KCSAN: data-race in __flush_work / __flush_work (2)
kernel
|
|
|
|
6 |
20d |
33d
|
25/27 |
never |
8bc35475ef1a
workqueue: Fix spruious data race in __flush_work()
|
WARNING in follow_pte
kernel
|
C |
|
|
187 |
12h50m |
66d
|
1/27 |
never |
mm: fix mmap_assert_locked() in follow_pte()
|
kernel BUG in binder_inc_ref_for_node
kernel
|
C |
error |
|
16721 |
27d |
56d
|
26/27 |
never |
11512c197d38
binder: fix descriptor lookup for context manager
|
WARNING in try_queue_bulk_in/usb_submit_urb
kernel
|
|
|
|
1 |
30d |
26d
|
26/27 |
never |
2374bf7558de
char: xillybus: Check USB endpoints when probing device
|
KMSAN: uninit-value in profile_hits (3)
kernel
|
C |
|
|
1529 |
41d |
256d
|
27/27 |
15d |
7c51f7bbf057
profiling: remove prof_cpu_mask
|
possible deadlock in __hrtimer_run_queues (2)
kernel
|
C |
error |
done |
16 |
135d |
167d
|
26/27 |
79d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
WARNING: suspicious RCU usage in __do_softirq
kernel
|
C |
|
|
199 |
131d |
158d
|
25/27 |
108d |
1dd1eff161bd
softirq: Fix suspicious RCU usage in __do_softirq()
|
BUG: unable to handle kernel NULL pointer dereference in hrtimer_active
kernel
|
|
|
|
1 |
210d |
208d
|
25/27 |
164d |
fe9f801355f0
net: veth: clear GRO when clearing XDP even when down
|
general protection fault in timerqueue_del (2)
kernel
|
C |
done |
done |
3 |
262d |
403d
|
25/27 |
220d |
6f861765464f
fs: Block writes to mounted block devices
|
general protection fault in usb_hub_create_port_device
kernel
|
C |
done |
done |
4 |
362d |
367d
|
25/27 |
261d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
general protection fault in serio_handle_event
kernel
|
C |
done |
done |
6 |
357d |
365d
|
25/27 |
261d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
general protection fault in nfc_register_device
kernel
|
C |
done |
|
190 |
263d |
376d
|
25/27 |
261d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
general protection fault in wpan_phy_register
kernel
|
C |
done |
done |
7 |
354d |
361d
|
25/27 |
261d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
general protection fault in hci_register_dev
kernel
|
C |
unreliable |
done |
4 |
359d |
366d
|
25/27 |
261d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
KASAN: slab-use-after-free Read in pwq_release_workfn
kernel
|
C |
unreliable |
|
79 |
323d |
374d
|
25/27 |
261d |
643445531829
workqueue: Fix UAF report by KASAN in pwq_release_workfn()
|
memory leak in binder_transaction (2)
kernel
|
C |
|
|
2 |
362d |
657d
|
25/27 |
261d |
1aa3aaf8953c
binder: fix memory leaks of spam and pending work
|
net-next test error: UBSAN: array-index-out-of-bounds in alloc_pid
kernel
|
|
|
|
30 |
430d |
432d
|
23/27 |
331d |
b69f0aeb0689
pid: Replace struct pid 1-element array with flex-array
|
linux-next test error: UBSAN: array-index-out-of-bounds in alloc_pid
kernel
|
|
|
|
9 |
479d |
479d
|
23/27 |
331d |
b69f0aeb0689
pid: Replace struct pid 1-element array with flex-array
|
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (2)
kernel
|
C |
|
|
2688 |
332d |
1288d
|
23/27 |
331d |
39285e124edb
net: team: do not use dynamic lockdep key
|
upstream build error (20)
kernel
|
|
|
|
498 |
394d |
433d
|
23/27 |
345d |
0a9567ac5e6a
x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
|
WARNING: ODEBUG bug in __mod_timer
kernel
|
|
|
|
1 |
505d |
467d
|
23/27 |
345d |
8b64d420fe24
debugobjects: Recheck debug_objects_enabled before reporting
|
KCSAN: data-race in do_timer_create / do_timer_create (8)
kernel
|
|
|
|
9 |
474d |
505d
|
23/27 |
345d |
8ce8849dd1e7
posix-timers: Ensure timer ID search-loop limit is valid
|
possible deadlock in __mod_timer (2)
kernel
|
|
|
|
1 |
486d |
486d
|
22/27 |
434d |
eb799279fb1f
debugobjects: Don't wake up kswapd from fill_pool()
|
upstream boot error: BUG: unable to handle kernel NULL pointer dereference in load_balance
kernel
|
|
|
|
5 |
485d |
491d
|
22/27 |
434d |
2b951b0efbaa
ARM: 9297/1: vfp: avoid unbalanced stack on 'success' return path
|
kernel BUG in workingset_activation (2)
kernel
|
C |
inconclusive |
done |
40 |
470d |
662d
|
22/27 |
434d |
0143d148d1e8
usb: usbfs: Enforce page requirements for mmap
|
WARNING: stack going in the wrong direction? at do_syscall_64
kernel
|
|
|
|
193 |
563d |
570d
|
22/27 |
457d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
WARNING: stack going in the wrong direction? at finish_task_switch.isra.NUM
kernel
|
|
|
|
2 |
565d |
567d
|
22/27 |
457d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
WARNING in c_start (2)
kernel
|
|
|
|
616173 |
530d |
548d
|
22/27 |
457d |
e7304080e0e5
cpumask: relax sanity checking constraints
|
WARNING: locking bug in umh_complete
kernel
|
|
|
|
1 |
594d |
590d
|
22/27 |
457d |
eedeb787ebb5
freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL
|
memory leak in copy_process (5)
kernel
|
C |
|
|
1 |
554d |
550d
|
22/27 |
457d |
2aab4b969002
af_unix: fix struct pid leaks in OOB support
|
general protection fault in hrtimer_active (5)
kernel
|
C |
error |
|
22 |
572d |
576d
|
22/27 |
457d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
KMSAN: uninit-value in qdisc_run
kernel
|
C |
|
|
2 |
669d |
605d
|
22/27 |
457d |
3a415d59c1db
net/sched: sch_taprio: fix possible use-after-free
|
kernel BUG in __text_poke
kernel
|
C |
|
|
80 |
761d |
936d
|
22/27 |
561d |
1d5f82d9dd47
bpf, x86: fix freeing of not-finalized bpf_prog_pack
d24d2a2b0a81
bpf: bpf_prog_pack: Set proper size before freeing ro_header
|
kernel panic: corrupted stack end in vm_area_alloc
kernel
|
|
|
|
1 |
795d |
795d
|
22/27 |
561d |
b81d591386c3
riscv: Increase stack size under KASAN
|
inconsistent lock state in fs_reclaim_acquire (3)
kernel
|
C |
|
|
2 |
676d |
682d
|
22/27 |
561d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
WARNING in c_start
kernel
|
|
|
|
75097 |
692d |
694d
|
22/27 |
561d |
80493877d7d0
Revert "cpumask: fix checking valid cpu range".
