|
KASAN: use-after-free Read in em28xx_init_extension (2)
prio:high
usb
media
|
19 |
syz, C |
done |
|
1464 |
29d |
1629d
|
26/29 |
never |
826915b6b65e
media: em28xx: fix use-after-free of dev_next->devlist on disconnect
|
|
KASAN: use-after-free Read in em28xx_close_extension (2)
prio:high
usb
media
|
19 |
syz, C |
error |
|
35 |
7h36m |
725d
|
26/29 |
never |
95f76f51937f
media: em28xx: defer audio-only extension registration
|
|
KASAN: slab-use-after-free Write in as102_release (2)
media
|
22 |
|
|
|
156 |
150d |
500d
|
29/29 |
117d |
8bd29dbe03fc
media: as102: fix to not free memory after the device is registered in as102_usb_probe()
|
|
KASAN: use-after-free Read in v4l2_fh_init
usb
media
|
19 |
syz, C |
error |
inconclusive |
7824 |
148d |
2705d
|
29/29 |
117d |
a66485a934c7
media: em28xx: fix use-after-free in em28xx_v4l2_open()
|
|
WARNING in media_create_pad_link (2)
usb
media
|
-1 |
syz, C |
error |
done |
11 |
342d |
545d
|
29/29 |
304d |
0e2ee70291e6
media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
|
|
general protection fault in ir_raw_event_store_with_filter
usb
media
|
22 |
syz, C |
error |
|
879 |
582d |
2378d
|
28/29 |
461d |
f656cfbc7a29
media: streamzap: fix race between device disconnection and urb callback
|
|
WARNING in iguanair_probe/usb_submit_urb (2)
media
|
-1 |
syz, C |
done |
|
18 |
597d |
718d
|
28/29 |
496d |
b98d5000c505
media: rc: iguanair: handle timeouts
|
|
WARNING in uvc_status_unregister
usb
media
|
-1 |
syz, C |
done |
|
61256 |
587d |
695d
|
28/29 |
496d |
a67f75c2b5ec
media: uvcvideo: Fix deadlock during uvc_probe
|
|
WARNING in media_create_pad_link
usb
media
|
-1 |
syz, C |
done |
done |
104 |
662d |
2314d
|
28/29 |
637d |
3dd075fe8ebb
media: uvcvideo: Require entities to have a non-zero unique ID
|
|
KASAN: use-after-free Read in __media_entity_remove_links
usb
media
|
19 |
syz, C |
|
|
7 |
2366d |
2464d
|
25/29 |
985d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
UBSAN: shift-out-of-bounds in set_flicker
usb
media
|
-1 |
syz |
|
|
5 |
1044d |
1124d
|
25/29 |
999d |
099be1822d1f
media: gspca: cpia1: shift-out-of-bounds in set_flicker
|
|
KASAN: use-after-free Read in si470x_int_in_callback (2)
usb
media
|
19 |
syz, C |
error |
|
7303 |
1366d |
2523d
|
22/29 |
1298d |
7d21e0b1b41b
media: si470x: Fix use-after-free in si470x_int_in_callback()
|
|
INFO: trying to register non-static key in mxl111sf_ctrl_msg
usb
media
|
-1 |
syz, C |
|
|
73 |
2607d |
2710d
|
20/29 |
1651d |
44870a9e7a3c
media: mxl111sf: change mutex_init() location
|
|
BUG: corrupted list in em28xx_init_extension
usb
media
|
8 |
syz, C |
error |
|
18 |
1882d |
2426d
|
20/29 |
1651d |
2c98b8a3458d
media: em28xx: add missing em28xx_close_extension
|
|
WARNING: zero-size vmalloc in dvb_dmx_init
media
usb
|
-1 |
syz, C |
|
|
62 |
1892d |
1956d
|
20/29 |
1770d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
WARNING in __vmalloc_node_range
media
usb
|
-1 |
syz, C |
|
|
7 |
1956d |
1957d
|
20/29 |
1770d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_printdata
usb
media
|
-1 |
syz, C |
error |
|
331 |
2031d |
2098d
|
20/29 |
1984d |
9dec0f48a75e
media: mceusb: sanity check for prescaler value
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_recv
media
usb
|
-1 |
syz, C |
|
|
13 |
2031d |
2095d
|
20/29 |
1984d |
1b43bad31fb0
media: mceusb: Fix potential out-of-bounds shift
|
|
WARNING in ati_remote_sendpacket/usb_submit_urb
usb
media
|
-1 |
syz, C |
|
|
22 |
2299d |
2610d
|
15/29 |
