|
KASAN: slab-use-after-free Read in xsk_diag_dump
bpf
net
|
C |
done |
|
9 |
16d |
25d
|
22/25 |
never |
3e019d8a05a3
xsk: Fix xsk_diag use-after-free error during socket cleanup
|
|
KCSAN: data-race in xfrmi_xmit / xfrmi_xmit (3)
net
|
|
|
|
1 |
21d |
21d
|
1/25 |
never |
xfrm: interface: use DEV_STATS_INC()
|
|
KCSAN: data-race in xfrm_sk_policy_insert / xfrm_sk_policy_insert (3)
net
|
|
|
|
1 |
42d |
15d
|
0/25 |
never |
xfrm: fix a data-race in xfrm_gen_index()
|
|
WARNING in ieee80211_probe_client
net
wireless
|
C |
done |
error |
124 |
13d |
1082d
|
22/25 |
never |
67dfa589aa88
wifi: mac80211: check for station first in client probe
|
|
KMSAN: uninit-value in ieee80211_rx_handlers
wireless
net
|
C |
|
|
8 |
26d |
82d
|
22/25 |
never |
19e4a47ee747
wifi: mac80211: check S1G action frame size
|
|
WARNING in ieee80211_bss_info_change_notify
net
wireless
|
C |
done |
|
7592 |
8h27m |
1086d
|
22/25 |
never |
abc76cf552e1
wifi: cfg80211: ocb: don't leave if not joined
|
|
possible deadlock in pie_timer (2)
net
|
|
|
|
2 |
92d |
93d
|
24/25 |
never |
11b73313c124
sch_netem: fix issues in netem_change() vs get_dist_table()
|
|
general protection fault in skb_queue_tail (3)
afs
net
|
C |
inconclusive |
done |
9 |
113d |
346d
|
24/25 |
never |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
KASAN: slab-out-of-bounds Read in do_csum
net
|
C |
|
|
158 |
5d09h |
26d
|
22/25 |
never |
8bd795fedb84
arm64: csum: Fix OoB access in IP checksum code for negative lengths
|
|
WARNING in scm_recv
net
|
C |
done |
|
8 |
81d |
84d
|
24/25 |
never |
603fc57ab70c
af_unix: Skip SCM_PIDFD if scm->pid is NULL.
|
|
KCSAN: data-race in udp_lib_setsockopt / udp_lib_setsockopt
net
|
|
|
|
2 |
32d |
18d
|
3/25 |
never |
udplite: fix various data-races
|
|
WARNING in unregister_vlan_dev
net
|
C |
done |
|
1310 |
33d |
43d
|
23/25 |
never |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
WARNING in ip6_tnl_exit_batch_net
net
|
C |
done |
|
29 |
36d |
43d
|
23/25 |
never |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
WARNING in rtnl_dellink (3)
net
|
C |
done |
|
492 |
33d |
43d
|
23/25 |
never |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
WARNING: ODEBUG bug in ingress_destroy
net
|
C |
done |
|
16 |
62d |
65d
|
22/25 |
never |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
WARNING: ODEBUG bug in tcx_uninstall
bpf
net
|
C |
done |
|
38 |
60d |
65d
|
22/25 |
never |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
WARNING in macvlan_device_event
net
|
|
|
|
3 |
37d |
38d
|
23/25 |
never |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
WARNING in vlan_device_event
net
|
|
|
|
1 |
38d |
38d
|
23/25 |
never |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
general protection fault in ingress_destroy
net
|
|
|
|
10 |
61d |
65d
|
22/25 |
never |
079082c60aff
tcx: Fix splat during dev unregister
|
|
KASAN: slab-use-after-free Read in team_device_event
net
|
C |
done |
|
2 |
17d |
16d
|
22/25 |
never |
6afcf0fb9270
Revert "net: team: do not use dynamic lockdep key"
|
|
WARNING in tcx_uninstall
bpf
net
|
C |
done |
|
7 |
55d |
59d
|
22/25 |
never |
079082c60aff
tcx: Fix splat during dev unregister
|
|
linux-next test error: WARNING in register_net_sysctl
net
|
|
|
|
9 |
130d |
130d
|
24/25 |
never |
e7480a44d7c4
Revert "net: Remove low_thresh in ip defrag"
|
|
KCSAN: data-race in tcp_make_synack / tcp_rtx_synack
net
|
|
|
|
1 |
72d |
71d
|
23/25 |
never |
5e5265522a9a
tcp: annotate data-races around tcp_rsk(req)->txhash
|
|
KCSAN: data-race in tcp_check_req / tcp_check_req
net
|
|
|
|
2 |
89d |
87d
|
23/25 |
never |
eba20811f326
tcp: annotate data-races around tcp_rsk(req)->ts_recent
|
|
net-next test error: WARNING in register_net_sysctl
net
|
|
|
|
21 |
129d |
130d
|
24/25 |
never |
e7480a44d7c4
Revert "net: Remove low_thresh in ip defrag"
|
|
WARNING: refcount bug in xp_put_pool
bpf
net
|
C |
done |
|
2 |
56d |
54d
|
23/25 |
never |
85c2c79a0730
xsk: fix refcount underflow in error path
|
|
general protection fault in skb_segment (3)
net
|
C |
done |
|
2 |
41d |
41d
|
23/25 |
never |
b616be6b9768
net: do not allow gso_size to be set to GSO_BY_FRAGS
|
|
INFO: rcu detected stall in sys_close (5)
net
|
C |
done |
|
1 |
25d |
25d
|
22/25 |
never |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
INFO: rcu detected stall in bond_3ad_state_machine_handler
net
|
|
|
|
1 |
58d |
58d
|
22/25 |
never |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
BUG: soft lockup in fq_pie_timer (4)
net
|
syz |
|
|
5 |
11d |
61d
|
22/25 |
never |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate
net
|
C |
|
|
785 |
10h11m |
1828d
|
21/25 |
never |
484b4833c604
hsr: Fix uninit-value access in fill_frame_info()
|
|
WARNING: bad unlock balance in sockopt_release_sock
net
|
C |
done |
|
2 |
29d |
29d
|
22/25 |
never |
8be6f88b9d3f
inet: fix IP_TRANSPARENT error handling
|
|
KASAN: use-after-free Read in p9_req_put
net
v9fs
|
|
|
|
51 |
1d08h |
402d
|
1/25 |
never |
9p: p9_client_create: use p9_client_destroy on failure
|
|
KASAN: slab-use-after-free Write in mini_qdisc_pair_swap
net
|
C |
error |
|
76 |
30d |
183d
|
21/25 |
never |
84ad0af0bccd
net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting
c7cfbd115001
net/sched: sch_ingress: Only create under TC_H_INGRESS
|
|
KASAN: stack-out-of-bounds Read in skb_splice_from_iter
net
|
C |
done |
|
64 |
94d |
103d
|
24/25 |
never |
5a6f6873606e
ip, ip6: Fix splice to raw and ping sockets
|
|
KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (5)
net
|
|
|
|
1 |
18d |
18d
|
22/25 |
never |
9b271ebaf9a2
ip_tunnels: use DEV_STATS_INC()
|
|
KCSAN: data-race in fib_release_info / fib_table_lookup
net
|
|
|
|
1 |
26d |
26d
|
22/25 |
never |
fce92af1c29d
ipv4: annotate data-races around fi->fib_dead
|
|
KCSAN: data-race in __ip_make_skb / __ip_make_skb
net
|
|
|
|
624 |
29d |
599d
|
22/25 |
never |
f866fbc842de
ipv4: fix data-races around inet->inet_id
|
|
KCSAN: data-race in __ip4_datagram_connect / __ip_make_skb (5)
net
|
|
|
|
3 |
59d |
87d
|
22/25 |
never |
f866fbc842de
ipv4: fix data-races around inet->inet_id
|
|
WARNING: refcount bug in fib6_nh_init
net
|
C |
done |
|
45 |
94d |
100d
|
24/25 |
never |
3515440df461
ipv6: also use netdev_hold() in ip6_route_check_nh()
|
|
KASAN: stack-out-of-bounds Read in ip6mr_ioctl
net
|
C |
done |
|
192 |
93d |
99d
|
24/25 |
never |
3a4f0edbb793
ipv6: fix a typo in ip6mr_sk_ioctl()
|
|
KASAN: slab-out-of-bounds Read in taprio_dequeue_from_txq
net
|
syz |
error |
|
4 |
109d |
133d
|
24/25 |
never |
be3618d96510
net/sched: taprio: fix slab-out-of-bounds Read in taprio_dequeue_from_txq
|
|
memory leak in kcm_sendmsg (2)
net
|
C |
|
|
1 |
24d |
59d
|
21/25 |
never |
c821a88bd720
kcm: Fix memory leak in error path of kcm_sendmsg()
|
|
WARNING in unreserve_psock
net
|
C |
done |
|
2816 |
94d |
102d
|
24/25 |
never |
9f8d0dc0ec4a
kcm: Fix unnecessary psock unreservation.
|
|
INFO: rcu detected stall in nsim_dev_trap_report_work
net
|
syz |
|
|
4 |
16d |
59d
|
22/25 |
never |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
KCSAN: data-race in macsec_handle_frame / macsec_handle_frame (3)
net
|
|
|
|
2 |
50d |
52d
|
23/25 |
never |
32d0a49d36a2
macsec: use DEV_STATS_INC()
|
|
possible deadlock in netlink_set_err
net
|
|
|
|
1 |
94d |
94d
|
24/25 |
never |
8d61f926d420
netlink: fix potential deadlock in netlink_set_err()
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter
net
|
|
|
|
64 |
1d21h |
102d
|
24/25 |
never |
aa5406950726
netlink: do not hard code device address lenth in fdb dumps
|
|
KCSAN: data-race in netlink_setsockopt / netlink_setsockopt
net
|
|
|
|
1 |
44d |
44d
|
22/25 |
never |
8fe08d70a2b6
netlink: convert nlk->flags to atomic flags
|
|
WARNING in sock_i_ino
net
|
C |
error |
|
22 |
88d |
92d
|
24/25 |
never |
25a9c8a4431c
netlink: Add __sock_i_ino() for __netlink_diag_dump().
|
|
WARNING in vmap_pages_range_noflush (2)
bpf
net
|
C |
error |
|
250 |
396d |
398d
|
1/25 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
KCSAN: data-race in ____sys_sendmsg / do_ipv6_setsockopt
net
|
|
|
|
1 |
104d |
87d
|
22/25 |
never |
1ded5e5a5931
net: annotate data-races around sock->ops
|
|
KASAN: stack-out-of-bounds Read in ipmr_ioctl
net
|
C |
done |
|
208 |
93d |
98d
|
24/25 |
never |
634236b34d7a
net: remove sk_is_ipmr() and sk_is_icmpv6() helpers
|
|
general protection fault in generic_hwtstamp_ioctl_lower
net
|
C |
done |
|
7 |
47d |
50d
|
22/25 |
never |
c35e927cbe09
net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib()
|
|
kernel BUG in ip6gre_header
net
|
C |
|
|
5 |
31d |
101d
|
24/25 |
never |
9eed321cde22
net: lapbether: only support ethernet devices
|
|
KASAN: stack-out-of-bounds Write in __nla_validate_parse
net
|
C |
done |
|
4 |
48d |
63d
|
23/25 |
never |
4d50e50045aa
net: flower: fix stack-out-of-bounds in fl_set_key_cfm()
|
|
BUG: sleeping function called from invalid context in __lock_sock_fast
net
|
|
|
|
2 |
92d |
92d
|
24/25 |
never |
57fc0f1ceaa4
mptcp: ensure listener is unhashed before updating the sk status
|
|
INFO: rcu detected stall in unix_release
net
|
C |
done |
|
1 |
44d |
40d
|
22/25 |
never |
da71714e359b
net/sched: fix a qdisc modification with ambiguous command request
|
|
BUG: soft lockup in addrconf_rs_timer (2)
net
|
C |
|
|
51 |
94d |
114d
|
25/25 |
81d |
cd2b8113c2e8
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
|
KCSAN: data-race in dev_graft_qdisc / qdisc_lookup_rcu
net
|
|
|
|
1 |
120d |
120d
|
25/25 |
81d |
d636fc5dd692
net: sched: add rcu annotations around qdisc->qdisc_sleeping
|
|
general protection fault in vhost_work_queue
net
virt
kvm
|
|
|
|
1 |
121d |
116d
|
25/25 |
81d |
a284f09effea
vhost: Fix crash during early vhost_transport_send_pkt calls
|
|
KCSAN: data-race in do_recvmmsg / do_recvmmsg (2)
net
|
|
|
|
1 |
163d |
138d
|
24/25 |
84d |
e05a5f510f26
net: annotate sk->sk_err write from do_recvmmsg()
|
|
KCSAN: data-race in tcp_disconnect / tcp_poll (7)
net
|
|
|
|
2 |
159d |
138d
|
24/25 |
84d |
e14cadfd80d7
tcp: add annotations around sk->sk_shutdown accesses
|
|
kernel BUG in nsh_gso_segment
net
|
|
|
|
1 |
150d |
136d
|
24/25 |
84d |
c83b49383b59
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
|
|
general protection fault in __sk_mem_raise_allocated
net
|
|
|
|
1 |
129d |
124d
|
24/25 |
84d |
ad42a35bdfc6
udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
|
|
KMSAN: uninit-value in xfrm_state_find
net
|
C |
error |
done |
215 |
127d |
1926d
|
24/25 |
84d |
3d776e31c841
xfrm: Reject optional tunnel/BEET mode templates in outbound policies
|
|
KMSAN: uninit-value in vlan_dev_hard_start_xmit (2)
net
|
|
|
|
1 |
160d |
159d
|
24/25 |
84d |
dacab578c7c6
vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
|
|
divide error in tcp_rcv_space_adjust (2)
net
|
|
|
|
1 |
174d |
174d
|
24/25 |
84d |
4faeee0cf8a5
tcp: deny tcp_disconnect() when threads are waiting
|
|
KCSAN: data-race in sk_stream_wait_connect / tcp_disconnect (2)
net
|
|
|
|
1 |
168d |
138d
|
24/25 |
84d |
d0ac89f6f987
net: deal with most data-races in sk_wait_event()
|
|
KCSAN: data-race in __netlink_dump_start / netlink_recvmsg (5)
net
|
|
|
|
2 |
167d |
138d
|
24/25 |
84d |
a939d14919b7
netlink: annotate accesses to nlk->cb_running
|
|
memory leak in tcf_pedit_init
net
|
C |
|
|
1 |
147d |
147d
|
24/25 |
107d |
1b483d9f5805
net/sched: act_pedit: free pedit keys on bail from offset check
|
|
KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (12)
net
|
|
|
|
3 |
199d |
199d
|
24/25 |
107d |
4b397c06cb98
net: tunnels: annotate lockless accesses to dev->needed_headroom
|
|
general protection fault in pause_prepare_data
net
|
C |
error |
|
34 |
240d |
242d
|
24/25 |
107d |
f5be9caf7bf0
net: ethtool: fix NULL pointer dereference in pause_prepare_data()
|
|
BUG: unable to handle kernel paging request in __alloc_skb
net
|
|
|
|
1 |
297d |
297d
|
24/25 |
107d |
031af50045ea
arm64: cmpxchg_double*: hazard against entire exchange variable
|
|
KASAN: use-after-free Read in do_csum
net
|
C |
|
|
72 |
109d |
275d
|
24/25 |
107d |
1ac885574470
inet: control sockets should not use current thread task_frag
|
|
KCSAN: data-race in rxrpc_send_data / rxrpc_set_call_completion
afs
net
|
|
|
|
2 |
172d |
152d
|
24/25 |
107d |
2b5fdc0f5caa
rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
|
|
KMSAN: uninit-value in ethnl_set_linkmodes (2)
net
|
C |
|
|
40 |
140d |
446d
|
24/25 |
107d |
9ad685dbfe7e
ethtool: Fix uninitialized number of lanes
|
|
KCSAN: data-race in __neigh_event_send / neigh_resolve_output (7)
net
|
|
|
|
43 |
164d |
138d
|
24/25 |
107d |
b071af523579
neighbour: annotate lockless accesses to n->nud_state
|
|
general protection fault in free_percpu (2)
net
wireless
|
|
|
|
1 |
253d |
253d
|
24/25 |
107d |
80f8a66dede0
Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
|
|
WARNING in htb_destroy
net
|
C |
done |
|
2 |
225d |
225d
|
24/25 |
107d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
general protection fault in ethnl_set_plca_cfg
net
|
C |
done |
|
37 |
250d |
250d
|
24/25 |
107d |
28dbf774bc87
plca.c: fix obvious mistake in checking retval
|
|
memory leak in tcindex_set_parms (3)
net
|
C |
|
|
1 |
295d |
291d
|
24/25 |
107d |
8c710f75256b
net/sched: Retire tcindex classifier
|
|
KCSAN: data-race in __neigh_update / neigh_resolve_output
net
|
|
|
|
1 |
171d |
138d
|
24/25 |
107d |
b071af523579
neighbour: annotate lockless accesses to n->nud_state
|
|
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around
bpf
net
|
C |
done |
|
29 |
187d |
192d
|
24/25 |
107d |
e5995bc7e2ba
bpf, test_run: fix crashes due to XDP frame overwriting/corruption
|
|
general protection fault in virtio_transport_purge_skbs
net
|
C |
done |
|
3 |
184d |
183d
|
24/25 |
107d |
b465518dc27d
vsock/loopback: use only sk_buff_head.lock to protect the packet queue
|
|
WARNING: stack going in the wrong direction? at __sys_setsockopt
net
|
|
|
|
6 |
213d |
219d
|
24/25 |
107d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
|
upstream test error: unregister_netdevice: waiting for DEV to become free
net
|
|
|
|
204 |
219d |
226d
|
24/25 |
107d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
WARNING in net_free
net
|
|
|
|
1 |
160d |
160d
|
24/25 |
107d |
9744d2bf1976
smc: Fix use-after-free in tcp_write_timer_handler().
|
|
WARNING in cleanup_net (2)
net
|
C |
error |
|
72 |
142d |
169d
|
24/25 |
107d |
9744d2bf1976
smc: Fix use-after-free in tcp_write_timer_handler().
|
|
KASAN: use-after-free Read in cfusbl_device_notify
net
|
C |
done |
|
341 |
198d |
346d
|
24/25 |
107d |
9781e98a9711
net: caif: Fix use-after-free in cfusbl_device_notify()
|
|
general protection fault in taprio_dequeue
net
|
|
|
|
1 |
266d |
266d
|
24/25 |
107d |
3a415d59c1db
net/sched: sch_taprio: fix possible use-after-free
|
|
WARNING in ip6erspan_tunnel_xmit (2)
net
|
C |
unreliable |
|
5 |
187d |
187d
|
24/25 |
107d |
8e50ed774554
erspan: do not use skb_mac_header() in ndo_start_xmit()
|
|
KMSAN: uninit-value in qrtr_tx_resume
arm-msm
net
|
C |
|
|
8 |
180d |
241d
|
24/25 |
107d |
6417070918de
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
|
|
INFO: task hung in tls_sw_sendpage (3)
net
|
|
|
|
30 |
211d |
208d
|
24/25 |
107d |
f3221361dc85
net: tls: avoid hanging tasks on the tx_lock
|
|
WARNING in nla_get_range_unsigned (2)
net
|
C |
done |
|
433 |
183d |
218d
|
24/25 |
107d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
BUG: unable to handle kernel paging request in atm_tc_destroy
net
|
C |
error |
|
3 |
225d |
225d
|
24/25 |
107d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
kernel BUG in ip_frag_next
net
|
C |
done |
|
9 |
241d |
248d
|
24/25 |
107d |
f72ff8b81ebc
net: fix kfree_skb_list use of skb_mark_not_on_list
|
|
net test error: WARNING: suspicious RCU usage in veth_set_xdp_features
net
|
|
|
|
24 |
192d |
194d
|
24/25 |
107d |
5ce76fe1eead
veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
|
|
linux-next test error: WARNING: suspicious RCU usage in veth_set_xdp_features
net
|
|
|
|
12 |
192d |
193d
|
24/25 |
107d |
5ce76fe1eead
veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
|
|
KCSAN: data-race in netlink_getname / netlink_insert (4)
net
|
|
|
|
2 |
242d |
246d
|
24/25 |
107d |
c1bb9484e3b0
netlink: annotate data races around nlk->portid
|
|
WARNING: locking bug in inet_autobind
net
|
C |
done |
error |
103 |
268d |
1591d
|
24/25 |
107d |
0b2c59720e65
l2tp: close all race conditions in l2tp_tunnel_register()
|
|
UBSAN: array-index-out-of-bounds in qfq_update_agg (4)
net
|
|
|
|
1 |
158d |
158d
|
24/25 |
107d |
3037933448f6
net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
|
|
KMSAN: uninit-value in raw_sock_get
net
|
|
|
|
1 |
167d |
165d
|
24/25 |
107d |
0a78cf7264d2
raw: Fix NULL deref in raw_get_next().
|
|
BUG: scheduling while atomic in msleep
net
|
C |
done |
|
40 |
240d |
248d
|
24/25 |
107d |
ea4fdbaa2f77
net/sched: sch_taprio: do not schedule in taprio_reset()
|
|
WARNING in __dev_queue_xmit (2)
net
|
C |
|
|
76 |
139d |
211d
|
24/25 |
107d |
693aa2c0d9b6
ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
|
|
kernel BUG in icmp_glue_bits
net
|
|
|
|
2 |
113d |
177d
|
24/25 |
107d |
7d63b6712538
icmp: guard against too small mtu
|
|
general protection fault in bpf_struct_ops_link_create
bpf
net
|
C |
done |
|
17 |
181d |
183d
|
24/25 |
107d |
55fbae05476d
bpf: Check IS_ERR for the bpf_map_get() return value
|
|
WARNING: refcount bug in qrtr_recvmsg (2)
arm-msm
net
|
C |
error |
|
2 |
191d |
184d
|
24/25 |
107d |
44d807320000
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
|
|
WARNING in sock_map_del_link
bpf
net
|
|
|
|
91 |
162d |
163d
|
24/25 |
107d |
8c5c2a4898e3
bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
|
|
WARNING: refcount bug in consume_skb
net
|
|
|
|
3 |
226d |
235d
|
24/25 |
107d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
INFO: trying to register non-static key in net_free
net
|
syz |
error |
|
17982 |
214d |
227d
|
24/25 |
107d |
6e77a5a4af05
net: initialize net->notrefcnt_tracker earlier
|
|
WARNING: suspicious RCU usage in bond_mii_monitor
net
|
C |
|
|
13 |
261d |
279d
|
24/25 |
107d |
42c7ded0eeac
bonding: fix lockdep splat in bond_miimon_commit()
|
|
BUG: stack guard page was hit in inet6_release
bpf
net
|
C |
done |
|
4 |
242d |
291d
|
24/25 |
107d |
ddce1e091757
bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
|
|
possible deadlock in l2tp_tunnel_register (2)
net
|
C |
|
|
153 |
201d |
211d
|
24/25 |
107d |
0b2c59720e65
l2tp: close all race conditions in l2tp_tunnel_register()
|
|
KASAN: slab-use-after-free Read in tcf_action_destroy
net
|
C |
error |
|
32 |
134d |
209d
|
24/25 |
107d |
dfd2f0eb2347
net/sched: flower: fix fl_change() error recovery path
|
|
possible deadlock in release_sock
net
|
C |
done |
|
42 |
247d |
249d
|
24/25 |
107d |
b9fb10d131b8
l2tp: prevent lockdep issue in l2tp_tunnel_register()
|
|
memory leak in nfc_genl_se_io
net
nfc
|
C |
|
|
1 |
222d |
218d
|
24/25 |
107d |
25ff6f8a5a3b
nfc: fix memory leak of se_io context in nfc_genl_se_io
|
|
general protection fault in tcindex_set_parms
net
|
C |
done |
|
2 |
222d |
222d
|
24/25 |
107d |
42018a322bd4
net/sched: tcindex: search key must be 16 bits
|
|
kernel BUG in fou_build_udp
net
|
C |
|
|
1 |
142d |
142d
|
24/25 |
107d |
c88f8d5cd95f
UPSTREAM: sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
|
|
KCSAN: data-race in ip_finish_output2 / ip_tunnel_xmit
net
|
|
|
|
1 |
236d |
236d
|
24/25 |
107d |
4b397c06cb98
net: tunnels: annotate lockless accesses to dev->needed_headroom
|
|
kernel BUG in rxrpc_put_call
afs
net
|
C |
done |
|
9 |
244d |
257d
|
24/25 |
107d |
01644a1f98ff
rxrpc: Fix wrong error return in rxrpc_connect_call()
|
|
kernel BUG in rxrpc_put_peer
afs
net
|
C |
|
|
80 |
247d |
291d
|
24/25 |
107d |
9d35d880e0e4
rxrpc: Move client call connection to the I/O thread
03fc55adf876
rxrpc: Only disconnect calls in the I/O thread
|
|
INFO: rcu detected stall in devlink_nl_cmd_port_get_dumpit
net
|
syz |
|
|
7 |
205d |
222d
|
24/25 |
107d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
WARNING in inet_sock_destruct (3)
net
|
C |
|
|
87 |
111d |
213d
|
24/25 |
107d |
880ce5f20033
net: avoid skb end_offset change in __skb_unclone_keeptruesize()
|
|
WARNING in devlink_free
net
|
|
|
|
10 |
242d |
255d
|
24/25 |
107d |
93e71edfd90c
devlink: keep the instance mutex alive until references are gone
|
|
KMSAN: uninit-value in ipv6_find_tlv
net
|
C |
|
|
271 |
148d |
1502d
|
24/25 |
107d |
ea30388baebc
ipv6: Fix an uninit variable access bug in __ip6_make_skb()
|
|
WARNING in default_device_exit_batch (4)
net
|
C |
error |
|
954 |
183d |
309d
|
24/25 |
107d |
e667d4690986
bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
|
|
memory leak in regulatory_hint_core
net
wireless
|
C |
|
|
2 |
305d |
334d
|
24/25 |
107d |
399ab7fe0fa0
net: sched: fix memory leak in tcindex_set_parms
|
|
KMSAN: kernel-infoleak in copyout (2)
net
|
C |
|
|
6723 |
107d |
1276d
|
24/25 |
107d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
KASAN: null-ptr-deref Read in __fl_put
net
|
C |
error |
|
16 |
188d |
208d
|
24/25 |
107d |
dfd2f0eb2347
net/sched: flower: fix fl_change() error recovery path
|
|
kernel BUG in inet_sock_destruct
net
|
C |
error |
|
3 |
263d |
263d
|
24/25 |
107d |
1ac885574470
inet: control sockets should not use current thread task_frag
|
|
possible deadlock in inet_put_port
net
|
|
|
|
2 |
248d |
248d
|
24/25 |
107d |
b9fb10d131b8
l2tp: prevent lockdep issue in l2tp_tunnel_register()
|
|
BUG: corrupted list in taprio_destroy
net
|
C |
done |
|
2 |
224d |
224d
|
24/25 |
107d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (6)
net
|
|
|
|
2 |
175d |
173d
|
24/25 |
107d |
a1865f2e7d10
netlink: annotate lockless accesses to nlk->max_recvmsg_len
|
|
KASAN: invalid-free in skb_free_head (2)
net
|
C |
error |
|
25 |
148d |
213d
|
24/25 |
107d |
880ce5f20033
net: avoid skb end_offset change in __skb_unclone_keeptruesize()
|
|
riscv/fixes test error: BUG: soft lockup in corrupted (2)
virt
net
|
|
|
|
4 |
346d |
423d
|
24/25 |
107d |
61fc1ee8be26
riscv: Bump COMMAND_LINE_SIZE value to 1024
|
|
general protection fault in skb_dequeue (3)
net
wireless
|
C |
done |
|
6 |
224d |
234d
|
24/25 |
107d |
33b3b041543e
splice: Add a func to do a splice from an O_DIRECT file without ITER_PIPE
|
|
WARNING in inet_csk_destroy_sock (3)
net
|
|
|
|
1 |
121d |
121d
|
24/25 |
119d |
e0833d1fedb0
dccp/tcp: Fixup bhash2 bucket when connect() fails.
