|
WARNING in virtio_transport_send_pkt_info (2)
prio:high
kvm
net
virt
|
-1 |
syz, C |
error |
|
4 |
64d |
308d
|
27/29 |
never |
5ab3b28c5b3b
vsock/virtio: restore msg_iter on transmission failure
|
|
KASAN: use-after-free Read in kvm_xen_shared_info_init
prio:high
kvm-x86
kvm
|
19 |
syz, C |
|
|
11 |
26d |
136d
|
2/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
INFO: rcu detected stall in kvm_vcpu_ioctl (4)
prio:high
kvm-x86
kvm
|
1 |
syz, C |
error |
|
8 |
56d |
279d
|
27/29 |
never |
0ca49fbd2883
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
|
|
WARNING in kvm_put_kvm (3)
prio:low
kvm
|
-1 |
syz, C |
|
|
26 |
8d00h |
54d
|
2/29 |
never |
srcu: Fix WARN_ON() for rcu_segcblist_n_cbs() in cleanup_srcu_struct()
|
|
WARNING in kvm_read_guest_offset_cached
kvm
|
-1 |
syz, C |
|
|
4 |
147d |
443d
|
29/29 |
79d |
923ca078f08c
KVM: x86: Don't leave APF half-enabled on bad APF data GPA
|
|
BUG: sleeping function called from invalid context in vhost_get_avail_idx
kvm
net
virt
|
5 |
syz, C |
|
|
1 |
167d |
164d
|
29/29 |
134d |
e08a9fac5cf8
vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
|
|
WARNING in kvm_gmem_fault_user_mapping
kvm
|
-1 |
syz, C |
error |
|
3 |
231d |
244d
|
29/29 |
149d |
dd085fe9a8eb
mm: thp: deny THP for files on anonymous inodes
|
|
KASAN: slab-use-after-free Write in kvm_gmem_release
kvm
|
22 |
syz, C |
done |
|
12 |
293d |
344d
|
29/29 |
268d |
ae431059e75d
KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
|
|
WARNING in virtio_transport_send_pkt_info
net
virt
kvm
|
-1 |
syz, C |
|
|
145 |
399d |
417d
|
29/29 |
358d |
7fb1291257ea
vsock/virtio: Fix message iterator handling on transmit path
|
|
WARNING: suspicious RCU usage in kvm_vcpu_gfn_to_memslot
kvm
|
4 |
syz, C |
|
|
67 |
558d |
617d
|
28/29 |
479d |
3617c0ee7dec
KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR
|
|
general protection fault in add_wait_queue
kvm
net
virt
|
10 |
syz, C |
done |
|
676 |
593d |
606d
|
28/29 |
479d |
78dafe1cf3af
vsock: Orphan socket after transport release
|
|
KASAN: slab-use-after-free Read in kvm_put_kvm
kvm
|
19 |
|
|
|
1 |
710d |
710d
|
28/29 |
688d |
ae8f8b376102
KVM: arm64: Unregister redistributor for failed vCPU creation
|
|
WARNING in __kvm_gpc_refresh (2)
kvm
|
-1 |
syz, C |
error |
|
2 |
843d |
857d
|
27/29 |
779d |
ebbdf37ce9ab
KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
|
|
UBSAN: array-index-out-of-bounds in lock_timer_base
fs
kvm
|
15 |
|
|
|
4 |
837d |
851d
|
26/29 |
815d |
b79922009214
bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
|
|
WARNING: locking bug in srcu_gp_start_if_needed
kvm
fs
|
4 |
|
|
|
2 |
842d |
843d
|
26/29 |
815d |
f770a6e9a3d7
bcachefs: Fix initialization order for srcu barrier
|
|
WARNING: locking bug in __timer_delete_sync
fs
kvm
|
4 |
|
|
|
6 |
828d |
853d
|
26/29 |
815d |
b79922009214
bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
|
|
KASAN: slab-use-after-free Read in vhost_task_fn
kvm
net
virt
|
19 |
syz, C |
done |
|
2661 |
883d |
885d
|
25/29 |
849d |
db5247d9bf5c
vhost_task: Handle SIGKILL by flushing work and exiting
|
|
WARNING in __kvm_gpc_refresh
kvm
|
-1 |
syz, C |
|
|
178 |
863d |
928d
|
25/29 |
862d |
5c9ca4ed8908
KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (3)
kvm
|
-1 |
syz, C |
inconclusive |
done |
44 |
989d |
1050d
|
25/29 |
939d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
WARNING in kvm_mmu_notifier_change_pte
kvm
|
-1 |
syz, C |
inconclusive |
|
2 |
1014d |
1024d
|
25/29 |
976d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
syz, C |
|
|
20713 |
1057d |
1071d
|
25/29 |
1016d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
general protection fault in vhost_work_queue
net
virt
kvm
|
2 |
|
|
|
1 |
1226d |
1221d
|
23/29 |
1186d |
a284f09effea
vhost: Fix crash during early vhost_transport_send_pkt calls
|
|
kernel BUG in vhost_get_vq_desc
virt
kvm
net
|
-1 |
syz, C |
inconclusive |
|
19 |
1680d |
1692d
|
22/29 |
1316d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
syz, C |
done |
|
4 |
1524d |
1576d
|
22/29 |
1316d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
