|
BUG: unable to handle kernel NULL pointer dereference in snd_ctl_led_get
prio:low
sound
|
10 |
C |
|
|
3 |
61d |
61d
|
27/29 |
never |
74e3b979ce8b
ALSA: control: Don't add invalid kcontrols to LED layer
|
|
KASAN: use-after-free Read in release_card_device
prio:high
sound
|
19 |
C |
|
|
65 |
69d |
84d
|
27/29 |
never |
5ae1a690c522
ALSA: core: Fix use-after-free in snd_card_do_free()
|
|
UBSAN: array-index-out-of-bounds in snd_dummy_probe
prio:normal
sound
|
15 |
syz, C |
|
|
14 |
84d |
83d
|
27/29 |
never |
02442d5fe8ee
ALSA: dummy: Check card index validity at probe
|
|
BUG: unable to handle kernel paging request in azx_probe_work
prio:high
sound
|
8 |
syz, C |
|
|
69 |
71d |
83d
|
27/29 |
never |
9895573b0185
ALSA: hda/intel: Add sanity check for BAR0 size
|
|
BUG: unable to handle kernel paging request in snd_hdac_bus_parse_capabilities
prio:high
sound
|
8 |
C |
|
|
8 |
76d |
78d
|
27/29 |
never |
9895573b0185
ALSA: hda/intel: Add sanity check for BAR0 size
|
|
KASAN: slab-use-after-free Read in snd_card_free
actionable
prio:high
sound
|
19 |
|
|
|
1 |
61d |
41d
|
20/29 |
never |
fbaccb1b19c7
ALSA: hda: intel: Don't free card in the probe work
|
|
BUG: scheduling while atomic in wait_clear_urbs
prio:high
usb
sound
|
5 |
syz, C |
|
|
14 |
11d |
8d11h
|
14/29 |
never |
8ea1086f3fff
ALSA: pcm: Call snd_pcm_sync_stop outside spinlock in snd_pcm_drop()
|
|
WARNING: ODEBUG bug in dummy_pcm_close
prio:high
sound
|
-1 |
syz, C |
error |
|
27 |
2d22h |
62d
|
27/29 |
never |
acac7b5e0734
ALSA: pcm: Fix race between non-atomic ops and trigger-start
|
|
general protection fault in snd_pcm_timer_resolution
prio:high
sound
|
2 |
|
|
|
1 |
50d |
46d
|
26/29 |
never |
1e713f9bb2ac
ALSA: pcm: set timer->private_data before registering the PCM timer
|
|
possible deadlock in rawmidi_release_priv
prio:high
sound
|
4 |
syz |
|
|
18 |
60d |
64d
|
27/29 |
never |
58c1c30074a8
ALSA: rawmidi: Another workaround for false-positive mutex lockdep warning
|
|
possible deadlock in snd_rawmidi_kernel_open
prio:high
sound
|
4 |
|
|
|
15 |
69d |
90d
|
27/29 |
never |
9c04742e73b3
ALSA: rawmidi: Work around false-positive mutex lockdep warning
|
|
INFO: task hung in odev_open (5)
prio:high
sound
|
1 |
syz |
|
|
19 |
58d |
62d
|
20/29 |
never |
eb8a4dd45471
ALSA: rawmidi: give up draining output when the device stops draining
|
|
possible deadlock in snd_seq_deliver_event (2)
prio:high
sound
|
4 |
|
|
|
207 |
69d |
90d
|
27/29 |
never |
a9760db775ef
ALSA: seq: Use RCU for the port subscriber list
|
|
BUG: corrupted list in snd_complete_urb
prio:high
sound
|
8 |
|
|
|
1 |
100d |
96d
|
26/29 |
never |
dbd9d1cbf970
ALSA: usb-audio: fix list_add double-add in push_back_to_ready_list
|
|
KASAN: slab-use-after-free Write in snd_usb_midi_v2_free
prio:high
sound
|
22 |
|
|
|
256 |
68d |
84d
|
28/29 |
never |
f8a80cfb6861
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
|
|
BUG: scheduling while atomic in drain_urb_queue
prio:high
sound
|
5 |
C |
|
|
15 |
59d |
66d
|
27/29 |
never |
46094a7708b7
locking: Revert switching guards to _irq_{disable,enable}()
|
|
KASAN: invalid-free in snd_rawmidi_free
prio:high
sound
|
24 |
|
|
|
3 |
95d |
91d
|
29/29 |
43d |
70c977815af0
ALSA: ump: fix double free of out_cvts on rawmidi error
|
|
general protection fault in __schedule (3)
prio:low
sound
|
2 |
|
|
|
1649 |
91d |
137d
|
29/29 |
80d |
sched/fair: Fix newidle vs core-sched
|
|
KASAN: slab-use-after-free Read in snd_pcm_oss_look_for_setup (2)
prio:normal
sound
|
19 |
|
|
|
1 |
163d |
158d
|
29/29 |
104d |
4cc54bdd54b3
ALSA: pcm: oss: Fix setup list UAF on proc write error
|
|
