|
KASAN: null-ptr-deref Read in smc_tcp_syn_recv_sock
smc
|
11 |
C |
error |
inconclusive |
24 |
54d |
398d
|
27/29 |
never |
6d5e4538364b
net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
|
|
general protection fault in __smc_diag_dump (4)
smc
|
2 |
C |
done |
|
6 |
193d |
229d
|
29/29 |
167d |
f584239a9ed2
net/smc: fix general protection fault in __smc_diag_dump
|
|
KASAN: use-after-free Read in __pnet_find_base_ndev
smc
|
19 |
|
|
|
2 |
222d |
235d
|
29/29 |
186d |
3d3466878afd
smc: Fix use-after-free in __pnet_find_base_ndev().
|
|
possible deadlock in smc_diag_dump_proto
smc
|
4 |
C |
error |
|
113 |
241d |
243d
|
29/29 |
186d |
5d6b58c932ec
net: lockless sock_i_ino()
|
|
possible deadlock in smc_shutdown (3)
smc
|
4 |
|
|
|
2 |
220d |
247d
|
29/29 |
186d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
general protection fault in __smc_diag_dump (3)
smc
|
2 |
C |
error |
|
102 |
249d |
543d
|
29/29 |
242d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
possible deadlock in smc_switch_to_fallback (2)
smc
|
4 |
C |
error |
done |
27435 |
370d |
679d
|
29/29 |
303d |
752e2217d789
smc: Fix lockdep false-positive for IPPROTO_SMC.
|
|
general protection fault in __smc_diag_dump (2)
smc
|
2 |
|
|
|
14 |
559d |
613d
|
28/29 |
559d |
98d4435efcbf
net/smc: prevent NULL pointer dereference in txopt_get
|
|
BUG: MAX_LOCK_DEPTH too low! (3)
smc
|
-1 |
C |
done |
|
18 |
1536d |
1545d
|
22/29 |
1165d |
1de9770d121e
net/smc: Avoid overwriting the copies of clcsock callback functions
|
|
KASAN: slab-out-of-bounds Read in smc_fback_error_report
smc
|
19 |
C |
error |
|
72 |
1467d |
1543d
|
22/29 |
1165d |
0558226cebee
net/smc: Fix slab-out-of-bounds issue in fallback
|
|
inconsistent lock state in smc_fback_state_change
smc
|
4 |
C |
error |
|
7 |
1256d |
1262d
|
22/29 |
1165d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
general protection fault in smc_pnet_add (2)
smc
|
2 |
C |
inconclusive |
|
590 |
1480d |
1495d
|
22/29 |
1165d |
d22f4f977236
net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
|
|
WARNING: refcount bug in smc_pnet_add
smc
|
13 |
C |
done |
|
98 |
1535d |
1548d
|
22/29 |
1165d |
28f922213886
net/smc: fix ref_tracker issue in smc_pnet_add()
|
|
memory leak in smc_sysctl_net_init
smc
|
3 |
C |
|
|
8 |
1497d |
1501d
|
22/29 |
1165d |
5ae6acf1d00b
net/smc: fix a memory leak in smc_sysctl_net_exit()
|
|
memory leak in smc_create (2)
smc
|
3 |
C |
|
|
2 |
1501d |
1497d
|
22/29 |
1165d |
1a74e9932374
net/smc: Fix sock leak when release after smc_shutdown()
|
|
general protection fault in smc_pnet_add
smc
|
2 |
|
|
|
578 |
1518d |
1573d
|
20/29 |
1518d |
7b9b1d449a7c
net/smc: fix possible NULL deref in smc_pnet_add_eth()
|
|
possible deadlock in smc_switch_to_fallback
smc
|
4 |
|
|
|
43575 |
1607d |
1626d
|
20/29 |
1518d |
7a61432dc813
net/smc: Avoid warning of possible recursive locking
|
|
general protection fault in smc_tx_sendmsg
smc
|
2 |
C |
done |
|
6369 |
1770d |
1778d
|
20/29 |
1636d |
17081633e22d
net/smc: Ensure correct state of the socket in send path
|
|
KASAN: global-out-of-bounds Read in smc_nl_get_sys_info
smc
|
17 |
C |
error |
|
27 |
1934d |
1961d
|
19/29 |
1881d |
25fe2c9c4cd2
smc: fix out of bound access in smc_nl_get_sys_info()
|
|
KASAN: slab-out-of-bounds Read in smc_nl_handle_smcr_dev
smc
|
17 |
|
|
|
1 |
1964d |
1960d
|
19/29 |
1881d |
995433b795ce
net/smc: fix access to parent of an ib device
|
|
BUG: unable to handle kernel paging request in smc_nl_handle_smcr_dev
smc
|
8 |
C |
|
|
16 |
1950d |
1973d
|
19/29 |
1881d |
995433b795ce
net/smc: fix access to parent of an ib device
|
|
WARNING: refcount bug in smc_release (3)
smc
|
13 |
|
|
|
1 |
2075d |
2064d
|
15/29 |
2047d |
5fb8642a17aa
net/smc: fix sock refcounting in case of termination
|
|
WARNING: ODEBUG bug in smc_ib_remove_dev
smc
|
-1 |
|
|
|
52 |
2240d |
2254d
|
15/29 |
2210d |
ece0d7bd7461
net/smc: cancel event worker during device removal
|
|
general protection fault in smc_ib_remove_dev
smc
|
2 |
C |
done |
|
98 |
2249d |
2261d
|
15/29 |
2210d |
a2f2ef4a54c0
net/smc: check for valid ib_client_data
|
|
WARNING: refcount bug in smc_release (2)
smc
|
13 |
C |
done |
|
9 |
2329d |
2352d
|