|
|
KASAN: slab-out-of-bounds Read in sk_psock_get
net
|
C |
done |
error |
9 |
424d |
759d
|
24/25 |
163d |
2a0133723f9e
net: fix refcount bug in sk_psock_get (2)
|
|
possible deadlock in nci_start_poll
net
nfc
|
C |
error |
done |
83 |
212d |
312d
|
24/25 |
165d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
kernel BUG in pskb_expand_head
net
|
C |
done |
|
1600 |
226d |
677d
|
24/25 |
210d |
5f33a09e769a
can: isotp: convert struct tpcon::{idx,len} to unsigned int
7c759040c1dd
can: isotp: fix potential CAN frame reception race in isotp_rcv()
|
|
INFO: trying to register non-static key in ieee80211_do_stop
net
wireless
|
C |
error |
|
70591 |
396d |
436d
|
24/25 |
211d |
aa40d5a43526
wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
|
|
WARNING in ipgre_xmit
net
|
C |
done |
|
9916 |
461d |
478d
|
24/25 |
211d |
8d21e9963bec
ip_gre: test csum_start instead of transport header
|
|
WARNING: ODEBUG bug in ops_free_list
net
|
|
|
|
1 |
538d |
538d
|
24/25 |
211d |
1946014ca3b1
rxrpc: fix a race in rxrpc_exit_net()
|
|
KASAN: wild-memory-access Read in skb_copy_bits
net
|
C |
|
|
2 |
379d |
379d
|
24/25 |
211d |
0d24148bd276
inet: ping: fix recent breakage
|
|
KCSAN: data-race in __ip_append_data / __ip_append_data
net
|
|
|
|
1 |
596d |
592d
|
24/25 |
211d |
a1cdec57e03a
net-timestamp: convert sk->sk_tskey to atomic_t
|
|
WARNING: kmalloc bug in xdp_umem_create (2)
bpf
net
|
C |
done |
|
21 |
590d |
656d
|
24/25 |
211d |
0708a0afe291
mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
|
|
KCSAN: data-race in tcp_send_challenge_ack / tcp_send_challenge_ack
net
|
|
|
|
1 |
389d |
389d
|
24/25 |
211d |
8c70521238b7
tcp: annotate data-race around challenge_timestamp
|
|
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self
bpf
net
|
C |
done |
|
151 |
321d |
343d
|
24/25 |
211d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
|
KASAN: use-after-free Read in ipvlan_queue_xmit (3)
net
|
C |
error |
error |
8 |
415d |
1012d
|
24/25 |
211d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
general protection fault in llc_build_and_send_xid_pkt
net
|
C |
done |
|
2 |
548d |
548d
|
24/25 |
211d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
KASAN: use-after-free Read in reqsk_queue_unlink
net
|
|
|
|
4 |
297d |
348d
|
24/25 |
211d |
740ea3c4a0b2
tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
|
|
WARNING: refcount bug in tcp_release_cb
net
|
|
|
|
2 |
286d |
296d
|
24/25 |
211d |
0a182f8d6074
bpf, sockmap: fix race in sock_map_free()
|
|
net boot error: WARNING in genl_register_family
net
|
|
|
|
3 |
330d |
330d
|
24/25 |
211d |
e4ba4554209f
net: openvswitch: add missing .resv_start_op
|
|
WARNING in __skb_flow_dissect (4)
net
|
C |
error |
|
6 |
322d |
331d
|
24/25 |
211d |
9f225444467b
ppp: associate skb with a device at tx
|
|
WARNING in inet_csk_get_port
net
|
C |
done |
|
1166 |
260d |
488d
|
24/25 |
211d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
KASAN: use-after-free Read in free_netdev (3)
net
|
C |
inconclusive |
|
130 |
303d |
458d
|
24/25 |
211d |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
KCSAN: data-race in dev_activate / qdisc_lookup_rcu
net
|
|
|
|
1 |
589d |
589d
|
24/25 |
211d |
5891cd5ec46c
net_sched: add __rcu annotation to netdev->qdisc
|
|
WARNING in skb_try_coalesce
net
|
C |
error |
|
1521 |
483d |
936d
|
24/25 |
211d |
763087dab975
net: add skb_set_end_offset() helper
|
|
kernel panic: corrupted stack end in netdev_run_todo
net
|
|
|
|
1 |
455d |
455d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
general protection fault in sock_reserve_memory
net
|
C |
done |
|
2 |
587d |
587d
|
24/25 |
211d |
25206111512d
crypto: af_alg - get rid of alg_memory_allocated
|
|
WARNING in tcp_enter_loss (3)
net
|
C |
inconclusive |
|
7 |
328d |
625d
|
24/25 |
211d |
0c175da7b037
tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
|
|
general protection fault in tls_sk_proto_close (3)
net
|
C |
done |
|
276 |
459d |
859d
|
24/25 |
211d |
69135c572d1f
net/tls: fix tls_sk_proto_close executed repeatedly
|
|
possible deadlock in l2tp_tunnel_register
net
|
C |
error |
|
9492 |
211d |
310d
|
24/25 |
211d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
general protection fault in em_cmp_match
net
|
C |
|
|
4 |
286d |
282d
|
24/25 |
211d |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
general protection fault in ip6_rcv_core
net
|
C |
done |
|
275 |
301d |
528d
|
24/25 |
211d |
0339d25a2807
ipv6: fix NULL deref in ip6_rcv_core()
|
|
KASAN: use-after-free Read in nh_netdev_event
net
|
|
|
|
3 |
311d |
387d
|
24/25 |
211d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
KASAN: use-after-free Read in rxrpc_lookup_local
afs
net
|
C |
|
|
3997 |
261d |
291d
|
24/25 |
211d |
8fbcc83334a7
rxrpc: Fix I/O thread startup getting skipped
eaa02390adb0
rxrpc: Fix NULL deref in rxrpc_unuse_local()
|
|
kernel BUG in warn_crc32c_csum_combine
net
|
C |
error |
|
17 |
325d |
334d
|
24/25 |
211d |
7f57f8165cb6
af_key: Fix send_acquire race with pfkey_register
|
|
kernel panic: corrupted stack end in nf_tables_getset
net
|
|
|
|
1 |
320d |
320d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
net-next test error: WARNING in devl_port_unregister
net
|
|
|
|
52 |
317d |
319d
|
24/25 |
211d |
1fb22ed67195
devlink: Fix warning when unregistering a port
|
|
WARNING in u32_change
net
|
C |
|
|
28 |
266d |
363d
|
24/25 |
211d |
7cba18332e36
net: sched: cls_u32: Avoid memcpy() false-positive warning
|
|
general protection fault in metadata_dst_free
net
|
C |
|
|
348 |
342d |
380d
|
24/25 |
211d |
c52add61c27e
macsec: don't free NULL metadata_dst
|
|
memory leak in virtual_ncidev_write
net
nfc
|
C |
|
|
1 |
310d |
310d
|
24/25 |
211d |
53270fb0fd77
NFC: nci: fix memory leak in nci_rx_data_packet()
|
|
memory leak in __vsock_create
net
|
C |
|
|
1 |
535d |
531d
|
24/25 |
211d |
7e97cfed9929
vsock: Fix memory leak in vsock_connect()
|
|
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (5)
net
|
|
|
|
12 |
253d |
506d
|
24/25 |
211d |
d5076fe4049c
netlink: do not reset transport header in netlink_recvmsg()
|
|
general protection fault in __inet_hash_connect
net
|
|
|
|
5 |
319d |
465d
|
24/25 |
211d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
kernel panic: corrupted stack end in tc_ctl_action
net
|
|
|
|
2 |
343d |
397d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING in skb_checksum_help
net
|
|
|
|
15 |
216d |
389d
|
24/25 |
211d |
0d24148bd276
inet: ping: fix recent breakage
|
|
WARNING in skb_tunnel_check_pmtu
net
|
C |
done |
|
8 |
453d |
459d
|
24/25 |
211d |
853a76148802
tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
|
|
WARNING: lock held when returning to user space in ieee80211_change_mac
net
wireless
|
|
|
|
1 |
361d |
357d
|
24/25 |
211d |
ceb3d688f922
wifi: mac80211: unlock on error in ieee80211_can_powered_addr_change()
|
|
memory leak in ipv6_renew_options
net
|
C |
|
|
1 |
437d |
433d
|
24/25 |
211d |
e27326009a3d
net: ping6: Fix memleak in ipv6_renew_options().
|
|
possible deadlock in kcm_ioctl
net
|
C |
error |
|
20 |
397d |
398d
|
24/25 |
211d |
8fc29ff3910f
kcm: fix strp_init() order and cleanup
|
|
memory leak in __tcp_send_ack
net
|
C |
|
|
10 |
348d |
880d
|
24/25 |
211d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
kernel BUG in __skb_gso_segment
net
|
C |
done |
|
11 |
478d |
476d
|
24/25 |
211d |
e9d3f80935b6
net/af_packet: make sure to pull mac header
|
|
general protection fault in rlb_clear_slave
net
|
|
|
|
1 |
454d |
454d
|
24/25 |
211d |
ab84db251c04
net: bonding: fix possible NULL deref in rlb code
|
|
general protection fault in tcp_create_openreq_child
net
|
C |
unreliable |
|
83 |
516d |
518d
|
24/25 |
211d |
ba5a4fdd63ae
tcp: make sure treq->af_specific is initialized
|
|
KCSAN: data-race in veth_xmit / veth_xmit
net
|
|
|
|
1 |
596d |
592d
|
24/25 |
211d |
68468d8c4cd4
veth: fix races around rq->rx_notify_masked
|
|
kernel BUG in mld_newpack
net
|
|
|
|
1 |
343d |
343d
|
24/25 |
211d |
d89d7ff01235
ipv6: ensure sane device mtu in tunnels
|
|
KMSAN: uninit-value in ipvlan_queue_xmit
net
|
C |
|
|
2 |
389d |
972d
|
24/25 |
211d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
WARNING: suspicious RCU usage in ipmr_rtm_dumplink
net
|
|
|
|
11 |
452d |
455d
|
24/25 |
211d |
0fcae3c8b1b3
ipmr: fix a lockdep splat in ipmr_rtm_dumplink()
|
|
possible deadlock in nci_set_local_general_bytes
nfc
net
|
C |
|
|
32 |
261d |
313d
|
24/25 |
211d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
BUG: MAX_LOCK_DEPTH too low! (3)
net
s390
|
C |
done |
|
18 |
582d |
592d
|
24/25 |
211d |
1de9770d121e
net/smc: Avoid overwriting the copies of clcsock callback functions
|
|
general protection fault in skb_clone (5)
net
|
C |
done |
|
7 |
326d |
344d
|
24/25 |
211d |
d8b57135fd9f
net: hsr: avoid possible NULL deref in skb_clone()
|
|
KCSAN: data-race in fib6_info_hw_flags_set / fib6_purge_rt
net
|
|
|
|
1 |
615d |
614d
|
24/25 |
211d |
d95d6320ba7a
ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
|
|
KASAN: use-after-free Read in macsec_get_iflink
net
|
|
|
|
1 |
488d |
484d
|
24/25 |
211d |
196a888ca657
macsec: fix UAF bug for real_dev
|
|
KMSAN: kernel-infoleak in _copy_to_iter (7)
net
|
C |
|
|
138977 |
211d |
563d
|
24/25 |
211d |
633593a80898
sctp: fix kernel-infoleak for SCTP sockets
|
|
KASAN: use-after-free Write in inet_put_port
net
|
|
|
|
1 |
468d |
464d
|
24/25 |
211d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
upstream boot error: general protection fault in ieee80211_register_hw
net
wireless
|
|
|
|
1 |
404d |
404d
|
24/25 |
211d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING in tcp_disconnect
net
|
|
|
|
2 |
338d |
343d
|
24/25 |
211d |
72e560cb8c6f
tcp: cdg: allow tcp_cdg_release() to be called multiple times
|
|
possible deadlock in virtual_nci_close
net
nfc
|
C |
done |
|
939 |
212d |
313d
|
24/25 |
211d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
WARNING in tcp_mtup_probe_success
net
|
|
|
|
3 |
478d |
484d
|
24/25 |
211d |
11825765291a
tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
|
|
BUG: sleeping function called from invalid context in smc_pnet_add
net
|
C |
done |
|
45 |
593d |
594d
|
24/25 |
211d |
94fdd7c02a56
net/smc: use GFP_ATOMIC allocation in smc_pnet_add_eth()
|
|
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp
bpf
net
|
C |
done |
|
18 |
586d |
604d
|
24/25 |
211d |
a6763080856f
bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
|
|
KASAN: slab-out-of-bounds Read in smc_fback_error_report
net
s390
|
C |
error |
|
72 |
513d |
590d
|
24/25 |
211d |
0558226cebee
net/smc: Fix slab-out-of-bounds issue in fallback
|
|
KCSAN: data-race in packet_setsockopt / packet_setsockopt
net
|
|
|
|
1 |
618d |
606d
|
24/25 |
211d |
e42e70ad6ae2
af_packet: fix data-race in packet_setsockopt / packet_setsockopt
|
|
possible deadlock in strp_work
net
|
C |
error |
|
4 |
397d |
398d
|
24/25 |
211d |
8fc29ff3910f
kcm: fix strp_init() order and cleanup
|
|
KASAN: use-after-free Read in __fib6_clean_all
net
|
|
|
|
30 |
301d |
554d
|
24/25 |
211d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
KMSAN: uninit-value in asix_mdio_write_nopm
net
usb
|
|
|
|
2 |
536d |
557d
|
24/25 |
211d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (7)
net
|
|
|
|
1 |
340d |
339d
|
24/25 |
211d |
0c745b5141a4
kcm: annotate data-races around kcm->rx_wait
|
|
WARNING in devl_port_unregister
net
|
C |
|
|
1690 |
214d |
317d
|
24/25 |
211d |
1fb22ed67195
devlink: Fix warning when unregistering a port
|
|
WARNING: suspicious RCU usage in corrupted (2)
net
|
C |
unreliable |
|
7 |
455d |
466d
|
24/25 |
211d |
4e43e64d0f13
ipv6: fix lockdep splat in in6_dump_addrs()
|
|
kernel BUG in vhost_get_vq_desc
virt
kvm
net
|
C |
inconclusive |
|
19 |
575d |
587d
|
24/25 |
211d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
WARNING in skb_warn_bad_offload (3)
net
|
C |
done |
|
115 |
212d |
348d
|
24/25 |
211d |
87445f369cca
ipv6: ping: fix wrong checksum for large frames
|
|
WARNING in arp_ioctl
net
|
C |
error |
done |
17 |
283d |
353d
|
24/25 |
211d |
b5f0de6df6dc
net: dev: Convert sa_data to flexible array in struct sockaddr
|
|
WARNING in ipvlan_queue_xmit
net
|
C |
inconclusive |
|
4 |
389d |
389d
|
24/25 |
211d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
WARNING: still has locks held in tls_rx_reader_lock
net
|
C |
done |
|
4 |
428d |
430d
|
24/25 |
211d |
dde06aaa89b7
tls: rx: release the sock lock on locking timeout
|
|
WARNING: suspicious RCU usage in in6_dump_addrs
net
|
C |
unreliable |
|
613 |
423d |
467d
|
24/25 |
211d |
4e43e64d0f13
ipv6: fix lockdep splat in in6_dump_addrs()
|
|
kernel panic: corrupted stack end in inet_rtm_newaddr
net
|
|
|
|
23 |
214d |
551d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
inconsistent lock state in smc_fback_state_change
net
s390
|
C |
error |
|
7 |
303d |
308d
|
24/25 |
211d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
linux-next test error: WARNING in devl_port_unregister
net
|
|
|
|
23 |
317d |
320d
|
24/25 |
211d |
1fb22ed67195
devlink: Fix warning when unregistering a port
|
|
KASAN: use-after-free Read in tcp_retransmit_timer (5)
net
|
C |
unreliable |
|
16000 |
295d |
1307d
|
24/25 |
211d |
3a58f13a881e
net: rds: acquire refcount on TCP sockets
|
|
WARNING in inet_csk_destroy_sock (2)
io-uring
net
|
C |
done |
|
8 |
260d |
346d
|
24/25 |
211d |
e0833d1fedb0
dccp/tcp: Fixup bhash2 bucket when connect() fails.
|
|
WARNING in __vunmap
net
|
C |
error |
error |
154 |
360d |
1680d
|
24/25 |
211d |
8a04d2fc700f
xfrm: Update ipcomp_scratches with NULL when freed
|
|
memory leak in napi_get_frags
net
|
C |
|
|
11 |
960d |
981d
|
24/25 |
211d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
memory leak in netlink_policy_dump_add_policy
net
|
C |
|
|
1 |
411d |
407d
|
24/25 |
211d |
249801360db3
net: genl: fix error path memory leak in policy dumping
|
|
KCSAN: data-race in fib6_clean_node / inet6_csk_route_socket
net
|
|
|
|
1 |
611d |
611d
|
24/25 |
211d |
aafc2e3285c2
ipv6: annotate accesses to fn->fn_sernum
|
|
BUG: unable to handle kernel paging request in inet_unhash
net
|
|
|
|
3 |
306d |
387d
|
24/25 |
211d |
d1e96cc4fbe0
mptcp: fix tracking issue in mptcp_subflow_create_socket()
|
|
general protection fault in llc_ui_connect
net
|
C |
done |
|
17 |
544d |
547d
|
24/25 |
211d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
memory leak in ndisc_send_rs
net
|
C |
|
|
2 |
708d |
755d
|
24/25 |
211d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
KCSAN: data-race in bond_3ad_initiate_agg_selection / bond_3ad_state_machine_handler (2)
net
|
|
|
|
1 |
586d |
586d
|
24/25 |
211d |
9ceaf6f76b20
bonding: fix data-races around agg_select_timer
|
|
general protection fault in llc_ui_sendmsg
net
|
C |
done |
|
365 |
543d |
548d
|
24/25 |
211d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
KASAN: use-after-free Read in inet_twsk_kill
net
|
|
|
|
86 |
603d |
605d
|
24/25 |
211d |
fbb8295248e1
tcp: allocate tcp_death_row outside of struct netns_ipv4
|
|
KASAN: slab-out-of-bounds Read in packet_recvmsg
net
|
C |
inconclusive |
|
12 |
560d |
961d
|
24/25 |
211d |
c700525fcc06
net/packet: fix slab-out-of-bounds access in packet_recvmsg()
|
|
INFO: task hung in vhost_work_dev_flush
kvm
net
virt
|
C |
error |
|
2 |
591d |
581d
|
24/25 |
211d |
e2ae38cf3d91
vhost: fix hung thread due to erroneous iotlb entries
|
|
stack segment fault in skb_clone
net
|
C |
unreliable |
inconclusive |
3 |
465d |
650d
|
24/25 |
211d |
d8b57135fd9f
net: hsr: avoid possible NULL deref in skb_clone()
|
|
WARNING: suspicious RCU usage in bond_ethtool_get_ts_info
net
|
C |
done |
|
6 |
497d |
499d
|
24/25 |
211d |
9b80ccda233f
bonding: fix missed rcu protection
|
|
general protection fault in rlb_req_update_slave_clients
net
|
C |
inconclusive |
|
3 |
474d |
475d
|
24/25 |
211d |
ab84db251c04
net: bonding: fix possible NULL deref in rlb code
|
|
inconsistent lock state in l2tp_tunnel_register
net
|
|
|
|
5599 |
297d |
310d
|
24/25 |
211d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
KASAN: invalid-free in tcp_disconnect
net
|
C |
unreliable |
|
74 |
339d |
354d
|
24/25 |
211d |
72e560cb8c6f
tcp: cdg: allow tcp_cdg_release() to be called multiple times
|
|
WARNING in wireless_send_event
wireless
net
|
C |
|
|
210 |
327d |
365d
|
24/25 |
211d |
e3e6e1d16a4c
wifi: wext: use flex array destination for memcpy()
|
|
KCSAN: data-race in ip6_dst_gc / ip6_dst_gc (3)
net
|
|
|
|
2 |
526d |
528d
|
24/25 |
211d |
9cb7c013420f
ipv6: make ip6_rt_gc_expire an atomic_t
|
|
possible deadlock in nci_close_device
net
nfc
|
|
|
|
2 |
291d |
305d
|
24/25 |
211d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
KCSAN: data-race in dropmon_net_event / trace_napi_poll_hit
net
|
|
|
|
1 |
607d |
590d
|
24/25 |
211d |
dcd54265c8bc
drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
|
|
kernel BUG in netem_enqueue
net
|
|
|
|
9 |
282d |
507d
|
24/25 |
211d |
eeee4b77dc52
net: add more debug info in skb_checksum_help()
|
|
memory leak in vlan_dev_set_egress_priority (2)
net
|
C |
|
|
1 |
442d |
442d
|
24/25 |
211d |
72a0b329114b
vlan: fix memory leak in vlan_newlink()
|
|
WARNING in ieee80211_link_info_change_notify
net
wireless
|
C |
inconclusive |
|
1376 |
211d |
454d
|
24/25 |
211d |
591e73ee3f73
wifi: mac80211: properly skip link info driver update
|
|
upstream boot error: WARNING in genl_register_family
net
|
|
|
|
468 |
324d |
330d
|
24/25 |
211d |
e4ba4554209f
net: openvswitch: add missing .resv_start_op
|
|
WARNING in bpf_test_finish
bpf
net
|
C |
done |
|
3 |
572d |
572d
|
24/25 |
211d |
530e214c5b5a
bpf, test_run: Fix overflow in XDP frags bpf_test_finish
|
|
BUG: corrupted list in p9_fd_cancel (2)
net
v9fs
fuse
|
C |
error |
|
8 |
310d |
335d
|
24/25 |
211d |
11c10956515b
9p/fd: fix issue of list_del corruption in p9_fd_cancel()
|
|
KASAN: use-after-free Write in enqueue_timer
net
|
|
|
|
1 |
312d |
312d
|
24/25 |
211d |
ab0377803daf
mrp: introduce active flags to prevent UAF when applicant uninit
|
|
KASAN: null-ptr-deref Write in kcm_tx_work (3)
net
|
C |
inconclusive |
inconclusive |
7 |
357d |
458d
|
24/25 |
211d |
ec7eede369fe
kcm: avoid potential race in kcm_tx_work
|
|
kernel panic: corrupted stack end in rtnl_newlink
net
|
|
|
|
3489 |
211d |
558d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING: refcount bug in sk_psock_get (2)
net
|
C |
done |
|
4 |
436d |
477d
|
24/25 |
211d |
2a0133723f9e
net: fix refcount bug in sk_psock_get (2)
|
|
WARNING in nci_send_cmd
nfc
net
|
C |
|
|
13 |
298d |
311d
|
24/25 |
211d |
0ad6bded175e
nfc/nci: fix race with opening and closing
|
|
KCSAN: data-race in kcm_rfree / unreserve_rx_kcm (3)
net
|
|
|
|
4 |
336d |
340d
|
24/25 |
211d |
15e4dabda11b
kcm: annotate data-races around kcm->rx_psock
|
|
WARNING in nci_add_new_protocol
net
nfc
|
|
|
|
1 |
303d |
299d
|
24/25 |
211d |
e329e71013c9
NFC: nci: Bounds check struct nfc_target arrays
|
|
memory leak in mld_newpack
net
|
C |
|
|
2 |
371d |
789d
|
24/25 |
211d |
a43206156263
usbnet: Fix memory leak in usbnet_disconnect()
|
|
WARNING in netif_napi_add_weight
net
|
C |
inconclusive |
done |
45 |
450d |
462d
|
24/25 |
211d |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
BUG: using smp_processor_id() in preemptible code in tun_chr_write_iter
net
|
C |
done |
|
1834 |
550d |
560d
|
24/25 |
211d |
fc93db153b01
net: disable preemption in dev_core_stats_XXX_inc() helpers
|
|
BUG: using smp_processor_id() in preemptible code in netdev_core_stats_alloc
net
|
C |
error |
|
2210 |
550d |
560d
|
24/25 |
211d |
fc93db153b01
net: disable preemption in dev_core_stats_XXX_inc() helpers
|
|
BUG: missing reserved tailroom
bpf
net
|
C |
done |
|
2 |
562d |
562d
|
24/25 |
211d |
b6f1f780b393
bpf, test_run: Fix packet size check for live packet mode
|
|
general protection fault in smc_pnet_add (2)
net
s390
|
C |
inconclusive |
|
590 |
526d |
541d
|
24/25 |
211d |
d22f4f977236
net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
|
|
possible deadlock in ___neigh_create
net
|
C |
error |
|
24 |
596d |
599d
|
24/25 |
211d |
4a81f6da9cb2
net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
|
|
KASAN: use-after-free Read in __tcf_qdisc_find
net
|
|
|
|
1 |
383d |
383d
|
24/25 |
211d |
ebda44da44f6
net: sched: fix race condition in qdisc_graft()
|
|
KCSAN: data-race in __ip4_datagram_connect / raw_bind (2)
net
|
|
|
|
1 |
606d |
606d
|
24/25 |
211d |
153a0d187e76
ipv4: raw: lock the socket in raw_bind()
|
|
general protection fault in llc_build_and_send_ui_pkt
net
|
C |
done |
|
26 |