KASAN: slab-use-after-free Read in snd_pcm_action_single (2)
sound
|
19 |
|
|
|
1 |
192d |
188d
|
29/29 |
159d |
e5c33cdc6f40
ALSA: aloop: Fix peer runtime UAF during format-change stop
|
|
INFO: task hung in usb_audio_probe (5)
sound
|
1 |
|
|
|
483 |
170d |
196d
|
29/29 |
159d |
3c318f97dcc5
ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
|
|
general protection fault in snd_scarlett2_controls_create
sound
|
2 |
syz, C |
|
|
5 |
237d |
234d
|
29/29 |
174d |
df1d8abf36ca
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
|
|
KASAN: slab-out-of-bounds Write in copy_to_urb (2)
usb
sound
|
21 |
syz, C |
|
|
5 |
290d |
288d
|
29/29 |
174d |
ef5749ef8b30
ALSA: usb-audio: Prevent excessive number of frames
|
|
general protection fault in snd_scarlett2_init
sound
|
2 |
syz, C |
|
|
3 |
237d |
234d
|
29/29 |
174d |
df1d8abf36ca
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
|
|
KASAN: slab-use-after-free Read in snd_pcm_stop
sound
|
19 |
syz, C |
error |
|
29 |
181d |
274d
|
29/29 |
174d |
826af7fa62e3
ALSA: aloop: Fix racy access at PCM trigger
|
|
KASAN: slab-out-of-bounds Write in copy_to_urb
usb
sound
|
21 |
syz, C |
|
|
33 |
297d |
356d
|
29/29 |
293d |
05a1fc5efdd8
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
|
|
possible deadlock in __snd_pcm_lib_xfer (2)
sound
|
4 |
syz, C |
done |
|
9 |
402d |
424d
|
29/29 |
363d |
9fc4a3da9a02
ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
|
|
general protection fault in snd_usbmidi_do_output
usb
sound
|
2 |
syz, C |
error |
|
8 |
393d |
400d
|
29/29 |
363d |
9f2c0ac1423d
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
|
|
KASAN: slab-use-after-free Read in snd_usbmidi_error_timer (2)
sound
|
19 |
|
|
|
12 |
394d |
399d
|
29/29 |
363d |
9f2c0ac1423d
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
|
|
possible deadlock in snd_pcm_drop
sound
|
4 |
syz, C |
error |
|
4 |
395d |
393d
|
29/29 |
363d |
9fc4a3da9a02
ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
|
|
KCSAN: data-race in snd_seq_fifo_cell_out / snd_seq_fifo_poll_wait
sound
|
6 |
|
|
|
1 |
442d |
442d
|
29/29 |
363d |
1f9fc89cbbe8
ALSA: seq: Fix KCSAN data-race warning at snd_seq_fifo_poll_wait()
|
|
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence (2)
sound
|
8 |
syz, C |
|
|
4 |
528d |
542d
|
29/29 |
477d |
93a81ca06577
ALSA: pcm: Fix race of buffer access at PCM OSS layer
|
|
WARNING: ODEBUG bug in snd_rawmidi_free
sound
usb
|
-1 |
syz, C |
error |
|
1 |
541d |
537d
|
29/29 |
477d |
0718a78f6a9f
ALSA: usb-audio: Kill timer properly at removal
|
|
possible deadlock in __snd_timer_user_ioctl
sound
|
4 |
|
|
|
1 |
589d |
585d
|
28/29 |
504d |
3424c8f53bc6
ALSA: timer: Don't take register_mutex with copy_from/to_user()
|
|
KCSAN: data-race in snd_seq_poll / snd_seq_pool_init
sound
|
6 |
|
|
|
3 |
588d |
601d
|
28/29 |
504d |
e3cd33ab17c3
ALSA: seq: Improve data consistency at polling
|
|
BUG: sleeping function called from invalid context in snd_card_locked
sound
|
5 |
|
|
|
1 |
610d |
606d
|
28/29 |
504d |
c9ce148ea753
ALSA: seq: Avoid module auto-load handling at event delivery
|
|
kernel BUG in filemap_fault
sound
|
-1 |
syz, C |
done |
|
138 |
509d |
607d
|
28/29 |
504d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
|
|
BUG: sleeping function called from invalid context in vfree
sound
|
5 |
|
|
|
1 |
702d |
701d
|
28/29 |
539d |
20c0c49720dc
ALSA: rawmidi: Fix kvfree() call in spinlock
|
|
WARNING in snd_ctl_led_register
sound
|
-1 |
|
|
|
1 |
692d |
688d
|
28/29 |
539d |
b2e538a9827d
ALSA: control: Avoid WARN() for symlink errors
|
|
kernel BUG in snd_pcm_mmap_data_fault
sound
|
-1 |
|
|
|
1 |
770d |
766d
|
28/29 |
539d |
