|
WARNING in asus_remove
prio:low
input
usb
|
-1 |
syz, C |
|
|
295 |
2d23h |
215d
|
2/29 |
never |
HID: asus: Add check for cancelling fn_lock_sync_work
|
|
KASAN: slab-use-after-free Read in hidraw_report_event
prio:high
input
usb
|
19 |
syz, C |
error |
|
4 |
127d |
128d
|
10/29 |
never |
a4bc41504690
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
207853d46f7e
HID: synchronize input before cleaning up a failed probe
9ab8656548cd
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
|
|
general protection fault in rmi_driver_suspend
input
prio:high
|
2 |
syz |
|
|
6 |
6d20h |
27d
|
2/29 |
never |
Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
|
|
KASAN: stack-out-of-bounds Read in cp2112_xfer
input
|
17 |
syz, C |
error |
|
8 |
322d |
351d
|
29/29 |
288d |
362f21536966
HID: cp2112: Add parameter validation to data length
|
|
KASAN: slab-out-of-bounds Read in mcp2221_raw_event
input
usb
|
19 |
syz, C |
|
|
1144 |
328d |
634d
|
29/29 |
328d |
b56cc41a3ae7
hid: fix I2C read buffer overflow in raw_event() for mcp2221
|
|
WARNING in follow_page_pte
input
usb
mm
|
-1 |
syz, C |
done |
|
6 |
392d |
392d
|
29/29 |
328d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
UBSAN: shift-out-of-bounds in s32ton (2)
input
usb
|
-1 |
syz, C |
|
|
4 |
407d |
414d
|
29/29 |
362d |
a6b87bfc2ab5
HID: core: Harden s32ton() against conversion to 0 bits
|
|
UBSAN: shift-out-of-bounds in __kfifo_alloc
input
usb
|
-1 |
syz, C |
|
|
33349 |
452d |
520d
|
29/29 |
421d |
6bf8ab7774a2
HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
|
|
KASAN: slab-use-after-free Read in steam_input_open
input
usb
|
19 |
syz, C |
done |
|
5 |
543d |
556d
|
28/29 |
448d |
e53fc232a65f
HID: hid-steam: Fix use-after-free when detaching device
|
|
WARNING in input_mt_init_slots
input
|
-1 |
syz, C |
inconclusive |
|
14301 |
750d |
2060d
|
28/29 |
680d |
99d3bf5f7377
Input: MT - limit max slots
206f533a0a7c
Input: uinput - reject requests with unreasonable number of slots
|
|
KASAN: slab-out-of-bounds Read in cougar_report_fixup
input
usb
|
17 |
syz, C |
|
|
31 |
729d |
763d
|
28/29 |
698d |
a6e9c391d45b
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
|
|
WARNING in implement
input
usb
|
-1 |
syz, C |
error |
done |
960 |
812d |
2542d
|
26/29 |
762d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
|
|
WARNING in hid_output_report
usb
input
|
-1 |
syz, C |
error |
|
3 |
829d |
849d
|
26/29 |
784d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
fba383985354
net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
|
|
KMSAN: uninit-value in asus_report_fixup
input
usb
|
17 |
syz, C |
done |
|
35 |
806d |
830d
|
26/29 |
784d |
89e1ee118d6f
hid: asus: asus_report_fixup: fix potential read out of bounds
|
|
WARNING in bcm5974_start_traffic/usb_submit_urb
input
|
-1 |
syz, C |
error |
|
41 |
894d |
2489d
|
25/29 |
889d |
2b9c3eb32a69
Input: bcm5974 - check endpoint type before starting traffic
|
|
KASAN: use-after-free Read in powermate_config_complete (4)
input
|
19 |
syz |
done |
unreliable |
14 |
1090d |
1462d
|
25/29 |
986d |
5c15c60e7be6
Input: powermate - fix use-after-free in powermate_config_complete
|
|
KASAN: slab-use-after-free Read in input_dev_uevent
input
|
19 |
syz, C |
done |
|
7 |
1096d |
1107d
|
23/29 |
1055d |
dd613a4e45f8
HID: uclogic: Correct devm device reference for hidinput input_dev name
|
|
WARNING in pegasus_open/usb_submit_urb
input
usb
|
-1 |
syz, C |
|
|
7 |
1262d |
2272d
|
22/29 |
1181d |
b3d80fd27a3c
Input: pegasus-notetaker - check pipe type when probing
|
|
KASAN: slab-out-of-bounds Read in thrustmaster_probe
usb
input
|
17 |
syz, C |
unreliable |
|
92 |
1630d |
1654d
|
22/29 |
1285d |
fc3ef2e3297b
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
|
|
UBSAN: shift-out-of-bounds in hid_report_raw_event (2)
