|
WARNING in folio_memcg
prio:low
mm
|
-1 |
C |
done |
|
3851 |
221d |
704d
|
1/29 |
never |
mm: kmem: fix split_page_memcg()
|
|
KASAN: null-ptr-deref Write in sys_io_uring_register
mm
|
12 |
C |
done |
|
15 |
590d |
597d
|
1/29 |
never |
xarray-extract-helper-from-__xa_insertcmpxchg-fix
|
|
WARNING in folio_add_new_anon_rmap
prio:high
mm
|
-1 |
C |
error |
|
14 |
132d |
131d
|
2/29 |
never |
userfaultfd-introduce-struct-mfill_state-fix
|
|
INFO: task hung in remove_inode_hugepages
mm
fs
|
1 |
C |
done |
|
52 |
654d |
746d
|
1/29 |
never |
INFO: task hung in remove_inode_hugepages
|
|
KASAN: slab-use-after-free Read in move_pages_pte
mm
|
19 |
C |
done |
|
3 |
595d |
594d
|
1/29 |
never |
mm: pgtable: make ptlock be freed by RCU
|
|
kernel BUG in vma_replace_policy
mm
|
-1 |
C |
done |
|
6 |
1043d |
1052d
|
1/29 |
never |
mm: lock VMAs skipped by a failed queue_pages_range()
|
|
WARNING in handle_userfault
mm
|
-1 |
C |
error |
|
71 |
1108d |
1115d
|
1/29 |
never |
mm: fix a lockdep issue in vma_assert_write_locked
|
|
KASAN: slab-use-after-free Read in handle_mm_fault
mm
|
19 |
C |
done |
|
107 |
735d |
738d
|
1/29 |
never |
mm: check for VM_DROPPABLE in vma prior to handling mm fault
|
|
KASAN: slab-out-of-bounds Read in shrink_folio_list
mm
|
19 |
C |
|
|
683 |
1110d |
1111d
|
1/29 |
never |
mm: call folio_mapping() inside folio_needs_release()
|
|
WARNING in __page_table_check_ptes_set (3)
prio:low
mm
|
-1 |
C |
|
|
13 |
22d |
253d
|
2/29 |
never |
mm/userfaultfd: clear uffd-wp PTE state when re-registering without WP
|
|
kernel BUG in swap_cgroup_record (2)
prio:high
mm
cgroups
|
-1 |
C |
error |
|
227 |
192d |
196d
|
2/29 |
never |
mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
|
|
KASAN: slab-use-after-free Read in mremap
mm
|
19 |
C |
done |
|
122 |
339d |
342d
|
2/29 |
never |
mm/mremap: do not incorrectly reference invalid VMA in VM_WARN_ON_ONCE()
|
|
general protection fault in vma_interval_tree_remove
mm
|
10 |
C |
done |
|
14 |
786d |
1544d
|
1/29 |
never |
mm/mmap: fix advanced maple tree API for mmap_region()
mm/mmap: qvoid dereferencing next on null in BUG_ON()
|
|
WARNING in vma_merge
mm
|
-1 |
C |
done |
|
18115 |
970d |
1549d
|
1/29 |
never |
mm/mlock: use maple state in apply_mlockall_flags()
|
|
INFO: task hung in bchfs_fpunch (2)
prio:high
fs
mm
|
1 |
C |
done |
|
2 |
351d |
395d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
possible deadlock in collapse_file
mm
|
4 |
C |
done |
|
189 |
1236d |
1237d
|
1/29 |
never |
mm/khugepaged: fix vm_lock/i_mmap_rwsem inversion in retract_page_tables
|
|
kernel BUG in collapse_file (3)
mm
|
-1 |
C |
done |
|
14 |
1096d |
1103d
|
1/29 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
KASAN: slab-use-after-free Read in madvise_collapse
mm
|
19 |
C |
error |
|
5 |
1096d |
1097d
|
1/29 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
BUG: unable to handle kernel paging request in alloc_huge_page
mm
|
8 |
C |
unreliable |
|
491 |
1806d |
1805d
|
1/29 |
never |
mm/hugetlb: Initialize page to NULL in alloc_buddy_huge_page_with_mpol()
|
|
general protection fault in shmem_mapping
mm
|
2 |
C |
done |
|
17 |
522d |
525d
|
1/29 |
never |
mm/huge_memory: do not drop the original folio during truncate
|
|
general protection fault in vma_is_shmem
mm
io-uring
|
2 |
C |
error |
|
28 |
1432d |
1433d
|
1/29 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
WARNING in page_add_anon_rmap
mm
|
-1 |
C |
done |
|
1041 |
1039d |
1040d
|
1/29 |
never |
mm-rmap-simplify-pageanonexclusive-sanity-checks-when-adding-anon-rmap-fix
|
|
KASAN: slab-use-after-free Read in finish_fault
mm
|
19 |
C |
done |
|
8 |
769d |
771d
|
1/29 |
never |
mm-memory-extend-finish_fault-to-support-large-folio-fix
|
|
KASAN: slab-use-after-free Read in do_sync_mmap_readahead
prio:high
mm
|
19 |
C |
done |
|
3 |
397d |
401d
|
2/29 |
never |
mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
|
|
WARNING: suspicious RCU usage in mas_walk (3)
mm
|
4 |
C |
done |
|
12 |
1003d |
1018d
|
1/29 |
never |
mempolicy: migration attempt to match interleave nodes: fix
|
|
KASAN: use-after-free Read in __vma_adjust
mm
|
19 |
C |
done |
|
10 |
1447d |
1503d
|
1/29 |
never |
fs/userfaultfd: fix vma iteration in mas_for_each() loop
|
|
kernel BUG in mfill_atomic_copy
mm
|
-1 |
C |
error |
|
3 |
1110d |
1106d
|
1/29 |
never |
mm: userfaultfd: check for start + len overflow in validate_range: fix
|
|
kernel BUG in free_bprm
fs
mm
|
-1 |
C |
done |
|
445 |
625d |
626d
|
1/29 |
never |
exec: NULL out bprm->argv0 when it is an ERR_PTR
|
|
WARNING in page_counter_uncharge (2)
prio:high
cgroups
mm
|
-1 |
C |
error |
|
10 |
38d |
118d
|
29/29 |
9d11h |
15807d0ddde3
mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
|
|
WARNING in vma_mark_detached
prio:high
mm
|
-1 |
C |
error |
|
8 |
72d |
94d
|
29/29 |
63d |
619eab23e1ce
mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
|
|
WARNING in deferred_split_folio
mm
|
-1 |
syz |
error |
|
4 |
115d |
114d
|
29/29 |
64d |
3bac01168982
mm: fix deferred split queue races during migration
|
|
kernel BUG in resv_map_release (3)
mm
|
-1 |
C |
inconclusive |
error |
35 |
110d |
619d
|
29/29 |
64d |
0217c7fb4de4
mm/userfaultfd: fix hugetlb fault mutex hash calculation
|
|
general protection fault in rwsem_mark_wake
mm
prio:high
|
2 |
