|
KASAN: slab-out-of-bounds Read in shrink_folio_list
mm
|
C |
|
|
683 |
535d |
536d
|
1/28 |
never |
mm: call folio_mapping() inside folio_needs_release()
|
|
KASAN: null-ptr-deref Write in sys_io_uring_register
mm
|
C |
done |
|
15 |
15d |
21d
|
1/28 |
never |
xarray-extract-helper-from-__xa_insertcmpxchg-fix
|
|
KASAN: use-after-free Read in __vma_adjust
mm
|
C |
done |
|
10 |
872d |
928d
|
1/28 |
never |
fs/userfaultfd: fix vma iteration in mas_for_each() loop
|
|
BUG: sleeping function called from invalid context in alloc_buffer_head
mm
|
|
|
|
15 |
591d |
597d
|
1/28 |
never |
workingset: add missing rcu_read_unlock() in lru_gen_refault()
|
|
general protection fault in find_mergeable_anon_vma
mm
|
|
|
|
1 |
21d |
17d
|
20/28 |
never |
8ac662f5da19
fork: avoid inappropriate uprobe access to invalid mm
|
|
linux-next boot error: kernel BUG at include/linux/page-flags.h:LINE!
mm
|
|
|
|
3 |
1484d |
1484d
|
1/28 |
never |
fixup for "mm: refactor initialization of stuct page for holes"
|
|
kernel BUG in free_bprm
fs
mm
|
C |
done |
|
445 |
50d |
51d
|
1/28 |
never |
exec: NULL out bprm->argv0 when it is an ERR_PTR
|
|
general protection fault in vma_interval_tree_remove
mm
|
C |
done |
|
14 |
210d |
969d
|
1/28 |
never |
mm/mmap: fix advanced maple tree API for mmap_region()
mm/mmap: qvoid dereferencing next on null in BUG_ON()
|
|
WARNING in vma_merge
mm
|
C |
done |
|
18115 |
395d |
974d
|
1/28 |
never |
mm/mlock: use maple state in apply_mlockall_flags()
|
|
INFO: task hung in remove_inode_hugepages
fs
mm
|
C |
done |
|
52 |
78d |
170d
|
1/28 |
never |
INFO: task hung in remove_inode_hugepages
|
|
kernel BUG in mfill_atomic_copy
mm
|
C |
error |
|
3 |
535d |
531d
|
1/28 |
never |
mm: userfaultfd: check for start + len overflow in validate_range: fix
|
|
KASAN: slab-use-after-free Read in move_pages_pte
mm
|
C |
done |
|
3 |
20d |
18d
|
1/28 |
never |
mm: pgtable: make ptlock be freed by RCU
|
|
kernel BUG in vma_replace_policy
mm
|
C |
done |
|
6 |
468d |
477d
|
1/28 |
never |
mm: lock VMAs skipped by a failed queue_pages_range()
|
|
WARNING in folio_memcg
mm
|
C |
done |
|
285 |
6h26m |
129d
|
1/28 |
never |
mm: kmem: fix split_page_memcg()
|
|
general protection fault in vsscanf (2)
mm
|
C |
|
|
11 |
4d16h |
10d
|
20/28 |
never |
d3ac65d274b3
mm: huge_memory: handle strsep not finding delimiter
|
|
WARNING: locking bug in __rmqueue_pcplist
mm
|
C |
|
|
6176 |
now |
53d
|
1/28 |
never |
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
general protection fault in do_migrate_pages
mm
|
C |
|
|
2 |
19d |
36d
|
27/28 |
never |
091c1dd2d4df
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
|
|
WARNING: suspicious RCU usage in mas_walk (3)
mm
|
C |
done |
|
12 |
428d |
442d
|
1/28 |
never |
mempolicy: migration attempt to match interleave nodes: fix
|
|
KASAN: out-of-bounds Read in copy_from_kernel_nofault
mm
|
C |
done |
|
1621 |
77d |
86d
|
27/28 |
never |
e4137f08816b
mm, kasan, kmsan: instrument copy_from/to_kernel_nofault
|
|
linux-next test error: kernel BUG in folio_add_new_anon_rmap
mm
|
|
|
|
2 |
79d |
79d
|
1/28 |
never |
mm-add-pageanonnotksm-fix
|
|
KASAN: slab-use-after-free Read in finish_fault
mm
|
C |
done |
|
8 |
193d |
196d
|
1/28 |
never |
mm-memory-extend-finish_fault-to-support-large-folio-fix
|
|
kernel BUG in folio_flags
mm
|
|
|
|
62 |
267d |
714d
|
1/28 |
never |
mm-reimplement-compound_nr-fix
|
|
WARNING in page_add_anon_rmap
mm
|
C |
done |
|
1041 |
464d |
465d
|
1/28 |
never |
mm-rmap-simplify-pageanonexclusive-sanity-checks-when-adding-anon-rmap-fix
|
|
kernel BUG in const_folio_flags (2)
mm
|
syz |
|
|
1 |
37d |
33d
|
27/28 |
never |
3203b3ab0fcf
mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
|
|
general protection fault in vma_is_shmem
mm
io-uring
|
C |
error |
|
28 |
856d |
858d
|
1/28 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
BUG: unable to handle kernel paging request in alloc_huge_page
mm
|
C |
unreliable |
|
491 |
1231d |
1230d
|
1/28 |
never |
mm/hugetlb: Initialize page to NULL in alloc_buddy_huge_page_with_mpol()
|
|
KASAN: slab-use-after-free Read in madvise_collapse
mm
|
C |
error |
|
5 |
521d |
522d
|
1/28 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
kernel BUG in collapse_file (3)
mm
|
C |
done |
|
14 |
521d |
528d
|
1/28 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
WARNING in handle_userfault
mm
|
C |
error |
|
71 |
532d |
540d
|
1/28 |
never |
mm: fix a lockdep issue in vma_assert_write_locked
|
|
possible deadlock in collapse_file
mm
|
C |
done |
|
189 |
661d |
662d
|
1/28 |
never |
mm/khugepaged: fix vm_lock/i_mmap_rwsem inversion in retract_page_tables
|
|
KASAN: slab-use-after-free Read in __mmap_region
mm
|
C |
|
|
5 |
11d |
19d
|
20/28 |
never |
42c4e4b20d9c
mm: correctly reference merged VMA
|
|
linux-next test error: WARNING in vma_merge
mm
|
|
|
|
6 |
701d |
702d
|
1/28 |
never |
mm/madvise: fix VMA_ITERATOR start position
|
|
linux-next boot error: WARNING in prepare_kswapd_sleep
mm
|
|
|
|
15 |
1491d |
1493d
|
1/28 |
never |
mm/memcg: warn on missing memcg on mem_cgroup_page_lruvec()
|
|
KASAN: slab-use-after-free Read in handle_mm_fault
mm
|
C |
done |
|
107 |
160d |
163d
|
1/28 |
never |
mm: check for VM_DROPPABLE in vma prior to handling mm fault
|
|
BUG: Bad page state in kvm_coalesced_mmio_init
mm
|
|
|
|
1 |
51d |
51d
|
28/28 |
10d |
66edc3a5894c
mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
|
|
general protection fault in swap_reclaim_full_clusters
mm
|
C |
|
|
1530 |
42d |
50d
|
28/28 |
10d |
dcf32ea7eced
mm: swapfile: fix cluster reclaim work crash on rotational devices
|
|
WARNING in folio_walk_start
mm
|
|
|
|
1 |
74d |
72d
|
28/28 |
42d |
7c18d4811000
mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
|
|
possible deadlock in lock_mm_and_find_vma (2)
mm
|
C |
|
|
6626 |
45d |
117d
|
28/28 |
42d |
58a039e679fe
mm: split critical region in remap_file_pages() and invoke LSMs in between
|
|
KCSAN: data-race in __delete_from_swap_cache / __try_to_reclaim_swap
mm
|
|
|
|
1 |
85d |
85d
|
28/28 |
43d |
818f916e3a07
mm: swap: prevent possible data-race in __try_to_reclaim_swap
|
|
WARNING in copy_huge_pmd
mm
|
C |
done |
|
361 |