544d |
548d
|
24/25 |
211d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
net-next test error: WARNING: suspicious RCU usage in hsr_node_get_first
net
|
|
|
|
189 |
581d |
590d
|
24/25 |
211d |
e7f27420681f
net: hsr: fix suspicious RCU usage warning in hsr_node_get_first()
|
|
KFENCE: memory corruption in p9_req_put
net
v9fs
|
|
|
|
2 |
308d |
311d
|
24/25 |
211d |
26273ade77f5
9p: set req refcount to zero to avoid uninitialized usage
|
|
general protection fault in llc_alloc_frame
net
|
|
|
|
1 |
546d |
546d
|
24/25 |
211d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
WARNING in tls_strp_done
net
|
C |
error |
|
22 |
400d |
405d
|
24/25 |
211d |
849f16bbfb68
tls: rx: react to strparser initialization errors
|
|
linux-next test error: general protection fault in xfrm_policy_lookup_bytype
net
|
|
|
|
15 |
304d |
306d
|
24/25 |
211d |
b97df039a68b
xfrm: Fix oops in __xfrm_state_delete()
|
|
KASAN: slab-out-of-bounds Write in __build_skb_around
bpf
net
|
C |
error |
|
2536 |
284d |
299d
|
24/25 |
211d |
ce098da1497c
skbuff: Introduce slab_build_skb()
|
|
WARNING in sk_stream_kill_queues (8)
net
|
C |
unreliable |
|
4268 |
215d |
451d
|
24/25 |
211d |
e9c6e7976026
tcp: fix sock skb accounting in tcp_read_skb()
|
|
WARNING in mroute_clean_tables
net
|
C |
|
|
10 |
570d |
590d
|
24/25 |
211d |
5611a00697c8
ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
|
|
general protection fault in pse_prepare_data
net
|
C |
inconclusive |
|
6 |
261d |
339d
|
24/25 |
211d |
46cdedf2a0fa
ethtool: pse-pd: fix null-deref on genl_info in dump
|
|
KMSAN: uninit-value in bcmp
net
|
C |
error |
done |
907 |
247d |
1568d
|
24/25 |
211d |
4f1dc7d9756e
fs/ntfs3: Validate attribute name offset
|
|
UBSAN: shift-out-of-bounds in tcf_pedit_init
net
|
C |
done |
|
59 |
491d |
498d
|
24/25 |
211d |
4d42d54a7d6a
net/sched: act_pedit: sanitize shift argument before usage
|
|
KASAN: use-after-free Read in ip6_fragment (2)
net
|
|
|
|
1 |
303d |
299d
|
24/25 |
211d |
803e84867de5
ipv6: avoid use-after-free in ip6_fragment()
|
|
general protection fault in llc_build_and_send_test_pkt
net
|
C |
done |
|
25 |
543d |
548d
|
24/25 |
211d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
WARNING in vhost_dev_cleanup (2)
virt
kvm
net
|
|
|
|
79 |
575d |
583d
|
24/25 |
211d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
BUG: unable to handle kernel NULL pointer dereference in em_u32_match
net
|
C |
|
|
2 |
266d |
322d
|
24/25 |
211d |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
inconsistent lock state in p9_req_put
v9fs
net
|
|
|
|
181 |
353d |
403d
|
24/25 |
211d |
296ab4a81384
net/9p: use a dedicated spinlock for trans_fd
|
|
KCSAN: data-race in sit_tunnel_xmit / sit_tunnel_xmit
net
|
|
|
|
702 |
284d |
1382d
|
24/25 |
211d |
cb34b7cf17ec
ipv6/sit: use DEV_STATS_INC() to avoid data-races
|
|
WARNING in ip6erspan_tunnel_xmit
net
|
|
|
|
23 |
218d |
462d
|
24/25 |
211d |
301bd140ed0b
erspan: do not assume transport header is always set
|
|
general protection fault in skb_unlink
net
|
C |
done |
error |
8 |
380d |
1941d
|
24/25 |
211d |
5121197ecc5d
kcm: close race conditions on sk_receive_queue
|
|
upstream boot error: WARNING in wiphy_register
net
wireless
|
|
|
|
1 |
404d |
404d
|
24/25 |
211d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING in sk_destruct
net
|
C |
done |
|
454 |
487d |
614d
|
24/25 |
211d |
ebdc1a030962
tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
|
|
KASAN: slab-out-of-bounds Read in ipvlan_queue_xmit
net
|
C |
error |
error |
8 |
574d |
1051d
|
24/25 |
211d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
WARNING in wdev_chandef
net
wireless
|
|
|
|
12 |
413d |
455d
|
24/25 |
211d |
206bbcf76121
wifi: nl80211: hold wdev mutex for tid config
|
|
kernel panic: corrupted stack end in packet_sendmsg
net
|
|
|
|
1 |
382d |
382d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING in tcp_ack (3)
net
|
|
|
|
16 |
478d |
536d
|
24/25 |
211d |
40570375356c
tcp: add accessors to read/set tp->snd_cwnd
|
|
WARNING in cfg80211_ch_switch_notify
net
wireless
|
C |
done |
|
744 |
411d |
455d
|
24/25 |
211d |
77e7b6ba78ed
wifi: cfg80211: handle IBSS in channel switch
|
|
WARNING in napi_complete_done
net
|
C |
error |
|
104 |
318d |
322d
|
24/25 |
211d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
KCSAN: data-race in inet6_recvmsg / ipv6_setsockopt
net
|
|
|
|
1 |
595d |
592d
|
24/25 |
211d |
086d49058cd8
ipv6: annotate some data-races around sk->sk_prot
|
|
KASAN: use-after-free Read in ip6mr_sk_done
net
|
C |
done |
|
10988 |
325d |
594d
|
24/25 |
211d |
7d9b1b578d67
ip6mr: fix use-after-free in ip6mr_sk_done()
|
|
WARNING: refcount bug in smc_pnet_add
s390
net
|
C |
done |
|
98 |
581d |
594d
|
24/25 |
211d |
28f922213886
net/smc: fix ref_tracker issue in smc_pnet_add()
|
|
KASAN: use-after-free Write in mini_qdisc_pair_swap (2)
net
|
|
|
|
24 |
220d |
600d
|
24/25 |
211d |
04c2a47ffb13
net: sched: fix use-after-free in tc_new_tfilter()
|
|
KMSAN: uninit-value in tcp_recvmsg
net
|
C |
|
|
25918 |
333d |
458d
|
24/25 |
211d |
1228b34c8d0e
net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
|
|
memory leak in smc_sysctl_net_init
net
s390
|
C |
|
|
8 |
543d |
547d
|
24/25 |
211d |
5ae6acf1d00b
net/smc: fix a memory leak in smc_sysctl_net_exit()
|
|
usb-testing boot error: WARNING in __netif_set_xps_queue
net
virt
|
|
|
|
57 |
329d |
341d
|
24/25 |
211d |
fc8695eb11f0
Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
|
|
KASAN: use-after-free Read in inet_bind2_bucket_find
net
io-uring
|
C |
done |
|
13 |
466d |
473d
|
24/25 |
211d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
INFO: task hung in p9_fd_close
net
v9fs
|
C |
error |
error |
484 |
321d |
1485d
|
24/25 |
211d |
ef575281b21e
9p/trans_fd: always use O_NONBLOCK read/write
|
|
memory leak in smc_create (2)
net
s390
|
C |
|
|
2 |
547d |
543d
|
24/25 |
211d |
1a74e9932374
net/smc: Fix sock leak when release after smc_shutdown()
|
|
possible deadlock in __inet_inherit_port
net
|
C |
done |
|
85 |
248d |
310d
|
24/25 |
211d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in cleanup_net
net
|
|
|
|
613 |
211d |
333d
|
24/25 |
211d |
d1e96cc4fbe0
mptcp: fix tracking issue in mptcp_subflow_create_socket()
|
|
general protection fault in ip6_tnl_xmit
net
|
|
|
|
1 |
592d |
592d
|
24/25 |
211d |
3a5f238f2b36
ip6_tunnel: fix possible NULL deref in ip6_tnl_xmit
|
|
possible deadlock in sk_common_release
net
|
|
|
|
5 |
298d |
309d
|
24/25 |
211d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
KASAN: use-after-free Read in ieee80211_scan_rx (3)
wireless
net
|
|
|
|
10 |
408d |
515d
|
24/25 |
211d |
60deb9f10eec
wifi: mac80211: Fix UAF in ieee80211_scan_rx()
|
|
kernel panic: corrupted stack end in inet6_ioctl
net
|
|
|
|
1 |
303d |
302d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
INFO: rcu detected stall in mld_ifc_work
net
|
C |
inconclusive |
|
1 |
587d |
587d
|
24/25 |
211d |
5740d0689096
net: sched: limit TC_ACT_REPEAT loops
|
|
WARNING: refcount bug in u32_destroy_key
net
|
|
|
|
1 |
529d |
529d
|
24/25 |
211d |
3db09e762dc7
net/sched: cls_u32: fix netns refcount changes in u32_change()
|
|
KASAN: use-after-free Read in ip_mc_sf_allow
net
|
|
|
|
1 |
513d |
513d
|
24/25 |
211d |
dba5bdd57bea
net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
|
|
general protection fault in fq_codel_enqueue (3)
net
|
C |
inconclusive |
|
5 |
448d |
694d
|
24/25 |
211d |
fd1894224407
bpf: Don't redirect packets with invalid pkt_len
|
|
KCSAN: data-race in fib_alias_hw_flags_set / fib_alias_hw_flags_set
net
|
|
|
|
1 |
588d |
586d
|
24/25 |
211d |
9fcf986cc4bc
ipv4: fix data races in fib_alias_hw_flags_set
|
|
INFO: trying to register non-static key in __fib6_clean_all (2)
net
|
|
|
|
3 |
347d |
372d
|
24/25 |
211d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
WARNING: bad unlock balance in rxrpc_do_sendmsg
afs
net
|
C |
inconclusive |
|
14 |
416d |
621d
|
24/25 |
211d |
b0f571ecd794
rxrpc: Fix locking in rxrpc's sendmsg
|
|
memory leak in tun_chr_open
net
|
C |
|
|
1 |
380d |
380d
|
24/25 |
211d |
1118b2049d77
net: tun: Fix memory leaks of napi_get_frags
|
|
general protection fault in udpv6_sendmsg
net
|
C |
error |
|
69 |
307d |
317d
|
24/25 |
211d |
6423ac2eb31e
rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket
|
|
WARNING in ieee80211_ibss_csa_beacon
net
wireless
|
C |
error |
|
4997 |
211d |
1080d
|
24/25 |
211d |
15bc8966b6d3
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
|
|
KASAN: slab-out-of-bounds Read in decrypt_internal
net
|
C |
inconclusive |
done |
4 |
533d |
623d
|
24/25 |
211d |
9381fe8c849c
net/tls: fix slab-out-of-bounds bug in decrypt_internal
|
|
WARNING in ipvlan_unregister_nf_hook
net
|
C |
done |
done |
4151 |
659d |
1296d
|
24/25 |
368d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
general protection fault in sock_close
net
|
syz |
done |
unreliable |
2 |
1121d |
1118d
|
22/25 |
485d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING in dev_change_net_namespace
net
|
syz |
done |
done |
8 |
671d |
1320d
|
22/25 |
491d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
WARNING in rtnl_dellink
net
|
C |
done |
done |
94 |
618d |
1130d
|
22/25 |
498d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
INFO: task hung in linkwatch_event (2)
net
|
C |
done |
done |
1033 |
516d |
1242d
|
22/25 |
498d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
general protection fault in xfrm_user_rcv_msg_compat
net
|
C |
unreliable |
done |
1543 |
779d |
991d
|
22/25 |
498d |
4e9505064f58
net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
|
|
WARNING in dst_release (3)
net
|
|
|
|
3 |
567d |
647d
|
22/25 |
564d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
KCSAN: data-race in __neigh_event_send / ip_finish_output2 (3)
net
|
|
|
|
1 |
700d |
698d
|
22/25 |
564d |
d18785e21386
net: annotate data-race in neigh_output()
|
|
general protection fault in unregister_vlan_dev
net
|
|
|
|
1 |
662d |
662d
|
22/25 |
564d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
memory leak in reg_copy_regd
net
wireless
|
C |
|
|
1 |
797d |
793d
|
22/25 |
564d |
e53e9828a8d2
cfg80211: always free wiphy specific regdomain
|
|
KASAN: null-ptr-deref Write in dst_release (3)
net
|
|
|
|
2 |
646d |
646d
|
22/25 |
564d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
KCSAN: data-race in bond_alb_init_slave / bond_alb_monitor
net
|
|
|
|
1 |
662d |
661d
|
22/25 |
564d |
dac8e00fb640
bonding: make tx_rebalance_counter an atomic
|
|
KMSAN: kernel-infoleak in _copy_to_iter (6)
net
|
C |
|
|
748 |
564d |
653d
|
22/25 |
564d |
71ddeac8cd1d
inet_diag: fix kernel-infoleak for UDP sockets
|
|
WARNING: ODEBUG bug in qdisc_create
net
|
C |
done |
|
6 |
732d |
760d
|
22/25 |
564d |
a56d447f196f
net/sched: sch_taprio: properly cancel timer from taprio_destroy()
|
|
WARNING: suspicious RCU usage in xfrm_set_default
net
|
C |
done |
|
20 |
726d |
731d
|
22/25 |
564d |
93ec1320b017
xfrm: fix rcu lock in xfrm_notify_userpolicy()
|
|
WARNING: refcount bug in rx_queue_release
net
|
|
|
|
12 |
666d |
680d
|
22/25 |
564d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
kmsan boot error: KMSAN: uninit-value in tcp_child_process
net
|
|
|
|
48 |
649d |
660d
|
22/25 |
564d |
03cfda4fa6ea
tcp: fix another uninit-value (sk_rx_queue_mapping)
|
|
kmsan boot error: KMSAN: uninit-value in tcp_conn_request
net
|
|
|
|
27 |
662d |
662d
|
22/25 |
564d |
a37a0ee4d25c
net: avoid uninit-value from tcp_conn_request
|
|
KCSAN: data-race in netlink_insert / netlink_sendmsg (4)
net
|
|
|
|
88 |
716d |
797d
|
22/25 |
564d |
7707a4d01a64
netlink: annotate data races around nlk->bound
|
|
BUG: sleeping function called from invalid context in ref_tracker_alloc
net
|
|
|
|
1 |
647d |
647d
|
22/25 |
564d |
8b40a9d53d4f
ipv6: use GFP_ATOMIC in rt6_probe()
|
|
general protection fault in gro_cells_destroy (2)
net
|
|
|
|
2 |
617d |
633d
|
22/25 |
564d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
KASAN: null-ptr-deref Write in sock_setsockopt
net
|
C |
|
|
45 |
581d |
689d
|
22/25 |
564d |
d00c8ee31729
net: fix possible NULL deref in sock_reserve_memory
|
|
WARNING: refcount bug in ip6gre_exit_batch_net
net
|
|
|
|
2 |
675d |
676d
|
22/25 |
564d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
KASAN: use-after-free Read in netlbl_catmap_walk
net
lsm
|
C |
inconclusive |
|
1 |
759d |
759d
|
22/25 |
564d |
0817534ff9ea
smackfs: Fix use-after-free in netlbl_catmap_walk()
|
|
general protection fault in bpf_skb_cgroup_id
bpf
net
|
C |
inconclusive |
|
107 |
720d |
735d
|
22/25 |
564d |
435b08ec0094
bpf, test, cgroup: Use sk_{alloc,free} for test cases
|
|
general protection fault in inet_csk_accept
net
|
C |
done |
|
8 |
653d |
652d
|
22/25 |
564d |
b0cdc5dbcf2b
mptcp: never allow the PM to close a listener subflow
|
|
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy (2)
net
wireless
|
C |
unreliable |
|
38 |
628d |
893d
|
22/25 |
564d |
8b5cb7e41d9d
mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
|
|
KASAN: use-after-free Read in tcp_v4_early_demux
net
|
|
|
|
1 |
645d |
645d
|
22/25 |
564d |
8f905c0e7354
inet: fully convert sk->sk_rx_dst to RCU rules
|
|
INFO: task hung in disconnect_work
net
wireless
|
C |
inconclusive |
done |
3 |
674d |
949d
|
22/25 |
564d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
KCSAN: data-race in unix_inflight / wait_for_unix_gc (3)
net
|
|
|
|
1 |
631d |
617d
|
22/25 |
564d |
9d6d7f1cb67c
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
|
|
KASAN: use-after-free Read in cipso_v4_doi_add
lsm
net
|
|
|
|
1 |
708d |
704d
|
22/25 |
564d |
0934ad42bb2c
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
|
|
KASAN: invalid-free in packet_set_ring
net
|
C |
inconclusive |
|
4 |
650d |
650d
|
22/25 |
564d |
ec6af094ea28
net/packet: rx_owner_map depends on pg_vec
|
|
general protection fault in bpf_skb_ancestor_cgroup_id
bpf
net
|
C |
unreliable |
|
232 |
719d |
735d
|
22/25 |
564d |
435b08ec0094
bpf, test, cgroup: Use sk_{alloc,free} for test cases
|
|
INFO: rcu detected stall in fq_pie_timer
net
|
C |
error |
|
35 |
604d |
822d
|
22/25 |
564d |
61c2402665f1
net/sched: fq_pie: prevent dismantle issue
|
|
WARNING: refcount bug in netdev_run_todo
net
|
|
|
|
5 |
666d |
675d
|
22/25 |
564d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
general protection fault in free_percpu
net
|
syz |
unreliable |
done |
80 |
631d |
898d
|
22/25 |
564d |
158b515f703e
tun: avoid double free in tun_free_netdev
|
|
WARNING: lock held when returning to user space in tcp_setsockopt (2)
net
|
C |
done |
done |
6 |
637d |
643d
|
22/25 |
564d |
b29fcfb54cd7
mptcp: full disconnect implementation
|
|
WARNING in tcf_chain0_head_change_cb_del (3)
net
|
C |
inconclusive |
|
107 |
647d |
783d
|
22/25 |
564d |
ab443c539167
sch_cake: do not call cake_destroy() from cake_init()
|
|
general protection fault in sock_release (2)
net
|
|
|
|
1 |
651d |
651d
|
22/25 |
564d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
WARNING in ieee80211_parse_tx_radiotap
net
wireless
|
|
|
|
2 |
740d |
739d
|
22/25 |
564d |
13cb6d826e0a
mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
|
|
BUG: unable to handle kernel paging request in dev_fetch_sw_netstats
net
|
|
|
|
1 |
643d |
643d
|
22/25 |
564d |
158b515f703e
tun: avoid double free in tun_free_netdev
|
|
WARNING in free_netdev
net
|
|
|
|
4080 |
578d |
620d
|
22/25 |
564d |
fcfb894d5952
net: bridge: fix net device refcount tracking issue in error path
|
|
WARNING in nsim_dev_reload_destroy
net
|
C |
done |
|
2895 |
695d |
700d
|
22/25 |
564d |
fb9d19c2d844
Revert "devlink: Remove not-executed trap group notifications"
|
|
KASAN: use-after-free Read in free_netdev (2)
net
|
C |
done |
done |
1715 |
662d |
1296d
|
22/25 |
564d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
WARNING: refcount bug in linkwatch_do_dev
net
|
|
|
|
74 |
657d |
684d
|
22/25 |
564d |
123e495ecc25
net: linkwatch: be more careful about dev->linkwatch_dev_tracker
|
|
general protection fault in tls_init
net
|
|
|
|
1 |
664d |
658d
|
22/25 |
564d |
404cd9a22150
mptcp: remove tcp ulp setsockopt support
|
|
KMSAN: uninit-value in ieee80211_sta_tx_notify (2)
net
wireless
|
|
|
|
283 |
582d |
672d
|
22/25 |
564d |
d5e568c3a4ec
mac80211: track only QoS data frames for admission control
|
|
WARNING: refcount bug in in_dev_finish_destroy (2)
net
|
|
|
|
42 |
665d |
680d
|
22/25 |
564d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
general protection fault in smc_pnet_add
net
s390
|
|
|
|
578 |
564d |
619d
|
22/25 |
564d |
7b9b1d449a7c
net/smc: fix possible NULL deref in smc_pnet_add_eth()
|
|
WARNING in __put_net
net
|
|
|
|
5215 |
607d |
620d
|
22/25 |
564d |
cb963a19d99f
net: sched: do not allocate a tracker in tcf_exts_init()
|
|
KCSAN: data-race in skb_queue_tail / unix_dgram_poll (4)
net
|
|
|
|
2 |
741d |
747d
|
22/25 |
564d |
04f08eb44b50
net/af_unix: fix a data-race in unix_dgram_poll
|
|
UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
net
|
C |
unreliable |
|
5660 |
722d |
1020d
|
22/25 |
564d |
b193e15ac69d
net: prevent user from passing illegal stab size
|
|
WARNING in ieee80211_vif_release_channel (2)
net
wireless
|
C |
done |
|
5 |
639d |
642d
|
22/25 |
564d |
87a270625a89
mac80211: fix locking in ieee80211_start_ap error path
|
|
general protection fault in dev_get_by_index_rcu (2)
bpf
net
|
C |
error |
|
18 |
624d |
624d
|
22/25 |
564d |
382778edc826
xdp: check prog type before updating BPF link
|
|
WARNING in __dev_set_promiscuity
net
|
C |
done |
|
11 |
725d |
728d
|
22/25 |
564d |
a5b8fd657881
net: dev_addr_list: handle first address in __hw_addr_add_ex
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
usb
net
|
C |
done |
|
28 |
639d |
653d
|
22/25 |
564d |
744451c162a5
Bluetooth: hci_sync: Push sync command cancellation to workqueue
|
|
UBSAN: array-index-out-of-bounds in llc_sap_add_socket
net
|
|
|
|
1 |
689d |
689d
|
22/25 |
564d |
8ac9dfd58b13
llc: fix out-of-bound array index in llc_sk_dev_hash()
|
|
net-next test error: WARNING in devlink_nl_region_notify
net
|
|
|
|
24 |
724d |
721d
|
22/25 |
564d |
ef91abfb20c7
devlink: Add missed notifications iterators
|
|
KCSAN: data-race in fib_create_info / free_fib_info
net
|
|
|
|
1 |
637d |
617d
|
22/25 |
564d |
0a6e6b3c7db6
ipv4: update fib_info_cnt under spinlock protection
|
|
BUG: sleeping function called from invalid context in tipc_crypto_start
net
|
C |
done |
done |
6 |
642d |
648d
|
22/25 |
564d |
f845fe5819ef
Revert "tipc: use consistent GFP flags"
|
|
general protection fault in ref_tracker_alloc
net
|
C |
done |
|
679 |
620d |
648d
|
22/25 |
564d |
0976b888a150
ethtool: fix null-ptr-deref on ref tracker
|
|
WARNING: suspicious RCU usage in ref_tracker_alloc
net
|
|
|
|
17 |
646d |
648d
|
22/25 |
564d |
8b40a9d53d4f
ipv6: use GFP_ATOMIC in rt6_probe()
|
|
KMSAN: uninit-value in p9pdu_readf
net
v9fs
|
|
|
|
14 |
599d |
713d
|
22/25 |
564d |
27eb4c3144f7
9p/net: fix missing error check in p9_check_errors
|
|
UBSAN: shift-out-of-bounds in qfq_init_qdisc
net
|
|
|
|
1 |
629d |
629d
|
22/25 |
564d |
7d18a07897d0
sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
|
|
KMSAN: uninit-value in pneigh_fill_info
net
|
C |
|
|
14 |
651d |
656d
|
22/25 |
564d |
e195e9b5dee6
net, neigh: clear whole pneigh_entry at alloc time
|
|
KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit (5)
net
|
|
|
|
1 |
670d |
669d
|
22/25 |
564d |
7a10d8c810cf
net: annotate data-races on txq->xmit_lock_owner
|
|
WARNING in chnl_net_uninit (2)
net
|
|
|
|
1 |
741d |
741d
|
22/25 |
564d |
550ac9c1aaaa
net-caif: avoid user-triggerable WARN_ON(1)
|
|
INFO: rcu detected stall in ieee80211_tasklet_handler
net
wireless
|
C |
error |
done |
74 |
727d |
1008d
|
22/25 |
564d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
|
general protection fault in nfc_alloc_send_skb
net
nfc
|
C |
done |
|
2 |
631d |
626d
|
22/25 |
564d |
dded08927ca3
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
|
|
BUG: unable to handle kernel NULL pointer dereference in fifo_set_limit
net
|
C |
error |
|
1 |
723d |
723d
|
22/25 |
564d |
560ee196fe9e
net_sched: fix NULL deref in fifo_set_limit()
|
|
possible deadlock in smc_switch_to_fallback
s390
net
|
|
|
|
43575 |
653d |
672d
|
22/25 |
564d |
7a61432dc813
net/smc: Avoid warning of possible recursive locking
|
|
WARNING in rtnl_stats_get
net
|
C |
unreliable |
|
31 |
691d |
880d
|
22/25 |
564d |
0854a0513321
net: bridge: fix under estimation in br_get_linkxstats_size()
|
|
kernel BUG at net/phonet/socket.c:LINE!