2128d |
a8be80053ea7
media: ati_remote: sanity check for both endpoints
|
|
KASAN: use-after-free Read in rc_dev_uevent
media
|
19 |
|
|
|
1 |
2230d |
2230d
|
15/29 |
2181d |
4f0835d6677d
media: rc: uevent sysfs file races with rc_unregister_device()
|
|
general protection fault in go7007_usb_probe
usb
media
|
2 |
syz, C |
|
|
2103 |
2229d |
2337d
|
15/29 |
2189d |
137641287eb4
go7007: add sanity checking for endpoints
|
|
WARNING in flexcop_usb_probe/usb_submit_urb
usb
media
|
-1 |
syz, C |
|
|
4 |
2544d |
2581d
|
15/29 |
2378d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
WARNING in uvc_scan_chain_forward
usb
media
|
-1 |
syz, C |
|
|
6 |
2440d |
2464d
|
15/29 |
2400d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
general protection fault in flexcop_usb_probe
usb
media
|
2 |
syz, C |
|
|
403 |
2482d |
2712d
|
15/29 |
2468d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
kernel BUG at kernel/time/timer.c:LINE! (4)
media
usb
|
-1 |
syz |
|
|
1 |
2538d |
2534d
|
15/29 |
2468d |
f3f5ba42c58d
media: imon: invalid dereference in imon_touch_event
|
|
INFO: trying to register non-static key in ida_destroy
usb
media
|
-1 |
syz, C |
|
|
4272 |
2481d |
2604d
|
15/29 |
2468d |
8c279e9394ca
media: uvcvideo: Fix error path in control parsing failure
|
|
WARNING in em28xx_usb_disconnect
usb
media
|
-1 |
syz, C |
|
|
8 |
2561d |
2593d
|
13/29 |
2526d |
46e4a26615cc
media: em28xx: modules workqueue not inited for 2nd device
|
|
KASAN: use-after-free Read in si470x_int_in_callback
usb
media
|
19 |
syz, C |
|
|
25 |
2535d |
2624d
|
13/29 |
2526d |
0d616f2a3fdb
media: radio/si470x: kill urb on error
|
|
KASAN: slab-out-of-bounds Read in hdpvr_probe
usb
media
|
17 |
syz, C |
|
|
10 |
2563d |
2638d
|
13/29 |
2526d |
8b8900b729e4
media: hdpvr: add terminating 0 at end of string
|
|
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query
usb
media
|
17 |
syz, C |
|
|
2236 |
2572d |
2710d
|
13/29 |
2526d |
0c4df39e504b
media: technisat-usb2: break out of loop at end of buffer
|
|
KASAN: global-out-of-bounds Read in dvb_pll_attach
media
usb
|
17 |
syz, C |
|
|
2 |
2564d |
2623d
|
13/29 |
2526d |
c268e7adea52
media: dvb-frontends: use ida for pll number
|
|
KASAN: global-out-of-bounds Read in hdpvr_probe
usb
media
|
17 |
syz, C |
|
|
15 |
2579d |
2692d
|
13/29 |
2526d |
d4a6a9537bc3
media: hdpvr: Add device num check and handling
|
|
WARNING in iguanair_probe/usb_submit_urb
usb
media
|
-1 |
syz, C |
|
|
3 |
2557d |
2607d
|
13/29 |
2526d |
ab1cbdf159be
media: iguanair: add sanity checks
|
|
KASAN: use-after-free Read in cpia2_usb_disconnect
usb
media
|
19 |
syz, C |
|
|
3 |
2624d |
2708d
|
12/29 |
2597d |
eff73de2b160
media: cpia2_usb: first wake up, then free in disconnect
|
|
KASAN: slab-out-of-bounds Read in au0828_rc_unregister (2)
media
|
17 |
|
|
|
11 |
2669d |
2679d
|
12/29 |
2597d |
6d0d1ff9ff21
media: au0828: fix null dereference in error path
|
|
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap
usb
media
|
11 |
syz, C |
|
|
76 |
2605d |
2695d
|
12/29 |
2597d |
5d2e73a5f80a
media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
|
|
KASAN: use-after-free Read in v4l2_release
usb
media
|
19 |
syz, C |
|
|
275 |
2605d |
2709d
|
12/29 |
2597d |
c666355e60dd
media: radio-raremono: change devm_k*alloc to k*alloc
|
|
general protection fault in smsusb_init_device
media
usb
|
2 |
syz, C |
|
|
23 |
2668d |
2706d
|
12/29 |
2644d |
31e0456de5be
media: usb: siano: Fix general protection fault in smsusb
|