|
KASAN: slab-out-of-bounds Write in copy_to_urb
sound
usb
|
23 |
C |
|
|
11 |
4d03h |
12d
|
23/29 |
never |
05a1fc5efdd8
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
|
|
BUG: sleeping function called from invalid context in mon_complete
usb
|
5 |
|
|
|
18 |
8d19h |
65d
|
3/29 |
never |
usbip: Fix locking bug in RT-enabled kernels
|
|
KASAN: slab-use-after-free Read in btusb_disconnect
usb
bluetooth
|
19 |
C |
|
|
5 |
50d |
136d
|
6/29 |
never |
23d22f2f7176
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
|
|
KASAN: slab-use-after-free Read in hdm_disconnect
usb
|
19 |
C |
error |
|
18706 |
19d |
476d
|
28/29 |
never |
4b1270902609
most: usb: Fix use-after-free in hdm_disconnect
|
|
WARNING in media_create_pad_link (2)
usb
media
|
-1 |
C |
error |
done |
11 |
40d |
243d
|
29/29 |
3d03h |
0e2ee70291e6
media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
|
|
INFO: rcu detected stall in dummy_timer (4)
usb
|
1 |
C |
inconclusive |
done |
25 |
66d |
1227d
|
29/29 |
3d05h |
eecd203ada43
media: imon: make send_packet() more robust
|
|
WARNING in rtl8150_start_xmit/usb_submit_urb
usb
net
|
-1 |
C |
|
|
5 |
59d |
79d
|
29/29 |
18d |
958baf5eaee3
net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
|
|
KASAN: slab-use-after-free Read in media_devnode_unregister
usb
media
|
19 |
C |
|
|
2055 |
66d |
68d
|
29/29 |
18d |
8cfc8cec1b4d
media: mc: Clear minor number before put device
|
|
general protection fault in snd_usbmidi_do_output
usb
sound
|
2 |
C |
error |
|
8 |
48d |
56d
|
29/29 |
18d |
9f2c0ac1423d
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
|
|
BUG: sleeping function called from invalid context in dummy_dequeue
usb
|
5 |
C |
error |
|
6278 |
63d |
84d
|
29/29 |
18d |
8d63c83d8eb9
USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
|
|
KMSAN: uninit-value in lan78xx_reset
usb
net
|
7 |
C |
|
|
14 |
39d |
73d
|
29/29 |
18d |
49bdb63ff644
net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
|
|
KASAN: slab-out-of-bounds Read in mcp2221_raw_event
input
usb
|
19 |
C |
|
|
1144 |
40d |
345d
|
29/29 |
39d |
b56cc41a3ae7
hid: fix I2C read buffer overflow in raw_event() for mcp2221
|
|
UBSAN: shift-out-of-bounds in ax88772_bind
usb
|
-1 |
C |
done |
|
19 |
87d |
93d
|
29/29 |
39d |
24ef2f53c07f
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
|
|
WARNING in follow_page_pte
usb
input
mm
|
-1 |
C |
done |
|
6 |
103d |
103d
|
29/29 |
39d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
INFO: task hung in hub_activate (3)
usb
|
1 |
|
|
|
177 |
138d |
138d
|
29/29 |
62d |
9bd9c8026341
usb: hub: Fix flushing of delayed work used for post resume purposes
|
|
WARNING in flush_delayed_work
usb
|
-1 |
C |
|
|
704 |
138d |
142d
|
29/29 |
62d |
9bd9c8026341
usb: hub: Fix flushing of delayed work used for post resume purposes
|
|
WARNING in osif_xfer/usb_submit_urb
usb
|
-1 |
C |
error |
done |
18 |
148d |
196d
|
29/29 |
67d |
56ad91c1aa9c
i2c: robotfuzz-osif: disable zero-length read messages
|
|
KASAN: slab-out-of-bounds Read in mon_copy_to_buff
usb
|
17 |
C |
|
|
7 |
126d |
133d
|
29/29 |
74d |
0d0777ccaa2d
HID: core: ensure __hid_request reserves the report ID as the first byte
|
|
WARNING in usbnet_status_start
usb
|
-1 |
C |
|
|
349 |
119d |
132d
|
29/29 |
74d |
4c4ca3c46167
usb: net: sierra: check for no status endpoint
|
|
UBSAN: shift-out-of-bounds in s32ton (2)
input
usb
|
-1 |
C |
|
|
4 |
119d |
126d
|
29/29 |
74d |
a6b87bfc2ab5
HID: core: Harden s32ton() against conversion to 0 bits
|
|
WARNING in ath6kl_bmi_get_target_info (2)
usb
wireless
|
-1 |
C |
error |
|
10349 |
135d |
473d
|
29/29 |
103d |
e7417421d893
wifi: ath6kl: remove WARN on bad firmware input
|
|
KMSAN: uninit-value in mii_nway_restart (2)
usb
|
7 |
C |
|
|
224 |
164d |
273d
|
29/29 |
132d |
9ad0452c0277
net: ch9200: fix uninitialised access during mii_nway_restart
|
|
general protection fault in lookup_or_create_module_kobject
bluetooth
usb
|
2 |
C |
|
|
266 |
191d |
196d
|
29/29 |
132d |
a6aeb739974e
module: ensure that kobject_put() is safe for module type kobjects
|
|
UBSAN: shift-out-of-bounds in __kfifo_alloc
usb
input
|
-1 |
C |
|
|
33349 |
163d |
231d
|
29/29 |
132d |
6bf8ab7774a2
HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
|
|
UBSAN: array-index-out-of-bounds in usbhid_parse
usb
|
15 |
C |
error |
|
89 |
166d |
763d
|
29/29 |
132d |
fe7f7ac8e0c7
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
|
|
WARNING: ODEBUG bug in snd_rawmidi_free
sound
usb
|
-1 |
C |
error |
|
1 |
197d |
193d
|
29/29 |
132d |
0718a78f6a9f
ALSA: usb-audio: Kill timer properly at removal
|
|
KMSAN: uninit-value in usbnet_probe (3)
usb
|
7 |
C |
|
|
159 |
174d |
191d
|
29/29 |
132d |
405b0d610745
net: usb: aqc111: fix error handling of usbnet read calls
|
|
WARNING in usbnet_start_xmit/usb_submit_urb (2)
usb
|
-1 |
C |
error |
|
10 |
271d |
610d
|
28/29 |
160d |
1cf9631d836b
usbnet: gl620a: fix endpoint checking in genelink_bind()
|
|
general protection fault in ir_raw_event_store_with_filter
usb
media
|
24 |
C |
error |
|
879 |
280d |
2077d
|
28/29 |
160d |
f656cfbc7a29
media: streamzap: fix race between device disconnection and urb callback
|
|
WARNING in cxacru_cm/usb_submit_urb (2)
usb
|
-1 |
C |
|
|
8 |
274d |
284d
|
28/29 |
160d |
c90aad369899
usb: atm: cxacru: fix a flaw in existing endpoint checks
|
|
KASAN: slab-use-after-free Read in steam_input_open
input
usb
|
19 |
C |
done |
|
5 |
254d |
268d
|
28/29 |
160d |
e53fc232a65f
HID: hid-steam: Fix use-after-free when detaching device
|
|
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints
usb
|
17 |
C |
|
|
61 |
231d |
294d
|
28/29 |
160d |
0b43d98ff29b
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
|
|
general protection fault in qt2_read_bulk_callback
usb
|
2 |
C |
error |
|
5 |
314d |
310d
|
28/29 |
195d |
575a5adf48b0
USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
|
|
KASAN: slab-use-after-free Read in chaoskey_disconnect
usb
|
19 |
|
|
|
2 |
428d |
416d
|
28/29 |
195d |
422dc0a4d12d
USB: chaoskey: fail open after removal
|
|
WARNING in rtl8150_open/usb_submit_urb
usb
|
-1 |
C |
|
|
5 |
287d |
440d
|
28/29 |
195d |
90b7f2961798
net: usb: rtl8150: enable basic endpoint checking
|
|
WARNING in thrustmaster_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
25 |
300d |
401d
|
28/29 |
195d |
50420d7c79c3
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
|
|
KASAN: slab-use-after-free Read in sg_release
scsi
usb
|
19 |
syz |
|
|
1 |
366d |
376d
|
28/29 |
195d |
f10593ad9bc3
scsi: sg: Fix slab-use-after-free read in sg_release()
|
|
possible deadlock in chaoskey_release
usb
|
4 |
C |
|
|
90 |
399d |
404d
|
28/29 |
195d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
KMSAN: uninit-value in dib3000mb_attach (2)
usb
media
|
7 |
C |
|
|
4873 |
330d |
1851d
|
28/29 |
195d |
2dd59fe0e19e
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