|
WARNING in exit_tasks_rcu_finish
kernel
|
C |
done |
|
20 |
815d |
818d
|
22/27 |
561d |
0356d4e66214
rcu-tasks: Track blocked RCU Tasks Trace readers
|
linux-next boot error: general protection fault in driver_bound
kernel
|
|
|
|
1 |
753d |
753d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
panic: runtime error: floating point error
kernel
|
|
|
|
2 |
573d |
852d
|
22/27 |
561d |
59f5ede3bc0f
x86/fpu: Prevent FPU state corruption
|
inconsistent lock state in kmem_cache_alloc_trace (2)
kernel
|
|
|
|
2 |
690d |
691d
|
22/27 |
561d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
kernel BUG in __filemap_get_folio
kernel
|
C |
done |
|
814 |
700d |
871d
|
22/27 |
561d |
63b1898fffcd
XArray: Disallow sibling entries of nodes
|
KASAN: use-after-free Read in dev_uevent
kernel
|
syz |
|
|
54 |
568d |
1541d
|
22/27 |
561d |
16b1941eac2b
usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
|
memory leak in watch_queue_set_size
kernel
|
C |
|
|
1 |
903d |
896d
|
22/27 |
561d |
b490207017ba
watch_queue: Free the page array when watch_queue is dismantled
|
BUG: unable to handle kernel paging request in get_desc
kernel
|
syz |
error |
|
8 |
661d |
673d
|
22/27 |
561d |
97650148a15e
x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
|
upstream test error: WARNING in __queue_work
kernel
|
|
|
|
1 |
743d |
739d
|
22/27 |
561d |
deee93d13d38
Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works
|
upstream boot error: BUG: corrupted list in copy_process
kernel
|
|
|
|
1 |
755d |
755d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
usb-testing boot error: general protection fault in __handle_irq_event_percpu
kernel
|
|
|
|
1 |
740d |
740d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
KASAN: use-after-free Read in raw_notifier_call_chain
kernel
|
|
|
|
68 |
648d |
886d
|
22/27 |
561d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
KASAN: use-after-free Read in notifier_call_chain
kernel
|
C |
error |
|
157 |
653d |
659d
|
22/27 |
561d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
upstream build error (18)
kernel
|
|
|
|
20 |
563d |
834d
|
22/27 |
561d |
e68b823ab0ba
arm64/hugetlb: Fix building errors in huge_ptep_clear_flush()
|
KASAN: vmalloc-out-of-bounds Read in __text_poke
kernel
|
|
|
|
5 |
864d |
936d
|
22/27 |
561d |
d24d2a2b0a81
bpf: bpf_prog_pack: Set proper size before freeing ro_header
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (2)
kernel
|
C |
|
|
2 |
710d |
710d
|
22/27 |
561d |
e5b0d06d9b10
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
|
upstream boot error: general protection fault in __get_vm_area_node
kernel
|
|
|
|
1 |
753d |
753d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
WARNING in binder_alloc_vma_close
kernel
|
C |
done |
|
18 |
713d |
803d
|
22/27 |
561d |
b0cab80ecd54
android: binder: fix lockdep check on clearing vma
|
KASAN: slab-out-of-bounds Write in watch_queue_set_filter
kernel
|
C |
inconclusive |
|
7 |
902d |
905d
|
22/27 |
561d |
c993ee0f9f81
watch_queue: Fix filter limit check
|
upstream boot error: BUG: unable to handle kernel paging request in copy_thread
kernel
|
|
|
|
1 |
753d |
753d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
usb-testing boot error: BUG: unable to handle kernel paging request in copy_namespaces
kernel
|
|
|
|
1 |
738d |
738d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
BUG: sleeping function called from invalid context in binder_ioctl
kernel
|
C |
done |
|
30 |
838d |
844d
|
22/27 |
561d |
aed86f8add0e
binder: fix atomic sleep when get extended error
|
linux-next boot error: BUG: unable to handle kernel paging request in copy_namespaces
kernel
|
|
|
|
1 |
753d |
753d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
linux-next boot error: general protection fault in rcu_core
kernel
|
|
|
|
1 |
754d |
754d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
upstream boot error: WARNING in copy_process
kernel
|
|
|
|
5 |
752d |
755d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
general protection fault in reweight_entity
kernel
|
C |
error |
done |
10 |
937d |
991d
|
22/27 |
561d |
13765de8148f
sched/fair: Fix fault in reweight_entity
|
kernel BUG in __page_mapcount
kernel
|
C |
error |
|
45 |
961d |
1196d
|
22/27 |
561d |
24d7275ce279
fs/proc: task_mmu.c: don't read mapcount for migration entry
|
upstream boot error: general protection fault in copy_signal
kernel
|
|
|
|
1 |
754d |
754d
|
22/27 |
561d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
kernel BUG in binder_alloc_deferred_release
kernel
|
C |
done |
|
4 |
809d |
810d
|
22/27 |
561d |
a43cfc87caaf
android: binder: stop saving a pointer to the VMA
|
general protection fault in shm_close
kernel
|
C |
done |
|
48 |
662d |
663d
|
22/27 |
561d |
b6305049f306
ipc/shm: call underlying open/close vm_ops
|
general protection fault in binder_alloc_new_buf
kernel
|
C |
error |
|
315 |
717d |
748d
|
22/27 |
561d |
1da52815d5f1
binder: fix alloc->vma_vm_mm null-ptr dereference
|
BUG: unable to handle kernel paging request in percpu_counter_add_batch
kernel
|
|
|
|
140 |
585d |
687d
|
22/27 |
561d |
64b4c411a6c7
ipc/msg.c: fix percpu_counter use after free
|
KASAN: use-after-free Read in __post_watch_notification
kernel
|
C |
inconclusive |
|
1 |
775d |
773d
|
22/27 |
561d |
e64ab2dbd882
watch_queue: Fix missing locking in add_watch_to_object()
|
BUG: sleeping function called from invalid context in vm_area_dup
kernel
|
C |
|
|
3 |
688d |
688d
|
22/27 |
561d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
KASAN: use-after-free Read in task_work_run (2)
kernel
|
C |
unreliable |
|
18 |
640d |
732d
|
22/27 |
561d |
517e6a301f34
perf: Fix perf_pending_task() UaF
|
memory leak in do_seccomp (2)
kernel
|
C |
|
|
4 |
744d |
1293d
|
22/27 |
561d |
a1140cb215fa
seccomp: Move copy_seccomp() to no failure path.