C |
error |
|
9235 |
126d |
129d
|
29/29 |
64d |
68bcd8b6e0b1
locking/rwsem: Fix logic error in rwsem_del_waiter()
|
|
possible deadlock in gup_fast_fallback (2)
mm
|
4 |
C |
|
|
21 |
80d |
168d
|
29/29 |
79d |
b5cbacd7f86f
procfs: avoid fetching build ID while holding VMA lock
|
|
WARNING in folio_remove_rmap_ptes
mm
|
-1 |
C |
|
|
1 |
200d |
213d
|
29/29 |
79d |
61f67c230a5e
mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
|
|
INFO: rcu detected stall in purge_vmap_node
mm
|
1 |
C |
error |
|
2 |
197d |
193d
|
29/29 |
79d |
5747435e0fd4
mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
|
|
INFO: task hung in __rmap_walk_file
mm
|
1 |
C |
error |
|
7 |
197d |
286d
|
29/29 |
79d |
b7880cb166ab
migrate: correct lock ordering for hugetlb file folios
|
|
WARNING in blkdev_common_ioctl
mm
|
-1 |
C |
|
|
5 |
227d |
224d
|
29/29 |
184d |
a58383fa45c7
block: add allocation size check in blkdev_pr_read_keys()
|
|
WARNING in memory_failure
mm
|
-1 |
C |
|
|
4 |
282d |
304d
|
29/29 |
198d |
77008e1b2ef7
mm/huge_memory: do not change split_huge_page*() target order silently
|
|
WARNING: refcount bug in __vma_enter_locked
mm
|
13 |
C |
done |
|
27 |
233d |
241d
|
29/29 |
198d |
faf3c923523e
mm: fix vma_start_write_killable() signal handling
|
|
KMSAN: kernel-infoleak in hugetlbfs_read_iter
fs
mm
|
9 |
C |
|
|
7 |
257d |
256d
|
29/29 |
198d |
de8798965fd0
mm/memfd: fix information leak in hugetlb folios
|
|
WARNING in raw_ioctl
usb
mm
|
-1 |
C |
|
|
664 |
229d |
272d
|
29/29 |
198d |
a5160af78be7
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
|
|
WARNING in hugetlb_vma_assert_locked
mm
|
-1 |
C |
|
|
8 |
302d |
304d
|
29/29 |
247d |
cec944dd329f
hugetlbfs: move lock assertions after early returns in huge_pmd_unshare()
dd83609b8898
hugetlbfs: skip VMAs without shareable locks in hugetlb_vmdelete_list
|
|
WARNING in xfs_init_fs_context
mm
|
-1 |
syz |
|
|
21 |
286d |
389d
|
29/29 |
248d |
0f41997b1b2b
xfs: don't use __GFP_NOFAIL in xfs_init_fs_context
|
|
general protection fault in unpin_user_pages_dirty_lock
mm
|
2 |
C |
|
|
4 |
319d |
320d
|
29/29 |
267d |
e3c05b6e370c
mm/gup: remove record_subpages()
|
|
WARNING in ext4_init_orphan_info
ext4
mm
|
-1 |
C |
done |
|
5 |
294d |
319d
|
29/29 |
267d |
0a6ce20c1564
ext4: verify orphan file size is not too big
|
|
WARNING: bad unlock balance in copy_process
mm
|
4 |
C |
|
|
304 |
293d |
419d
|
29/29 |
267d |
4ec3c15462b9
futex: Use correct exit on failure from futex_hash_allocate_default()
|
|
INFO: task hung in v9fs_file_fsync
fs
mm
|
1 |
C |
done |
|
14 |
300d |
340d
|
29/29 |
267d |
e8fe3f07a357
9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
|
|
WARNING in max_vclocks_store
mm
net
|
-1 |
C |
|
|
3 |
328d |
563d
|
29/29 |
267d |
e9f35294e18d
ptp: Add a upper bound on max_vclocks
|
|
WARNING in nfsd_file_cache_init
mm
|
-1 |
C |
error |
|
4 |
292d |
290d
|
29/29 |
267d |
f7dfa0f31b13
slub: Don't call lockdep_unregister_key() for immature kmem_cache.
|
|
WARNING in try_to_migrate_one (3)
mm
|
-1 |
C |
done |
done |
6 |
325d |
348d
|
29/29 |
282d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
BUG: unable to handle kernel paging request in move_pages
mm
|
8 |
C |
|
|
4 |
357d |
372d
|
29/29 |
288d |
aba6faec0103
userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
|
|
WARNING in move_page_tables
mm
|
-1 |
C |
|
|
3 |
346d |
345d
|
29/29 |
288d |
772e5b4a5e83
mm/mremap: fix WARN with uffd that has remap events disabled
|
|
WARNING in follow_page_pte
input
usb
mm
|
-1 |
C |
done |
|
6 |
352d |
352d
|
29/29 |
288d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
WARNING in path_noexec
mm
fs
|
-1 |
C |
done |
|
14318 |
297d |
382d
|
29/29 |
297d |
secretmem: use SB_I_NOEXEC
|
|
WARNING in move_to_new_folio (2)
gfs2
mm
|
-1 |
C |
error |
|
398 |
360d |
381d
|
29/29 |
319d |
5c8f12cf1e64
gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
|
|
kernel BUG in try_to_unmap_one (2)
mm
|
-1 |
C |
|
|
7 |
389d |
414d
|
29/29 |
323d |
9f1e8cd0b7c4
mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
|
|
kernel BUG in sanity_check_pinned_pages
mm
|
-1 |
C |
|
|
3 |
397d |
416d
|
29/29 |
323d |
5afb4bf9fc62
io_uring/rsrc: fix folio unpinning
|
|
possible deadlock in upgrade_mmap_lock_carefully (2)
ntfs3
mm
|
4 |
C |
error |
|
6 |
393d |
411d
|
29/29 |
323d |
a49f0abd8959
Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
|
|
kernel BUG in alloc_hugetlb_folio_reserve
mm
|
-1 |
C |
done |
|
98 |
377d |
566d
|
29/29 |
323d |
c39b87456411
mm/hugetlb: don't crash when allocating a folio if there are no resv
|
|
WARNING in comedi_unlocked_ioctl
comedi
mm
|
-1 |
C |
|
|
262 |
368d |
385d
|
29/29 |
323d |
08ae4b20f5e8
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
|
|
BUG: Bad rss-counter state (5)
mm
|
-1 |
C |
done |
|
2365 |
376d |
802d
|
29/29 |
350d |
43e027e41423
mm: memory: extend finish_fault() to support large folio
|
|
WARNING in vma_modify
mm
|
-1 |
C |
done |
|
21 |
404d |
413d
|
29/29 |
352d |
0cf4b1687a18
mm/vma: reset VMA iterator on commit_merge() OOM failure
|
|
WARNING in move_to_new_folio
mm
|
-1 |
C |
done |
|
1366 |
381d |
467d
|
29/29 |
381d |
906d7ce3b59d
jfs: implement migrate_folio for jfs_metapage_aops
|
|
WARNING: locking bug in __set_page_owner
mm
|
4 |
C |
error |
inconclusive |
179425 |
536d |
628d
|
