|
KCSAN: data-race in sctp_poll / sctp_wfree (3)
sctp
|
|
|
|
1 |
27d |
26d
|
22/25 |
never |
dc9511dd6f37
sctp: annotate data-races around sk->sk_wmem_queued
|
|
general protection fault in sctp_outq_tail
sctp
|
C |
error |
|
5 |
173d |
185d
|
24/25 |
107d |
2584024b2355
sctp: check send stream number after wait_for_sndbuf
|
|
memory leak in sctp_sched_prio_set
sctp
|
C |
|
|
2 |
304d |
309d
|
24/25 |
211d |
9ed7bfc79542
sctp: fix memory leak in sctp_stream_outq_migrate()
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold (2)
sctp
|
C |
inconclusive |
|
7 |
363d |
362d
|
24/25 |
211d |
022152aaebe1
sctp: handle the error returned from sctp_auth_asoc_init_active_key
|
|
kernel panic: stack is corrupted in __kmalloc
integrity
lsm
sctp
|
|
|
|
4 |
216d |
470d
|
24/25 |
211d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
general protection fault in sctp_rcv
sctp
|
|
|
|
2 |
730d |
733d
|
22/25 |
564d |
f7e745f8e944
sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
|
|
KASAN: use-after-free Read in __lock_sock
sctp
|
syz |
done |
error |
26 |
956d |
1771d
|
22/25 |
564d |
5ec7d18d1813
sctp: use call_rcu to free endpoint
|
|
KASAN: use-after-free Read in sctp_do_8_2_transport_strike
sctp
|
|
|
|
1 |
887d |
887d
|
22/25 |
683d |
35b4f24415c8
sctp: do asoc update earlier in sctp_sf_do_dupcook_a
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold
sctp
|
C |
done |
|
4 |
795d |
804d
|
22/25 |
683d |
58acd1009226
sctp: update active_key for asoc when old key is being replaced
|
|
possible deadlock in sctp_addr_wq_timeout_handler
sctp
|
C |
done |
|
8 |
875d |
876d
|
22/25 |
683d |
01bfe5e8e428
Revert "net/sctp: fix race condition in sctp_destroy_sock"
|
|
KASAN: use-after-free Read in sctp_auth_free
sctp
|
C |
done |
|
4 |
1080d |
1081d
|
17/25 |
1041d |
d42ee76ecb6c
net-backports: sctp: fix sctp_auth_init_hmacs() error path
|
|
KASAN: slab-out-of-bounds Write in sctp_setsockopt
sctp
|
C |
error |
|
590 |
1153d |
1158d
|
17/25 |
1102d |
dfd3d5266dc1
sctp: fix slab-out-of-bounds in SCTP_DELAYED_SACK processing
|
|
KASAN: wild-memory-access Read in sctp_setsockopt
sctp
|
C |
|
|
2 |
1136d |
1136d
|
17/25 |
1102d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
WARNING: refcount bug in sctp_wfree
sctp
|
C |
done |
|
20 |
1272d |
1293d
|
17/25 |
1231d |
5c3e82fe1596
sctp: fix refcount bug in sctp_wfree
|
|
memory leak in _sctp_make_chunk
sctp
|
C |
|
|
1 |
1377d |
1377d
|
16/25 |
1313d |
be7a77292077
sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
|
|
memory leak in sctp_stream_init
sctp
|
C |
|
|
1 |
1379d |
1378d
|
16/25 |
1318d |
951c6db954a1
sctp: fix memleak on err handling of stream initialization
|
|
general protection fault in sctp_stream_free (2)
sctp
|
C |
done |
|
25 |
1363d |
1374d
|
16/25 |
1318d |
61d5d4062876
sctp: fix err handling of stream initialization
|
|
KCSAN: data-race in sctp_assoc_migrate / sctp_hash_obj
sctp
|
|
|
|
12 |
1389d |
1416d
|
16/25 |
1381d |
312434617cb1
sctp: cache netns in sctp_ep_common
|
|
memory leak in sctp_get_port_local (3)
sctp
|
C |
|
|
4 |
1435d |
1441d
|
14/25 |
1419d |
63dfb7938b13
sctp: change sctp_prot .no_autobind with true
|
|
memory leak in sctp_stream_init_ext
sctp
|
C |
|
|
34 |
1441d |
1576d
|
14/25 |
1426d |
3c52b0af059e
lib/generic-radix-tree.c: add kmemleak annotations
|
|
kernel BUG at include/linux/skbuff.h:LINE! (2)
sctp
|
C |
done |
|
58 |
1489d |
1499d
|
14/25 |
1439d |
c7a42eb49212
net: ipv6: fix listify ip6_rcv_finish in case of forwarding
|
|
KASAN: slab-out-of-bounds Read in sctp_inq_pop
sctp
|
|
|
|
1 |
1491d |
1489d
|
14/25 |
1439d |
c7a42eb49212
net: ipv6: fix listify ip6_rcv_finish in case of forwarding
|
|
general protection fault in sctp_inq_pop
sctp
|
|
|