input
usb
|
-1 |
syz, C |
error |
|
1 |
1390d |
1386d
|
22/29 |
1285d |
ec61b4191858
HID: core: fix shift-out-of-bounds in hid_report_raw_event
|
|
memory leak in hidraw_report_event
input
usb
|
3 |
syz, C |
|
|
1 |
1561d |
1560d
|
22/29 |
1285d |
a5623a203cff
HID: hidraw: fix memory leak in hidraw_release()
|
|
WARNING in driver_unregister
input
usb
|
-1 |
syz, C |
|
|
1 |
1562d |
1558d
|
22/29 |
1285d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
WARNING in aiptek_open/usb_submit_urb
usb
input
|
-1 |
syz, C |
error |
|
2380 |
1622d |
2643d
|
22/29 |
1285d |
5600f6986628
Input: aiptek - properly check endpoint type
|
|
INFO: task hung in __input_unregister_device (4)
usb
input
|
1 |
syz, C |
done |
|
924 |
1458d |
1523d
|
22/29 |
1285d |
98e01215708b
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
|
|
KASAN: slab-out-of-bounds Write in betop_probe
input
usb
|
21 |
syz, C |
unreliable |
|
9 |
1839d |
2395d
|
20/29 |
1630d |
689e453a9b9c
HID: betop: fix slab-out-of-bounds Write in betop_probe
HID: betop: fix slab-out-of-bounds Write in betop_probe
|
|
WARNING in atp_close (3)
input
|
-1 |
syz, C |
|
|
125 |
1702d |
1795d
|
20/29 |
1638d |
9f3ccdc3f6ef
Input: appletouch - initialize work before device registration
|
|
WARNING: ODEBUG bug in corrupted (2)
usb
input
|
-1 |
syz, C |
error |
|
2 |
1708d |
1919d
|
20/29 |
1638d |
33812fc7c8d7
HID: magicmouse: Fix an error handling path in magicmouse_probe()
|
|
WARNING in hid_submit_ctrl/usb_submit_urb
input
usb
|
-1 |
syz, C |
done |
|
38 |
1822d |
1871d
|
20/29 |
1757d |
0a824efdb724
HID: usbhid: Fix warning caused by 0-length input reports
|
|
general protection fault in magicmouse_remove
usb
input
|
2 |
syz, C |
|
|
47 |
1907d |
1933d
|
20/29 |
1757d |
4b4f6cecca44
HID: magicmouse: fix NULL-deref on disconnect
|
|
memory leak in __usbhid_submit_report
input
usb
|
3 |
syz, C |
|
|
129 |
1827d |
2120d
|
20/29 |
1757d |
f7744fa16b96
HID: usbhid: free raw_report buffers in usbhid_stop
|
|
KMSAN: kernel-usb-infoleak in hid_submit_ctrl
input
usb
|
9 |
syz, C |
|
|
839 |
1931d |
2539d
|
20/29 |
1757d |
6be388f4a35d
HID: usbhid: fix info leak in hid_submit_ctrl
|
|
WARNING in input_register_device
input
usb
|
-1 |
syz, C |
error |
done |
11 |
1974d |
2125d
|
20/29 |
1757d |
b4104180a2ef
kobject_uevent: remove warning in init_uevent_argv()
|
|
UBSAN: shift-out-of-bounds in snto32
input
usb
|
-1 |
syz, C |
error |
|
58 |
2015d |
2088d
|
20/29 |
1971d |
a0312af1f94d
HID: core: detect and skip invalid inputs to snto32()
|
|
unexpected kernel reboot (3)
input
usb
|
-1 |
syz, C |
error |
error |
21132 |
1971d |
2972d
|
20/29 |
1971d |
c8e2fe13d1d1
x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
|
|
memory leak in wacom_probe
input
usb
|
3 |
syz, C |
|
|
26 |
2065d |
2119d
|
19/29 |
2002d |
37309f47e2f5
HID: wacom: Fix memory leakage caused by kfifo_alloc
|
|
WARNING in cm109_input_ev/usb_submit_urb
input
usb
|
-1 |
syz, C |
unreliable |
|
8 |
2090d |
2111d
|
19/29 |
2002d |
82e060904732
Input: cm109 - do not stomp on control URB
|
|
INFO: trying to register non-static key in uhid_dev_destroy
input
|
-1 |
syz, C |
unreliable |
done |
40 |
2198d |
2370d
|
15/29 |
2115d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage
input
usb
|
21 |
syz, C |
|
|
279 |
2195d |
2538d
|
15/29 |
2168d |
25a097f52046
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
|
|
BUG: corrupted list in mousedev_release
input
|
8 |
syz |
done |
|
5 |
2191d |
2193d
|
15/29 |
2168d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
INFO: task hung in locks_remove_posix
fs
input
usb
|
1 |
syz |
|
|
2231 |
2272d |
2295d
|
15/29 |
2237d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
|
KASAN: use-after-free Read in usbhid_close (3)
input
usb
|
19 |
syz, C |
|
|
6 |
2311d |
2338d
|