|
|
WARNING in uvc_status_unregister
usb
media
|
-1 |
C |
done |
|
61256 |
286d |
393d
|
28/29 |
195d |
a67f75c2b5ec
media: uvcvideo: Fix deadlock during uvc_probe
|
|
INFO: rcu detected stall in hub_event
usb
|
1 |
C |
done |
|
1233 |
195d |
2188d
|
28/29 |
195d |
64f2657b5793
HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
|
|
possible deadlock in chaoskey_open
usb
|
4 |
C |
|
|
475 |
399d |
404d
|
28/29 |
195d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
possible deadlock in usb_deregister_dev (3)
usb
|
4 |
C |
|
|
103 |
399d |
404d
|
28/29 |
195d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
WARNING in media_create_pad_link
usb
media
|
-1 |
C |
done |
done |
104 |
361d |
2012d
|
28/29 |
336d |
3dd075fe8ebb
media: uvcvideo: Require entities to have a non-zero unique ID
|
|
INFO: task hung in usb_port_suspend
usb
|
1 |
C |
|
|
12 |
392d |
402d
|
28/29 |
369d |
5189df7b8088
USB: gadget: dummy-hcd: Fix "task hung" problem
|
|
kernel BUG in __page_table_check_zero
usb
|
-1 |
C |
error |
done |
213 |
423d |
911d
|
28/29 |
391d |
79a61cc3fc04
mm: avoid leaving partial pfn mappings around in error case
|
|
INFO: rcu detected stall in schedule_timeout (6)
usb
|
1 |
C |
done |
|
40 |
392d |
549d
|
28/29 |
391d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
KASAN: use-after-free Read in rtw_load_firmware_cb
usb
wireless
|
19 |
C |
|
|
848 |
416d |
479d
|
28/29 |
391d |
0e735a4c6137
wifi: rtw88: always wait for both firmware loading attempts
|
|
INFO: rcu detected stall in aoecmd_cfg (2)
usb
block
|
1 |
C |
done |
|
7 |
445d |
557d
|
28/29 |
391d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
KMSAN: kernel-infoleak in raw_ioctl (2)
usb
|
9 |
C |
|
|
18201 |
416d |
481d
|
28/29 |
391d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
KMSAN: kernel-usb-infoleak in usbtmc_write
usb
|
9 |
C |
|
|
167 |
416d |
480d
|
28/29 |
391d |
625fa77151f0
USB: usbtmc: prevent kernel-usb-infoleak
|
|
INFO: task hung in uevent_show
usb
|
1 |
C |
done |
|
9704 |
461d |
523d
|
28/29 |
391d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
INFO: rcu detected stall in __mod_timer (5)
usb
|
1 |
C |
error |
done |
10 |
469d |
533d
|
28/29 |
392d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
possible deadlock in touch_wq_lockdep_map
usb
|
4 |
C |
|
|
1208 |
415d |
611d
|
28/29 |
410d |
ccbde4b128ef
char: xillybus: Don't destroy workqueue from work item running on it
|
|
KMSAN: uninit-value in line6_midibuf_read
usb
sound
|
7 |
C |
|
|
357 |
419d |
481d
|
28/29 |
410d |
15b7a03205b3
ALSA: line6: Fix racy access to midibuf
|
|
KASAN: slab-out-of-bounds Read in cougar_report_fixup
input
usb
|
17 |
C |
|
|
31 |
441d |
474d
|
28/29 |
410d |
a6e9c391d45b
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
|
|
memory leak in _r8712_init_xmit_priv (2)
staging
usb
|
3 |
C |
|
|
2 |
713d |
728d
|
27/29 |
460d |
9ed3e0a0e1b1
staging: rtl8712: remove unnecessary alignment of pxmitpriv->pxmitbuf
|
|
WARNING in btusb_submit_intr_urb/usb_submit_urb
bluetooth
usb
|
-1 |
C |
error |
|
2 |
498d |
509d
|
27/29 |
460d |
a368ecde8a50
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
|
|
WARNING in implement
input
usb
|
-1 |
C |
error |
done |
960 |
524d |
2253d
|
26/29 |
473d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
|
|
INFO: rcu detected stall in __run_timer_base
usb
|
1 |
C |
done |
done |
10 |
514d |
582d
|
26/29 |
473d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
WARNING in kcov_remote_start (4)
usb
|
-1 |
|
|
|
107983 |
495d |
526d
|
26/29 |
495d |
f85d39dd7ed8
kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
|
|
WARNING in hid_output_report
input
usb
|
-1 |
C |
error |
|
3 |
541d |
560d
|
26/29 |
495d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
fba383985354
net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
|
|
INFO: task hung in wdm_release
usb
|
1 |
C |
error |
|
1 |
519d |
515d
|
26/29 |
495d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
INFO: rcu detected stall in raw_ioctl
usb
|
1 |
C |
|
|
49 |
502d |
748d
|
26/29 |
495d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
KMSAN: uninit-value in asus_report_fixup
input
usb
|
17 |
C |
done |
|
35 |
517d |
541d
|
26/29 |
495d |
89e1ee118d6f
hid: asus: asus_report_fixup: fix potential read out of bounds
|
|
BUG: soft lockup in hci_cmd_timeout
bluetooth
usb
|
1 |
C |
|
|
1 |
527d |
523d
|
26/29 |
495d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
WARNING in cxacru_cm/usb_submit_urb
usb
|
-1 |
C |
error |
inconclusive |
14 |
514d |
2083d
|
26/29 |
495d |
2eabb655a968
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
|
|
WARNING in kcov_remote_start (3)
usb
|
-1 |
|
|
|
265513 |
530d |
599d
|
25/29 |
530d |
19e35f24750d
nfc: nci: Fix kcov check in nci_rx_work()
|
|
WARNING in ar5523_cmd/usb_submit_urb
usb
wireless
|
-1 |
C |
error |
|
39 |
562d |
2119d
|
25/29 |
530d |
e120b6388d7d
wifi: ar5523: enable proper endpoint verification
|
|
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb
usb
wireless
|
-1 |
C |
error |
inconclusive |
18 |
574d |
1718d
|
25/29 |
530d |
b6dd09b3dac8
wifi: carl9170: add a proper sanity check for endpoints
|
|
WARNING in vmk80xx_auto_attach/usb_submit_urb
usb
|
-1 |
C |
unreliable |
inconclusive |
2 |
618d |
1619d
|
25/29 |
543d |
d1718530e3f6
comedi: vmk80xx: fix incomplete endpoint checking
|
|
KASAN: slab-use-after-free Read in pvr2_context_set_notify
usb
pvrusb2
|
24 |
C |
|
|
3814 |
657d |
863d
|
25/29 |
657d |
ded85b0c0edd
media: pvrusb2: fix use after free on context disconnection
|
|
KASAN: use-after-free Read in __media_entity_remove_links
usb
media
|
19 |
C |
|
|
7 |
2065d |
2163d
|
25/29 |
684d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
KMSAN: uninit-value in smsc95xx_reset
usb
|
7 |
C |
|
|
425 |
753d |
1918d
|
25/29 |
697d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
linux-next boot error: KASAN: slab-out-of-bounds Write in vhci_setup
usb
|
-1 |
|
|
|
34 |
762d |
766d
|
25/29 |
697d |
17d6b82d2d6d
usb/usbip: fix wrong data added to platform device
|
|
KMSAN: uninit-value in mii_nway_restart
usb
|
7 |
C |
|
|
2449 |
766d |
2358d
|
25/29 |
697d |
8f8abb863fa5
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
|
|
KMSAN: uninit-value in smsc75xx_bind
usb
|
7 |
C |
|
|
63 |
795d |
2292d
|
25/29 |
697d |
e9c65989920f
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
|
|
KASAN: slab-out-of-bounds Read in imon_probe
media
usb
|
17 |
syz |
|
|
2 |
792d |
814d
|
25/29 |
697d |
a1766a4fd83b
media: imon: fix access to invalid resource for the second interface
|
|
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy
usb
|
7 |
C |
|
|
521 |
753d |
866d
|
25/29 |
697d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
UBSAN: shift-out-of-bounds in set_flicker
usb
media
|
-1 |
syz |
|
|
5 |
742d |
823d
|
25/29 |
697d |
