|
WARNING in kvm_read_guest_offset_cached
kvm
|
-1 |
syz, C |
|
|
4 |
88d |
384d
|
29/29 |
20d |
923ca078f08c
KVM: x86: Don't leave APF half-enabled on bad APF data GPA
|
|
BUG: sleeping function called from invalid context in vhost_get_avail_idx
kvm
net
virt
|
5 |
syz, C |
|
|
1 |
108d |
106d
|
29/29 |
75d |
e08a9fac5cf8
vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
|
|
WARNING in kvm_gmem_fault_user_mapping
kvm
|
-1 |
syz, C |
error |
|
3 |
173d |
186d
|
29/29 |
90d |
dd085fe9a8eb
mm: thp: deny THP for files on anonymous inodes
|
|
KASAN: slab-use-after-free Write in kvm_gmem_release
kvm
|
22 |
syz, C |
done |
|
12 |
235d |
285d
|
29/29 |
209d |
ae431059e75d
KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
|
|
WARNING in virtio_transport_send_pkt_info
net
virt
kvm
|
-1 |
syz, C |
|
|
145 |
340d |
358d
|
29/29 |
300d |
7fb1291257ea
vsock/virtio: Fix message iterator handling on transmit path
|
|
WARNING: suspicious RCU usage in kvm_vcpu_gfn_to_memslot
kvm
|
4 |
syz, C |
|
|
67 |
499d |
558d
|
28/29 |
420d |
3617c0ee7dec
KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR
|
|
general protection fault in add_wait_queue
kvm
net
virt
|
10 |
syz, C |
done |
|
676 |
534d |
547d
|
28/29 |
420d |
78dafe1cf3af
vsock: Orphan socket after transport release
|
|
WARNING in __kvm_gpc_refresh (2)
kvm
|
-1 |
syz, C |
error |
|
2 |
784d |
798d
|
27/29 |
720d |
ebbdf37ce9ab
KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
|
|
KASAN: slab-use-after-free Read in vhost_task_fn
kvm
net
virt
|
19 |
syz, C |
done |
|
2661 |
824d |
826d
|
25/29 |
790d |
db5247d9bf5c
vhost_task: Handle SIGKILL by flushing work and exiting
|
|
WARNING in __kvm_gpc_refresh
kvm
|
-1 |
syz, C |
|
|
178 |
805d |
869d
|
25/29 |
804d |
5c9ca4ed8908
KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (3)
kvm
|
-1 |
syz, C |
inconclusive |
done |
44 |
931d |
991d
|
25/29 |
880d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
WARNING in kvm_mmu_notifier_change_pte
kvm
|
-1 |
syz, C |
inconclusive |
|
2 |
955d |
965d
|
25/29 |
917d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
syz, C |
|
|
20713 |
998d |
1012d
|
25/29 |
957d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
kernel BUG in vhost_get_vq_desc
virt
kvm
net
|
-1 |
syz, C |
inconclusive |
|
19 |
1621d |
1634d
|
22/29 |
1257d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
syz, C |
done |
|
4 |
1465d |
1517d
|
22/29 |
1257d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
INFO: task hung in vhost_work_dev_flush
virt
kvm
net
|
1 |
syz, C |
error |
|
2 |
1637d |
1628d
|
22/29 |
1257d |
e2ae38cf3d91
vhost: fix hung thread due to erroneous iotlb entries
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (2)
kvm
|
-1 |
syz, C |
done |
|
14 |
1584d |
1597d
|
22/29 |
1257d |
01e67e04c281
mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
|
|
memory leak in kvm_set_memslot
kvm
|
3 |
syz, C |
|
|
1 |
1541d |
1541d
|
22/29 |
1257d |
c87661f855c3
KVM: Free new dirty bitmap if creating a new memslot fails
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start
kvm
|
-1 |
syz, C |
done |
|
19 |
1619d |
1680d
|
20/29 |
1610d |
d6aba4c8e20d
hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
|
|
memory leak in kvm_dev_ioctl
kvm
|
3 |
syz, C |
|
|
37 |
1846d |
1858d
|
20/29 |
1729d |
004d62eb4e57
kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
|
|
WARNING in kvm_wait
kvm
|
-1 |
syz, C |
error |
|
119882 |
1957d |
1975d
|
20/29 |
1729d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
memory leak in virtio_transport_send_pkt_info
virt
kvm
net
|
3 |
syz, C |
|
|
2 |
1940d |
2003d
|
20/29 |
1729d |
8432b8114957
vsock/virtio: free queued packets when closing socket
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
syz, C |
done |
|
33 |
1979d |
1985d
|
20/29 |
1943d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init
kvm
|
17 |
syz, C |
done |
|
1537 |
2265d |
2310d
|
15/29 |
2238d |
b6467ab142b7
KVM: Check validity of resolved slot when searching memslots
|
|
kernel panic: stack is corrupted in vhost_net_ioctl
kvm
net
virt
|
2 |
syz, C |
done |
|
2 |
2362d |
2449d
|
15/29 |
2302d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