net
|
C |
inconclusive |
|
168 |
641d |
1261d
|
22/25 |
564d |
75a2f3152009
phonet/pep: refuse to enable an unbound pipe
|
|
KCSAN: data-race in __inet_hash_connect / inet_getname
net
|
|
|
|
1 |
723d |
697d
|
22/25 |
564d |
9dfc685e0262
inet: remove races in inet{6}_getname()
|
|
KMSAN: uninit-value in fib_get_nhs
net
|
C |
|
|
14 |
582d |
653d
|
22/25 |
564d |
7a3429bace0e
ipv4: Check attribute length for RTA_GATEWAY in multipath route
|
|
WARNING in sk_stream_kill_queues (7)
net
|
C |
|
|
6689 |
564d |
682d
|
22/25 |
564d |
c4777efa751d
net: add and use skb_unclone_keeptruesize() helper
|
|
KASAN: use-after-free Read in vlan_dev_real_dev (2)
net
|
C |
error |
|
7 |
700d |
712d
|
22/25 |
564d |
563bcbae3ba2
net: vlan: fix a UAF in vlan_dev_real_dev()
|
|
WARNING in cache_grow_begin
net
|
|
|
|
2 |
611d |
611d
|
22/25 |
564d |
c12837d1bb31
ref_tracker: use __GFP_NOFAIL more carefully
|
|
UBSAN: shift-out-of-bounds in xfrm_get_default
net
|
C |
done |
|
104 |
715d |
754d
|
22/25 |
564d |
3c10ffddc61f
net: xfrm: fix shift-out-of-bounds in xfrm_get_default
|
|
WARNING in ref_tracker_free
net
|
C |
done |
|
14831 |
621d |
648d
|
22/25 |
564d |
123e495ecc25
net: linkwatch: be more careful about dev->linkwatch_dev_tracker
|
|
KMSAN: uninit-value in _ieee802_11_parse_elems_crc
net
wireless
|
|
|
|
1 |
658d |
652d
|
22/25 |
564d |
768c0b19b506
mac80211: validate extended element ID is present
|
|
inconsistent lock state in netlink_broadcast_filtered
net
|
|
|
|
1 |
697d |
697d
|
22/25 |
564d |
f941eadd8d6d
bpf: Avoid races in __bpf_prog_run() for 32bit arches
|
|
WARNING in gnet_stats_add_basic
net
|
C |
done |
|
14 |
704d |
705d
|
22/25 |
564d |
e22db7bd552f
net: sched: Allow statistics reads from softirq.
|
|
BUG: corrupted list in netif_napi_add
net
|
syz |
unreliable |
done |
17 |
678d |
710d
|
22/25 |
564d |
0315a075f134
net: fix premature exit from NAPI state polling in napi_disable()
|
|
INFO: task can't die in __cond_resched
net
|
C |
error |
|
66 |
678d |
733d
|
22/25 |
564d |
e9edc188fc76
netfilter: conntrack: serialize hash resizes and cleanups
|
|
general protection fault in ref_tracker_free
net
|
|
|
|
21 |
623d |
647d
|
22/25 |
564d |
123e495ecc25
net: linkwatch: be more careful about dev->linkwatch_dev_tracker
|
|
BUG: unable to handle kernel NULL pointer dereference in unix_shutdown
net
|
C |
unreliable |
|
413 |
760d |
763d
|
22/25 |
607d |
d359902d5c35
af_unix: Fix NULL pointer bug in unix_shutdown
|
|
KASAN: use-after-free Read in cipso_v4_genopt
lsm
net
|
C |
inconclusive |
|
5 |
934d |
935d
|
22/25 |
682d |
ad5d07f4a9cd
cipso,calipso: resolve a number of problems with the DOI refcounts
1165affd4848
net: mac802154: Fix general protection fault
|
|
WARNING in idr_get_next
arm-msm
net
|
C |
error |
done |
21 |
873d |
1118d
|
22/25 |
682d |
3cbf7530a163
qrtr: Convert qrtr_ports from IDR to XArray
|
|
KASAN: null-ptr-deref Read in phy_disconnect
net
usb
|
C |
|
|
255 |
749d |
753d
|
22/25 |
682d |
1406e8cb4b05
net: usb: asix: do not call phy_disconnect() for ax88178
|
|
KMSAN: uninit-value in hsr_fill_frame_info
net
|
C |
|
|
249 |
799d |
1097d
|
22/25 |
682d |
2e9f60932a2c
net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
|
|
WARNING: refcount bug in ip6_tnl_dev_uninit
net
|
C |
done |
|
16 |
905d |
910d
|
22/25 |
682d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
KASAN: slab-out-of-bounds Read in fq_pie_qdisc_enqueue
net
|
|
|
|
1 |
822d |
822d
|
22/25 |
682d |
e70f7a11876a
net/sched: fq_pie: fix OOB access in the traffic path
|
|
WARNING: suspicious RCU usage in do_ipv6_setsockopt
net
|
|
|
|
1 |
908d |
908d
|
22/25 |
682d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
memory leak in garp_request_join
net
|
C |
|
|
414 |
812d |
1335d
|
22/25 |
682d |
42ca63f98084
net/802/garp: fix memleak in garp_request_join()
|
|
KMSAN: uninit-value in virtio_net_hdr_to_skb
net
|
C |
|
|
325 |
800d |
859d
|
22/25 |
682d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
WARNING in ethnl_default_doit
net
|
|
|
|
202 |
826d |
833d
|
22/25 |
682d |
e175aef90269
ethtool: strset: fix message length calculation
|
|
KASAN: use-after-free Write in qdisc_class_hash_insert (2)
net
|
|
|
|
1 |
826d |
826d
|
22/25 |
682d |
0cd58e5c53ba
pkt_sched: sch_qfq: fix qfq_change_class() error path
|
|
KCSAN: data-race in igmp_ifc_event / igmp_ifc_timer_expire
net
|
|
|
|
1 |
776d |
775d
|
22/25 |
682d |
4a2b285e7e10
net: igmp: fix data-race in igmp_ifc_timer_expire()
|
|
kernel BUG in llc_sap_action_send_xid_c
net
|
C |
error |
|
61 |
683d |
897d
|
22/25 |
682d |
c7c9d2102c9c
net: llc: fix skb_over_panic
|
|
BUG: unable to handle kernel NULL pointer dereference in htb_select_queue
net
|
syz |
done |
|
8 |
913d |
928d
|
22/25 |
682d |
fb3a3e37de33
sch_htb: Fix offload cleanup in htb_destroy on htb_init failure
93bde210c434
sch_htb: Fix select_queue for non-offload mode
|
|
KCSAN: data-race in packet_do_bind / packet_sendmsg (3)
net
|
|
|
|
1 |
842d |
838d
|
22/25 |
682d |
c7d2ef5dd4b0
net/packet: annotate accesses to po->bind
|
|
WARNING: suspicious RCU usage in do_recvmmsg
net
|
|
|
|
8 |
835d |
861d
|
22/25 |
682d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: use-after-free Write in sk_psock_stop
bpf
net
|
syz |
done |
|
74 |
881d |
900d
|
22/25 |
682d |
aadb2bb83ff7
sock_map: Fix a potential use-after-free in sock_map_close()
|
|
KCSAN: data-race in unix_dgram_sendmsg / unix_release_sock
net
|
|
|
|
1 |
832d |
831d
|
22/25 |
682d |
a494bd642d91
net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
|
|
INFO: rcu detected stall in wg_packet_tx_worker (3)
net
|
C |
inconclusive |
|
5 |
768d |
750d
|
22/25 |
682d |
c7c5e6ff533f
fq_codel: reject silly quantum parameters
|
|
KCSAN: data-race in inet_dgram_connect / udp_lib_get_port (5)
net
|
|
|
|
6 |
848d |
835d
|
22/25 |
682d |
dcd01eeac144
inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
|
|
WARNING: refcount bug in vti6_dev_uninit
net
|
C |
|
|
26 |
905d |
910d
|
22/25 |
682d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
general protection fault in unix_dgram_connect
net
|
C |
done |
|
2 |
757d |
757d
|
22/25 |
682d |
dc56ad7028c5
af_unix: fix potential NULL deref in unix_dgram_connect()
|
|
memory leak in xfrm_user_rcv_msg
net
|
C |
|
|
1 |
827d |
823d
|
22/25 |
682d |
7c1a80e80cde
net: xfrm: fix memory leak in xfrm_user_rcv_msg
|
|
KMSAN: uninit-value in INET_ECN_decapsulate (2)
net
|
|
|
|
2 |
837d |
907d
|
22/25 |
682d |
6628ddfec758
net: geneve: check skb is large enough for IPv4/IPv6 header
|
|
KCSAN: data-race in sock_alloc_send_pskb / unix_release_sock (5)
net
|
|
|
|
47 |
683d |
835d
|
22/25 |
682d |
f13ef10059cc
net: annotate data race in sock_error()
|
|
divide error in __tcp_select_window (2)
net
|
C |
done |
|
4 |
896d |
898d
|
22/25 |
682d |
a7150e382267
Revert "tcp: Reset tcp connections in SYN-SENT state"
|
|
KMSAN: uninit-value in ip_rcv_core
net
|
C |
|
|
141 |
799d |
1833d
|
22/25 |
682d |
6628ddfec758
net: geneve: check skb is large enough for IPv4/IPv6 header
|
|
WARNING in slave_kobj_release
net
|
C |
done |
|
3 |
860d |
949d
|
22/25 |
682d |
35d96e631860
bonding: init notify_work earlier to avoid uninitialized use
|
|
linux-next boot error: KASAN: use-after-free Read in page_to_skb
net
virt
|
|
|
|
7 |
885d |
887d
|
22/25 |
682d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
KASAN: use-after-free Read in eth_header_parse_protocol
net
|
C |
done |
|
1453 |
881d |
927d
|
22/25 |
682d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
KCSAN: data-race in udp_lib_setsockopt / udpv6_sendmsg
net
|
|
|
|
1 |
817d |
816d
|
22/25 |
682d |
18a419bad63b
udp: annotate data races around unix_sk(sk)->gso_size
|
|
WARNING: suspicious RCU usage in nf_ct_iterate_cleanup (2)
net
|
|
|
|
4 |
812d |
871d
|
22/25 |
682d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: refcount bug in ip6gre_tunnel_uninit
net
|
C |
error |
|
10 |
907d |
910d
|
22/25 |
682d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
KCSAN: data-race in inet_send_prepare / udp_lib_get_port (3)
net
|
|
|
|
4 |
835d |
838d
|
22/25 |
682d |
dcd01eeac144
inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
|
|
KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
net
|
|
|
|
2 |
860d |
879d
|
22/25 |
682d |
821bbf79fe46
ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
|
|
WARNING in ieee80211_get_sband
net
wireless
|
C |
done |
|
7 |
850d |
1076d
|
22/25 |
682d |
0ee4d55534f8
mac80211: remove warning in ieee80211_get_sband()
|
|
BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc
arm-msm
net
|
C |
done |
done |
544 |
868d |
1205d
|
22/25 |
682d |
3cbf7530a163
qrtr: Convert qrtr_ports from IDR to XArray
|
|
general protection fault in smc_tx_sendmsg
net
s390
|
C |
done |
|
6369 |
816d |
824d
|
22/25 |
682d |
17081633e22d
net/smc: Ensure correct state of the socket in send path
|
|
KCSAN: data-race in packet_do_bind / packet_getname (5)
net
|
|
|
|
4 |
830d |
830d
|
22/25 |
682d |
e032f7c9c7ce
net/packet: annotate accesses to po->ifindex
|
|
memory leak in qrtr_create
arm-msm
net
|
C |
|
|
3 |
786d |
957d
|
22/25 |
682d |
52f3456a96c0
net: qrtr: fix memory leaks
|
|
memory leak in virtio_transport_send_pkt_info
net
|
C |
|
|
2 |
894d |
957d
|
22/25 |
682d |
8432b8114957
vsock/virtio: free queued packets when closing socket
|
|
possible deadlock in ieee80211_tx_frags
net
|
|
|
|
1 |
883d |
875d
|
22/25 |
682d |
1d482e666b8e
netlink: disable IRQs for netlink_lock_table()
|
|
KCSAN: data-race in __inet_hash_connect / inet_send_prepare (4)
net
|
|
|
|
7 |
832d |
835d
|
22/25 |
682d |
dcd01eeac144
inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
|
|
UBSAN: shift-out-of-bounds in choke_change (2)
net
|
C |
done |
|
7 |
897d |
913d
|
22/25 |
682d |
3a87571f0ffc
sch_red: fix off-by-one checks in red_check_params()
|
|
UBSAN: shift-out-of-bounds in xprt_calc_majortimeo
net
nfs
|
C |
unreliable |
|
149 |
883d |
1012d
|
22/25 |
682d |
c09f11ef3595
NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
|
|
INFO: rcu detected stall in tx
net
|
C |
error |
unreliable |
3 |
749d |
887d
|
22/25 |
682d |
30fad76ce4e9
USB: usbtmc: Fix RCU stall warning
|
|
WARNING: lock held when returning to user space in sock_setsockopt
net
|
|
|
|
1 |
809d |
809d
|
22/25 |
682d |
271dbc318432
sock: unlock on error in sock_setsockopt()
|
|
WARNING: suspicious RCU usage in inet_twsk_purge
net
|
|
|
|
10 |
805d |
907d
|
22/25 |
682d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
general protection fault in kcm_sendmsg
net
|
C |
done |
|
7957 |
816d |
838d
|
22/25 |
682d |
a47c397bb29f
revert "net: kcm: fix memory leak in kcm_sendmsg"
|
|
WARNING in sk_stream_kill_queues (6)
net
|
C |
|
|
11376 |
682d |
897d
|
22/25 |
682d |
144748eb0c44
bpf, sockmap: Fix incorrect fwd_alloc accounting
|
|
linux-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
net
virt
|
|
|
|
5 |
885d |
886d
|
22/25 |
682d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
BUG: MAX_LOCKDEP_CHAINS too low! (2)
net
|
C |
error |
|
84838 |
682d |
1159d
|
22/25 |
682d |
5dc33592e955
lockdep: Allow tuning tracing capacity constants.
|
|
memory leak in cfserl_create
net
|
C |
|
|
13 |
1401d |
1571d
|
22/25 |
682d |
b53558a950a8
net: caif: fix memory leak in caif_device_notify
|
|
UBSAN: shift-out-of-bounds in red_adaptative_timer (2)
net
|
|
|
|
28 |
912d |
927d
|
22/25 |
682d |
e323d865b361
net: sched: validate stab values
|
|
memory leak in radix_tree_insert
arm-msm
net
|
C |
|
|
1 |
907d |
907d
|
22/25 |
682d |
8a03dd925786
net: qrtr: Fix memory leak on qrtr_tx_wait failure
|
|
KASAN: use-after-free Read in nfc_llcp_put_ssap
net
nfc
|
syz |
done |
|
4 |
868d |
875d
|
22/25 |
682d |
c61760e6940d
net/nfc: fix use-after-free llcp_sock_bind/connect
|
|
WARNING: suspicious RCU usage in tcp_bpf_update_proto
bpf
net
|
C |
done |
|
539 |
880d |
900d
|
22/25 |
682d |
51e0158a5432
skmsg: Pass psock pointer to ->psock_update_sk_prot()
|
|
KCSAN: data-race in __ip4_datagram_connect / skb_set_owner_w (2)
net
|
|
|
|
1 |
847d |
835d
|
22/25 |
682d |
b71eaed8c04f
inet: annotate date races around sk->sk_txhash
|
|
WARNING: suspicious RCU usage in __copy_msghdr_from_user
net
|
|
|
|
1 |
848d |
848d
|
22/25 |
682d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
BUG: MAX_STACK_TRACE_ENTRIES too low! (3)
net
|
|
|
|
2 |
885d |
886d
|
22/25 |
682d |
5dc33592e955
lockdep: Allow tuning tracing capacity constants.
|
|
BUG: sleeping function called from invalid context in __ipv6_dev_mc_dec
net
|
C |
done |
|
21 |
815d |
873d
|
22/25 |
682d |
a100243d95a6
rtnetlink: avoid RCU read lock when holding RTNL
|
|
WARNING: refcount bug in in_dev_finish_destroy
net
|
C |
unreliable |
|
463 |
683d |
910d
|
22/25 |
682d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
KMSAN: uninit-value in validate_beacon_head
wireless
net
|
C |
|
|
284 |
801d |
1029d
|
22/25 |
682d |
9a6847ba1747
nl80211: fix beacon head validation
|
|
WARNING in macvlan_process_broadcast
net
|
|
|
|
32053 |
682d |
927d
|
22/25 |
682d |
dd4fa1dae9f4
macvlan: macvlan_count_rx() needs to be aware of preemption
|
|
WARNING: suspicious RCU usage in vxlan_xmit
net
|
C |
error |
|
1 |
824d |
824d
|
22/25 |
682d |
85e8b032d6eb
vxlan: add missing rcu_read_lock() in neigh_reduce()
|
|
linux-next boot error: WARNING: refcount bug in fib_create_info
net
|
|
|
|
3 |
781d |
781d
|
22/25 |
682d |
28814cd18cd7
ipv4: Fix refcount warning for new fib_info
|
|
possible deadlock in br_ioctl_call
net
|
C |
unreliable |
|
4161 |
773d |
783d
|
22/25 |
682d |
893b19587534
net: bridge: fix ioctl locking
|
|
BUG: sleeping function called from invalid context in _copy_to_iter
net
|
C |
done |
|
60 |
768d |
775d
|
22/25 |
682d |
876c14ad014d
af_unix: fix holding spinlock in oob handling
|
|
UBSAN: array-index-out-of-bounds in taprio_change
net
|
|
|
|
2 |
766d |
774d
|
22/25 |
682d |
efe487fce306
fix array-index-out-of-bounds in taprio_change
|
|
memory leak in tcindex_set_parms
net
|
C |
|
|
94 |
841d |
1327d
|
22/25 |
682d |
f5051bcece50
net: sched: fix memory leak in tcindex_partial_destroy_work
|
|
general protection fault in sock_from_file
net
io-uring
|
C |
inconclusive |
|
78 |
747d |
754d
|
22/25 |
682d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
KCSAN: data-race in __skb_try_recv_datagram / sock_setsockopt
net
|
|
|
|
1 |
817d |
817d
|
22/25 |
682d |
0dbffbb5335a
net: annotate data race around sk_ll_usec
|
|
WARNING: ODEBUG bug in net_dm_cmd_trace
net
|
syz |
unreliable |
|
2 |
933d |
929d
|
22/25 |
682d |
9398e9c0b1d4
drop_monitor: Perform cleanup upon probe registration failure
|
|
net-next boot error: WARNING: refcount bug in fib_create_info
net
|
|
|
|
39 |
782d |
781d
|
22/25 |
682d |
28814cd18cd7
ipv4: Fix refcount warning for new fib_info
|
|
UBSAN: shift-out-of-bounds in gred_enqueue
net
|
|
|
|
1 |
920d |
920d
|
22/25 |
682d |
e323d865b361
net: sched: validate stab values
|
|
WARNING in xfrm_alloc_compat (2)
net
|
C |
done |
|
47 |
898d |
908d
|
22/25 |
682d |
ef19e111337f
xfrm/compat: Cleanup WARN()s that can be user-triggered
|
|
KMSAN: uninit-value in caif_seqpkt_sendmsg
net
|
C |
|
|
2365 |
729d |
1146d
|
22/25 |
682d |
991e634360f2
net: fix uninit-value in caif_seqpkt_sendmsg
|
|
memory leak in mrp_request_join
net
|
C |
|
|
215 |
822d |
1341d
|
22/25 |
682d |
996af62167d0
net/802/mrp: fix memleak in mrp_request_join()
|
|
net-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
net
virt
|
|
|
|
15 |
885d |
889d
|
22/25 |
682d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
general protection fault in bond_ipsec_add_sa (2)
net
|
|
|
|
1 |
810d |
810d
|
22/25 |
682d |
105cd17a8660
bonding: fix null dereference in bond_ipsec_add_sa()
|
|
memory leak in tcp_cdg_init
net
|
syz |
|
|
6 |
847d |
987d
|
22/25 |
682d |
be5d1b61a2ad
tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
|
|
WARNING: refcount bug in sk_psock_get
net
|
C |
done |
|
8 |
869d |
897d
|
22/25 |
682d |
8621436671f3
smc: disallow TCP_ULP in smc_setsockopt()
|
|
net-next boot error: KASAN: use-after-free Read in page_to_skb
virt
net
|
|
|
|
11 |
885d |
889d
|
22/25 |
682d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
WARNING: refcount bug in ipip6_tunnel_uninit
net
|
C |
done |
|
199 |
905d |
910d
|
22/25 |
682d |
6289a98f0817
sit: proper dev_{hold|put} in ndo_[un]init methods
|
|
WARNING: refcount bug in register_netdevice
net
|
C |
unreliable |
|
97 |
903d |
910d
|
22/25 |
682d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
WARNING: refcount bug in ip6erspan_tunnel_uninit
net
|
C |
error |
|
11 |
907d |
909d
|
22/25 |
682d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
UBSAN: shift-out-of-bounds in xfrm_set_default
net
|
C |
unreliable |
|
79 |
777d |
788d
|
22/25 |
682d |
5d8dbb7fb82b
net: xfrm: fix shift-out-of-bounce
|
|
possible deadlock in cfg80211_netdev_notifier_call (2)
net
wireless
|
|
|
|
2 |
855d |
866d
|
22/25 |
682d |
d5befb224edb
mac80211: fix deadlock in AP/VLAN handling
|
|
KMSAN: kernel-infoleak in _copy_to_iter (5)
net
|
C |
|
|
23883 |
791d |
1228d
|
22/25 |
682d |
08c27f3322fe
batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
|
|
WARNING: locking bug in l2tp_xmit_skb
net
|
|
|
|
1 |
872d |
872d
|
22/25 |
682d |
69e16d01d1de
net: fix a concurrency bug in l2tp_tunnel_register()
|
|
KMSAN: uninit-value in __dev_mc_add
net
|
C |
|
|
213 |
1626d |
1823d
|
22/25 |
682d |
cca8ea3b05c9
net: tun: set tun->dev->addr_len during TUNSETLINK processing
|
|
memory leak in kcm_sendmsg
net
|
C |
|
|
2 |
1178d |
1318d
|
22/25 |
682d |
c47cc304990a
net: kcm: fix memory leak in kcm_sendmsg
|
|
UBSAN: shift-out-of-bounds in qdisc_get_rtab
net
|
C |
unreliable |
done |
521 |
975d |
1020d
|
22/25 |
830d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
possible deadlock in cfg80211_netdev_notifier_call
net
wireless
|
syz |
done |
|
13 |
898d |
964d
|
22/25 |
897d |
40c575d1ec71
cfg80211: fix netdev registration deadlock
|
|
memory leak in qrtr_tun_open
arm-msm
net
|
C |
|
|
4 |
988d |
1032d
|
22/25 |
897d |
fc0494ead639
net: qrtr: Fix memory leak in qrtr_tun_open
|
|
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy
net
|
C |
|
|
115 |
900d |
1090d
|
22/25 |
897d |
396d7f23adf9
net: sched: fix police ext initialization
|
|
INFO: task hung in tcf_action_init_1
net
|
C |
done |
|
30 |
956d |
1090d
|
22/25 |
897d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
KASAN: slab-out-of-bounds Read in skb_segment
net
|
C |
error |
|
311 |
975d |
979d
|
22/25 |
897d |
00b229f762b0
net: fix GSO for SG-enabled devices
|
|
upstream test error: INFO: trying to register non-static key in nsim_get_stats64
net
|
|
|
|
381 |
928d |
970d
|
22/25 |
897d |
863a42b289c2
netdevsim: init u64 stats for 32bit hardware
|
|
INFO: task can't die in connmark_exit_net
net
|
syz |
error |
|
1 |
1019d |
1015d
|
22/25 |
897d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
linux-next test error: possible deadlock in cfg80211_netdev_notifier_call
net
wireless
|
|
|
|
6 |
968d |
969d
|
22/25 |
897d |
38ec7c6b6bd6
virt_wifi: fix deadlock on RTNL
|
|
WARNING in __alloc_skb
arm-msm
net
|
C |
error |
|
24 |
928d |
940d
|
22/25 |
897d |
093b036aa94e
net/qrtr: fix __netdev_alloc_skb call
|
|
WARNING in cfg80211_change_iface
net
wireless
|
C |
inconclusive |
|
4 |
963d |
968d
|
22/25 |
897d |
bae173563cbf
wext: call cfg80211_change_iface() with wiphy lock held
|
|
WARNING in sk_stream_kill_queues (5)
net
|
C |
done |
|
4684 |
897d |
1027d
|
22/25 |
897d |
097b9146c0e2
net: fix up truesize of cloned skb in skb_prepare_for_shift()
|
|
WARNING in cfg80211_dev_rename
net
wireless
|
C |
inconclusive |
|
22 |
962d |
968d
|
22/25 |
897d |
0391a45c8007
nl80211: call cfg80211_dev_rename() under RTNL
|
|
WARNING in _cfg80211_unregister_wdev
net
wireless
|
C |
inconclusive |
|
48 |
962d |
968d
|
22/25 |
897d |
776a39b8196d
cfg80211: call cfg80211_destroy_ifaces() with wiphy lock held
|
|
WARNING in dst_release
net
|
syz |
done |
|
2 |
949d |
948d
|
22/25 |
897d |
e0be4931f3fe
mptcp: reset last_snd on subflow close
|
|
KASAN: use-after-free Read in skb_segment
net
|
C |
error |
|
55 |
975d |
979d
|
22/25 |
897d |
00b229f762b0
net: fix GSO for SG-enabled devices
|
|
UBSAN: shift-out-of-bounds in tcf_police_init
net
|
C |
unreliable |
|
8 |
976d |
1013d
|
22/25 |
926d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
UBSAN: shift-out-of-bounds in est_timer
net
|
C |
unreliable |
|
73 |
935d |
1010d
|
22/25 |
926d |
dd5e073381f2
net_sched: gen_estimator: support large ewma log
|
|
memory leak in xskq_create
bpf
net
|
C |
|
|
7 |
993d |
1014d
|
21/25 |
927d |
8bee68338408
xsk: Fix memory leak for failed bind
|
|
BUG: sleeping function called from invalid context in corrupted
net
wireless
|
syz |
done |
|
18 |
1024d |
1048d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
UBSAN: shift-out-of-bounds in __detect_linklayer
net
|
C |
unreliable |
done |
31 |
976d |
982d
|
21/25 |
927d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
UBSAN: shift-out-of-bounds in tcindex_set_parms
net
|
C |
unreliable |
done |
45 |
976d |
1011d
|
21/25 |
927d |
bcd0cf19ef82
net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
|
|
general protection fault in taprio_dequeue_soft
net
|
C |
done |
|
2 |
1012d |
1012d
|
21/25 |
927d |
44d4775ca518
net/sched: sch_taprio: reset child qdiscs before freeing them
|
|
bpf test error: BUG: sleeping function called from invalid context in sta_info_move_state
net
wireless
|
|
|
|
6 |
1037d |
1043d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy
net
wireless
|
|
|
|
11 |
947d |
1024d
|
21/25 |
927d |
905b2032fa42
mac80211: mesh: fix mesh_pathtbl_init() error path
|
|
kernel BUG at net/core/dev.c:NUM!
