|
KMSAN: uninit-value in mptcp_established_options
prio:high
mptcp
|
7 |
syz |
|
|
3191 |
76d |
111d
|
29/29 |
36d |
5e939544f9d2
mptcp: fix uninit-value in mptcp_established_options
|
|
possible deadlock in mptcp_subflow_create_socket (3)
prio:low
mptcp
|
4 |
|
|
|
140 |
38d |
161d
|
29/29 |
36d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
possible deadlock in mptcp_sendmsg
prio:low
mptcp
|
4 |
|
|
|
1 |
95d |
95d
|
29/29 |
36d |
d532cddb6c60
nbd: Reclassify sockets to avoid lockdep circular dependency
|
|
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id
mptcp
|
17 |
|
|
|
1 |
228d |
211d
|
29/29 |
106d |
e2a9eeb69f7d
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
|
|
WARNING in mptcp_pm_nl_del_addr_doit
mptcp
|
-1 |
|
|
|
30 |
170d |
299d
|
29/29 |
106d |
d191101dee25
mptcp: pm: in-kernel: always set ID as avail when rm endp
|
|
WARNING in subflow_data_ready (4)
mptcp
|
-1 |
syz, C |
|
|
556 |
228d |
365d
|
29/29 |
206d |
71154bbe4942
mptcp: fallback earlier on simult connection
|
|
WARNING: refcount bug in mptcp_schedule_work (2)
mptcp
|
13 |
|
|
|
5 |
273d |
280d
|
29/29 |
225d |
035bca3f017e
mptcp: fix race condition in mptcp_schedule_work()
|
|
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer
mptcp
|
19 |
|
|
|
1 |
308d |
276d
|
29/29 |
225d |
426358d9be7c
mptcp: fix a race in mptcp_pm_del_add_timer()
|
|
possible deadlock in mptcp_pm_addr_send_ack
mptcp
|
4 |
|
|
|
2 |
344d |
349d
|
29/29 |
295d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_subflow_shutdown
mptcp
|
4 |
|
|
|
1 |
351d |
351d
|
29/29 |
295d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_close_ssk
mptcp
|
4 |
|
|
|
5 |
320d |
349d
|
29/29 |
295d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in mptcp_close (2)
mptcp
|
4 |
|
|
|
1 |
355d |
355d
|
29/29 |
295d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __mptcp_push_pending
mptcp
|
4 |
|
|
|
3 |
320d |
351d
|
29/29 |
295d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in mptcp_pm_nl_addr_send_ack
mptcp
|
-1 |
|
|
|
1 |
550d |
548d
|
28/29 |
436d |
f865c24bc551
mptcp: always handle address removal under msk socket lock
|
|
INFO: task hung in lock_sock_nested (5)
mptcp
tipc
|
1 |
syz, C |
done |
|
43 |
481d |
602d
|
28/29 |
471d |
06cc8786516f
tls: skip setting sk_write_space on rekey
|
|
WARNING in mptcp_pm_nl_set_flags (2)
mptcp
|
-1 |
syz |
done |
|
2 |
588d |
583d
|
28/29 |
471d |
1bb0d1348546
mptcp: pm: only set fullmesh for subflow endp
|
|
WARNING in __mptcp_clean_una (2)
mptcp
|
-1 |
syz, C |
done |
|
11 |
572d |
612d
|
28/29 |
471d |
619af16b3b57
mptcp: handle fastopen disconnect correctly
|
|
KMSAN: uninit-value in mptcp_incoming_options (2)
mptcp
|
7 |
|
|
|
9 |
578d |
583d
|
28/29 |
471d |
c86b000782da
mptcp: consolidate suboption status
|
|
possible deadlock in sk_clone_lock (3)
mptcp
|
4 |
syz, C |
|
|
21 |
665d |
714d
|
28/29 |
646d |
3d041393ea8c
mptcp: prevent MPC handshake on port-based signal endpoints
|
|
WARNING in __mptcp_move_skbs_from_subflow
mptcp
|
-1 |
syz, C |
error |
|
90 |
679d |
766d
|
28/29 |
646d |
4dabcdf58121
tcp: fix mptcp DSS corruption due to large pmtu xmit
|
|
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow
mptcp
|
19 |
|
|
|
1 |
676d |
675d
|
28/29 |
646d |
7decd1f5904a
mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