INFO: task hung in lock_sock_nested (2)
net
virt
kvm
|
1 |
syz, C |
done |
|
418 |
2342d |
2355d
|
15/29 |
2302d |
3f74957fcbea
vsock: fix potential deadlock in transport->release()
|
|
general protection fault in virtio_transport_release
kvm
net
virt
|
2 |
syz, C |
done |
|
7 |
2449d |
2450d
|
15/29 |
2427d |
039fcccaed33
vsock: avoid to assign transport if its initialization fails
|
|
general protection fault in kvm_coalesced_mmio_init
kvm
|
2 |
syz |
done |
|
48 |
2456d |
2465d
|
14/29 |
2440d |
8a44119a98be
KVM: Fix NULL-ptr deref after kvm_create_vm fails
|
|
BUG: unable to handle kernel paging request in coalesced_mmio_write
kvm
|
8 |
syz, C |
done |
|
10 |
2592d |
2597d
|
13/29 |
2485d |
b60fe990c6b0
KVM: coalesced_mmio: add bounds checking
|
|
INFO: task hung in vhost_net_stop_vq
net
virt
kvm
|
1 |
syz, C |
done |
|
136 |
2666d |
2804d
|
12/29 |
2626d |
813dbeb656d6
vhost: reject zero size iova range
|
|
KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page
kvm
|
9 |
syz, C |
|
|
25 |
2799d |
2828d
|
11/29 |
2708d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
KASAN: slab-out-of-bounds Read in kvm_clear_dirty_log_protect
kvm
|
17 |
syz, C |
|
|
54 |
2760d |
2771d
|
11/29 |
2708d |
98938aa8edd6
KVM: validate userspace input in kvm_clear_dirty_log_protect()
|
|
WARNING: refcount bug in kvm_vm_ioctl
kvm
|
13 |
syz |
|
|
13 |
2742d |
2855d
|
11/29 |
2708d |
cfa39381173d
kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
|
|
KASAN: use-after-free Read in kvm_put_kvm
kvm
|
19 |
syz, C |
|
|
143 |
2785d |
2845d
|
11/29 |
2763d |
987d1149be7d
KVM: fix unregistering coalesced mmio zone from wrong bus
|
|
KASAN: use-after-free Read in vhost_transport_send_pkt
kvm
net
virt
|
19 |
syz |
|
|
36 |
2800d |
2927d
|
11/29 |
2786d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_work_queue
kvm
net
virt
|
19 |
syz |
|
|
30 |
2798d |
2898d
|
11/29 |
2786d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_transport_cancel_pkt
kvm
net
virt
|
19 |
syz |
|
|
17 |
2825d |
2869d
|
11/29 |
2786d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KMSAN: kernel-infoleak in kvm_write_guest_page
kvm
|
9 |
syz, C |
|
|
36 |
2800d |
2827d
|
11/29 |
2797d |
bcbfbd8ec210
KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
|
|
KASAN: use-after-free Write in irq_bypass_register_consumer
kvm
|
22 |
syz, C |
|
|
1632 |
2939d |
3200d
|
8/29 |
2902d |
b5020a8e6b54
KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel.
|
|
KMSAN: uninit-value in _copy_to_iter (2)
kvm
net
virt
|
7 |
syz, C |
|
|
226 |
2980d |
3025d
|
8/29 |
2948d |
670ae9caaca4
vhost: fix info leak due to uninitialized memory
|
|
WARNING in __mutex_unlock_slowpath
kvm
kvm-x86
|
-1 |
syz, C |
|
|
2 |
3016d |
3019d
|
5/29 |
2980d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
general protection fault in __radix_tree_delete
kvm
kvm-x86
|
2 |
syz, C |
|
|
38 |
2993d |
3019d
|
5/29 |
2980d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
kernel BUG at drivers/vhost/vhost.c:LINE! (2)
virt
kvm
net
|
-1 |
syz, C |
|
|
139 |
3011d |
3042d
|
5/29 |
3010d |
d14d2b78090c
vhost: fix vhost_vq_access_ok() log check
|
|
KASAN: use-after-free Read in perf_trace_lock_acquire (2)
kvm
net
virt
|
19 |
syz, C |
|
|
188 |
3106d |
3177d
|
5/29 |
3024d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
kernel BUG at drivers/vhost/vhost.c:LINE!
kvm
net
virt
|
-1 |
syz, C |
|
|
152 |
3042d |
3060d
|
5/29 |
3042d |
d65026c6c62e
vhost: validate log when IOTLB is enabled
|
|
BUG: corrupted list in remove_wait_queue
virt
kvm
net
|
8 |
syz, C |
|
|
5 |
3055d |
3058d
|
5/29 |
3042d |
dc6455a71c7f
vhost: correctly remove wait queue during poll failure
|
|
possible deadlock in handle_rx
virt
kvm
net
|
4 |
syz, C |
|
|
4 |
3054d |
3054d
|
5/29 |
3042d |
aaa3149bbee9
vhost_net: add missing lock nesting notation
|
|
WARNING in vhost_dev_cleanup
net
virt
kvm
|
-1 |
syz, C |
|
|
4 |
3108d |
3114d
|
4/29 |
3106d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
possible deadlock in vhost_chr_write_iter
kvm
net
virt
|
4 |
syz, C |
|
|
25952 |
3113d |
3116d
|
4/29 |
3109d |
e9cb4239134c
vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
|