|
WARNING: refcount bug in ax25_release (2)
hams
|
C |
|
|
13 |
4d01h |
41d
|
22/26 |
never |
467324bcfe1a
ax25: Fix netdev refcount issue
|
|
WARNING in rose_device_event
hams
|
|
|
|
1 |
136d |
136d
|
25/26 |
96d |
64b8bc7d5f14
net/rose: fix races in rose_kill_by_device()
|
|
general protection fault in prepare_to_wait (2)
hams
|
syz |
inconclusive |
|
4 |
216d |
253d
|
23/26 |
198d |
c2f8fd794960
netrom: Deny concurrent connect().
|
|
KASAN: use-after-free Write in nr_release
hams
|
C |
done |
error |
1784 |
338d |
1612d
|
22/26 |
324d |
611792920925
netrom: Fix use-after-free caused by accept on already connected socket
|
|
WARNING: refcount bug in nr_release (4)
hams
|
C |
|
|
24 |
439d |
744d
|
22/26 |
324d |
409db27e3a2e
netrom: Fix use-after-free of a listening socket.
|
|
KASAN: use-after-free Read in do_accept
hams
|
|
|
|
1 |
470d |
466d
|
22/26 |
324d |
409db27e3a2e
netrom: Fix use-after-free of a listening socket.
|
|
memory leak in nr_create (2)
hams
|
C |
|
|
11 |
395d |
454d
|
22/26 |
324d |
611792920925
netrom: Fix use-after-free caused by accept on already connected socket
|
|
general protection fault in ax25_send_frame (2)
hams
|
|
|
|
13 |
540d |
526d
|
22/26 |
428d |
e97c089d7a49
rose: Fix NULL pointer dereference in rose_send_frame()
|
|
general protection fault in rose_send_frame (2)
hams
|
|
|
|
7 |
542d |
567d
|
22/26 |
428d |
e97c089d7a49
rose: Fix NULL pointer dereference in rose_send_frame()
|
|
KASAN: use-after-free Read in sixpack_close
hams
|
C |
done |
|
879 |
891d |
895d
|
20/26 |
781d |
81b1d548d00b
hamradio: remove needs_free_netdev to avoid UAF
|
|
memory leak in nr_create
hams
|
C |
|
|
250 |
1012d |
1797d
|
20/26 |
900d |
517a16b1a88b
netrom: Decrease sock refcount when sock timers expire
|
|
KASAN: slab-out-of-bounds Write in decode_data
hams
|
C |
done |
error |
7 |
1450d |
1606d
|
20/26 |
900d |
19d1532a1876
net: 6pack: fix slab-out-of-bounds in decode_data
|
|
KMSAN: uninit-value in ax25_connect
hams
|
C |
|
|
15 |
1327d |
1460d
|
15/26 |
1319d |
2f2a7ffad5c6
AX.25: Fix out-of-bounds read in ax25_connect()
|
|
KMSAN: uninit-value in __dev_get_by_name
hams
|
C |
|
|
2 |
1442d |
1442d
|
15/26 |
1380d |
687775cec056
ax25: fix setsockopt(SO_BINDTODEVICE)
|
|
WARNING: held lock freed! (2)
hams
|
C |
done |
|
1 |
1759d |
1755d
|
12/26 |
1705d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: use-after-free Read in release_sock
hams
|
C |
done |
|
10 |
1728d |
1738d
|
12/26 |
1705d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: use-after-free Read in nr_release
hams
|
C |
done |
|
25 |
1707d |
1786d
|
12/26 |
1705d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: use-after-free Read in nr_insert_socket
hams
|
C |
done |
|
22 |
1729d |
1745d
|
12/26 |
1705d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: use-after-free Read in nr_rx_frame (2)
hams
|
C |
done |
|
3 |
1733d |
1741d
|
12/26 |
1705d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
memory leak in nr_rx_frame
hams
|
C |
|
|
5 |
1734d |
1797d
|
12/26 |
1727d |
c8c8218ec5af
netrom: fix a memory leak in nr_rx_frame()
|
|
inconsistent lock state in ax25_destroy_timer
hams
|
|
|
|
2 |
1777d |
1778d
|
12/26 |
1753d |
d4d5d8e83c96
ax25: fix inconsistent lock state in ax25_destroy_timer
|
|
inconsistent lock state in ax25_rt_autobind
hams
|
|
|
|
2 |
1777d |
1777d
|
12/26 |
1753d |
d4d5d8e83c96
ax25: fix inconsistent lock state in ax25_destroy_timer
|
|
INFO: rcu detected stall in rose_loopback_timer
hams
|
|
|
|
5 |
1813d |
1831d
|
12/26 |
1797d |
0453c6824595
net/rose: fix unbound loop in rose_loopback_timer()
|
|
KASAN: stack-out-of-bounds Write in rose_write_internal
hams
|
|
|
|
1 |
1872d |
1872d
|
12/26 |
1844d |
e5dcc0c3223c
net: rose: fix a possible stack overflow
|
|
general protection fault in ax25cmp
hams
|
C |
|
|
2294 |
1915d |
1947d
|
11/26 |
1880d |
b0cf029234f9
net/rose: fix NULL ax25_cb kernel panic
|
|
KASAN: use-after-free Read in refcount_inc_not_zero_checked
hams
|
syz |
|
|
24 |
1883d |
1943d
|
11/26 |
1880d |
63346650c1a9
netrom: switch to sock timer API
|
|
KASAN: use-after-free Read in kmemdup
hams
|
|
|
|
1 |
1926d |
1926d
|
11/26 |
1880d |
63530aba7826
ax25: fix possible use-after-free
|
|
WARNING: refcount bug in nr_release
hams
|
|
|
|
1 |
1939d |
1938d
|
11/26 |
1880d |
63346650c1a9
netrom: switch to sock timer API
|
|
inconsistent lock state in nr_find_socket
hams
|
C |
|
|
19 |
1931d |
1947d
|
11/26 |
1929d |
7314f5480f3e
netrom: fix locking in nr_find_socket()
|
|
kernel BUG at kernel/time/timer.c:LINE! (2)
hams
|
C |
|
|
5 |
1942d |
1944d
|
11/26 |
1929d |
202700e30740
net/hamradio/6pack: use mod_timer() to rearm timers
|
|
KASAN: use-after-free Read in nr_rx_frame
hams
|
syz |
|
|
2 |
1936d |
1943d
|
11/26 |
1929d |
7314f5480f3e
netrom: fix locking in nr_find_socket()
|
|
possible deadlock in nr_destroy_socket
hams
|
syz |
|
|
20 |
1932d |
1943d
|
11/26 |
1929d |
7314f5480f3e
netrom: fix locking in nr_find_socket()
|
|
KASAN: use-after-free Read in ax25_fillin_cb
hams
|
syz |
|
|
4 |
1950d |
1947d
|
11/26 |
1929d |
c433570458e4
ax25: fix a use-after-free in ax25_fillin_cb()
|