_INLINE
|
KASAN: use-after-free Read in dput (2)
fs
|
syz |
done |
|
4 |
1711d |
1710d
|
15/28 |
1647d |
4fa3b1c41737
proc: Handle umounts cleanly
|
INFO: rcu detected stall in io_uring_release
fs
|
syz |
|
|
15 |
1667d |
1707d
|
15/28 |
1647d |
3fd44c86711f
io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
|
possible deadlock in io_submit_one (3)
fs
|
syz |
done |
|
45 |
1716d |
1723d
|
15/28 |
1686d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
INFO: task hung in io_queue_file_removal
fs
|
C |
done |
|
16 |
1728d |
1736d
|
15/28 |
1686d |
4afdb733b160
io-uring: drop completion when removing file
|
KMSAN: uninit-value in simple_attr_read
fs
|
C |
|
|
6 |
1689d |
1759d
|
15/28 |
1686d |
a65cab7d7f05
libfs: fix infoleak in simple_attr_read()
|
possible deadlock in send_sigurg
fs
|
C |
done |
|
65 |
1709d |
1723d
|
15/28 |
1686d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
INFO: trying to register non-static key in __io_uring_register
fs
|
C |
done |
|
39 |
1717d |
1719d
|
15/28 |
1686d |
f7fe9346869a
io_uring: initialize fixed_file_data lock
|
INFO: trying to register non-static key in io_cqring_ev_posted (2)
fs
|
C |
done |
|
42 |
1689d |
1726d
|
15/28 |
1686d |
10bea96dcc13
io_uring: add missing finish_wait() in io_sq_thread()
|
possible deadlock in send_sigio
fs
|
C |
done |
|
7 |
1713d |
1722d
|
15/28 |
1686d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
memory leak in fasync_helper
fs
|
C |
|
|
14 |
1779d |
1840d
|
15/28 |
1710d |
67f562e3e147
net/smc: transfer fasync_list in case of fallback
|
BUG: sleeping function called from invalid context in __kmalloc
ceph
fs
|
C |
done |
|
5 |
1772d |
1778d
|
15/28 |
1710d |
b27a939e8376
ceph: canonicalize server path in place
|
WARNING: ODEBUG bug in io_sqe_files_unregister
fs
|
C |
done |
|
964 |
1780d |
1827d
|
15/28 |
1745d |
2faf852d1be8
io_uring: cleanup fixed file data table references
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_cpus
fs
mm
|
|
|
|
7 |
1780d |
1874d
|
15/28 |
1767d |
c51f83c315c3
rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
|
kernel BUG at fs/namei.c:LINE!
fs
|
|
|
|
3593 |
1803d |
1803d
|
15/28 |
1767d |
c64cd6e34ea3
reimplement path_mountpoint() with less magic
|
BUG: corrupted list in __dentry_kill (2)
fs
|
C |
done |
|
4945 |
1836d |
1836d
|
15/28 |
1767d |
a3d1e7eb5abe
simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
|
WARNING in do_dentry_open (2)
fs
|
C |
done |
|
17 |
1787d |
1785d
|
15/28 |
1767d |
a37f4958f7b6
debugfs: Return -EPERM when locked down
|
KASAN: use-after-free Write in percpu_ref_switch_to_percpu
fs
|
|
|
|
1 |
1782d |
1781d
|
15/28 |
1767d |
2faf852d1be8
io_uring: cleanup fixed file data table references
|
WARNING: refcount bug in chrdev_open
fs
|
C |
inconclusive |
done |
15 |
1847d |
1949d
|
15/28 |
1767d |
68faa679b8be
chardev: Avoid potential use-after-free in 'chrdev_open()'
|
INFO: task hung in __generic_file_fsync (2)
fs
mm
|
C |
done |
done |
28 |
1814d |
1815d
|
15/28 |
1768d |
85a8ce62c2ea
block: add bio_truncate to fix guard_bio_eod
|
INFO: task hung in sync_inodes_sb (3)
fs
mm
|
C |
done |
|
6 |
1813d |
1821d
|
15/28 |
1772d |
85a8ce62c2ea
block: add bio_truncate to fix guard_bio_eod
|
kernel BUG at fs/pipe.c:LINE!
