|
KMSAN: uninit-value in mptcp_established_options
prio:high
mptcp
|
7 |
syz |
|
|
3191 |
67d |
103d
|
29/29 |
27d |
5e939544f9d2
mptcp: fix uninit-value in mptcp_established_options
|
|
possible deadlock in mptcp_subflow_create_socket (3)
prio:low
mptcp
|
4 |
|
|
|
140 |
29d |
153d
|
29/29 |
27d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
possible deadlock in mptcp_sendmsg
prio:low
mptcp
|
4 |
|
|
|
1 |
87d |
87d
|
29/29 |
27d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id
mptcp
|
17 |
|
|
|
1 |
219d |
202d
|
29/29 |
97d |
e2a9eeb69f7d
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
|
|
WARNING in mptcp_pm_nl_del_addr_doit
mptcp
|
-1 |
|
|
|
30 |
162d |
290d
|
29/29 |
97d |
d191101dee25
mptcp: pm: in-kernel: always set ID as avail when rm endp
|
|
WARNING in subflow_data_ready (4)
mptcp
|
-1 |
syz, C |
|
|
556 |
219d |
356d
|
29/29 |
198d |
71154bbe4942
mptcp: fallback earlier on simult connection
|
|
WARNING: refcount bug in mptcp_schedule_work (2)
mptcp
|
13 |
|
|
|
5 |
264d |
271d
|
29/29 |
216d |
035bca3f017e
mptcp: fix race condition in mptcp_schedule_work()
|
|
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer
mptcp
|
19 |
|
|
|
1 |
299d |
268d
|
29/29 |
216d |
426358d9be7c
mptcp: fix a race in mptcp_pm_del_add_timer()
|
|
possible deadlock in mptcp_pm_addr_send_ack
mptcp
|
4 |
|
|
|
2 |
335d |
340d
|
29/29 |
286d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_subflow_shutdown
mptcp
|
4 |
|
|
|
1 |
342d |
342d
|
29/29 |
286d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_close_ssk
mptcp
|
4 |
|
|
|
5 |
311d |
340d
|
29/29 |
286d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_close (2)
mptcp
|
4 |
|
|
|
1 |
346d |
346d
|
29/29 |
286d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_push_pending
mptcp
|
4 |
|
|
|
3 |
311d |
342d
|
29/29 |
286d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in mptcp_pm_nl_addr_send_ack
mptcp
|
-1 |
|
|
|
1 |
541d |
539d
|
28/29 |
427d |
f865c24bc551
mptcp: always handle address removal under msk socket lock
|
|
INFO: task hung in lock_sock_nested (5)
mptcp
tipc
|
1 |
syz, C |
done |
|
43 |
472d |
593d
|
28/29 |
462d |
06cc8786516f
tls: skip setting sk_write_space on rekey
|
|
WARNING in mptcp_pm_nl_set_flags (2)
mptcp
|
-1 |
syz |
done |
|
2 |
579d |
574d
|
28/29 |
462d |
1bb0d1348546
mptcp: pm: only set fullmesh for subflow endp
|
|
WARNING in __mptcp_clean_una (2)
mptcp
|
-1 |
syz, C |
done |
|
11 |
564d |
603d
|
28/29 |
462d |
619af16b3b57
mptcp: handle fastopen disconnect correctly
|
|
KMSAN: uninit-value in mptcp_incoming_options (2)
mptcp
|
7 |
|
|
|
9 |
570d |
574d
|
28/29 |
462d |
c86b000782da
mptcp: consolidate suboption status
|
|
possible deadlock in sk_clone_lock (3)
mptcp
|
4 |
syz, C |
|
|
21 |
657d |
705d
|
28/29 |
637d |
3d041393ea8c
mptcp: prevent MPC handshake on port-based signal endpoints
|
|
WARNING in __mptcp_move_skbs_from_subflow
mptcp
|
-1 |
syz, C |
error |
|
90 |
670d |
757d
|
28/29 |
637d |
4dabcdf58121
tcp: fix mptcp DSS corruption due to large pmtu xmit
|
|
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow
mptcp
|
19 |
|
|
|
1 |
667d |
666d
|
28/29 |
637d |
7decd1f5904a
mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
|
|
