|
KASAN: slab-use-after-free Read in input_dev_uevent (2)
prio:high
usb
input
|
19 |
syz, C |
error |
|
23 |
27d |
78d
|
26/29 |
never |
0b7bd20f6379
ALSA: caiaq: unregister the input device when probe fails
|
|
BUG: unable to handle kernel paging request in amd_mp2_pci_probe
prio:high
input
|
8 |
C |
|
|
2 |
74d |
74d
|
26/29 |
never |
65bcc5f89704
HID: amd_sfh: Validate PCI BAR size before mapping
|
|
WARNING in asus_remove
prio:low
input
usb
|
-1 |
syz, C |
|
|
295 |
57d |
270d
|
2/29 |
never |
HID: asus: Add check for cancelling fn_lock_sync_work
|
|
UBSAN: shift-out-of-bounds in s32ton (3)
input
usb
prio:high
|
-1 |
syz, C |
|
|
5 |
20d |
16d
|
24/29 |
never |
5fe63b415c63
HID: core: Fix out-of-bounds left shift by 32 in s32ton()
|
|
general protection fault in magicmouse_event
prio:high
usb
input
|
2 |
syz, C |
|
|
4 |
6d12h |
24d
|
24/29 |
never |
5b66b65cfd6f
HID: magicmouse: fix null pointer dereference in magicmouse_event()
|
|
general protection fault in wacom_intuos_irq
prio:high
input
|
10 |
syz, C |
error |
|
124 |
3d16h |
33d
|
24/29 |
never |
2f985de0afbe
HID: wacom: fix wacom_intuos_irq NULL pen_input deref
|
|
general protection fault in rmi_driver_suspend
prio:high
input
|
2 |
syz |
|
|
6 |
61d |
81d
|
26/29 |
never |
fe10579b6dc3
Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
|
|
KASAN: slab-use-after-free Read in hidraw_report_event
prio:high
input
usb
|
19 |
syz, C |
error |
|
4 |
181d |
182d
|
1/29 |
never |
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
|
|
KASAN: stack-out-of-bounds Read in cp2112_xfer
input
|
17 |
syz, C |
error |
|
8 |
376d |
406d
|
29/29 |
342d |
362f21536966
HID: cp2112: Add parameter validation to data length
|
|
KASAN: slab-out-of-bounds Read in mcp2221_raw_event
input
usb
|
19 |
syz, C |
|
|
1144 |
383d |
688d
|
29/29 |
382d |
b56cc41a3ae7
hid: fix I2C read buffer overflow in raw_event() for mcp2221
|
|
WARNING in follow_page_pte
input
usb
mm
|
-1 |
syz, C |
done |
|
6 |
446d |
446d
|
29/29 |
382d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
UBSAN: shift-out-of-bounds in s32ton (2)
input
usb
|
-1 |
syz, C |
|
|
4 |
462d |
469d
|
29/29 |
417d |
a6b87bfc2ab5
HID: core: Harden s32ton() against conversion to 0 bits
|
|
UBSAN: shift-out-of-bounds in __kfifo_alloc
input
usb
|
-1 |
syz, C |
|
|
33349 |
506d |
574d
|
29/29 |
475d |
6bf8ab7774a2
HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
|
|
KASAN: slab-use-after-free Read in steam_input_open
input
usb
|
19 |
syz, C |
done |
|
5 |
597d |
611d
|
28/29 |
503d |
e53fc232a65f
HID: hid-steam: Fix use-after-free when detaching device
|
|
WARNING in input_mt_init_slots
input
|
-1 |
syz, C |
inconclusive |
|
14301 |
804d |
2114d
|
28/29 |
735d |
99d3bf5f7377
Input: MT - limit max slots
206f533a0a7c
Input: uinput - reject requests with unreasonable number of slots
|
|
KASAN: slab-out-of-bounds Read in cougar_report_fixup
input
usb
|
17 |
syz, C |
|
|
31 |
784d |
817d
|
28/29 |
753d |
a6e9c391d45b
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
|
|
WARNING in implement
input
usb
|