15/29 |
2237d |
0ed08faded1d
HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
|
|
general protection fault in timer_is_static_object
input
|
2 |
syz, C |
|
|
2 |
2471d |
2468d
|
15/29 |
2387d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
BUG: spinlock already unlocked in input_set_keycode
input
|
4 |
syz, C |
|
|
2 |
2481d |
2479d
|
15/29 |
2387d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
KASAN: slab-out-of-bounds Read in hid_field_extract
input
usb
|
17 |
syz, C |
|
|
6 |
2428d |
2461d
|
15/29 |
2387d |
8ec321e96e05
HID: Fix slab-out-of-bounds read in hid_field_extract
|
|
KASAN: global-out-of-bounds Write in kbd_event
usb
serial
input
|
21 |
syz, C |
|
|
6 |
2469d |
2491d
|
15/29 |
2455d |
b2b2dd71e085
tty: vt: keyboard: reject invalid keycodes
|
|
WARNING: ODEBUG bug in input_ff_destroy
input
usb
|
-1 |
syz, C |
|
|
6 |
2477d |
2484d
|
14/29 |
2468d |
fa3a5a1880c9
Input: ff-memless - kill timer in destroy()
|
|
KMSAN: uninit-value in lg4ff_set_autocenter_default
input
usb
|
7 |
syz, C |
|
|
1 |
2501d |
2500d
|
13/29 |
2471d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
KASAN: slab-out-of-bounds Write in ga_probe
input
|
21 |
syz, C |
|
|
5 |
2520d |
2542d
|
13/29 |
2491d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
general protection fault in pk_probe
input
usb
|
2 |
syz, C |
|
|
2 |
2559d |
2555d
|
13/29 |
2513d |
98375b86c791
HID: prodikeys: Fix general protection fault during probe
|
|
WARNING: ODEBUG bug in usbhid_disconnect (2)
input
usb
|
-1 |
syz, C |
|
|
48 |
2533d |
2555d
|
13/29 |
2513d |
2bcdacb70327
HID: sony: Fix memory corruption issue on cleanup.
|
|
general protection fault in __pm_runtime_resume
input
usb
pm
|
2 |
syz, C |
|
|
197 |
2533d |
2596d
|
13/29 |
2513d |
5f9242775bb6
HID: logitech: Fix general protection fault caused by Logitech driver
|
|
KASAN: slab-out-of-bounds Read in hidraw_ioctl
input
|
17 |
syz, C |
|
|
104 |
2540d |
2590d
|
13/29 |
2513d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
|
WARNING in __iforce_usb_xmit/usb_submit_urb
input
usb
|
-1 |
syz, C |
|
|
3 |
2580d |
2584d
|
12/29 |
2552d |
849f5ae3a513
Input: iforce - add sanity checks
|
|
WARNING in usbtouch_open
input
usb
|
-1 |
syz, C |
|
|
768 |
2577d |
2591d
|
12/29 |
2552d |
b55d996f057b
Input: usbtouchscreen - initialize PM mutex before using it
|
|
general protection fault in holtek_kbd_input_event
input
|
2 |
syz, C |
|
|
67 |
2583d |
2595d
|
12/29 |
2562d |
01ec0a5f19c8
HID: holtek: test for sanity of intfdata
|
|
KASAN: use-after-free Read in hiddev_release
input
usb
|
19 |
syz, C |
|
|
11 |
2573d |
2588d
|
12/29 |
2562d |
9c09b214f30e
HID: hiddev: avoid opening a disconnected device
6d4472d7bec3
HID: hiddev: do cleanup in failure of opening a device
|
|
KASAN: use-after-free Read in string
input
|
19 |
syz, C |
|
|
247 |
2680d |
2920d
|
12/29 |
2636d |
c03a0fd0b609
kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
|
|
BUG: GPF in non-whitelisted uaccess (non-canonical address?)
input
|
-1 |
syz, C |
|
|
10 |
2844d |
2851d
|
11/29 |
2826d |
8c01db7619f0
HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
|
|
KMSAN: uninit-value in synaptics_detect
input
|
7 |
syz, C |
|
|
137 |
2850d |
2903d
|
11/29 |
2850d |
f39f8688888a
Input: synaptics - avoid using uninitialized variable when probing
|
|
WARNING: kmalloc bug in input_mt_init_slots
input
|
-1 |
syz, C |
|
|
54 |
2868d |
2902d
|
11/29 |
2850d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
WARNING in input_alloc_absinfo
input
|
-1 |
syz, C |
|
|
318 |
2929d |
3001d
|
8/29 |
2926d |
100294cee9a9
Input: do not use WARN() in input_alloc_absinfo()
|
|
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
input
|
-1 |
syz, C |
|
|
2126 |
3039d |
3054d
|
5/29 |
3038d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|