|
general protection fault in binder_alloc_print_pages
kernel
|
C |
error |
|
157 |
717d |
748d
|
22/27 |
561d |
1da52815d5f1
binder: fix alloc->vma_vm_mm null-ptr dereference
|
KASAN: null-ptr-deref Read in __free_pages
kernel
|
C |
inconclusive |
|
21 |
640d |
902d
|
22/27 |
561d |
a635415a064e
watch_queue: Fix NULL dereference in error cleanup
|
KASAN: use-after-free Read in net_tx_action
kernel
|
C |
inconclusive |
|
3 |
696d |
741d
|
22/27 |
561d |
ebda44da44f6
net: sched: fix race condition in qdisc_graft()
|
KASAN: use-after-free Read in post_one_notification
kernel
|
C |
inconclusive |
|
19 |
701d |
901d
|
22/27 |
561d |
353f7988dd84
watchqueue: make sure to serialize 'wqueue->defunct' properly
|
memory leak in setup_mq_sysctls
kernel
|
C |
|
|
2 |
639d |
810d
|
22/27 |
561d |
db7cfc380900
ipc: Free mq_sysctls if ipc namespace creation failed
|
kernel panic: stack is corrupted in sys_clock_nanosleep
kernel
|
|
|
|
2 |
739d |
820d
|
22/27 |
561d |
b81d591386c3
riscv: Increase stack size under KASAN
|
WARNING in __queue_work (3)
kernel
|
syz |
error |
|
953 |
662d |
1496d
|
22/27 |
561d |
877afadad2dc
Bluetooth: When HCI work queue is drained, only queue chained work
|
WARNING in static_key_slow_try_dec (3)
kernel
|
C |
|
|
26 |
572d |
732d
|
22/27 |
561d |
921ebde3c0d2
netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
|
possible deadlock in ktime_get_coarse_ts64
kernel
|
|
|
|
1 |
1039d |
1038d
|
20/27 |
914d |
5e0bc3082e2e
bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
|
WARNING: ODEBUG bug in really_probe
kernel
|
|
|
|
1 |
984d |
978d
|
20/27 |
914d |
33812fc7c8d7
HID: magicmouse: Fix an error handling path in magicmouse_probe()
|
WARNING in static_key_slow_try_dec (2)
kernel
|
C |
unreliable |
|
5417 |
1053d |
1121d
|
20/27 |
914d |
f7d8a19f9a05
Revert "KVM: x86: Open code necessary bits of kvm_lapic_set_base() at vCPU RESET"
|
WARNING in emulate_vsyscall
kernel
|
C |
done |
done |
3890 |
1077d |
1258d
|
20/27 |
914d |
d4ffd5df9d18
x86/fault: Fix wrong signal when vsyscall fails with pkey
|
inconsistent lock state in kmem_cache_alloc_trace
kernel
|
|
|
|
36 |
997d |
998d
|
20/27 |
914d |
8b40a9d53d4f
ipv6: use GFP_ATOMIC in rt6_probe()
|
WARNING in hrtimer_forward
kernel
|
C |
done |
done |
217 |
959d |
1443d
|
20/27 |
914d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
KMSAN: uninit-value in from_kuid
kernel
|
|
|
|
10 |
938d |
1015d
|
20/27 |
914d |
3cb6ee991496
9p: only copy valid iattrs in 9P2000.L setattr implementation
|
UBSAN: array-index-out-of-bounds in ktime_mono_to_any
kernel
|
|
|
|
4 |
1033d |
1034d
|
20/27 |
914d |
6dc25401cba4
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
|
INFO: rcu detected stall in br_multicast_query_expired
kernel
|
C |
inconclusive |
|
2 |
991d |
991d
|
20/27 |
914d |
f83a112bd91a
net: bridge: mcast: add and enforce startup query interval minimum
|
WARNING in trc_read_check_handler
kernel
|
C |
unreliable |
done |
40 |
1041d |
1129d
|
20/27 |
914d |
96017bf90397
rcu-tasks: Simplify trc_read_check_handler() atomic operations
|
general protection fault in hrtimer_active (3)
kernel
|
syz |
done |
error |
34 |
949d |
1253d
|
20/27 |
914d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
KASAN: use-after-free Write in dec_rlimit_ucounts
kernel
|
C |
|
|
4 |
1115d |
1148d
|
20/27 |
1032d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
bbb6d0f3e1fe
ucounts: Increase ucounts reference counter before the security hook
|
net-next build error (4)
kernel
|
|
|
|
4 |
1100d |
1101d
|
20/27 |
1033d |
ea7b4244b365
x86/setup: Explicitly include acpi.h
|
memory leak in kobject_set_name_vargs (4)
kernel
|
C |
|
|
171 |
1100d |
1387d
|
20/27 |
1033d |
8fd0c1b0647a
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
|
WARNING in ex_handler_fprestore
kernel
|
C |
done |
|
5 |
1195d |
1202d
|
20/27 |
1033d |
484cea4f362e
x86/fpu: Prevent state corruption in __fpu__restore_sig()
|
bpf-next build error (3)
kernel
|
|
|
|
10 |
1089d |
1259d
|
20/27 |
1033d |
7e32a09fdcb3
bpf: tcp: Remove comma which is causing build error
|
KASAN: use-after-free Write in alloc_ucounts
kernel
|
syz |
|
|
7 |
1131d |
1148d
|
20/27 |
1033d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
BUG: using smp_processor_id() in preemptible code in clock_was_set
kernel
|
C |
done |
|
231 |
1121d |
1122d
|
20/27 |
1033d |
9482fd71dbb8
hrtimer: Use raw_cpu_ptr() in clock_was_set()
|
kernel BUG in put_ucounts
kernel
|
|
|
|
3 |
1059d |
1145d
|
20/27 |
1033d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
KASAN: use-after-free Write in put_ucounts
kernel
|
|
|
|
3 |
1146d |
1148d
|
20/27 |
1033d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
upstream boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0)
kernel
|
|
|
|
235 |
1154d |
1162d
|
20/27 |
1033d |
c43ddbf97f46
scsi: virtio_scsi: Do not overwrite SCSI status
|
BUG: unable to handle kernel paging request in csum_partial (3)
kernel
|
C |
done |
|
1 |
1119d |
1150d
|
20/27 |
1033d |
9cf448c200ba
ip6_gre: add validation for csum_start
1d011c4803c7
ip_gre: add validation for csum_start
|
net build error (3)
kernel
|
|
|
|
29 |
1096d |
1101d
|
20/27 |
1033d |
ea7b4244b365
x86/setup: Explicitly include acpi.h
|
possible deadlock in __fs_reclaim_acquire
kernel
|
syz |
unreliable |
|
672 |
1150d |
1161d
|
20/27 |
1033d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
WARNING: suspicious RCU usage in __ext4_mark_inode_dirty
kernel
|
|
|
|
1 |
1191d |
1190d
|
20/27 |
1033d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
KASAN: use-after-free Write in get_ucounts
kernel
|
syz |
unreliable |
done |
7 |
1130d |
1157d
|
20/27 |
1033d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0)
kernel
|
|
|
|
27 |
1153d |
1158d
|
20/27 |
1033d |
c43ddbf97f46
scsi: virtio_scsi: Do not overwrite SCSI status
|
memory leak in __send_signal
kernel
|
syz |
|
|
3 |
1175d |
1189d
|
20/27 |
1033d |
399f8dd9a866
signal: Prevent sigqueue caching after task got released
|
BUG: unable to handle kernel access to user memory in schedule_tail
kernel
|
|
|
|
21843 |
1254d |
1277d
|
20/27 |
1033d |
285a76bb2cf5
riscv: evaluate put_user() arg before enabling user access
|
WARNING: suspicious RCU usage in do_nanosleep
kernel
|
|
|
|
1 |
1219d |
1219d
|
20/27 |
1033d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
WARNING: suspicious RCU usage in dup_mmap
kernel
|
|
|
|
1 |
1199d |
1199d
|
20/27 |
1033d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
BUG: scheduling while atomic: syz-executor/ADDR
kernel
|
C |
done |
|
5 |
1108d |
1165d
|
20/27 |
1033d |
72ff2bf04db2
crypto: aesni - xts_crypt() return if walk.nbytes is 0
|
BUG: sleeping function called from invalid context in __fdget_pos
kernel
|
|
|
|
4 |
1105d |
1167d
|
20/27 |
1033d |
821720b9f34e
crypto: x86/aes-ni - add missing error checks in XTS code
|
memory leak in copy_process (2)
kernel
|
C |
|
|
2 |
1273d |
1273d
|
20/27 |
1033d |
f60a85cad677
bpf: Fix umd memory leak in copy_process()
|
WARNING in handle_mm_fault
kernel
|
|
|
|
5 |
1272d |
1276d
|
20/27 |
1033d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
WARNING: suspicious RCU usage in get_timespec64
kernel
|
|
|
|
3 |
1203d |
1252d
|
20/27 |
1033d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