29/29 |
384d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
general protection fault in lock_vma_under_rcu
mm
|
2 |
syz |
done |
|
3 |
515d |
514d
|
28/29 |
408d |
f35ab95ca0af
mm: replace vm_lock and detached flag with a reference count
|
|
general protection fault in sys_mremap
mm
|
2 |
C |
|
|
35 |
476d |
478d
|
28/29 |
408d |
36eed5400805
mm/mremap: do not set vrm->vma NULL immediately prior to checking it
|
|
KMSAN: uninit-value in __alloc_frozen_pages_noprof
mm
|
7 |
C |
|
|
6 |
504d |
518d
|
28/29 |
409d |
8fe9ed44dc29
mm/page_alloc: fix uninitialized variable
|
|
possible deadlock in efivarfs_actor
mm
|
4 |
C |
|
|
8 |
486d |
502d
|
28/29 |
409d |
dec1277875a5
efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume
|
|
BUG: unable to handle kernel paging request in vma_merge_existing_range
mm
|
8 |
C |
done |
|
8 |
463d |
491d
|
28/29 |
409d |
41e6ddcaa0f1
mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
|
|
BUG: sleeping function called from invalid context in folio_mc_copy
mm
|
5 |
C |
done |
|
5415 |
451d |
484d
|
28/29 |
409d |
2d900efff915
mm/migrate: fix sleep in atomic for large folios and buffer heads
|
|
possible deadlock in zswap_store
mm
|
4 |
C |
inconclusive |
|
24203 |
514d |
564d
|
28/29 |
443d |
4dff389c9f1d
Revert "mm: zswap: fix race between [de]compression and CPU hotunplug"
|
|
general protection fault in account_kernel_stack (3)
mm
|
2 |
C |
|
|
7 |
569d |
584d
|
28/29 |
444d |
4db3d750ac7e
nvmet: Don't overflow subsysnqn
|
|
WARNING in lock_list_lru_of_memcg
mm
|
-1 |
syz |
|
|
2 |
525d |
587d
|
28/29 |
444d |
62e72d2cf702
mm, madvise: fix potential workingset node list_lru leaks
|
|
general protection fault in do_migrate_pages
mm
|
2 |
C |
|
|
2 |
594d |
611d
|
28/29 |
444d |
091c1dd2d4df
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
|
|
kernel BUG in const_folio_flags (2)
fs
mm
|
-1 |
syz |
|
|
3 |
548d |
608d
|
28/29 |
444d |
3203b3ab0fcf
mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
|
|
KASAN: slab-use-after-free Read in __mmap_region
mm
|
19 |
C |
|
|
7 |
557d |
594d
|
28/29 |
444d |
42c4e4b20d9c
mm: correctly reference merged VMA
|
|
BUG: stack guard page was hit in sys_open
mm
v9fs
|
-1 |
C |
|
|
11 |
584d |
620d
|
28/29 |
444d |
4acb665cf4f3
netfs: Work around recursion by abandoning retry if nothing read
|
|
general protection fault in vsscanf (2)
mm
|
2 |
C |
|
|
11 |
579d |
585d
|
28/29 |
444d |
d3ac65d274b3
mm: huge_memory: handle strsep not finding delimiter
|
|
KASAN: out-of-bounds Read in copy_from_kernel_nofault
mm
|
17 |
C |
done |
|
1628 |
485d |
662d
|
28/29 |
444d |
e4137f08816b
mm, kasan, kmsan: instrument copy_from/to_kernel_nofault
|
|
WARNING: locking bug in __rmqueue_pcplist
mm
|
4 |
C |
|
|
11148 |
535d |
628d
|
28/29 |
444d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
possible deadlock in page_cache_ra_unbounded
mm
fs
|
4 |
C |
error |
done |
163 |
550d |
1311d
|
28/29 |
506d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in swap_reclaim_full_clusters
mm
|
2 |
C |
|
|
1530 |
617d |
625d
|
28/29 |
585d |
dcf32ea7eced
mm: swapfile: fix cluster reclaim work crash on rotational devices
|
|
possible deadlock in lock_mm_and_find_vma (2)
mm
|
4 |
C |
|
|
6626 |
620d |
692d
|
28/29 |
617d |
58a039e679fe
mm: split critical region in remap_file_pages() and invoke LSMs in between
|
|
WARNING in copy_huge_pmd
mm
|
-1 |
C |
done |
|
361 |
652d |
669d
|
28/29 |
618d |
47fa30118f02
mm/huge_memory: check pmd_special() only after pmd_present()
|
|
memory leak in corrupted (2)
mm
exfat
|
3 |
syz |
|
|
432 |
677d |
844d
|
28/29 |
640d |
c290fe508eee
exfat: resolve memory leak from exfat_create_upcase_table()
|
|
possible deadlock in __mmap_lock_do_trace_start_locking
mm
|
4 |
C |
done |
done |
30 |
726d |
819d
|
27/29 |
695d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
BUG: unable to handle kernel paging request in list_lru_add
mm
|
10 |
C |
done |
done |
11367 |
741d |
1054d
|
27/29 |
695d |
aacd897d4d75
Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT"
|
|
possible deadlock in __mmap_lock_do_trace_released
mm
|
4 |
C |
done |
done |
5 |
735d |
752d
|
27/29 |
704d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
KASAN: slab-use-after-free Read in lru_add_fn
nilfs
mm
|
19 |
C |
inconclusive |
|
68 |
758d |
806d
|
27/29 |
709d |
49ae997f8f0d
nilfs2: add missing check for inode numbers on directory entries
nilfs2: add missing check for inode numbers on directory entries
|
|
BUG: corrupted list in __folio_undo_large_rmappable
mm
|
8 |
C |
error |
|
36 |
744d |
743d
|
27/29 |
709d |
1390a3334a48
mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio
|
|
inconsistent lock state in valid_state (3)
mm
|
4 |
C |
error |
|
376 |
721d |
770d
|
27/29 |
709d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
possible deadlock in try_to_wake_up (5)
mm
|
4 |
C |
|
|
88 |
712d |
785d
|
27/29 |
709d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
general protection fault in dequeue_hugetlb_folio_nodemask (2)
mm
|
2 |
C |
done |
|
14 |
767d |
773d
|
27/29 |
709d |
09a533622842
mm/hugetlb: guard dequeue_hugetlb_folio_nodemask against NUMA_NO_NODE uses
|
|
BUG: sleeping function called from invalid context in vma_alloc_folio_noprof
mm
|
5 |
C |
done |
|
1 |
739d |
738d
|
27/29 |
709d |
280e36f0d5b9