net
|
C |
done |
|
35 |
981d |
983d
|
21/25 |
927d |
47e4bb147a96
net: sit: unregister_netdevice on newlink's error path
|
|
KASAN: global-out-of-bounds Read in smc_nl_get_sys_info
s390
net
|
C |
error |
|
27 |
980d |
1007d
|
21/25 |
927d |
25fe2c9c4cd2
smc: fix out of bound access in smc_nl_get_sys_info()
|
|
KASAN: use-after-free Read in decode_session6
net
|
C |
done |
|
152 |
974d |
1181d
|
21/25 |
927d |
0356010d825e
sctp: bring inet(6)_skb_parm back to sctp_input_cb
|
|
divide error in __tcp_select_window
net
|
C |
done |
|
1119 |
1031d |
1036d
|
21/25 |
927d |
fd8976790a6c
mptcp: be careful on MPTCP-level ack.
|
|
KMSAN: uninit-value in INET_ECN_decapsulate
net
|
|
|
|
3 |
994d |
1027d
|
21/25 |
927d |
4179b00c04d1
geneve: pull IP header before ECN decapsulation
|
|
UBSAN: shift-out-of-bounds in choke_enqueue
net
|
C |
inconclusive |
|
3853 |
927d |
1020d
|
21/25 |
927d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
WARNING: suspicious RCU usage in get_wiphy_regdom
net
wireless
|
C |
done |
|
5031 |
979d |
1010d
|
21/25 |
927d |
51d62f2f2c50
cfg80211: Save the regulatory domain with a lock
|
|
WARNING: suspicious RCU usage in tcp_disconnect
net
|
C |
done |
|
25 |
981d |
983d
|
21/25 |
927d |
13a9499e8333
mptcp: fix locking in mptcp_disconnect()
|
|
KMSAN: uninit-value in __nla_validate_parse (2)
net
|
C |
|
|
2 |
989d |
985d
|
21/25 |
927d |
c96adff95619
cls_flower: call nla_ok() before nla_next()
|
|
general protection fault in xsk_recvmsg
bpf
net
|
C |
done |
unreliable |
1800 |
1012d |
981d
|
21/25 |
927d |
3546b9b8eced
xsk: Validate socket state in xsk_recvmsg, prior touching socket members
|
|
UBSAN: shift-out-of-bounds in sfq_init
net
|
C |
unreliable |
|
8 |
990d |
1004d
|
21/25 |
927d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KMSAN: uninit-value in gre_parse_header
net
|
C |
|
|
9283 |
955d |
1553d
|
21/25 |
927d |
085c7c4e1c0e
erspan: fix version 1 check in gre_parse_header()
|
|
UBSAN: shift-out-of-bounds in red_adaptative_timer
net
|
C |
unreliable |
|
260 |
928d |
1020d
|
21/25 |
927d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KASAN: slab-out-of-bounds Write in xfrm_attr_cpy32
net
|
C |
done |
|
106 |
1017d |
1065d
|
21/25 |
927d |
d1949d045fd6
xfrm/compat: memset(0) 64-bit padding at right place
|
|
UBSAN: shift-out-of-bounds in __red_change
net
|
C |
unreliable |
|
24 |
930d |
1019d
|
21/25 |
927d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KASAN: use-after-free Read in rxrpc_get_skb
afs
net
|
|
|
|
1 |
975d |
971d
|
21/25 |
927d |
7b5eab57cac4
rxrpc: Fix clearance of Tx/Rx ring when releasing a call
|
|
upstream test error: BUG: sleeping function called from invalid context in sta_info_move_state
net
wireless
|
|
|
|
53 |
1038d |
1046d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
UBSAN: shift-out-of-bounds in gred_change
net
|
C |
unreliable |
|
5 |
941d |
995d
|
21/25 |
927d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
linux-next test error: BUG: sleeping function called from invalid context in sta_info_move_state
net
wireless
|
|
|
|
3 |
1048d |
1052d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
net test error: BUG: sleeping function called from invalid context in sta_info_move_state
net
wireless
|
|
|
|
4 |
1044d |
1052d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
KASAN: slab-out-of-bounds Read in smc_nl_handle_smcr_dev
s390
net
|
|
|
|
1 |
1010d |
1006d
|
21/25 |
927d |
995433b795ce
net/smc: fix access to parent of an ib device
|
|
net-next test error: BUG: sleeping function called from invalid context in sta_info_move_state
net
wireless
|
|
|
|
12 |
1037d |
1047d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
memory leak in rxrpc_lookup_local
afs
net
|
C |
|
|
1415 |
967d |
1431d
|
21/25 |
927d |
b8323f7288ab
rxrpc: Fix memory leak in rxrpc_lookup_local
|
|
WARNING: suspicious RCU usage in wiphy_apply_custom_regulatory
net
wireless
|
C |
done |
|
28 |
1011d |
1007d
|
21/25 |
927d |
51d62f2f2c50
cfg80211: Save the regulatory domain with a lock
|
|
WARNING in xfrm_alloc_compat
net
|
C |
done |
|
130 |
940d |
1062d
|
21/25 |
927d |
dbd7ae5154d5
xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
|
|
UBSAN: shift-out-of-bounds in red_enqueue
net
|
C |
unreliable |
|
4906 |
927d |
1020d
|
21/25 |
927d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KMSAN: kernel-infoleak in move_addr_to_user (4)
net
|
C |
|
|
59 |
934d |
986d
|
21/25 |
927d |
b42b3a2744b3
can: isotp: isotp_getname(): fix kernel information leak
|
|
WARNING in rhashtable_free_and_destroy
net
wireless
|
C |
error |
|
3 |
1024d |
1116d
|
21/25 |
927d |
905b2032fa42
mac80211: mesh: fix mesh_pathtbl_init() error path
|
|
BUG: sleeping function called from invalid context in sta_info_move_state
net
wireless
|
C |
done |
|
39248 |
1022d |
1054d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
UBSAN: shift-out-of-bounds in strset_parse_request
net
|
C |
done |
|
16 |
990d |
1014d
|
21/25 |
927d |
efb796f5571f
ethtool: fix string set id check
|
|
UBSAN: shift-out-of-bounds in cbq_dequeue
net
|
C |
unreliable |
|
27 |
976d |
1020d
|
21/25 |
927d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
bpf-next test error: BUG: sleeping function called from invalid context in sta_info_move_state
net
wireless
|
|
|
|
13 |
1023d |
1042d
|
21/25 |
927d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
BUG: unable to handle kernel paging request in smc_nl_handle_smcr_dev
net
s390
|
C |
|
|
16 |
996d |
1019d
|
21/25 |
927d |
995433b795ce
net/smc: fix access to parent of an ib device
|
|
KASAN: stack-out-of-bounds Write in bitmap_from_arr32
net
|
C |
done |
|
2 |
1030d |
1027d
|
21/25 |
927d |
a770bf515613
ethtool: fix stack overflow in ethnl_parse_bitset()
|
|
UBSAN: array-index-out-of-bounds in ieee80211_del_key (2)
net
wireless
|
C |
error |
|
3 |
1018d |
1027d
|
21/25 |
927d |
2d9463083ce9
nl80211: validate key indexes for cfg80211_registered_device
|
|
KASAN: use-after-free Read in rxrpc_send_data_packet
afs
net
|
|
|
|
1 |
970d |
964d
|
21/25 |
927d |
7b5eab57cac4
rxrpc: Fix clearance of Tx/Rx ring when releasing a call
|
|
KASAN: use-after-free Read in dump_schedule
net
|
C |
done |
done |
7 |
1004d |
1115d
|
21/25 |
927d |
cc00bcaa5899
netfilter: x_tables: Switch synchronization to RCU
|
|
KASAN: invalid-free in p9_client_create (2)
v9fs
net
|
C |
done |
|
3 |
969d |
969d
|
21/25 |
927d |
757fed1d0898
Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
|
|
general protection fault in wext_handle_ioctl
net
wireless
|
C |
inconclusive |
|
9 |
971d |
1060d
|
21/25 |
927d |
5122565188ba
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
|
|
KASAN: use-after-free Read in eth_type_trans
net
|
C |
done |
error |
3 |
1227d |
1370d
|
17/25 |
1004d |
96aa1b22bd6b
tun: correct header offsets in napi frags mode
|
|
BUG: MAX_LOCKDEP_KEYS too low!
net
|
C |
done |
error |
3496 |
1183d |
1427d
|
17/25 |
1018d |
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
|
memory leak in ieee80211_check_fast_xmit
net
wireless
|
C |
|
|
983 |
1050d |
1094d
|
17/25 |
1041d |
dcd479e10a05
mac80211: always wind down STA state
|
|
general protection fault in xsk_release
bpf
net
|
C |
done |
|
2 |
1093d |
1093d
|
17/25 |
1041d |
1fd17c8cd0aa
xsk: Fix possible crash in socket_release when out-of-memory
|
|
WARNING in ieee80211_s1g_channel_width
net
wireless
|
C |
done |
|
3 |
1083d |
1083d
|
17/25 |
1041d |
c1cd35c60601
cfg80211: only allow S1G channels on S1G band
|
|
KMSAN: uninit-value in ieee80211_skb_resize
net
wireless
|
C |
|
|
5 |
1069d |
1094d
|
17/25 |
1041d |
14f46c1e5108
mac80211: fix use of skb payload instead of header
|
|
KASAN: use-after-free Write in tcindex_change
net
|
C |
done |
done |
4 |
1284d |
1284d
|
17/25 |
1041d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
possible deadlock in cleanup_net
net
|
C |
done |
|
281 |
1110d |
1118d
|
17/25 |
1041d |
d966ddcc3821
tipc: fix a deadlock when flushing scheduled work
|
|
KMSAN: uninit-value in ip_tunnel_xmit (2)
net
|
C |
|
|
11778 |
1045d |
1870d
|
17/25 |
1041d |
fdafed459998
ip_gre: set dev->hard_header_len and dev->needed_headroom properly
|
|
WARNING: refcount bug in p9_req_put
net
v9fs
|
syz |
inconclusive |
done |
6 |
1220d |
1773d
|
17/25 |
1041d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
INFO: rcu detected stall in ip_list_rcv
net
|
C |
error |
done |
3 |
1089d |
1115d
|
17/25 |
1041d |
1d0e850a49a5
afs: Fix cell removal
|
|
general protection fault in tcf_generic_walker
net
|
syz |
|
|
9 |
1088d |
1090d
|
17/25 |
1041d |
580e4273d7a8
net_sched: check error pointer in tcf_dump_walker()
|
|
KMSAN: uninit-value in unix_find_other
net
|
C |
|
|
57 |
1086d |
1902d
|
17/25 |
1041d |
7ca1db21ef8e
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
|
|
INFO: task hung in ctrl_getfamily
net
|
syz |
done |
done |
22 |
1134d |
1747d
|
17/25 |
1041d |
47733f9daf4f
tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
|
|
WARNING: suspicious RCU usage in qrtr_ns_worker
arm-msm
net
|
C |
done |
|
1 |
1122d |
1185d
|
17/25 |
1041d |
a7809ff90ce6
net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
|
|
WARNING in rxrpc_recvmsg
afs
net
|
C |
error |
done |
5 |
1176d |
1176d
|
17/25 |
1041d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
KASAN: use-after-free Read in tcf_action_init
net
|
C |
done |
|
1 |
1093d |
1090d
|
17/25 |
1041d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
KASAN: slab-out-of-bounds Read in strset_parse_request
net
|
C |
error |
|
141 |
1080d |
1080d
|
17/25 |
1041d |
db972e532518
ethtool: strset: allow ETHTOOL_A_STRSET_COUNTS_ONLY attr
|
|
KASAN: stack-out-of-bounds Read in xfrm_selector_match (2)
net
|
|
|
|
1 |
1099d |
1097d
|
17/25 |
1041d |
e94ee171349d
xfrm: Use correct address family in xfrm_state_find
|
|
BUG: unable to handle kernel paging request in tcf_action_dump_terse
net
|
C |
done |
|
15 |
1084d |
1090d
|
17/25 |
1041d |
580e4273d7a8
net_sched: check error pointer in tcf_dump_walker()
|
|
INFO: task hung in lock_sock_nested (3)
net
|
C |
done |
|
5 |
1084d |
1086d
|
17/25 |
1041d |
d9fb8c507d42
mptcp: fix infinite loop on recvmsg()/worker() race.
|
|
general protection fault in ieee80211_key_free
net
wireless
|
C |
done |
|
3 |
1076d |
1081d
|
17/25 |
1041d |
3dc289f8f139
net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
|
|
kernel BUG at net/rxrpc/conn_object.c:LINE!
afs
net
|
C |
done |
|
855 |
1043d |
1108d
|
17/25 |
1041d |
546a42410bf7
rxrpc: Fix conn bundle leak in net-namespace exit
|
|
possible deadlock in dev_uc_sync
net
|
C |
done |
|
3 |
1076d |
1174d
|
17/25 |
1041d |
0e8b8d6a2d85
net: core: use list_del_init() instead of list_del() in netdev_run_todo()
|
|
general protection fault in rt6_fill_node
net
|
C |
done |
done |
3 |
1125d |
1123d
|
17/25 |
1041d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
memory leak in __team_options_register
net
|
C |
|
|
1 |
1111d |
1110d
|
17/25 |
1041d |
9a9e77495958
net: team: fix memory leak in __team_options_register
|
|
general protection fault in nexthop_is_blackhole
net
|
C |
done |
done |
1 |
1126d |
1123d
|
17/25 |
1041d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
UBSAN: array-index-out-of-bounds in ieee80211_del_key
net
wireless
|
C |
done |
|
685 |
1050d |
1094d
|
17/25 |
1041d |
3dc289f8f139
net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
|
|
KASAN: use-after-free Write in xp_put_pool
bpf
net
|
C |
done |
|
50 |
1094d |
1116d
|
17/25 |
1041d |
83cf5c68d663
xsk: Fix use-after-free in failed shared_umem bind
|
|
WARNING in nla_get_range_unsigned
net
|
C |
done |
|
63 |
1116d |
1118d
|
17/25 |
1041d |
c30a3c957c88
netlink: policy: correct validation type check
|
|
general protection fault in xsk_is_setup_for_bpf_map
net
bpf
|
C |
error |
|
294 |
1093d |
1116d
|
17/25 |
1041d |
968be23ceaca
xsk: Fix possible segfault at xskmap entry insertion
|
|
inconsistent lock state in icmp_send
net
|
syz |
done |
done |
1 |
1248d |
1746d
|
17/25 |
1041d |
1378817486d6
tipc: block BH before using dst_cache
|
|
INFO: task can't die in rtnetlink_rcv_msg
net
|
|
|
|
5 |
1081d |
1090d
|
17/25 |
1041d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
KASAN: use-after-free Write in rxrpc_put_bundle
afs
net
|
C |
done |
|
229 |
1079d |
1102d
|
17/25 |
1041d |
f3af4ad1e08a
rxrpc: Fix bundle counting for exclusive connections
|
|
KASAN: use-after-free Read in tcf_action_destroy
net
|
C |
done |
|
8 |
1083d |
1098d
|
17/25 |
1041d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
memory leak in xdp_umem_create
bpf
net
|
C |
|
|
17 |
1045d |
1065d
|
17/25 |
1041d |
e5e1a4bc916d
xsk: Fix possible memory leak at socket close
|
|
general protection fault in xsk_diag_dump (2)
bpf
net
|
C |
|
|
354 |
1098d |
1116d
|
17/25 |
1041d |
53ea2076d851
xsk: Fix possible segfault in xsk umem diagnostics
|
|
general protection fault in tcf_action_destroy (2)
net
|
C |
done |
done |
29 |
1078d |
1291d
|
17/25 |
1041d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
WARNING: suspicious RCU usage in ctrl_cmd_new_lookup
arm-msm
net
|
C |
done |
done |
10 |
1096d |
1185d
|
17/25 |
1041d |
a7809ff90ce6
net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
|
|
WARNING: suspicious RCU usage in fib6_del (2)
net
|
|
|
|
1 |
1110d |
1110d
|
17/25 |
1078d |
843d926b003e
ipv6: avoid lockdep issue in fib6_del()
|
|
KASAN: use-after-free Write in skb_queue_tail
arm-msm
net
|
|
|
|
1 |
1110d |
1110d
|
17/25 |
1078d |
3ca1a42a52ca
net: qrtr: check skb_put_padto() return value
|
|
possible deadlock in peernet2id_alloc
net
|
|
|
|
12 |
1109d |
1281d
|
17/25 |
1078d |
e1f469cd5866
Revert "netns: don't disable BHs when locking "nsid_lock""
|
|
KMSAN: uninit-value in __inet_diag_dump
net
|
C |
|
|
37 |
1080d |
1097d
|
17/25 |
1078d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
INFO: task hung in tcf_ife_init
net
|
C |
done |
|
4 |
1110d |
1115d
|
17/25 |
1078d |
cc8e58f8325c
act_ife: load meta modules before tcf_idr_check_alloc()
|
|
KMSAN: uninit-value in inet_diag_cmd_exact
net
|
C |
|
|
31 |
1079d |
1091d
|
17/25 |
1078d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
general protection fault in free_netdev
net
|
C |
error |
done |
3605 |
1154d |
1189d
|
17/25 |
1086d |
46ef5b89ec0e
ip6_gre: fix null-ptr-deref in ip6gre_init_net()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (3)
net
|
C |
|
|
79 |
1102d |
1136d
|
17/25 |
1090d |
38ba8b9241f5
can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
|
|
WARNING: refcount bug in red_destroy
net
|
C |
done |
|
1 |
1124d |
1123d
|
17/25 |
1093d |
5438dd45831e
net_sched: fix error path in red_init()
|
|
WARNING: refcount bug in smc_release (3)
s390
net
|
|
|
|
1 |
1121d |
1110d
|
17/25 |
1093d |
5fb8642a17aa
net/smc: fix sock refcounting in case of termination
|
|
WARNING: refcount bug in qdisc_put (2)
net
|
C |
done |
|
7 |
1123d |
1123d
|
17/25 |
1093d |
5438dd45831e
net_sched: fix error path in red_init()
|
|
KASAN: use-after-free Write in __linkwatch_run_queue
net
|
C |
error |
|
24 |
1156d |
1157d
|
17/25 |
1101d |
c75d1d5248c0
bonding: check return value of register_netdevice() in bond_newlink()
|
|
KASAN: use-after-free Read in sock_def_write_space (2)
net
arm-msm
|
C |
error |
|
29 |
1102d |
1159d
|
17/25 |
1101d |
af9f691f0f5b
qrtr: orphan socket in qrtr_release()
|
|
kernel BUG at net/rxrpc/recvmsg.c:LINE!
afs
net
|
C |
error |
|
10 |
1148d |
1176d
|
17/25 |
1101d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
WARNING in idr_alloc
arm-msm
net
|
C |
done |
|
65 |
1111d |
1185d
|
17/25 |
1101d |
8dfddfb79653
net: qrtr: fix usage of idr in port assignment to socket
|
|
general protection fault in fib_dump_info (2)
net
|
C |
done |
|
16 |
1126d |
1128d
|
17/25 |
1101d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
KMSAN: uninit-value in netlink_policy_dump_start
net
|
C |
|
|
31 |
1107d |
1110d
|
17/25 |
1101d |
d1fb55592909
netlink: fix state reallocation in policy export
|
|
KASAN: use-after-free Read in devlink_health_reporter_destroy
net
|
C |
error |
|
1188 |
1166d |
1166d
|
17/25 |
1101d |
5d037b4d3df7
devlink: Fix use-after-free when destroying health reporters
|
|
kernel BUG at net/core/dev.c:LINE! (3)
net
|
C |
done |
|
979 |
1116d |
1260d
|
17/25 |
1101d |
832707021666
bonding: fix a potential double-unregister
|
|
general protection fault in vsock_poll
net
virt
|
syz |
done |
|
15 |
1146d |
1158d
|
17/25 |
1101d |
1980c0584483
vsock: fix potential null pointer dereference in vsock_poll()
|
|
BUG: corrupted list in p9_read_work (2)
net
v9fs
|
syz |
done |
error |
38 |
1403d |
1765d
|
17/25 |
1101d |
74d6a5d56629
9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
|
|
KMSAN: uninit-value in geneve_xmit
net
|
C |
|
|
163 |
1105d |
1158d
|
17/25 |
1101d |
32818c075c54
geneve: fix an uninitialized value in geneve_changelink()
|
|
KASAN: wild-memory-access Read in rawv6_setsockopt
net
|
|
|
|
2 |
1143d |
1143d
|
17/25 |
1101d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
KASAN: use-after-free Read in __xfrm6_tunnel_spi_lookup
net
|
C |
error |
|
12 |
1160d |
1165d
|
17/25 |
1101d |
8b404f46dd6a
xfrm: interface: not xfrmi_ipv6/ipip_handler twice
|
|
INFO: trying to register non-static key in red_destroy
net
|
C |
error |
|
318 |
1153d |
1175d
|
17/25 |
1101d |
608b4adab178
net_sched: initialize timer earlier in red_init()
|
|
KASAN: wild-memory-access Read in ip_setsockopt
net
|
C |
|
|
2 |
1136d |
1136d
|
17/25 |
1101d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
WARNING: suspicious RCU usage in bond_ipsec_add_sa
net
|
|
|
|
214 |
1103d |
1174d
|
17/25 |
1101d |
f548a476268d
bonding: don't need RTNL for ipsec helpers
|
|
possible deadlock in dev_mc_unsync
net
|
C |
error |
done |
78 |
1168d |
1184d
|
17/25 |
1130d |
be74294ffa24
net: get rid of lockdep_set_class_and_subclass()
|
|
WARNING: locking bug in try_to_grab_pending
net
|
syz |
error |
done |
1 |
1220d |
1683d
|
17/25 |
1131d |
1378817486d6
tipc: block BH before using dst_cache
|
|
general protection fault in qrtr_endpoint_post
arm-msm
net
|
C |
done |
done |
54 |
1168d |
1186d
|
17/25 |
1137d |
8ff41cc21714
net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
|
|
WARNING in xfrm_policy_insert
net
|
C |
inconclusive |
done |
6 |
1194d |
2047d
|
17/25 |
1152d |
ed17b8d377ea
xfrm: fix a warning in xfrm_policy_insert_list
|
|
KASAN: use-after-free Read in sock_def_write_space
arm-msm
net
|
C |
done |
|
67 |
1160d |
1526d
|
17/25 |
1160d |
a9b111016235
llc: make sure applications use ARPHRD_ETHER
|
|
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post
arm-msm
net
|
C |
|
|
8 |
1182d |
1183d
|
17/25 |
1160d |
8ff41cc21714
net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
|
|
memory leak in qdisc_create_dflt
net
|
C |
|
|
1 |
1179d |
1175d
|
17/25 |
1160d |
306381aec7c2
net_sched: fix a memory leak in atm_tc_init()
|
|
WARNING in hsr_dev_finalize
net
|
C |
error |
|
1546 |
1168d |
1184d
|
17/25 |
1160d |
ccfc9df1352b
hsr: fix interface leak in error path of hsr_dev_finalize()
|
|
kernel BUG at net/l2tp/l2tp_core.c:LINE!
net
|
C |
|
|
10 |
1185d |
1180d
|
17/25 |
1160d |
c9a368f1c0fb
bpf: net: Avoid incorrect bpf_sk_reuseport_detach call
|
|
possible deadlock in dev_uc_sync_multiple (2)
net
|
|
|
|
26 |
1171d |
1181d
|
17/25 |
1160d |
be74294ffa24
net: get rid of lockdep_set_class_and_subclass()
|
|
KASAN: use-after-free Read in devlink_get_from_attrs
net
|
C |
|
|
25 |
1168d |
1181d
|
17/25 |
1160d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in ip_icmp_error
net
|
C |
done |
|
14 |
1214d |
1215d
|
17/25 |
1163d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
KASAN: slab-out-of-bounds Read in ip_icmp_error
net
|
C |
done |
|
13 |
1214d |
1215d
|
17/25 |
1163d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
WARNING: proc registration bug in snmp6_register_dev
net
|
C |
done |
|
14 |
1190d |
1256d
|
17/25 |
1163d |
de0083c7ed7d
hsr: avoid to create proc file after unregister
|
|
KASAN: use-after-free Read in inet_diag_bc_sk
net
|
C |
done |
|
30 |
1238d |
1240d
|
17/25 |
1163d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
linux-next boot error: WARNING: suspicious RCU usage in ipmr_get_table
net
|
|
|
|
60 |
1235d |
1243d
|
17/25 |
1163d |
7013908c2db2
ipmr: Add lockdep expression to ipmr_for_each_table macro
|
|
BUG: unable to handle kernel NULL pointer dereference in dev_ifconf
net
|
|
|
|
1 |
1193d |
1193d
|
17/25 |
1163d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: using smp_processor_id() in preemptible [ADDR] code: /NUM
net
|
|
|
|
1 |
1220d |
1220d
|
17/25 |
1163d |
1378817486d6
tipc: block BH before using dst_cache
|
|
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (3)
net
|
|
|
|
1 |
1213d |
1213d
|
17/25 |
1163d |
d9a81a225277
l2tp: add sk_family checks to l2tp_validate_socket
|
|
KMSAN: uninit-value in tbf_enqueue
net
|
|
|
|
21 |
1163d |
1250d
|
17/25 |
1163d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
general protection fault in fq_codel_enqueue
net
|
C |
done |
|
25 |
1167d |
1252d
|
17/25 |
1163d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
general protection fault in put_cmsg
net
|
C |
done |
|
3 |
1228d |
1228d
|
17/25 |
1163d |
1b2f08df0a88
ipv6: set msg_control_is_user in do_ipv6_getsockopt
|
|
KASAN: slab-out-of-bounds Read in inet_diag_bc_sk
net
|
C |
done |
|
45 |
1238d |
1240d
|
17/25 |
1163d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
BUG: unable to handle kernel NULL pointer dereference in debug_smp_processor_id (2)
net
|
|
|
|
3 |
1185d |
1192d
|
17/25 |
1163d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in net_rx_queue_update_kobjects
net
|
|
|
|
1 |
1193d |
1193d
|
17/25 |
1163d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
general protection fault in erspan_validate
net
|
C |
done |
|
520 |
1228d |
1235d
|
17/25 |
1163d |
51fa960d3b51
erspan: Check IFLA_GRE_ERSPAN_VER is set.