UBSAN: shift-out-of-bounds in profile_init
kernel
|
C |
unreliable |
|
23 |
1101d |
1151d
|
20/27 |
1033d |
2d186afd04d6
profiling: fix shift-out-of-bounds bugs
|
bpf build error (3)
kernel
|
|
|
|
15 |
1089d |
1101d
|
20/27 |
1033d |
ea7b4244b365
x86/setup: Explicitly include acpi.h
|
UBSAN: shift-out-of-bounds in load_balance
kernel
|
syz |
|
|
2167 |
1218d |
1322d
|
20/27 |
1033d |
39a2a6eb5c9b
sched/fair: Fix shift-out-of-bounds in load_balance()
|
KASAN: use-after-free Read in firmware_fallback_sysfs
kernel
|
C |
error |
|
16514 |
1115d |
1314d
|
20/27 |
1033d |
75d95e2e39b2
firmware_loader: fix use-after-free in firmware_fallback_sysfs
|
memory leak in prepare_creds (2)
kernel
|
C |
|
|
2 |
1171d |
1266d
|
20/27 |
1033d |
f60a85cad677
bpf: Fix umd memory leak in copy_process()
|
WARNING: suspicious RCU usage in get_signal
kernel
|
|
|
|
1 |
1224d |
1220d
|
20/27 |
1033d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
KASAN: use-after-free Read in check_all_holdout_tasks_trace
kernel
|
syz |
done |
|
4 |
1135d |
1205d
|
20/27 |
1033d |
1d10bf55d85d
rcu-tasks: Don't delete holdouts within trc_inspect_reader()
|
WARNING in futex_requeue
kernel
|
syz |
|
|
4 |
1097d |
1102d
|
20/27 |
1033d |
4f07ec0d76f2
futex: Prevent inconsistent state and exit race
|
WARNING in __static_key_slow_dec
kernel
|
C |
unreliable |
|
19 |
1096d |
1100d
|
20/27 |
1033d |
6d5f1ef83868
bonding: Fix negative jump label count on nested bonding
|
KASAN: global-out-of-bounds Read in netlink_policy_dump_add_policy (2)
kernel
|
C |
done |
|
2 |
1307d |
1307d
|
20/27 |
1200d |
33b347503f01
vdpa: Define vdpa mgmt device, ops and a netlink interface
|
KASAN: use-after-free Read in __cpuhp_state_remove_instance
kernel
|
C |
unreliable |
done |
2726 |
1268d |
1289d
|
20/27 |
1237d |
470ec4ed8c91
io-wq: fix double put of 'wq' in error path
|
WARNING in qp_broker_alloc
kernel
|
C |
inconclusive |
|
24 |
1292d |
1327d
|
20/27 |
1247d |
2fd10bcf0310
drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
|
memory leak in prepare_creds
kernel
|
C |
|
|
10 |
1297d |
1472d
|
19/27 |
1277d |
f26c08b444df
io_uring: fix file leak on error path of io ctx creation
|
general protection fault in rose_transmit_clear_request
kernel
|
C |
done |
|
5 |
1406d |
1872d
|
19/27 |
1277d |
3b3fd068c56e
rose: Fix Null pointer dereference in rose_send_frame()
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl
kernel
|
C |
|
|
22 |
1306d |
1390d
|
19/27 |
1277d |
31dcb6c30a26
misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
|
UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn
kernel
|
C |
done |
|
604 |
1371d |
1448d
|
19/27 |
1277d |
12cb908a11b2
x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes
84da009f06e6
x86/sev-es: Use new for_each_insn_prefix() macro to loop over prefixes bytes
4e9a5ae8df5b
x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
|
BUG: unable to handle kernel NULL pointer dereference in call_rcu
kernel
|
C |
done |
|
85 |
1348d |
1351d
|
19/27 |
1277d |
13384f6125ad
kasan: fix null pointer dereference in kasan_record_aux_stack
|
memory leak in copy_process
kernel
|
C |
|
|
23 |
1295d |
1392d
|
19/27 |
1277d |
450677dcb0cc
mm/madvise: fix memory leak from process_madvise
|
INFO: rcu detected stall in process_one_work (3)
kernel
|
C |
done |
done |
1 |
1431d |
1473d
|
15/27 |
1391d |
1d0e850a49a5
afs: Fix cell removal
|
WARNING in binder_transaction_buffer_release (2)
kernel
|
C |
done |
done |
442 |
1524d |
1564d
|
15/27 |
1391d |
e8b8ae7ce32e
binder: Remove bogus warning on failed same-process transaction
|
KASAN: unknown-crash Read in do_exit
kernel
|
C |
inconclusive |
done |
2 |
1449d |
1454d
|
15/27 |
1391d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
WARNING in syscall_exit_to_user_mode
kernel
|
C |
done |
done |
1 |
1429d |
1457d
|
15/27 |
1391d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
WARNING in get_signal
kernel
|
C |
done |
|
2 |
1434d |
1436d
|
15/27 |
1391d |
7b3c36fc4c23
ptrace: fix task_join_group_stop() for the case when current is traced
|
kernel panic: stack is corrupted in get_kernel_gp_address
kernel
|
syz |
done |
done |
1 |
1424d |
1457d
|
15/27 |
1391d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
KASAN: out-of-bounds Read in __switch_to (2)
kernel
|
syz |
done |
done |
1 |
1439d |
1435d
|
15/27 |
1391d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
WARNING in arch_install_hw_breakpoint
kernel
|
C |
inconclusive |
done |
8 |
1878d |
1994d
|
15/27 |
1391d |
e898e69d6b94
x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
|
general protection fault in qp_release_pages
kernel
|
C |
done |
|
2 |
1427d |
1426d
|
15/27 |
1391d |
90ca6333fd65
VMCI: check return value of get_user_pages_fast() for errors
|
KASAN: stack-out-of-bounds Read in csd_lock_record
kernel
|
C |
|
|
226 |
1522d |
1527d
|
15/27 |
1391d |
35feb60474bf
kernel/smp: Provide CSD lock timeout diagnostics
|
WARNING in irqentry_exit
kernel
|
C |
error |
done |
2080 |
1426d |
1492d
|
15/27 |
1391d |
4d004099a668
lockdep: Fix lockdep recursion
|
memory leak in do_seccomp
kernel
|
C |
|
|
6 |
1461d |
1488d
|
15/27 |
1428d |
a566a9012acd
seccomp: don't leak memory when filter install races
|
INFO: rcu detected stall in cleanup_net (4)
kernel
|
C |
done |
|
5 |
1463d |
1459d
|
15/27 |
1428d |
b5b73b26b3ca
taprio: Fix allowing too small intervals
|
general protection fault in x86_fsgsbase_read_task
kernel
|
C |
done |
|
2 |
1486d |
1486d
|
15/27 |
1452d |
8ab49526b53d
x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
|
WARNING in idtentry_exit_cond_rcu
kernel
|
syz |
|
|
6 |
1525d |
1522d
|
15/27 |
1452d |
bce9b042ec73
x86/traps: Disable interrupts in exc_aligment_check()
|
linux-next boot error: WARNING in mem_cgroup_css_alloc
kernel
|
|
|
|
6 |
1486d |
1486d
|
15/27 |
1452d |
9f457179244a
mm: memcontrol: fix warning when allocating the root cgroup
|
general protection fault in syscall_return_slowpath
kernel
|
syz |
inconclusive |
done |
1 |
1558d |
1644d
|
15/27 |
1452d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
INFO: task hung in __do_sys_reboot
kernel
|
|
|
|
1554 |
1468d |
1524d
|
15/27 |
1452d |
b292b50b0efc
driver core: Fix probe_count imbalance in really_probe()
|
KASAN: stack-out-of-bounds Read in update_stack_state
kernel
|
C |
unreliable |
done |
388 |
1695d |
2390d
|
15/27 |
1481d |
4ee7c60de83a
init, tracing: Add initcall trace events
|
PANIC: double fault in fixup_bad_iret
kernel
|
C |
error |
|
11753 |
1521d |
1562d
|
15/27 |
1499d |
5144f8a8dfd7
compiler_types.h: Add __no_sanitize_{address,undefined} to noinstr
|
KCSAN: data-race in copy_process / release_task
kernel
|
|
|
|
154 |
1528d |
1656d
|
15/27 |
1499d |
c17d1a3a8ee4
fork: annotate data race in copy_process()
|
WARNING in enqueue_task_dl
kernel
|
C |
done |
|
13 |
1543d |
2120d
|
15/27 |
1499d |
740797ce3a12
sched/core: Fix PI boosting between RT and DEADLINE tasks
|
KCSAN: data-race in copy_process / copy_process (2)
kernel
|
|
|
|
294 |
1528d |
1706d
|
15/27 |
1499d |
c17d1a3a8ee4
fork: annotate data race in copy_process()
|
PANIC: double fault in check_preemption_disabled
kernel
|
C |
|
|
2181 |
1530d |
1534d
|
15/27 |
1499d |
c7aadc09321d
x86/entry: Increase entry_stack size to a full page
|
BUG: MAX_LOCKDEP_CHAINS too low!
