|
KMSAN: uninit-value in geneve_xmit (2)
net
|
7 |
C |
|
|
12 |
578d |
655d
|
25/29 |
574d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (2)
net
|
19 |
C |
|
|
126 |
575d |
626d
|
25/29 |
574d |
661779e1fcaf
netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
|
|
KMSAN: uninit-value in __llc_lookup_established
net
|
7 |
C |
|
|
46 |
642d |
685d
|
25/29 |
574d |
e3f9bed9bee2
llc: Drop support for ETH_P_TR_802_2.
|
|
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2)
net
|
7 |
C |
|
|
17 |
629d |
654d
|
25/29 |
627d |
d375b98e0248
ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
|
|
KMSAN: uninit-value in netif_skb_features (2)
net
|
7 |
C |
|
|
9 |
673d |
761d
|
25/29 |
629d |
9181d6f8a2bb
net: add more sanity check in virtio_net_hdr_to_skb()
|
|
KMSAN: uninit-value in dccp_v6_err
net
|
7 |
C |
|
|
4 |
764d |
769d
|
25/29 |
651d |
6af289746a63
dccp: fix dccp_v4_err()/dccp_v6_err() again
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate
net
|
7 |
C |
|
|
981 |
671d |
2587d
|
25/29 |
670d |
484b4833c604
hsr: Fix uninit-value access in fill_frame_info()
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
C |
|
|
20713 |
711d |
724d
|
25/29 |
670d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
KMSAN: uninit-value in fq_change
net
|
7 |
C |
|
|
8 |
711d |
713d
|
25/29 |
670d |
f1a3b283f852
UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
|
|
KMSAN: uninit-value in llc_station_rcv
net
|
7 |
C |
|
|
2 |
725d |
734d
|
25/29 |
670d |
7b3ba18703a6
llc: verify mac len before reading mac header
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter
net
|
9 |
|
|
|
68 |
755d |
860d
|
23/29 |
753d |
aa5406950726
netlink: do not hard code device address lenth in fdb dumps
|
|
KMSAN: uninit-value in xfrm_state_find
net
|
17 |
C |
error |
done |
215 |
885d |
2684d
|
22/29 |
842d |
3d776e31c841
xfrm: Reject optional tunnel/BEET mode templates in outbound policies
|
|
KMSAN: uninit-value in vlan_dev_hard_start_xmit (2)
net
|
7 |
|
|
|
1 |
918d |
918d
|
22/29 |
842d |
dacab578c7c6
vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
|
|
KMSAN: uninit-value in ethnl_set_linkmodes (2)
net
|
7 |
C |
|
|
40 |
898d |
1204d
|
22/29 |
865d |
9ad685dbfe7e
ethtool: Fix uninitialized number of lanes
|
|
KMSAN: uninit-value in qrtr_tx_resume
arm-msm
net
|
7 |
C |
|
|
8 |
938d |
999d
|
22/29 |
865d |
6417070918de
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
|
|
KMSAN: uninit-value in raw_sock_get
net
|
7 |
|
|
|
1 |
925d |
923d
|
22/29 |
865d |
0a78cf7264d2
raw: Fix NULL deref in raw_get_next().