|
4 |
1490d |
1493d
|
14/25 |
1439d |
c7a42eb49212
net: ipv6: fix listify ip6_rcv_finish in case of forwarding
|
|
memory leak in sctp_get_port_local (2)
sctp
|
C |
|
|
34 |
1449d |
1507d
|
14/25 |
1445d |
29b99f54a8e6
sctp: destroy bucket if failed to bind addr
|
|
memory leak in sctp_send_reset_streams
sctp
|
C |
|
|
7 |
1499d |
1576d
|
14/25 |
1450d |
6d5afe20397b
sctp: fix memleak in sctp_send_reset_streams
|
|
memory leak in sctp_get_port_local
sctp
|
C |
|
|
28 |
1512d |
1579d
|
13/25 |
1510d |
9b6c08878e23
sctp: not bind the socket in sctp_connect
|
|
general protection fault in sctp_sched_prio_sched
sctp
|
C |
done |
|
3 |
1547d |
1561d
|
13/25 |
1510d |
4d1415811e49
sctp: fix error handling on stream scheduler initialization
|
|
memory leak in sctp_v6_create_accept_sk
sctp
|
C |
|
|
1 |
1574d |
1574d
|
13/25 |
1517d |
25bff6d5478b
sctp: change to hold sk after auth shkey is created successfully
|
|
memory leak in sctp_v4_create_accept_sk
sctp
|
C |
|
|
1 |
1554d |
1552d
|
13/25 |
1517d |
25bff6d5478b
sctp: change to hold sk after auth shkey is created successfully
|
|
memory leak in sctp_process_init
sctp
|
C |
|
|
10 |
1560d |
1580d
|
13/25 |
1536d |
0a8dd9f67cd0
Fix memory leak in sctp_process_init
ce950f1050ce
sctp: Free cookie before we memdup a new one
|
|
general protection fault in sctp_sched_dequeue_common (2)
sctp
|
C |
done |
|
3 |
1654d |
1654d
|
13/25 |
1553d |
2e990dfd1397
sctp: remove sched init from sctp_stream_init
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (3)
sctp
|
syz |
|
|
11 |
1628d |
1640d
|
13/25 |
1625d |
09279e615c81
sctp: initialize _pad of sockaddr_in before copying to user memory
|
|
general protection fault in sctp_assoc_rwnd_increase
sctp
|
C |
done |
|
28 |
1641d |
1656d
|
13/25 |
1627d |
636d25d557d1
sctp: not copy sctp_sock pd_lobby in sctp_copy_descendant
|
|
general protection fault in sctp_sched_rr_dequeue
sctp
|
C |
done |
|
11 |
1653d |
1663d
|
12/25 |
1640d |
2e990dfd1397
sctp: remove sched init from sctp_stream_init
|
|
KASAN: use-after-free Read in sctp_outq_tail
sctp
|
|
|
|
1 |
1684d |
1684d
|
12/25 |
1662d |
af98c5a78517
sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
|
|
KASAN: invalid-free in sctp_stream_free
sctp
|
C |
|
|
5 |
1684d |
1692d
|
12/25 |
1662d |
af98c5a78517
sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
|
|
general protection fault in sctp_sched_dequeue_common
sctp
|
|
|
|
6 |
1678d |
1768d
|
12/25 |
1662d |
cfe4bd7a257f
sctp: check and update stream->out_curr when allocating stream_out
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (2)
sctp
|
C |
|
|
16 |
1662d |
1713d
|
12/25 |
1662d |
400b8b9a2a17
sctp: allocate sctp_sockaddr_entry with kzalloc
|
|
KMSAN: kernel-infoleak in sctp_getsockopt
sctp
|
syz |
|
|
147 |
1717d |
1753d
|
12/25 |
1717d |
4a2eb0c37b47
sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
|
|
KASAN: use-after-free Read in sctp_hash_transport
sctp
|
|
|
|
1 |
1771d |
1770d
|
12/25 |
1740d |
fb6df5a6234c
sctp: kfree_rcu asoc
|
|
KASAN: use-after-free Read in sctp_epaddr_lookup_transport
sctp
|
syz |
|
|
5 |
1771d |
1772d
|
12/25 |
1740d |
fb6df5a6234c
sctp: kfree_rcu asoc
|
|
KASAN: slab-out-of-bounds Read in sctp_getsockopt
sctp
|
C |
|
|
9 |
1794d |
1793d
|
12/25 |
1776d |
713358369382
sctp: check policy more carefully when getting pr status
|
|
KASAN: use-after-free Read in sctp_outq_select_transport
sctp
|
|
|
|
1 |
1797d |
1796d
|
12/25 |
1776d |
df132eff4638
sctp: clear the transport of some out_chunk_list chunks in sctp_assoc_rm_peer
|
|
KASAN: use-after-free Read in sctp_id2assoc
sctp
|
|
|
|
1 |
1816d |
1815d
|
12/25 |
1790d |
b336decab221
sctp: fix race on sctp_id2asoc
|
|
KASAN: use-after-free Read in sctp_transport_get_next