kernel
|
C |
done |
|
17240 |
1513d |
2171d
|
15/27 |
1513d |
e7511f560f54
bonding: remove useless stats_lock_key
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
general protection fault in kobject_get (2)
kernel
|
|
|
|
2 |
1542d |
1571d
|
15/27 |
1513d |
11a0ae4c4bff
RDMA: Allow ib_client's to fail when add() is called
|
BUG: stack guard page was hit in deref_stack_reg
kernel
|
|
|
|
2 |
1578d |
1638d
|
15/27 |
1513d |
dd912306ff00
net: fix a potential recursive NETDEV_FEAT_CHANGE
|
BUG: stack guard page was hit in update_stack_state
kernel
|
|
|
|
5 |
1663d |
1677d
|
15/27 |
1513d |
dd912306ff00
net: fix a potential recursive NETDEV_FEAT_CHANGE
|
WARNING in __mmdrop
kernel
|
syz |
done |
|
14 |
1868d |
1877d
|
15/27 |
1532d |
3d2c7d370475
Revert "vhost: access vq metadata through kernel virtual address"
|
WARNING in __vm_enough_memory (2)
kernel
|
syz |
done |
|
6 |
1603d |
1606d
|
15/27 |
1542d |
dadbd85f2afc
mm: Fix MREMAP_DONTUNMAP accounting on VMA merge
|
general protection fault in kobject_get
kernel
|
|
|
|
4 |
1584d |
1650d
|
15/27 |
1581d |
5bdfa854013c
RDMA/mad: Do not crash if the rdma device does not have a umad interface
|
WARNING: kobject bug in add_one_compat_dev
kernel
|
|
|
|
2 |
1652d |
1654d
|
15/27 |
1581d |
f2f2b3bbf0d9
RDMA/core: Fix missing error check on dev_set_name()
|
KASAN: use-after-free Read in __hrtimer_run_queues
kernel
|
C |
done |
|
299 |
1614d |
1621d
|
15/27 |
1581d |
73d20564e0dc
hrtimer: Don't dereference the hrtimer pointer after the callback
|
WARNING: kobject bug in ib_register_device
kernel
|
C |
done |
|
14 |
1619d |
1657d
|
15/27 |
1581d |
7aefa6237cfe
RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET
|
INFO: rcu detected stall in hash_ip4_gc
kernel
|
C |
done |
|
1 |
1687d |
1686d
|
15/27 |
1606d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
WARNING in switch_fpu_return
kernel
|
syz |
done |
done |
11 |
1677d |
1710d
|
15/27 |
1627d |
2620fe268e80
KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest"
|
linux-next build error (7)
kernel
|
|
|
|
7 |
1686d |
1690d
|
15/27 |
1641d |
ac6119e7f25b
efi/x86: Disable instrumentation in the EFI runtime handling code
|
upstream boot error: KASAN: slab-out-of-bounds Write in hpet_alloc
kernel
|
|
|
|
33 |
1681d |
1682d
|
15/27 |
1663d |
98c49f1746ac
char: hpet: Fix out-of-bounds read bug
|
KMSAN: uninit-value in __request_module (3)
kernel
|
C |
|
|
58 |
1664d |
1692d
|
15/27 |
1663d |
36d79af7fb59
net-backports: net_sched: use validated TCA_KIND attribute in tc_new_tfilter()
|
kernel panic: stack is corrupted in __lock_acquire (4)
kernel
|
syz |
error |
error |
75 |
1758d |
1916d
|
15/27 |
1663d |
4da6a196f93b
bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
|
BUG: sleeping function called from invalid context in tpk_write
kernel
|
C |
done |
|
12 |
1695d |
1736d
|
15/27 |
1663d |
9a655c77ff8f
ttyprintk: fix a potential deadlock in interrupt context issue
|
KCSAN: data-race in find_next_bit / rcu_report_exp_cpu_mult
kernel
|
|
|
|
203 |
1675d |
1797d
|
15/27 |
1663d |
15c7c972cd26
rcu: Use *_ONCE() to protect lockless ->expmask accesses
|
KCSAN: data-race in tick_do_update_jiffies64 / tick_do_update_jiffies64 (4)
kernel
|
|
|
|
394 |
1668d |
1739d
|
15/27 |
1663d |
de95a991bb72
net-backports: tick/sched: Annotate lockless access to last_jiffies_update
|
BUG: unable to handle kernel paging request in do_csum (2)
kernel
|
C |
done |
|
6 |
1686d |
1688d
|
15/27 |
1663d |
6cd021a58c18
udp: segment looped gso packets correctly
|
KCSAN: data-race in taskstats_exit / taskstats_exit
kernel
|
|
|
|
157 |
1668d |
1799d
|
15/27 |
1667d |
0b8d616fb5a8
taskstats: fix data-race
|
linux-next boot error: general protection fault in do_mount_root
kernel
|
|
|
|
9 |
1726d |
1727d
|
15/27 |
1667d |
7de7de7ca0ae
Fix root mounting with no mount options
|
upstream boot error: general protection fault in do_mount_root
kernel
|
|
|
|
12 |
1727d |
1727d
|
15/27 |
1667d |
7de7de7ca0ae
Fix root mounting with no mount options
|
KMSAN: uninit-value in __request_module (2)
kernel
|
|
|
|
3 |
1724d |
1736d
|
15/27 |
1704d |
2dd5616ecdce
net-backports: net_sched: validate TCA_KIND attribute in tc_chain_tmplt_add()
|
general protection fault in override_creds
kernel
|
C |
done |
|
6 |
1738d |
1741d
|
15/27 |
1704d |
0b8c0ec7eedc
io_uring: use current task creds instead of allocating a new one
|
linux-next boot error: general protection fault in __x64_sys_settimeofday
kernel
|
|
|
|
6 |
1759d |
1759d
|
15/27 |
1731d |
5e0fb1b57bea
y2038: time: avoid timespec usage in settimeofday()
|
general protection fault in tss_update_io_bitmap
kernel
|
C |
done |
|
65 |
1747d |
1752d
|
15/27 |
1731d |
e3cb0c7102f0
x86/ioperm: Fix use of deprecated config option
|
KCSAN: data-race in __remove_hrtimer / __tcp_ack_snd_check
kernel
|
|
|
|
4 |
1746d |
1767d
|
15/27 |
1731d |
56144737e673
hrtimer: Annotate lockless access to timer->state
|
KCSAN: data-race in __remove_hrtimer / tcp_pacing_check
kernel
|
|
|
|
1 |
1769d |
1767d
|
15/27 |
1731d |
56144737e673
hrtimer: Annotate lockless access to timer->state
|
KMSAN: use-after-free in __netif_receive_skb_core
kernel
|
|
|
|
1 |
1761d |
1761d
|
15/27 |
1731d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
KASAN: use-after-free Read in tick_sched_handle (3)
kernel
|
C |
|
done |
12 |
2063d |
2119d
|
13/27 |
1764d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
general protection fault in put_pid
kernel
|
syz |
done |
done |
3 |
2087d |
2097d
|
13/27 |
1765d |
a8e911d13540
x86_64: increase stack size for KASAN_EXTRA
|
general protection fault in propagate_entity_cfs_rq
kernel
|
C |
|
done |
1 |
2248d |
2248d
|
13/27 |
1766d |
bab2c80e5a6c
nsh: set mac len based on inner packet
|
general protection fault in open_rio
kernel
|
|
|
|
2 |
1809d |
1810d
|
13/27 |
1777d |
015664d15270
USB: rio500: Remove Rio 500 kernel driver
|
WARNING: lock held when returning to user space in rcu_lock_acquire
kernel
|
C |
done |
|
3 |
1802d |
1802d
|
13/27 |
1789d |
73956fc07dd7
membarrier: Fix RCU locking bug caused by faulty merge
|
general protection fault in make_kuid
kernel
|
C |
done |
|
4 |
1849d |
1874d
|
13/27 |
1789d |
1dd9bc08cf14
vfs: set fs_context::user_ns for reconfigure
|
WARNING in rcu_note_context_switch
kernel
|
C |
done |
|
1 |
1803d |
1803d
|
13/27 |
1789d |
73956fc07dd7
membarrier: Fix RCU locking bug caused by faulty merge
|
WARNING: lock held when returning to user space in membarrier_private_expedited
kernel
|
C |
done |
|
7 |
1802d |
1803d
|
13/27 |
1789d |
73956fc07dd7
membarrier: Fix RCU locking bug caused by faulty merge
|
KMSAN: uninit-value in __request_module
kernel
|
C |
|
|
13 |
1798d |
1818d
|
13/27 |
1789d |
62794fc4fbf5
net_sched: add max len check for TCA_KIND
|
memory leak in llcp_sock_bind
kernel
|
C |
done |
|
2 |
1810d |
1875d
|
13/27 |
1789d |
a0c2dc1fe63e
nfc: fix memory leak in llcp_sock_bind()
|
INFO: rcu detected stall in sys_exit_group
kernel
|
C |
done |
|
1 |
1820d |
1816d
|
13/27 |