nsfs: use cleanup guard
|
|
UBSAN: shift-out-of-bounds in try_to_shrink_lruvec
mm
|
-1 |
C |
done |
|
4 |
785d |
787d
|
27/29 |
709d |
462966dc7d70
mm: vmscan: reset sc->priority on retry
|
|
WARNING in unmap_page_range (3)
mm
|
-1 |
C |
|
|
169 |
847d |
857d
|
26/29 |
734d |
f8572367eaff
mm/memory: fix missing pte marker for !page on pte zaps
|
|
INFO: rcu detected stall in sys_wait4 (4)
mm
|
1 |
C |
done |
done |
2 |
801d |
834d
|
26/29 |
742d |
fb66df20a720
net/sched: taprio: extend minimum interval restriction to entire cycle too
|
|
kernel BUG in __vma_reservation_common
mm
|
-1 |
C |
error |
|
8 |
776d |
809d
|
26/29 |
745d |
8daf9c702ee7
mm/hugetlb: do not call vma_add_reservation upon ENOMEM
|
|
KMSAN: uninit-value in virtqueue_add (4)
mm
|
7 |
C |
|
|
203184 |
773d |
935d
|
25/29 |
773d |
61b258b0d2f6
x86: call instrumentation hooks from copy_mc.c
|
|
WARNING in __page_table_check_ptes_set
mm
|
-1 |
C |
|
|
2 |
827d |
824d
|
25/29 |
779d |
c88033efe9a3
mm/userfaultfd: reset ptes when close() for wr-protected ones
|
|
WARNING in __mod_memcg_lruvec_state
cgroups
mm
|
-1 |
C |
|
|
270 |
808d |
843d
|
25/29 |
779d |
4f687281012e
mm: do not update memcg stats for NR_{FILE/SHMEM}_PMDMAPPED
|
|
possible deadlock in move_pages
mm
|
4 |
C |
|
|
206 |
848d |
857d
|
25/29 |
792d |
30af24facf0a
userfaultfd: fix deadlock warning when locking src and dst VMAs
|
|
KASAN: slab-use-after-free Read in __vma_reservation_common
mm
|
19 |
syz |
|
|
13 |
819d |
833d
|
25/29 |
792d |
37641efaa3fa
hugetlb: check for anon_vma prior to folio allocation
|
|
WARNING: refcount bug in __reset_page_owner
mm
|
13 |
C |
|
|
93128 |
826d |
857d
|
25/29 |
792d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2)
mm
|
8 |
C |
|
|
2 |
833d |
843d
|
25/29 |
792d |
c6f48506ba30
arm32, bpf: Reimplement sign-extension mov instruction
|
|
WARNING in __hugetlb_cgroup_uncharge_folio
mm
|
-1 |
syz |
|
|
3 |
822d |
830d
|
25/29 |
792d |
b76b46902c2d
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
|
|
kernel BUG in sg_init_one
mm
|
-1 |
C |
|
|
1032 |
848d |
858d
|
25/29 |
792d |
9c500835f279
mm: zswap: fix kernel BUG in sg_init_one
|
|
WARNING in hugetlb_change_protection (2)
mm
|
-1 |
C |
|
|
631 |
812d |
839d
|
25/29 |
792d |
c5977c95dff1
mm/userfaultfd: allow hugetlb change protection upon poison entry
|
|
BUG: bad usercopy in raw_getsockopt
mm
hardening
|
-1 |
C |
done |
|
4 |
885d |
885d
|
25/29 |
835d |
c8fba5d6df5e
can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault
mm
|
8 |
C |
done |
|
5 |
879d |
978d
|
25/29 |
847d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
kernel BUG in move_pages
mm
|
-1 |
C |
done |
|
2 |
929d |
925d
|
25/29 |
906d |
5d4747a6cc8e
userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
|
|
WARNING in get_pte_pfn
mm
io-uring
|
-1 |
C |
error |
|
2 |
935d |
945d
|
25/29 |
906d |
c28ac3c7eb94
mm/mglru: skip special VMAs in lru_gen_look_around()
|
|
WARNING in __folio_rmap_sanity_checks
mm
|
-1 |
C |
done |
|
168 |
928d |
933d
|
25/29 |
906d |
9c5938694cd0
mm/rmap: silence VM_WARN_ON_FOLIO() in __folio_rmap_sanity_checks()
|
|
KMSAN: uninit-value in shrinker_alloc
mm
|
7 |
syz |
|
|
2 |
956d |
934d
|
25/29 |
906d |
7fba9420b726
mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
|
|
general protection fault in hugetlb_vma_lock_write
mm
|
2 |
C |
done |
|
110 |
959d |
999d
|
25/29 |
915d |
187da0f8250a
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
|
|
WARNING in unmap_page_range (2)
mm
|
-1 |
C |
done |
|
2112 |
956d |
982d
|
25/29 |
915d |
4980e837cab7
mm/pagemap: fix wr-protect even if PM_SCAN_WP_MATCHING not set
|
|
BUG: unable to handle kernel paging request in __pte_offset_map_lock
mm
|
8 |
C |
|
|
2 |
991d |
1002d
|
25/29 |
915d |
9aa1345d66b8
mm: fix oops when filemap_map_pmd() without prealloc_pte
|
|
WARNING in page_copy_sane
fs
mm
|
-1 |
C |
done |
|
3 |
1044d |
1040d
|
25/29 |
946d |
a08c7193e4f1
mm/filemap: remove hugetlb special casing in filemap.c
|
|
BUG: Bad page map (7)
mm
|
-1 |
C |
done |
|
19 |
1027d |
1049d
|
25/29 |
946d |
ce60f27bb62d
mm: abstract moving to the next PFN
|
|
WARNING in try_grab_page
xfs
mm
|
-1 |
C |
|
|
48 |
1031d |
1117d
|
23/29 |
1016d |
f443fd5af5db
crypto, cifs: fix error handling in extract_iter_to_sg()
|
|
possible deadlock in shmem_uncharge (2)
mm
|
4 |
C |
done |
|
29 |
1104d |
1102d
|
23/29 |
1016d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
|
KASAN: slab-out-of-bounds Read in mt_validate_nulls
mm
|
17 |
C |
error |
done |
15 |
1116d |
1114d
|
23/29 |
1016d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
kernel BUG in validate_mm (2)
mm
|
-1 |
C |
unreliable |
done |
217 |
1116d |
1114d
|
23/29 |
1016d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
WARNING in __gup_longterm_locked
mm
|
-1 |
C |
error |
|
90 |
1114d |
1116d
|
23/29 |
1016d |
6cd06ab12d1a
gup: make the stack expansion warning a bit more targeted
|
|
inconsistent lock state in lru_gen_rotate_memcg
mm
|
4 |
C |
|
|
61 |
1120d |
1131d
|
23/29 |
1030d |
814bc1de03ea
mm/mglru: make memcg_lru->lock irq safe
|
|
kernel BUG in page_table_check_clear
mm
|
-1 |
C |
error |
|
17 |
1143d |
1176d
|
22/29 |
1119d |
44d0fb387b53
mm: page_table_check: Ensure user pages are not slab pages
0143d148d1e8
usb: usbfs: Enforce page requirements for mmap
|
|