099be1822d1f
media: gspca: cpia1: shift-out-of-bounds in set_flicker
|
|
KASAN: slab-out-of-bounds Read in read_descriptors (3)
usb
|
17 |
C |
error |
|
7 |
854d |
881d
|
23/29 |
767d |
ff33299ec8bb
USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
|
|
KMSAN: uninit-value in alauda_check_media
usb
usb-storage
|
7 |
C |
|
|
1059 |
849d |
2232d
|
23/29 |
767d |
a6ff6e7a9dd6
usb-storage: alauda: Fix uninit-value in alauda_check_media()
|
|
memory leak in raw_open
usb
|
3 |
C |
|
|
1 |
862d |
858d
|
23/29 |
767d |
83e30f2bf86e
USB: gadget: Fix the memory leak in raw_gadget driver
|
|
WARNING in corrupted (3)
usb
|
-1 |
C |
done |
|
19 |
862d |
909d
|
23/29 |
767d |
6f489a966fbe
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
WARNING in usbnet_start_xmit/usb_submit_urb
usb
|
-1 |
C |
done |
|
92 |
880d |
1463d
|
23/29 |
767d |
5e1627cb43dd
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
|
memory leak in _r8712_init_xmit_priv
staging
usb
|
3 |
C |
|
|
1 |
863d |
859d
|
23/29 |
767d |
ac83631230f7
staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
|
|
WARNING in class_register
usb
|
-1 |
C |
done |
|
10 |
962d |
960d
|
23/29 |
830d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
WARNING in dlfb_submit_urb/usb_submit_urb (2)
fbdev
usb
|
-1 |
C |
|
|
2 |
918d |
914d
|
22/29 |
870d |
ed9de4ed3987
fbdev: udlfb: Fix endpoint check
|
|
WARNING in usbtmc_ioctl/usb_submit_urb (2)
usb
|
-1 |
C |
done |
|
3 |
931d |
943d
|
22/29 |
870d |
94d25e912898
USB: usbtmc: Fix direction for 0-length ioctl control messages
|
|
memory leak in class_create
usb
|
3 |
C |
|
|
9 |
913d |
931d
|
22/29 |
870d |
ddaf098ea779
driver core: class: properly reference count class_dev_iter()
|
|
WARNING in __usbnet_read_cmd/usb_submit_urb
usb
|
-1 |
C |
error |
|
5 |
1015d |
1046d
|
22/29 |
888d |
93fd565919cf
net: USB: Fix wrong-direction WARNING in plusb.c
net: USB: Fix wrong-direction WARNING in plusb.c
|
|
WARNING in sisusb_send_bulk_msg/usb_submit_urb
usb
|
-1 |
C |
unreliable |
|
418 |
944d |
2330d
|
22/29 |
893d |
df05a9b05e46
USB: sisusbvga: Add endpoint checks
|
|
KASAN: use-after-free Write in gadgetfs_kill_sb
usb
|
24 |
C |
error |
|
5 |
1036d |
1070d
|
22/29 |
893d |
d18dcfe9860e
USB: gadgetfs: Fix race between mounting and unmounting
|
|
KMSAN: uninit-value in kalmia_send_init_packet
usb
|
7 |
C |
|
|
2 |
1022d |
1021d
|
22/29 |
893d |
c68f345b7c42
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
|
|
WARNING in pegasus_open/usb_submit_urb
input
usb
|
-1 |
C |
|
|
7 |
973d |
1984d
|
22/29 |
893d |
b3d80fd27a3c
Input: pegasus-notetaker - check pipe type when probing
|
|
WARNING in shark_write_reg/usb_submit_urb
usb
|
-1 |
C |
error |
|
63 |
942d |
2316d
|
22/29 |
893d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
memory leak in __proc_create
scsi
usb
|
3 |
syz |
|
|
1 |
986d |
985d
|
22/29 |
893d |
be03df3d4bfe
scsi: core: Fix a procfs host directory removal regression
|
|
general protection fault in xpad_probe
usb
|
2 |
C |
done |
|
24 |
929d |
951d
|
22/29 |
893d |
53bea86b5712
Revert "Input: xpad - fix support for some third-party controllers"
|
|
KASAN: slab-use-after-free Read in class_register
usb
|
19 |
C |
done |
|
13 |
962d |
961d
|
22/29 |
893d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
WARNING in ath6kl_htc_pipe_rx_complete
usb
wireless
|
-1 |
C |
error |
|
2008 |
932d |
2202d
|
22/29 |
893d |
75c4a8154cb6
wifi: ath6kl: reduce WARN to dev_dbg() in callback
|
|
WARNING in shark_write_val/usb_submit_urb
usb
|
-1 |
C |
error |
done |
51 |
950d |
2310d
|
22/29 |
893d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
INFO: task hung in port100_probe
usb
nfc
|
1 |
C |
error |
inconclusive |
10 |
1350d |
1609d
|
22/29 |
949d |
f80cfe2f2658
NFC: port100: fix use-after-free in port100_send_complete
|
|
KMSAN: uninit-value in ax88178_reset
usb
|
7 |
C |
|
|
284 |
1305d |
1412d
|
22/29 |
997d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
possible deadlock in display_open
usb
|
4 |
C |
inconclusive |
|
48888 |
1265d |
2292d
|
22/29 |
997d |
db264d4c66c0
media: imon: reorganize serialization
|
|
KMSAN: uninit-value in asix_mdio_read (3)
usb
|
7 |
C |
|
|
1582 |
1280d |
1345d
|
22/29 |
997d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
WARNING in snd_usbmidi_output_open
sound
usb
|
-1 |
C |
done |
|
37 |
1094d |
1101d
|
22/29 |
997d |
ad72c3c3f6eb
ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
|
|
WARNING in send_packet/usb_submit_urb
usb
|
-1 |
C |
inconclusive |
|
847 |
1065d |
1231d
|
22/29 |
997d |
813ceef062b5
media: imon: fix a race condition in send_packet()
|
|
KASAN: slab-out-of-bounds Read in thrustmaster_probe
input
usb
|
17 |
C |
unreliable |
|
92 |
1342d |
1366d
|
22/29 |
997d |
fc3ef2e3297b
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
|
|
INFO: task hung in misc_open (4)
usb
|
1 |
C |
error |
inconclusive |
144 |
1025d |
1738d
|
22/29 |
997d |
8386c414e27c
PM: hibernate: defer device probing when resuming from hibernation
|
|
INFO: task hung in hub_port_init (2)
usb
|
1 |
C |
error |
|
486 |
1000d |
1462d
|
22/29 |
997d |
26fbe9772b8c
USB: core: Fix hang in usb_kill_urb by adding memory barriers
|
|
general protection fault in i2c_setup_smbus_alert
acpi
usb
|
2 |
C |
done |
|
20 |
1363d |
1382d
|
22/29 |
997d |
8302532f47bb
i2c: smbus: Check for parent device before dereference
|
|
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek
sound
usb
|
19 |
syz |
error |
|
48 |
1198d |
1309d
|
22/29 |
997d |
0665886ad139
ALSA: usb-audio: Clear MIDI port active flag after draining
|
|
UBSAN: shift-out-of-bounds in hid_report_raw_event (2)
input
usb
|
-1 |
C |
error |
|
1 |
1102d |
1098d
|
22/29 |
997d |
ec61b4191858
HID: core: fix shift-out-of-bounds in hid_report_raw_event
|
|
KASAN: use-after-free Read in port100_send_complete
nfc
usb
|
19 |
C |
|
|
1 |
1353d |
1349d
|
22/29 |
997d |
f80cfe2f2658
NFC: port100: fix use-after-free in port100_send_complete
|
|
KASAN: use-after-free Read in usb_udc_uevent
usb
|
19 |
syz |
error |
|
30 |
1207d |
1994d
|
22/29 |
997d |
2191c00855b0
USB: gadget: Fix use-after-free Read in usb_udc_uevent()
|
|
memory leak in usb_set_configuration (3)
usb
|
3 |
C |
|
|
2 |
1235d |
1261d
|
22/29 |
997d |
945a9a8e448b
media: pvrusb2: fix memory leak in pvr_probe
|
|
KASAN: use-after-free Read in ar5523_cmd_tx_cb
usb
wireless
|
19 |
C |
inconclusive |
|
372 |
1093d |
1147d
|
22/29 |
997d |
b6702a942a06
wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
|
|
KMSAN: uninit-value in asix_mdio_write_nopm
net
usb
|
7 |
|
|
|
2 |
1322d |
1343d
|
22/29 |
997d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
WARNING in dlfb_submit_urb/usb_submit_urb
usb
fbdev
|
-1 |
C |
done |
|
481 |
1070d |
2331d
|
22/29 |
997d |
aaf7dbe07385
video: fbdev: udlfb: properly check endpoint type
|
|
KASAN: use-after-free Read in snd_rawmidi_transmit