d2913a07d903
ALSA: pcm: Add sanity NULL check for the default mmap fault handler
|
|
INFO: task hung in snd_card_free
sound
|
1 |
syz, C |
error |
|
24 |
709d |
724d
|
28/29 |
680d |
dafb28f02be4
ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
|
|
KMSAN: uninit-value in line6_midibuf_read
usb
sound
|
7 |
syz, C |
|
|
357 |
763d |
826d
|
28/29 |
754d |
15b7a03205b3
ALSA: line6: Fix racy access to midibuf
|
|
UBSAN: shift-out-of-bounds in parse_audio_unit
sound
|
-1 |
syz, C |
error |
|
3 |
837d |
835d
|
27/29 |
805d |
2f38cf730cae
ALSA: usb: Fix UBSAN warning in parse_audio_unit()
|
|
inconsistent lock state in valid_state (2)
sound
|
4 |
syz, C |
inconclusive |
|
57405 |
869d |
994d
|
25/29 |
869d |
b79491896151
dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
|
|
INFO: rcu detected stall in snd_timer_user_release (3)
sound
|
1 |
syz, C |
inconclusive |
|
3 |
902d |
911d
|
25/29 |
869d |
4a63bd179fa8
ALSA: timer: Set lower bound of start tick time
|
|
KMSAN: uninit-value in line6_pod_process_message
sound
|
7 |
syz, C |
|
|
5 |
938d |
939d
|
25/29 |
888d |
c4e51e424e2c
ALSA: line6: Zero-initialize message buffers
|
|
inconsistent lock state in snd_hrtimer_callback (2)
sound
|
4 |
syz, C |
|
|
2600 |
925d |
927d
|
25/29 |
918d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in snd_timer_close_locked (2)
sound
|
4 |
syz, C |
done |
|
3036 |
925d |
927d
|
25/29 |
918d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
inconsistent lock state in snd_timer_interrupt (3)
sound
|
4 |
syz, C |
|
|
710 |
925d |
929d
|
25/29 |
918d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
INFO: rcu detected stall in snd_timer_user_release (2)
sound
|
1 |
syz, C |
|
|
7 |
919d |
932d
|
25/29 |
918d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (5)
sound
|
4 |
syz, C |
|
|
5210 |
925d |
927d
|
25/29 |
918d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
inconsistent lock state in snd_timer_interrupt (2)
sound
|
4 |
syz, C |
done |
|
208 |
929d |
931d
|
25/29 |
929d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
KMSAN: uninit-value in bcmp (2)
sound
|
7 |
syz, C |
|
|
7 |
995d |
1017d
|
25/29 |
931d |
fde2497d2bc3
fat: fix uninitialized field in nostale filehandles
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (4)
sound
|
4 |
syz, C |
|
|
24677 |
931d |
953d
|
25/29 |
931d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in snd_pcm_period_elapsed (4)
sound
|
4 |
syz, C |
done |
|
90659 |
931d |
956d
|
25/29 |
931d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
inconsistent lock state in snd_timer_interrupt
sound
|
4 |
syz, C |
|
|
1927 |
931d |
953d
|
25/29 |
931d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
memory leak in snd_seq_create_port
sound
|
3 |
syz, C |
|
|
1 |
1203d |
1199d
|
23/29 |
1111d |
057849ccc3d8
ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
|
|
possible deadlock in snd_timer_interrupt (2)
sound
|
4 |
syz, C |
error |
|
29 |
1540d |
1801d
|
22/29 |
1341d |
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
WARNING in snd_usbmidi_output_open
sound
usb
|
-1 |
syz, C |
done |
|
37 |
1439d |
1446d
|
22/29 |
1341d |
ad72c3c3f6eb
ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
|
|
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek
usb
sound
|
19 |
syz |
error |
|
48 |
1543d |
1653d
|
22/29 |
1341d |
0665886ad139
ALSA: usb-audio: Clear MIDI port active flag after draining
|
|
KASAN: use-after-free Read in snd_rawmidi_transmit
sound
usb
|
19 |
syz, C |
done |
done |
7 |
1609d |
1644d
|
22/29 |
1341d |
0125de38122f
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
|
|