|
|
KASAN: slab-use-after-free Read in __timer_delete_sync
mptcp
|
19 |
syz |
error |
|
1 |
719d |
716d
|
28/29 |
667d |
b4cd80b03389
mptcp: pm: Fix uaf in __timer_delete_sync
|
|
WARNING in mptcp_pm_nl_set_flags
mptcp
|
-1 |
syz |
done |
|
3 |
724d |
724d
|
28/29 |
667d |
9366922adc6a
mptcp: pm: fix ID 0 endp usage after multiple re-creations
|
|
WARNING in __mptcp_clean_una
mptcp
|
-1 |
syz, C |
done |
done |
248 |
791d |
916d
|
26/29 |
748d |
fb7a0d334894
mptcp: ensure snd_nxt is properly initialized on connect
|
|
general protection fault in subflow_v6_route_req
mptcp
|
2 |
syz, C |
done |
|
2 |
836d |
836d
|
25/29 |
806d |
445c0b69c729
mptcp: fix possible NULL dereferences
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
syz, C |
|
|
63 |
958d |
953d
|
25/29 |
932d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
WARNING in mptcp_check_listen_stop
mptcp
|
-1 |
syz, C |
done |
|
47 |
933d |
981d
|
25/29 |
933d |
4c0288299fd0
mptcp: prevent tcp diag from closing listener subflows
|
|
general protection fault in __mptcp_set_connected
mptcp
|
2 |
|
|
|
2 |
1014d |
1018d
|
25/29 |
943d |
d109a7767273
mptcp: fix possible NULL pointer dereference on close
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
syz, C |
|
|
93 |
993d |
1002d
|
25/29 |
943d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
WARNING in subflow_data_ready
mptcp
|
-1 |
|
|
|
42 |
946d |
1030d
|
25/29 |
943d |
4fd19a307016
mptcp: fix inconsistent state on fastopen race
|
|
possible deadlock in dccp_v4_ctl_send_reset
mptcp
|
4 |
syz, C |
done |
|
26 |
1360d |
1372d
|
22/29 |
1273d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in mptcp_sendmsg_frag
mptcp
|
-1 |
syz, C |
inconclusive |
|
6 |
1794d |
1800d
|
20/29 |
1618d |
efe686ffce01
mptcp: ensure tx skbs always have the MPTCP ext
mptcp: ensure tx skbs always have the MPTCP ext
|
|
bpf-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
110 |
1693d |
1711d
|
20/29 |
1626d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
linux-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1709d |
1710d
|
20/29 |
1626d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
INFO: rcu detected stall in sys_recvmmsg
mptcp
|
1 |
syz, C |
done |
|
52 |
1662d |
1794d
|
20/29 |
1626d |
612f71d7328c
mptcp: fix possible stall on recvmsg()
|
|
net-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1709d |
1710d
|
20/29 |
1626d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
possible deadlock in mptcp_close
mptcp
|
4 |
syz, C |
done |
|
931 |
1784d |
1795d
|
20/29 |
1626d |
49054556289e
net: introduce and use lock_sock_fast_nested()
|
|
INFO: task hung in lock_sock_nested (4)
mptcp
|
1 |
syz, C |
done |
|
6 |
2041d |
2088d
|
19/29 |
1990d |
05e3ecea4a63
mptcp: avoid potential infinite loop in mptcp_recvmsg()
|
|
WARNING in mptcp_reset_timer
mptcp
|
-1 |
syz, C |
unreliable |
|
1307 |
2007d |
2101d
|
19/29 |
1990d |
b680a214ec28
mptcp: update rtx timeout only if required.
|
|
WARNING in warn_bad_map
mptcp
|
-1 |
|
|
|
1 |
2254d |
2250d
|
15/29 |
2222d |
9c29e3615274
mptcp: fix DSS map generation on fin retransmission
|
|
WARNING: bad unlock balance in mptcp_poll
mptcp
|
4 |
syz, C |
done |
|
10 |
2319d |
2322d
|
15/29 |
2254d |
e154659ba39a
mptcp: fix double-unlock in mptcp_poll
|