sound
usb
|
19 |
C |
done |
done |
7 |
1265d |
1299d
|
22/29 |
997d |
0125de38122f
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
|
|
KASAN: use-after-free Read in si470x_int_in_callback (2)
usb
media
|
19 |
C |
error |
|
7303 |
1065d |
2222d
|
22/29 |
997d |
7d21e0b1b41b
media: si470x: Fix use-after-free in si470x_int_in_callback()
|
|
memory leak in gs_usb_probe
can
usb
|
3 |
C |
|
|
1 |
1333d |
1329d
|
22/29 |
997d |
50d34a0d151d
can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration
|
|
memory leak in airspy_probe
media
usb
|
3 |
C |
|
|
1 |
1198d |
1194d
|
22/29 |
997d |
23bc5eb55f8c
media: airspy: fix memory leak in airspy probe
|
|
KMSAN: uninit-value in idmouse_open
usb
|
7 |
C |
|
|
5 |
1159d |
1155d
|
22/29 |
997d |
bce2b0539933
usb: idmouse: fix an uninit-value in idmouse_open
|
|
KASAN: null-ptr-deref Read in ida_free (2)
usb
|
11 |
C |
done |
|
3 |
1241d |
1242d
|
22/29 |
997d |
90bc2af24638
USB: gadget: Fix double-free bug in raw_gadget driver
|
|
INFO: task hung in scsi_remove_host
scsi
usb
|
1 |
C |
done |
|
328 |
1148d |
1184d
|
22/29 |
997d |
2b36209ca818
scsi: core: Revert "Call blk_mq_free_tag_set() earlier"
d94b2d00f7bf
scsi: core: Revert "Make sure that hosts outlive targets"
f782201ebc2b
scsi: core: Revert "Make sure that targets outlive devices"
70e8d057bef5
scsi: core: Revert "Simplify LLD module reference counting"
|
|
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init
pvrusb2
usb
|
15 |
C |
inconclusive |
|
4 |
1281d |
1312d
|
22/29 |
997d |
471bec68457a
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
|
|
WARNING in usbtmc_ioctl/usb_submit_urb
usb
|
-1 |
C |
inconclusive |
|
8 |
1010d |
1354d
|
22/29 |
997d |
e9b667a82cdc
usb: usbtmc: Fix bug in pipe direction for control transfers
|
|
WARNING in mcba_usb_probe/usb_submit_urb
usb
can
|
-1 |
C |
error |
|
537 |
1327d |
2322d
|
22/29 |
997d |
136bed0bfd3b
can: mcba_usb: properly check endpoint type
|
|
KASAN: use-after-free Read in udl_get_urb_timeout
dri
usb
|
19 |
C |
done |
|
142 |
1153d |
1183d
|
22/29 |
997d |
ed9605a66b62
Revert "drm/udl: Kill pending URBs at suspend and disconnect"
|
|
memory leak in dvb_usb_device_init
media
usb
|
3 |
syz |
|
|
1 |
1102d |
1272d
|
22/29 |
997d |
94d90fb06b94
media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
|
|
WARNING: locking bug in hfa384x_usbctlx_completion_task
staging
usb
|
4 |
C |
|
|
2 |
1243d |
1239d
|
22/29 |
997d |
ee6c6e734247
staging/wlan-ng: get the correct struct hfa384x in work callback
|
|
KMSAN: uninit-value in r871xu_drv_init
usb
|
7 |
C |
|
|
7342 |
1245d |
2356d
|
22/29 |
997d |
0458e5428e5e
staging: rtl8712: fix uninit-value in r871xu_drv_init()
d1b57669732d
staging: rtl8712: fix uninit-value in usb_read8() and friends
|
|
INFO: task hung in add_early_randomness (2)
usb
crypto
|
1 |
C |
done |
|
182 |
1045d |
1263d
|
22/29 |
997d |
228432551bd8
virtio-rng: make device ready before making request
|
|
KMSAN: uninit-value in asix_check_host_enable
usb
|
7 |
C |
|
|
109 |
1305d |
1363d
|
22/29 |
997d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
memory leak in hidraw_report_event
input
usb
|
3 |
C |
|
|
1 |
1272d |
1272d
|
22/29 |
997d |
a5623a203cff
HID: hidraw: fix memory leak in hidraw_release()
|
|
KASAN: use-after-free Read in driver_register
usb
|
19 |
C |
|
|
131 |
1240d |
1291d
|
22/29 |
997d |
5f0b5f4d50fa
usb: gadget: fix race when gadget driver register via ioctl
|
|
WARNING in driver_unregister
input
usb
|
-1 |
C |
|
|
1 |
1274d |
1270d
|
22/29 |
997d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
WARNING in aiptek_open/usb_submit_urb
usb
input
|
-1 |
C |
error |
|
2380 |
1333d |
2355d
|
22/29 |
997d |
5600f6986628
Input: aiptek - properly check endpoint type
|
|
memory leak in blk_mq_init_tags
block
usb
|
3 |
C |
|
|
2 |
1324d |
1330d
|
22/29 |
997d |
03252259e18e
scsi: sd: Clean up gendisk if device_add_disk() failed
|
|
INFO: task hung in __input_unregister_device (4)
usb
input
|
1 |
C |
done |
|
924 |
1169d |
1234d
|
22/29 |
997d |
98e01215708b
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
|
|
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3)
wireless
usb
|
17 |
C |
unreliable |
done |
7 |
1373d |
1777d
|
20/29 |
1342d |
6ce708f54cc8
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
|
|
KASAN: slab-out-of-bounds Write in betop_probe
input
usb
|
23 |
C |
unreliable |
|
9 |
1550d |
2106d
|
20/29 |
1342d |
689e453a9b9c
HID: betop: fix slab-out-of-bounds Write in betop_probe
HID: betop: fix slab-out-of-bounds Write in betop_probe
|
|
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2)
media
usb
|
7 |
C |
|
|
34 |
1610d |
1826d
|
20/29 |
1342d |
c5453769f77c
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
899a61a3305d
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
|
|
memory leak in __mdiobus_register
usb
|
3 |
C |
|
|
1 |
1517d |
1513d
|
20/29 |
1350d |
ab609f25d198
net: mdiobus: Fix memory leak in __mdiobus_register
ca6e11c337da
phy: mdio: fix memory leak
|
|
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control
media
usb
|
7 |
C |
|
|
186 |
1460d |
1801d
|
20/29 |
1350d |
afae4ef7d5ad
media: dvb-usb: fix ununit-value in az6027_rc_query
|
|
memory leak in bsg_register_queue
usb
|
3 |
C |
|
|
1 |
1533d |
1529d
|
20/29 |
1350d |
1a0db7744e45
scsi: bsg: Fix device unregistration
|
|
divide error in usbnet_start_xmit
usb
|
2 |
C |
|
|
760 |
1474d |
1490d
|
20/29 |
1350d |
397430b50a36
usbnet: sanity check for maxpacket
|
|
KASAN: slab-out-of-bounds Write in usb_hcd_poll_rh_status (2)
usb
|
23 |
C |
inconclusive |
|
116 |
1413d |
1896d
|
20/29 |
1350d |
1d7d4c07932e
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
|
|
INFO: trying to register non-static key in mxl111sf_ctrl_msg
usb
media
|
-1 |
C |
|
|
73 |
2305d |
2408d
|
20/29 |
1350d |
44870a9e7a3c
media: mxl111sf: change mutex_init() location
|
|
WARNING: ODEBUG bug in corrupted (2)
usb
input
|
-1 |
C |
error |
|
2 |
1419d |
1631d
|
20/29 |
1350d |
33812fc7c8d7
HID: magicmouse: Fix an error handling path in magicmouse_probe()
|
|
KASAN: use-after-free Read in rtl8712_dl_fw
usb
staging
|
19 |
C |
|
|
6961 |
1466d |
1490d
|
20/29 |
1350d |
c052cc1a069c
staging: rtl8712: fix use-after-free in rtl8712_dl_fw
|
|
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3)
usb
|
9 |
C |
|
|
256 |
1368d |
1411d
|
20/29 |
1350d |
d668769eb9c5
net: mcs7830: handle usb read errors properly
|
|
KASAN: use-after-free Read in blk_mq_sched_tags_teardown
block
usb
|
19 |
C |
done |
|
6 |
1486d |
1484d
|
20/29 |
1350d |
8bdf7b3fe1f4
blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
|
|
INFO: trying to register non-static key in ath9k_wmi_event_tasklet
wireless
usb
|
-1 |
C |
unreliable |
|
7 |
1440d |
1617d
|
20/29 |
1350d |
8b3046abc99e
ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
|
|
INFO: task hung in set_current_rng