INFO: task hung in vhost_work_dev_flush
virt
kvm
net
|
1 |
syz, C |
error |
|
2 |
1696d |
1686d
|
22/29 |
1316d |
e2ae38cf3d91
vhost: fix hung thread due to erroneous iotlb entries
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (2)
kvm
|
-1 |
syz, C |
done |
|
14 |
1643d |
1656d
|
22/29 |
1316d |
01e67e04c281
mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
|
|
WARNING in vhost_dev_cleanup (2)
net
virt
kvm
|
-1 |
|
|
|
79 |
1680d |
1688d
|
22/29 |
1316d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
memory leak in kvm_set_memslot
kvm
|
3 |
syz, C |
|
|
1 |
1599d |
1599d
|
22/29 |
1316d |
c87661f855c3
KVM: Free new dirty bitmap if creating a new memslot fails
|
|
kernel BUG in kvm_read_guest_offset_cached
kvm
|
-1 |
|
|
|
11 |
1768d |
1774d
|
20/29 |
1669d |
8503fea6761d
KVM: VMX: do not use uninitialized gfn_to_hva_cache
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start
kvm
|
-1 |
syz, C |
done |
|
19 |
1677d |
1739d
|
20/29 |
1669d |
d6aba4c8e20d
hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
|
|
upstream boot error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
233 |
2023d |
2036d
|
20/29 |
1787d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
memory leak in kvm_dev_ioctl
kvm
|
3 |
syz, C |
|
|
37 |
1905d |
1917d
|
20/29 |
1787d |
004d62eb4e57
kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
|
|
usb-testing boot error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
3 |
2030d |
2033d
|
20/29 |
1787d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
WARNING in kvm_wait
kvm
|
-1 |
syz, C |
error |
|
119882 |
2016d |
2033d
|
20/29 |
1787d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
bpf-next test error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
1 |
2026d |
2026d
|
20/29 |
1787d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
memory leak in virtio_transport_send_pkt_info
virt
kvm
net
|
3 |
syz, C |
|
|
2 |
1999d |
2062d
|
20/29 |
1787d |
8432b8114957
vsock/virtio: free queued packets when closing socket
|
|
net test error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
1 |
2029d |
2029d
|
20/29 |
1787d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
linux-next boot error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
9 |
2022d |
2032d
|
20/29 |
1787d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
upstream test error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
2 |
2028d |
2030d
|
20/29 |
1787d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
syz, C |
done |
|
33 |
2038d |
2044d
|
20/29 |
2001d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
BUG: unable to handle kernel NULL pointer dereference in kvm_vm_ioctl
kvm
|
10 |
|
|
|
1 |
2297d |
2297d
|
15/29 |
2268d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in kvm_vcpu_gfn_to_memslot
kvm
|
10 |
|
|
|
1 |
2297d |
2297d
|
15/29 |
2268d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: soft lockup in wg_packet_tx_worker
kvm
|
1 |
|
|
|
1 |
2340d |
2340d
|
15/29 |
2268d |
df4953e4e997
sch_sfq: validate silly quantum values
|
|
KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init
kvm
|
17 |
syz, C |
done |
|
1537 |
2324d |
2368d
|
15/29 |
2297d |
b6467ab142b7
KVM: Check validity of resolved slot when searching memslots
|
|
kernel panic: stack is corrupted in vhost_net_ioctl
kvm
net
virt
|
2 |
syz, C |
done |
|
2 |
2421d |
2507d
|
15/29 |
2361d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
INFO: task hung in lock_sock_nested (2)
net
virt
kvm
|
1 |
syz, C |
done |
|
418 |
2401d |
2414d
|
15/29 |
2361d |
3f74957fcbea
vsock: fix potential deadlock in transport->release()
|
|
general protection fault in virtio_transport_release
kvm
net
virt
|
2 |
syz, C |
done |
|
7 |
2508d |
2509d
|
15/29 |
2485d |
039fcccaed33
vsock: avoid to assign transport if its initialization fails
|
|
general protection fault in kvm_coalesced_mmio_init
kvm
|
2 |
syz |
done |
|
48 |
2515d |
2524d
|
14/29 |
2499d |
8a44119a98be
KVM: Fix NULL-ptr deref after kvm_create_vm fails
|
|
BUG: unable to handle kernel paging request in coalesced_mmio_write