sctp
|
C |
|
|
6 |
1854d |
1856d
|
11/25 |
1839d |
bab1be79a516
sctp: hold transport before accessing its asoc in sctp_transport_get_next
|
|
WARNING in sctp_assoc_update_frag_point
sctp
|
|
|
|
5 |
1894d |
1916d
|
9/25 |
1873d |
a65925475571
sctp: fix the issue that pathmtu may be set lower than MINSEGMENT
|
|
INFO: rcu detected stall in kmem_cache_alloc_node_trace
sctp
|
|
|
|
1 |
1990d |
1972d
|
9/25 |
1902d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
INFO: rcu detected stall in sctp_packet_transmit
sctp
|
|
|
|
1 |
1957d |
1956d
|
9/25 |
1902d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
INFO: rcu detected stall in sctp_chunk_put
sctp
|
|
|
|
1 |
1941d |
1940d
|
9/25 |
1902d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
INFO: rcu detected stall in sctp_generate_heartbeat_event
sctp
|
|
|
|
2 |
1955d |
1964d
|
9/25 |
1902d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
INFO: rcu detected stall in save_stack_trace
sctp
|
C |
|
|
1 |
1953d |
1951d
|
9/25 |
1902d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
KASAN: use-after-free Read in sctp_do_sm
sctp
|
|
|
|
2 |
1964d |
1964d
|
6/25 |
1955d |
6910e25de225
sctp: remove sctp_chunk_put from fail_mark err path in sctp_ulpevent_make_rcvmsg
|
|
KMSAN: uninit-value in __sctp_v6_cmp_addr
sctp
|
C |
|
|
1109 |
1956d |
1957d
|
6/25 |
1956d |
d625329b06e4
sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
|
|
KASAN: slab-out-of-bounds Read in __sctp_v6_cmp_addr
sctp
|
C |
|
|
3202 |
1968d |
1980d
|
6/25 |
1956d |
d625329b06e4
sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
|
|
KMSAN: uninit-value in sctp_sendmsg
sctp
|
syz |
|
|
27 |
1965d |
1994d
|
6/25 |
1964d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
KMSAN: uninit-value in sctp_do_bind
sctp
|
C |
|
|
31 |
1964d |
1994d
|
6/25 |
1964d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
KASAN: use-after-free Read in sctp_association_free (2)
sctp
|
C |
|
|
2 |
2024d |
2024d
|
6/25 |
1964d |
0aee4c259849
sctp: Fix double free in sctp_sendmsg_to_asoc
|
|
BUG: corrupted list in sctp_association_free
sctp
|
|
|
|
1 |
2024d |
2020d
|
6/25 |
1964d |
d98985dd6c2d
sctp: fix error return code in sctp_sendmsg_new_asoc()
|
|
WARNING in refcount_sub_and_test
sctp
|
C |
|
|
75150 |
2059d |
2160d
|
4/25 |
2021d |
d04adf1b3551
sctp: reset owner sk for data chunks on out queues when migrating a sock
|
|
KASAN: use-after-free Read in sctp_association_free
sctp
|
C |
|
|
20 |
2137d |
2152d
|
4/25 |
2060d |
ca3af4dd28cf
sctp: do not free asoc when it is already dead in sctp_sendmsg
|
|
KASAN: slab-out-of-bounds Read in sctp_send_reset_streams
sctp
|
C |
|
|
73 |
2103d |
2114d
|
4/25 |
2060d |
2342b8d95bca
sctp: make sure stream nums can match optlen in sctp_setsockopt_reset_streams
|
|
general protection fault in sctp_stream_free
sctp
|
|
|
|
17 |
2107d |
2148d
|
4/25 |
2062d |
79d0895140e9
sctp: fix error path in sctp_stream_init
|
|
BUG: unable to handle kernel NULL pointer dereference in sctp_stream_free
sctp
|
|
|
|
2 |
2105d |
2103d
|
4/25 |
2062d |
79d0895140e9
sctp: fix error path in sctp_stream_init
|
|
general protection fault in skb_segment
sctp
|
C |
|
|
7 |
2084d |
2094d
|
4/25 |
2064d |
121d57af308d
gso: validate gso_type in GSO handlers
|
|
WARNING: held lock freed!
sctp
|
C |
|
|
497 |
2074d |
2085d
|
4/25 |
2070d |
a0ff660058b8
sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf
|
|
general protection fault in sctp_v6_get_dst
sctp
|
C |
|
|
6 |
2082d |
2082d
|
4/25 |
2070d |
c5006b8aa745
sctp: do not allow the v4 socket to bind a v4mapped v6 address
|
|
kernel BUG at net/core/skbuff.c:LINE!
sctp
|
|
|
|
5 |
2160d |
2231d
|
3/25 |
2157d |
c780a049f9bf
ipv4: better IP_MAX_MTU enforcement
|