kernel BUG in find_mergeable_anon_vma
mm
|
-1 |
C |
error |
|
4 |
1237d |
1234d
|
22/29 |
1142d |
3dd443254941
mm: enable maple tree RCU mode by default
|
|
KASAN: null-ptr-deref Read in filemap_fault
mm
udf
|
11 |
C |
done |
|
112 |
1170d |
1183d
|
22/29 |
1142d |
38a55db9877c
filemap: Handle error return from __filemap_get_folio()
|
|
KMSAN: uninit-value in ondemand_readahead
fs
mm
|
7 |
C |
|
|
221 |
1239d |
1403d
|
22/29 |
1142d |
3e35102666f8
fs/cramfs/inode.c: initialize file_ra_state
|
|
KMSAN: kernel-infoleak in _copy_to_iter (8)
mm
|
21 |
C |
|
|
21180 |
1142d |
1236d
|
22/29 |
1142d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
WARNING in split_huge_page_to_list (2)
mm
|
-1 |
C |
error |
|
2334 |
1166d |
1430d
|
22/29 |
1142d |
4737edbbdd49
mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
|
|
KASAN: slab-use-after-free Read in mas_next_entry
mm
|
19 |
syz |
error |
|
3 |
1204d |
1207d
|
22/29 |
1142d |
f4e9e0e69468
mm/mempolicy: fix use-after-free of VMA iterator
|
|
kernel BUG in hpage_collapse_scan_file
mm
|
-1 |
C |
unreliable |
|
3 |
1194d |
1231d
|
22/29 |
1142d |
2ce0bdfebc74
mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
|
|
WARNING in mbind_range
mm
|
-1 |
C |
error |
|
3 |
1292d |
1292d
|
22/29 |
1142d |
17dc622c7b0f
maple_tree: fix mas_prev() and mas_find() state handling
|
|
BUG: bad usercopy in con_font_op
hardening
mm
|
-1 |
C |
done |
|
1 |
1239d |
1238d
|
22/29 |
1142d |
18365ebf23f3
tty: vt: protect KD_FONT_OP_GET_TALL from unbound access
|
|
BUG: bad usercopy in put_cmsg
hardening
mm
|
-1 |
C |
|
|
3 |
1257d |
1258d
|
22/29 |
1142d |
2558b8039d05
net: use a bounce buffer for copying skb->mark
|
|
INFO: task hung in write_cache_pages (2)
mm
fs
|
1 |
C |
done |
|
36 |
1170d |
1240d
|
22/29 |
1142d |
fb3592c41a44
migrate_pages: fix deadlock in batched migration
|
|
WARNING: CPU: NUM PID: NUM at mm/page_alloc.c:LINE get_page_from_freeli
mm
erofs
|
-1 |
C |
error |
|
1 |
1313d |
1309d
|
22/29 |
1142d |
12724ba38992
erofs: fix kvcalloc() misuse with __GFP_NOFAIL
|
|
memory leak in prctl
mm
|
3 |
C |
|
|
1 |
1315d |
1311d
|
22/29 |
1142d |
a1193de562f5
mm: fix vma->anon_name memory leak for anonymous shmem VMAs
|
|
BUG: sleeping function called from invalid context in folio_copy
mm
|
5 |
C |
unreliable |
|
271 |
1827d |
1825d
|
22/29 |
1198d |
715cbfd6c5c5
mm/migrate: Add folio_migrate_copy()
|
|
WARNING in alloc_charge_hpage
mm
|
-1 |
C |
error |
|
112 |
1295d |
1365d
|
22/29 |
1246d |
e031ff96b334
mm: khugepaged: allow page allocation fallback to eligible nodes
dec1d352de5c
mm: replace VM_WARN_ON to pr_warn if the node is offline with __GFP_THISNODE
|
|
KASAN: use-after-free Read in mas_next_nentry
fs
mm
|
19 |
C |
error |
done |
343 |
1355d |
1549d
|
22/29 |
1246d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
general protection fault in list_lru_add
mm
|
8 |
C |
done |
|
1125 |
1295d |
1583d
|
22/29 |
1246d |
ae085d7f9365
mm: kfence: fix missing objcg housekeeping for SLAB
|
|
WARNING in change_protection
mm
|
-1 |
C |
unreliable |
|
13 |
1388d |
1393d
|
22/29 |
1246d |
515778e2d790
mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
|
|
KASAN: use-after-free Read in unregister_shrinker (2)
mm
|
19 |
C |
error |
|
3799 |
1358d |
1402d
|
22/29 |
1246d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
KMSAN: uninit-value in mpol_rebind_mm (2)
mm
|
7 |
C |
|
|
11 |
1500d |
1624d
|
22/29 |
1246d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
kernel BUG in __filemap_get_folio
mm
|
-1 |
C |
done |
|
814 |
1385d |
1556d
|
22/29 |
1246d |
63b1898fffcd
XArray: Disallow sibling entries of nodes
|
|
KMSAN: uninit-value in mpol_rebind_task (2)
mm
|
7 |
C |
|
|
7 |
1502d |
1662d
|
22/29 |
1246d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
WARNING: locking bug in hugetlb_no_page
mm
|
4 |
C |
|
|
1 |
1350d |
1350d
|
22/29 |
1246d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume
fs
mm
|
17 |
C |
done |
done |
1 |
1425d |
1424d
|
22/29 |
1246d |
9f0933ac026f
fscache: fix OOB Read in __fscache_acquire_volume
|
|
BUG: sleeping function called from invalid context in break_ksm
mm
|
5 |
C |
|
|
9 |
1373d |
1373d
|
22/29 |
1246d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
|
general protection fault in hugetlbfs_parse_param
mm
|
2 |
C |
|
|
5 |
1362d |
1373d
|
22/29 |
1246d |
26215b7ee923
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
|
|
memory leak in xas_nomem
mm
|
3 |
C |
|
|
1 |
1522d |
1518d
|
22/29 |
1246d |
69a37a8ba1b4
mm/huge_memory: Fix xarray node memory leak
|
|
WARNING in find_vma
mm
|
-1 |
C |
done |
|
2616 |
1423d |
1446d
|
22/29 |
1246d |
d6f35446d076
binder_alloc: Add missing mmap_lock calls when using the VMA
44e602b4e52f
binder_alloc: add missing mmap_lock calls when using the VMA
|
|
WARNING in erofs_iget
erofs
mm
|
-1 |
C |
|
|
6 |
1367d |
1417d
|
22/29 |
1246d |
1dd73601a1cb
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
|
|
WARNING in nsim_map_alloc_elem
mm
|
-1 |
C |
error |
|
7 |
1440d |
1461d
|
22/29 |
1246d |
d0b80a9edb1a
netdevsim: Avoid allocation warnings triggered from user space
|
|
BUG: unable to handle kernel paging request in truncate_inode_partial_folio
fs
mm
|
8 |
C |
error |
|
4 |
1447d |
1486d
|
22/29 |
1246d |
84ac013046cc
secretmem: fix unhandled fault in truncate
|
|
WARNING in hugetlb_wp
