|
KMSAN: uninit-value in mptcp_established_options
prio:high
mptcp
|
7 |
syz |
|
|
3191 |
54d |
89d
|
29/29 |
14d |
5e939544f9d2
mptcp: fix uninit-value in mptcp_established_options
|
|
possible deadlock in mptcp_subflow_create_socket (3)
prio:low
mptcp
|
4 |
|
|
|
140 |
16d |
139d
|
29/29 |
14d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
possible deadlock in mptcp_sendmsg
prio:low
mptcp
|
4 |
|
|
|
1 |
73d |
73d
|
29/29 |
14d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id
mptcp
|
17 |
|
|
|
1 |
206d |
189d
|
29/29 |
84d |
e2a9eeb69f7d
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
|
|
WARNING in mptcp_pm_nl_del_addr_doit
mptcp
|
-1 |
|
|
|
30 |
148d |
277d
|
29/29 |
84d |
d191101dee25
mptcp: pm: in-kernel: always set ID as avail when rm endp
|
|
WARNING in subflow_data_ready (4)
mptcp
|
-1 |
syz, C |
|
|
556 |
206d |
343d
|
29/29 |
184d |
71154bbe4942
mptcp: fallback earlier on simult connection
|
|
WARNING: refcount bug in mptcp_schedule_work (2)
mptcp
|
13 |
|
|
|
5 |
251d |
258d
|
29/29 |
203d |
035bca3f017e
mptcp: fix race condition in mptcp_schedule_work()
|
|
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer
mptcp
|
19 |
|
|
|
1 |
286d |
254d
|
29/29 |
203d |
426358d9be7c
mptcp: fix a race in mptcp_pm_del_add_timer()
|
|
possible deadlock in mptcp_pm_addr_send_ack
mptcp
|
4 |
|
|
|
2 |
322d |
327d
|
29/29 |
273d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_subflow_shutdown
mptcp
|
4 |
|
|
|
1 |
329d |
329d
|
29/29 |
273d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_close_ssk
mptcp
|
4 |
|
|
|
5 |
298d |
327d
|
29/29 |
273d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_close (2)
mptcp
|
4 |
|
|
|
1 |
333d |
333d
|
29/29 |
273d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_push_pending
mptcp
|
4 |
|
|
|
3 |
298d |
329d
|
29/29 |
273d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in mptcp_pm_nl_addr_send_ack
mptcp
|
-1 |
|
|
|
1 |
528d |
526d
|
28/29 |
414d |
f865c24bc551
mptcp: always handle address removal under msk socket lock
|
|
INFO: task hung in lock_sock_nested (5)
mptcp
tipc
|
1 |
syz, C |
done |
|
43 |
459d |
580d
|
28/29 |
449d |
06cc8786516f
tls: skip setting sk_write_space on rekey
|
|
WARNING in mptcp_pm_nl_set_flags (2)
mptcp
|
-1 |
syz |
done |
|
2 |
566d |
561d
|
28/29 |
449d |
1bb0d1348546
mptcp: pm: only set fullmesh for subflow endp
|
|
WARNING in __mptcp_clean_una (2)
mptcp
|
-1 |
syz, C |
done |
|
11 |
550d |
590d
|
28/29 |
449d |
619af16b3b57
mptcp: handle fastopen disconnect correctly
|
|
KMSAN: uninit-value in mptcp_incoming_options (2)
mptcp
|
7 |
|
|
|
9 |
556d |
561d
|
28/29 |
449d |
c86b000782da
mptcp: consolidate suboption status
|
|
possible deadlock in sk_clone_lock (3)
mptcp
|
4 |
syz, C |
|
|
21 |
643d |
692d
|
28/29 |
624d |
3d041393ea8c
mptcp: prevent MPC handshake on port-based signal endpoints
|
|
WARNING in __mptcp_move_skbs_from_subflow
mptcp
|
-1 |
syz, C |
error |
|
90 |
657d |
744d
|
28/29 |
624d |
4dabcdf58121
tcp: fix mptcp DSS corruption due to large pmtu xmit
|
|
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow
mptcp
|
19 |
|
|
|
1 |
654d |
653d
|
28/29 |
624d |
7decd1f5904a
mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
|
|