possible deadlock in __snd_pcm_lib_xfer
sound
|
4 |
syz, C |
unreliable |
|
3 |
1674d |
1673d
|
22/29 |
1341d |
bc55cfd5718c
ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
|
|
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence
sound
|
12 |
syz, C |
unreliable |
|
8 |
1518d |
1663d
|
22/29 |
1341d |
2f7a26abb824
ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
|
|
KASAN: use-after-free Read in __snd_rawmidi_transmit_ack
sound
|
19 |
|
|
|
1 |
1621d |
1617d
|
22/29 |
1341d |
0125de38122f
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
|
|
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2)
sound
|
-1 |
syz, C |
done |
|
2 |
1690d |
1686d
|
22/29 |
1341d |
efb6402c3c4a
ALSA: oss: Fix PCM OSS buffer allocation overflow
|
|
possible deadlock in snd_pcm_period_elapsed (3)
sound
|
4 |
syz, C |
inconclusive |
|
23 |
1538d |
1764d
|
22/29 |
1341d |
96b097091c66
ALSA: pcm: Use deferred fasync helper
|
|
KASAN: use-after-free Read in snd_mixer_oss_get_volume1
sound
|
19 |
syz, C |
inconclusive |
|
1 |
1837d |
1833d
|
20/29 |
1694d |
411cef6adfb3
ALSA: mixer: oss: Fix racy access to slots
|
|
WARNING: kmalloc bug in snd_pcm_plugin_alloc
sound
|
-1 |
|
|
|
4 |
1715d |
1797d
|
20/29 |
1694d |
9d2479c96087
ALSA: pcm: oss: Fix negative period/buffer sizes
8839c8c0f77a
ALSA: pcm: oss: Limit the period size to 16MB
|
|
possible deadlock in snd_mixer_oss_ioctl1
sound
|
4 |
syz, C |
done |
|
149 |
1826d |
1830d
|
20/29 |
1694d |
3ab799201845
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
|
|
INFO: rcu detected stall in snd_seq_write (2)
sound
|
1 |
syz |
done |
|
21 |
1810d |
1822d
|
20/29 |
1694d |
6fadb494a638
ALSA: seq: Set upper limit of processed events
|
|
KMSAN: uninit-value in snd_rawmidi_ioctl
sound
|
7 |
syz, C |
|
|
1506 |
1712d |
1774d
|
20/29 |
1694d |
39a8fc4971a0
ALSA: rawmidi - fix the uninitalized user_pversion
|
|
possible deadlock in snd_timer_interrupt
sound
|
4 |
syz, C |
done |
|
41 |
1820d |
1920d
|
20/29 |
1813d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
KASAN: use-after-free Read in snd_seq_timer_interrupt (2)
sound
|
19 |
syz, C |
inconclusive |
|
2 |
1970d |
1968d
|
20/29 |
1813d |
83e197a8414c
ALSA: seq: Fix race of snd_seq_timer_open()
|
|
UBSAN: shift-out-of-bounds in snd_timer_user_ccallback
sound
|
-1 |
|
|
|
1 |
1978d |
1974d
|
20/29 |
1813d |
9c1fe96bded9
ALSA: timer: Fix master timer notification
|
|
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info
usb
sound
|
17 |
syz, C |
|
|
10 |
1992d |
1996d
|
20/29 |
1813d |
e84749a78dc8
ALSA: usb-audio: Validate MS endpoint descriptors
|
|
general protection fault in usb_audio_probe
sound
usb
|
2 |
syz, C |
done |
|
360 |
2057d |
2059d
|
20/29 |
2027d |
30dea07180de
ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
|
|
KASAN: use-after-free Read in usb_audio_disconnect
sound
usb
|
19 |
syz, C |
done |
|
15 |
2057d |
2058d
|
20/29 |
2027d |
c5aa956eaeb0
ALSA: usb-audio: fix use after free in usb_audio_disconnect
|
|
KCSAN: data-race in snd_rawmidi_transmit / snd_rawmidi_write
sound
|
6 |
|
|
|
232 |
2091d |
2267d
|
19/29 |
2058d |
88a06d6fd6b3
ALSA: rawmidi: Access runtime->avail always in spinlock
|
|
UBSAN: shift-out-of-bounds in parse_audio_format_i
sound
usb
|
-1 |
syz, C |
error |
|
19 |
2143d |
2149d
|
19/29 |
2058d |
175b8d89fe29
ALSA: pcm: oss: Fix potential out-of-bounds shift
43d5ca88dfcd
ALSA: usb-audio: Fix potential out-of-bounds shift
|
|
KCSAN: data-race in snd_rawmidi_poll / snd_rawmidi_proceed
sound
|
6 |
|
|
|
378 |
2142d |
2268d
|
19/29 |
2058d |
88a06d6fd6b3
ALSA: rawmidi: Access runtime->avail always in spinlock
|
|