crypto
usb
|
1 |
C |
unreliable |
done |
1 |
1476d |
1594d
|
20/29 |
1350d |
2bb31abdbe55
hwrng: virtio - don't wait on cleanup
|
|
KMSAN: uninit-value in ax88772a_hw_reset
usb
|
7 |
C |
|
|
94 |
1368d |
1456d
|
20/29 |
1350d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
INFO: rcu detected stall in dummy_timer (3)
usb
|
1 |
C |
error |
|
132 |
1363d |
1952d
|
20/29 |
1350d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
KMSAN: uninit-value in asix_mdio_read (2)
usb
|
7 |
C |
|
|
1075 |
1350d |
1430d
|
20/29 |
1350d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
usb
net
|
5 |
C |
done |
|
28 |
1425d |
1439d
|
20/29 |
1350d |
744451c162a5
Bluetooth: hci_sync: Push sync command cancellation to workqueue
|
|
INFO: rcu detected stall in newstat
fs
usb
|
1 |
C |
unreliable |
done |
4 |
1444d |
1567d
|
20/29 |
1350d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
INFO: task hung in do_proc_bulk
usb
|
1 |
syz |
inconclusive |
|
8 |
1476d |
1542d
|
20/29 |
1350d |
ae8709b296d8
USB: core: Make do_proc_control() and do_proc_bulk() killable
|
|
BUG: corrupted list in em28xx_init_extension
usb
media
|
8 |
C |
error |
|
18 |
1580d |
2125d
|
20/29 |
1350d |
2c98b8a3458d
media: em28xx: add missing em28xx_close_extension
|
|
INFO: task hung in hwrng_register
crypto
usb
|
1 |
syz |
unreliable |
done |
1 |
1496d |
1552d
|
20/29 |
1350d |
2bb31abdbe55
hwrng: virtio - don't wait on cleanup
|
|
WARNING: held lock freed in spi_unregister_controller
spi
usb
|
4 |
C |
inconclusive |
|
251 |
1449d |
1490d
|
20/29 |
1350d |
6c53b45c71b4
spi: fix use-after-free of the add_lock mutex
|
|
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb
usb
|
-1 |
C |
|
|
50 |
1590d |
1638d
|
20/29 |
1468d |
76f22c93b209
media: rtl28xxu: fix zero-length control request
media: rtl28xxu: fix zero-length control request
|
|
WARNING in hso_free_net_device
usb
|
-1 |
C |
error |
|
528 |
1586d |
2267d
|
20/29 |
1468d |
788e67f18d79
usb: hso: fix error handling code of hso_create_net_device
usb: hso: fix error handling code of hso_create_net_device
|
|
KASAN: null-ptr-deref Read in phy_disconnect
net
usb
|
11 |
C |
|
|
255 |
1535d |
1539d
|
20/29 |
1468d |
1406e8cb4b05
net: usb: asix: do not call phy_disconnect() for ax88178
|
|
memory leak in zr364xx_start_readpipe
media
usb
|
3 |
C |
|
|
2 |
1618d |
1645d
|
20/29 |
1468d |
0a045eac8d04
media: zr364xx: fix memory leak in zr364xx_start_readpipe
|
|
memory leak in pcan_usb_fd_init
usb
can
|
3 |
C |
|
|
19 |
1732d |
1802d
|
20/29 |
1468d |
a0b96b4a6274
drivers: net: fix memory leak in peak_usb_create_dev
|
|
WARNING in dtv5100_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
51 |
1590d |
1635d
|
20/29 |
1468d |
8c8b9a9be2af
media: dtv5100: fix control-request directions
|
|
WARNING in blk_rq_append_bio
block
usb
|
-1 |
C |
done |
|
6 |
1680d |
1645d
|
20/29 |
1468d |
cbb749cf377a
block: remove an incorrect check from blk_rq_append_bio
|
|
WARNING in e2i_init/usb_submit_urb
usb
|
-1 |
|
|
|
4 |
1609d |
1638d
|
20/29 |
1468d |
41e81022a04a
Input: usbtouchscreen - fix control-request directions
|
|
memory leak in smsc75xx_bind
usb
|
3 |
syz |
|
|
2 |
1637d |
1638d
|
20/29 |
1468d |
46a8b29c6306
net: usb: fix memory leak in smsc75xx_bind
|
|
memory leak in mcba_usb_probe
usb
|
3 |
C |
|
|
34 |
1615d |
1792d
|
20/29 |
1468d |
91c02557174b
can: mcba_usb: fix memory leak in mcba_usb
|
|
WARNING in hid_submit_ctrl/usb_submit_urb
input
usb
|
-1 |
C |
done |
|
38 |
1534d |
1583d
|
20/29 |
1468d |
0a824efdb724
HID: usbhid: Fix warning caused by 0-length input reports
|
|
memory leak in nfcmrvl_nci_register_dev
usb
|
3 |
C |
|
|
9 |
1735d |
1780d
|
20/29 |
1468d |
e0652f8bb44d
NFC: nci: fix memory leak in nci_allocate_device
|
|
memory leak in hdcs_probe_1020
media
usb
|
3 |
C |
|
|
1 |
1695d |
1691d
|
20/29 |
1468d |
4f4e6644cd87
media: gscpa/stv06xx: fix memory leak
|
|
KMSAN: uninit-value in pegasus_probe
usb
|
7 |
C |
|
|
258 |
1566d |
2236d
|
20/29 |
1468d |
af35fc37354c
net: pegasus: fix uninit-value in get_interrupt_interval
|
|
general protection fault in magicmouse_remove
input
usb
|
2 |
C |
|
|
47 |
1618d |
1645d
|
20/29 |
1468d |
4b4f6cecca44
HID: magicmouse: fix NULL-deref on disconnect
|
|
memory leak in dvb_create_media_graph
usb
media
|
3 |
C |
|
|
26 |
1674d |
1832d
|
20/29 |
1468d |
bf9a40ae8d72
media: dvbdev: Fix memory leak in dvb_media_device_free()
|
|
memory leak in hdcs_probe_1x00
media
usb
|
3 |
C |
|
|
1 |
1725d |
1725d
|
20/29 |
1468d |
4f4e6644cd87
media: gscpa/stv06xx: fix memory leak
|
|
WARNING in osif_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
45 |
1593d |
1638d
|
20/29 |
1468d |
4ca070ef0dd8
i2c: robotfuzz-osif: fix control-request directions
|
|
possible deadlock in do_fcntl
usb
fs
|
4 |
C |
done |
|
245 |
1544d |
1876d
|
20/29 |
1468d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING in qt2_attach/usb_submit_urb
usb
|
-1 |
C |
|
|
171 |
1617d |
1638d
|
20/29 |
1468d |
eb8dbe80326c
USB: serial: quatech2: fix control-request directions
|
|
memory leak in hub_event (2)
usb
|
3 |
C |
|
|
2 |
1705d |
1708d
|
20/29 |
1468d |
dcb4b8ad6a44
misc/uss720: fix memory leak in uss720_probe
|
|
memory leak in usb_set_configuration (2)
usb
|
3 |
C |
|
|
2 |
1562d |
1671d
|
20/29 |
1468d |
be8656e62e9e
media: cpia2: fix memory leak in cpia2_usb_probe
|
|
WARNING in usb_new_device/usb_submit_urb
usb
|
-1 |
C |
|
|
2 |
1632d |
1628d
|
20/29 |
1468d |
60dfe484cef4
USB: core: Avoid WARNings for 0-length descriptor requests
|
|
WARNING in rtl8152_probe
usb
|
-1 |
C |
|
|
23 |
1627d |
1650d
|
20/29 |
1468d |
1a44fb38cc65
r8152: check the informaton of the device
|
|
WARNING in do_proc_control/usb_submit_urb
usb
|
-1 |
C |
error |
|
456 |
1577d |
1591d
|
20/29 |
1468d |
b0863f192732
USB: core: Fix incorrect pipe calculation in do_proc_control()
|
|
general protection fault in gadget_setup
usb
|
2 |
|
|
|
1 |
1695d |
1679d
|
20/29 |
1468d |
4a5d797a9f9c
usb: gadget: dummy_hcd: fix gpf in gadget_setup
|
|
KASAN: slab-out-of-bounds Read in do_wait_for_common
staging
usb
|
19 |
C |
error |
|
5 |
1562d |
1582d
|
20/29 |
1468d |
e9e6aa51b273
staging: rtl8712: error handling refactoring
|
|
memory leak in em28xx_dvb_init
media
usb
|
3 |
C |
|
|
1 |
1707d |
1707d
|
20/29 |
1468d |
0ae10a7dc899
media: em28xx: fix memory leak
|
|
memory leak in __usbhid_submit_report
input
usb
|
3 |
C |
|
|
129 |
1538d |
1832d
|
20/29 |
1468d |
f7744fa16b96
HID: usbhid: free raw_report buffers in usbhid_stop
|
|
KASAN: use-after-free Read in r871xu_dev_remove
usb
staging
|
19 |
C |
unreliable |
|
152 |
1562d |
1588d
|
20/29 |
1468d |
e9e6aa51b273
staging: rtl8712: error handling refactoring
|
|
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info
sound
usb
|
17 |
C |
|
|
10 |
1647d |
1652d
|
20/29 |
1468d |
e84749a78dc8
ALSA: usb-audio: Validate MS endpoint descriptors