-1 |
syz, C |
error |
done |
960 |
867d |
2597d
|
26/29 |
816d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
|
|
WARNING in hid_output_report
usb
input
|
-1 |
syz, C |
error |
|
3 |
884d |
903d
|
26/29 |
839d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
fba383985354
net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
|
|
KMSAN: uninit-value in asus_report_fixup
input
usb
|
17 |
syz, C |
done |
|
35 |
860d |
884d
|
26/29 |
839d |
89e1ee118d6f
hid: asus: asus_report_fixup: fix potential read out of bounds
|
|
WARNING in bcm5974_start_traffic/usb_submit_urb
input
|
-1 |
syz, C |
error |
|
41 |
948d |
2544d
|
25/29 |
944d |
2b9c3eb32a69
Input: bcm5974 - check endpoint type before starting traffic
|
|
KASAN: use-after-free Read in powermate_config_complete (4)
input
|
19 |
syz |
done |
unreliable |
14 |
1144d |
1516d
|
25/29 |
1040d |
5c15c60e7be6
Input: powermate - fix use-after-free in powermate_config_complete
|
|
KASAN: slab-use-after-free Read in input_dev_uevent
input
|
19 |
syz, C |
done |
|
7 |
1150d |
1162d
|
23/29 |
1110d |
dd613a4e45f8
HID: uclogic: Correct devm device reference for hidinput input_dev name
|
|
WARNING in pegasus_open/usb_submit_urb
input
usb
|
-1 |
syz, C |
|
|
7 |
1316d |
2327d
|
22/29 |
1236d |
b3d80fd27a3c
Input: pegasus-notetaker - check pipe type when probing
|
|
KASAN: slab-out-of-bounds Read in thrustmaster_probe
usb
input
|
17 |
syz, C |
unreliable |
|
92 |
1685d |
1709d
|
22/29 |
1340d |
fc3ef2e3297b
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
|
|
UBSAN: shift-out-of-bounds in hid_report_raw_event (2)
input
usb
|
-1 |
syz, C |
error |
|
1 |
1445d |
1441d
|
22/29 |
1340d |
ec61b4191858
HID: core: fix shift-out-of-bounds in hid_report_raw_event
|
|
memory leak in hidraw_report_event
input
usb
|
3 |
syz, C |
|
|
1 |
1615d |
1615d
|
22/29 |
1340d |
a5623a203cff
HID: hidraw: fix memory leak in hidraw_release()
|
|
WARNING in driver_unregister
input
usb
|
-1 |
syz, C |
|
|
1 |
1617d |
1613d
|
22/29 |
1340d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
WARNING in aiptek_open/usb_submit_urb
usb
input
|
-1 |
syz, C |
error |
|
2380 |
1676d |
2698d
|
22/29 |
1340d |
5600f6986628
Input: aiptek - properly check endpoint type
|
|
INFO: task hung in __input_unregister_device (4)
usb
input
|
1 |
syz, C |
done |
|
924 |
1512d |
1577d
|
22/29 |
1340d |
98e01215708b
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
|
|
KASAN: slab-out-of-bounds Write in betop_probe
input
usb
|
21 |
syz, C |
unreliable |
|
9 |
1893d |
2449d
|
20/29 |
1685d |
689e453a9b9c
HID: betop: fix slab-out-of-bounds Write in betop_probe
HID: betop: fix slab-out-of-bounds Write in betop_probe
|
|
WARNING in atp_close (3)
input
|
-1 |
syz, C |
|
|
125 |
1757d |
1849d
|
20/29 |
1693d |
9f3ccdc3f6ef
Input: appletouch - initialize work before device registration
|
|
WARNING: ODEBUG bug in corrupted (2)
usb
input
|
-1 |
syz, C |
error |
|
2 |
1762d |
1974d
|
20/29 |
1693d |
33812fc7c8d7
HID: magicmouse: Fix an error handling path in magicmouse_probe()
|
|
WARNING in hid_submit_ctrl/usb_submit_urb