KMSAN: uninit-value in snd_seq_oss_synth_make_info (2)
sound
|
7 |
|
|
|
1 |
2116d |
2111d
|
19/29 |
2058d |
217bfbb8b0bf
ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
|
|
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info
sound
usb
|
-1 |
syz, C |
error |
|
9 |
2115d |
2135d
|
19/29 |
2058d |
c06ccf3ebb75
ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
|
|
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked
sound
|
-1 |
syz, C |
unreliable |
|
225 |
2134d |
2149d
|
19/29 |
2058d |
11cb881bf075
ALSA: pcm: oss: Fix a few more UBSAN fixes
|
|
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue (3)
sound
|
6 |
|
|
|
111 |
2143d |
2288d
|
19/29 |
2058d |
4ebd47037027
ALSA: seq: Use bool for snd_seq_queue internal flags
|
|
KASAN: use-after-free Read in snd_pcm_oss_release
sound
|
19 |
|
|
|
1 |
2253d |
2252d
|
15/29 |
2224d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING in snd_pcm_plugin_build_mulaw
sound
|
-1 |
syz, C |
done |
|
4 |
2250d |
2247d
|
15/29 |
2224d |
949a1ebe8cea
ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
|
|
general protection fault in snd_ctl_release
sound
|
2 |
syz |
done |
|
4 |
2246d |
2247d
|
15/29 |
2224d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs
sound
|
19 |
|
|
|
2 |
2300d |
2314d
|
15/29 |
2232d |
68359a1ad844
ALSA: line6: Sync the pending work cancel at disconnection
|
|
KASAN: use-after-free Read in delete_and_unsubscribe_port (2)
sound
|
19 |
syz |
done |
|
4 |
2276d |
2301d
|
15/29 |
2232d |
80982c7e834e
ALSA: seq: oss: Serialize ioctls
|
|
WARNING in submit_audio_out_urb/usb_submit_urb
sound
usb
|
-1 |
syz |
|
|
2 |
2302d |
2301d
|
15/29 |
2232d |
6e8a914ad619
ALSA: line6: Perform sanity check for each URB creation
|
|
KASAN: invalid-free in snd_seq_port_disconnect
sound
|
24 |
syz |
done |
|
9 |
2276d |
2281d
|
15/29 |
2232d |
80982c7e834e
ALSA: seq: oss: Serialize ioctls
|
|
WARNING in snd_usbmidi_submit_urb/usb_submit_urb
usb
sound
|
-1 |
syz, C |
done |
|
42 |
2315d |
2340d
|
15/29 |
2232d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
WARNING in snd_info_get_line
sound
|
-1 |
syz, C |
done |
|
36 |
2288d |
2293d
|
15/29 |
2232d |
60379ba08532
ALSA: info: Drop WARN_ON() from buffer NULL sanity check
|
|
WARNING in snd_usbmidi_input_start/usb_submit_urb
usb
sound
|
-1 |
syz, C |
done |
|
231 |
2292d |
2335d
|
15/29 |
2232d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id
usb
sound
|
21 |
syz, C |
done |
|
39 |
2312d |
2317d
|
15/29 |
2293d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt
sound
usb
|
21 |
syz, C |
done |
|
5 |
2315d |
2317d
|
15/29 |
2293d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
linux-next test error: WARNING in snd_pcm_plug_alloc
sound
|
-1 |
|
|
|
3 |
2420d |
2420d
|
15/29 |
2386d |
5461e0530c22
ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks
|
|
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue
sound
|
6 |
|
|
|
97 |
2387d |
2485d
|
15/29 |
2386d |
bb51e669fa49
ALSA: seq: Avoid concurrent access to queue flags
|
|
KCSAN: data-race in queue_access_lock / snd_seq_check_queue
sound
|
6 |
|
|
|
58 |
2426d |
2468d
|
15/29 |
2386d |
bb51e669fa49
ALSA: seq: Avoid concurrent access to queue flags
|
|
KCSAN: data-race in __snd_rawmidi_transmit_ack / snd_rawmidi_write
sound
|
6 |
|
|
|
168 |
2387d |
2513d
|
15/29 |
2386d |
dfa9a5efe8b9
ALSA: rawmidi: Avoid bit fields for state flags
|
|
KASAN: slab-out-of-bounds Read in resample_shrink
sound
|
17 |
syz, C |
done |
|
5 |
2408d |
2426d
|
15/29 |
2386d |
f2ecf903ef06
ALSA: pcm: oss: Avoid plugin buffer overflow
|
|
KCSAN: data-race in snd_seq_prioq_cell_out / snd_seq_timer_interrupt
sound
|
6 |