77d |
94d
|
28/28 |
43d |
47fa30118f02
mm/huge_memory: check pmd_special() only after pmd_present()
|
|
KMSAN: uninit-value in lzo1x_1_do_compress (3)
mm
|
|
|
|
1 |
122d |
118d
|
28/28 |
65d |
2b59ffad47db
jfs: Fix uninit-value access of new_ea in ea_buffer
|
|
INFO: rcu detected stall in do_vmi_munmap (2)
mm
|
|
|
|
40 |
112d |
129d
|
28/28 |
65d |
f806de88d8f7
maple_tree: remove rcu_read_lock() from mt_validate()
|
|
KASAN: slab-use-after-free Read in hugetlb_fault (2)
mm
|
|
|
|
2 |
104d |
108d
|
28/28 |
65d |
98b74bb4d7e9
mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway
2a058ab3286d
mm: change vmf_anon_prepare() to __vmf_anon_prepare()
|
|
KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter
cgroups
mm
|
|
|
|
59 |
96d |
118d
|
28/28 |
65d |
ec0db74b4b1f
mm: restart if multiple traversals raced
|
|
memory leak in corrupted (2)
mm
exfat
|
syz |
|
|
432 |
102d |
268d
|
28/28 |
65d |
c290fe508eee
exfat: resolve memory leak from exfat_create_upcase_table()
|
|
possible deadlock in __mmap_lock_do_trace_start_locking
mm
|
C |
done |
done |
30 |
150d |
244d
|
27/28 |
119d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
BUG: unable to handle kernel paging request in list_lru_add
mm
|
C |
done |
done |
11367 |
166d |
478d
|
27/28 |
120d |
aacd897d4d75
Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT"
|
|
possible deadlock in __mmap_lock_do_trace_released
mm
|
C |
done |
done |
5 |
160d |
176d
|
27/28 |
129d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
KASAN: slab-use-after-free Read in lru_add_fn
nilfs
mm
|
C |
inconclusive |
|
68 |
183d |
231d
|
27/28 |
133d |
49ae997f8f0d
nilfs2: add missing check for inode numbers on directory entries
nilfs2: add missing check for inode numbers on directory entries
|
|
BUG: corrupted list in __folio_undo_large_rmappable
mm
|
C |
error |
|
36 |
169d |
168d
|
27/28 |
134d |
f708f6970cc9
mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio
|
|
KMSAN: uninit-value in zswap_store
mm
|
|
|
|
2 |
142d |
200d
|
27/28 |
134d |
65121eff3e4c
ext4: avoid writing unitialized memory to disk in EA inodes
|
|
inconsistent lock state in valid_state (3)
mm
|
C |
error |
|
376 |
146d |
194d
|
27/28 |
134d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
possible deadlock in try_to_wake_up (5)
mm
|
C |
|
|
88 |
137d |
209d
|
27/28 |
134d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
KCSAN: data-race in __swap_writepage / scan_swap_map_slots (2)
mm
|
|
|
|
2 |
170d |
171d
|
27/28 |
134d |
7b7aca6d7c0f
mm: ignore data-race in __swap_writepage
|
|
general protection fault in dequeue_hugetlb_folio_nodemask (2)
mm
|
C |
done |
|
14 |
192d |
198d
|
27/28 |
134d |
09a533622842
mm/hugetlb: guard dequeue_hugetlb_folio_nodemask against NUMA_NO_NODE uses
|
|
BUG: sleeping function called from invalid context in vma_alloc_folio_noprof
mm
|
C |
done |
|
1 |
164d |
163d
|
27/28 |
134d |
280e36f0d5b9
nsfs: use cleanup guard
|
|
UBSAN: shift-out-of-bounds in try_to_shrink_lruvec
mm
|
C |
done |
|
4 |
210d |
211d
|
27/28 |
134d |
462966dc7d70
mm: vmscan: reset sc->priority on retry
|
|
WARNING in unmap_page_range (3)
mm
|
C |
|
|
169 |
272d |
282d
|
26/28 |
159d |
f8572367eaff
mm/memory: fix missing pte marker for !page on pte zaps
|
|
INFO: rcu detected stall in sys_wait4 (4)
mm
|
C |
done |
done |
2 |
225d |
258d
|
26/28 |
167d |
fb66df20a720
net/sched: taprio: extend minimum interval restriction to entire cycle too
|
|
BUG: soft lockup in tcp_write_timer (4)
kasan
mm
|
|
|
|
4 |
173d |
198d
|
26/28 |
169d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
kernel BUG in __vma_reservation_common
mm
|
C |
error |
|
8 |
200d |
234d
|
26/28 |
169d |
8daf9c702ee7
mm/hugetlb: do not call vma_add_reservation upon ENOMEM
|
|
KMSAN: uninit-value in virtqueue_add (4)
mm
|
C |
|
|
203184 |
198d |
359d
|
25/28 |
198d |
61b258b0d2f6
x86: call instrumentation hooks from copy_mc.c
|
|
WARNING in __page_table_check_ptes_set
mm
|
C |
|
|
2 |
252d |
248d
|
25/28 |
203d |
c88033efe9a3
mm/userfaultfd: reset ptes when close() for wr-protected ones
|
|
WARNING in __mod_memcg_lruvec_state
cgroups
mm
|
C |
|
|
270 |
233d |
268d
|
25/28 |
203d |
4f687281012e
mm: do not update memcg stats for NR_{FILE/SHMEM}_PMDMAPPED
|
|
possible deadlock in move_pages
mm
|
C |
|
|
206 |
273d |
282d
|
25/28 |
217d |
30af24facf0a
userfaultfd: fix deadlock warning when locking src and dst VMAs
|
|
upstream boot error: WARNING: refcount bug in __reset_page_owner
mm
|
|
|
|
555 |
251d |
283d
|
25/28 |
217d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
KASAN: slab-use-after-free Read in __vma_reservation_common
mm
|
syz |
|
|
13 |
244d |
257d
|
25/28 |
217d |
37641efaa3fa
hugetlb: check for anon_vma prior to folio allocation
|
|
upstream test error: WARNING: refcount bug in __reset_page_owner
mm
|
|
|
|
13 |
259d |
281d
|
25/28 |
217d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
WARNING: refcount bug in __reset_page_owner
mm
|
C |
|
|
93128 |
250d |
282d
|
25/28 |
217d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
usb-testing boot error: WARNING: refcount bug in __reset_page_owner
mm
|
|
|
|
126 |
247d |
275d
|
25/28 |
217d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2)
mm
|
C |
|
|
2 |
258d |
268d
|
25/28 |
217d |
c6f48506ba30
arm32, bpf: Reimplement sign-extension mov instruction
|
|
WARNING in __hugetlb_cgroup_uncharge_folio
mm
|
syz |
|
|
3 |
246d |
255d
|
25/28 |
217d |
b76b46902c2d
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
|
|
kernel BUG in sg_init_one
mm
|
C |
|
|
1032 |
273d |
282d
|
25/28 |
217d |
9c500835f279
mm: zswap: fix kernel BUG in sg_init_one
|
|
kernel BUG in PageHuge
mm
|
|
|
|
1 |
280d |
276d
|
25/28 |
217d |
d99e3140a4d3
mm: turn folio_test_hugetlb into a PageType
|
|
WARNING in hugetlb_change_protection (2)
mm
|
C |
|
|
631 |
237d |
264d
|
25/28 |
217d |
c5977c95dff1
mm/userfaultfd: allow hugetlb change protection upon poison entry
|
|
BUG: bad usercopy in raw_getsockopt
mm
hardening
|
C |
done |
|
4 |
309d |
309d
|
25/28 |
259d |
c8fba5d6df5e
can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault
mm
|
C |
done |
|
5 |
303d |
402d
|
25/28 |
272d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