mm
|
-1 |
C |
error |
|
3 |
1358d |
1364d
|
22/29 |
1246d |
f347454d0341
mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
|
|
WARNING in register_shrinker_prepared
f2fs
mm
|
-1 |
C |
error |
|
64 |
1507d |
1509d
|
22/29 |
1246d |
5035ebc644ae
mm: shrinkers: introduce debugfs interface for memory shrinkers
|
|
WARNING in __split_huge_page_tail
arch
mm
io-uring
|
-1 |
C |
error |
|
155 |
1295d |
1367d
|
22/29 |
1246d |
5aae9265ee1a
mm: prep_compound_tail() clear page->private
|
|
KASAN: use-after-free Read in register_shrinker_prepared (2)
mm
|
19 |
C |
done |
|
1145 |
1358d |
1396d
|
22/29 |
1246d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission
lsm
mm
|
10 |
C |
|
|
1 |
1352d |
1348d
|
22/29 |
1246d |
578b565b240a
9p/fd: Fix write overflow in p9_read_work
|
|
KASAN: invalid-free in free_prealloced_shrinker
mm
|
24 |
C |
done |
|
3 |
1465d |
1465d
|
22/29 |
1246d |
14773bfa70e6
mm: shrinkers: fix double kfree on shrinker name
|
|
KASAN: use-after-free Read in hugetlb_fault
mm
|
22 |
C |
|
|
383 |
1274d |
1370d
|
22/29 |
1246d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
general protection fault in end_page_writeback
mm
nilfs
|
2 |
C |
error |
done |
2 |
1345d |
1375d
|
22/29 |
1246d |
512c5ca01a36
nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
|
|
BUG: sleeping function called from invalid context in vm_area_dup
mm
|
5 |
C |
|
|
3 |
1373d |
1373d
|
22/29 |
1246d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
|
KASAN: use-after-free Read in hugetlb_handle_userfault
mm
|
19 |
C |
|
|
4 |
1391d |
1414d
|
22/29 |
1246d |
958f32ce832b
mm: hugetlb: fix UAF in hugetlb_handle_userfault
|
|
BUG: Bad page map (5)
mm
|
19 |
C |
|
|
35 |
1287d |
1545d
|
22/29 |
1246d |
4d24de9425f7
mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock
|
|
KASAN: use-after-free Read in mas_next_entry
fs
mm
|
19 |
C |
error |
|
16 |
1357d |
1370d
|
22/29 |
1246d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
WARNING in sco_sock_sendmsg
mm
|
-1 |
C |
inconclusive |
|
2 |
1786d |
1786d
|
22/29 |
1380d |
0771cbb3b97d
Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
|
|
WARNING in page_counter_cancel (3)
mm
cgroups
|
-1 |
C |
done |
|
22 |
1656d |
1706d
|
20/29 |
1599d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
WARNING: refcount bug in sys_memfd_secret
mm
|
13 |
C |
done |
done |
4217 |
1733d |
1736d
|
20/29 |
1599d |
87066fdd2e30
Revert "mm/secretmem: use refcount_t instead of atomic_t"
|
|
KASAN: use-after-free Read in unmap_page_range (2)
mm
|
19 |
C |
unreliable |
|
4 |
1709d |
1727d
|
20/29 |
1599d |
337546e83fc7
mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
|
|
WARNING in page_counter_uncharge
cgroups
mm
|
-1 |
C |
done |
done |
2 |
1667d |
1667d
|
20/29 |
1599d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
WARNING in new_slab
mm
|
-1 |
C |
inconclusive |
|
2 |
1646d |
1676d
|
20/29 |
1599d |
c12837d1bb31
ref_tracker: use __GFP_NOFAIL more carefully
|
|
kernel BUG in find_lock_entries
mm
|
-1 |
C |
done |
|
10 |
1647d |
1809d
|
20/29 |
1599d |
d417b49fff3e
mm/filemap.c: remove bogus VM_BUG_ON
|
|
kernel BUG at mm/vmalloc.c:LINE! (2)
mm
|
-1 |
C |
done |
done |
6605 |
1794d |
2205d
|
20/29 |
1641d |
537cf4e3cc2f
xsk: Fix umem cleanup bug at socket destruct
|
|
possible deadlock in __fs_reclaim_acquire
mm
|
4 |
syz |
unreliable |
|
672 |
1834d |
1846d
|
20/29 |
1717d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
BUG: sleeping function called from invalid context in stack_depot_save
mm
|
5 |
C |
unreliable |
|
8490 |
1816d |
1846d
|
20/29 |
1717d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
general protection fault in try_grab_compound_head
io-uring
mm
|
7 |
C |
done |
|
5 |
1819d |
1847d
|
20/29 |
1717d |
d08af0a59684
mm/hugetlb: fix refs calculation from unaligned @vaddr
|
|
WARNING in do_proc_bulk
mm
|
-1 |
C |
inconclusive |
|
3 |
1908d |
1909d
|
20/29 |
1717d |
4f2629ea67e7
USB: usbfs: Don't WARN about excessively large memory allocations
|
|
KMSAN: kernel-infoleak in copy_page_to_iter (2)
fs
mm
|
9 |
C |
|
|
2099 |
1813d |
2871d
|
20/29 |
1717d |
ce3aba43599f
ext4: fix kernel infoleak via ext4_extent_header
|
|
WARNING in tcindex_alloc_perfect_hash
mm
|
-1 |
C |
inconclusive |
|
349 |
1847d |
2022d
|
20/29 |
1717d |
3f2db250099f
net: sched: fix warning in tcindex_alloc_perfect_hash
|
|
KASAN: use-after-free Read in check_all_holdout_tasks_trace
mm
|
19 |
syz |
done |
|
4 |
1820d |
1890d
|
20/29 |
1717d |
1d10bf55d85d
rcu-tasks: Don't delete holdouts within trc_inspect_reader()
|
|
kernel BUG in remove_inode_hugepages
fs
mm
|
-1 |
C |
unreliable |
|
3 |
1802d |
1802d
|
20/29 |
1717d |
c7b1850dfb41
hugetlb: don't pass page cache pages to restore_reserve_on_error
|
|
KASAN: out-of-bounds Read in kfence_guarded_free
kasan
mm
|
17 |
C |
error |
|
20 |
2028d |
2039d
|
20/29 |
1869d |
2b8305260fb3
kfence, kasan: make KFENCE compatible with KASAN
|
|
BUG: sleeping function called from invalid context in mm_access
mm
|
5 |
C |
done |
|
684 |
2016d |
2019d
|
20/29 |
1932d |
38e891849003
kbuild: lto: fix module versioning
|
|
WARNING in rds_rdma_extra_size
mm
|
-1 |
C |
done |
|
165 |
1997d |
2021d
|
19/29 |
1962d |
a11148e6fcce
net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
|
|
kernel BUG at include/linux/highmem.h:LINE!
