|
KMSAN: uninit-value in mptcp_established_options
prio:high
mptcp
|
7 |
syz |
|
|
3191 |
87d |
122d
|
29/29 |
47d |
5e939544f9d2
mptcp: fix uninit-value in mptcp_established_options
|
|
possible deadlock in mptcp_subflow_create_socket (3)
prio:low
mptcp
|
4 |
|
|
|
140 |
48d |
172d
|
29/29 |
47d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
possible deadlock in mptcp_sendmsg
prio:low
mptcp
|
4 |
|
|
|
1 |
106d |
106d
|
29/29 |
47d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id
mptcp
|
17 |
|
|
|
1 |
239d |
222d
|
29/29 |
117d |
e2a9eeb69f7d
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
|
|
WARNING in mptcp_pm_nl_del_addr_doit
mptcp
|
-1 |
|
|
|
30 |
181d |
310d
|
29/29 |
117d |
d191101dee25
mptcp: pm: in-kernel: always set ID as avail when rm endp
|
|
WARNING in subflow_data_ready (4)
mptcp
|
-1 |
syz, C |
|
|
556 |
238d |
376d
|
29/29 |
217d |
71154bbe4942
mptcp: fallback earlier on simult connection
|
|
WARNING: refcount bug in mptcp_schedule_work (2)
mptcp
|
13 |
|
|
|
5 |
284d |
291d
|
29/29 |
236d |
035bca3f017e
mptcp: fix race condition in mptcp_schedule_work()
|
|
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer
mptcp
|
19 |
|
|
|
1 |
318d |
287d
|
29/29 |
236d |
426358d9be7c
mptcp: fix a race in mptcp_pm_del_add_timer()
|
|
possible deadlock in mptcp_pm_addr_send_ack
mptcp
|
4 |
|
|
|
2 |
354d |
359d
|
29/29 |
305d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_subflow_shutdown
mptcp
|
4 |
|
|
|
1 |
361d |
361d
|
29/29 |
305d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_close_ssk
mptcp
|
4 |
|
|
|
5 |
331d |
360d
|
29/29 |
305d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_close (2)
mptcp
|
4 |
|
|
|
1 |
366d |
366d
|
29/29 |
305d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_push_pending
mptcp
|
4 |
|
|
|
3 |
331d |
361d
|
29/29 |
305d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in mptcp_pm_nl_addr_send_ack
mptcp
|
-1 |
|
|
|
1 |
561d |
559d
|
28/29 |
447d |
f865c24bc551
mptcp: always handle address removal under msk socket lock
|
|
INFO: task hung in lock_sock_nested (5)
mptcp
tipc
|
1 |
syz, C |
done |
|
43 |
492d |
613d
|
28/29 |
482d |
06cc8786516f
tls: skip setting sk_write_space on rekey
|
|
WARNING in mptcp_pm_nl_set_flags (2)
mptcp
|
-1 |
syz |
done |
|
2 |
598d |
594d
|
28/29 |
482d |
1bb0d1348546
mptcp: pm: only set fullmesh for subflow endp
|
|
WARNING in __mptcp_clean_una (2)
mptcp
|
-1 |
syz, C |
done |
|
11 |
583d |
623d
|
28/29 |
482d |
619af16b3b57
mptcp: handle fastopen disconnect correctly
|
|
KMSAN: uninit-value in mptcp_incoming_options (2)
mptcp
|
7 |
|
|
|
9 |
589d |
594d
|
28/29 |
482d |
c86b000782da
mptcp: consolidate suboption status
|
|
possible deadlock in sk_clone_lock (3)
mptcp
|
4 |
syz, C |
|
|
21 |
676d |
725d
|
28/29 |
656d |
3d041393ea8c
mptcp: prevent MPC handshake on port-based signal endpoints
|
|
WARNING in __mptcp_move_skbs_from_subflow
mptcp
|
-1 |
syz, C |
error |
|
90 |
689d |
777d
|
28/29 |
656d |
4dabcdf58121
tcp: fix mptcp DSS corruption due to large pmtu xmit
|
|
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow
mptcp
|
19 |
|
|
|
1 |
686d |
686d
|
28/29 |
656d |
7decd1f5904a
mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
|
|