|
|
KMSAN: uninit-value in ipv6_find_tlv
net
|
7 |
C |
|
|
271 |
907d |
2260d
|
22/29 |
865d |
ea30388baebc
ipv6: Fix an uninit variable access bug in __ip6_make_skb()
|
|
KMSAN: kernel-infoleak in copyout (2)
net
|
17 |
C |
|
|
6723 |
866d |
2034d
|
22/29 |
865d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
KMSAN: uninit-value in ipvlan_queue_xmit
net
|
7 |
C |
|
|
2 |
1148d |
1730d
|
22/29 |
969d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
KMSAN: kernel-infoleak in _copy_to_iter (7)
net
|
23 |
C |
|
|
138977 |
969d |
1321d
|
22/29 |
969d |
633593a80898
sctp: fix kernel-infoleak for SCTP sockets
|
|
KMSAN: uninit-value in asix_mdio_write_nopm
net
usb
|
7 |
|
|
|
2 |
1294d |
1315d
|
22/29 |
969d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
KMSAN: uninit-value in bcmp
net
|
19 |
C |
error |
done |
907 |
1005d |
2326d
|
22/29 |
969d |
4f1dc7d9756e
fs/ntfs3: Validate attribute name offset
|
|
KMSAN: uninit-value in tcp_recvmsg
net
|
7 |
C |
|
|
25918 |
1092d |
1216d
|
22/29 |
969d |
1228b34c8d0e
net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
|
|
KMSAN: kernel-infoleak in _copy_to_iter (6)
net
|
9 |
C |
|
|
748 |
1322d |
1411d
|
20/29 |
1322d |
71ddeac8cd1d
inet_diag: fix kernel-infoleak for UDP sockets
|
|
kmsan boot error: KMSAN: uninit-value in tcp_child_process
net
|
-1 |
|
|
|
48 |
1407d |
1418d
|
20/29 |
1322d |
03cfda4fa6ea
tcp: fix another uninit-value (sk_rx_queue_mapping)
|
|
kmsan boot error: KMSAN: uninit-value in tcp_conn_request
net
|
-1 |
|
|
|
27 |
1420d |
1420d
|
20/29 |
1322d |
a37a0ee4d25c
net: avoid uninit-value from tcp_conn_request
|
|
KMSAN: uninit-value in pneigh_fill_info
net
|
7 |
C |
|
|
14 |
1410d |
1414d
|
20/29 |
1322d |
e195e9b5dee6
net, neigh: clear whole pneigh_entry at alloc time
|
|
KMSAN: uninit-value in fib_get_nhs
net
|
7 |
C |
|
|
14 |
1340d |
1411d
|
20/29 |
1322d |
7a3429bace0e
ipv4: Check attribute length for RTA_GATEWAY in multipath route
|
|
KMSAN: uninit-value in hsr_fill_frame_info
net
|
7 |
C |
|
|
249 |
1558d |
1856d
|
20/29 |
1441d |
2e9f60932a2c
net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
|
|
KMSAN: uninit-value in virtio_net_hdr_to_skb
net
|
7 |
C |
|
|
325 |
1558d |
1617d
|
20/29 |
1441d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
KMSAN: uninit-value in ip_rcv_core
net
|
7 |
C |
|
|
141 |
1557d |
2591d
|
20/29 |
1441d |
6628ddfec758
net: geneve: check skb is large enough for IPv4/IPv6 header
|
|
KMSAN: kernel-infoleak in _copy_to_iter (5)
net
|
9 |
C |
|
|
23883 |
1550d |
1986d
|
20/29 |
1441d |
08c27f3322fe
batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
|
|
KMSAN: uninit-value in __dev_mc_add
net
|
7 |
C |
|
|
213 |
2385d |
2581d
|
20/29 |
1441d |
cca8ea3b05c9
net: tun: set tun->dev->addr_len during TUNSETLINK processing
|
|
KMSAN: uninit-value in INET_ECN_decapsulate
net
|
7 |
|
|
|
3 |
1753d |
1785d
|
19/29 |
1686d |
4179b00c04d1
geneve: pull IP header before ECN decapsulation
|
|
KMSAN: uninit-value in __nla_validate_parse (2)
net
|
7 |
C |
|
|
2 |
1747d |
1743d
|
19/29 |
1686d |
c96adff95619
cls_flower: call nla_ok() before nla_next()
|
|
KMSAN: uninit-value in gre_parse_header
net
|
7 |
C |
|
|
9283 |
1714d |
2311d
|
19/29 |
1686d |
085c7c4e1c0e
erspan: fix version 1 check in gre_parse_header()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (4)
