|
general protection fault in iommufd_ioas_change_process
iommu
prio:low
|
8 |
syz, C |
|
|
4 |
15h02m |
12d
|
22/29 |
never |
d616de490ec0
iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages
|
|
WARNING in pt_iommu_amdv1_init
iommu
|
-1 |
syz, C |
|
|
16 |
135d |
159d
|
29/29 |
101d |
8c4dc1a5025f
iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format
|
|
KMSAN: uninit-value in pfn_reader_next
iommu
|
7 |
syz, C |
|
|
395 |
210d |
218d
|
29/29 |
115d |
2724138b2f7f
iommufd: Initialize batch->kind in batch_clear()
|
|
WARNING in iopt_map_pages (3)
iommu
|
-1 |
syz, C |
|
|
4 |
259d |
265d
|
29/29 |
221d |
e6a973af1113
iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
|
|
kernel BUG in iommu_pages_start_incoherent
iommu
|
-1 |
|
|
|
3 |
252d |
262d
|
29/29 |
221d |
7a089c5d35aa
iommupt: Return ERR_PTR from _table_alloc()
|
|
divide error in iova_bitmap_alloc
iommu
|
2 |
syz, C |
|
|
1 |
312d |
326d
|
29/29 |
234d |
cb30dfa75d55
iommufd: Don't overflow during division for dirty tracking
|
|
KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
iommu
|
22 |
syz, C |
|
|
5 |
350d |
348d
|
29/29 |
304d |
4e034bf045b1
iommufd: Fix race during abort for file descriptors
|
|
WARNING in iopt_map_pages (2)
iommu
|
-1 |
syz, C |
|
|
4 |
418d |
431d
|
29/29 |
359d |
b42497e3c0e7
iommufd: Prevent ALIGN() overflow
|
|
UBSAN: shift-out-of-bounds in iova_bitmap_alloc
iommu
|
-1 |
syz, C |
done |
|
6 |
589d |
595d
|
28/29 |
480d |
e24c15510592
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
|
|
WARNING in iommufd_device_unbind
iommu
|
-1 |
syz |
error |
|
3 |
634d |
646d
|
28/29 |
480d |
d9df72c6acd6
iommu: iommufd: fix WARNING in iommufd_device_unbind
|
|
kernel BUG in dma_alloc_attrs
iommu
|
-1 |
syz, C |
|
|
4 |
679d |
683d
|
28/29 |
655d |
78b2770c935f
dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory
|
|
kernel BUG in trace_dma_unmap_sg
iommu
|
-1 |
syz, C |
|
|
5 |
701d |
703d
|
28/29 |
676d |
bfc4a245a794
dma-mapping: fix DMA API tracing for chained scatterlists
|
|
WARNING in iopt_map_pages
iommu
|
-1 |
syz, C |
error |
|
3 |
731d |
811d
|
28/29 |
676d |
8f6887349b2f
iommufd: Protect against overflow of ALIGN() during iova allocation
|
|
KASAN: slab-use-after-free Read in iommufd_vfio_ioas
iommu
|
19 |
syz, C |
done |
|
4 |
1013d |
1031d
|
25/29 |
952d |
6f9c4d8c468c
iommufd: Do not UAF during iommufd_put_object()
|
|
divide error in iommufd_test
iommu
|
2 |
syz, C |
done |
|
4 |
1035d |
1037d
|
25/29 |
983d |
2e22aac3ea9c
iommufd/selftest: Fix page-size check in iommufd_test_dirty()
|
|
WARNING in iommufd_access_destroy
iommu
|
-1 |
syz, C |
done |
|
3 |
1141d |
1143d
|
23/29 |
1052d |
99f98a7c0d69
iommufd: IOMMUFD_DESTROY should not increase the refcount
|
|
KASAN: slab-use-after-free Read in iopt_unmap_iova_range
iommu
|
19 |
syz, C |
error |
|
7 |
1160d |
1171d
|
23/29 |
1052d |
804ca14d04df
iommufd: Do not access the area pointer after unlocking
|
|
WARNING in iommufd_test_check_pages
iommu
|
-1 |
syz, C |
error |
|
4 |
1166d |
1216d
|
23/29 |
1066d |
9883c7f84053
mm/gup: do not return 0 from pin_user_pages_fast() for bad args
|
|
KMSAN: kernel-infoleak in iommufd_vfio_ioctl
iommu
|
9 |
syz, C |
|
|
15 |
1280d |
1293d
|
22/29 |
1178d |
b3551ead6163
iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
|
|
WARNING in dma_map_page_attrs
iommu
|
-1 |
syz, C |
unreliable |
|
304 |
2121d |
2138d
|
15/29 |
2112d |
683a9c7ed817
RDMA: Fix software RDMA drivers for dma mapping error
|
|
usb-fuzzer boot error: general protection fault in dma_direct_max_mapping_size
iommu
|
-1 |
|
|
|
21 |
2591d |
2594d
|
12/29 |
2573d |
1b5d9a6e9835
scsi: core: fix the dma_max_mapping_size call
|