KASAN: slab-use-after-free Read in ib_register_device
rdma
|
19 |
|
|
|
1 |
96d |
92d
|
29/29 |
23d |
d0706bfd3ee4
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
|
INFO: trying to register non-static key in rxe_qp_do_cleanup
rdma
|
-1 |
|
|
|
7 |
62d |
104d
|
29/29 |
23d |
1c7eec4d5f3b
RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug
|
KASAN: slab-use-after-free Read in nla_put (2)
rdma
|
19 |
|
|
|
1 |
151d |
145d
|
28/29 |
51d |
1d6a9e7449e2
RDMA/core: Fix use-after-free when rename device name
|
KASAN: slab-use-after-free Read in dev_get_flags
rdma
|
19 |
|
|
|
7 |
251d |
238d
|
28/29 |
85d |
2ac5415022d1
RDMA/rxe: Remove the direct link to net_device
16b87037b488
RDMA/siw: Remove direct link to net_device
|
WARNING in gid_table_release_one (2)
rdma
|
-1 |
|
|
|
1 |
336d |
332d
|
28/29 |
280d |
1403c8b14765
IB/core: Fix ib_cache_setup_one error flow cleanup
|
general protection fault in rxe_completer
rdma
|
2 |
|
|
|
281 |
692d |
773d
|
23/29 |
658d |
5993b75d0bc7
RDMA/rxe: Fix unsafe drain work queue code
|
INFO: trying to register non-static key in skb_dequeue (2)
rdma
|
-1 |
syz |
error |
|
123 |
776d |
820d
|
23/29 |
672d |
2a62b6210ce8
RDMA/rxe: Fix the use-before-initialization error of resp_pkts
|
INFO: trying to register non-static key in rxe_cleanup_task (2)
rdma
|
-1 |
|
|
|
148 |
818d |
884d
|
22/29 |
784d |
b2b1ddc45745
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
|
possible deadlock in worker_thread
rdma
|
4 |
|
|
|
1 |
1271d |
1267d
|
22/29 |
888d |
081bdc9fe05b
RDMA/ib_srp: Fix a deadlock
bf23747ee053
loop: revert "make autoclear operation asynchronous"
|
KASAN: use-after-free Read in ucma_destroy_private_ctx
rdma
|
19 |
|
|
|
1 |
1311d |
1305d
|
22/29 |
888d |
36e8169ec973
RDMA/ucma: Protect mc during concurrent multicast leaves
|
BUG: sleeping function called from invalid context in smc_pnet_apply_ib
rdma
|
5 |
C |
inconclusive |
|
92 |
1252d |
1260d
|
22/29 |
888d |
7ff57e98fb78
net/smc: Use a mutex for locking "struct smc_pnettable"
|
INFO: trying to register non-static key in rxe_cleanup_task
rdma
|
-1 |
syz |
|
|
299 |
889d |
1165d
|
22/29 |
888d |
fd5382c5805c
RDMA/rxe: Fix error unwind in rxe_create_qp()
|
WARNING: refcount bug in nldev_newlink
rdma
|
13 |
C |
|
|
33 |
961d |
967d
|
22/29 |
888d |
e42f9c2e6aad
RDMA: Add missed netdev_put() for the netdevice_tracker
|
WARNING: refcount bug in free_netdevs
rdma
|
13 |
|
|
|
3 |
961d |
965d
|
22/29 |
888d |
e42f9c2e6aad
RDMA: Add missed netdev_put() for the netdevice_tracker
|
BUG: unable to handle kernel NULL pointer dereference in __rxe_do_task
rdma
|
10 |
syz |
|
|
120 |
1015d |
1083d
|
22/29 |
888d |
a625ca30eff8
RDMA/rxe: Fix "kernel NULL pointer dereference" error
|
BUG: corrupted list in rdma_listen (2)
rdma
|
19 |
C |
inconclusive |
|
5 |
1269d |
1335d
|
22/29 |
888d |
22e9f71072fa
RDMA/cma: Do not change route.addr.src_addr outside state checks
|
WARNING: refcount bug in put_gid_ndev
rdma
|
13 |
|
|
|
3 |
965d |
965d
|
22/29 |
888d |
e42f9c2e6aad
RDMA: Add missed netdev_put() for the netdevice_tracker
|
upstream boot error: WARNING in alloc_workqueue
net
rdma
|
-1 |
|
|
|
1 |
1082d |
1082d
|
22/29 |
888d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
KMSAN: kernel-infoleak in ucma_init_qp_attr
rdma
|
9 |
|
|
|
1 |
1314d |
1304d
|
20/29 |
1241d |
b35a0f4dd544
RDMA/core: Don't infoleak GRH fields
|
general protection fault in nldev_stat_set_doit (2)
rdma
|
2 |
|
|
|
12 |
1346d |
1355d
|
20/29 |
1241d |
d821f7c13ca0
RDMA/nldev: Check stat attribute before accessing it
|
KASAN: use-after-free Read in rxe_queue_cleanup
rdma
|
19 |
|
|
|
65 |
1323d |