kvm
|
8 |
syz, C |
done |
|
10 |
2651d |
2655d
|
13/29 |
2543d |
b60fe990c6b0
KVM: coalesced_mmio: add bounds checking
|
|
INFO: task hung in vhost_net_stop_vq
net
virt
kvm
|
1 |
syz, C |
done |
|
136 |
2725d |
2862d
|
12/29 |
2685d |
813dbeb656d6
vhost: reject zero size iova range
|
|
KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page
kvm
|
9 |
syz, C |
|
|
25 |
2858d |
2886d
|
11/29 |
2767d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
KMSAN: uninit-value in kvm_clear_dirty_log_protect
kvm
|
7 |
|
|
|
6 |
2767d |
2812d
|
11/29 |
2767d |
98938aa8edd6
KVM: validate userspace input in kvm_clear_dirty_log_protect()
|
|
KASAN: slab-out-of-bounds Read in kvm_clear_dirty_log_protect
kvm
|
17 |
syz, C |
|
|
54 |
2819d |
2830d
|
11/29 |
2767d |
98938aa8edd6
KVM: validate userspace input in kvm_clear_dirty_log_protect()
|
|
WARNING: refcount bug in kvm_vm_ioctl
kvm
|
13 |
syz |
|
|
13 |
2801d |
2914d
|
11/29 |
2767d |
cfa39381173d
kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
|
|
KASAN: use-after-free Read in kvm_put_kvm
kvm
|
19 |
syz, C |
|
|
143 |
2844d |
2904d
|
11/29 |
2821d |
987d1149be7d
KVM: fix unregistering coalesced mmio zone from wrong bus
|
|
KASAN: use-after-free Read in vhost_transport_send_pkt
kvm
net
virt
|
19 |
syz |
|
|
36 |
2859d |
2986d
|
11/29 |
2845d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_work_queue
kvm
net
virt
|
19 |
syz |
|
|
30 |
2857d |
2957d
|
11/29 |
2845d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_transport_cancel_pkt
kvm
net
virt
|
19 |
syz |
|
|
17 |
2884d |
2928d
|
11/29 |
2845d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KMSAN: kernel-infoleak in kvm_write_guest_page
kvm
|
9 |
syz, C |
|
|
36 |
2858d |
2886d
|
11/29 |
2856d |
bcbfbd8ec210
KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
|
|
KASAN: use-after-free Read in iotlb_access_ok
kvm
net
virt
|
19 |
|
|
|
1 |
2982d |
2978d
|
8/29 |
2957d |
b13f9c636437
vhost: reset metadata cache when initializing new IOTLB
|
|
KASAN: use-after-free Write in irq_bypass_register_consumer
kvm
|
22 |
syz, C |
|
|
1632 |
2998d |
3259d
|
8/29 |
2961d |
b5020a8e6b54
KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel.
|
|
KMSAN: uninit-value in _copy_to_iter (2)
kvm
net
virt
|
7 |
syz, C |
|
|
226 |
3038d |
3084d
|
8/29 |
3007d |
670ae9caaca4
vhost: fix info leak due to uninitialized memory
|
|
WARNING in __mutex_unlock_slowpath
kvm
kvm-x86
|
-1 |
syz, C |
|
|
2 |
3075d |
3078d
|
5/29 |
3039d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
general protection fault in __radix_tree_delete
kvm
kvm-x86
|
2 |
syz, C |
|
|
38 |
3051d |
3078d
|
5/29 |
3039d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
kernel BUG at drivers/vhost/vhost.c:LINE! (2)
virt
kvm
net
|
-1 |
syz, C |
|
|
139 |
3070d |
3101d
|
5/29 |
3069d |
d14d2b78090c
vhost: fix vhost_vq_access_ok() log check
|
|
KASAN: use-after-free Read in perf_trace_lock_acquire (2)
kvm
net
virt
|
19 |
syz, C |
|
|
188 |
3164d |
3236d
|
5/29 |
3082d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
BUG: corrupted list in remove_wait_queue
virt
kvm
net
|
8 |
syz, C |
|
|
5 |
3114d |
3117d
|
5/29 |
3101d |
dc6455a71c7f
vhost: correctly remove wait queue during poll failure
|
|
kernel BUG at drivers/vhost/vhost.c:LINE!
kvm
net
virt
|
-1 |
syz, C |
|
|
152 |
3101d |
3119d
|
5/29 |
3101d |
d65026c6c62e
vhost: validate log when IOTLB is enabled
|
|
possible deadlock in handle_rx
virt
kvm
net
|
4 |
syz, C |
|
|
4 |
3112d |
3112d
|
5/29 |
3101d |
aaa3149bbee9
vhost_net: add missing lock nesting notation
|
|
KASAN: use-after-free Read in __list_add_valid (3)
kvm
net
virt
|
19 |
|
|
|
16 |
3165d |
3172d
|
4/29 |
3162d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
WARNING in vhost_dev_cleanup
net
virt
kvm
|
-1 |
syz, C |
|
|
4 |
3166d |
3172d
|
4/29 |
3165d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
possible deadlock in vhost_chr_write_iter
kvm
net
virt
|
4 |
syz, C |
|
|
25952 |
3172d |
3174d
|
4/29 |
3168d |
e9cb4239134c
vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
|