net
|
9 |
C |
|
|
59 |
1692d |
1744d
|
19/29 |
1686d |
b42b3a2744b3
can: isotp: isotp_getname(): fix kernel information leak
|
|
KMSAN: uninit-value in ip_tunnel_xmit (2)
net
|
7 |
C |
|
|
11778 |
1803d |
2628d
|
15/29 |
1799d |
fdafed459998
ip_gre: set dev->hard_header_len and dev->needed_headroom properly
|
|
KMSAN: uninit-value in unix_find_other
net
|
7 |
C |
|
|
57 |
1844d |
2661d
|
15/29 |
1799d |
7ca1db21ef8e
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
|
|
KMSAN: uninit-value in __inet_diag_dump
net
|
7 |
C |
|
|
37 |
1838d |
1856d
|
15/29 |
1837d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
KMSAN: uninit-value in inet_diag_cmd_exact
net
|
7 |
C |
|
|
31 |
1838d |
1850d
|
15/29 |
1837d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
KMSAN: kernel-infoleak in move_addr_to_user (3)
net
|
9 |
C |
|
|
79 |
1860d |
1894d
|
15/29 |
1848d |
38ba8b9241f5
can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
|
|
KMSAN: uninit-value in netlink_policy_dump_start
net
|
7 |
C |
|
|
31 |
1865d |
1868d
|
15/29 |
1860d |
d1fb55592909
netlink: fix state reallocation in policy export
|
|
KMSAN: uninit-value in geneve_xmit
net
|
7 |
C |
|
|
163 |
1864d |
1917d
|
15/29 |
1860d |
32818c075c54
geneve: fix an uninitialized value in geneve_changelink()
|
|
KMSAN: uninit-value in tbf_enqueue
net
|
7 |
|
|
|
21 |
1921d |
2008d
|
15/29 |
1921d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
KMSAN: uninit-value in do_tcp_getsockopt
net
|
7 |
|
|
|
5 |
1934d |
1986d
|
15/29 |
1921d |
e776af608f69
net-backports: tcp: fix error recovery in tcp_zerocopy_receive()
|
|
KMSAN: uninit-value in skbprio_enqueue
net
|
7 |
syz |
|
|
11 |
1936d |
1999d
|
15/29 |
1921d |
2761121af87d
net_sched: sch_skbprio: add message validation to skbprio_change()
|
|
KMSAN: uninit-value in etf_enqueue_timesortedlist
net
|
7 |
|
|
|
3 |
1991d |
1999d
|
15/29 |
1950d |
a1211bf9a777
sched: etf: do not assume all sockets are full blown
|
|
KMSAN: uninit-value in tcf_exts_change
net
|
7 |
C |
|
|
5 |
2041d |
2050d
|
15/29 |
1989d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KMSAN: uninit-value in __iptunnel_pull_header
net
|
7 |
C |
|
|
12 |
2045d |
2054d
|
15/29 |
2014d |
17c25cafd4d3
gre: fix uninit-value in __iptunnel_pull_header
|
|
KMSAN: use-after-free in netdev_state_change
net
|
18 |
|
|
|
2 |
2058d |
2058d
|
15/29 |
2014d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: uninit-value in slhc_compress
net
|
7 |
C |
|
|
3 |
2057d |
2057d
|
15/29 |
2014d |
110a40dfb708
slip: make slhc_compress() more robust against malicious packets
|
|
KMSAN: use-after-free in find_match
net
|
18 |
C |
|
|
52 |
2044d |
2073d
|
15/29 |
2014d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in bpf_skb_load_helper_32_no_cache
net
bpf
|
7 |
|
|
|
2 |
2084d |
2082d
|
15/29 |
2014d |
457fed775c97
net/smc: fix leak of kernel memory to user space
|
|
KMSAN: uninit-value in bond_alb_xmit
net
|
7 |
syz |
|
|
3 |
2055d |
2057d
|
15/29 |
2014d |
b7469e83d2ad
bonding/alb: make sure arp header is pulled before accessing it
|
|
KMSAN: use-after-free in inet_gifconf
net
|
18 |
|
|
|
10 |
2045d |
2068d
|
15/29 |
2014d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in ip6_dst_destroy
net
|
18 |
C |
|
|
2 |
2047d |
2059d
|
15/29 |
2014d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: use-after-free in veth_xmit