1350d
|
20/29 |
1241d |
84b01721e804
RDMA: Fix use-after-free in rxe_queue_cleanup
|
WARNING: refcount bug in rxe_qp_do_cleanup
rdma
|
13 |
|
|
|
1 |
1545d |
1543d
|
20/29 |
1359d |
67f29896fdc8
RDMA/rxe: Clear all QP fields if creation failed
|
BUG: sleeping function called from invalid context in rxe_alloc_nl
rdma
|
5 |
C |
done |
|
475 |
1640d |
1654d
|
20/29 |
1574d |
c4369575b2bc
RDMA/rxe: Fix bug in rxe_alloc()
|
possible deadlock in _destroy_id
rdma
|
4 |
C |
unreliable |
|
28 |
1708d |
1716d
|
19/29 |
1604d |
dd37d2f59eb8
RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
|
KASAN: use-after-free Read in ucma_close (2)
rdma
|
19 |
syz |
done |
|
1 |
1785d |
1785d
|
15/29 |
1718d |
f5449e74802c
RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
|
KASAN: use-after-free Write in addr_resolve
rdma
|
24 |
|
|
|
1 |
1880d |
1877d
|
15/29 |
1779d |
f6a9d47ae685
RDMA/cma: Execute rdma_cm destruction from a handler properly
|
KASAN: use-after-free Read in addr_handler (2)
rdma
|
19 |
|
|
|
2 |
1834d |
1877d
|
15/29 |
1779d |
f6a9d47ae685
RDMA/cma: Execute rdma_cm destruction from a handler properly
|
WARNING in ib_unregister_device_queued
rdma
|
-1 |
|
|
|
2 |
1911d |
1922d
|
15/29 |
1779d |
0cb42c026583
RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued()
|
KMSAN: uninit-value in ucma_connect
rdma
|
7 |
C |
|
|
138 |
1783d |
1835d
|
15/29 |
1779d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
KMSAN: uninit-value in xa_load
rdma
|
7 |
C |
|
|
208 |
1779d |
1835d
|
15/29 |
1779d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
KASAN: use-after-free Read in addr_handler
rdma
|
19 |
syz |
done |
|
12 |
1940d |
2422d
|
15/29 |
1908d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
KASAN: use-after-free Read in cma_cancel_operation
rdma
|
19 |
C |
done |
|
617 |
1996d |
2676d
|
15/29 |
1908d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
KASAN: use-after-free Read in rdma_listen (2)
rdma
|
19 |
C |
done |
|
354 |
1946d |
2315d
|
15/29 |
1908d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
KASAN: use-after-free Read in __list_del_entry_valid (4)
rdma
|
19 |
C |
done |
|
16 |
1997d |
2684d
|
15/29 |
1908d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
general protection fault in rdma_listen (2)
rdma
|
2 |
syz |
done |
|
104 |
1946d |
2458d
|
15/29 |
1908d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
possible deadlock in cma_netdev_callback
rdma
|
4 |
C |
done |
|
1399 |
1940d |
1982d
|
15/29 |
1908d |
33fb27fd5446
RDMA/siw: Fix passive connection establishment
|
BUG: corrupted list in rdma_listen
rdma
|
8 |
C |
|
|
202 |
2081d |
2660d
|
15/29 |
1908d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
INFO: trying to register non-static key in xa_destroy
rdma
|
-1 |
C |
done |
|
46 |
1956d |
1983d
|
15/29 |
1933d |
12e5eef0f4d8
RDMA/siw: Fix failure handling during device creation
|
general protection fault in nldev_stat_set_doit
rdma
|
2 |
C |
done |
|
8 |
1966d |
1983d
|
15/29 |
1933d |
78f34a16c286
RDMA/nldev: Fix crash when set a QP to a new counter but QPN is missing
|
KMSAN: use-after-free in rdma_listen
rdma
|
18 |
C |
|
|
26 |
1974d |
2120d
|
15/29 |
1954d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
KMSAN: uninit-value in rdma_listen
rdma
|
7 |
C |
|
|
28 |
2131d |
2496d
|
15/29 |
1954d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
WARNING in cma_exit_net
rdma
|
-1 |
|
|
|
25 |
2311d |
2313d
|
12/29 |
2239d |
061ccb52d23c
RDMA/cma: Set proper port number as index
|
KASAN: use-after-free Read in rdma_listen
rdma
|
19 |
C |
|
|
1548 |
2318d |
2677d
|
11/29 |
2317d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