|
|
memory leak in snd_ctl_led_register
usb
|
3 |
C |
|
|
1 |
1655d |
1645d
|
20/29 |
1468d |
3ae72f6ab9c1
ALSA: control led: fix memory leak in snd_ctl_led_register
|
|
KMSAN: kernel-usb-infoleak in hid_submit_ctrl
input
usb
|
9 |
C |
|
|
839 |
1642d |
2250d
|
20/29 |
1468d |
6be388f4a35d
HID: usbhid: fix info leak in hid_submit_ctrl
|
|
KMSAN: uninit-value in asix_mdio_read
usb
|
7 |
C |
|
|
915 |
1569d |
2232d
|
20/29 |
1468d |
a786e3195d6a
net: asix: fix uninit value bugs
|
|
WARNING in input_register_device
input
usb
|
-1 |
C |
error |
done |
11 |
1685d |
1837d
|
20/29 |
1468d |
b4104180a2ef
kobject_uevent: remove warning in init_uevent_argv()
|
|
memory leak in cinergyt2_fe_attach
usb
media
|
3 |
C |
|
|
3 |
1773d |
1831d
|
20/29 |
1468d |
9ad1efee086e
media: dvd_usb: memory leak in cinergyt2_fe_attach
|
|
INFO: task hung in usb_remote_wakeup (2)
usb
|
1 |
syz |
inconclusive |
done |
9 |
1550d |
1748d
|
20/29 |
1468d |
363eaa3a450a
usbip: synchronize event handler with sysfs code paths
|
|
WARNING in pvr2_i2c_core_done
usb
fs
|
-1 |
C |
error |
|
5780 |
1589d |
2245d
|
20/29 |
1468d |
f8194e5e63fd
media: pvrusb2: fix warning in pvr2_i2c_core_done
|
|
WARNING: zero-size vmalloc in dvb_dmx_init
media
usb
|
-1 |
C |
|
|
62 |
1590d |
1654d
|
20/29 |
1468d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
KASAN: use-after-free Read in blk_mq_exit_sched
block
usb
|
19 |
C |
done |
|
9 |
1607d |
1622d
|
20/29 |
1468d |
f0c1c4d2864e
blk-mq: fix use-after-free in blk_mq_exit_sched
|
|
WARNING in __vmalloc_node_range
usb
media
|
-1 |
C |
|
|
7 |
1654d |
1656d
|
20/29 |
1468d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
memory leak in usb_urb_init
media
usb
|
3 |
C |
|
|
1 |
1781d |
1777d
|
20/29 |
1468d |
b7cd0da982e3
media: dvb-usb: fix memory leak in dvb_usb_adapter_init
|
|
memory leak in atusb_probe
usb
wpan
|
3 |
C |
|
|
71 |
1684d |
1830d
|
20/29 |
1468d |
6b9fbe169551
drivers: net: fix memory leak in atusb_probe
|
|
UBSAN: shift-out-of-bounds in vhci_hub_control (2)
usb
|
-1 |
C |
unreliable |
|
5 |
1690d |
1699d
|
20/29 |
1468d |
1cc5ed25bdad
usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
|
|
memory leak in v4l2_ctrl_handler_init_class
usb
media
|
3 |
C |
|
|
12 |
1673d |
1726d
|
20/29 |
1468d |
9c39be40c015
media: drivers/media/usb: fix memory leak in zr364xx_probe
|
|
KMSAN: uninit-value in ax88179_get_mac_addr
usb
|
7 |
C |
|
|
149 |
1586d |
1851d
|
20/29 |
1468d |
bd78980be1a6
net: usb: ax88179_178a: initialize local variables before use
|
|
general protection fault in drm_client_buffer_vunmap
usb
dri
|
2 |
C |
unreliable |
done |
247 |
1711d |
1813d
|
20/29 |
1678d |
874a52f9b693
drm/fb-helper: only unmap if buffer not null
|
|
general protection fault in usb_audio_probe
sound
usb
|
2 |
C |
done |
|
360 |
1713d |
1714d
|
20/29 |
1682d |
30dea07180de
ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_printdata
media
usb
|
-1 |
C |
error |
|
331 |
1729d |
1797d
|
20/29 |
1682d |
9dec0f48a75e
media: mceusb: sanity check for prescaler value
|
|
general protection fault in kobject_cleanup
gpio
usb
|
2 |
C |
unreliable |
|
72 |
1713d |
1726d
|
20/29 |
1682d |
a6112998ee45
gpio: fix NULL-deref-on-deregistration regression
|
|
UBSAN: shift-out-of-bounds in snto32
input
usb
|
-1 |
C |
error |
|
58 |
1727d |
1799d
|
20/29 |
1682d |
a0312af1f94d
HID: core: detect and skip invalid inputs to snto32()
|
|
memory leak in dlfb_usb_probe
usb
fbdev
|
3 |
C |
|
|
3 |
1796d |
1799d
|
20/29 |
1682d |
5c0e4110f751
udlfb: Fix memory leak in dlfb_usb_probe
|
|
memory leak in zr364xx_probe
usb
media
|
3 |
C |
|
|
6 |
1737d |
1790d
|
20/29 |
1682d |
ea354b6ddd6f
media: zr364xx: fix memory leaks in probe()
|
|
KASAN: use-after-free Read in usb_audio_disconnect
sound
usb
|
19 |
C |
done |
|
15 |
1713d |
1714d
|
20/29 |
1682d |
c5aa956eaeb0
ALSA: usb-audio: fix use after free in usb_audio_disconnect
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_recv
media
usb
|
-1 |
C |
|
|
13 |
1729d |
1793d
|
20/29 |
1682d |
1b43bad31fb0
media: mceusb: Fix potential out-of-bounds shift
|
|
general protection fault in tomoyo_socket_sendmsg_permission
usb
|
8 |
|
|
|
17 |
1740d |
1830d
|
20/29 |
1682d |
9380afd6df70
usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
718ad9693e36
usbip: fix vhci_hcd attach_store() races leading to gpf
46613c9dfa96
usbip: fix vudc usbip_sockfd_store races leading to gpf
|
|
memory leak in edge_startup
usb
|
3 |
C |
|
|
1 |
1725d |
1721d
|
20/29 |
1682d |
cfdc67acc785
USB: serial: io_edgeport: fix memory leak in edge_startup
|
|
unexpected kernel reboot (3)
input
usb
|
-1 |
C |
error |
error |
21132 |
1682d |
2683d
|
20/29 |
1682d |
c8e2fe13d1d1
x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
|
|
KASAN: null-ptr-deref Write in event_handler
usb
|
12 |
C |
done |
|
2869 |
1722d |
1869d
|
20/29 |
1682d |
9380afd6df70
usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
718ad9693e36
usbip: fix vhci_hcd attach_store() races leading to gpf
46613c9dfa96
usbip: fix vudc usbip_sockfd_store races leading to gpf
|
|
WARNING in spi_register_controller
usb
spi
|
-1 |
C |
|
|
1848 |
1797d |
2411d
|
19/29 |
1713d |
9c60cc797cf7
media: msi2500: assign SPI bus number dynamically
|
|
UBSAN: shift-out-of-bounds in dummy_hub_control
usb
|
-1 |
C |
done |
|
5 |
1790d |
1787d
|
19/29 |
1713d |
c318840fb2a4
USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
|
|
UBSAN: shift-out-of-bounds in parse_audio_format_i
sound
usb
|
-1 |
C |
error |
|
19 |
1798d |
1804d
|
19/29 |
1713d |
175b8d89fe29
ALSA: pcm: oss: Fix potential out-of-bounds shift
43d5ca88dfcd
ALSA: usb-audio: Fix potential out-of-bounds shift
|
|
UBSAN: shift-out-of-bounds in option_probe
usb
|
-1 |
C |
error |
|
22 |
1803d |
1804d
|
19/29 |
1713d |
a251963f76fa
USB: serial: option: add interface-number sanity check to flag handling
|
|
memory leak in hub_event
usb
|
3 |
C |
|
|
7 |
1734d |
1823d
|
19/29 |
1713d |
e469d0b09a19
media: gspca: Fix memory leak in probe
|
|
WARNING in yurex_write/usb_submit_urb
usb
|
-1 |
C |
error |
|
78 |
1772d |
1800d
|
19/29 |
1713d |
372c93131998
USB: yurex: fix control-URB timeout handling
|
|
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info
sound
usb
|
-1 |
C |
error |
|
9 |
1771d |
1790d
|
19/29 |
1713d |
c06ccf3ebb75
ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
|
|
UBSAN: shift-out-of-bounds in vhci_hub_control
usb
|
-1 |
C |
unreliable |
|
4 |
1754d |
1790d
|
19/29 |
1713d |
718bf42b119d
usb: usbip: vhci_hcd: protect shift size
|
|
general protection fault in tower_disconnect
usb
|
2 |
C |
|
|
53 |
1797d |
1805d
|
19/29 |
1713d |
b175d273d4e4
USB: legotower: fix logical error in recent commit
|
|
memory leak in wacom_probe
input
usb
|
3 |
C |
|
|
26 |
1776d |
1831d
|
19/29 |
1713d |
37309f47e2f5
HID: wacom: Fix memory leakage caused by kfifo_alloc
|
|