WARNING in zswap_folio_swapin
mm
|
|
|
|
1 |
330d |
326d
|
25/28 |
272d |
16e96ba5e92c
mm/swap_state: update zswap LRU's protection range with the folio locked
|
|
kernel BUG in move_pages
mm
|
C |
done |
|
2 |
353d |
349d
|
25/28 |
330d |
5d4747a6cc8e
userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
|
|
WARNING in get_pte_pfn
mm
io-uring
|
C |
error |
|
2 |
360d |
370d
|
25/28 |
330d |
c28ac3c7eb94
mm/mglru: skip special VMAs in lru_gen_look_around()
|
|
WARNING in __folio_rmap_sanity_checks
mm
|
C |
done |
|
168 |
353d |
358d
|
25/28 |
330d |
9c5938694cd0
mm/rmap: silence VM_WARN_ON_FOLIO() in __folio_rmap_sanity_checks()
|
|
KMSAN: uninit-value in shrinker_alloc
mm
|
syz |
|
|
2 |
381d |
358d
|
25/28 |
330d |
7fba9420b726
mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
|
|
general protection fault in hugetlb_vma_lock_write
mm
|
C |
done |
|
110 |
383d |
424d
|
25/28 |
340d |
187da0f8250a
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
|
|
WARNING in unmap_page_range (2)
mm
|
C |
done |
|
2112 |
380d |
406d
|
25/28 |
340d |
4980e837cab7
mm/pagemap: fix wr-protect even if PM_SCAN_WP_MATCHING not set
|
|
BUG: unable to handle kernel paging request in __pte_offset_map_lock
mm
|
C |
|
|
2 |
416d |
426d
|
25/28 |
340d |
9aa1345d66b8
mm: fix oops when filemap_map_pmd() without prealloc_pte
|
|
WARNING in page_copy_sane
fs
mm
|
C |
done |
|
3 |
469d |
465d
|
25/28 |
371d |
a08c7193e4f1
mm/filemap: remove hugetlb special casing in filemap.c
|
|
BUG: Bad page map (7)
mm
|
C |
done |
|
19 |
451d |
473d
|
25/28 |
371d |
ce60f27bb62d
mm: abstract moving to the next PFN
|
|
WARNING in try_grab_page
xfs
mm
|
C |
|
|
48 |
456d |
541d
|
23/28 |
441d |
f443fd5af5db
crypto, cifs: fix error handling in extract_iter_to_sg()
|
|
possible deadlock in shmem_uncharge (2)
mm
|
C |
done |
|
29 |
528d |
527d
|
23/28 |
441d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
|
INFO: rcu detected stall in shmem_fault (5)
cgroups
mm
|
|
|
|
3 |
496d |
516d
|
23/28 |
441d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
KASAN: slab-out-of-bounds Read in mt_validate_nulls
mm
|
C |
error |
done |
15 |
541d |
539d
|
23/28 |
441d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
kernel BUG in validate_mm (2)
mm
|
C |
unreliable |
done |
217 |
541d |
539d
|
23/28 |
441d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
INFO: rcu detected stall in ext4_file_write_iter (7)
mm
bpf
ext4
|
|
|
|
3 |
482d |
525d
|
23/28 |
441d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
WARNING in __gup_longterm_locked
mm
|
C |
error |
|
90 |
539d |
541d
|
23/28 |
441d |
6cd06ab12d1a
gup: make the stack expansion warning a bit more targeted
|
|
KCSAN: data-race in drain_all_stock / drain_obj_stock (4)
cgroups
mm
|
|
|
|
3 |
599d |
614d
|
23/28 |
454d |
3b8abb323953
mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
|
|
inconsistent lock state in lru_gen_rotate_memcg
mm
|
C |
|
|
61 |
545d |
555d
|
23/28 |
454d |
814bc1de03ea
mm/mglru: make memcg_lru->lock irq safe
|
|
possible deadlock in do_writepages
fs
mm
|
|
|
|
15 |
609d |
612d
|
22/28 |
543d |
00d873c17e29
ext4: avoid deadlock in fs reclaim with page writeback
|
|
kernel BUG in page_table_check_clear
mm
|
C |
error |
|
17 |
568d |
601d
|
22/28 |
543d |
44d0fb387b53
mm: page_table_check: Ensure user pages are not slab pages
0143d148d1e8
usb: usbfs: Enforce page requirements for mmap
|
|
kernel BUG in find_mergeable_anon_vma
mm
|
C |
error |
|
4 |
662d |
658d
|
22/28 |
566d |
3dd443254941
mm: enable maple tree RCU mode by default
|
|
KASAN: null-ptr-deref Read in filemap_fault
mm
udf
|
C |
done |
|
112 |
595d |
608d
|
22/28 |
566d |
38a55db9877c
filemap: Handle error return from __filemap_get_folio()
|
|
KMSAN: uninit-value in ondemand_readahead
fs
mm
|
C |
|
|
221 |
664d |
828d
|
22/28 |
566d |
3e35102666f8
fs/cramfs/inode.c: initialize file_ra_state
|
|
KMSAN: kernel-infoleak in _copy_to_iter (8)
mm
|
C |
|
|
21180 |
566d |
661d
|
22/28 |
566d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
WARNING in split_huge_page_to_list (2)
mm
|
C |
error |
|
2334 |
591d |
855d
|
22/28 |
566d |
4737edbbdd49
mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
|
|
KASAN: slab-use-after-free Read in mas_next_entry
mm
|
syz |
error |
|
3 |
628d |
632d
|
22/28 |
566d |
f4e9e0e69468
mm/mempolicy: fix use-after-free of VMA iterator
|
|
net-next boot error: BUG: bad usercopy in qrtr_sendmsg
hardening
mm
|
|
|
|
30 |
685d |
687d
|
22/28 |
566d |
0b34d68049b0
net: enable usercopy for skb_small_head_cache
|
|
kernel BUG in hpage_collapse_scan_file
mm
|
C |
unreliable |
|
3 |
618d |
656d
|
22/28 |
566d |
2ce0bdfebc74
mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
|
|
WARNING in mbind_range
mm
|
C |
error |
|
3 |
716d |
717d
|
22/28 |
566d |
17dc622c7b0f
maple_tree: fix mas_prev() and mas_find() state handling
|
|
BUG: bad usercopy in con_font_op
hardening
mm
|
C |
done |
|
1 |
663d |
663d
|
22/28 |
566d |
18365ebf23f3
tty: vt: protect KD_FONT_OP_GET_TALL from unbound access
|
|
BUG: bad usercopy in put_cmsg
hardening
mm
|
C |
|
|
3 |
681d |
683d
|
22/28 |
566d |
2558b8039d05
net: use a bounce buffer for copying skb->mark
|
|
KCSAN: data-race in strscpy / strscpy (3)
ext4
mm
|
|
|
|
3 |
630d |
614d
|
22/28 |
566d |
cf587db2ee02
kernel: Allow a kernel thread's name to be set in copy_process
|
|
INFO: task hung in write_cache_pages (2)
mm
fs
|
C |
done |
|
36 |
594d |
665d
|
22/28 |
566d |
fb3592c41a44
migrate_pages: fix deadlock in batched migration
|
|
WARNING: CPU: NUM PID: NUM at mm/page_alloc.c:LINE get_page_from_freeli
mm
erofs
|
C |
error |
|
1 |
738d |
734d
|
22/28 |
566d |
12724ba38992
erofs: fix kvcalloc() misuse with __GFP_NOFAIL
|
|
memory leak in prctl
mm
|
C |
|
|
1 |
740d |
736d
|
22/28 |
566d |
a1193de562f5
mm: fix vma->anon_name memory leak for anonymous shmem VMAs
|
|
BUG: sleeping function called from invalid context in folio_copy
mm
|
C |
unreliable |
|
271 |
1252d |
1250d
|
22/28 |
623d |
715cbfd6c5c5
mm/migrate: Add folio_migrate_copy()
|
|
WARNING in alloc_charge_hpage
mm
|
C |
error |
|
112 |
719d |
790d
|
22/28 |
670d |
e031ff96b334