|
|
general protection fault in inet_unhash
net
|
C |
done |
|
40 |
1184d |
1213d
|
17/25 |
1163d |
02c71b144c81
l2tp: do not use inet_hash()/inet_unhash()
|
|
linux-next boot error: WARNING: suspicious RCU usage in bpq_device_event
net
|
|
|
|
6 |
1226d |
1227d
|
17/25 |
1163d |
95f59bf88bb7
drivers: net: hamradio: Fix suspicious RCU usage warning in bpqether.c
|
|
KASAN: use-after-free Read in rpc_net_ns
net
nfs
|
syz |
done |
|
10 |
1228d |
1234d
|
17/25 |
1163d |
31e9a7f35352
SUNRPC: fix use-after-free in rpc_free_client_work()
|
|
general protection fault in cfg80211_dev_rename
net
wireless
|
|
|
|
1 |
1233d |
1228d
|
17/25 |
1163d |
0bbab5f03015
cfg80211: fix debugfs rename crash
|
|
general protection fault in skb_clone (3)
net
|
|
|
|
44 |
1213d |
1215d
|
17/25 |
1163d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
KMSAN: uninit-value in do_tcp_getsockopt
net
|
|
|
|
5 |
1175d |
1227d
|
17/25 |
1163d |
e776af608f69
net-backports: tcp: fix error recovery in tcp_zerocopy_receive()
|
|
linux-next test error: WARNING: suspicious RCU usage in ipmr_device_event
net
|
|
|
|
24 |
1245d |
1250d
|
17/25 |
1163d |
a14fbcd4f157
ipmr: Fix RCU list debugging warning
|
|
memory leak in genl_rcv_msg
net
|
C |
|
|
116 |
1198d |
1388d
|
17/25 |
1163d |
c36f05559104
genetlink: fix memory leaks in genl_family_rcv_msg_dumpit()
|
|
KASAN: slab-out-of-bounds Read in fl6_update_dst
net
|
C |
done |
|
43 |
1184d |
1230d
|
17/25 |
1163d |
bb986a50421a
seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds
|
|
general protection fault in sock_hash_free
bpf
net
|
|
|
|
1 |
1207d |
1207d
|
17/25 |
1163d |
75e68e5bf2c7
bpf, sockhash: Synchronize delete from bucket list on map free
|
|
KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen
net
|
C |
done |
|
4 |
1233d |
1252d
|
17/25 |
1163d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
WARNING: locking bug in dev_mc_seq_show
net
|
C |
done |
|
3 |
1204d |
1215d
|
17/25 |
1163d |
845e0ebb4408
net: change addr_list_lock back to static key
|
|
general protection fault in inet_diag_bc_sk
net
|
|
|
|
12 |
1238d |
1240d
|
17/25 |
1163d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
KMSAN: uninit-value in skbprio_enqueue
net
|
syz |
|
|
11 |
1177d |
1241d
|
17/25 |
1163d |
2761121af87d
net_sched: sch_skbprio: add message validation to skbprio_change()
|
|
INFO: rcu detected stall in wg_packet_tx_worker
net
|
C |
done |
|
24 |
1192d |
1245d
|
17/25 |
1163d |
df4953e4e997
sch_sfq: validate silly quantum values
|
|
KCSAN: data-race in tcp_add_backlog / tcp_try_rmem_schedule
net
|
|
|
|
3 |
1442d |
1446d
|
17/25 |
1180d |
ebb3b78db7bf
tcp: annotate sk->sk_rcvbuf lockless reads
|
|
WARNING in sk_stream_kill_queues (4)
net
|
C |
done |
done |
6 |
1302d |
1306d
|
17/25 |
1180d |
b6f6118901d1
ipv6: restrict IPV6_ADDRFORM operation
|
|
WARNING in kfree (2)
net
|
syz |
done |
done |
1 |
1292d |
1291d
|
17/25 |
1182d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KMSAN: uninit-value in etf_enqueue_timesortedlist
net
|
|
|
|
3 |
1233d |
1240d
|
17/25 |
1192d |
a1211bf9a777
sched: etf: do not assume all sockets are full blown
|
|
general protection fault in macvlan_device_event
net
|
|
|
|
86 |
1241d |
1255d
|
17/25 |
1192d |
4dee15b4fd0d
macvlan: fix null dereference in macvlan_device_event()
|
|
KASAN: use-after-free Read in report_sock_error
net
|
|
|
|
2 |
1245d |
1250d
|
17/25 |
1192d |
a1211bf9a777
sched: etf: do not assume all sockets are full blown
|
|
KASAN: use-after-free Write in tcindex_set_parms
net
|
C |
done |
|
13 |
1272d |
1291d
|
17/25 |
1231d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Read in tcindex_dump
net
|
syz |
|
|
1 |
1294d |
1291d
|
17/25 |
1231d |
b1be2e8cd290
net_sched: hold rtnl lock in tcindex_partial_destroy_work()
|
|
general protection fault in macsec_upd_offload
net
|
C |
done |
|
5 |
1269d |
1269d
|
17/25 |
1231d |
aa81700cf232
macsec: fix NULL dereference in macsec_upd_offload()
|
|
general protection fault in hfsc_unbind_tcf
net
|
|
|
|
1 |
1283d |
1279d
|
17/25 |
1231d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING in geneve_exit_batch_net (2)
net
|
C |
done |
|
9 |
1278d |
1302d
|
17/25 |
1231d |
0fda7600c2e1
geneve: move debug check after netdev unregister
|
|
KASAN: invalid-free in tcf_exts_destroy
net
|
C |
done |
|
1 |
1294d |
1294d
|
17/25 |
1231d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
general protection fault in do_tcp_getsockopt (2)
net
|
C |
done |
|
1 |
1283d |
1283d
|
17/25 |
1231d |
6cd6cbf593bf
net-backports: tcp: repair: fix TCP_QUEUE_SEQ implementation
|
|
WARNING: refcount bug in __tcf_action_put
net
|
syz |
|
|
1 |
1292d |
1291d
|
17/25 |
1231d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
general protection fault in ethnl_parse_header
net
|
C |
done |
|
9 |
1278d |
1283d
|
17/25 |
1231d |
55b474c41e58
netlink: check for null extack in cookie helpers
|
|
general protection fault in hsr_addr_is_self (2)
net
|
|
|
|
1 |
1282d |
1282d
|
17/25 |
1231d |
3a303cfdd28d
hsr: fix general protection fault in hsr_addr_is_self()
|
|
WARNING: ODEBUG bug in __init_work
net
|
syz |
done |
|
1 |
1279d |
1279d
|
17/25 |
1231d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING in call_rcu
net
|
C |
done |
|
8 |
1285d |
1292d
|
17/25 |
1231d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING: ODEBUG bug in tcf_queue_work
net
|
C |
done |
|
30 |
1297d |
1297d
|
17/25 |
1231d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
general protection fault in qdisc_hash_add
net
|
C |
done |
|
47 |
1289d |
1290d
|
17/25 |
1231d |
7c4046b1c53b
Revert "net: sched: make newly activated qdiscs visible"
|
|
WARNING: refcount bug in tcindex_data_put
net
|
C |
done |
|
27 |
1267d |
1269d
|
17/25 |
1231d |
a8eab6d35e22
net_sched: fix a missing refcnt in tcindex_init()
|
|
KASAN: use-after-free Read in route4_get
net
|
C |
|
|
8 |
1259d |
1289d
|
17/25 |
1231d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
general protection fault in erspan_netlink_parms
net
|
C |
done |
|
5 |
1286d |
1286d
|
17/25 |
1231d |
32ca98feab8c
net: ip_gre: Accept IFLA_INFO_DATA-less configuration
|
|
KMSAN: uninit-value in tcf_exts_change
net
|
C |
|
|
5 |
1282d |
1291d
|
17/25 |
1231d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
BUG: sleeping function called from invalid context in kmem_cache_alloc_node_trace
net
|
C |
done |
|
364 |
1293d |
1295d
|
17/25 |
1231d |
138470a9b2cc
net/sched: act_ct: fix lockdep splat in tcf_ct_flow_table_get
|
|
WARNING: ODEBUG bug in tcindex_destroy_work (3)
net
|
syz |
done |
|
13 |
1270d |
1306d
|
17/25 |
1231d |
304e024216a8
net_sched: add a temporary refcnt for struct tcindex_data
|
|
KMSAN: uninit-value in macsec_handle_frame
net
|
|
|
|
1 |
1281d |
1281d
|
17/25 |
1231d |
b06d072ccc4b
macsec: restrict to ethernet devices
|
|
WARNING: refcount bug in igmp_start_timer
net
|
syz |
done |
done |
19 |
1496d |
1862d
|
17/25 |
1254d |
323ebb61e32b
net: use listified RX for handling GRO_NORMAL skbs
|
|
possible deadlock in sch_direct_xmit
net
|
C |
done |
done |
1548 |
1397d |
2076d
|
17/25 |
1254d |
323ebb61e32b
net: use listified RX for handling GRO_NORMAL skbs
|
|
KASAN: use-after-free Read in alloc_netdev_mqs
net
|
|
|
|
1 |
1317d |
1317d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in __iptunnel_pull_header
net
|
C |
|
|
12 |
1287d |
1296d
|
17/25 |
1256d |
17c25cafd4d3
gre: fix uninit-value in __iptunnel_pull_header
|
|
KASAN: use-after-free Read in inet_gifconf
net
|
|
|
|
24 |
1309d |
1316d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: use-after-free Read in ipv6_get_ifaddr
net
|
|
|
|
1 |
1313d |
1313d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: use-after-free Read in inet_lookup_ifaddr_rcu
net
|
|
|
|
2 |
1309d |
1312d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in netdev_state_change
net
|
|
|
|
2 |
1300d |
1300d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: use-after-free Read in rtnl_fill_ifinfo (2)
net
|
|
|
|
2 |
1314d |
1316d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: uninit-value in slhc_compress
net
|
C |
|
|
3 |
1298d |
1298d
|
17/25 |
1256d |
110a40dfb708
slip: make slhc_compress() more robust against malicious packets
|
|
WARNING: ODEBUG bug in smc_ib_remove_dev
net
s390
|
|
|
|
52 |
1286d |
1300d
|
17/25 |
1256d |
ece0d7bd7461
net/smc: cancel event worker during device removal
|
|
KASAN: use-after-free Read in netdev_state_change
net
|
|
|
|
2 |
1314d |
1315d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
BUG: unable to handle kernel NULL pointer dereference in inet_release
net
|
syz |
|
|
3 |
1305d |
1306d
|
17/25 |
1256d |
b6f6118901d1
ipv6: restrict IPV6_ADDRFORM operation
|
|
BUG: unable to handle kernel paging request in ethnl_update_bitset32
net
|
C |
|
|
168 |
1296d |
1307d
|
17/25 |
1256d |
e34f1753eebc
ethtool: limit bitset size
|
|
KASAN: use-after-free Read in ipv6_chk_addr_and_flags
net
|
|
|
|
1 |
1315d |
1315d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in find_match
net
|
C |
|
|
52 |
1286d |
1315d
|
17/25 |
1256d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in bpf_skb_load_helper_32_no_cache
bpf
net
|
|
|
|
2 |
1326d |
1324d
|
17/25 |
1256d |
457fed775c97
net/smc: fix leak of kernel memory to user space
|
|
KMSAN: uninit-value in bond_alb_xmit
net
|
syz |
|
|
3 |
1296d |
1298d
|
17/25 |
1256d |
b7469e83d2ad
bonding/alb: make sure arp header is pulled before accessing it
|
|
general protection fault in smc_ib_remove_dev
net
s390
|
C |
done |
|
98 |
1295d |
1307d
|
17/25 |
1256d |
a2f2ef4a54c0
net/smc: check for valid ib_client_data
|
|
KMSAN: use-after-free in inet_gifconf
net
|
|
|
|
10 |
1286d |
1309d
|
17/25 |
1256d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in ip6_dst_destroy
net
|
C |
|
|
2 |
1289d |
1301d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
possible deadlock in inet_csk_accept
net
|
C |
done |
|
992 |
1290d |
1291d
|
17/25 |
1256d |
06669ea346e4
net: memcg: fix lockdep splat in inet_csk_accept()
|
|
KASAN: slab-out-of-bounds Read in ethnl_update_bitset32
net
|
syz |
|
|
2 |
1302d |
1307d
|
17/25 |
1256d |
e34f1753eebc
ethtool: limit bitset size
|
|
KASAN: use-after-free Read in dev_get_by_index_rcu
net
|
|
|
|
1 |
1310d |
1310d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
possible deadlock in bond_get_stats (3)
net
|
syz |
done |
|
2 |
1310d |
1310d
|
17/25 |
1256d |
b3e80d44f5b1
bonding: fix lockdep warning in bond_get_stats()
|
|
KMSAN: use-after-free in veth_xmit
net
|
|
|
|
8 |
1286d |
1301d
|
17/25 |
1256d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in kstrdup
net
|
C |
|
|
8 |
1292d |
1319d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: use-after-free Read in ethnl_update_bitset32
net
|
C |
done |
|
6 |
1299d |
1307d
|
17/25 |
1256d |
e34f1753eebc
ethtool: limit bitset size
|
|
KASAN: use-after-free Read in fib_nexthop_info
net
|
|
|
|
1 |
1315d |
1315d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: slab-out-of-bounds Read in inet_gifconf
net
|
|
|
|
2 |
1316d |
1316d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: use-after-free Read in ip6_dst_destroy
net
|
C |
done |
|
1 |
1315d |
1315d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: use-after-free Read in l3mdev_master_ifindex_rcu
net
|
C |
done |
done |
13 |
1312d |
1317d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
kernel panic: stack is corrupted in vhost_net_ioctl
kvm
net
virt
|
C |
done |
|
2 |
1316d |
1402d
|
17/25 |
1256d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
KASAN: use-after-free Read in __neigh_notify
net
|
|
|
|
2 |
1314d |
1315d
|
17/25 |
1256d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr
lsm
net
|
C |
done |
|
8 |
1296d |
1306d
|
17/25 |
1256d |
dc24f8b4ecd3
mptcp: add dummy icsk_sync_mss()
|
|
INFO: task hung in lock_sock_nested (2)
net
|
C |
done |
|
418 |
1296d |
1309d
|
17/25 |
1256d |
3f74957fcbea
vsock: fix potential deadlock in transport->release()
|
|
KMSAN: use-after-free in l3mdev_master_ifindex_rcu
net
|
C |
|
|
5 |
1286d |
1309d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in dev_alloc_name_ns
net
|
|
|
|
3 |
1286d |
1300d
|
17/25 |
1256d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: use-after-free Read in mld_in_v1_mode
net
|
C |
done |
|
3 |
1314d |
1317d
|
17/25 |
1256d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
BUG: unable to handle kernel paging request in slhc_free
net
|
C |
done |
done |
177 |
1612d |
1729d
|
17/25 |
1291d |
baf76f0c58ae
slip: make slhc_free() silently accept an error pointer
|
|
KMSAN: uninit-value in setup_udp_tunnel_sock
net
|
C |
|
|
1 |
1341d |
1341d
|
16/25 |
1313d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
WARNING: lock held when returning to user space in tun_get_user (2)
net
|
|
|
|
7 |
1329d |
1340d
|
16/25 |
1313d |
1efba987c486
net-backports: tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
|
|
WARNING in devlink_port_type_warn
net
|
|
|
|
2340 |
1343d |
1415d
|
16/25 |
1313d |
4c582234ab39
devlink: Wait longer before warning about unset port type
|
|
BUG: unable to handle kernel NULL pointer dereference in cfg80211_wext_siwrts
net
wireless
|
|
|
|
3 |
1343d |
1352d
|
16/25 |
1313d |
24953de0a5e3
cfg80211: check for set_wiphy_params
|
|
KMSAN: uninit-value in rsvp_change
net
|
C |
|
|
4 |
1333d |
1334d
|
16/25 |
1313d |
cb3c0e6bdf64
cls_rsvp: fix rsvp_policy
|
|
BUG: unable to handle kernel paging request in rhashtable_replace_fast
net
|
|
|
|
2 |
1339d |
1346d
|
16/25 |
1313d |
41cdc741048b
netdevsim: fix nsim_fib6_rt_create() error path
|
|
general protection fault in hsr_addr_is_self
net
|
|
|
|
3 |
1315d |
1330d
|
16/25 |
1313d |
2b5b8251bc9f
net: hsr: fix possible NULL deref in hsr_handle_frame()
|
|
INFO: rcu detected stall in addrconf_rs_timer (3)
net
|
C |
inconclusive |
done |
81 |
1373d |
1369d
|
16/25 |
1313d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (2)
net
|
C |
done |
|
8 |
1339d |
1341d
|
16/25 |
1313d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
BUG: sleeping function called from invalid context in lock_sock_nested
bpf
net
|
C |
|
|
1232 |
1313d |
1388d
|
16/25 |
1313d |
37f96694cf73
crypto: af_alg - Use bh_lock_sock in sk_destruct
|
|
memory leak in vlan_dev_set_egress_priority
net
|
C |
|
|
1 |
1355d |
1355d
|
16/25 |
1313d |
9bbd917e0bec
vlan: fix memory leak in vlan_dev_set_egress_priority
|
|
WARNING in sk_psock_drop
bpf
net
|
|
|
|
157 |
1336d |
1345d
|
16/25 |
1313d |
58c8db929db1
net, sk_msg: Don't check if sock is locked when tearing down psock
|
|
KMSAN: uninit-value in macvlan_broadcast
net
|
C |
|
|
2 |
1355d |
1356d
|
16/25 |
1313d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
WARNING in tcp_ack
net
|
C |
done |
|
3 |
1353d |
1354d
|
16/25 |
1313d |
90d72256addf
gtp: fix bad unlock balance in gtp_encap_enable_socket
|
|
memory leak in em_nbyte_change
net
|
C |
|
|
1 |
1338d |
1337d
|
16/25 |
1313d |
55cd9f67f1e4
net_sched: ematch: reject invalid TCF_EM_SIMPLE
|
|
KCSAN: data-race in __skb_try_recv_from_queue / unix_dgram_sendmsg
net
|
|
|
|
61 |
1328d |
1347d
|
16/25 |
1313d |
86b18aaa2b5b
skbuff: fix a data race in skb_queue_len()
|
|
KASAN: slab-out-of-bounds Read in macvlan_broadcast
net
|
C |
done |
|
10 |
1353d |
1356d
|
16/25 |
1313d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
KASAN: slab-out-of-bounds Read in nla_put_nohdr
net
|
C |
done |
|
1 |
1340d |
1340d
|
16/25 |
1313d |
61678d28d4a4
net_sched: fix datalen for ematch
|
|
WARNING: bad unlock balance in release_sock
net
|
|
|
|
1 |
1354d |
1354d
|
16/25 |
1313d |
90d72256addf
gtp: fix bad unlock balance in gtp_encap_enable_socket
|
|
KASAN: use-after-free Read in tcp_fastretrans_alert
net
|
C |
done |
|
1 |
1344d |
1344d
|
16/25 |
1313d |
2bec445f9bf3
net-backports: tcp: do not leave dangling pointers in tp->highest_sack
|
|
BUG: unable to handle kernel paging request in rhashtable_jhash2
net
|
C |
done |
|
6 |
1346d |
1347d
|
16/25 |
1313d |
41cdc741048b
netdevsim: fix nsim_fib6_rt_create() error path
|
|
memory leak in tcf_ctinfo_init
net
|
C |
|
|
2 |
1342d |
1344d
|
16/25 |
1313d |
09d4f10a5e78
net: sched: act_ctinfo: fix memory leak
|
|
KASAN: slab-out-of-bounds Read in __nla_put_nohdr
net
|
C |
done |
|
4 |
1340d |
1341d
|
16/25 |
1313d |
61678d28d4a4
net_sched: fix datalen for ematch
|
|
INFO: rcu detected stall in br_handle_frame (2)
net
|
C |
done |
|
2 |
1373d |
1369d
|
16/25 |
1313d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
INFO: rcu detected stall in netlink_sendmsg (3)
net
|
C |
done |
|
6 |
1320d |
1373d
|
16/25 |
1313d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
WARNING in cbq_destroy_class
net
|
C |
done |
|
7 |
1318d |
1341d
|
16/25 |
1313d |
2e24cd755552
net_sched: fix ops->bind_class() implementations
|
|
WARNING in cbq_destroy
net
|
C |
done |
|
1 |
1340d |
1340d
|
16/25 |
1313d |
2e24cd755552
net_sched: fix ops->bind_class() implementations
|
|
KASAN: use-after-free Read in tcp_check_sack_reordering
net
|
C |
done |
|
2 |
1335d |
1344d
|
16/25 |
1313d |
2bec445f9bf3
net-backports: tcp: do not leave dangling pointers in tp->highest_sack
|
|
BUG: unable to handle kernel NULL pointer dereference in cfg80211_wext_siwfrag
net
wireless
|
C |
done |
|
8 |
1343d |
1355d
|
16/25 |
1313d |
24953de0a5e3
cfg80211: check for set_wiphy_params
|
|
KASAN: use-after-free Read in macvlan_broadcast
net
|
C |
done |
|
12 |
1354d |
1356d
|
16/25 |
1313d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
WARNING: bad unlock balance in gtp_encap_enable_socket
net
|
C |
done |
|
8 |
1352d |
1356d
|
16/25 |
1313d |
90d72256addf
net-backports: gtp: fix bad unlock balance in gtp_encap_enable_socket
|
|
WARNING: bad unlock balance in sch_direct_xmit
net
|
C |
done |
|
35 |
1343d |
1390d
|
16/25 |
1313d |
53d374979ef1
net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()
|
|
general protection fault in inet6_set_link_af
net
|
C |
done |
|
8 |
1322d |
1326d
|
16/25 |
1313d |
db3fa271022d
ipv6/addrconf: fix potential NULL deref in inet6_set_link_af()
|
|
general protection fault in tcf_ife_cleanup
net
|
C |
done |
|
111 |
1327d |
1351d
|
16/25 |
1313d |
44c23d71599f
net/sched: act_ife: initalize ife->metalist earlier
|
|
KASAN: use-after-free Write in __alloc_skb (2)
net
|
C |
done |
|
7 |
1364d |
1380d
|
16/25 |
1313d |
d836f5c69d87
net-backports: net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
|
|
WARNING in geneve_exit_batch_net
net
|
|
|
|
15 |
1313d |
1338d
|
16/25 |
1313d |
760d228e322e
net_sched: walk through all child classes in tc_bind_tclass()
|
|
KASAN: slab-out-of-bounds Read in tcf_exts_destroy
net
|
C |
done |
error |
8 |
1435d |
1338d
|
16/25 |
1313d |
599be01ee567
net_sched: fix an OOB access in cls_tcindex
|
|
WARNING: ODEBUG bug in tcindex_destroy_work (2)
net
|
|
|
|
5 |
1318d |
1328d
|
16/25 |
1313d |
599be01ee567
net_sched: fix an OOB access in cls_tcindex
|
|
inconsistent lock state in rxrpc_put_client_connection_id
afs
net
|
C |
done |
|
473 |
1321d |
1327d
|
16/25 |
1313d |
963485d436cc
rxrpc: Fix call RCU cleanup using non-bh-safe locks
|
|
KASAN: null-ptr-deref Read in tcf_generic_walker
net
|
C |
done |
|
6 |
1317d |
1335d
|
16/25 |
1313d |
760d228e322e
net_sched: walk through all child classes in tc_bind_tclass()
|
|
WARNING in tcp_enter_loss (2)
net
|
C |
done |
unreliable |
4 |
1971d |
2021d
|
16/25 |
1313d |
16ae6aa17052
tcp: ignore Fast Open on repair mode
|
|
KMSAN: uninit-value in bond_neigh_setup
net
|
|
|
|
64 |
1362d |
1386d
|
16/25 |
1317d |
f394722fb0d0
net-backports: neighbour: remove neigh_cleanup() method
|
|
KASAN: slab-out-of-bounds Read in hsr_debugfs_rename
net
|
C |
done |
|
18 |
1356d |
1365d
|
16/25 |
1317d |
04b69426d846
hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename()
|
|
WARNING: refcount bug in smc_release (2)
net
s390
|
C |
done |
|
9 |
1375d |
1398d
|
16/25 |
1317d |
86434744fedf
net/smc: add fallback check to connect()
|
|
BUG: corrupted list in hsr_add_node
net
|
|
|
|
1 |
1419d |
1418d
|
16/25 |
1317d |
92a35678ec07
hsr: fix a race condition in node list insertion and deletion
|
|
kernel BUG at include/linux/mm.h:LINE! (5)
net
|
C |
done |
done |
129 |
1593d |
1663d
|
16/25 |
1354d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
KASAN: slab-out-of-bounds Read in bpf_prog_create
bpf
net
|
C |
done |
|
447 |
1385d |
1467d
|
16/25 |
1354d |
0033b34a03ec
ppp: fix out-of-bounds access in bpf_prog_create()
|
|
memory leak in register_netdevice
net
|
C |
|
|
19 |
1385d |
1391d
|
16/25 |
1354d |
42c17fa69f98
net: fix a leak in register_netdevice()
|
|
KCSAN: data-race in mod_timer / run_timer_softirq
net
|
|
|
|
4 |
1371d |
1436d
|
16/25 |
1354d |
56144737e673
net-backports: hrtimer: Annotate lockless access to timer->state
|
|
WARNING: refcount bug in skb_set_owner_w
net
|
C |
done |
|
2 |
1391d |
1391d
|
16/25 |
1354d |
501a90c94510
net-backports: inet: protect against too small mtu values.