fs
|
C |
done |
|
693 |
1839d |
1846d
|
15/28 |
1809d |
8c7b8c34ae95
pipe: Remove assertion from pipe_poll()
|
general protection fault in io_commit_cqring
fs
|
C |
done |
|
3 |
1864d |
1864d
|
15/28 |
1835d |
15dff286d0e0
io_uring: check for validity of ->rings in teardown
|
INFO: task hung in io_wq_destroy
fs
|
C |
done |
|
20 |
1849d |
1880d
|
15/28 |
1835d |
b60fda6000a9
io-wq: wait for io_wq_create() to setup necessary workers
|
INFO: trying to register non-static key in io_cqring_ev_posted
fs
|
C |
done |
|
6 |
1850d |
1862d
|
15/28 |
1835d |
eb065d301e8c
io_uring: io_allocate_scq_urings() should return a sane state
|
WARNING in iov_iter_pipe
fs
|
C |
done |
|
1117 |
1853d |
1870d
|
15/28 |
1835d |
419e9c38aa07
iomap: Fix pipe page leakage during splicing
|
BUG: unable to handle kernel paging request in io_wq_cancel_all
fs
|
C |
done |
|
2 |
1879d |
1879d
|
15/28 |
1835d |
975c99a57096
io_uring: io_wq_create() returns an error pointer, not NULL
|
KASAN: invalid-free in io_sqe_files_unregister
fs
|
C |
done |
|
3 |
1868d |
1868d
|
15/28 |
1835d |
46568e9be70f
io_uring: fix error clear of ->file_table in io_sqe_files_register()
|
KASAN: use-after-free Read in do_mount
fs
|
syz |
done |
|
6 |
1893d |
1901d
|
14/28 |
1848d |
0ecee6699064
fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
|
KMSAN: use-after-free in hidraw_ioctl
fs
|
|
|
|
1 |
1901d |
1900d
|
13/28 |
1851d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
KASAN: use-after-free Read in io_uring_setup
fs
|
syz |
error |
|
1 |
1881d |
1881d
|
13/28 |
1855d |
044c1ab399af
io_uring: don't touch ctx in setup after ring fd install
|
KASAN: use-after-free Read in ep_scan_ready_list
fs
|
C |
|
done |
39 |
2319d |
2354d
|
13/28 |
1857d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
WARNING in mark_lock (2)
fs
|
|
|
|
14 |
1888d |
1915d
|
13/28 |
1881d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
general protection fault in finish_writeback_work
fs
|
|
|
|
10 |
1890d |
1915d
|
13/28 |
1881d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
INFO: trying to register non-static key in finish_writeback_work
fs
|
syz |
error |
|
1 |
1917d |
1914d
|
13/28 |
1881d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
INFO: task syz-executor can't die for more than 143 seconds.
fs
|
C |
done |
|
61 |
1910d |
2018d
|
13/28 |
1893d |
8619e5bdeee8
/dev/mem: Bail out upon SIGKILL.
7c3a6aedcd6a
kexec: bail out upon SIGKILL when allocating memory.
8f9e86ee7959
staging: android: ion: Bail out upon SIGKILL when allocating memory.
|
WARNING in kfree
fs
|
C |
done |
|
2 |
1940d |
1939d
|
13/28 |
1893d |
43ce4c1feadb
vfs: Add a single-or-reconfig keying to vfs_get_super()
|
WARNING in __blkdev_put (2)
fs
|
syz |
|
|
3082 |
1958d |
1965d
|
12/28 |
1932d |
e91455bad5cf
bdev: Fixup error handling in blkdev_get()
|
kernel panic: corrupted stack end in dput
fs
|
syz |
done |
|
1 |
2000d |
2000d
|
12/28 |
1942d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
INFO: task hung in io_uring_release
fs
|
|
|
|
24 |
1989d |
2007d
|
12/28 |
1965d |
a4c0b3decb33
io_uring: fix io_sq_thread_stop running in front of io_sq_thread
|
general protection fault in do_move_mount (2)
fs
|
syz |
done |
|
7 |
2004d |
2013d
|
12/28 |
1972d |
570d7a98e7d6
vfs: move_mount: reject moving kernel internal mounts
|
possible deadlock in io_submit_one
fs
|
C |