KASAN: slab-use-after-free Read in __timer_delete_sync
mptcp
|
19 |
syz |
error |
|
1 |
729d |
727d
|
28/29 |
678d |
b4cd80b03389
mptcp: pm: Fix uaf in __timer_delete_sync
|
|
WARNING in mptcp_pm_nl_set_flags
mptcp
|
-1 |
syz |
done |
|
3 |
735d |
735d
|
28/29 |
678d |
9366922adc6a
mptcp: pm: fix ID 0 endp usage after multiple re-creations
|
|
WARNING in __mptcp_clean_una
mptcp
|
-1 |
syz, C |
done |
done |
248 |
802d |
927d
|
26/29 |
759d |
fb7a0d334894
mptcp: ensure snd_nxt is properly initialized on connect
|
|
general protection fault in subflow_v6_route_req
mptcp
|
2 |
syz, C |
done |
|
2 |
847d |
847d
|
25/29 |
817d |
445c0b69c729
mptcp: fix possible NULL dereferences
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
syz, C |
|
|
63 |
969d |
964d
|
25/29 |
943d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
WARNING in mptcp_check_listen_stop
mptcp
|
-1 |
syz, C |
done |
|
47 |
944d |
992d
|
25/29 |
944d |
4c0288299fd0
mptcp: prevent tcp diag from closing listener subflows
|
|
general protection fault in __mptcp_set_connected
mptcp
|
2 |
|
|
|
2 |
1024d |
1029d
|
25/29 |
953d |
d109a7767273
mptcp: fix possible NULL pointer dereference on close
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
syz, C |
|
|
93 |
1004d |
1013d
|
25/29 |
953d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
WARNING in subflow_data_ready
mptcp
|
-1 |
|
|
|
42 |
956d |
1041d
|
25/29 |
953d |
4fd19a307016
mptcp: fix inconsistent state on fastopen race
|
|
possible deadlock in dccp_v4_ctl_send_reset
mptcp
|
4 |
syz, C |
done |
|
26 |
1371d |
1383d
|
22/29 |
1284d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in mptcp_sendmsg_frag
mptcp
|
-1 |
syz, C |
inconclusive |
|
6 |
1804d |
1811d
|
20/29 |
1629d |
efe686ffce01
mptcp: ensure tx skbs always have the MPTCP ext
mptcp: ensure tx skbs always have the MPTCP ext
|
|
bpf-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
110 |
1704d |
1721d
|
20/29 |
1637d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
linux-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1720d |
1721d
|
20/29 |
1637d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
INFO: rcu detected stall in sys_recvmmsg
mptcp
|
1 |
syz, C |
done |
|
52 |
1673d |
1804d
|
20/29 |
1637d |
612f71d7328c
mptcp: fix possible stall on recvmsg()
|
|
net-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1720d |
1721d
|
20/29 |
1637d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
possible deadlock in mptcp_close
mptcp
|
4 |
syz, C |
done |
|
931 |
1795d |
1805d
|
20/29 |
1637d |
49054556289e
net: introduce and use lock_sock_fast_nested()
|
|
INFO: task hung in lock_sock_nested (4)
mptcp
|
1 |
syz, C |
done |
|
6 |
2052d |
2098d
|
19/29 |
2000d |
05e3ecea4a63
mptcp: avoid potential infinite loop in mptcp_recvmsg()
|
|
WARNING in mptcp_reset_timer
mptcp
|
-1 |
syz, C |
unreliable |
|
1307 |
2017d |
2112d
|
19/29 |
2000d |
b680a214ec28
mptcp: update rtx timeout only if required.
|
|
WARNING in warn_bad_map
mptcp
|
-1 |
|
|
|
1 |
2265d |
2261d
|
15/29 |
2233d |
9c29e3615274
mptcp: fix DSS map generation on fin retransmission
|
|
WARNING: bad unlock balance in mptcp_poll
mptcp
|
4 |
syz, C |
done |
|
10 |
2330d |
2333d
|
15/29 |
2265d |
e154659ba39a
mptcp: fix double-unlock in mptcp_poll
|