|
|
KMSAN: use-after-free in netlink_recvmsg
net
|
C |
|
|
1 |
1410d |
1410d
|
16/25 |
1380d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in __skb_try_recv_from_queue
net
|
C |
|
|
4 |
1409d |
1433d
|
16/25 |
1380d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
general protection fault in ip_sublist_rcv
net
|
C |
done |
|
287 |
1423d |
1433d
|
16/25 |
1380d |
51210ad5a558
inet: do not call sublist_rcv on empty list
|
|
kernel BUG at include/linux/scatterlist.h:LINE!
net
|
C |
done |
|
307 |
1391d |
1585d
|
16/25 |
1380d |
d10523d0b3d7
net/tls: free the record on encryption error
|
|
KCSAN: data-race in __ip4_datagram_connect / raw_bind
net
|
|
|
|
1 |
1428d |
1428d
|
16/25 |
1380d |
25c7a6d1f90e
net: avoid potential false sharing in neighbor related code
|
|
KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit
net
|
|
|
|
40 |
1381d |
1430d
|
16/25 |
1380d |
90b2be27bb0e
net/sched: annotate lockless accesses to qdisc->empty
|
|
general protection fault in ip6_sublist_rcv
net
|
C |
done |
|
327 |
1423d |
1425d
|
16/25 |
1380d |
51210ad5a558
inet: do not call sublist_rcv on empty list
|
|
KCSAN: data-race in inet_putpeer / inet_putpeer
net
|
|
|
|
20 |
1413d |
1430d
|
16/25 |
1380d |
71685eb4ce80
inetpeer: fix data-race in inet_putpeer / inet_putpeer
|
|
KCSAN: data-race in eth_header_cache / neigh_resolve_output
net
|
|
|
|
1 |
1418d |
1418d
|
16/25 |
1380d |
c305c6ae79e2
net-backports: net: add annotations on hh->hh_len lockless accesses
|
|
KMSAN: use-after-free in sk_forced_mem_schedule
net
|
|
|
|
2 |
1403d |
1411d
|
16/25 |
1380d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
general protection fault in devlink_get_from_attrs
net
|
C |
|
|
7 |
1447d |
1447d
|
16/25 |
1380d |
82a843de41d4
net: devlink: fix reporter dump dumpit
|
|
general protection fault in vti6_ioctl
net
|
|
|
|
1 |
1439d |
1438d
|
16/25 |
1380d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
KCSAN: data-race in tun_get_user / tun_net_get_stats64
net
|
|
|
|
1 |
1425d |
1425d
|
16/25 |
1380d |
de7d5084d827
net-backports: net: provide dev_lstats_read() helper
|
|
KCSAN: data-race in sk_wait_data / tcp_queue_rcv
net
|
|
|
|
4 |
1420d |
1417d
|
16/25 |
1380d |
f8cc62ca3e66
net: add a READ_ONCE() in skb_peek_tail()
|
|
KCSAN: data-race in tcp_add_backlog / tcp_recvmsg (2)
net
|
|
|
|
47 |
1381d |
1417d
|
16/25 |
1380d |
9ed498c6280a
net-backports: net: silence data-races on sk_backlog.tail
|
|
KCSAN: data-race in sk_wait_data / skb_queue_tail
net
|
|
|
|
3 |
1428d |
1429d
|
16/25 |
1380d |
f8cc62ca3e66
net-backports: net: add a READ_ONCE() in skb_peek_tail()
|
|
general protection fault in veth_get_stats64
net
|
C |
done |
|
2 |
1452d |
1452d
|
16/25 |
1380d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
KCSAN: data-race in icmp_global_allow / icmp_global_allow
net
|
|
|
|
29 |
1380d |
1431d
|
16/25 |
1380d |
bbab7ef23503
net-backports: net: icmp: fix data-race in cmp_global_allow()
|
|
KCSAN: data-race in __dev_queue_xmit / pfifo_fast_dequeue
net
|
|
|
|
6 |
1394d |
1431d
|
16/25 |
1380d |
90b2be27bb0e
net/sched: annotate lockless accesses to qdisc->empty
|
|
KCSAN: data-race in tcp_chrono_stop / tcp_recvmsg
net
|
|
|
|
3 |
1415d |
1417d
|
16/25 |
1380d |
a5a7daa52edb
net-backports: tcp: fix data-race in tcp_recvmsg()
|
|
KCSAN: data-race in gro_normal_list.part.0 / napi_busy_loop
net
|
|
|
|
1 |
1414d |
1414d
|
16/25 |
1380d |
c39e342a050a
net-backports: tun: fix data-race in gro_normal_list()
|
|
KASAN: use-after-free Read in slip_open
net
|
C |
done |
|
3 |
1399d |
1400d
|
16/25 |
1380d |
e58c19124189
slip: Fix use-after-free Read in slip_open
|
|
KCSAN: data-race in fanout_demux_rollover / fanout_demux_rollover
net
|
|
|
|
1 |
1415d |
1415d
|
16/25 |
1380d |
b756ad928d98
net-backports: packet: fix data-race in fanout_flow_is_huge()
|
|
WARNING in __rtnl_newlink
net
|
C |
done |
|
2 |
1450d |
1450d
|
16/25 |
1380d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
WARNING: ODEBUG bug in free_netdev
net
|
C |
done |
|
2 |
1449d |
1449d
|
16/25 |
1380d |
11fc7d5a0a2d
tun: fix memory leak in error path
|
|
general protection fault in ip6_tnl_ioctl
net
|
C |
done |
|
7 |
1440d |
1451d
|
16/25 |
1380d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
KCSAN: data-race in __dev_queue_xmit / net_tx_action
net
|
|
|
|
1 |
1415d |
1415d
|
16/25 |
1380d |
90b2be27bb0e
net/sched: annotate lockless accesses to qdisc->empty
|
|
KMSAN: use-after-free in copyout
net
|
C |
|
|
1 |
1445d |
1445d
|
16/25 |
1380d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
general protection fault in virtio_transport_release
net
|
C |
done |
|
7 |
1403d |
1404d
|
16/25 |
1380d |
039fcccaed33
vsock: avoid to assign transport if its initialization fails
|
|
WARNING in smc_unhash_sk (3)
net
s390
|
C |
done |
|
362 |
1397d |
1487d
|
15/25 |
1394d |
8204df72bea1
net/smc: fix fastopen for non-blocking connect()
|
|
memory leak in smc_create
net
s390
|
C |
|
|
19 |
1407d |
1420d
|
15/25 |
1394d |
6d6dd528d5af
net/smc: fix refcount non-blocking connect() -part 2
|
|
KCSAN: data-race in neigh_resolve_output / neigh_resolve_output
net
|
|
|
|
4 |
1415d |
1429d
|
15/25 |
1394d |
1b53d64435d5
net-backports: net: fix data-race in neigh_event_send()
|
|
KCSAN: data-race in find_match / find_match
net
|
|
|
|
2 |
1416d |
1420d
|
15/25 |
1394d |
1bef4c223b85
net-backports: ipv6: fixes rt6_probe() and fib6_nh->last_probe init
|
|
BUG: spinlock recursion in release_sock
net
|
C |
done |
|
116 |
1521d |
1522d
|
14/25 |
1396d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
KMSAN: use-after-free in rxrpc_put_peer
afs
net
|
|
|
|
1 |
1437d |
1437d
|
14/25 |
1396d |
91fcfbe8852e
rxrpc: Fix call crypto state cleanup
|
|
WARNING in sk_stream_kill_queues (3)
net
|
C |
done |
|
622 |
1568d |
1927d
|
14/25 |
1397d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
KCSAN: data-race in udp_set_dev_scratch / udpv6_recvmsg
net
|
|
|
|
5 |
1419d |
1430d
|
14/25 |
1400d |
a793183caa9a
udp: fix data-race in udp_set_dev_scratch()
|
|
KCSAN: data-race in __skb_wait_for_more_packets / skb_queue_tail
net
|
|
|
|
1 |
1423d |
1423d
|
14/25 |
1400d |
7c422d0ce975
net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
|
|
WARNING: refcount bug in smc_release
net
s390
|
C |
done |
|
8 |
1407d |
1430d
|
14/25 |
1400d |
301428ea3708
net/smc: fix refcounting for non-blocking connect()
|
|
INFO: trying to register non-static key in bond_3ad_update_lacp_rate
net
|
C |
done |
|
26 |
1423d |
1425d
|
14/25 |
1400d |
ad9bd8daf2f9
bonding: fix using uninitialized mode_lock
|
|
KCSAN: data-race in datagram_poll / skb_queue_tail
net
|
|
|
|
5 |
1419d |
1429d
|
14/25 |
1400d |
3ef7cf57c72f
net-backports: net: use skb_queue_empty_lockless() in poll() handlers
|
|
general protection fault in process_one_work
net
|
|
|
|
2 |
1425d |
1425d
|
14/25 |
1400d |
6d6f0383b697
netdevsim: Fix use-after-free during device dismantle
|
|
KCSAN: data-race in udp6_lib_lookup2 / udpv6_queue_rcv_one_skb
net
|
|
|
|
1 |
1430d |
1430d
|
14/25 |
1400d |
7170a977743b
net: annotate accesses to sk->sk_incoming_cpu
|
|
KCSAN: data-race in tcp_v4_rcv / tcp_v4_rcv
net
|
|
|
|
4 |
1420d |
1424d
|
14/25 |
1400d |
7170a977743b
net-backports: net: annotate accesses to sk->sk_incoming_cpu
|
|
KCSAN: data-race in __skb_recv_udp / __udp_enqueue_schedule_skb
net
|
|
|
|
7 |
1419d |
1431d
|
14/25 |
1400d |
137a0dbe3426
net-backports: udp: use skb_queue_empty_lockless()
|
|
KCSAN: data-race in first_packet_length / udp_poll
net
|
|
|
|
2 |
1422d |
1429d
|
14/25 |
1400d |
137a0dbe3426
net-backports: udp: use skb_queue_empty_lockless()
|
|
INFO: trying to register non-static key in bond_3ad_update_ad_actor_settings
net
|
C |
done |
|
69 |
1423d |
1426d
|
14/25 |
1400d |
ad9bd8daf2f9
bonding: fix using uninitialized mode_lock
|
|
KCSAN: data-race in __skb_wait_for_more_packets / __sock_queue_rcv_skb
net
|
|
|
|
10 |
1419d |
1430d
|
14/25 |
1400d |
7c422d0ce975
net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
|
|
KCSAN: data-race in udpv6_queue_rcv_one_skb / udpv6_queue_rcv_one_skb
net
|
|
|
|
1 |
1427d |
1426d
|
14/25 |
1400d |
ee8d153d46a3
net-backports: net: annotate lockless accesses to sk->sk_napi_id
|
|
KCSAN: data-race in __skb_recv_udp / datagram_poll
net
|
|
|
|
1 |
1420d |
1420d
|
14/25 |
1400d |
3f926af3f4d6
net: use skb_queue_empty_lockless() in busy poll contexts
|
|
KCSAN: data-race in __skb_wait_for_more_packets / __udp_enqueue_schedule_skb
net
|
|
|
|
2 |
1423d |
1430d
|
14/25 |
1400d |
7c422d0ce975
net-backports: net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
|
|
KASAN: use-after-free Read in p9_fd_poll
net
v9fs
|
C |
|
done |
8 |
1867d |
1900d
|
14/25 |
1402d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
BUG: MAX_LOCK_DEPTH too low! (2)
net
|
C |
|
done |
5 |
1898d |
1929d
|
14/25 |
1412d |
bab2c80e5a6c
nsh: set mac len based on inner packet
|
|
inconsistent lock state in ila_xlat_nl_cmd_del_mapping
net
|
C |
|
unreliable |
2496 |
1860d |
1866d
|
14/25 |
1412d |
7494de0454af
mfd: da9063: Replace regmap_add_irq_chip with devm counterpart
|
|
BUG: corrupted list in p9_conn_cancel
net
v9fs
|
C |
|
done |
18 |
1801d |
1902d
|
14/25 |
1412d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
general protection fault in p9_conn_cancel
net
v9fs
|
C |
|
done |
2 |
1882d |
1900d
|
14/25 |
1412d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
WARNING: ODEBUG bug in p9_fd_close
net
v9fs
|
C |
|
done |
82 |
1862d |
1902d
|
14/25 |
1412d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
KASAN: stack-out-of-bounds Read in xfrm_state_find (5)
net
|
C |
|
done |
654 |
1698d |
2000d
|
14/25 |
1412d |
32bf94fb5c2e
xfrm: validate template mode
|
|
KASAN: use-after-free Read in _decode_session4
net
|
C |
|
done |
3 |
2003d |
2003d
|
14/25 |
1412d |
c6741fbed6dc
vti6: Properly adjust vti6 MTU from MTU of lower device
|
|
general protection fault in tcp_cleanup_ulp
net
|
syz |
done |
done |
6 |
1828d |
1843d
|
14/25 |
1412d |
5607fff30363
bpf: sockmap only allow ESTABLISHED sock state
|
|
BUG: corrupted list in p9_write_work
net
v9fs
|
C |
|
done |
5 |
1825d |
1870d
|
14/25 |
1412d |
728356dedeff
9p: Add refcount to p9_req_t
|
|
general protection fault in tcp_splice_read
net
|
C |
done |
done |
23 |
1628d |
1738d
|
14/25 |
1413d |
07603b230895
net/smc: propagate file from SMC to TCP socket
|
|
kernel BUG at net/ipv4/ip_output.c:LINE!
net
|
C |
|
done |
28225 |
1707d |
1898d
|
14/25 |
1415d |
e7c87bd6cc4e
bpf: in __bpf_redirect_no_mac pull mac only if present
|
|
suspicious RCU usage at ./include/net/inet_sock.h:LINE
net
|
C |
|
done |
171 |
2058d |
2148d
|
14/25 |
1415d |
3f32d0be6c16
tipc: lock wakeup & inputq at tipc_link_reset()
|
|
KASAN: use-after-free Read in _decode_session6
net
|
C |
|
done |
4 |
1775d |
1843d
|
14/25 |
1416d |
e7c87bd6cc4e
bpf: in __bpf_redirect_no_mac pull mac only if present
|
|
KCSAN: data-race in sk_stream_wait_memory / tcp_shifted_skb
net
|
|
|
|
1 |
1429d |
1417d
|
14/25 |
1416d |
ab4e846a82d0
tcp: annotate sk->sk_wmem_queued lockless reads
|
|
KCSAN: data-race in sk_stream_wait_memory / tcp_fragment
net
|
|
|
|
1 |
1420d |
1417d
|
14/25 |
1416d |
ab4e846a82d0
tcp: annotate sk->sk_wmem_queued lockless reads
|
|
KCSAN: data-race in tcp_sendmsg_locked / tcp_stream_memory_free
net
|
|
|
|
2 |
1428d |
1417d
|
14/25 |
1416d |
0f31746452e6
tcp: annotate tp->write_seq lockless reads
|
|
KCSAN: data-race in tcp_event_new_data_sent / tcp_stream_memory_free
net
|
|
|
|
3 |
1420d |
1417d
|
14/25 |
1416d |
e0d694d638db
tcp: annotate tp->snd_nxt lockless reads
|
|
KCSAN: data-race in tcp_ack / tcp_poll (2)
net
|
|
|
|
5 |
1424d |
1417d
|
14/25 |
1416d |
ab4e846a82d0
tcp: annotate sk->sk_wmem_queued lockless reads
|
|
KCSAN: data-race in sk_stream_wait_memory / tcp_ack
net
|
|
|
|
2 |
1421d |
1417d
|
14/25 |
1416d |
ab4e846a82d0
tcp: annotate sk->sk_wmem_queued lockless reads
|
|
KCSAN: data-race in tcp_add_backlog / tcp_rcv_space_adjust (2)
net
|
|
|
|
18 |
1431d |
1438d
|
14/25 |
1419d |
ebb3b78db7bf
tcp: annotate sk->sk_rcvbuf lockless reads
|
|
BUG: unable to handle kernel NULL pointer dereference in xsk_poll
bpf
net
|
C |
done |
|
10 |
1436d |
1454d
|
14/25 |
1419d |
df551058f7a3
xsk: Fix crash in poll when device does not support ndo_xsk_wakeup
|
|
KASAN: use-after-free Read in rxrpc_release_call
net
afs
|
syz |
done |
|
13 |
1437d |
1492d
|
14/25 |
1419d |
91fcfbe8852e
rxrpc: Fix call crypto state cleanup
|
|
KASAN: use-after-free Read in rxrpc_send_keepalive
afs
net
|
C |
error |
|
694 |
1433d |
1506d
|
14/25 |
1419d |
c48fc11b69e9
rxrpc: Fix call ref leak
|
|
KCSAN: data-race in __tcp_select_window / tcp_add_backlog
net
|
|
|
|
23502 |
1419d |
1450d
|
14/25 |
1419d |
70c2655849a2
net: silence KCSAN warnings about sk->sk_backlog.len reads
|
|
memory leak in llc_ui_sendmsg
net
|
C |
|
|
125 |
1434d |
1586d
|
14/25 |
1419d |
c6ee11c39fcc
llc: fix sk_buff leak in llc_sap_state_process()
|
|
KCSAN: data-race in tcp_add_backlog / tcp_recvmsg
net
|
|
|
|
17719 |
1419d |
1450d
|
14/25 |
1419d |
8265792bf887
net-backports: net: silence KCSAN warnings around sk_add_backlog() calls
|
|
INFO: task hung in addrconf_verify_work (2)
net
|
C |
|
|
22 |
1440d |
1440d
|
14/25 |
1419d |
39f13ea2f61b
net: avoid potential infinite loop in tc_ctl_action()
|
|
KCSAN: data-race in tcp_poll / tcp_recvmsg (2)
net
|
|
|
|
22 |
1432d |
1438d
|
14/25 |
1419d |
7db48e983930
tcp: annotate tp->copied_seq lockless reads
|
|
KASAN: use-after-free Read in rxrpc_put_peer
afs
net
|
C |
error |
|
38 |
1434d |
1487d
|
14/25 |
1419d |
55f6c98e3674
rxrpc: Fix trace-after-put looking at the put peer record
9ebeddef58c4
rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
|
|
KCSAN: data-race in tcp_poll / tcp_queue_rcv
net
|
|
|
|
1897 |
1419d |
1450d
|
14/25 |
1419d |
dba7d9b8c739
net-backports: tcp: annotate tp->rcv_nxt lockless reads
|
|
memory leak in llc_conn_ac_send_sabme_cmd_p_set_x
net
|
C |
|
|
225 |
1434d |
1586d
|
14/25 |
1419d |
b74555de21ac
llc: fix sk_buff leak in llc_conn_service()
|
|
general protection fault in rxrpc_error_report
net
afs
|
C |
done |
|
6 |
1434d |
1447d
|
14/25 |
1419d |
f0308fb07080
rxrpc: Fix possible NULL pointer access in ICMP handling
|
|
KCSAN: data-race in tcp_add_backlog / tcp_grow_window.isra.0
net
|
|
|
|
21713 |
1419d |
1450d
|
14/25 |
1419d |
70c2655849a2
net-backports: net: silence KCSAN warnings about sk->sk_backlog.len reads
|
|
WARNING: suspicious RCU usage in xfrm_alloc_userspi
net
|
C |
done |
error |
86 |
1647d |
1649d
|
14/25 |
1419d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
general protection fault in get_work_pool
net
|
C |
|
done |
24 |
1627d |
2030d
|
14/25 |
1419d |
07bf7908950a
xfrm: Validate address prefix lengths in the xfrm selector.
|
|
general protection fault in xfrm_init_replay
net
|
syz |
inconclusive |
done |
2 |
2017d |
2016d
|
14/25 |
1419d |
d97ca5d714a5
xfrm_user: uncoditionally validate esn replay attribute struct
|
|
WARNING: suspicious RCU usage in xfrm_get_spdinfo
net
|
C |
done |
error |
46 |
1647d |
1649d
|
14/25 |
1419d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
WARNING: suspicious RCU usage in xfrm_get_sadinfo
net
|
C |
done |
error |
28 |
1648d |
1649d
|
14/25 |
1419d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
WARNING: suspicious RCU usage in xfrm_get_policy
net
|
syz |
done |
error |
8 |
1648d |
1649d
|
14/25 |
1419d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
INFO: rcu detected stall in rt6_probe_deferred
net
|
|
|
|
336 |
1468d |
1474d
|
14/25 |
1433d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in addrconf_rs_timer (2)
net
|
|
|
|
362 |
1451d |
1474d
|
14/25 |
1433d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
divide error in tabledist
net
|
|
|
|
3 |
1456d |
1465d
|
14/25 |
1438d |
b41d936b5ecf
sch_netem: fix a divide by zero in tabledist()
|
|
BUG: using smp_processor_id() in preemptible [ADDR] code: mime_typevmnet0/NUM
net
|
|
|
|
1 |
1483d |
1481d
|
14/25 |
1438d |
00d9e47f8ec2
posix-cpu-timers: Always clear head pointer on dequeue
|
|
KMSAN: uninit-value in inet_ehash_insert
net
|
C |
|
|
7 |
1447d |
1454d
|
14/25 |
1438d |
6af1799aaf3f
net-backports: ipv6: drop incoming packets having a v4mapped source address
|
|
general protection fault in xsk_poll
bpf
net
|
C |
done |
|
430 |
1468d |
1495d
|
14/25 |
1438d |
42fddcc7c64b
xsk: use state member for socket synchronization
|
|
BUG: sleeping function called from invalid context in tcf_chain0_head_change_cb_del
net
|
C |
done |
|
187 |
1454d |
1467d
|
14/25 |
1438d |
e3ae1f96accd
net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
|
|
BUG: corrupted list in __netif_receive_skb_list_core
net
|
|
|
|
3 |
1446d |
1500d
|
14/25 |
1438d |
c7a42eb49212
net: ipv6: fix listify ip6_rcv_finish in case of forwarding
|
|
KASAN: slab-out-of-bounds Read in do_tcp_getsockopt
net
|
|
|
|
3 |
1462d |
1481d
|
14/25 |
1438d |
3afb09618840
tcp: fix slab-out-of-bounds in tcp_zerocopy_receive()
|
|
INFO: rcu detected stall in pie_timer
net
|
C |
|
|
19 |
1439d |
1474d
|
14/25 |
1438d |
4ce70b4aed57
net-backports: net: sched: sch_htb: don't call qdisc_put() while holding tree lock
|
|
KASAN: use-after-free Read in cbq_enqueue
net
|
C |
done |
|
4 |
1447d |
1448d
|
14/25 |
1438d |
e9789c7cc182
sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
|
|
general protection fault in dsmark_init
net
|
C |
done |
|
3 |
1447d |
1450d
|
14/25 |
1438d |
474f0813a300
sch_dsmark: fix potential NULL deref in dsmark_init()
|
|
possible deadlock in pie_timer
net
|
C |
done |
|
2 |
1456d |
1456d
|
14/25 |
1438d |
e3ae1f96accd
net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
|
|
general protection fault in tcf_action_destroy
net
|
|
|
|
128 |
1455d |
1473d
|
14/25 |
1438d |
3d66b89c30f9
net: sched: fix possible crash in tcf_action_destroy()
|
|
general protection fault in dev_map_hash_update_elem
bpf
net
|
C |
done |
|
4 |
1472d |
1479d
|
14/25 |
1438d |
af58e7ee6a8d
xdp: Fix race in dev_map_hash_update_elem() when replacing element
|
|
INFO: rcu detected stall in sys_sendmmsg
net
|
|
|
|
2 |
1474d |
1474d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in pppoe_sendmsg
net
|
|
|
|
7 |
1469d |
1476d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
WARNING in xfrm_policy_inexact_list_reinsert
net
|
|
|
|
2 |
1479d |
1507d
|
14/25 |
1445d |
769a807d0b41
xfrm: policy: avoid warning splat when merging nodes
|
|
INFO: rcu detected stall in sys_sendmsg
net
|
C |
done |
|
2 |
1470d |
1470d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in br_hello_timer_expired
net
|
|
|
|
4 |
1468d |
1474d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in inet_release
net
|
|
|
|
1 |
1478d |
1477d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in packet_sendmsg
net
|
|
|
|
10 |
1470d |
1475d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
general protection fault in addrconf_f6i_alloc
net
|
C |
|
|
305 |
1468d |
1479d
|
14/25 |
1445d |
8652f17c658d
ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
|
|
INFO: rcu detected stall in dccp_write_timer
net
|
|
|
|
5 |
1474d |
1477d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
general protection fault in tls_sk_proto_close (2)
net
|
syz |
error |
|
246 |
1468d |
1487d
|
14/25 |
1445d |
44580a0118d3
net: sock_map, fix missing ulp check in sock hash case
|
|
INFO: rcu detected stall in neigh_timer_handler (2)
net
|
|
|
|
2 |
1474d |
1475d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
BUG: soft lockup in addrconf_dad_work
net
|
C |
done |
|
1 |
1473d |
1473d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in igmp_ifc_timer_expire
net
|
C |
|
|
57 |
1468d |
1727d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in mld_dad_timer_expire
net
|
|
|
|
3 |
1473d |
1474d
|
14/25 |
1445d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass
net
|
C |
done |
|
61 |
1468d |
1476d
|
14/25 |
1445d |
8b142a00edcf
net_sched: check cops->tcf_block in tc_bind_tclass()
|
|
general protection fault in icmpv6_xrlim_allow
net
|
|
|
|
4 |
1572d |
1579d
|
14/25 |
1446d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
general protection fault in ip6_rcv_finish
net
|
|
|
|
3 |
1563d |
1569d
|
14/25 |
1446d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
general protection fault in requeue_rx_msgs
net
|
syz |
done |
inconclusive |
1 |
1942d |
1941d
|
14/25 |
1450d |
eb7f54b90bd8
kcm: Fix use-after-free caused by clonned sockets
|
|
KASAN: user-memory-access Read in ip6_hold_safe (3)
net
|
|
|
|
456 |
1556d |
1575d
|
14/25 |
1450d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
WARNING in cbs_dequeue_soft
net
|
C |
done |
|
13 |
1469d |
1476d
|
13/25 |
1468d |
1c6c09a0ae62
net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
|
|
general protection fault in packet_lookup_frame
net
|
C |
done |
|
7 |
1501d |
1501d
|
13/25 |
1477d |
32d3182cd2cd
net/packet: fix race in tpacket_snd()
|
|
memory leak in ip6_mc_add_src
net
|
C |
|
|
1 |
1488d |
1488d
|
13/25 |
1477d |
a84d01647989
mld: fix memory leak in mld_del_delrec()
|
|
KASAN: use-after-free Read in rxrpc_queue_local
afs
net
|
C |
done |
|
1 |
1503d |
1503d
|
13/25 |
1477d |
06d9532fa6b3
rxrpc: Fix read-after-free in rxrpc_queue_local()
|
|
general protection fault in tls_write_space
net
|
syz |
|
|
33 |
1496d |
1506d
|
13/25 |
1477d |
57c722e932cf
net/tls: swap sk_write_space on close
|
|
KMSAN: uninit-value in rtm_new_nexthop
net
|
C |
|
|
8 |
1494d |
1493d
|
13/25 |
1477d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
kernel BUG at net/rxrpc/local_object.c:LINE!