done |
|
1779 |
1976d |
2146d
|
12/28 |
1972d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
possible deadlock in userfaultfd_read (2)
fs
|
|
|
|
228 |
1995d |
2094d
|
12/28 |
1972d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
WARNING in notify_change
fs
|
C |
|
|
566 |
2058d |
2448d
|
12/28 |
1977d |
f69e749a4935
Abort file_remove_privs() for non-reg. files
|
WARNING in fanotify_handle_event
fs
|
C |
done |
|
5 |
2014d |
2012d
|
12/28 |
1990d |
c285a2f01d69
fanotify: update connector fsid cache on add mark
|
BUG: Dentry still in use [unmount of tmpfs tmpfs]
fs
|
|
|
|
2 |
2023d |
2022d
|
12/28 |
1990d |
1b0b9cc8d379
vfs: fsmount: add missing mntget()
|
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs]
fs
|
C |
done |
|
3 |
2013d |
2013d
|
12/28 |
1990d |
1b0b9cc8d379
vfs: fsmount: add missing mntget()
|
possible deadlock in aio_poll
fs
|
C |
|
|
5041 |
2149d |
2294d
|
12/28 |
2001d |
ae62c16e105a
userfaultfd: disable irqs when taking the waitqueue lock
|
INFO: task hung in __ia32_sys_io_uring_enter
fs
|
|
|
|
2 |
2077d |
2078d
|
12/28 |
2008d |
b19062a56726
io_uring: fix possible deadlock between io_uring_{enter,register}
|
INFO: task hung in __x64_sys_io_uring_enter
fs
|
|
|
|
12 |
2071d |
2077d
|
12/28 |
2008d |
b19062a56726
io_uring: fix possible deadlock between io_uring_{enter,register}
|
INFO: task hung in __get_super
fs
|
C |
|
|
80 |
2011d |
2455d
|
12/28 |
2011d |
33ec3e53e7b1
loop: Don't change loop device under exclusive opener
|
general protection fault in do_move_mount
fs
|
|
|
|
3 |
2053d |
2053d
|
12/28 |
2016d |
05883eee857e
do_move_mount(): fix an unsafe use of is_anon_ns()
|
general protection fault in load_elf_binary
fs
mm
|
C |
done |
|
15 |
2089d |
2093d
|
12/28 |
2016d |
cc338010a233
fs/binfmt_elf.c: free PT_INTERP filename ASAP
|
kernel BUG at mm/slab.c:LINE! (4)
fs
|
|
|
|
12 |
2028d |
2096d
|
12/28 |
2016d |
4f661542a402
tcp: fix zerocopy and notsent_lowat issues
|
general protection fault in put_fs_context
fs
|
C |
|
|
9 |
2243d |
2243d
|
12/28 |
2020d |
8d0347f6c3a9
convert do_remount_sb() to fs_context
|
INFO: task hung in __io_uring_register
fs
|
C |
done |
|
51 |
2070d |
2079d
|
12/28 |
2035d |
b19062a56726
io_uring: fix possible deadlock between io_uring_{enter,register}
|
general protection fault in fanotify_handle_event
fs
|
syz |
done |
|
5 |
2073d |
2073d
|
12/28 |
2035d |
b1da6a51871c
fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
|
BUG: unable to handle kernel paging request in do_mount
fs
|
C |
|
|
194 |
2245d |
2283d
|
12/28 |
2041d |
3e1aeb00e6d1
vfs: Implement a filesystem superblock creation/configuration context
|
possible deadlock in seq_read
fs
|
C |
|
|
19074 |
2087d |
2577d
|
12/28 |
2080d |
73601ea5b7b1
fs/open.c: allow opening only regular files during execve()
|
KASAN: use-after-free Read in link_path_walk
fs
|
syz |
done |
|
5 |
2199d |
2214d
|
12/28 |
2080d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
KASAN: use-after-free Read in trailing_symlink
fs
|
syz |
done |
|
2 |
2200d |
2214d
|
12/28 |
2080d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
KASAN: use-after-free Read in path_lookupat
fs
|
syz |
done |
|
1 |
2214d |
2214d
|
12/28 |
2080d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
KASAN: use-after-free Read in filemap_fault
fs
mm
|
C |
|
|
277 |
2174d |
2184d
|
11/28 |
2091d |
6b4c9f446981