mm: khugepaged: allow page allocation fallback to eligible nodes
dec1d352de5c
mm: replace VM_WARN_ON to pr_warn if the node is offline with __GFP_THISNODE
|
|
general protection fault in list_lru_add
mm
|
C |
done |
|
1125 |
720d |
1008d
|
22/28 |
670d |
ae085d7f9365
mm: kfence: fix missing objcg housekeeping for SLAB
|
|
WARNING in change_protection
mm
|
C |
unreliable |
|
13 |
813d |
818d
|
22/28 |
670d |
515778e2d790
mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
|
|
KASAN: use-after-free Read in unregister_shrinker (2)
mm
|
C |
error |
|
3799 |
783d |
827d
|
22/28 |
670d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
KMSAN: uninit-value in mpol_rebind_mm (2)
mm
|
C |
|
|
11 |
925d |
1049d
|
22/28 |
670d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
KASAN: use-after-free Read in do_shrink_slab (2)
mm
|
|
|
|
105 |
796d |
820d
|
22/28 |
670d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
KCSAN: data-race in lru_add_fn / skb_append_pagefrags
mm
|
|
|
|
1 |
795d |
791d
|
22/28 |
670d |
228ebc41dfab
net: do not sense pfmemalloc status in skb_append_pagefrags()
|
|
possible deadlock in hugetlb_fault
mm
|
|
|
|
2 |
775d |
782d
|
22/28 |
670d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
KMSAN: uninit-value in mpol_rebind_task (2)
mm
|
C |
|
|
7 |
926d |
1087d
|
22/28 |
670d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
WARNING: locking bug in hugetlb_no_page
mm
|
C |
|
|
1 |
775d |
774d
|
22/28 |
670d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in __handle_mm_fault
mm
|
|
|
|
1 |
863d |
863d
|
22/28 |
670d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in do_sync_mmap_readahead
fs
mm
|
|
|
|
1 |
949d |
945d
|
22/28 |
670d |
dcfa24ba6899
filemap: Cache the value of vm_flags
|
|
usb-testing boot error: general protection fault in rcu_core
mm
fs
|
|
|
|
23 |
844d |
863d
|
22/28 |
670d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
usb-testing boot error: WARNING in anon_vma_clone
mm
|
|
|
|
1 |
863d |
863d
|
22/28 |
670d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
BUG: sleeping function called from invalid context in break_ksm
mm
|
C |
|
|
9 |
798d |
798d
|
22/28 |
670d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
|
WARNING in kcov_mmap
mm
|
|
|
|
14 |
948d |
1002d
|
22/28 |
670d |
ecc04463d1a3
kcov: don't generate a warning on vm_insert_page()'s failure
|
|
kernel panic: corrupted stack end in shmem_fault
cgroups
mm
|
|
|
|
5 |
678d |
808d
|
22/28 |
670d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in enqueue_task_fair
mm
|
|
|
|
1 |
848d |
848d
|
22/28 |
670d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in hugetlbfs_parse_param
fs
mm
|
C |
|
|
5 |
787d |
798d
|
22/28 |
670d |
26215b7ee923
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
|
|
KASAN: use-after-free Read in __oom_reap_task_mm
mm
|
|
|
|
1 |
1051d |
1046d
|
22/28 |
670d |
f798a1d4f94d
mm: fix use-after-free bug when mm->mmap is reused after being freed
|
|
memory leak in xas_nomem
mm
|
C |
|
|
1 |
947d |
943d
|
22/28 |
670d |
69a37a8ba1b4
mm/huge_memory: Fix xarray node memory leak
|
|
kernel panic: corrupted stack end in mld_dad_work
mm
|
|
|
|
1 |
842d |
842d
|
22/28 |
670d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KCSAN: data-race in lru_add_fn / tcp_build_frag
mm
|
|
|
|
4 |
840d |
849d
|
22/28 |
670d |
84ce071e38a6
net: introduce __skb_fill_page_desc_noacc
|
|
linux-next boot error: WARNING in kfence_protect
kasan
mm
|
|
|
|
12 |
768d |
770d
|
22/28 |
670d |
3e844d842d49
x86/mm: Ensure forced page table splitting
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in follow_page_mask
mm
|
|
|
|
1 |
845d |
841d
|
22/28 |
670d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING in find_vma
mm
|
C |
done |
|
2616 |
847d |
871d
|
22/28 |
670d |
d6f35446d076
binder_alloc: Add missing mmap_lock calls when using the VMA
44e602b4e52f
binder_alloc: add missing mmap_lock calls when using the VMA
|
|
WARNING in erofs_iget
erofs
mm
|
C |
|
|
6 |
792d |
842d
|
22/28 |
670d |
1dd73601a1cb
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
|
|
WARNING in nsim_map_alloc_elem
mm
|
C |
error |
|
7 |
865d |
886d
|
22/28 |
670d |
d0b80a9edb1a
netdevsim: Avoid allocation warnings triggered from user space
|
|
BUG: unable to handle kernel paging request in truncate_inode_partial_folio
fs
mm
|
C |
error |
|
4 |
872d |
911d
|
22/28 |
670d |
84ac013046cc
secretmem: fix unhandled fault in truncate
|
|
WARNING in hugetlb_wp
mm
|
C |
error |
|
3 |
783d |
789d
|
22/28 |
670d |
f347454d0341
mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
|
|
WARNING in register_shrinker_prepared
mm
f2fs
|
C |
error |
|
64 |
932d |
933d
|
22/28 |
670d |
5035ebc644ae
mm: shrinkers: introduce debugfs interface for memory shrinkers
|
|
WARNING in __split_huge_page_tail
arch
mm
io-uring
|
C |
error |
|
155 |
720d |
792d
|
22/28 |
670d |
5aae9265ee1a
mm: prep_compound_tail() clear page->private
|
|
KASAN: use-after-free Read in register_shrinker_prepared (2)
mm
|
C |
done |
|
1145 |
783d |
821d
|
22/28 |
670d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
kernel BUG in hugepage_add_anon_rmap
mm
|
|
|
|
2 |
1034d |
1030d
|
22/28 |
670d |
4eecb8b9163d
mm/migrate: Convert remove_migration_ptes() to folios
|
|
kernel BUG in mcopy_continue
mm
|
|
|
|
4 |
929d |
927d
|
22/28 |
670d |
73f37dbcfe17
mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages
|
|
general protection fault in xas_create_range
mm
|
|
|
|
1 |
1015d |
1011d
|
22/28 |
670d |
3e3c658055c0
XArray: Fix xas_create_range() when multi-order entry present
|
|
KASAN: invalid-free in free_prealloced_shrinker
mm
|
C |
done |
|
3 |
890d |
890d
|
22/28 |
670d |
14773bfa70e6
mm: shrinkers: fix double kfree on shrinker name
|
|
kernel panic: corrupted stack end in lo_ioctl
fs
mm
|
|
|
|
4 |
677d |
799d
|
22/28 |
670d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
upstream boot error: BUG: corrupted list in find_and_remove_object
mm
|
|
|
|
1 |
865d |
865d
|
22/28 |
670d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in hugetlb_fault
mm
|
C |
|
|
383 |
699d |
795d
|
22/28 |
670d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
general protection fault in end_page_writeback