afs
net
|
C |
done |
|
11167 |
1481d |
1548d
|
13/25 |
1477d |
730c5fd42c1e
rxrpc: Fix local endpoint refcounting
|
|
KMSAN: uninit-value in rtm_dump_nexthop
net
|
C |
|
|
6 |
1488d |
1504d
|
13/25 |
1477d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
net
usb
|
C |
|
|
2 |
1501d |
1503d
|
13/25 |
1477d |
54364278fb3c
USB: CDC: fix sanity checks in CDC union parser
|
|
BUG: corrupted list in rxrpc_local_processor
afs
net
|
C |
done |
|
1679 |
1498d |
1506d
|
13/25 |
1477d |
b00df840fb40
rxrpc: Fix local endpoint replacement
|
|
KASAN: use-after-free Write in __xfrm_policy_unlink (2)
net
|
|
|
|
7 |
1545d |
1591d
|
13/25 |
1482d |
b805d78d300b
xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
|
|
WARNING: ODEBUG bug in tls_sw_free_resources_tx
net
|
|
|
|
23 |
1523d |
1781d
|
13/25 |
1488d |
f87e62d45e51
net/tls: remove close callback sock unlock/lock around TX work flush
|
|
general protection fault in tls_trim_both_msgs
net
|
C |
done |
|
36 |
1510d |
1521d
|
13/25 |
1488d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
KASAN: invalid-free in tls_sk_proto_cleanup
net
|
|
|
|
5 |
1512d |
1515d
|
13/25 |
1488d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
BUG: unable to handle kernel paging request in tls_prots
bpf
net
|
syz |
done |
|
1 |
1550d |
1550d
|
13/25 |
1488d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: use-after-free Read in tls_wait_data
net
|
|
|
|
1 |
1513d |
1507d
|
13/25 |
1488d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
WARNING: ODEBUG bug in __sk_destruct
net
s390
|
C |
|
|
2855 |
1508d |
1973d
|
13/25 |
1488d |
f9cedf1a9b1c
net/smc: do not schedule tx_work in SMC_CLOSED state
|
|
general protection fault in tls_tx_records
net
|
|
|
|
1 |
1515d |
1507d
|
13/25 |
1488d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
memory leak in create_ctx
net
|
syz |
|
|
1 |
1568d |
1568d
|
13/25 |
1488d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: use-after-free Read in tls_sk_proto_cleanup
net
|
|
|
|
9 |
1510d |
1521d
|
13/25 |
1488d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
general protection fault in tls_setsockopt
net
|
syz |
done |
|
7 |
1516d |
1529d
|
13/25 |
1488d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
KASAN: use-after-free Read in tls_push_sg
net
|
|
|
|
2 |
1516d |
1590d
|
13/25 |
1495d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
possible deadlock in xsk_notifier
bpf
net
|
C |
done |
|
495 |
1526d |
1538d
|
13/25 |
1501d |
5464c3a0e9a0
xdp: fix potential deadlock on socket mutex
|
|
general protection fault in send_hsr_supervision_frame
net
|
C |
done |
|
1395 |
1530d |
1538d
|
13/25 |
1510d |
311633b60406
hsr: switch ->dellink() to ->ndo_uninit()
|
|
memory leak in ip_mc_add_src (2)
net
|
C |
|
|
7 |
1520d |
1549d
|
13/25 |
1510d |
e5b1c6c6277d
igmp: fix memory leak in igmpv3_del_delrec()
|
|
general protection fault in ip6_datagram_dst_update
net
|
C |
done |
|
12 |
1533d |
1536d
|
13/25 |
1510d |
8975a3abc303
ipv6: fix potential crash in ip6_datagram_dst_update()
|
|
KASAN: use-after-free Read in ip_expire
net
|
|
|
|
1 |
1558d |
1558d
|
13/25 |
1510d |
d5dd88794a13
inet: fix various use-after-free in defrags units
|
|
KMSAN: uninit-value in bond_start_xmit (2)
net
|
C |
|
|
2309 |
1510d |
1834d
|
13/25 |
1510d |
9d1bc24b52fb
bonding: validate ip header before check IPPROTO_IGMP
|
|
memory leak in pfkey_xfrm_policy2msg_prep
net
|
C |
|
|
4 |
1550d |
1582d
|
13/25 |
1510d |
7c80eb1c7e2b
af_key: fix leaks in key_pol_get_resp and dump_sp.
|
|
KASAN: use-after-free Read in kfree_skb_list
net
|
C |
done |
|
383 |
1556d |
1575d
|
13/25 |
1510d |
b7034146756b
net: fix use-after-free in kfree_skb_list
|
|
memory leak in __ip6_append_data
net
|
C |
|
|
10 |
1553d |
1579d
|
13/25 |
1510d |
dc93f46bc4e0
inet: frags: fix use-after-free read in inet_frag_destroy_rcu
|
|
KASAN: use-after-free Write in xfrm_hash_rebuild
net
|
syz |
done |
|
8 |
1543d |
1591d
|
13/25 |
1510d |
fd709721352d
xfrm: policy: fix bydst hlist corruption on hash rebuild
|
|
WARNING: suspicious RCU usage in in_dev_dump_addr
net
|
C |
done |
|
107 |
1571d |
1573d
|
13/25 |
1510d |
d3e6e285fff3
net: ipv4: fix rcu lockdep splat due to wrong annotation
|
|
general protection fault in tcp_v6_send_reset
net
|
C |
done |
|
353 |
1565d |
1569d
|
13/25 |
1510d |
392096736a06
ipv6: tcp: fix potential NULL deref in tcp_v6_send_reset()
|
|
KASAN: use-after-free Read in inet_frag_destroy_rcu
net
|
C |
done |
|
61 |
1577d |
1580d
|
13/25 |
1510d |
dc93f46bc4e0
inet: frags: fix use-after-free read in inet_frag_destroy_rcu
|
|
KASAN: use-after-free Read in rhashtable_last_table (2)
net
|
|
|
|
1 |
1584d |
1584d
|
13/25 |
1510d |
dc93f46bc4e0
inet: frags: fix use-after-free read in inet_frag_destroy_rcu
|
|
general protection fault in rxrpc_connect_call
afs
net
|
C |
done |
|
15 |
1558d |
1704d
|
13/25 |
1510d |
e835ada07091
rxrpc: Fix send on a connected, but unbound socket
|
|
WARNING: suspicious RCU usage in fib_dump_info_fnhe
net
|
C |
done |
|
7 |
1550d |
1550d
|
13/25 |
1510d |
3b525691529b
ipv6: fix suspicious RCU usage in rt6_dump_route()
|
|
memory leak in hsr_create_self_node
net
|
C |
|
|
5 |
1549d |
1580d
|
13/25 |
1510d |
b9a1e627405d
hsr: implement dellink to clean up resources
|
|
general protection fault in call_fib6_multipath_entry_notifiers
net
|
C |
done |
|
94 |
1551d |
1557d
|
13/25 |
1510d |
9eee3b4913d7
ipv6: Error when route does not have any valid nexthops
|
|
memory leak in packet_set_ring
net
|
C |
|
|
2 |
1549d |
1553d
|
13/25 |
1517d |
55655e3d1197
net/packet: fix memory leak in packet_set_ring()
|
|
general protection fault in inet_accept
net
|
C |
|
|
131 |
1738d |
1900d
|
13/25 |
1535d |
07603b230895
net/smc: propagate file from SMC to TCP socket
|
|
BUG: unable to handle kernel paging request in ipv6_rcv (2)
net
|
|
|
|
18 |
1557d |
1581d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
KMSAN: uninit-value in tcp_create_openreq_child
net
|
C |
|
|
4000 |
1536d |
1557d
|
13/25 |
1535d |
85f9aa7565bd
inet: clear num_timeout reqsk_alloc()
|
|
KASAN: slab-out-of-bounds Read in dst_dev_put
net
|
|
|
|
3 |
1669d |
1720d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
KASAN: use-after-free Read in pneigh_get_next
net
|
syz |
done |
|
2 |
1561d |
1561d
|
13/25 |
1535d |
f3e92cb8e2eb
neigh: fix use-after-free read in pneigh_get_next
|
|
KASAN: slab-out-of-bounds Read in __fib6_drop_pcpu_from
net
|
|
|
|
1 |
1560d |
1560d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
memory leak in inet6_create
net
|
C |
|
|
2 |
1567d |
1570d
|
13/25 |
1535d |
522924b58308
net: correct udp zerocopy refcnt also when zerocopy only on append
|
|
general protection fault in rt_cache_valid
net
|
|
|
|
24 |
1553d |
1680d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
KASAN: use-after-free Read in sprintf
net
|
syz |
done |
|
2 |
1561d |
1561d
|
13/25 |
1535d |
f3e92cb8e2eb
neigh: fix use-after-free read in pneigh_get_next
|
|
general protection fault in dst_dev_put (2)
net
|
C |
done |
|
442 |
1557d |
1747d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
KASAN: slab-out-of-bounds Read in rt_cache_valid
net
|
|
|
|
3 |
1574d |
1572d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
BUG: unable to handle kernel paging request in dst_dev_put
net
|
|
|
|
3 |
1577d |
1720d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
KASAN: use-after-free Read in rt_cache_valid
net
|
syz |
done |
|
5 |
1568d |
1684d
|
13/25 |
1535d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
memory leak in new_inode_pseudo
s390
net
|
C |
|
|
136 |
1536d |
1584d
|
13/25 |
1535d |
355e8d26f719
io_uring: fix memory leak of UNIX domain socket inode
|
|
memory leak in packet_setsockopt
net
|
C |
|
|
10 |
1569d |
1586d
|
13/25 |
1556d |
afa0925c6fcc
packet: unconditionally free po->rollover
|
|
KASAN: wild-memory-access Read in refcount_sub_and_test_checked
net
|
|
|
|
2 |
1576d |
1593d
|
13/25 |
1558d |
61fb0d016807
ipv6: prevent possible fib6 leaks
|
|
KASAN: use-after-free Read in ip6_fragment
net
|
|
|
|
1 |
1589d |
1589d
|
13/25 |
1558d |
61fb0d016807
ipv6: prevent possible fib6 leaks
|
|
BUG: unable to handle kernel NULL pointer dereference in ip6_rcv_finish
net
|
|
|
|
3 |
1564d |
1593d
|
13/25 |
1558d |
61fb0d016807
ipv6: prevent possible fib6 leaks
|
|
KASAN: use-after-free Write in fib6_purge_rt
net
|
|
|
|
2 |
1583d |
1590d
|
13/25 |
1558d |
61fb0d016807
ipv6: prevent possible fib6 leaks
|
|
KASAN: null-ptr-deref Write in fib6_purge_rt
net
|
|
|
|
18 |
1571d |
1594d
|
13/25 |
1558d |
61fb0d016807
ipv6: prevent possible fib6 leaks
|
|
memory leak in ip_mc_add_src
net
|
C |
|
|
14 |
1562d |
1586d
|
13/25 |
1558d |
3580d04aa674
ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
|
|
memory leak in llc_ui_create
net
|
C |
|
|
4 |
1567d |
1580d
|
13/25 |
1558d |
8fb44d60d414
llc: fix skb leak in llc_build_and_send_ui_pkt()
|
|
memory leak in inet_create
net
|
C |
|
|
2 |
1571d |
1586d
|
13/25 |
1558d |
100f6d8e0990
net: correct zerocopy refcnt with udp MSG_MORE
|
|
KASAN: slab-out-of-bounds Write in fib6_purge_rt
net
|
|
|
|
6 |
1558d |
1594d
|
13/25 |
1558d |
61fb0d016807
ipv6: prevent possible fib6 leaks
|
|
KASAN: use-after-free Read in __dev_map_entry_free
net
bpf
|
C |
|
|
473 |
1640d |
1921d
|
13/25 |
1558d |
2baae3545327
bpf: devmap: fix use-after-free Read in __dev_map_entry_free
|
|
BUG: assuming atomic context at net/core/flow_dissector.c:LINE
net
|
syz |
|
|
19 |
1592d |
1596d
|
13/25 |
1562d |
b1c17a9a3538
flow_dissector: disable preemption around BPF calls
|
|
KASAN: use-after-free Read in tcp_v6_send_reset
net
|
|
|
|
1 |
1642d |
1642d
|
13/25 |
1562d |
4f661542a402
tcp: fix zerocopy and notsent_lowat issues
|
|
KASAN: slab-out-of-bounds Write in skb_release_data
net
|
|
|
|
1 |
1641d |
1641d
|
13/25 |
1562d |
4f661542a402
tcp: fix zerocopy and notsent_lowat issues
|
|
general protection fault in __handle_mm_fault
net
|
C |
error |
|
17 |
1804d |
1813d
|
13/25 |
1565d |
ff09d7ec9786
mm/memory.c: recheck page table entry with page table lock held
|
|
WARNING in xfrm_state_fini (2)
net
|
C |
|
|
37510 |
1604d |
2057d
|
13/25 |
1580d |
dbb2483b2a46
xfrm: clean up xfrm protocol checks
|
|
KMSAN: uninit-value in rtnl_stats_dump
net
|
syz |
|
|
14 |
1610d |
1625d
|
13/25 |
1580d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
WARNING: suspicious RCU usage in fib_compute_spec_dst
net
|
|
|
|
1 |
1624d |
1624d
|
13/25 |
1580d |
c543cb4a5f07
ipv4: ensure rcu_read_lock() in ipv4_link_failure()
|
|
KASAN: slab-out-of-bounds Read in skb_gro_receive (2)
net
|
C |
done |
|
5 |
1605d |
1605d
|
13/25 |
1580d |
4dd2b82d5adf
udp: fix GRO packet of death
|
|
KASAN: stack-out-of-bounds Write in __ip_options_echo
net
|
syz |
done |
|
8 |
1614d |
1617d
|
13/25 |
1580d |
20ff83f10f11
ipv4: add sanity checks in ipv4_link_failure()
|
|
WARNING in wiphy_register (4)
net
wireless
|
syz |
error |
|
3 |
1624d |
1652d
|
13/25 |
1580d |
45fcef8b727b
mac80211_hwsim: calculate if_combination.max_interfaces
|
|
general protection fault in ieee80211_debugfs_rename_netdev
wireless
net
|
|
|
|
8 |
1609d |
1623d
|
13/25 |
1580d |
517879147493
mac80211: don't attempt to rename ERR_PTR() debugfs dirs
|
|
KMSAN: uninit-value in rtnl_stats_get
net
|
C |
|
|
5 |
1617d |
1625d
|
13/25 |
1580d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
kernel BUG at net/core/net-sysfs.c:LINE!
net
|
C |
done |
|
890 |
1609d |
1645d
|
13/25 |
1580d |
8ed633b9baf9
Revert "net-sysfs: Fix memory leak in netdev_register_kobject"
|
|
WARNING: refcount bug in l2tp_tunnel_get
net
|
|
|
|
1 |
1607d |
1607d
|
13/25 |
1580d |
a622b40035d1
l2ip: fix possible use-after-free
|
|
KASAN: user-memory-access Write in fib6_purge_rt
net
|
|
|
|
6 |
1581d |
1611d
|
13/25 |
1580d |
0e2338749192
ipv6: fix races in ip6_dst_destroy()
|
|
INFO: task hung in vhost_net_stop_vq
net
virt
kvm
|
C |
done |
|
136 |
1620d |
1757d
|
13/25 |
1580d |
813dbeb656d6
vhost: reject zero size iova range
|
|
WARNING: locking bug in icmp_send
net
|
syz |
done |
|
1 |
1677d |
1676d
|
13/25 |
1597d |
9926cb5f8b0f
tipc: change to check tipc_own_id to return in tipc_net_stop
|
|
KMSAN: uninit-value in ip6_compressed_string
net
nfs
|
C |
|
|
9024 |
1608d |
1760d
|
13/25 |
1607d |
7c2bd9a39845
NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
|
|
BUG: corrupted list in rhashtable_walk_enter
net
|
syz |
error |
|
3 |
1644d |
1643d
|
13/25 |
1625d |
b5f9bd15b885
ila: Fix rhashtable walker list corruption
|
|
BUG: unable to handle kernel paging request in ip6_fragment
net
|
|
|
|
1 |
1640d |
1639d
|
13/25 |
1625d |
ef0efcd3bd3f
ipv6: Fix dangling pointer when ipv6 fragment
|
|
WARNING: lock held when returning to user space in tun_get_user
net
|
C |
done |
|
55 |
1651d |
1652d
|
13/25 |
1627d |
9180bb4f0460
tun: add a missing rcu_read_unlock() in error path
|
|
general protection fault in fib6_purge_rt
net
|
C |
done |
|
60 |
1629d |
1746d
|
13/25 |
1627d |
9926cb5f8b0f
tipc: change to check tipc_own_id to return in tipc_net_stop
|
|
KASAN: slab-out-of-bounds Read in icmp6_send
net
|
|
|
|
1 |
1654d |
1654d
|
13/25 |
1627d |
4477138fa0ae
tun: properly test for IFF_UP
|
|
KASAN: use-after-free Read in __icmp_send
net
|
|
|
|
1 |
1645d |
1641d
|
13/25 |
1627d |
4477138fa0ae
tun: properly test for IFF_UP
|
|
general protection fault in tc_ctl_chain
net
|
C |
|
|
21 |
1674d |
1683d
|
12/25 |
1640d |
af736bf071e8
net: sched: potential NULL dereference in tcf_block_find()
|
|
KASAN: use-after-free Read in unix_dgram_poll
net
|
syz |
|
|
2 |
1669d |
1665d
|
12/25 |
1640d |
84c4e1f89fef
aio: simplify - and fix - fget/fput for io_submit()
|
|
KMSAN: uninit-value in gue6_err (2)
net
|
C |
|
|
2826 |
1640d |
1662d
|
12/25 |
1640d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
kernel BUG at kernel/time/timer.c:LINE! (3)
net
|
|
|
|
1 |
1661d |
1661d
|
12/25 |
1640d |
1e027960edfa
net/hsr: fix possible crash in add_timer()
|
|
BUG: unable to handle kernel paging request in gro_cells_destroy (3)
net
|
|
|
|
3 |
1642d |
1658d
|
12/25 |
1640d |
2a5ff07a0eb9
gro_cells: make sure device is up in gro_cells_receive()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (2)
net
|
C |
|
|
8 |
1641d |
1656d
|
12/25 |
1640d |
163d1c3d6f17
l2tp: fix infoleak in l2tp_ip6_recvmsg()
|
|
general protection fault in xsk_diag_dump
bpf
net
|
C |
|
|
5 |
1658d |
1663d
|
12/25 |
1640d |
915905f8b1d4
xsk: fix potential crash in xsk_diag_put_umem()
|
|
KMSAN: uninit-value in gue_err (2)
net
|
C |
|
|
1617 |
1640d |
1662d
|
12/25 |
1640d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
KASAN: slab-out-of-bounds Read in xfrm_policy_insert_list
net
|
|
|
|
1 |
1714d |
1713d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
KASAN: use-after-free Write in __xfrm_policy_unlink
net
|
C |
|
|
254 |
1665d |
1893d
|
12/25 |
1662d |
1548bc4e0512
xfrm: policy: delete inexact policies from inexact list on hash rebuild
|
|
KASAN: use-after-free Read in xfrm_migrate
net
|
|
|
|
5 |
1697d |
1720d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING in xfrm_policy_insert_list
net
|
|
|
|
2 |
1712d |
1723d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
KASAN: use-after-free Read in __smc_diag_dump
s390
net
|
syz |
|
|
34 |
1713d |
1725d
|
12/25 |
1662d |
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
KASAN: slab-out-of-bounds Read in xfrm_policy_lookup_bytype
net
|
|
|
|
6 |
1716d |
1738d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
KASAN: use-after-free Read in kernel_accept
net
s390
|
C |
|
|
19 |
1745d |
1895d
|
12/25 |
1662d |
78abe3d0dfad
net/smc: fix TCP fallback socket release
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
KASAN: use-after-free Read in xfrm_policy_insert_list
net
|
|
|
|
30 |
1697d |
1739d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING in __skb_flow_dissect (3)
net
|
syz |
|
|
224 |
1712d |
1801d
|
12/25 |
1662d |
0b7959b62573
tun: publish tfile after it's fully initialized
|
|
INFO: rcu detected stall in pfkey_sendmsg
net
|
|
|
|
7 |
1714d |
1739d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
general protection fault in kernel_accept
net
s390
|
C |
|
|
280 |
1738d |
1900d
|
12/25 |
1662d |
78abe3d0dfad
net/smc: fix TCP fallback socket release
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
KMSAN: kernel-infoleak in move_addr_to_user
net
|
|
|
|
5 |
1669d |
1719d
|
12/25 |
1662d |
7d033c9f6a7f
ipv6: fix kernel-infoleak in ipv6_local_error()
|
|
BUG: unable to handle kernel paging request in depot_save_stack
net
|
C |
|
|
1 |
1722d |
1722d
|
12/25 |
1662d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: global-out-of-bounds Read in validate_nla
net
wireless
|
C |
|
|
14 |
1698d |
1703d
|
12/25 |
1662d |
a8b5c6d69261
nl80211: fix NLA_POLICY_NESTED() arguments
|
|
KASAN: slab-out-of-bounds Read in __xfrm_policy_bysel_ctx
net
|
|
|
|
1 |
1724d |
1724d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING in tcp_send_loss_probe
net
|
C |
|
|
9 |
1672d |
1724d
|
12/25 |
1662d |
bf50b606cfd8
tcp: repaired skbs must init their tso_segs
|
|
KASAN: stack-out-of-bounds Read in pick_next_task_fair
net
|
C |
|
|
1 |
1722d |
1722d
|
12/25 |
1662d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
general protection fault in icmp6_send
net
|
syz |
|
|
2 |
1723d |
1723d
|
12/25 |
1662d |
8d9336704521
ipv6: make icmp6_send() robust against null skb->dev
|
|
WARNING in clear_standby
ceph
net
|
C |
|
|
3522 |
1703d |
1828d
|
12/25 |
1662d |
4aac9228d164
libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
|
|
general protection fault in __xfrm_policy_bysel_ctx
net
|
|
|
|
1 |
1700d |
1698d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
KASAN: slab-out-of-bounds Read in xfrm_policy_inexact_insert
net
|
|
|
|
3 |
1714d |
1738d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
general protection fault in team_nl_cmd_options_set
net
|
C |
|
|
7 |
1732d |
1689d
|
12/25 |
1662d |
2fdeee254923
team: avoid complex list operations in team_nl_cmd_options_set()
|
|
KASAN: slab-out-of-bounds Write in __xfrm_policy_unlink
net
|
|
|
|
34 |
1697d |
1777d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
INFO: rcu detected stall in xfrm_hash_rebuild
net
|
|
|
|
77 |
1697d |
1748d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING in wiphy_register (3)
net
wireless
|
syz |
|
|
31 |
1698d |
1728d
|
12/25 |
1662d |
9c5d3afac436
mac80211_hwsim: check that n_limits makes sense
|
|
general protection fault in xfrm_policy_insert_list
net
|
|
|
|
4 |
1719d |
1734d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
BUG: unable to handle kernel NULL pointer dereference in setup_kmem_cache_node
net
v9fs
|
|
|
|
3 |
1724d |
1725d
|
12/25 |
1662d |
09c2e76ed734
slab: alien caches must not be initialized if the allocation of the alien cache failed
|
|
general protection fault in xfrm_policy_lookup_bytype
net
|
|
|
|
5 |
1698d |
1727d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
KASAN: slab-out-of-bounds Read in __pskb_copy_fclone
net
|
|
|
|
22 |
1744d |
1811d
|
12/25 |
1662d |
e7c87bd6cc4e
bpf: in __bpf_redirect_no_mac pull mac only if present
|
|
kernel panic: stack is corrupted in udp4_lib_lookup2
net
|
|
|
|
11 |
1727d |
1724d
|
12/25 |
1662d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: stack-out-of-bounds Read in gue_err_proto_handler
net
|
C |
|
|
1 |
1720d |
1720d
|
12/25 |
1662d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: use-after-free Read in __xfrm_policy_bysel_ctx
net
|
|
|
|
11 |
1697d |
1734d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
KASAN: use-after-free Read in xfrm_policy_inexact_insert
net
|
|
|
|
42 |
1697d |
1727d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
INFO: rcu detected stall in ipv6_rcv
net
|
|
|
|
7 |
1700d |
1737d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
KMSAN: uninit-value in gue_err
net
|
C |
|
|
4686 |
1662d |
1716d
|
12/25 |
1662d |
26fc181e6cac
fou, fou6: do not assume linear skbs
|
|
general protection fault in ip6erspan_set_version
net
|
C |
|
|
39 |
1671d |
1676d
|
12/25 |
1662d |
efcc9bcaf77c
net: ip6_gre: fix possible NULL pointer dereference in ip6erspan_set_version
|
|
KASAN: use-after-free Read in xfrm_policy_lookup_bytype
net
|
|
|
|
33 |
1698d |
1738d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING in xfrm6_tunnel_net_exit (2)
net
|
C |
|
|
48816 |
1671d |
1953d
|
12/25 |
1662d |
f75a2804da39
xfrm: destroy xfrm_state synchronously on net exit path
|
|
WARNING in xfrm_policy_inexact_gc_tree
net
|
|
|
|
645 |
1697d |
1748d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING: refcount bug in xfrm_policy_bysel_ctx
net
|
|
|
|
1 |
1716d |
1716d
|
12/25 |
1662d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING: bad unlock balance in rxrpc_recvmsg
afs
net
|
C |
|
|
9 |
1688d |
1692d
|
12/25 |
1662d |
6dce3c20ac42
|