mm
|
-1 |
C |
error |
|
32 |
2066d |
2071d
|
19/29 |
1962d |
0060ef3b4e6d
mm: support THPs in zero_user_segments
|
|
WARNING in squashfs_read_table
mm
squashfs
|
-1 |
C |
inconclusive |
|
50 |
1992d |
2021d
|
19/29 |
1962d |
506220d2ba21
squashfs: add more sanity checks in xattr id lookup
|
|
WARNING in bpf_prog_test_run_raw_tp
mm
|
-1 |
C |
done |
|
36 |
2011d |
2022d
|
19/29 |
1962d |
7ac6ad051150
bpf: Reject too big ctx_size_in for raw_tp test run
|
|
WARNING in qrtr_tun_write_iter
mm
|
-1 |
C |
error |
|
57 |
1990d |
2021d
|
19/29 |
1962d |
2a80c1581237
net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
|
|
possible deadlock in hugetlb_cow
mm
|
4 |
C |
unreliable |
|
341 |
2032d |
2056d
|
19/29 |
1962d |
e7dd91c456a8
mm/hugetlb: fix deadlock in hugetlb_cow error path
|
|
INFO: rcu detected stall in sys_exit_group (6)
mm
|
1 |
C |
|
|
4 |
2123d |
2129d
|
19/29 |
1962d |
c583bcb8f5ed
rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
|
|
general protection fault in unlink_file_vma
mm
|
2 |
C |
done |
|
1 |
2148d |
2144d
|
15/29 |
2076d |
bc4fe4cdd602
mm: mmap: Fix general protection fault in unlink_file_vma()
|
|
INFO: rcu detected stall in exit_group
mm
|
1 |
C |
done |
done |
1 |
2113d |
2143d
|
15/29 |
2076d |
1d0e850a49a5
afs: Fix cell removal
|
|
WARNING in wp_page_copy
mm
|
-1 |
syz |
done |
done |
9 |
2349d |
2426d
|
15/29 |
2076d |
c3e5ea6ee574
mm: avoid data corruption on CoW fault into PFN-mapped VMA
|
|
kernel panic: System is deadlocked on memory
mm
|
2 |
C |
done |
|
43 |
2202d |
2200d
|
15/29 |
2076d |
9066e5cfb73c
mm, oom: make the calculation of oom badness more accurate
|
|
general protection fault in madvise_cold_or_pageout_pte_range
mm
|
2 |
C |
done |
|
3 |
2129d |
2139d
|
15/29 |
2110d |
ce2684254bd4
mm: validate pmd after splitting
|
|
KASAN: use-after-free Read in do_madvise
io-uring
mm
|
19 |
syz |
error |
|
4 |
2161d |
2163d
|
15/29 |
2122d |
7867fd7cc44e
mm: madvise: fix vma user-after-free
|
|
kernel BUG at mm/khugepaged.c:LINE!
mm
|
-1 |
C |
done |
|
30 |
2163d |
2175d
|
15/29 |
2136d |
f3f99d63a815
khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
|
|
possible deadlock in shmem_fallocate (4)
mm
|
4 |
C |
done |
|
81 |
2187d |
2401d
|
15/29 |
2136d |
3e338d3c95c7
staging: android: ashmem: Fix lockdep warning for write operation
|
|
general protection fault in khugepaged
mm
|
2 |
C |
done |
|
3 |
2194d |
2206d
|
15/29 |
2136d |
594cced14ad3
khugepaged: fix null-pointer dereference due to race
|
|
general protection fault in unpin_user_pages
mm
|
2 |
C |
done |
|
13 |
2256d |
2256d
|
15/29 |
2198d |
f78cdbd75a57
rds: fix crash in rds_info_getsockopt()
|
|
WARNING in __mmdrop
mm
|
-1 |
syz |
done |
|
14 |
2553d |
2562d
|
15/29 |
2217d |
3d2c7d370475
Revert "vhost: access vq metadata through kernel virtual address"
|
|
WARNING in __vm_enough_memory (2)
mm
|
-1 |
syz |
done |
|
6 |
2288d |
2291d
|
15/29 |
2227d |
dadbd85f2afc
mm: Fix MREMAP_DONTUNMAP accounting on VMA merge
|
|
possible deadlock in shmem_mfill_atomic_pte
mm
|
4 |
C |
done |
|
82 |
2254d |
2306d
|
15/29 |
2227d |
94b7cc01da5a
mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
|
|
possible deadlock in shmem_uncharge
mm
|
4 |
C |
done |
|
101 |
2255d |
2294d
|
15/29 |
2227d |
ea0dfeb4209b
shmem: fix possible deadlocks on shmlock_user_lock
|
|
WARNING: bad unlock balance in __get_user_pages_remote
mm
|
4 |
C |
done |
|
15 |
2298d |
2299d
|
15/29 |
2266d |
c7b6a566b985
mm/gup: Mark lock taken only after a successful retake
|
|
KASAN: stack-out-of-bounds Write in mpol_to_str
mm
|
21 |
C |
done |
|
23 |
2307d |
2311d
|
15/29 |
2266d |
aa9f7d5172fa
mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
|
|
BUG: unable to handle kernel paging request in kernel_get_mempolicy
mm
|
8 |
C |
done |
|
1 |
2303d |
2300d
|
15/29 |
2266d |
ba841078cd05
mm/mempolicy: Allow lookup_node() to handle fatal signal
|
|
KASAN: slab-out-of-bounds Write in mpol_parse_str
mm
|
21 |
C |
done |
|
3 |
2386d |
2382d
|
15/29 |
2348d |
c7a91bc7c2e1
mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
|
|
general protection fault in memcg_flush_percpu_vmstats
mm
cgroups
|
2 |
C |
error |
|
19 |
2458d |
2521d
|
14/29 |
2429d |
7961eee39784
mm: memcontrol: fix NULL-ptr deref in percpu stats flush
|
|
KASAN: slab-out-of-bounds Write in validate_chain
hardening
mm
|
21 |
syz |
done |
|
6 |
2575d |
2590d
|
12/29 |
2523d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: slab-out-of-bounds Read in corrupted (2)
hardening
mm
|
17 |
syz |
done |
|
3 |
2555d |
2605d
|
12/29 |
2523d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: use-after-free Read in corrupted (3)
mm
|
19 |
syz |
done |
|
1 |
2585d |
2585d
|
12/29 |
2523d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING in cgroup_rstat_updated
cgroups
mm
|
-1 |
syz |
done |
|
1 |
2543d |
2543d
|
12/29 |
2523d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: use-after-free Read in unregister_shrinker
mm
|
19 |
syz |
done |
|
3 |
2601d |
2606d
|
12/29 |
2545d |
689d7ba4895b
nfsd: fix cleanup of nfsd_reply_cache_init on failure
|
|
memory leak in __memcg_init_list_lru_node
mm
|
3 |
C |
|
|
3 |
2601d |
2615d
|
12/29 |
2570d |
3510955b3271
mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
|
|
general protection fault in load_elf_binary
fs
mm
|
2 |
C |
done |
|
15 |
2669d |
2674d
|
12/29 |
2597d |
cc338010a233
fs/binfmt_elf.c: free PT_INTERP filename ASAP
|
|
WARNING: locking bug in copy_process
mm
|
4 |
C |
done |
|
3 |
2630d |
2632d
|
12/29 |
2597d |
c3b7112df86b
fork: do not release lock that wasn't taken
|
|
KASAN: use-after-free Read in get_mem_cgroup_from_mm
mm
cgroups
|
19 |
C |
done |
|
375 |
2643d |
2816d
|
12/29 |
2597d |
c3f3ce049f7d
userfaultfd: use RCU to free the task struct when fork fails
|
|
BUG: bad usercopy in __check_heap_object (3)
mm
hardening
|
-1 |
C |
|
|
287 |
2869d |
2939d
|
12/29 |
2600d |
1f4aace60b0e
fs/seq_file.c: simplify seq_file iteration code and interface
|
|
kernel panic: corrupted stack end in wb_workfn
mm
|
2 |
C |
done |
|
14 |
2762d |
2762d
|
12/29 |
2662d |
ef82bcfa671b
sctp: use memdup_user instead of vmemdup_user
|
|
WARNING: bad usercopy in fanotify_read
hardening
mm
|
-1 |
C |
done |
|
5 |
2691d |
2691d
|
11/29 |
2671d |
b2d22b6bb33a
fanotify: Allow copying of file handle to userspace
|
|
KASAN: use-after-free Read in filemap_fault
mm
fs
|
19 |
C |
|
|
277 |
2754d |
2764d
|
11/29 |
2671d |
6b4c9f446981
filemap: drop the mmap_sem for all blocking operations
|
|
possible deadlock in shmem_fallocate (2)
mm
|
4 |
C |
|
|
1325 |
2696d |
2905d
|
11/29 |
2675d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
possible deadlock in __do_page_fault
fs
mm
|
4 |
C |
|
|
820 |
2696d |
2863d
|
11/29 |
2675d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
kernel BUG at mm/slab.c:LINE! (3)
mm
|
-1 |
C |
done |
|
14 |
2682d |
2809d
|
11/29 |
2682d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
KASAN: stack-out-of-bounds in do_raw_spin_lock
hardening
mm
|
17 |
C |
|
|
1 |
2757d |
2757d
|
11/29 |
2697d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: out-of-bounds Read in update_curr
hardening
mm
|
17 |
syz |
|
|
1 |
2757d |
2757d
|
11/29 |
2697d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
general protection fault in list_lru_count_one
mm
|
2 |
C |
|
|
12 |
2930d |
2929d
|
11/29 |
2736d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
general protection fault in transparent_hugepage_enabled
mm
|
2 |
C |
|
|
626 |
2760d |
2769d
|
11/29 |
2747d |
7635d9cbe832
mm, thp, proc: report THP eligibility for each vma
|
|
WARNING in userfaultfd_ioctl
mm
fs
|
-1 |
C |
|
|
11 |
2780d |
2789d
|
11/29 |
2765d |
01e881f5a1fc
userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
|
|
WARNING in alloc_pages_vma
mm
|
-1 |
C |
|
|
98 |
2784d |
2787d
|
11/29 |
2775d |
356ff8a9a78f
Revert "mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask"
|
|
WARNING in __put_task_struct (2)
mm
|
-1 |
C |
|
|
17 |
2837d |
2846d
|
11/29 |
2810d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
kernel BUG at mm/shmem.c:LINE!