15/29 |
2271d |
86434744fedf
net/smc: add fallback check to connect()
|
|
WARNING in smc_unhash_sk (3)
smc
|
-1 |
C |
done |
|
362 |
2351d |
2441d
|
14/29 |
2348d |
8204df72bea1
net/smc: fix fastopen for non-blocking connect()
|
|
memory leak in smc_create
smc
|
3 |
C |
|
|
19 |
2360d |
2373d
|
14/29 |
2348d |
6d6dd528d5af
net/smc: fix refcount non-blocking connect() -part 2
|
|
WARNING: refcount bug in smc_release
smc
|
13 |
C |
done |
|
8 |
2361d |
2384d
|
13/29 |
2354d |
301428ea3708
net/smc: fix refcounting for non-blocking connect()
|
|
WARNING: ODEBUG bug in __sk_destruct
smc
|
-1 |
C |
|
|
2855 |
2462d |
2927d
|
12/29 |
2442d |
f9cedf1a9b1c
net/smc: do not schedule tx_work in SMC_CLOSED state
|
|
memory leak in new_inode_pseudo
smc
|
3 |
C |
|
|
136 |
2490d |
2538d
|
12/29 |
2489d |
355e8d26f719
io_uring: fix memory leak of UNIX domain socket inode
|
|
KASAN: use-after-free Read in __smc_diag_dump
smc
|
19 |
syz |
|
|
34 |
2666d |
2679d
|
11/29 |
2616d |
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
KASAN: use-after-free Read in kernel_accept
smc
|
19 |
C |
|
|
19 |
2699d |
2849d
|
11/29 |
2616d |
78abe3d0dfad
net/smc: fix TCP fallback socket release
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
general protection fault in kernel_accept
smc
|
2 |
C |
|
|
280 |
2692d |
2853d
|
11/29 |
2616d |
78abe3d0dfad
net/smc: fix TCP fallback socket release
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
general protection fault in smc_ioctl (3)
smc
|
2 |
C |
|
|
15 |
2825d |
2826d
|
8/29 |
2806d |
7311d665ca68
net/smc: move sock lock in smc_ioctl()
|
|
general protection fault in smc_tx_prepared_sends
smc
|
2 |
C |
|
|
7 |
2830d |
2832d
|
8/29 |
2806d |
7311d665ca68
net/smc: move sock lock in smc_ioctl()
|
|
WARNING: refcount bug in smc_tcp_listen_work
smc
|
13 |
|
|
|
1 |
2889d |
2889d
|
8/29 |
2827d |
e1bbdd570474
net/smc: reduce sock_put() for fallback sockets
|
|
general protection fault in smc_ioctl (2)
smc
|
2 |
C |
|
|
43 |
2827d |
2850d
|
8/29 |
2827d |
1992d99882af
net/smc: take sock lock in smc_ioctl()
|
|
WARNING in smc_unhash_sk
smc
|
-1 |
C |
|
|
155731 |
2829d |
2992d
|
8/29 |
2827d |
e1bbdd570474
net/smc: reduce sock_put() for fallback sockets
|
|
general protection fault in smc_ioctl
smc
|
2 |
C |
|
|
5214 |
2878d |
2907d
|
8/29 |
2855d |
2351abe6f873
net/smc: return 0 for ioctl calls in states INIT and CLOSED
|
|
WARNING: ODEBUG bug in del_timer (2)
smc
|
-1 |
C |
|
|
6 |
2908d |
2909d
|
8/29 |
2855d |
be7f3e59997b
net/smc: init conn.tx_work & conn.send_lock sooner
|
|
general protection fault in kernel_sock_shutdown
smc
|
2 |
C |
|
|
3329 |
2934d |
2992d
|
5/29 |
2860d |
1255fcb2a655
net/smc: fix shutdown in state SMC_LISTEN
|
|
BUG: unable to handle kernel paging request in smc_ib_remember_port_attr
smc
|
8 |
C |
|
|
112 |
2905d |
2961d
|
5/29 |
2888d |
d49baa7e12ee
net/smc: check for missing nlattrs in SMC_PNETID messages
|
|
general protection fault in smc_getname
smc
|
2 |
C |
|
|
44 |
2922d |
2986d
|
5/29 |
2910d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
general protection fault in smc_getsockopt
smc
|
2 |
C |
|
|
577 |
2922d |
2982d
|
5/29 |
2910d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
general protection fault in smc_setsockopt
smc
|
2 |
C |
|
|
504 |
2922d |
2986d
|
5/29 |
2910d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
general protection fault in smc_set_keepalive
smc
|
2 |
C |
|
|
6 |
2926d |
2931d
|
5/29 |
2910d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
WARNING: ODEBUG bug in del_timer
smc
|
-1 |
C |
|
|
200 |
2910d |
2927d
|
5/29 |
2910d |
784813aed6ba
net/smc: restrict non-blocking connect finish
|
|
BUG: unable to handle kernel NULL pointer dereference in smc_getsockopt
smc
|
10 |
C |
|
|
9 |
2910d |
2915d
|
5/29 |
2910d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
possible deadlock in smc_close_non_accepted
smc
|
4 |
C |
|
|
4 |
2985d |
2985d
|
5/29 |
2921d |
3d502067599f
net/smc: simplify wait when closing listen socket
|
|
general protection fault in smc_create
smc
|
2 |
C |
|
|
2 |
2989d |
2989d
|
4/29 |
2981d |
a5dcb73b96a9
net/smc: fix NULL pointer dereference on sock_create_kern() error path
|