input
usb
|
-1 |
syz, C |
done |
|
38 |
1877d |
1926d
|
20/29 |
1811d |
0a824efdb724
HID: usbhid: Fix warning caused by 0-length input reports
|
|
general protection fault in magicmouse_remove
usb
input
|
2 |
syz, C |
|
|
47 |
1961d |
1988d
|
20/29 |
1811d |
4b4f6cecca44
HID: magicmouse: fix NULL-deref on disconnect
|
|
memory leak in __usbhid_submit_report
input
usb
|
3 |
syz, C |
|
|
129 |
1881d |
2175d
|
20/29 |
1811d |
f7744fa16b96
HID: usbhid: free raw_report buffers in usbhid_stop
|
|
KMSAN: kernel-usb-infoleak in hid_submit_ctrl
input
usb
|
9 |
syz, C |
|
|
839 |
1985d |
2594d
|
20/29 |
1811d |
6be388f4a35d
HID: usbhid: fix info leak in hid_submit_ctrl
|
|
WARNING in input_register_device
input
usb
|
-1 |
syz, C |
error |
done |
11 |
2028d |
2180d
|
20/29 |
1811d |
b4104180a2ef
kobject_uevent: remove warning in init_uevent_argv()
|
|
UBSAN: shift-out-of-bounds in snto32
input
usb
|
-1 |
syz, C |
error |
|
58 |
2070d |
2142d
|
20/29 |
2025d |
a0312af1f94d
HID: core: detect and skip invalid inputs to snto32()
|
|
unexpected kernel reboot (3)
input
usb
|
-1 |
syz, C |
error |
error |
21132 |
2026d |
3026d
|
20/29 |
2025d |
c8e2fe13d1d1
x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
|
|
memory leak in wacom_probe
input
usb
|
3 |
syz, C |
|
|
26 |
2119d |
2174d
|
19/29 |
2056d |
37309f47e2f5
HID: wacom: Fix memory leakage caused by kfifo_alloc
|
|
WARNING in cm109_input_ev/usb_submit_urb
input
usb
|
-1 |
syz, C |
unreliable |
|
8 |
2145d |
2166d
|
19/29 |
2056d |
82e060904732
Input: cm109 - do not stomp on control URB
|
|
INFO: trying to register non-static key in uhid_dev_destroy
input
|
-1 |
syz, C |
unreliable |
done |
40 |
2252d |
2425d
|
15/29 |
2170d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage
input
usb
|
21 |
syz, C |
|
|
279 |
2250d |
2593d
|
15/29 |
2222d |
25a097f52046
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
|
|
BUG: corrupted list in mousedev_release
input
|
8 |
syz |
done |
|
5 |
2246d |
2247d
|
15/29 |
2222d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
INFO: task hung in locks_remove_posix
fs
input
usb
|
1 |
syz |
|
|
2231 |
2327d |
2349d
|
15/29 |
2292d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
|
KASAN: use-after-free Read in usbhid_close (3)
input
usb
|
19 |
syz, C |
|
|
6 |
2365d |
2393d
|
15/29 |
2292d |
0ed08faded1d
HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
|
|
general protection fault in timer_is_static_object
input
|
2 |
syz, C |
|
|
2 |
2526d |
2523d
|
15/29 |
2442d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
BUG: spinlock already unlocked in input_set_keycode
input
|
4 |
syz, C |
|
|
2 |
2535d |
2534d
|
15/29 |
2442d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
KASAN: slab-out-of-bounds Read in hid_field_extract
input
usb
|
17 |
syz, C |
|
|
6 |
2482d |
2516d
|
15/29 |
2442d |
8ec321e96e05
HID: Fix slab-out-of-bounds read in hid_field_extract
|
|
KASAN: global-out-of-bounds Write in kbd_event
usb
serial
input
|
21 |
syz, C |
|
|
6 |
2523d |
2546d
|
15/29 |
2509d |
b2b2dd71e085
