|
possible deadlock in keyring_clear (3)
prio:high
keyrings
lsm
|
4 |
C |
|
|
81 |
28d |
291d
|
29/29 |
10d |
696c030e1e34
fscrypt: Replace mk_users keyring with simple list
|
|
general protection fault in task_work_cancel
lsm
prio:high
|
2 |
syz |
error |
|
15 |
121d |
140d
|
29/29 |
65d |
929553bbb4cd
landlock: Fully release unused TSYNC work entries
|
|
INFO: task hung in restrict_one_thread_callback
lsm
kernel
|
1 |
C |
|
|
39 |
124d |
155d
|
29/29 |
65d |
ff88df67dbf7
landlock: Serialize TSYNC thread restriction
|
|
memory leak in prepare_creds (6)
lsm
|
3 |
C |
|
|
2 |
160d |
182d
|
29/29 |
80d |
1cb968a2013f
nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().
|
|
memory leak in prepare_creds (5)
lsm
|
3 |
C |
|
|
60 |
186d |
260d
|
29/29 |
185d |
df8d829bba3a
nfsd: fix memory leak in nfsd_create_serv error paths
|
|
Unable to handle kernel write to read-only memory at virtual address ADDR (2)
net
lsm
|
-1 |
|
|
|
1 |
383d |
381d
|
29/29 |
324d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
WARNING in kvfree_call_rcu
net
lsm
|
-1 |
C |
|
|
2 |
383d |
381d
|
29/29 |
324d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
KASAN: slab-use-after-free Read in key_put
lsm
keyrings
|
19 |
C |
done |
|
9 |
516d |
614d
|
28/29 |
410d |
75845c6c1a64
keys: Fix UAF in key_put()
|
|
WARNING in free_ruleset
lsm
|
-1 |
C |
|
|
76 |
456d |
482d
|
28/29 |
410d |
fe81536af397
landlock: Remove incorrect warning
|
|
WARNING in get_mode_access
lsm
|
-1 |
C |
inconclusive |
|
12 |
559d |
617d
|
28/29 |
445d |
49440290a093
landlock: Handle weird files
|
|
WARNING in handle_policy_update
lsm
|
-1 |
C |
|
|
61 |
565d |
586d
|
28/29 |
445d |
f09ff307c729
safesetid: check size of policy writes
|
|
INFO: task hung in process_measurement (2)
integrity
lsm
|
1 |
C |
done |
|
607 |
447d |
1050d
|
28/29 |
445d |
a5324b3a488d
exfat: fix the infinite loop in __exfat_free_cluster()
|
|
WARNING in current_check_refer_path
lsm
|
-1 |
C |
|
|
90 |
559d |
743d
|
28/29 |
445d |
49440290a093
landlock: Handle weird files
|
|
possible deadlock in process_measurement (4)
integrity
lsm
|
4 |
C |
done |
|
7976 |
628d |
665d
|
28/29 |
618d |
58a039e679fe
mm: split critical region in remap_file_pages() and invoke LSMs in between
|
|
general protection fault in hook_inode_free_security
lsm
|
2 |
|
|
|
12 |
741d |
808d
|
28/29 |
641d |
63dff3e48871
lsm: add the inode_free_security_rcu() LSM implementation hook
|
|
WARNING in collect_domain_accesses
lsm
|
-1 |
C |
done |
|
3 |
794d |
806d
|
25/29 |
774d |
88da52ccd66e
landlock: Fix d_parent walk
|
|
WARNING in __mod_timer
keyrings
lsm
|
-1 |
|
|
|
2 |
1210d |
1244d
|
22/29 |
1143d |
63a759694eed
debugobject: Prevent init race with static objects
|
|
kernel BUG in commit_creds
lsm
io-uring
|
-1 |
C |
done |
|
5 |
1558d |
1562d
|
22/29 |
1247d |
701521403cfb
io_uring: abort file assignment prior to assigning creds
|
|
memory leak in keyctl_watch_key
keyrings
lsm
|
3 |
C |
|
|
1 |
1591d |
1587d
|
22/29 |
1247d |
3d8dcf278b1e
watch_queue: Actually free the watch
|
|
BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission
lsm
mm
|
10 |
C |
|
|
1 |
1353d |
1349d
|
22/29 |
1247d |
578b565b240a
9p/fd: Fix write overflow in p9_read_work
|
|
kernel panic: stack is corrupted in __kmalloc
integrity
lsm
sctp
|
2 |
|
|
|
4 |
1252d |
1506d
|
22/29 |
1247d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: use-after-free Read in netlbl_catmap_walk
lsm
net
|
19 |
C |
inconclusive |
|
1 |
1795d |
1795d
|
20/29 |
1600d |
0817534ff9ea
smackfs: Fix use-after-free in netlbl_catmap_walk()
|
|
KASAN: use-after-free Read in cipso_v4_doi_add
lsm
net
|
19 |
|
|
|
1 |
1744d |
1740d
|
20/29 |
1600d |
0934ad42bb2c
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
|
|
kernel panic: smack: Failed to initialize cipso DOI.