KASAN: use-after-free Read in service_outstanding_interrupt
usb
|
19 |
C |
|
|
28 |
1773d |
1928d
|
19/29 |
1713d |
5e5ff0b4b6bc
USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
|
|
WARNING in cm109_input_ev/usb_submit_urb
input
usb
|
-1 |
C |
unreliable |
|
8 |
1802d |
1823d
|
19/29 |
1713d |
82e060904732
Input: cm109 - do not stomp on control URB
|
|
memory leak in gadget_setup
usb
|
3 |
C |
|
|
49 |
1834d |
1851d
|
15/29 |
1823d |
129aa9734559
usb: raw-gadget: fix memory leak in gadget_setup
|
|
memory leak in gadget_bind
usb
|
3 |
C |
|
|
62 |
1834d |
1851d
|
15/29 |
1823d |
129aa9734559
usb: raw-gadget: fix memory leak in gadget_setup
|
|
INFO: task hung in wdm_flush
usb
|
1 |
C |
|
|
38294 |
1904d |
2289d
|
15/29 |
1827d |
37d2a36394d9
USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
|
|
KMSAN: uninit-value in batadv_hard_if_event (2)
usb
batman
|
7 |
C |
|
|
162 |
1843d |
1926d
|
15/29 |
1827d |
f45a4248ea4c
net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
|
|
WARNING in ati_remote_sendpacket/usb_submit_urb
usb
media
|
-1 |
C |
|
|
22 |
1998d |
2309d
|
15/29 |
1827d |
a8be80053ea7
media: ati_remote: sanity check for both endpoints
|
|
general protection fault in vmk80xx_write_packet
usb
staging
|
2 |
C |
|
|
82 |
1867d |
2323d
|
15/29 |
1827d |
e1f13c879a7c
staging: comedi: check validity of wMaxPacketSize of usb endpoints found
|
|
INFO: trying to register non-static key in del_timer_sync (2)
wireless
usb
|
-1 |
C |
|
|
1206 |
2359d |
2411d
|
15/29 |
1827d |
621a3a8b1c0e
mwifiex: don't call del_timer_sync() on uninitialized timer
|
|
KASAN: slab-out-of-bounds Read in read_descriptors (2)
usb
|
17 |
|
|
|
1 |
1914d |
1910d
|
15/29 |
1864d |
a18cd6c9b6bc
usb: core: fix slab-out-of-bounds Read in read_descriptors
|
|
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb
staging
usb
|
17 |
C |
|
|
8 |
1905d |
1936d
|
15/29 |
1864d |
fea22e159d51
staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
|
|
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage
usb
input
|
23 |
C |
|
|
279 |
1907d |
2250d
|
15/29 |
1879d |
25a097f52046
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
|
|
WARNING in slab_pre_alloc_hook
usb
|
-1 |
C |
|
|
210 |
1904d |
1925d
|
15/29 |
1879d |
f176ede3a3bd
USB: yurex: Fix bad gfp argument
|
|
KMSAN: kernel-infoleak in raw_ioctl
usb
|
9 |
C |
|
|
22 |
1901d |
1926d
|
15/29 |
1879d |
a092b7233f0e
net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
|
|
WARNING in r871xu_dev_remove
usb
staging
|
-1 |
C |
|
|
47375 |
1927d |
2279d
|
15/29 |
1887d |
b4383c971bc5
staging: rtl8712: handle firmware load failure
|
|
general protection fault in cdev_del
usb
fs
|
2 |
C |
|
|
315 |
1897d |
2365d
|
15/29 |
1887d |
e911e99a0770
usb: hso: check for return value in hso_serial_common_create()
|
|
WARNING in submit_rx_urb/usb_submit_urb
usb
staging
|
-1 |
C |
|
|
397 |
1939d |
2364d
|
15/29 |
1887d |
faaff9765664
staging: wlan-ng: properly check endpoint types
|
|
KASAN: use-after-free Read in ax88172a_unbind
usb
|
19 |
C |
done |
|
2723 |
1939d |
2179d
|
15/29 |
1887d |
c28d9a285668
ax88172a: fix ax88172a_unbind() failures
|
|
WARNING in submit_audio_out_urb/usb_submit_urb
usb
sound
|
-1 |
syz |
|
|
2 |
1957d |
1957d
|
15/29 |
1887d |
6e8a914ad619
ALSA: line6: Perform sanity check for each URB creation
|
|
WARNING in snd_usbmidi_submit_urb/usb_submit_urb
usb
sound
|
-1 |
C |
done |
|
42 |
1971d |
1995d
|
15/29 |
1887d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
general protection fault in go7007_usb_probe
usb
media
|
2 |
C |
|
|
2103 |
1927d |
2035d
|
15/29 |
1887d |
137641287eb4
go7007: add sanity checking for endpoints
|
|
WARNING in snd_usbmidi_input_start/usb_submit_urb
usb
sound
|
-1 |
C |
done |
|
231 |
1948d |
1991d
|
15/29 |
1887d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
BUG: unable to handle kernel NULL pointer dereference in schedule_timeout
usb
|
10 |
|
|
|
1 |
1969d |
1969d
|
15/29 |
1948d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id
usb
sound
|
23 |
C |
done |
|
39 |
1967d |
1972d
|
15/29 |
1948d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt
sound
usb
|
23 |
C |
done |
|
5 |
1971d |
1972d
|
15/29 |
1948d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
INFO: task hung in locks_remove_posix
fs
usb
input
|
1 |
syz |
|
|
2231 |
1984d |
2006d
|
15/29 |
1948d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
|
KASAN: use-after-free Read in usblp_bulk_read
usb
|
19 |
|
|
|
7 |
1958d |
2036d
|
15/29 |
1948d |
296a193b0612
usblp: poison URBs upon disconnect
|
|
WARNING in usbhid_raw_request/usb_submit_urb (3)
usb
|
-1 |
syz |
|
|
18 |
2027d |
2134d
|
15/29 |
1948d |
ac854131d984
USB: core: Fix misleading driver bug report
|
|
KASAN: slab-out-of-bounds Read in garmin_read_process
usb
|
17 |
C |
|
|
1 |
2067d |
2067d
|
15/29 |
1948d |
e9b3c610a05c
USB: serial: garmin_gps: add sanity checking for data length
|
|
KASAN: use-after-free Read in usbhid_close (3)
input
usb
|
19 |
C |
|
|
6 |
2022d |
2050d
|
15/29 |
1948d |
0ed08faded1d
HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in udc_bind_to_driver
usb
|
10 |
|
|
|
1 |
1977d |
1977d
|
15/29 |
1948d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
WARNING in wa_nep_create/usb_submit_urb
usb
staging
|
-1 |
C |
|
|
114 |
2038d |
2322d
|
15/29 |
1968d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
WARNING in hwarc_neep_init/usb_submit_urb
usb
staging
|
-1 |
C |
|
|
1 |
2072d |
2072d
|
15/29 |
1968d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
BUG: corrupted list in __uwb_rc_neh_rm
staging
usb
|
8 |
C |
|
|
9 |
2044d |
2079d
|
15/29 |
1968d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
KASAN: use-after-free Read in chaoskey_disconnect
crypto
usb
|
19 |
C |
|
|
44 |
2181d |
2210d
|
15/29 |
1977d |
93ddb1f56ae1
USB: chaoskey: fix use-after-free on release
|
|
KASAN: slab-out-of-bounds Read in edge_interrupt_callback
usb
|
17 |
C |
|
|
1 |
2066d |
2065d
|
15/29 |
2017d |
57aa9f294b09
USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
|
|
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback
staging
usb
|
17 |
C |
|
|
1 |
2067d |
2067d
|
15/29 |
2017d |
1165dd73e811
staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
|
|
BUG: soft lockup in sys_exit_group
usb
|
1 |
C |
|
|
6 |
2067d |
2090d
|
15/29 |
2042d |
d683469b3c93
ALSA: line6: Fix endless MIDI read loop
|
|
KASAN: use-after-free Write in hiddev_disconnect
usb
input
|
24 |
|
|
|
20 |
2069d |
2134d
|
15/29 |
2042d |
5c02c447eaed
HID: hiddev: Fix race in in hiddev_disconnect()
|
|
WARNING in _chaoskey_fill/usb_submit_urb
usb
|
-1 |
C |
|
|
15 |
2194d |
2247d
|
15/29 |
2076d |
92aa5986f4f7
USB: chaoskey: fix error case of a timeout
|
|
WARNING in flexcop_usb_probe/usb_submit_urb
usb
media
|
-1 |
C |
|
|
4 |
2242d |
2280d
|
15/29 |
2076d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