tty: vt: keyboard: reject invalid keycodes
|
|
WARNING: ODEBUG bug in input_ff_destroy
input
usb
|
-1 |
syz, C |
|
|
6 |
2531d |
2539d
|
14/29 |
2523d |
fa3a5a1880c9
Input: ff-memless - kill timer in destroy()
|
|
KMSAN: uninit-value in lg4ff_set_autocenter_default
input
usb
|
7 |
syz, C |
|
|
1 |
2555d |
2555d
|
13/29 |
2525d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
KASAN: slab-out-of-bounds Write in ga_probe
input
|
21 |
syz, C |
|
|
5 |
2575d |
2597d
|
13/29 |
2546d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
general protection fault in pk_probe
input
usb
|
2 |
syz, C |
|
|
2 |
2614d |
2610d
|
13/29 |
2567d |
98375b86c791
HID: prodikeys: Fix general protection fault during probe
|
|
WARNING: ODEBUG bug in usbhid_disconnect (2)
input
usb
|
-1 |
syz, C |
|
|
48 |
2588d |
2610d
|
13/29 |
2567d |
2bcdacb70327
HID: sony: Fix memory corruption issue on cleanup.
|
|
general protection fault in __pm_runtime_resume
input
usb
pm
|
2 |
syz, C |
|
|
197 |
2588d |
2651d
|
13/29 |
2567d |
5f9242775bb6
HID: logitech: Fix general protection fault caused by Logitech driver
|
|
KASAN: slab-out-of-bounds Read in hidraw_ioctl
input
|
17 |
syz, C |
|
|
104 |
2594d |
2645d
|
13/29 |
2567d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
|
WARNING in __iforce_usb_xmit/usb_submit_urb
input
usb
|
-1 |
syz, C |
|
|
3 |
2635d |
2639d
|
12/29 |
2606d |
849f5ae3a513
Input: iforce - add sanity checks
|
|
WARNING in usbtouch_open
input
usb
|
-1 |
syz, C |
|
|
768 |
2632d |
2646d
|
12/29 |
2606d |
b55d996f057b
Input: usbtouchscreen - initialize PM mutex before using it
|
|
general protection fault in holtek_kbd_input_event
input
|
2 |
syz, C |
|
|
67 |
2637d |
2650d
|
12/29 |
2617d |
01ec0a5f19c8
HID: holtek: test for sanity of intfdata
|
|
KASAN: use-after-free Read in hiddev_release
input
usb
|
19 |
syz, C |
|
|
11 |
2627d |
2643d
|
12/29 |
2617d |
9c09b214f30e
HID: hiddev: avoid opening a disconnected device
6d4472d7bec3
HID: hiddev: do cleanup in failure of opening a device
|
|
KASAN: use-after-free Read in string
input
|
19 |
syz, C |
|
|
247 |
2735d |
2974d
|
12/29 |
2691d |
c03a0fd0b609
kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
|
|
BUG: GPF in non-whitelisted uaccess (non-canonical address?)
input
|
-1 |
syz, C |
|
|
10 |
2899d |
2906d
|
11/29 |
2880d |
8c01db7619f0
HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
|
|
KMSAN: uninit-value in synaptics_detect
input
|
7 |
syz, C |
|
|
137 |
2905d |
2957d
|
11/29 |
2904d |
f39f8688888a
Input: synaptics - avoid using uninitialized variable when probing
|
|
WARNING: kmalloc bug in input_mt_init_slots
input
|
-1 |
syz, C |
|
|
54 |
2923d |
2957d
|
11/29 |
2904d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
WARNING in input_alloc_absinfo
input
|
-1 |
syz, C |
|
|
318 |
2983d |
3056d
|
8/29 |
2981d |
100294cee9a9
Input: do not use WARN() in input_alloc_absinfo()
|
|
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
input
|
-1 |
syz, C |
|
|
2126 |
3093d |
3108d
|
5/29 |
3093d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|