KASAN: slab-use-after-free Read in __timer_delete_sync
mptcp
|
19 |
syz |
error |
|
1 |
710d |
707d
|
28/29 |
658d |
b4cd80b03389
mptcp: pm: Fix uaf in __timer_delete_sync
|
|
WARNING in mptcp_pm_nl_set_flags
mptcp
|
-1 |
syz |
done |
|
3 |
715d |
715d
|
28/29 |
658d |
9366922adc6a
mptcp: pm: fix ID 0 endp usage after multiple re-creations
|
|
WARNING in __mptcp_clean_una
mptcp
|
-1 |
syz, C |
done |
done |
248 |
782d |
907d
|
26/29 |
739d |
fb7a0d334894
mptcp: ensure snd_nxt is properly initialized on connect
|
|
general protection fault in subflow_v6_route_req
mptcp
|
2 |
syz, C |
done |
|
2 |
827d |
827d
|
25/29 |
797d |
445c0b69c729
mptcp: fix possible NULL dereferences
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
syz, C |
|
|
63 |
950d |
944d
|
25/29 |
924d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
WARNING in mptcp_check_listen_stop
mptcp
|
-1 |
syz, C |
done |
|
47 |
924d |
972d
|
25/29 |
924d |
4c0288299fd0
mptcp: prevent tcp diag from closing listener subflows
|
|
general protection fault in __mptcp_set_connected
mptcp
|
2 |
|
|
|
2 |
1005d |
1009d
|
25/29 |
934d |
d109a7767273
mptcp: fix possible NULL pointer dereference on close
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
syz, C |
|
|
93 |
985d |
993d
|
25/29 |
934d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
WARNING in subflow_data_ready
mptcp
|
-1 |
|
|
|
42 |
937d |
1021d
|
25/29 |
934d |
4fd19a307016
mptcp: fix inconsistent state on fastopen race
|
|
possible deadlock in dccp_v4_ctl_send_reset
mptcp
|
4 |
syz, C |
done |
|
26 |
1351d |
1363d
|
22/29 |
1264d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in mptcp_sendmsg_frag
mptcp
|
-1 |
syz, C |
inconclusive |
|
6 |
1785d |
1792d
|
20/29 |
1609d |
efe686ffce01
mptcp: ensure tx skbs always have the MPTCP ext
mptcp: ensure tx skbs always have the MPTCP ext
|
|
bpf-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
110 |
1685d |
1702d
|
20/29 |
1617d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
linux-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1700d |
1701d
|
20/29 |
1617d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
INFO: rcu detected stall in sys_recvmmsg
mptcp
|
1 |
syz, C |
done |
|
52 |
1653d |
1785d
|
20/29 |
1617d |
612f71d7328c
mptcp: fix possible stall on recvmsg()
|
|
net-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1701d |
1701d
|
20/29 |
1617d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
possible deadlock in mptcp_close
mptcp
|
4 |
syz, C |
done |
|
931 |
1775d |
1786d
|
20/29 |
1617d |
49054556289e
net: introduce and use lock_sock_fast_nested()
|
|
INFO: task hung in lock_sock_nested (4)
mptcp
|
1 |
syz, C |
done |
|
6 |
2032d |
2079d
|
19/29 |
1981d |
05e3ecea4a63
mptcp: avoid potential infinite loop in mptcp_recvmsg()
|
|
WARNING in mptcp_reset_timer
mptcp
|
-1 |
syz, C |
unreliable |
|
1307 |
1998d |
2092d
|
19/29 |
1981d |
b680a214ec28
mptcp: update rtx timeout only if required.
|
|
WARNING in warn_bad_map
mptcp
|
-1 |
|
|
|
1 |
2245d |
2241d
|
15/29 |
2214d |
9c29e3615274
mptcp: fix DSS map generation on fin retransmission
|
|
WARNING: bad unlock balance in mptcp_poll
mptcp
|
4 |
syz, C |
done |
|
10 |
2310d |
2313d
|
15/29 |
2245d |
e154659ba39a
mptcp: fix double-unlock in mptcp_poll
|