filemap: drop the mmap_sem for all blocking operations
|
possible deadlock in __do_page_fault
fs
mm
|
C |
|
|
820 |
2116d |
2283d
|
11/28 |
2095d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
possible deadlock in vfs_fallocate
fs
|
C |
|
|
3981 |
2316d |
2427d
|
11/28 |
2095d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter
fs
mm
|
|
|
|
5 |
2121d |
2129d
|
11/28 |
2095d |
ac5ceccce550
x86/unwind: Add hardcoded ORC entry for NULL
f4f34e1b82eb
x86/unwind: Handle NULL pointer calls better in frame unwinder
|
possible deadlock in userfaultfd_read
fs
|
|
|
|
239 |
2095d |
2149d
|
11/28 |
2095d |
d3d6a18d7d35
aio: Fix locking in aio_poll()
|
BUG: unable to handle kernel paging request in dput (2)
fs
|
C |
|
|
4 |
2151d |
2152d
|
11/28 |
2117d |
36991ca68db9
blk-mq: protect debugfs_create_files() from failures
37ea7b630ae5
debugfs: debugfs_lookup() should return NULL if not found
|
INFO: task hung in generic_file_write_iter
fs
mm
|
|
|
|
7 |
2210d |
2348d
|
11/28 |
2117d |
04906b2f542c
blockdev: Fix livelocks on loop device
|
general protection fault in __dentry_path
fs
|
C |
|
|
2082 |
2119d |
2152d
|
11/28 |
2117d |
8ed0579c12b2
kvm: properly check debugfs dentry before using it
|
KASAN: use-after-free Read in posix_lock_inode
fs
|
syz |
|
|
5 |
2180d |
2180d
|
11/28 |
2166d |
bf77ae4c98d7
locks: fix error in locks_move_blocks()
|
KASAN: use-after-free Read in locks_delete_block
fs
|
syz |
|
|
4 |
2207d |
2230d
|
11/28 |
2166d |
16306a61d3b7
fs/locks: always delete_block after waiting.
|
WARNING in userfaultfd_ioctl
fs
|
C |
|
|
11 |
2200d |
2209d
|
11/28 |
2185d |
01e881f5a1fc
userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
|
WARNING: kmalloc bug in krealloc
fs
|
C |
|
|
2 |
2350d |
2350d
|
11/28 |
2230d |
61448479a9f2
mm: don't warn about large allocations for slab
|
WARNING: kmalloc bug in vfs_getxattr_alloc
fs
|
C |
|
|
9 |
2305d |
2348d
|
11/28 |
2230d |
61448479a9f2
mm: don't warn about large allocations for slab
|
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie
fs
|
C |
|
|
1936 |
2255d |
2357d
|
11/28 |
2244d |
1ff22883b0b2
fscache: Fix incomplete initialisation of inline key space
fa520c47eaa1
fscache: Fix out of bound read in long cookie keys
|
general protection fault in ubifs_mount
mtd
fs
|
C |
|
|
216 |
2283d |
2300d
|
11/28 |
2262d |
37f31b6ca431
ubifs: Check for name being NULL while mounting
|
WARNING in __fsnotify_recalc_mask
fs
|
syz |
|
|
9 |
2315d |
2316d
|
10/28 |
2293d |
d3bc0fa8411c
fsnotify: fix false positive warning on inode delete
|
BUG: soft lockup in shrink_dcache_parent (2)
fs
|
|
|
|
7 |
2385d |
2392d
|
10/28 |
2293d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
INFO: task hung in fsnotify_mark_destroy_workfn
fs
|
syz |
|
|
13 |
2325d |
2439d
|
10/28 |
2296d |
128f38041035
android: binder: Rate-limit debug and userspace triggered err msgs
|
BUG: soft lockup in d_walk
fs
|
C |
|
|
163 |
2385d |
2430d
|
8/28 |
2299d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
general protection fault in send_sigurg_to_task
fs
|
C |
|
|
6 |
2318d |
2322d
|
8/28 |
2306d |
84fe4cc09abc
signal: Don't send signals to tasks that don't exist
|
general protection fault in send_sigio_to_task
fs
|
C |
|
|
176 |
2318d |
2322d
|
8/28 |
2306d |
84fe4cc09abc
signal: Don't send signals to tasks that don't exist
|
kernel BUG at mm/memory.c:LINE!