net
|
18 |
|
|
|
8 |
2045d |
2060d
|
15/29 |
2014d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in kstrdup
net
|
7 |
C |
|
|
8 |
2050d |
2077d
|
15/29 |
2014d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: use-after-free in l3mdev_master_ifindex_rcu
net
|
18 |
C |
|
|
5 |
2044d |
2068d
|
15/29 |
2014d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in dev_alloc_name_ns
net
|
18 |
|
|
|
3 |
2045d |
2058d
|
15/29 |
2014d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in setup_udp_tunnel_sock
net
|
7 |
C |
|
|
1 |
2099d |
2099d
|
15/29 |
2071d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
KMSAN: uninit-value in rsvp_change
net
|
7 |
C |
|
|
4 |
2092d |
2092d
|
15/29 |
2071d |
cb3c0e6bdf64
cls_rsvp: fix rsvp_policy
|
|
KMSAN: uninit-value in macvlan_broadcast
net
|
7 |
C |
|
|
2 |
2114d |
2114d
|
15/29 |
2071d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
WARNING in tcp_enter_loss (2)
net
|
-1 |
C |
done |
unreliable |
4 |
2729d |
2779d
|
15/29 |
2071d |
16ae6aa17052
tcp: ignore Fast Open on repair mode
|
|
KMSAN: uninit-value in bond_neigh_setup
net
|
7 |
|
|
|
64 |
2120d |
2144d
|
15/29 |
2076d |
f394722fb0d0
net-backports: neighbour: remove neigh_cleanup() method
|
|
KMSAN: use-after-free in netlink_recvmsg
net
|
18 |
C |
|
|
1 |
2169d |
2169d
|
15/29 |
2139d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in __skb_try_recv_from_queue
net
|
18 |
C |
|
|
4 |
2167d |
2191d
|
15/29 |
2139d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in sk_forced_mem_schedule
net
|
18 |
|
|
|
2 |
2162d |
2170d
|
15/29 |
2139d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in copyout
net
|
18 |
C |
|
|
1 |
2204d |
2204d
|
15/29 |
2139d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in rxrpc_put_peer
afs
net
|
18 |
|
|
|
1 |
2195d |
2195d
|
13/29 |
2155d |
91fcfbe8852e
rxrpc: Fix call crypto state cleanup
|
|
WARNING in sk_stream_kill_queues (3)
net
|
-1 |
C |
done |
|
622 |
2326d |
2685d
|
13/29 |
2155d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
KMSAN: uninit-value in inet_ehash_insert
net
|
7 |
C |
|
|
7 |
2205d |
2212d
|
13/29 |
2197d |
6af1799aaf3f
net-backports: ipv6: drop incoming packets having a v4mapped source address
|
|
KMSAN: uninit-value in rtm_new_nexthop
net
|
7 |
C |
|
|
8 |
2252d |
2252d
|
12/29 |
2236d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
KMSAN: uninit-value in rtm_dump_nexthop
net
|
7 |
C |
|
|
6 |
2246d |
2262d
|
12/29 |
2236d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
KMSAN: uninit-value in bond_start_xmit (2)
net
|
7 |
C |
|
|
2309 |
2268d |
2592d
|
12/29 |
2268d |
9d1bc24b52fb
bonding: validate ip header before check IPPROTO_IGMP
|
|
KMSAN: uninit-value in tcp_create_openreq_child
net
|
7 |
C |
|
|
4000 |
2294d |
2315d
|
12/29 |
2294d |
85f9aa7565bd
inet: clear num_timeout reqsk_alloc()
|
|
WARNING in xfrm_state_fini (2)
net
|
-1 |
C |
|
|
37510 |
2363d |
2815d
|
12/29 |
2338d |
dbb2483b2a46
xfrm: clean up xfrm protocol checks
|
|
KMSAN: uninit-value in rtnl_stats_dump
net
|
7 |
syz |
|
|
14 |
2369d |
2383d
|
12/29 |
2338d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
KMSAN: uninit-value in rtnl_stats_get
net
|
7 |
C |
|
|
5 |
2375d |
2383d
|
12/29 |
2338d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