|
|
|
118 |
2387d |
2481d
|
15/29 |
2386d |
dc7497795e01
ALSA: seq: Fix concurrent access to queue current tick/time
|
|
memory leak in snd_pcm_hw_params
sound
|
3 |
syz, C |
|
|
25 |
2456d |
2463d
|
15/29 |
2443d |
66f2d19f8116
ALSA: pcm: Fix memory leak at closing a stream without hw_free
|
|
KASAN: use-after-free Read in snd_timer_resolution
sound
|
19 |
syz, C |
|
|
5 |
2459d |
2477d
|
15/29 |
2443d |
60adcfde92fa
ALSA: seq: Fix racy access for queue timer in proc read
|
|
WARNING in azx_rirb_get_response
sound
|
-1 |
|
|
|
4 |
2505d |
2507d
|
15/29 |
2448d |
475feec0c41a
ALSA: hda - Downgrade error message for single-cmd fallback
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit (2)
sound
usb
|
17 |
syz, C |
|
|
1 |
2547d |
2546d
|
15/29 |
2469d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
KASAN: slab-out-of-bounds Read in linear_transfer (3)
sound
|
17 |
syz, C |
done |
|
5 |
2518d |
2519d
|
15/29 |
2485d |
4cc8d6505ab8
ALSA: pcm: oss: Avoid potential buffer overflows
|
|
KASAN: use-after-free Read in snd_timer_open
sound
|
19 |
syz, C |
done |
|
87 |
2542d |
2542d
|
15/29 |
2511d |
0c4f09ceec3d
ALSA: timer: Fix the breakage of slave link open
|
|
general protection fault in snd_usb_create_mixer
usb
sound
|
2 |
syz, C |
|
|
1 |
2534d |
2532d
|
15/29 |
2511d |
9435f2bb6687
ALSA: usb-audio: Fix NULL dereference at parsing BADD
|
|
KMSAN: use-after-free in build_audio_procunit
sound
usb
|
18 |
syz, C |
|
|
2 |
2562d |
2562d
|
14/29 |
2524d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
KMSAN: uninit-value in get_min_max_with_quirks
sound
usb
|
7 |
syz, C |
|
|
11 |
2557d |
2545d
|
14/29 |
2524d |
167beb175679
ALSA: usb-audio: Fix missing error check at mixer resolution test
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit
usb
sound
|
17 |
syz, C |
|
|
6 |
2553d |
2562d
|
13/29 |
2547d |
ba8bf0967a15
ALSA: usb-audio: Fix copy&paste error in the validator
|
|
KASAN: use-after-free Read in snd_seq_ioctl_get_client_pool
sound
|
19 |
|
|
|
1 |
2626d |
2623d
|
12/29 |
2608d |
75545304eba6
ALSA: seq: Fix potential concurrent access to the deleted pool
|
|
INFO: task hung in snd_seq_write
sound
|
1 |
|
|
|
6 |
2778d |
2983d
|
12/29 |
2632d |
ede34f397ddb
ALSA: seq: Break too long mutex context in the write loop
|
|
general protection fault in snd_usb_pipe_sanity_check
usb
sound
|
2 |
syz, C |
|
|
72 |
2633d |
2647d
|
12/29 |
2632d |
5d78e1c2b7f4
ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
|
|
INFO: rcu detected stall in snd_seq_write
sound
|
1 |
syz |
error |
|
18 |
2652d |
2983d
|
12/29 |
2632d |
ede34f397ddb
ALSA: seq: Break too long mutex context in the write loop
|
|
KASAN: slab-out-of-bounds Read in linear_transfer (2)
sound
|
17 |
|
|
|
1 |
2753d |
2744d
|
12/29 |
2682d |
ca0214ee2802
ALSA: pcm: Fix possible OOB access in PCM oss plugins
|
|
KASAN: use-after-free Write in check_and_subscribe_port
sound
|
22 |
|
|
|
1 |
2737d |
2730d
|
12/29 |
2682d |
7c32ae35fbf9
ALSA: seq: Cover unsubscribe_port() in list_mutex
|
|
WARNING: proc registration bug in snd_info_card_register
usb
sound
|
-1 |
syz, C |
|
|
453 |
2711d |
2755d
|
12/29 |
2682d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
KASAN: slab-out-of-bounds Write in default_read_copy_kernel
sound
|
21 |
syz, C |
done |
|
3 |
2802d |
2879d
|
12/29 |
2682d |
ca0214ee2802
ALSA: pcm: Fix possible OOB access in PCM oss plugins
|
|
KASAN: null-ptr-deref Write in submit_audio_out_urb
sound
usb
|
12 |
syz, C |
|
|
185 |
2695d |
2710d
|
12/29 |
2688d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
KASAN: use-after-free Read in snd_seq_timer_interrupt
sound
|
19 |
|
|