fs
mm
|
|
|
|
1 |
2358d |
2357d
|
8/28 |
2326d |
bfd40eaff5ab
mm: fix vma_is_anonymous() false-positives
|
kernel BUG at fs/userfaultfd.c:LINE! (2)
fs
|
C |
|
|
8 |
2332d |
2350d
|
8/28 |
2326d |
31e810aa1033
userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
|
KASAN: stack-out-of-bounds Read in __d_lookup_rcu
fs
|
|
|
|
1 |
2347d |
2347d
|
8/28 |
2328d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in locks_remove_posix
fs
|
C |
|
|
1 |
2345d |
2344d
|
8/28 |
2328d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: slab-out-of-bounds Read in getname_kernel
fs
|
C |
|
|
8 |
2352d |
2451d
|
8/28 |
2342d |
02f51d45937f
autofs: fix slab out of bounds read in getname_kernel()
|
BUG: unable to handle kernel paging request in dput
fs
|
C |
|
|
26 |
2388d |
2391d
|
8/28 |
2356d |
d85b399b64e8
fix proc_fill_cache() in case of d_alloc_parallel() failure
|
BUG: unable to handle kernel NULL pointer dereference in do_select
fs
|
|
|
|
45 |
2367d |
2367d
|
8/28 |
2356d |
e88958e6369a
net: handle NULL ->poll gracefully
|
general protection fault in wb_workfn (2)
fs
|
|
|
|
38 |
2376d |
2401d
|
8/28 |
2356d |
3ee7e8697d58
bdi: Fix another oops in wb_workfn()
|
KASAN: use-after-free Read in __vfs_write
fs
|
syz |
|
|
14 |
2385d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
general protection fault in pipe_write
fs
|
syz |
|
|
1 |
2388d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll
fs
|
C |
|
|
15 |
2367d |
2367d
|
8/28 |
2356d |
e88958e6369a
net: handle NULL ->poll gracefully
|
general protection fault in __vfs_write
fs
|
syz |
|
|
25 |
2385d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
KASAN: use-after-free Read in pipe_read
fs
|
C |
|
|
3 |
2387d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
KASAN: use-after-free Read in finish_wait
fs
|
|
|
|
8 |
2386d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
KASAN: use-after-free Read in __kernel_write
fs
|
syz |
|
|
7 |
2385d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
KASAN: null-ptr-deref Write in simple_write_to_buffer
fs
|
C |
|
|
5 |
2397d |
2421d
|
8/28 |
2356d |
fc14eebfc208
PM / hibernate: Fix oops at snapshot_write()
|
general protection fault in touch_atime
fs
|
syz |
|
|
6 |
2385d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
BUG: soft lockup in do_raw_spin_unlock (2)
fs
|
|
|
|
1 |
2384d |
2384d
|
8/28 |
2356d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
general protection fault in __mnt_want_write
fs
|
|
|
|
1 |
2386d |
2386d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
WARNING in do_dentry_open
fs
|
C |
|
|
26 |
2380d |
2388d
|
8/28 |
2356d |
b16558579576
bpf: implement dummy fops for bpf objects
|
INFO: task hung in namespace_unlock
fs
|
|
|
|
15 |
2360d |
2369d
|
8/28 |
2356d |
ebec3f8f5271
n_tty: Access echo_* variables carefully.
|
general protection fault in vfs_read
fs
|
syz |
|
|
2 |
2386d |
2388d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll
fs
|
C |
|
|
297 |
2366d |
2367d
|
8/28 |
2356d |
e88958e6369a
net: handle NULL ->poll gracefully
|
WARNING in sysfs_remove_group
fs
|
C |
|
|
11125 |
2358d |
2612d
|
8/28 |
2356d |
d3349b6b3c37
loop: remember whether sysfs_create_group() was done
|
INFO: rcu detected stall in d_walk
fs
|
C |
|
|
25680 |
2382d |
2444d
|
8/28 |
2356d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
KASAN: use-after-free Read in pipe_wait
fs
|
|
|
|
2 |
2385d |
2386d
|
8/28 |
2356d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
KASAN: use-after-free Read in remove_wait_queue (2)
fs
|
C |
|
|
4 |
2477d |
2487d
|
5/28 |
2389d |
af8d3c7c001a
ppp: remove the PPPIOCDETACH ioctl
|
KASAN: use-after-free Read in debugfs_remove (2)
fs
|
|
|
|
1 |
2436d |
2434d
|
5/28 |
2410d |
f53823c18131
bdi: Fix use after free bug in debugfs_remove()
|
INFO: task hung in handle_userfault
fs
|
|
|
|
3 |
2424d |
2447d
|
5/28 |
2410d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
INFO: task hung in __do_page_fault
fs
|
|
|
|
1 |
2441d |
2441d
|
5/28 |
2410d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
general protection fault in wb_workfn
fs
|
|
|
|
63 |
2411d |
2437d
|
5/28 |
2410d |
b8b784958ecc
bdi: Fix oops in wb_workfn()
|
INFO: task hung in __blkdev_get
fs
|
C |
|
|
662 |
2443d |
2569d
|
5/28 |
2418d |
1e047eaab3bb
block/loop: fix deadlock after loop_set_status
|
BUG: corrupted list in __dentry_kill
fs
|
C |
|
|
35 |
2436d |
2456d
|
5/28 |
2418d |
4a3877c4cedd
rpc_pipefs: fix double-dput()
|
WARNING in kmem_cache_free
fs
|
|
|
|
1 |
2451d |
2451d
|
5/28 |
2418d |
eea0d3ea7546
crypto: drbg - set freed buffers to NULL
|
KASAN: null-ptr-deref Read in xattr_getsecurity
fs
|
|
|
|
68 |
2435d |
2447d
|
5/28 |
2418d |
1f5781725dcb
commoncap: Handle memory allocation failure.