KMSAN: uninit-value in ip6_compressed_string
net
nfs
|
7 |
C |
|
|
9024 |
2366d |
2518d
|
12/29 |
2366d |
7c2bd9a39845
NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
|
|
KMSAN: uninit-value in gue6_err (2)
net
|
7 |
C |
|
|
2826 |
2398d |
2420d
|
11/29 |
2398d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (2)
net
|
9 |
C |
|
|
8 |
2399d |
2414d
|
11/29 |
2398d |
163d1c3d6f17
l2tp: fix infoleak in l2tp_ip6_recvmsg()
|
|
KMSAN: uninit-value in gue_err (2)
net
|
7 |
C |
|
|
1617 |
2398d |
2420d
|
11/29 |
2398d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
KMSAN: kernel-infoleak in move_addr_to_user
net
|
9 |
|
|
|
5 |
2427d |
2478d
|
11/29 |
2420d |
7d033c9f6a7f
ipv6: fix kernel-infoleak in ipv6_local_error()
|
|
KMSAN: uninit-value in gue_err
net
|
7 |
C |
|
|
4686 |
2421d |
2474d
|
11/29 |
2420d |
26fc181e6cac
fou, fou6: do not assume linear skbs
|
|
WARNING in xfrm6_tunnel_net_exit (2)
net
|
-1 |
C |
|
|
48816 |
2430d |
2711d
|
11/29 |
2420d |
f75a2804da39
xfrm: destroy xfrm_state synchronously on net exit path
|
|
KMSAN: uninit-value in gue6_err
net
|
7 |
C |
|
|
8359 |
2420d |
2474d
|
11/29 |
2420d |
26fc181e6cac
fou, fou6: do not assume linear skbs
|
|
KMSAN: uninit-value in vti6_tnl_xmit
net
|
7 |
syz |
|
|
60 |
2475d |
2498d
|
11/29 |
2470d |
cb9f1b783850
ip: validate header length on virtual device xmit
|
|
KMSAN: uninit-value in check_6rd
net
|
7 |
C |
|
|
81 |
2476d |
2498d
|
11/29 |
2470d |
cb9f1b783850
ip: validate header length on virtual device xmit
|
|
KMSAN: uninit-value in __inet6_bind
net
|
7 |
C |
|
|
56 |
2476d |
2506d
|
11/29 |
2475d |
fb2427454631
ipv6: explicitly initialize udp6_addr in udp_sock_create6()
|
|
KMSAN: uninit-value in packet_sendmsg
net
|
7 |
|
|
|
5 |
2524d |
2498d
|
11/29 |
2475d |
99137b7888f4
packet: validate address length
|
|
KMSAN: kernel-infoleak in _copy_to_iter (4)
net
|
9 |
C |
|
|
56 |
2513d |
2517d
|
11/29 |
2498d |
688838934c23
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
|
|
KMSAN: uninit-value in dev_mc_add_excl
net
|
7 |
C |
|
|
13 |
2539d |
2551d
|
11/29 |
2534d |
da71577545a5
rtnetlink: Disallow FDB configuration for non-Ethernet device
|
|
KMSAN: uninit-value in dev_uc_add_excl
net
|
7 |
C |
|
|
20 |
2545d |
2587d
|
11/29 |
2534d |
da71577545a5
rtnetlink: Disallow FDB configuration for non-Ethernet device
|
|
KMSAN: uninit-value in ip_tunnel_lookup (2)
net
|
7 |
C |
|
|
2 |
2552d |
2552d
|
11/29 |
2534d |
b0350d51f001
ip_gre: fix parsing gre header in ipgre_err
|
|
KMSAN: kernel-infoleak in _copy_to_iter (3)
net
|
9 |
C |
|
|
36 |
2548d |
2559d
|
11/29 |
2548d |
b06f9d9f1a90
tipc: fix info leak from kernel tipc_event
|
|
KMSAN: uninit-value in ip6_tnl_start_xmit
net
|
7 |
C |
|
|
69 |
2580d |
2590d
|
11/29 |
2566d |
76c0ddd8c3a6
ip6_tunnel: be careful when accessing the inner header
|
|
KMSAN: uninit-value in pppoe_rcv
net
|
7 |
C |
|
|
2 |
2726d |
2595d
|
11/29 |
2566d |
8540827ebac6
pppoe: fix reception of frames with no mac header
|
|
KMSAN: kernel-infoleak in _copy_to_iter (2)
net
|
9 |
C |
|
|
7 |
2575d |
2602d
|
11/29 |
2569d |
45c180bc29ba
xfrm_user: prevent leaking 2 bytes of kernel memory
|
|
KMSAN: uninit-value in memcmp (2)
net
|
7 |
C |
|
|
131 |
2595d |
2586d
|
10/29 |
2584d |
77d36398d99f
net: fix uninit-value in __hw_addr_add_ex()
|
|
kernel BUG at net/ipv6/route.c:LINE!