mm
|
-1 |
C |
|
|
30 |
2937d |
2939d
|
11/29 |
2810d |
552446a41661
shmem: Convert shmem_add_to_page_cache to XArray
|
|
WARNING in try_charge
xfs
cgroups
mm
|
-1 |
syz |
|
|
649 |
2858d |
2911d
|
10/29 |
2857d |
3100dab2aa09
mm: memcontrol: print proper OOM header when no eligible victim left
|
|
BUG: unable to handle kernel paging request in kfree (2)
mm
|
8 |
C |
|
|
297 |
2885d |
2937d
|
10/29 |
2860d |
7913690dcc5e
net/9p/client.c: version pointer uninitialized
|
|
WARNING: bad usercopy in __kvm_write_guest_page
hardening
mm
|
-1 |
C |
|
|
4 |
2988d |
2981d
|
8/29 |
2891d |
0a06d4256674
KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
|
|
kernel BUG at fs/userfaultfd.c:LINE! (2)
fs
mm
|
-1 |
C |
|
|
8 |
2912d |
2930d
|
8/29 |
2907d |
31e810aa1033
userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
|
|
kernel BUG at mm/slab.c:LINE! (2)
hardening
mm
|
-1 |
C |
|
|
701 |
2923d |
2937d
|
8/29 |
2908d |
6e6fddc78323
bpf: fix panic due to oob in bpf_prog_test_run_skb
|
|
kernel BUG at mm/gup.c:LINE!
mm
|
-1 |
syz |
|
|
4 |
2944d |
2942d
|
8/29 |
2922d |
24962af7e104
fs, elf: make sure to page align bss in load_elf_library
bb177a732c43
mm: do not bug_on on incorrect length in __mm_populate()
|
|
KASAN: use-after-free Read in corrupted
mm
|
19 |
C |
|
|
2 |
2991d |
2994d
|
8/29 |
2937d |
543b8f8662fe
fuse: don't keep dead fuse_conn at fuse_fill_super().
|
|
general protection fault in __mem_cgroup_free
cgroups
mm
|
2 |
C |
|
|
22 |
3025d |
3036d
|
5/29 |
2999d |
4eaf431f6f71
memcg: fix per_node_info cleanup
|
|
WARNING: refcount bug in should_fail
mm
|
13 |
C |
|
|
3 |
3038d |
3069d
|
5/29 |
2999d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
general protection fault in kernfs_kill_sb
mm
|
2 |
C |
|
|
29 |
2999d |
3036d
|
5/29 |
2999d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
kernel panic: Out of memory and no killable processes... (2)
mm
|
2 |
C |
|
|
1 |
3099d |
3099d
|
4/29 |
3045d |
0537250fdc6c
netfilter: x_tables: make allocation less aggressive
|
|
possible deadlock in get_user_pages_unlocked
mm
|
4 |
C |
|
|
5 |
3071d |
3094d
|
4/29 |
3045d |
96312e61282a
mm/gup.c: teach get_user_pages_unlocked to handle FOLL_NOWAIT
|
|
possible deadlock in shmem_file_llseek
mm
|
4 |
C |
|
|
4432 |
3054d |
3117d
|
4/29 |
3045d |
cb57469c9573
staging: android: ashmem: Fix lockdep issue during llseek
|
|
KASAN: use-after-free Read in __do_page_fault
mm
|
19 |
syz |
|
|
679 |
3178d |
3189d
|
4/29 |
3082d |
cb0631fd3cf9
x86/mm: fix use-after-free of vma during userfaultfd fault
|
|
WARNING in usercopy_warn
hardening
mm
|
-1 |
C |
|
|
171 |
3090d |
3108d
|
4/29 |
3084d |
79a8a642bf05
net: Whitelist the skbuff_head_cache "cb" field
|
|
WARNING in __alloc_pages_slowpath
mm
|
-1 |
C |
|
|
9435 |
3094d |
3123d
|
4/29 |
3091d |
0c75f10312a3
staging: android: ion: Add __GFP_NOWARN for system contig heap
|
|
WARNING in __check_heap_object
hardening
mm
|
-1 |
C |
|
|
5173 |
3109d |
3181d
|
4/29 |
3091d |
ab9ee8e38b29
sctp: Define usercopy region in SCTP proto slab cache
|
|
general protection fault in page_mapping
fs
mm
|
2 |
C |
|
|
46 |
3118d |
3146d
|
4/29 |
3095d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
BUG: unable to handle kernel NULL pointer dereference in page_mapping
fs
mm
|
10 |
C |
|
|
4 |
3138d |
3141d
|
4/29 |
3095d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
kernel BUG at fs/userfaultfd.c:LINE!
mm
fs
|
-1 |
C |
|
|
3 |
3138d |
3135d
|
4/29 |
3095d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
|
KASAN: use-after-free Read in handle_userfault
fs
mm
|
19 |
C |
|
|
151 |
3129d |
3192d
|
3/29 |
3117d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
|
WARNING in free_kthread_struct
mm
|
-1 |
C |
|
|
136405 |
3177d |
3181d
|
3/29 |
3160d |
e10237cc76ef
kthread: zero the kthread data structure
|