mm
nilfs
|
C |
error |
done |
2 |
770d |
800d
|
22/28 |
670d |
512c5ca01a36
nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
|
|
KASAN: use-after-free Read in hugetlb_handle_userfault
mm
|
C |
|
|
4 |
815d |
839d
|
22/28 |
670d |
958f32ce832b
mm: hugetlb: fix UAF in hugetlb_handle_userfault
|
|
BUG: bad usercopy in bpf_prog_get_info_by_fd
hardening
mm
|
|
|
|
1 |
943d |
943d
|
22/28 |
670d |
10f3b29c65bb
bpf, arm64: Clear prog->jited_len along prog->jited
|
|
BUG: Bad page map (5)
mm
io-uring
|
C |
|
|
35 |
712d |
970d
|
22/28 |
670d |
4d24de9425f7
mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock
|
|
WARNING in sco_sock_sendmsg
mm
|
C |
inconclusive |
|
2 |
1211d |
1211d
|
22/28 |
805d |
0771cbb3b97d
Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
|
|
KCSAN: data-race in flush_tlb_batched_pending / try_to_unmap_one
mm
|
|
|
|
2 |
1079d |
1133d
|
20/28 |
1023d |
5ee2fa2f0636
mm/rmap: fix potential batched TLB flush race
|
|
KMSAN: uninit-value in __mpol_equal (3)
mm
|
|
|
|
13 |
1162d |
1186d
|
20/28 |
1023d |
6d2aec9e123b
mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()
|
|
WARNING in page_counter_cancel (3)
mm
|
C |
done |
|
22 |
1081d |
1131d
|
20/28 |
1023d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
WARNING in __get_free_pages
mm
|
|
|
|
21 |
1079d |
1138d
|
20/28 |
1023d |
545a32498c53
floppy: Add max size check for user space request
|
|
WARNING: refcount bug in sys_memfd_secret
mm
|
C |
done |
done |
4217 |
1158d |
1160d
|
20/28 |
1023d |
87066fdd2e30
Revert "mm/secretmem: use refcount_t instead of atomic_t"
|
|
KASAN: use-after-free Read in unmap_page_range (2)
mm
|
C |
unreliable |
|
4 |
1134d |
1151d
|
20/28 |
1023d |
337546e83fc7
mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
|
|
BUG: sleeping function called from invalid context in copy_huge_page
mm
|
|
|
|
1 |
1174d |
1170d
|
20/28 |
1023d |
a4aeaa06d45e
mm: khugepaged: skip huge page collapse for special files
|
|
WARNING in page_counter_uncharge
mm
|
C |
done |
done |
2 |
1092d |
1092d
|
20/28 |
1023d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
INFO: rcu detected stall in syscall_exit_to_user_mode
cgroups
mm
|
|
|
|
78 |
1035d |
1216d
|
20/28 |
1023d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
|
WARNING in new_slab
mm
|
C |
inconclusive |
|
2 |
1071d |
1101d
|
20/28 |
1023d |
c12837d1bb31
ref_tracker: use __GFP_NOFAIL more carefully
|
|
kernel BUG in find_lock_entries
mm
|
C |
done |
|
10 |
1071d |
1234d
|
20/28 |
1023d |
d417b49fff3e
mm/filemap.c: remove bogus VM_BUG_ON
|
|
kernel BUG at mm/vmalloc.c:LINE! (2)
mm
|
C |
done |
done |
6605 |
1219d |
1630d
|
20/28 |
1066d |
537cf4e3cc2f
xsk: Fix umem cleanup bug at socket destruct
|
|
WARNING: suspicious RCU usage in validate_mm
mm
|
|
|
|
1 |
1297d |
1297d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in count (2)
fs
mm
|
|
|
|
1 |
1314d |
1314d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in rmap_walk_file
mm
|
|
|
|
1 |
1322d |
1322d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in __get_free_pages
mm
|
|
|
|
1 |
1332d |
1332d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in shrink_page_list
mm
|
|
|
|
1 |
1325d |
1325d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in exit_mmap
mm
|
|
|
|
1 |
1321d |
1321d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in shmem_alloc_page
mm
|
|
|
|
1 |
1336d |
1336d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
upstream build error (16)
mm
|
|
|
|
243 |
1150d |
1273d
|
20/28 |
1142d |
498cc50b3fa9
clk: hisilicon: hi3559a: Drop __init markings everywhere
|
|
BUG: sleeping function called from invalid context in stack_depot_save
mm
|
C |
unreliable |
|
8490 |
1241d |
1271d
|
20/28 |
1142d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
general protection fault in try_grab_compound_head
mm
io-uring
|
C |
done |
|
5 |
1243d |
1271d
|
20/28 |
1142d |
d08af0a59684
mm/hugetlb: fix refs calculation from unaligned @vaddr
|
|
WARNING: suspicious RCU usage in kernel_execve
fs
mm
|
|
|
|
1 |
1279d |
1279d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING in do_proc_bulk
mm
|
C |
inconclusive |
|
3 |
1333d |
1333d
|
20/28 |
1142d |
4f2629ea67e7
USB: usbfs: Don't WARN about excessively large memory allocations
|
|
KMSAN: kernel-infoleak in copy_page_to_iter (2)
fs
mm
|
C |
|
|
2099 |
1237d |
2296d
|
20/28 |
1142d |
ce3aba43599f
ext4: fix kernel infoleak via ext4_extent_header
|
|
WARNING: suspicious RCU usage in populate_vma_page_range
mm
|
|
|
|
1 |
1305d |
1305d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in schedule_debug
mm
|
|
|
|
1 |
1335d |
1335d
|
20/28 |
1142d |
7072a355ba19
netfilter: nfnetlink: add a missing rcu_read_unlock()
|
|
upstream test error: BUG: sleeping function called from invalid context in stack_depot_save
mm
|
|
|
|
4 |
1261d |
1274d
|
20/28 |
1142d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
WARNING: suspicious RCU usage in vm_mmap_pgoff
mm
|
|
|
|
1 |
1307d |
1307d
|
20/28 |
1142d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
BUG: sleeping function called from invalid context in munlock_vma_pages_range
mm
|
|
|
|
1 |
1263d |
1259d
|
20/28 |
1142d |
023e1a8dd502
mm/rmap: fix new bug: premature return from page_mlock_one()
|
|
KCSAN: data-race in expire_timers / try_to_del_timer_sync
mm
|
|
|
|
1029 |
1235d |
1640d
|
20/28 |
1142d |
bb7262b29547
timers: Move clearing of base::timer_running under base:: Lock
|
|
WARNING in tcindex_alloc_perfect_hash
mm
|
C |
inconclusive |
|
349 |
1272d |
1446d
|
20/28 |
1142d |
3f2db250099f
net: sched: fix warning in tcindex_alloc_perfect_hash
|
|
kernel BUG in remove_inode_hugepages
fs
mm
|
C |
unreliable |
|
3 |
1227d |
1227d
|
20/28 |
1142d |
c7b1850dfb41
hugetlb: don't pass page cache pages to restore_reserve_on_error
|
|
KASAN: out-of-bounds Read in kfence_guarded_free
kasan
mm
|
C |
error |
|
20 |
1453d |
1464d
|
20/28 |
1293d |
2b8305260fb3
kfence, kasan: make KFENCE compatible with KASAN
|
|
BUG: sleeping function called from invalid context in mm_access
mm
|
C |
done |
|
684 |
1441d |
1444d
|
20/28 |
1356d |
38e891849003
kbuild: lto: fix module versioning
|
|
kernel BUG at mm/page-writeback.c:LINE!