|
WARNING: refcount bug in put_pid_ns
fs
|
syz |
|
|
6 |
2457d |
2456d
|
5/28 |
2418d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
KASAN: use-after-free Read in remove_wait_queue
fs
|
C |
|
|
7 |
2494d |
2503d
|
4/28 |
2489d |
5eeb2ca02a2f
ANDROID: binder: synchronize_rcu() when using POLLFREE.
|
KASAN: use-after-free Read in __fput
fs
|
|
|
|
23 |
2572d |
2606d
|
4/28 |
2503d |
a5739435b5a3
fix kcm_clone()
|
KASAN: use-after-free Read in __lock_acquire (2)
fs
|
C |
|
|
589 |
2514d |
2589d
|
4/28 |
2511d |
f5cb779ba163
ANDROID: binder: remove waitqueue when thread exits.
|
WARNING in sysfs_warn_dup
fs
|
|
|
|
11 |
2516d |
2559d
|
4/28 |
2511d |
5d54f948aaac
sysfs: turn WARN() into pr_warn()
|
WARNING in register_lock_class
fs
|
C |
|
|
2 |
2558d |
2555d
|
4/28 |
2511d |
f5cb779ba163
ANDROID: binder: remove waitqueue when thread exits.
|
general protection fault in page_mapping
fs
mm
|
C |
|
|
46 |
2538d |
2565d
|
4/28 |
2514d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
BUG: unable to handle kernel NULL pointer dereference in page_mapping
fs
mm
|
C |
|
|
4 |
2558d |
2560d
|
4/28 |
2514d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
general protection fault in show_timer
fs
|
C |
|
|
10 |
2559d |
2578d
|
4/28 |
2515d |
cef31d9af908
posix-timer: Properly check sigevent->sigev_notify
|
KASAN: use-after-free Read in __wake_up_common
fs
|
C |
|
|
888 |
2515d |
2524d
|
4/28 |
2515d |
4cd879515d68
vhost_net: stop device during reset owner
|
BUG: unable to handle kernel paging request in devpts_mntget
fs
|
C |
|
|
21 |
2528d |
2605d
|
4/28 |
2515d |
c9cc8d01fb04
devpts: fix error handling in devpts_mntget()
|
kernel BUG at fs/userfaultfd.c:LINE!
fs
|
C |
|
|
3 |
2558d |
2555d
|
4/28 |
2515d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task
fs
|
syz |
|
|
1 |
2562d |
2558d
|
4/28 |
2519d |
c0ee554906c3
pid: Handle failure to allocate the first pid in a pid namespace
|
general protection fault in proc_flush_task
fs
|
syz |
|
|
2 |
2561d |
2578d
|
4/28 |
2519d |
c0ee554906c3
pid: Handle failure to allocate the first pid in a pid namespace
|
KASAN: use-after-free Read in handle_userfault
fs
|
C |
|
|
151 |
2549d |
2612d
|
3/28 |
2537d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
WARNING in lock_release
fs
|
C |
|
|
72 |
2559d |
2592d
|
3/28 |
2555d |
ca0168e8a77c
alloc_super(): do ->s_umount initialization earlier
|
kernel BUG at fs/notify/dnotify/dnotify.c:LINE!
fs
|
|
|
|
19 |
2596d |
2608d
|
3/28 |
2580d |
b3a006600582
dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()
|
general protection fault in iov_iter_fault_in_readable
fs
|
|
|
|
5 |
2597d |
2606d
|
3/28 |
2580d |
ee74d9967b82
tun: do not arm flow_gc_timer in tun_flow_init()
|
KASAN: use-after-free Read in fsnotify
fs
|
|
|
|
1 |
2641d |
2605d
|
3/28 |
2580d |
b3a006600582
dnotify: Handle errors from fsnotify_add_mark_locked() in fcntl_dirnotify()
|