1795d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
INFO: rcu detected stall in sys_clone
kernel
|
|
|
|
1 |
1822d |
1822d
|
13/27 |
1795d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
WARNING in lockdep_unregister_key (2)
kernel
|
|
|
|
3 |
1969d |
1973d
|
13/27 |
1800d |
8b39adbee805
locking/lockdep: Make lockdep_unregister_key() honor 'debug_locks' again
|
KASAN: slab-out-of-bounds Read in bpf_int_jit_compile
kernel
|
C |
done |
|
1 |
1875d |
1872d
|
12/27 |
1828d |
7c2e988f400e
bpf: fix x64 JIT code generation for jmp to 1st insn
|
KASAN: slab-out-of-bounds Read in do_jit
kernel
|
C |
done |
|
16 |
1828d |
1873d
|
12/27 |
1828d |
7c2e988f400e
bpf: fix x64 JIT code generation for jmp to 1st insn
|
BUG: unable to handle kernel paging request in hrtimer_interrupt
kernel
|
syz |
done |
|
2 |
1870d |
1907d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
general protection fault in rcu_core
kernel
|
syz |
done |
|
1 |
1887d |
1886d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
general protection fault in mm_update_next_owner
kernel
|
syz |
done |
done |
1 |
1918d |
1918d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
KASAN: use-after-free Write in validate_chain
kernel
|
syz |
done |
|
3 |
1895d |
1905d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
KASAN: use-after-free Read in psi_task_change
kernel
|
syz |
done |
|
1 |
1871d |
1870d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
KASAN: slab-out-of-bounds Write in check_noncircular
kernel
|
syz |
done |
|
1 |
1878d |
1877d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
WARNING in mark_lock
kernel
|
syz |
done |
|
2 |
1846d |
1901d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
kernel panic: stack is corrupted in validate_chain
kernel
|
syz |
done |
|
1 |
1901d |
1901d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
BUG: unable to handle kernel paging request in cpuacct_account_field
kernel
|
syz |
done |
done |
1 |
1906d |
1905d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
possible deadlock in rxrpc_put_peer
kernel
|
|
|
|
1 |
1874d |
1870d
|
12/27 |
1838d |
60034d3d146b
rxrpc: Fix potential deadlock
|
WARNING: held lock freed in nr_release
kernel
|
C |
done |
|
344 |
1858d |
1879d
|
12/27 |
1838d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
KASAN: use-after-free Read in corrupted (3)
kernel
|
syz |
done |
|
1 |
1900d |
1900d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
general protection fault in rb_erase (2)
kernel
|
syz |
done |
|
4 |
1867d |
2074d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
KASAN: slab-out-of-bounds Read in usage_accumulate
kernel
|
syz |
done |
|
3 |
1901d |
1920d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
WARNING: refcount bug in nr_rx_frame
kernel
|
C |
done |
|
15 |
1862d |
1878d
|
12/27 |
1838d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
BUG: unable to handle kernel paging request in bpf_prog_ADDR
kernel
|
C |
done |
|
13 |
1861d |
1877d
|
12/27 |
1838d |
06a22d897d82
bpf: fix access to skb_shared_info->gso_segs
|
general protection fault in rb_next (3)
kernel
|
syz |
done |
done |
1 |
1911d |
1909d
|
12/27 |
1838d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
general protection fault in finish_task_switch (2)
kernel
|
C |
|
done |
1538 |
2175d |
2220d
|
12/27 |
1842d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
memory leak in policydb_read
kernel
|
C |
done |
|
1 |
1875d |
1873d
|
12/27 |
1851d |
45385237f65a
selinux: fix memory leak in policydb_init()
|
WARNING in binder_transaction_buffer_release
kernel
|
syz |
error |
|
38 |
1894d |
1937d
|
12/27 |
1851d |
49ed96943a8e
binder: prevent transactions to context manager from its own process.
|
memory leak in binder_transaction
kernel
|
C |
|
|
3 |
1900d |
1913d
|
12/27 |
1860d |
1909a671dbc3
binder: fix memory leak in error path
|
WARNING in static_key_slow_try_dec
kernel
|
C |
done |
|
58 |
1883d |
1887d
|
12/27 |
1860d |
d44e3fa5d7e6
ipv6: fix static key imbalance in fl_create()
|
general protection fault in get_task_pid
kernel
|
C |
done |
|
24 |
1893d |
1895d
|
12/27 |
1867d |
28dd29c06d0d
fork: return proper negative error code
|
memory leak in kobject_set_name_vargs
kernel
|
C |
|
|
12 |
1894d |
1928d
|
12/27 |
1886d |
4f488fbca2a8
cfg80211: fix memory leak of wiphy device name
|
KMSAN: kernel-infoleak in copy_siginfo_to_user (2)
kernel
|
C |
|
|
15 |
1915d |
1945d
|
12/27 |
1886d |
f6e2aa91a46d
signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
|
WARNING: locking bug in copy_process
kernel
|
C |
done |
|
3 |
1945d |
1947d
|
12/27 |
1912d |
c3b7112df86b
fork: do not release lock that wasn't taken
|
kernel BUG at drivers/android/binder_alloc.c:LINE! (3)
kernel
|
C |
done |
|
24 |
1921d |
1990d
|
12/27 |
1912d |
a3c7cd0cdf11
batman-adv: mcast: fix multicast tt/tvlv worker locking
|
BUG: unable to handle page fault for address = ADDR
kernel
|
C |
done |
|
3 |
1962d |
1962d
|
12/27 |
1930d |
baf76f0c58ae
slip: make slhc_free() silently accept an error pointer
|
KASAN: use-after-free Read in seccomp_notify_release (2)
kernel
|
C |
done |
|
9 |
1993d |
1993d
|
12/27 |
1930d |
7a0df7fbc145
seccomp: Make NEW_LISTENER and TSYNC flags exclusive
|
KASAN: use-after-free Read in pid_nr_ns
kernel
|
|
|
|
1 |
1960d |
1960d
|
12/27 |
1930d |
6c0afef5fb0c
ipv6/flowlabel: wait rcu grace period before put_pid()
|
kernel BUG at drivers/android/binder_alloc.c:LINE! (2)
kernel
|
C |
|
|
1257 |
1990d |
2032d
|
11/27 |
1990d |
26528be6720b
binder: fix handling of misaligned binder object
|
KASAN: use-after-free Read in kobject_put
kernel
|
C |
|
|
12 |
2019d |
2150d
|
11/27 |
1990d |
e20a2e9c42c9
Bluetooth: Fix decrementing reference count twice in releasing socket
|
BUG: assuming atomic context at kernel/seccomp.c:LINE
kernel
|
C |
|
|
709 |
2025d |
2026d
|
11/27 |
1990d |
e80d02dd7630
seccomp, bpf: disable preemption before calling into bpf prog
|
KASAN: use-after-free Read in update_blocked_averages
kernel
|
C |
done |
|
3 |
2112d |
2127d
|
11/27 |
1997d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
WARNING in update_load_avg
kernel
|
C |
done |
|
1 |
2119d |
2119d
|
11/27 |
1998d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
KASAN: slab-out-of-bounds Read in tick_sched_handle
kernel
|
C |
done |
|
7 |
2064d |
2091d
|
11/27 |
2001d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
general protection fault in watchdog
kernel
|
C |
|
|
1 |
2095d |
2094d
|
11/27 |
2012d |
e2c8d550a973
netfilter: ebtables: account ebt_table_info to kmemcg
|
KASAN: stack-out-of-bounds Read in select_task_rq_fair
kernel
|
|
|
|
2 |
2063d |
2071d
|
11/27 |
2012d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
BUG: unable to handle kernel paging request in do_csum
kernel
|
C |
|
|
11 |
2105d |
2106d
|
11/27 |
2012d |
d5be7f632bad
net-backports: net: validate untrusted gso packets without csum offload
|
kernel panic: stack is corrupted in printk
kernel
|
C |
|
|
1 |
2073d |
2072d
|
11/27 |