net
|
-1 |
C |
|
|
197 |
2633d |
2655d
|
8/29 |
2630d |
e873e4b9cc7e
ipv6: use fib6_info_hold_safe() when necessary
|
|
KMSAN: kernel-infoleak in put_cmsg
net
|
9 |
C |
|
|
3 |
2663d |
2652d
|
8/29 |
2630d |
2efd4fca703a
ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
|
|
KMSAN: kernel-infoleak in _copy_to_iter
net
|
9 |
C |
|
|
285 |
2645d |
2681d
|
8/29 |
2630d |
45c180bc29ba
xfrm_user: prevent leaking 2 bytes of kernel memory
|
|
WARNING in iov_iter_revert
net
|
-1 |
C |
|
|
74 |
2651d |
2717d
|
8/29 |
2631d |
32da12216e46
tls: Stricter error checking in zerocopy sendmsg path
|
|
KMSAN: uninit-value in ip_tunnel_xmit
net
|
7 |
C |
|
|
2594 |
2652d |
2739d
|
8/29 |
2652d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
WARNING in bpf_int_jit_compile
bpf
net
|
-1 |
syz |
|
|
11 |
2668d |
2704d
|
8/29 |
2660d |
9facc336876f
bpf: reject any prog that failed read-only lock
|
|
KMSAN: uninit-value in _copy_to_iter (2)
net
virt
kvm
|
7 |
C |
|
|
226 |
2692d |
2737d
|
8/29 |
2660d |
670ae9caaca4
vhost: fix info leak due to uninitialized memory
|
|
KMSAN: uninit-value in eth_mac_addr
net
|
7 |
|
|
|
2 |
2662d |
2695d
|
8/29 |
2660d |
644c7eebbfd5
rtnetlink: validate attributes in do_setlink()
|
|
INFO: rcu detected stall in dev_queue_xmit_nit
net
|
1 |
|
|
|
1 |
2705d |
2705d
|
8/29 |
2660d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
KMSAN: uninit-value in rtnetlink_put_metrics
net
|
7 |
syz |
|
|
3 |
2694d |
2696d
|
8/29 |
2660d |
5b5e7a0de2bb
net: metrics: add proper netlink validation
|
|
WARNING in kcm_exit_net (3)
net
|
-1 |
syz |
|
|
5 |
2699d |
2699d
|
5/29 |
2692d |
eb7f54b90bd8
kcm: Fix use-after-free caused by clonned sockets
|
|
WARNING in xfrm6_tunnel_net_exit
net
|
-1 |
syz |
|
|
14002 |
2716d |
2846d
|
5/29 |
2713d |
b48c05ab5d32
xfrm: Fix warning in xfrm6_tunnel_net_exit.
