|
KMSAN: uninit-value in mptcp_established_options
prio:high
mptcp
|
7 |
syz |
|
|
3191 |
113d |
148d
|
29/29 |
73d |
5e939544f9d2
mptcp: fix uninit-value in mptcp_established_options
|
|
possible deadlock in mptcp_subflow_create_socket (3)
prio:low
mptcp
|
4 |
|
|
|
140 |
74d |
198d
|
29/29 |
73d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
possible deadlock in mptcp_sendmsg
prio:low
mptcp
|
4 |
|
|
|
1 |
132d |
132d
|
29/29 |
73d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id
mptcp
|
17 |
|
|
|
1 |
264d |
248d
|
29/29 |
143d |
e2a9eeb69f7d
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
|
|
WARNING in mptcp_pm_nl_del_addr_doit
mptcp
|
-1 |
|
|
|
30 |
207d |
336d
|
29/29 |
143d |
d191101dee25
mptcp: pm: in-kernel: always set ID as avail when rm endp
|
|
WARNING in subflow_data_ready (4)
mptcp
|
-1 |
syz, C |
|
|
556 |
264d |
402d
|
29/29 |
243d |
71154bbe4942
mptcp: fallback earlier on simult connection
|
|
WARNING: refcount bug in mptcp_schedule_work (2)
mptcp
|
13 |
|
|
|
5 |
310d |
317d
|
29/29 |
262d |
035bca3f017e
mptcp: fix race condition in mptcp_schedule_work()
|
|
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer
mptcp
|
19 |
|
|
|
1 |
344d |
313d
|
29/29 |
262d |
426358d9be7c
mptcp: fix a race in mptcp_pm_del_add_timer()
|
|
possible deadlock in mptcp_pm_addr_send_ack
mptcp
|
4 |
|
|
|
2 |
380d |
385d
|
29/29 |
331d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_subflow_shutdown
mptcp
|
4 |
|
|
|
1 |
387d |
387d
|
29/29 |
331d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_close_ssk
mptcp
|
4 |
|
|
|
5 |
357d |
385d
|
29/29 |
331d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_close (2)
mptcp
|
4 |
|
|
|
1 |
392d |
392d
|
29/29 |
331d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_push_pending
mptcp
|
4 |
|
|
|
3 |
357d |
387d
|
29/29 |
331d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in mptcp_pm_nl_addr_send_ack
mptcp
|
-1 |
|
|
|
1 |
587d |
585d
|
28/29 |
473d |
f865c24bc551
mptcp: always handle address removal under msk socket lock
|
|
INFO: task hung in lock_sock_nested (5)
mptcp
tipc
|
1 |
syz, C |
done |
|
43 |
518d |
639d
|
28/29 |
508d |
06cc8786516f
tls: skip setting sk_write_space on rekey
|
|
WARNING in mptcp_pm_nl_set_flags (2)
mptcp
|
-1 |
syz |
done |
|
2 |
624d |
620d
|
28/29 |
508d |
1bb0d1348546
mptcp: pm: only set fullmesh for subflow endp
|
|
WARNING in __mptcp_clean_una (2)
mptcp
|
-1 |
syz, C |
done |
|
11 |
609d |
649d
|
28/29 |
508d |
619af16b3b57
mptcp: handle fastopen disconnect correctly
|
|
KMSAN: uninit-value in mptcp_incoming_options (2)
mptcp
|
7 |
|
|
|
9 |
615d |
620d
|
28/29 |
508d |
c86b000782da
mptcp: consolidate suboption status
|
|
possible deadlock in sk_clone_lock (3)
mptcp
|
4 |
syz, C |
|
|
21 |
702d |
751d
|
28/29 |
682d |
3d041393ea8c
mptcp: prevent MPC handshake on port-based signal endpoints
|
|
WARNING in __mptcp_move_skbs_from_subflow
mptcp
|
-1 |
syz, C |
error |
|
90 |
715d |
803d
|
28/29 |
682d |
4dabcdf58121
tcp: fix mptcp DSS corruption due to large pmtu xmit
|
|
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow
mptcp
|
19 |
|
|
|
1 |
712d |
711d
|
28/29 |
682d |
7decd1f5904a
mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
|
|