2012d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
general protection fault in rb_erase_cached
kernel
|
C |
|
|
1 |
2073d |
2073d
|
11/27 |
2012d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
kernel panic: stack is corrupted in select_idle_sibling
kernel
|
|
|
|
1 |
2072d |
2072d
|
11/27 |
2012d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
KASAN: out-of-bounds Read in __switch_to
kernel
|
C |
|
|
1 |
2073d |
2073d
|
11/27 |
2012d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
WARNING: locking bug in corrupted
kernel
|
C |
|
|
1 |
2062d |
2062d
|
11/27 |
2012d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
KASAN: use-after-free Read in seccomp_notify_release
kernel
|
C |
|
|
27 |
2017d |
2066d
|
11/27 |
2012d |
a811dc61559e
seccomp: fix UAF in user-trap code
|
KASAN: slab-out-of-bounds Write in fpstate_init
kernel
|
C |
|
|
15088 |
2084d |
2085d
|
11/27 |
2019d |
ed8e48122728
KVM: x86: fix size of x86_fpu_cache objects
|
KASAN: stack-out-of-bounds Read in rb_erase (4)
kernel
|
|
|
|
1 |
2064d |
2063d
|
11/27 |
2029d |
11789039da53
fou: Prevent unbounded recursion in GUE error handler
|
WARNING in static_key_enable_cpuslocked
kernel
|
|
|
|
1 |
2113d |
2113d
|
11/27 |
2066d |
9c48060141bd
udp: fix jump label misuse
|
WARNING in static_key_disable_cpuslocked
kernel
|
syz |
|
|
5 |
2103d |
2121d
|
11/27 |
2066d |
9c48060141bd
udp: fix jump label misuse
|
WARNING in __rcu_read_unlock
kernel
|
C |
|
|
2 |
2085d |
2093d
|
11/27 |
2066d |
11789039da53
fou: Prevent unbounded recursion in GUE error handler
|
divide error in alarm_forward
kernel
|
|
|
|
1 |
2092d |
2091d
|
11/27 |
2066d |
0e334db6bb4b
posix-timers: Fix division by zero bug
|
WARNING in __put_task_struct (2)
kernel
|
C |
|
|
17 |
2152d |
2161d
|
11/27 |
2126d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
BUG: corrupted list in cpu_stop_queue_work
kernel
|
C |
|
|
24 |
2245d |
2254d
|
11/27 |
2126d |
552446a41661
shmem: Convert shmem_add_to_page_cache to XArray
|
KASAN: use-after-free Read in finish_task_switch
kernel
|
C |
|
|
3047 |
2175d |
2220d
|
11/27 |
2154d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
net-next boot error
kernel
|
|
|
|
66 |
2230d |
2235d
|
8/27 |
2202d |
ca9e83b4a55b
virtio-net: correctly update XDP_TX counters
|
KMSAN: uninit-value in do_msgrcv
kernel
|
C |
|
|
8 |
2202d |
2279d
|
8/27 |
2202d |
39cfffd774a2
ipc/util.c: use ipc_rcu_putref() for failues in ipc_addid()
615c999cd8a0
ipc: compute kern_ipc_perm.id under the ipc lock
e2652ae6bd74
ipc: reorganize initialization of kern_ipc_perm.seq
|
general protection fault in __delayacct_blkio_end
kernel
|
C |
|
|
50 |
2237d |
2333d
|
8/27 |
2222d |
b512719f771a
delayacct: fix crash in delayacct_blkio_end() after delayacct init failure
|
KASAN: stack-out-of-bounds Read in __handle_mm_fault (2)
kernel
|
C |
|
|
3 |
2240d |
2243d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in rb_next (2)
kernel
|
|
|
|
1 |
2243d |
2243d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
general protection fault in scheduler_tick
kernel
|
C |
|
|
1 |
2253d |
2252d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in copy_page_range
kernel
|
|
|
|
1 |
2243d |
2242d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
general protection fault in cpuacct_account_field (2)
kernel
|
|
|
|
1 |
2241d |
2240d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
BUG: unable to handle kernel NULL pointer dereference in corrupted (2)
kernel
|
C |
|
|
1 |
2244d |
2243d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: slab-out-of-bounds Read in corrupted
kernel
|
C |
|
|
1 |
2244d |
2243d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
general protection fault in cpuacct_charge
kernel
|
|
|
|
1 |
2238d |
2237d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in __enqueue_entity
kernel
|
|
|
|
1 |
2247d |
2247d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in account_system_index_time
kernel
|
C |
|
|
2 |
2245d |
2252d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in __task_pid_nr_ns
kernel
|
|
|
|
1 |
2251d |
2251d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in __delayacct_add_tsk
kernel
|
|
|
|
1 |
2250d |
2250d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in add_wait_queue
kernel
|
C |
|
|
1 |
2253d |
2252d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
BUG: unable to handle kernel paging request in cpuacct_charge
kernel
|
syz |
|
|
2 |
2244d |
2244d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in __acct_update_integrals
kernel
|
|
|
|
2 |
2241d |
2248d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
general protection fault in rb_next
kernel
|
|
|
|
1 |
2244d |
2244d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in timerqueue_add
kernel
|
C |
|
|
4 |
2241d |
2257d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in rb_insert_color (2)
kernel
|
|
|
|
1 |
2247d |
2247d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in enqueue_task_fair
kernel
|
|
|
|
1 |
2243d |
2243d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
BUG: unable to handle kernel paging request in account_system_index_time
kernel
|
|
|
|
1 |
2241d |
2240d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
KASAN: stack-out-of-bounds Read in rcu_process_callbacks
kernel
|
C |
|
|
1 |
2246d |
2246d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
BUG: unable to handle kernel paging request in ttwu_do_activate
kernel
|
|
|
|
1 |
2256d |
2256d
|
8/27 |
2223d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
INFO: rcu detected stall in unwind_next_frame
kernel
|
|
|
|
2 |
2301d |
2305d
|
8/27 |
2252d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
bpf-next boot error: KASAN: use-after-free Write in call_usermodehelper_exec_work
kernel
|
|
|
|
3 |
2284d |
2287d
|
8/27 |
2252d |
bf956be520fb
umh: fix race condition
|
unexpected kernel reboot (2)
kernel
|
C |
|
|
2073 |
2252d |
2342d
|
8/27 |
2252d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
WARNING: kernel stack regs at (ptrval) in syzkaller has bad 'bp' value (ptrval)
kernel
|
C |
|
|
3 |
2329d |
2329d
|
8/27 |
2252d |
f044a84e040b
crypto: don't optimize keccakf()
|
net-next boot error: KASAN: use-after-free Write in call_usermodehelper_exec_work
kernel
|
|
|
|
8 |
2283d |
2295d
|
8/27 |
2252d |
bf956be520fb
umh: fix race condition
|
INFO: rcu detected stall in __save_stack_trace
kernel
|
|
|
|
3 |
2252d |
2386d
|
8/27 |
2252d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
upstream boot error: KASAN: use-after-free Write in call_usermodehelper_exec_work
kernel
|
|
|
|
5 |
2281d |
2283d
|
8/27 |
2252d |
bf956be520fb
umh: fix race condition
|
WARNING in arch_uprobe_analyze_insn
kernel
|
C |
|
|
2 |
2308d |
2308d
|
8/27 |
2252d |
90718e32e1dc
uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn()
|
WARNING in dev_vprintk_emit
kernel
|
C |
|
|
77 |
2298d |
2425d
|
5/27 |
2284d |
814596495dd2
cfg80211: further limit wiphy names to 64 bytes
|
kernel BUG at include/linux/mm.h:LINE!