fs
mm
|
|
|
|
1 |
1456d |
1452d
|
19/28 |
1387d |
c2407cf7d22d
mm: make wait_on_page_writeback() wait for multiple pending writebacks
|
|
WARNING in rds_rdma_extra_size
mm
|
C |
done |
|
165 |
1422d |
1446d
|
19/28 |
1387d |
a11148e6fcce
net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
|
|
kernel BUG at include/linux/highmem.h:LINE!
fs
mm
|
C |
error |
|
32 |
1491d |
1496d
|
19/28 |
1387d |
0060ef3b4e6d
mm: support THPs in zero_user_segments
|
|
WARNING in squashfs_read_table
mm
squashfs
|
C |
inconclusive |
|
50 |
1417d |
1446d
|
19/28 |
1387d |
506220d2ba21
squashfs: add more sanity checks in xattr id lookup
|
|
WARNING in bpf_prog_test_run_raw_tp
mm
|
C |
done |
|
36 |
1436d |
1446d
|
19/28 |
1387d |
7ac6ad051150
bpf: Reject too big ctx_size_in for raw_tp test run
|
|
WARNING in qrtr_tun_write_iter
mm
|
C |
error |
|
57 |
1415d |
1446d
|
19/28 |
1387d |
2a80c1581237
net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
|
|
possible deadlock in hugetlb_cow
mm
|
C |
unreliable |
|
341 |
1457d |
1480d
|
19/28 |
1387d |
e7dd91c456a8
mm/hugetlb: fix deadlock in hugetlb_cow error path
|
|
INFO: rcu detected stall in sys_exit_group (6)
mm
|
C |
|
|
4 |
1547d |
1554d
|
19/28 |
1387d |
c583bcb8f5ed
rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
|
|
general protection fault in unlink_file_vma
mm
|
C |
done |
|
1 |
1573d |
1569d
|
15/28 |
1501d |
bc4fe4cdd602
mm: mmap: Fix general protection fault in unlink_file_vma()
|
|
INFO: rcu detected stall in exit_group
mm
|
C |
done |
done |
1 |
1538d |
1567d
|
15/28 |
1501d |
1d0e850a49a5
afs: Fix cell removal
|
|
WARNING in wp_page_copy
mm
|
syz |
done |
done |
9 |
1774d |
1850d
|
15/28 |
1501d |
c3e5ea6ee574
mm: avoid data corruption on CoW fault into PFN-mapped VMA
|
|
kernel panic: System is deadlocked on memory
mm
|
C |
done |
|
43 |
1627d |
1625d
|
15/28 |
1501d |
9066e5cfb73c
mm, oom: make the calculation of oom badness more accurate
|
|
general protection fault in madvise_cold_or_pageout_pte_range
mm
|
C |
done |
|
3 |
1554d |
1564d
|
15/28 |
1535d |
ce2684254bd4
mm: validate pmd after splitting
|
|
KASAN: use-after-free Write in page_counter_uncharge
mm
|
|
|
|
2 |
1585d |
1590d
|
15/28 |
1546d |
f1796544a0ca
memcg: fix use-after-free in uncharge_batch
|
|
KASAN: use-after-free Write in page_counter_cancel
mm
|
|
|
|
1 |
1594d |
1590d
|
15/28 |
1546d |
f1796544a0ca
memcg: fix use-after-free in uncharge_batch
|
|
KASAN: use-after-free Read in do_madvise
io-uring
mm
|
syz |
error |
|
4 |
1586d |
1587d
|
15/28 |
1546d |
7867fd7cc44e
mm: madvise: fix vma user-after-free
|
|
kernel BUG at mm/khugepaged.c:LINE!
mm
|
C |
done |
|
30 |
1588d |
1599d
|
15/28 |
1561d |
f3f99d63a815
khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
|
|
possible deadlock in shmem_fallocate (4)
mm
|
C |
done |
|
81 |
1612d |
1826d
|
15/28 |
1561d |
3e338d3c95c7
staging: android: ashmem: Fix lockdep warning for write operation
|
|
KCSAN: data-race in page_counter_try_charge / page_counter_try_charge (2)
mm
|
|
|
|
148 |
1596d |
1840d
|
15/28 |
1561d |
6e4bd50f3888
mm/page_counter: fix various data races at memsw
|
|
KCSAN: data-race in vm_area_dup / vma_interval_tree_remove (2)
mm
|
|
|
|
70 |
1656d |
1770d
|
15/28 |
1561d |
cda099b37d71
fork: Annotate a data race in vm_area_dup()
|
|
general protection fault in khugepaged
mm
|
C |
done |
|
3 |
1618d |
1631d
|
15/28 |
1561d |
594cced14ad3
khugepaged: fix null-pointer dereference due to race
|
|
general protection fault in unpin_user_pages
mm
|
C |
done |
|
13 |
1680d |
1680d
|
15/28 |
1622d |
f78cdbd75a57
rds: fix crash in rds_info_getsockopt()
|
|
BUG: unable to handle kernel NULL pointer dereference in alloc_pages_vma
mm
|
|
|
|
1 |
1652d |
1648d
|
15/28 |
1622d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in unlock_page
mm
fs
|
|
|
|
1 |
1654d |
1654d
|
15/28 |
1622d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_node_cpus (2)
fs
mm
|
|
|
|
9 |
1690d |
1857d
|
15/28 |
1622d |
314eeb43e5f2
rcu: Add *_ONCE() and data_race() to rcu_node ->exp_tasks plus locking
|
|
WARNING: bad unlock balance in get_user_pages_unlocked
mm
|
|
|
|
1 |
1727d |
1723d
|
15/28 |
1641d |
c7b6a566b985
mm/gup: Mark lock taken only after a successful retake
|
|
possible deadlock in user_shm_lock
mm
|
|
|
|
12 |
1680d |
1717d
|
15/28 |
1651d |
ea0dfeb4209b
shmem: fix possible deadlocks on shmlock_user_lock
|
|
possible deadlock in shmem_mfill_atomic_pte
mm
|
C |
done |
|
82 |
1679d |
1730d
|
15/28 |
1651d |
94b7cc01da5a
mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
|
|
possible deadlock in shmem_uncharge
mm
|
C |
done |
|
101 |
1680d |
1719d
|
15/28 |
1651d |
ea0dfeb4209b
shmem: fix possible deadlocks on shmlock_user_lock
|
|
WARNING: bad unlock balance in __get_user_pages_remote
mm
|
C |
done |
|
15 |
1723d |
1723d
|
15/28 |
1691d |
c7b6a566b985
mm/gup: Mark lock taken only after a successful retake
|
|
KASAN: stack-out-of-bounds Write in mpol_to_str
mm
|
C |
done |
|
23 |
1732d |
1736d
|
15/28 |
1691d |
aa9f7d5172fa
mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
|
|
BUG: unable to handle kernel paging request in kernel_get_mempolicy
mm
|
C |
done |
|
1 |
1727d |
1724d
|
15/28 |
1691d |
ba841078cd05
mm/mempolicy: Allow lookup_node() to handle fatal signal
|
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_cpus
fs
mm
|
|
|
|
7 |
1785d |
1879d
|
15/28 |
1772d |
c51f83c315c3
rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
|
|
KCSAN: data-race in __rcu_read_unlock / rcu_report_exp_cpu_mult
cgroups
mm
|
|
|
|
21 |
1788d |
1848d
|
15/28 |
1772d |
c51f83c315c3
rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
|
|
KASAN: slab-out-of-bounds Write in mpol_parse_str
mm
|
C |
done |
|
3 |
1811d |
1807d
|
15/28 |
1772d |
c7a91bc7c2e1
mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
|
|
INFO: task hung in __generic_file_fsync (2)
fs
mm
|
C |
done |
done |
28 |
1819d |
1820d
|
15/28 |
1773d |
85a8ce62c2ea
block: add bio_truncate to fix guard_bio_eod
|
|
INFO: task hung in sync_inodes_sb (3)
fs
mm
|
C |
done |
|
6 |
1818d |
1826d
|
15/28 |
1777d |
85a8ce62c2ea
block: add bio_truncate to fix guard_bio_eod
|
|
KASAN: use-after-free Read in shmem_fault (2)
mm
|
|
|
|
5 |
1884d |
1944d
|
15/28 |
1840d |
8897c1b1a179
shmem: pin the file in shmem_fault() if mmap_sem is dropped
|
|
general protection fault in memcg_flush_percpu_vmstats
cgroups
mm
|
C |
error |
|
19 |
1883d |
1946d
|
14/28 |
1853d |
7961eee39784
mm: memcontrol: fix NULL-ptr deref in percpu stats flush
|
|
BUG: bad usercopy in read_rio
hardening
mm
|
|
|
|
2 |
1901d |
1904d
|
13/28 |
1886d |
015664d15270
USB: rio500: Remove Rio 500 kernel driver
|
|
kernel BUG at mm/huge_memory.c:LINE!