KASAN: slab-use-after-free Read in __timer_delete_sync
mptcp
|
19 |
syz |
error |
|
1 |
755d |
753d
|
28/29 |
704d |
b4cd80b03389
mptcp: pm: Fix uaf in __timer_delete_sync
|
|
WARNING in mptcp_pm_nl_set_flags
mptcp
|
-1 |
syz |
done |
|
3 |
761d |
761d
|
28/29 |
704d |
9366922adc6a
mptcp: pm: fix ID 0 endp usage after multiple re-creations
|
|
WARNING in __mptcp_clean_una
mptcp
|
-1 |
syz, C |
done |
done |
248 |
828d |
953d
|
26/29 |
785d |
fb7a0d334894
mptcp: ensure snd_nxt is properly initialized on connect
|
|
general protection fault in subflow_v6_route_req
mptcp
|
2 |
syz, C |
done |
|
2 |
873d |
873d
|
25/29 |
842d |
445c0b69c729
mptcp: fix possible NULL dereferences
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
syz, C |
|
|
63 |
995d |
990d
|
25/29 |
969d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
WARNING in mptcp_check_listen_stop
mptcp
|
-1 |
syz, C |
done |
|
47 |
970d |
1018d
|
25/29 |
970d |
4c0288299fd0
mptcp: prevent tcp diag from closing listener subflows
|
|
general protection fault in __mptcp_set_connected
mptcp
|
2 |
|
|
|
2 |
1050d |
1055d
|
25/29 |
979d |
d109a7767273
mptcp: fix possible NULL pointer dereference on close
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
syz, C |
|
|
93 |
1030d |
1039d
|
25/29 |
979d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
WARNING in subflow_data_ready
mptcp
|
-1 |
|
|
|
42 |
982d |
1066d
|
25/29 |
979d |
4fd19a307016
mptcp: fix inconsistent state on fastopen race
|
|
possible deadlock in dccp_v4_ctl_send_reset
mptcp
|
4 |
syz, C |
done |
|
26 |
1397d |
1408d
|
22/29 |
1310d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in mptcp_sendmsg_frag
mptcp
|
-1 |
syz, C |
inconclusive |
|
6 |
1830d |
1837d
|
20/29 |
1655d |
efe686ffce01
mptcp: ensure tx skbs always have the MPTCP ext
mptcp: ensure tx skbs always have the MPTCP ext
|
|
bpf-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
110 |
1730d |
1747d
|
20/29 |
1663d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
linux-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1746d |
1747d
|
20/29 |
1663d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
INFO: rcu detected stall in sys_recvmmsg
mptcp
|
1 |
syz, C |
done |
|
52 |
1699d |
1830d
|
20/29 |
1663d |
612f71d7328c
mptcp: fix possible stall on recvmsg()
|
|
net-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1746d |
1747d
|
20/29 |
1663d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
possible deadlock in mptcp_close
mptcp
|
4 |
syz, C |
done |
|
931 |
1821d |
1831d
|
20/29 |
1663d |
49054556289e
net: introduce and use lock_sock_fast_nested()
|
|
INFO: task hung in lock_sock_nested (4)
mptcp
|
1 |
syz, C |
done |
|
6 |
2077d |
2124d
|
19/29 |
2026d |
05e3ecea4a63
mptcp: avoid potential infinite loop in mptcp_recvmsg()
|
|
WARNING in mptcp_reset_timer
mptcp
|
-1 |
syz, C |
unreliable |
|
1307 |
2043d |
2138d
|
19/29 |
2026d |
b680a214ec28
mptcp: update rtx timeout only if required.
|
|
WARNING in warn_bad_map
mptcp
|
-1 |
|
|
|
1 |
2291d |
2287d
|
15/29 |
2259d |
9c29e3615274
mptcp: fix DSS map generation on fin retransmission
|
|
WARNING: bad unlock balance in mptcp_poll
mptcp
|
4 |
syz, C |
done |
|
10 |
2356d |
2359d
|
15/29 |
2291d |
e154659ba39a
mptcp: fix double-unlock in mptcp_poll
|