KASAN: slab-use-after-free Read in __timer_delete_sync
mptcp
|
19 |
syz |
error |
|
1 |
697d |
694d
|
28/29 |
645d |
b4cd80b03389
mptcp: pm: Fix uaf in __timer_delete_sync
|
|
WARNING in mptcp_pm_nl_set_flags
mptcp
|
-1 |
syz |
done |
|
3 |
702d |
702d
|
28/29 |
645d |
9366922adc6a
mptcp: pm: fix ID 0 endp usage after multiple re-creations
|
|
WARNING in __mptcp_clean_una
mptcp
|
-1 |
syz, C |
done |
done |
248 |
769d |
894d
|
26/29 |
726d |
fb7a0d334894
mptcp: ensure snd_nxt is properly initialized on connect
|
|
general protection fault in subflow_v6_route_req
mptcp
|
2 |
syz, C |
done |
|
2 |
814d |
814d
|
25/29 |
784d |
445c0b69c729
mptcp: fix possible NULL dereferences
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
syz, C |
|
|
63 |
936d |
931d
|
25/29 |
910d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
WARNING in mptcp_check_listen_stop
mptcp
|
-1 |
syz, C |
done |
|
47 |
911d |
959d
|
25/29 |
911d |
4c0288299fd0
mptcp: prevent tcp diag from closing listener subflows
|
|
general protection fault in __mptcp_set_connected
mptcp
|
2 |
|
|
|
2 |
992d |
996d
|
25/29 |
921d |
d109a7767273
mptcp: fix possible NULL pointer dereference on close
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
syz, C |
|
|
93 |
972d |
980d
|
25/29 |
921d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
WARNING in subflow_data_ready
mptcp
|
-1 |
|
|
|
42 |
924d |
1008d
|
25/29 |
921d |
4fd19a307016
mptcp: fix inconsistent state on fastopen race
|
|
possible deadlock in dccp_v4_ctl_send_reset
mptcp
|
4 |
syz, C |
done |
|
26 |
1338d |
1350d
|
22/29 |
1251d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in mptcp_sendmsg_frag
mptcp
|
-1 |
syz, C |
inconclusive |
|
6 |
1772d |
1778d
|
20/29 |
1596d |
efe686ffce01
mptcp: ensure tx skbs always have the MPTCP ext
mptcp: ensure tx skbs always have the MPTCP ext
|
|
bpf-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
110 |
1671d |
1689d
|
20/29 |
1604d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
linux-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1687d |
1688d
|
20/29 |
1604d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
INFO: rcu detected stall in sys_recvmmsg
mptcp
|
1 |
syz, C |
done |
|
52 |
1640d |
1772d
|
20/29 |
1604d |
612f71d7328c
mptcp: fix possible stall on recvmsg()
|
|
net-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1688d |
1688d
|
20/29 |
1604d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
possible deadlock in mptcp_close
mptcp
|
4 |
syz, C |
done |
|
931 |
1762d |
1773d
|
20/29 |
1604d |
49054556289e
net: introduce and use lock_sock_fast_nested()
|
|
INFO: task hung in lock_sock_nested (4)
mptcp
|
1 |
syz, C |
done |
|
6 |
2019d |
2066d
|
19/29 |
1968d |
05e3ecea4a63
mptcp: avoid potential infinite loop in mptcp_recvmsg()
|
|
WARNING in mptcp_reset_timer
mptcp
|
-1 |
syz, C |
unreliable |
|
1307 |
1985d |
2079d
|
19/29 |
1968d |
b680a214ec28
mptcp: update rtx timeout only if required.
|
|
WARNING in warn_bad_map
mptcp
|
-1 |
|
|
|
1 |
2232d |
2228d
|
15/29 |
2200d |
9c29e3615274
mptcp: fix DSS map generation on fin retransmission
|
|
WARNING: bad unlock balance in mptcp_poll
mptcp
|
4 |
syz, C |
done |
|
10 |
2297d |
2300d
|
15/29 |
2232d |
e154659ba39a
mptcp: fix double-unlock in mptcp_poll
|