mm
|
|
|
|
27 |
2013d |
2184d
|
12/28 |
1937d |
a53190a4aaa3
mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
|
|
KASAN: slab-out-of-bounds Write in validate_chain
mm
hardening
|
syz |
done |
|
6 |
1999d |
2014d
|
12/28 |
1947d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: slab-out-of-bounds Read in corrupted (2)
hardening
mm
|
syz |
done |
|
3 |
1980d |
2029d
|
12/28 |
1947d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING in cgroup_rstat_updated
mm
|
syz |
done |
|
1 |
1968d |
1968d
|
12/28 |
1947d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: use-after-free Read in unregister_shrinker
mm
|
syz |
done |
|
3 |
2025d |
2030d
|
12/28 |
1969d |
689d7ba4895b
nfsd: fix cleanup of nfsd_reply_cache_init on failure
|
|
general protection fault in oom_unkillable_task
mm
|
|
|
|
1 |
2026d |
2021d
|
12/28 |
1969d |
ac311a14c682
oom: decouple mems_allowed from oom_unkillable_task
|
|
memory leak in __memcg_init_list_lru_node
mm
|
C |
|
|
3 |
2026d |
2040d
|
12/28 |
1995d |
3510955b3271
mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
|
|
general protection fault in load_elf_binary
fs
mm
|
C |
done |
|
15 |
2094d |
2098d
|
12/28 |
2021d |
cc338010a233
fs/binfmt_elf.c: free PT_INTERP filename ASAP
|
|
BUG: unable to handle kernel paging request in isolate_freepages_block
mm
|
|
|
|
3 |
2065d |
2060d
|
12/28 |
2021d |
60fce36afa9c
mm/compaction.c: correct zone boundary handling when isolating pages from a pageblock
|
|
KASAN: use-after-free Read in get_mem_cgroup_from_mm
mm
cgroups
|
C |
done |
|
375 |
2067d |
2241d
|
12/28 |
2021d |
c3f3ce049f7d
userfaultfd: use RCU to free the task struct when fork fails
|
|
BUG: bad usercopy in __check_heap_object (3)
hardening
mm
|
C |
|
|
287 |
2294d |
2364d
|
12/28 |
2025d |
1f4aace60b0e
fs/seq_file.c: simplify seq_file iteration code and interface
|
|
kernel panic: corrupted stack end in wb_workfn
mm
|
C |
done |
|
14 |
2187d |
2187d
|
12/28 |
2086d |
ef82bcfa671b
sctp: use memdup_user instead of vmemdup_user
|
|
WARNING: bad usercopy in fanotify_read
hardening
mm
|
C |
done |
|
5 |
2116d |
2116d
|
11/28 |
2096d |
b2d22b6bb33a
fanotify: Allow copying of file handle to userspace
|
|
KASAN: use-after-free Read in filemap_fault
fs
mm
|
C |
|
|
277 |
2179d |
2189d
|
11/28 |
2096d |
6b4c9f446981
filemap: drop the mmap_sem for all blocking operations
|
|
possible deadlock in shmem_fallocate (2)
mm
|
C |
|
|
1325 |
2121d |
2330d
|
11/28 |
2100d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
KMSAN: uninit-value in mpol_rebind_mm
mm
|
|
|
|
6 |
2102d |
2187d
|
11/28 |
2100d |
2e25644e8da4
mm, mempolicy: fix uninit memory access
|
|
INFO: trying to register non-static key in dump_header
mm
|
|
|
|
1 |
2131d |
2131d
|
11/28 |
2100d |
b30b61ff6b1d
drm/vkms: Fix flush_work() without INIT_WORK().
|
|
possible deadlock in __do_page_fault
fs
mm
|
C |
|
|
820 |
2121d |
2288d
|
11/28 |
2100d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter
fs
mm
|
|
|
|
5 |
2126d |
2134d
|
11/28 |
2100d |
ac5ceccce550
x86/unwind: Add hardcoded ORC entry for NULL
f4f34e1b82eb
x86/unwind: Handle NULL pointer calls better in frame unwinder
|
|
WARNING: locking bug in lock_downgrade
mm
|
|
|
|
30 |
2165d |
2221d
|
6/28 |
2106d |
513e1073d52e
locking/lockdep: Add debug_locks check in __lock_downgrade()
locking/lockdep: Add debug_locks check in __lock_downgrade()
|
|
kernel BUG at mm/slab.c:LINE! (3)
mm
|
C |
done |
|
14 |
2107d |
2234d
|
11/28 |
2106d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
INFO: task hung in generic_file_write_iter
fs
mm
|
|
|
|
7 |
2215d |
2353d
|
11/28 |
2122d |
04906b2f542c
blockdev: Fix livelocks on loop device
|
|
KASAN: stack-out-of-bounds in do_raw_spin_lock
hardening
mm
|
C |
|
|
1 |
2182d |
2182d
|
11/28 |
2122d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: out-of-bounds Read in update_curr
hardening
mm
|
syz |
|
|
1 |
2182d |
2182d
|
11/28 |
2122d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: use-after-free Read in oom_kill_process
mm
|
|
|
|
1 |
2170d |
2166d
|
11/28 |
2122d |
cefc7ef3c87d
mm, oom: fix use-after-free in oom_kill_process
|
|
possible deadlock in __wake_up_common_lock
mm
|
|
|
|
7 |
2176d |
2185d
|
11/28 |
2122d |
73444bc4d8f9
mm, page_alloc: do not wake kswapd with zone lock held
|
|
KASAN: stack-out-of-bounds Write in page_counter_try_charge
mm
|
|
|
|
1 |
2172d |
2172d
|
11/28 |
2122d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
general protection fault in list_lru_count_one
mm
|
C |
|
|
12 |
2355d |
2354d
|
11/28 |
2161d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
general protection fault in transparent_hugepage_enabled
mm
|
C |
|
|
626 |
2185d |
2193d
|
11/28 |
2171d |
7635d9cbe832
mm, thp, proc: report THP eligibility for each vma
|
|
WARNING in alloc_pages_vma
mm
|
C |
|
|
98 |
2208d |
2212d
|
11/28 |
2200d |
356ff8a9a78f
Revert "mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask"
|
|
kernel BUG at mm/shmem.c:LINE!