KASAN: use-after-free Read in alloc_workqueue
rdma
|
19 |
C |
|
|
37 |
2329d |
2342d
|
11/29 |
2317d |
009bb421b6ce
workqueue, lockdep: Fix an alloc_workqueue() error path
|
KASAN: use-after-free Read in rdma_resolve_addr
rdma
|
19 |
|
|
|
1 |
2500d |
2500d
|
11/29 |
2352d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
KASAN: use-after-free Read in cma_acquire_dev
rdma
|
19 |
|
|
|
1 |
2582d |
2581d
|
11/29 |
2352d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
KASAN: use-after-free Read in wait_for_completion
rdma
|
19 |
|
|
|
1 |
2476d |
2475d
|
11/29 |
2352d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
KASAN: use-after-free Read in __list_add_valid (5)
rdma
|
19 |
C |
|
|
16 |
2678d |
2684d
|
11/29 |
2352d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
general protection fault in addr_resolve
rdma
|
2 |
C |
|
|
32 |
2488d |
2505d
|
11/29 |
2453d |
fe33507ec38a
RDMA/core: Check error status of rdma_find_ndev_for_src_ip_rcu
|
KASAN: use-after-free Write in ucma_put_ctx
rdma
|
24 |
syz |
|
|
11 |
2500d |
2519d
|
11/29 |
2485d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
KASAN: use-after-free Read in cma_bind_port
rdma
|
19 |
syz |
|
|
2 |
2514d |
2519d
|
11/29 |
2485d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
INFO: task hung in ucma_destroy_id
rdma
|
1 |
C |
|
|
46 |
2661d |
2697d
|
5/29 |
2583d |
ef95a90ae6f4
RDMA/ucma: ucma_context reference leak in error path
|
WARNING: kmalloc bug in memdup_user (2)
rdma
|
-1 |
|
|
|
1 |
2684d |
2684d
|
5/29 |
2635d |
5f3e3b85cc0a
RDMA/ucma: Correct option size check using optlen
|
general protection fault in rdma_addr_size
rdma
|
2 |
C |
|
|
2 |
2693d |
2687d
|
5/29 |
2636d |
e8980d67d601
RDMA/ucma: Ensure that CM_ID exists prior to access it
|
general protection fault in ucma_set_ib_path (2)
rdma
|
2 |
C |
|
|
6 |
2668d |
2676d
|
5/29 |
2641d |
8435168d50e6
RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
|
general protection fault in rdma_init_qp_attr (2)
rdma
|
2 |
C |
|
|
753 |
2680d |
2687d
|
5/29 |
2673d |
4b658d1bbc16
RDMA/ucma: Check that device is connected prior to access it
|
general protection fault in rdma_notify
rdma
|
2 |
C |
|
|
3 |
2689d |
2687d
|
5/29 |
2673d |
c8d3bcbfc5ea
RDMA/ucma: Check that device exists prior to accessing it
|
kernel BUG at lib/string.c:LINE! (3)
rdma
|
-1 |
C |
|
|
5 |
2681d |
2682d
|
5/29 |
2673d |
84652aefb347
RDMA/ucma: Introduce safer rdma_addr_size() variants
|
general protection fault in rdma_init_qp_attr
rdma
|
2 |
C |
|
|
2096 |
2687d |
2703d
|
4/29 |
2687d |
a5880b844303
RDMA/ucma: Check that user doesn't overflow QP state
|
KASAN: use-after-free Read in ucma_close
rdma
|
19 |
C |
|
|
176 |
2689d |
2703d
|
4/29 |
2687d |
ed65a4dc2208
RDMA/ucma: Fix use-after-free access in ucma_close
|
kernel BUG at lib/string.c:LINE! (2)
rdma
|
-1 |
syz |
|
|
2 |
2697d |
2697d
|
4/29 |
2687d |
0c81ffc60d52
RDMA/ucma: Don't allow join attempts for unsupported AF family
|
WARNING: kmalloc bug in memdup_user
rdma
|
-1 |
C |
|
|
441 |
2687d |
2703d
|
4/29 |
2687d |
6a21dfc0d0db
RDMA/ucma: Limit possible option size
|
general protection fault in ucma_connect
rdma
|
2 |
C |
|
|
2 |
2694d |
2693d
|
4/29 |
2687d |
e8980d67d601
RDMA/ucma: Ensure that CM_ID exists prior to access it
|
general protection fault in rdma_join_multicast
rdma
|
2 |
C |
|
|
258 |
2689d |
2703d
|
4/29 |
2687d |
7688f2c3bbf5
RDMA/ucma: Fix access to non-initialized CM_ID object
|
KASAN: null-ptr-deref Write in rdma_resolve_addr
rdma
|
12 |
C |
|
|
66 |
2690d |
2700d
|
4/29 |
2687d |
2975d5de6428
RDMA/ucma: Check AF family prior resolving address
|