|
|
KMSAN: uninit-value in move_addr_to_user (2)
net
|
7 |
C |
|
|
44 |
2714d |
2721d
|
5/29 |
2713d |
09c8b9718a7a
tipc: fix one byte leak in tipc_sk_set_orig_addr()
|
|
KMSAN: uninit-value in rt6_multipath_hash
net
|
7 |
C |
|
|
3 |
2715d |
2732d
|
5/29 |
2714d |
cea67a2dd6b2
ipv6: fix uninit-value in ip6_multipath_l3_keys()
|
|
WARNING in tcp_mark_head_lost
net
|
-1 |
C |
|
|
18 |
2723d |
2806d
|
5/29 |
2714d |
16ae6aa17052
net-backports: tcp: ignore Fast Open on repair mode
|
|
KMSAN: uninit-value in put_cmsg
net
|
7 |
C |
|
|
2 |
2728d |
2728d
|
5/29 |
2714d |
eb80ca476ec1
rds: do not leak kernel memory to user land
|
|
KMSAN: uninit-value in strlcpy
net
|
7 |
C |
|
|
2 |
2725d |
2724d
|
5/29 |
2722d |
537b361fbcbc
vti6: better validate user provided tunnel names
|
|
KMSAN: uninit-value in netif_skb_features
net
|
7 |
C |
|
|
119 |
2722d |
2748d
|
5/29 |
2722d |
7ce2367254e8
vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
|
|
KMSAN: uninit-value in fib_create_info
net
|
7 |
C |
|
|
19 |
2747d |
2753d
|
5/29 |
2722d |
b1993a2de12c
net: fix rtnh_ok()
|
|
KMSAN: uninit-value in __skb_try_recv_from_queue
net
|
7 |
C |
|
|
108 |
2722d |
2753d
|
5/29 |
2722d |
b13dda9f9aa7
net: initialize skb->peeked when cloning
|
|
KMSAN: uninit-value in netlink_sendmsg
net
|
7 |
C |
|
|
2493 |
2722d |
2753d
|
5/29 |
2722d |
6091f09c2f79
netlink: fix uninit-value in netlink_sendmsg
|
|
KMSAN: uninit-value in neigh_dump_info
net
|
7 |
C |
|
|
6 |
2735d |
2749d
|
5/29 |
2722d |
7dd07c143a4b
net: validate attribute sizes in neigh_dump_table()
|
|
KMSAN: uninit-value in inet_csk_bind_conflict
net
|
7 |
C |
|
|
446 |
2722d |
2753d
|
5/29 |
2722d |
3099a5291893
soreuseport: initialise timewait reuseport field
|
|
KMSAN: uninit-value in inet_getpeer
net
|
7 |
C |
|
|
54 |
2722d |
2751d
|
5/29 |
2722d |
b6a37e5e2541
inetpeer: fix uninit-value in inet_getpeer
|
|
KMSAN: uninit-value in move_addr_to_user
net
|
7 |
C |
|
|
74 |
2722d |
2753d
|
5/29 |
2722d |
6780db244d6b
sctp: do not leak kernel memory to user space
|
|
KMSAN: uninit-value in pppol2tp_connect
net
|
7 |
C |
|
|
13 |
2722d |
2737d
|
5/29 |
2722d |
eb1c28c05894
l2tp: check sockaddr length in pppol2tp_connect()
|
|
KMSAN: uninit-value in ip_route_output_key_hash_rcu
net
|
7 |
|
|
|
179 |
2722d |
2753d
|
5/29 |
2722d |
d0ea2b125005
ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
|
|
KMSAN: uninit-value in memcmp
net
|
7 |
C |
|
|
30 |
2724d |
2753d
|
5/29 |
2722d |
77d36398d99f
net: fix uninit-value in __hw_addr_add_ex()
|
|
KMSAN: uninit-value in packet_set_ring
net
|
7 |
C |
|
|
6 |
2729d |
2745d
|
5/29 |
2722d |
5171b37d9596
net: af_packet: fix race in PACKET_{R|T}X_RING
|
|
KMSAN: uninit-value in inet6_rtm_delroute
net
|
7 |
C |
|
|
9 |
2742d |
2753d
|
5/29 |
2722d |
b1993a2de12c
net: fix rtnh_ok()
|
|
KMSAN: uninit-value in tcp_parse_options
net
|
7 |
C |
|
|
38 |
2723d |
2749d
|
5/29 |
2722d |
721230326891
tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
|
|
KMSAN: uninit-value in fib6_new_table
net
|
7 |
C |
|
|
3 |
2738d |
2739d
|
5/29 |
2722d |
aa8f8778493c
ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
|
|
kernel BUG at drivers/vhost/vhost.c:LINE! (2)
virt
kvm
net
|
-1 |
C |
|
|
139 |
2723d |
2754d
|
5/29 |
2722d |
d14d2b78090c
vhost: fix vhost_vq_access_ok() log check
|
|
WARNING: kobject bug in netdev_queue_update_kobjects
net
|
-1 |
C |
|
|
27 |
2724d |
2786d
|
5/29 |
2722d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
|
KMSAN: uninit-value in pppoe_connect
net
|
7 |
|
|
|
47 |
2722d |
2737d
|
5/29 |
2722d |
a49e2f5d5fb1
pppoe: check sockaddr length in pppoe_connect()
|