lsm
|
2 |
C |
done |
error |
128 |
1727d |
2308d
|
20/29 |
1600d |
f91488ee15bd
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
|
|
KASAN: use-after-free Read in cipso_v4_genopt
lsm
net
|
19 |
C |
inconclusive |
|
5 |
1970d |
1971d
|
20/29 |
1718d |
ad5d07f4a9cd
cipso,calipso: resolve a number of problems with the DOI refcounts
1165affd4848
net: mac802154: Fix general protection fault
|
|
BUG: unable to handle kernel paging request in cap_capable
lsm
|
8 |
C |
unreliable |
|
4 |
1815d |
1816d
|
20/29 |
1718d |
9384eacd80f3
net: core: don't call SIOCBRADD/DELIF for non-bridge devices
|
|
UBSAN: array-index-out-of-bounds in ima_inode_setxattr
lsm
integrity
|
15 |
C |
unreliable |
|
6 |
1799d |
1801d
|
20/29 |
1718d |
cb181da16196
IMA: reject unknown hash algorithms in ima_get_hash_algo
|
|
WARNING in smk_set_cipso (2)
lsm
|
-1 |
C |
inconclusive |
|
24 |
1852d |
1930d
|
20/29 |
1718d |
49ec114a6e62
smackfs: restrict bytes count in smk_set_cipso()
|
|
memory leak in prepare_creds (2)
lsm
|
3 |
C |
|
|
2 |
1857d |
1952d
|
20/29 |
1718d |
f60a85cad677
bpf: Fix umd memory leak in copy_process()
|
|
WARNING in memdup_user_nul
lsm
|
-1 |
C |
inconclusive |
|
2 |
2018d |
2018d
|
20/29 |
1933d |
7ef4c19d245f
smackfs: restrict bytes count in smackfs write functions
|
|
memory leak in prepare_creds
lsm
|
3 |
C |
|
|
10 |
1983d |
2157d
|
19/29 |
1963d |
f26c08b444df
io_uring: fix file leak on error path of io ctx creation
|
|
possible deadlock in process_measurement (2)
integrity
lsm
|
4 |
C |
done |
done |
56 |
2060d |
2427d
|
15/29 |
2026d |
15a8d68e9dc2
mm/hugetlb: a page from buddy is not on any list
|
|
KASAN: slab-out-of-bounds Read in vsscanf (2)
lsm
|
17 |
C |
error |
|
5 |
2180d |
2194d
|
15/29 |
2137d |
a6bd4f6d9b07
Smack: fix another vsscanf out of bounds
|
|
KASAN: use-after-free Read in smk_write_relabel_self
lsm
|
19 |
C |
done |
|
2 |
2241d |
2237d
|
15/29 |
2137d |
beb4ee6770a8
Smack: fix use-after-free in smk_write_relabel_self()
|
|
KASAN: slab-out-of-bounds Read in vsscanf
lsm
|
17 |
C |
done |
|
61 |
2209d |
2311d
|
15/29 |
2199d |
84e99e58e8d1
Smack: slab-out-of-bounds in vsscanf
|
|
general protection fault in ima_free_template_entry
lsm
integrity
|
2 |
C |
done |
|
3 |
2222d |
2242d
|
15/29 |
2199d |
42413b49804b
ima: Directly free *entry in ima_alloc_init_template() if digests is NULL
|
|
BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr
lsm
net
|
10 |
C |
done |
|
8 |
2332d |
2342d
|
15/29 |
2292d |
dc24f8b4ecd3
mptcp: add dummy icsk_sync_mss()
|
|
general protection fault in override_creds
lsm
|
2 |
C |
done |
|
6 |
2424d |
2427d
|
15/29 |
2390d |
0b8c0ec7eedc
io_uring: use current task creds instead of allocating a new one
|
|
KMSAN: use-after-free in hidraw_ioctl
fs
lsm
|
18 |
|
|
|
1 |
2482d |
2482d
|
13/29 |
2432d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
|
kernel BUG at security/keys/keyring.c:LINE!
keyrings
lsm
|
-1 |
C |
|
|
12 |
2750d |
2850d
|
11/29 |
2698d |
ede0fa98a900
KEYS: always initialize keyring_index_key::desc_len
|
|
KASAN: use-after-free Read in task_is_descendant
lsm
|
19 |
C |
|
|
27 |
2747d |
2834d
|
11/29 |
2698d |
9474f4e7cd71
Yama: Check for pid death before checking ancestry
|
|
general protection fault in keyctl_pkey_params_get
keyrings
lsm
|
2 |
C |
|
|
85 |
2761d |
2821d
|
11/29 |
2747d |
57b0e3145320
KEYS: fix parsing invalid pkey info string
94c13f66e13c
security: don't use a negative Opt_err token index
|
|
KASAN: stack-out-of-bounds Read in keyctl_pkey_params_get
keyrings
lsm
|
17 |
|
|
|
2 |
2762d |
2761d
|
11/29 |
2748d |
57b0e3145320
KEYS: fix parsing invalid pkey info string
|
|
general protection fault in rb_erase
integrity
lsm
|
2 |
C |
|
|
79836 |
2819d |
2859d
|
11/29 |
2811d |
18aded174920
ext4: fix EXT4_IOC_SWAP_BOOT
|
|
KASAN: slab-out-of-bounds Read in cap_inode_getsecurity
lsm
|
17 |
C |
|
|
11 |
3123d |
3124d
|
3/29 |
3117d |
dc32b5c3e6e2
capabilities: fix buffer overread on very short xattr
|
|
KASAN: slab-out-of-bounds Read in cap_convert_nscap
lsm
|
17 |
C |
|
|
4148 |
3122d |
3126d
|
3/29 |
3117d |
dc32b5c3e6e2
capabilities: fix buffer overread on very short xattr
|