|
1 |
2925d |
2925d
|
12/29 |
2692d |
fe1b26c93d43
ALSA: timer: Make snd_timer_close() really kill pending actions
|
|
INFO: task hung in snd_seq_kernel_client_ctl
sound
|
1 |
syz, C |
done |
|
554 |
2755d |
2756d
|
12/29 |
2692d |
f0654ba94e33
Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
|
|
KASAN: use-after-free Read in snd_timer_process_callbacks
sound
|
19 |
syz, C |
done |
|
4 |
2757d |
2759d
|
12/29 |
2692d |
df55531b8b0e
ALSA: timer: Revert active callback sync check at close
|
|
KASAN: use-after-free Read in snd_seq_ioctl_get_subscription
sound
|
19 |
|
|
|
2 |
2916d |
2949d
|
12/29 |
2692d |
2eabc5ec8ab4
ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
|
|
BUG: sleeping function called from invalid context in line6_pcm_acquire
sound
|
5 |
|
|
|
119 |
2711d |
2729d
|
12/29 |
2692d |
7f84ff68be05
ALSA: line6: toneport: Fix broken usage of timer for delayed execution
|
|
WARNING in port_delete
sound
|
-1 |
syz |
done |
|
22 |
2815d |
3030d
|
12/29 |
2692d |
7c32ae35fbf9
ALSA: seq: Cover unsubscribe_port() in list_mutex
feb689025fbb
ALSA: seq: Protect in-kernel ioctl calls with mutex
|
|
KASAN: use-after-free Read in snd_info_free_entry
usb
sound
|
19 |
syz, C |
|
|
47 |
2722d |
2753d
|
12/29 |
2710d |
2a3f7221acdd
ALSA: core: Fix card races between register and disconnect
8c2f870890fd
ALSA: info: Fix racy addition/deletion of nodes
|
|
KASAN: slab-out-of-bounds Read in default_write_copy_kernel
sound
|
17 |
syz, C |
done |
|
366 |
2771d |
2894d
|
12/29 |
2755d |
ca0214ee2802
ALSA: pcm: Fix possible OOB access in PCM oss plugins
|
|
INFO: rcu detected stall in snd_pcm_oss_read
sound
|
1 |
syz, C |
|
|
2 |
2865d |
2864d
|
11/29 |
2792d |
e190161f96b8
ALSA: pcm: Fix tight loop of OSS capture stream
|
|
KASAN: use-after-free Read in snd_ctl_elem_add
sound
|
19 |
|
|
|
1 |
2904d |
2903d
|
11/29 |
2873d |
e1a7bfe38079
ALSA: control: Fix race between adding and removing a user element
|
|
KMSAN: uninit-value in linear_transfer (2)
sound
|
7 |
syz, C |
|
|
7 |
2887d |
2910d
|
11/29 |
2881d |
65766ee0bf7f
ALSA: oss: Use kvzalloc() for local buffer allocations
|
|
KMSAN: uninit-value in snd_midi_event_encode_byte
sound
|
7 |
syz, C |
|
|
3 |
2977d |
2977d
|
10/29 |
2953d |
5a7b44a8df82
ALSA: rawmidi: Initialize allocated buffers
|
|
INFO: rcu detected stall in snd_pcm_oss_prepare
sound
|
1 |
|
|
|
4 |
3122d |
3124d
|
8/29 |
2974d |
e15dc99dbb9c
ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
|
|
BUG: soft lockup in snd_virmidi_output_trigger
sound
|
1 |
|
|
|
3 |
3022d |
3124d
|
8/29 |
2982d |
50e9ffb1996a
ALSA: virmidi: Fix too long output trigger loop
|
|
WARNING in __snd_rawmidi_transmit_ack (2)
sound
|
-1 |
syz, C |
|
|
6 |
2989d |
2996d
|
8/29 |
2982d |
82fd4b05d704
ALSA: seq: virmidi: Fix discarding the unsubscribed output
|
|
WARNING in __snd_rawmidi_transmit_ack
sound
|
-1 |
syz |
|
|
2 |
3026d |
3026d
|
8/29 |
3003d |
39675f7a7c7e
ALSA: rawmidi: Change resized buffers atomically
|
|
WARNING in __snd_pcm_lib_xfer
sound
|
-1 |
syz |
|
|
6 |
3099d |
3101d
|
5/29 |
3085d |
f13876e2c33a
ALSA: pcm: Check PCM state at xfern compat ioctl
|
|
BUG: unable to handle kernel paging request in memset_erms (2)
sound
|
8 |
syz, C |
|
|
11 |
3188d |
3203d
|
5/29 |
3089d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
KASAN: null-ptr-deref Write in linear_transfer
sound
|
12 |
syz, C |
|
|
116 |
3135d |
3217d
|
5/29 |
3089d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
sound
|
8 |
syz |
|
|
11 |
3094d |
3121d
|
5/29 |
3094d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
INFO: rcu detected stall in __snd_pcm_lib_xfer (2)
sound
|
1 |