kernel
|
syz |
|
|
68 |
2284d |
2321d
|
5/27 |
2284d |
a466ef76b815
x86/kexec: Avoid double free_page() upon do_kexec_load() failure
|
INFO: task hung in get_timespec64
kernel
|
|
|
|
1 |
2340d |
2340d
|
5/27 |
2305d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
INFO: task hung in do_set_master
kernel
|
|
|
|
1 |
2346d |
2346d
|
5/27 |
2305d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
kernel BUG at kernel/softirq.c:LINE!
kernel
|
|
|
|
1 |
2319d |
2319d
|
5/27 |
2306d |
a8d7aa17bbc9
dccp: fix tasklet usage
|
general protection fault in account_system_index_time
kernel
|
C |
|
|
2 |
2356d |
2355d
|
5/27 |
2309d |
ae4745730cf8
net: Fix untag for vlan packets without ethernet header
|
inconsistent lock state in fs_reclaim_acquire
kernel
|
C |
|
|
36235 |
2314d |
2325d
|
5/27 |
2314d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|
KASAN: use-after-free Read in binder_release_work
kernel
|
C |
|
|
6 |
2327d |
2348d
|
5/27 |
2314d |
7aa135fcf263
ANDROID: binder: prevent transactions into own process.
|
KASAN: use-after-free Read in shm_get_unmapped_area
kernel
|
|
|
|
19 |
2410d |
2501d
|
5/27 |
2314d |
3f05317d9889
ipc/shm: fix use-after-free of shm file via remap_file_pages()
|
WARNING: refcount bug in free_nsproxy
kernel
|
|
|
|
4 |
2353d |
2378d
|
5/27 |
2314d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
WARNING: kobject bug in device_add
kernel
|
C |
|
|
563 |
2314d |
2354d
|
5/27 |
2314d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
WARNING in __might_sleep
kernel
|
|
|
|
6 |
2326d |
2329d
|
5/27 |
2314d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|
KASAN: use-after-free Read in alloc_pid
kernel
|
C |
|
|
7 |
2342d |
2351d
|
5/27 |
2314d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
WARNING: inconsistent lock state
kernel
|
C |
|
|
22 |
2326d |
2329d
|
5/27 |
2314d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|
WARNING in __debug_object_init
kernel
|
C |
|
|
192 |
2347d |
2358d
|
5/27 |
2314d |
bd03143007eb
alarmtimer: Init nanosleep alarm timer on stack
|
WARNING in binder_send_failed_reply
kernel
|
C |
|
|
206 |
2388d |
2472d
|
5/27 |
2343d |
e46a3b3ba750
ANDROID: binder: remove WARN() for redundant txn error
|
general protection fault in try_to_wake_up
kernel
|
syz |
|
|
1 |
2358d |
2354d
|
5/27 |
2346d |
c769accdf3d8
vlan: Fix vlan insertion for packets without ethernet header
|
general protection fault in timerqueue_add
kernel
|
C |
|
|
2 |
2356d |
2356d
|
5/27 |
2346d |
c769accdf3d8
vlan: Fix vlan insertion for packets without ethernet header
|
general protection fault in hrtimer_active (2)
kernel
|
C |
|
|
10612 |
2379d |
2384d
|
4/27 |
2377d |
b7e31be38558
KVM: x86: fix vcpu initialization with userspace lapic
|
general protection fault in binder_poll
kernel
|
C |
|
|
159 |
2389d |
2472d
|
4/27 |
2385d |
f88982679f54
binder: check for binder_thread allocation failure in binder_poll()
|
KASAN: slab-out-of-bounds Read in string
kernel
|
C |
|
|
129 |
2407d |
2418d
|
4/27 |
2397d |
da17c73b6eb7
netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}
|
WARNING in do_debug
kernel
|
C |
|
|
905 |
2403d |
2503d
|
4/27 |
2399d |
efdab992813f
KVM: x86: fix escape of guest dr6 to the host
|
kernel BUG at drivers/android/binder_alloc.c:LINE!
kernel
|
C |
|
|
856 |
2468d |
2472d
|
4/27 |
2410d |
fb2c445277e7
ANDROID: binder: fix transaction leak.
|
WARNING in fpu__copy
kernel
|
|
|
|
8 |
2453d |
2453d
|
4/27 |
2412d |
5663d8f9bbe4
kvm: x86: fix WARN due to uninitialized guest FPU state
|
general protection fault in lockdep_invariant_state (2)
kernel
|
C |
|
|
114 |
2467d |
2495d
|
4/27 |
2415d |
5e351ad10699
locking/lockdep: Fix possible NULL deref
|
BUG: unable to handle kernel paging request in ipcget
kernel
|
|
|
|
2 |
2453d |
2450d
|
3/27 |
2431d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
BUG: unable to handle kernel paging request in __switch_to
kernel
|
|
|
|
1 |
2474d |
2470d
|
3/27 |
2439d |
7fb983b4dd56
x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
|
BUG: unable to handle kernel paging request in __put_user_8
kernel
|
|
|
|
1 |
2470d |
2464d
|
3/27 |
2439d |
7fb983b4dd56
x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
|
BUG: unable to handle kernel paging request in copy_siginfo_to_user
kernel
|
|
|
|
1 |
2467d |
2463d
|
3/27 |
2439d |
7fb983b4dd56
x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
|
BUG: unable to handle kernel paging request in __schedule
kernel
|
|
|
|
2 |
2469d |
2464d
|
3/27 |
2439d |
7fb983b4dd56
x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
|
general protection fault in hrtimer_active
kernel
|
C |
|
|
669 |
2493d |
2516d
|
3/27 |
2475d |
aec72f3392b1
net-tun: fix panics at dismantle time
|
WARNING in free_kthread_struct
kernel
|
C |
|
|
136405 |
2492d |
2496d
|
3/27 |
2475d |
e10237cc76ef
kthread: zero the kthread data structure
|
KASAN: use-after-free Read in do_raw_spin_unlock
kernel
|
syz |
|
|
3 |
2502d |
2503d
|
3/27 |
2492d |
153fbd1226fb
futex: Fix more put_pi_state() vs. exit_pi_state_list() races
|
WARNING in get_pi_state
kernel
|
C |
|
|
42 |
2502d |
2504d
|
3/27 |
2492d |
153fbd1226fb
futex: Fix more put_pi_state() vs. exit_pi_state_list() races
|
KASAN: use-after-free Read in __lock_acquire
kernel
|
syz |
|
|
894 |
2493d |
2502d
|
3/27 |
2492d |
153fbd1226fb
futex: Fix more put_pi_state() vs. exit_pi_state_list() races
|
WARNING in __switch_to
kernel
|
C |
|
|
535 |
2537d |
2584d
|
3/27 |
2510d |
814fb7bb7db5
x86/fpu: Don't let userspace set bogus xcomp_bv
|