mm
|
C |
|
|
30 |
2362d |
2364d
|
11/28 |
2235d |
552446a41661
shmem: Convert shmem_add_to_page_cache to XArray
|
|
WARNING in try_charge
cgroups
mm
xfs
|
syz |
|
|
649 |
2282d |
2335d
|
10/28 |
2282d |
3100dab2aa09
mm: memcontrol: print proper OOM header when no eligible victim left
|
|
BUG: unable to handle kernel paging request in kfree (2)
mm
|
C |
|
|
297 |
2310d |
2362d
|
10/28 |
2285d |
7913690dcc5e
net/9p/client.c: version pointer uninitialized
|
|
KASAN: use-after-free Read in do_shrink_slab
mm
|
|
|
|
9 |
2318d |
2321d
|
8/28 |
2311d |
8df4a44cc46b
mm: check shrinker is memcg-aware in register_shrinker_prepared()
|
|
WARNING: bad usercopy in __kvm_write_guest_page
mm
hardening
|
C |
|
|
4 |
2412d |
2405d
|
8/28 |
2315d |
0a06d4256674
KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
|
|
kernel BUG at mm/memory.c:LINE!
fs
mm
|
|
|
|
1 |
2363d |
2362d
|
8/28 |
2331d |
bfd40eaff5ab
mm: fix vma_is_anonymous() false-positives
|
|
KASAN: stack-out-of-bounds Read in vma_interval_tree_insert (2)
mm
|
|
|
|
1 |
2347d |
2347d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in debug_check_no_obj_freed (5)
mm
|
|
|
|
4 |
2348d |
2354d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in unmap_page_range (3)
mm
|
|
|
|
1 |
2348d |
2348d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
kernel BUG at mm/slab.c:LINE! (2)
hardening
mm
|
C |
|
|
701 |
2347d |
2362d
|
8/28 |
2332d |
6e6fddc78323
bpf: fix panic due to oob in bpf_prog_test_run_skb
|
|
KASAN: stack-out-of-bounds Read in get_mem_cgroup_from_mm
cgroups
mm
|
|
|
|
1 |
2360d |
2360d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in change_protection
mm
|
|
|
|
1 |
2355d |
2355d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Write in __tlb_remove_page_size
mm
|
|
|
|
1 |
2349d |
2348d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in __tlb_remove_page_size
mm
|
|
|
|
1 |
2350d |
2349d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in tlb_flush_mmu_free
mm
|
|
|
|
2 |
2358d |
2361d
|
8/28 |
2332d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
kernel BUG at mm/gup.c:LINE!
mm
|
syz |
|
|
4 |
2369d |
2367d
|
8/28 |
2347d |
24962af7e104
fs, elf: make sure to page align bss in load_elf_library
bb177a732c43
mm: do not bug_on on incorrect length in __mm_populate()
|
|
KASAN: use-after-free Read in corrupted
mm
|
C |
|
|
2 |
2416d |
2419d
|
8/28 |
2361d |
543b8f8662fe
fuse: don't keep dead fuse_conn at fuse_fill_super().
|
|
general protection fault in shmem_unused_huge_count
mm
|
|
|
|
8 |
2415d |
2418d
|
5/28 |
2393d |
79f546a696bf
fs: don't scan the inode cache before SB_BORN is set
|
|
BUG: bad usercopy in __check_object_size
mm
hardening
|
|
|
|
1 |
2425d |
2425d
|
5/28 |
2415d |
2c5d5b13c6eb
llc: better deal with too small mtu
|
|
INFO: task hung in wb_shutdown (2)
mm
|
|
|
|
5064 |
2427d |
2460d
|
5/28 |
2415d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
|
general protection fault in kernfs_kill_sb
mm
|
C |
|
|
29 |
2424d |
2460d
|
5/28 |
2423d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
general protection fault in __mem_cgroup_free
mm
cgroups
|
C |
|
|
22 |
2450d |
2461d
|
5/28 |
2423d |
4eaf431f6f71
memcg: fix per_node_info cleanup
|
|
WARNING: refcount bug in should_fail
mm
|
C |
|
|
3 |
2462d |
2493d
|
5/28 |
2423d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
general protection fault in qlist_move_cache
cgroups
mm
|
|
|
|
1 |
2466d |
2466d
|
5/28 |
2455d |
c769accdf3d8
vlan: Fix vlan insertion for packets without ethernet header
|
|
possible deadlock in get_user_pages_unlocked
mm
|
C |
|
|
5 |
2496d |
2519d
|
4/28 |
2469d |
96312e61282a
mm/gup.c: teach get_user_pages_unlocked to handle FOLL_NOWAIT
|
|
possible deadlock in shmem_file_llseek
mm
|
C |
|
|
4432 |
2478d |
2542d
|
4/28 |
2469d |
cb57469c9573
staging: android: ashmem: Fix lockdep issue during llseek
|
|
kernel panic: Out of memory and no killable processes... (2)
mm
|
C |
|
|
1 |
2524d |
2523d
|
4/28 |
2469d |
0537250fdc6c
netfilter: x_tables: make allocation less aggressive
|
|
KASAN: use-after-free Read in __do_page_fault
mm
|
syz |
|
|
679 |
2602d |
2613d
|
4/28 |
2506d |
cb0631fd3cf9
x86/mm: fix use-after-free of vma during userfaultfd fault
|
|
possible deadlock in lru_add_drain_all
mm
|
|
|
|
1300 |
2567d |
2617d
|
4/28 |
2506d |
9852a7212324
mm: drop hotplug lock from lru_add_drain_all()
|
|
WARNING in usercopy_warn
hardening
mm
|
C |
|
|
171 |
2514d |
2532d
|
4/28 |
2508d |
79a8a642bf05
net: Whitelist the skbuff_head_cache "cb" field
|
|
WARNING in __check_heap_object
hardening
mm
|
C |
|
|
5173 |
2533d |
2605d
|
4/28 |
2516d |
ab9ee8e38b29
sctp: Define usercopy region in SCTP proto slab cache
|
|
WARNING in __alloc_pages_slowpath
mm
|
C |
|
|
9435 |
2519d |
2547d
|
4/28 |
2516d |
0c75f10312a3
staging: android: ion: Add __GFP_NOWARN for system contig heap
|
|
BUG: unable to handle kernel NULL pointer dereference in page_mapping
fs
mm
|
C |
|
|
4 |
2563d |
2565d
|
4/28 |
2519d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
general protection fault in page_mapping
fs
mm
|
C |
|
|
46 |
2543d |
2570d
|
4/28 |
2519d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
BUG: bad usercopy in strncpy_from_user
hardening
mm
|
|
|
|
1 |
2556d |
2552d
|
3/28 |
2541d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
BUG: bad usercopy in rw_copy_check_uvector
hardening
mm
|
|
|
|
7 |
2545d |
2560d
|
3/28 |
2541d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
BUG: bad usercopy in alg_setsockopt
hardening
mm
|
|
|
|
5 |
2549d |
2546d
|
3/28 |
2541d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
BUG: bad usercopy in do_syslog
hardening
mm
|
|
|
|
1 |
2550d |
2547d
|
3/28 |
2541d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
WARNING: suspicious RCU usage (3)
mm
|
|
|
|
16 |
2583d |
2584d
|
3/28 |
2562d |
ecaaab564978
crypto: salsa20 - fix blkcipher_walk API usage
|