syz, C |
|
|
1064 |
3121d |
3127d
|
5/29 |
3094d |
e15dc99dbb9c
ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
|
|
INFO: rcu detected stall in io_playback_transfer
sound
|
1 |
|
|
|
9 |
3121d |
3127d
|
5/29 |
3094d |
e15dc99dbb9c
ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
|
|
general protection fault in loopback_pos_update
sound
|
2 |
syz, C |
|
|
4 |
3202d |
3200d
|
5/29 |
3094d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
general protection fault in snd_rawmidi_ioctl_compat
sound
|
2 |
|
|
|
1 |
3121d |
3113d
|
5/29 |
3094d |
8a56ef4f3ffb
ALSA: rawmidi: Fix missing input substream checks in compat ioctls
|
|
KASAN: use-after-free Read in snd_pcm_timer_resolution
sound
|
19 |
syz, C |
|
|
3 |
3134d |
3134d
|
5/29 |
3094d |
a820ccbe21e8
ALSA: pcm: Fix UAF at PCM release via PCM timer access
|
|
WARNING in snd_pcm_hw_params
sound
|
-1 |
syz, C |
|
|
56 |
3122d |
3127d
|
5/29 |
3094d |
e1a3a981e320
ALSA: pcm: Remove WARN_ON() at snd_pcm_hw_params() error
|
|
KASAN: use-after-free Read in snd_pcm_oss_get_formats
sound
|
19 |
syz, C |
|
|
3 |
3154d |
3154d
|
4/29 |
3140d |
01c0b4265cc1
ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
|
|
INFO: rcu detected stall in memcpy
sound
|
1 |
|
|
|
12 |
3215d |
3218d
|
4/29 |
3177d |
29159a4ed704
ALSA: pcm: Abort properly at pending signal in OSS read/write loops
|
|
BUG: looking up invalid subclass: 8
sound
|
-1 |
syz, C |
|
|
5 |
3277d |
3277d
|
4/29 |
3190d |
3510c7aa069a
ALSA: seq: Avoid invalid lockdep class warning
|
|
WARNING in snd_interval_mulkdiv
sound
|
-1 |
syz, C |
|
|
21 |
3206d |
3212d
|
4/29 |
3200d |
23b19b7b50fe
ALSA: pcm: Remove yet superfluous WARN_ON()
|
|
INFO: task hung in snd_pcm_oss_write
sound
|
1 |
syz |
|
|
2 |
3212d |
3212d
|
3/29 |
3204d |
29159a4ed704
ALSA: pcm: Abort properly at pending signal in OSS read/write loops
|
|
BUG: unable to handle kernel paging request in memset_erms
sound
|
8 |
syz, C |
|
|
35 |
3204d |
3218d
|
3/29 |
3204d |
b088b53e20c7
ALSA: aloop: Fix inconsistent format due to incomplete rule
|
|
suspicious RCU usage at sound/core/pcm_lib.c:LINE
sound
|
-1 |
|
|
|
1 |
3219d |
3218d
|
3/29 |
3204d |
29159a4ed704
ALSA: pcm: Abort properly at pending signal in OSS read/write loops
|
|
INFO: rcu detected stall in mulaw_transfer
sound
|
1 |
|
|
|
37 |
3214d |
3218d
|
3/29 |
3204d |
898dfe4687f4
ALSA: aloop: Fix racy hw constraints adjustment
|
|
BUG: soft lockup (2)
sound
|
-1 |
syz, C |
|
|
29 |
3214d |
3243d
|
3/29 |
3204d |
29159a4ed704
ALSA: pcm: Abort properly at pending signal in OSS read/write loops
|
|
WARNING in snd_pcm_hw_param_first
sound
|
-1 |
syz, C |
|
|
2905 |
3212d |
3222d
|
3/29 |
3204d |
fe08f34d066f
ALSA: pcm: Remove incorrect snd_BUG_ON() usages
|
|
INFO: rcu detected stall in snd_pcm_plug_write_transfer
sound
|
1 |
|
|
|
1 |
3212d |
3212d
|
3/29 |
3204d |
29159a4ed704
ALSA: pcm: Abort properly at pending signal in OSS read/write loops
|
|
BUG: unable to handle kernel paging request in match_subs_info
sound
|
8 |
|
|
|
1 |
3250d |
3244d
|
3/29 |
3220d |
7fb983b4dd56
x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
|
|
WARNING in initialize_timer
sound
|
-1 |
|
|
|
2 |
3253d |
3254d
|
3/29 |
3233d |
43a354287032
ALSA: seq: Remove spurious WARN_ON() at timer check
|
|
WARNING in snd_timer_user_info_compat
sound
|
-1 |
syz, C |
|
|
174 |
3259d |
3262d
|
3/29 |
3256d |
3d4e8303f2c7
ALSA: timer: Remove kernel warning at compat ioctl error paths
|
|
KASAN: use-after-free Read in snd_timer_user_info_compat
sound
|
19 |
syz |
|
|
2 |
3298d |
3287d
|
3/29 |
3262d |
79fb0518fec8
ALSA: timer: Add missing mutex lock for compat ioctls
|