KMSAN: uninit-value in sd_init (2)
media
usb
|
7 |
C |
|
|
94 |
2205d |
2201d
|
15/29 |
2099d |
de89d0864f66
media: gspca: zero usb_buf
|
|
KMSAN: uninit-value in digitv_rc_query
media
usb
|
7 |
C |
|
|
4 |
2217d |
2201d
|
15/29 |
2099d |
eecc70d22ae5
media: digitv: don't continue if remote control state can't be read
569bc8d6a6a5
media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
|
|
KMSAN: uninit-value in number
media
usb
|
7 |
C |
|
|
190 |
2103d |
2201d
|
15/29 |
2099d |
51d0c99b391f
media: af9005: uninitialized variable printked
|
|
KMSAN: uninit-value in i2c_w (2)
media
usb
|
7 |
C |
|
|
3 |
2212d |
2201d
|
15/29 |
2099d |
de89d0864f66
media: gspca: zero usb_buf
|
|
KMSAN: uninit-value in read_sensor_register (2)
media
usb
|
7 |
C |
|
|
44 |
2206d |
2223d
|
15/29 |
2099d |
de89d0864f66
media: gspca: zero usb_buf
|
|
WARNING in dln2_start_rx_urbs/usb_submit_urb
usb
|
-1 |
C |
|
|
44 |
2114d |
2203d
|
15/29 |
2099d |
2b8bd606b1e6
mfd: dln2: More sanity checking for endpoints
|
|
KASAN: slab-out-of-bounds Read in hid_field_extract
input
usb
|
17 |
C |
|
|
6 |
2139d |
2173d
|
15/29 |
2099d |
8ec321e96e05
HID: Fix slab-out-of-bounds read in hid_field_extract
|
|
WARNING: ODEBUG bug in rsi_probe
usb
wireless
|
-1 |
C |
|
|
10487 |
2113d |
2408d
|
15/29 |
2099d |
92aafe77123a
rsi: fix use-after-free on probe errors
|
|
WARNING in uvc_scan_chain_forward
usb
media
|
-1 |
C |
|
|
6 |
2138d |
2163d
|
15/29 |
2099d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
general protection fault in gigaset_probe
staging
usb
|
2 |
C |
|
|
6 |
2188d |
2307d
|
15/29 |
2103d |
53f35a39c386
staging: gigaset: fix general protection fault on probe
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit (2)
sound
usb
|
17 |
C |
|
|
1 |
2202d |
2202d
|
15/29 |
2124d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
KMSAN: uninit-value in usbnet_probe
usb
|
7 |
C |
|
|
1 |
2357d |
2356d
|
15/29 |
2140d |
78226f6eaac8
net: usb: asix: init MAC address buffers
|
|
KASAN: global-out-of-bounds Write in kbd_event
serial
input
usb
|
23 |
C |
|
|
6 |
2180d |
2203d
|
15/29 |
2166d |
b2b2dd71e085
tty: vt: keyboard: reject invalid keycodes
|
|
general protection fault in flexcop_usb_probe
usb
media
|
2 |
C |
|
|
403 |
2180d |
2411d
|
15/29 |
2166d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
kernel BUG at kernel/time/timer.c:LINE! (4)
media
usb
|
-1 |
syz |
|
|
1 |
2236d |
2233d
|
15/29 |
2166d |
f3f5ba42c58d
media: imon: invalid dereference in imon_touch_event
|
|
KASAN: use-after-free Read in appledisplay_bl_get_brightness
usb
|
19 |
C |
|
|
1 |
2249d |
2247d
|
15/29 |
2166d |
91feb01596e5
appledisplay: fix error handling in the scheduled work
|
|
INFO: trying to register non-static key in ida_destroy
usb
media
|
-1 |
C |
|
|
4272 |
2180d |
2303d
|
15/29 |
2166d |
8c279e9394ca
media: uvcvideo: Fix error path in control parsing failure
|
|
general protection fault in snd_usb_create_mixer
sound
usb
|
2 |
C |
|
|
1 |
2189d |
2188d
|
15/29 |
2166d |
9435f2bb6687
ALSA: usb-audio: Fix NULL dereference at parsing BADD
|
|
general protection fault in usb_set_interface
usb
|
2 |
C |
|
|
3 |
2251d |
2254d
|
15/29 |
2166d |
c7a191464078
media: usbvision: Fix invalid accesses after device disconnect
|
|
WARNING in port100_send_cmd_async/usb_submit_urb
usb
nfc
|
-1 |
C |
|
|
83 |
2181d |
2322d
|
15/29 |
2168d |
5f9f0b11f081
nfc: port100: handle command failure cleanly
|
|
KMSAN: uninit-value in ax88172a_bind
usb
|
7 |
C |
|
|
5 |
2211d |
2225d
|
14/29 |
2180d |
a9a51bd727d1
ax88172a: fix information leak on short answers
|
|
KMSAN: use-after-free in build_audio_procunit
sound
usb
|
18 |
C |
|
|
2 |
2217d |
2217d
|
14/29 |
2180d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
KMSAN: uninit-value in get_min_max_with_quirks
sound
usb
|
7 |
C |
|
|
11 |
2212d |
2201d
|
14/29 |
2180d |
167beb175679
ALSA: usb-audio: Fix missing error check at mixer resolution test
|
|
WARNING: ODEBUG bug in input_ff_destroy
input
usb
|
-1 |
C |
|
|
6 |
2188d |
2196d
|
14/29 |
2180d |
fa3a5a1880c9
Input: ff-memless - kill timer in destroy()
|
|
KMSAN: uninit-value in cdc_ncm_set_dgram_size
usb
|
7 |
C |
|
|
4 |
2210d |
2209d
|
14/29 |
2180d |
332f989a3b00
CDC-NCM: handle incomplete transfer of MTU
|
|
KASAN: use-after-free Read in mcba_usb_disconnect
can
usb
|
19 |
C |
|
|
2 |
2207d |
2239d
|
14/29 |
2180d |
4d6636498c41
can: mcba_usb: fix use-after-free on disconnect
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_wait_rsp
usb
|
9 |
C |
|
|
2 |
2224d |
2223d
|
14/29 |
2180d |
f7a1337f0d29
can: peak_usb: fix slab info leak
|
|
KASAN: invalid-free in rsi_91x_deinit
usb
wireless
|
22 |
C |
|
|
109 |
2253d |
2400d
|
13/29 |
2180d |
8b51dc729147
rsi: fix a double free bug in rsi_91x_deinit()
|
|
KMSAN: use-after-free in adu_disconnect
usb
|
18 |
C |
|
|
16 |
2226d |
2232d
|
13/29 |
2182d |
44efc269db79
USB: adutux: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in mutex_spin_on_owner
usb
|
18 |
C |
|
|
1 |
2231d |
2231d
|
13/29 |
2182d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in iowarrior_disconnect
usb
|
18 |
C |
|
|
21 |
2226d |
2232d
|
13/29 |
2182d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in usb_autopm_put_interface
usb
|
18 |
C |
|
|
63 |
2212d |
2225d
|
13/29 |
2182d |
7a7591979748
USB: usblp: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in __pm_runtime_resume
usb
|
18 |
|
|
|
1 |
2232d |
2232d
|
13/29 |
2182d |
5f9242775bb6
HID: logitech: Fix general protection fault caused by Logitech driver
|
|
KMSAN: uninit-value in lg4ff_set_autocenter_default
input
usb
|
7 |
C |
|
|
1 |
2212d |
2212d
|
13/29 |
2182d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
divide error in dummy_timer
usb
|
2 |
C |
|
|
3 |
2210d |
2216d
|
13/29 |
2186d |
54f83b8c8ea9
USB: gadget: Reject endpoints with 0 maxpacket value
|
|
INFO: task hung in ld_usb_write
usb
|
1 |
C |
|
|
831 |
2205d |
2218d
|
13/29 |
2186d |
52403cfbc635
USB: ldusb: fix control-message timeout
|
|
KASAN: use-after-free Read in iowarrior_disconnect
usb
|
19 |
C |
|
|
3056 |
2226d |
2282d
|
13/29 |
2188d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
divide error in usbtmc_generic_read
usb
|
2 |
C |
|
|
2 |
2287d |
2287d
|
13/29 |
2188d |
de7b9aa633b6
usbtmc: more sanity checking for packet size
|
|
KASAN: use-after-free Read in vhci_hub_control
usb
|
19 |
C |
|
done |
41 |
2586d |
2632d
|
13/29 |
2188d |
81f7567c51ad
usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
|
|
KASAN: slab-out-of-bounds Read in ld_usb_read (3)
usb
|
17 |
C |
|
|
74 |
2212d |
2223d
|
13/29 |
2203d |
7a6f22d7479b
USB: ldusb: fix read info leaks
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit
usb
sound
|
17 |
C |
|
|
6 |
2209d |
2218d
|
13/29 |
2203d |
ba8bf0967a15
ALSA: usb-audio: Fix copy&paste error in the validator
|
|
KASAN: use-after-free Read in usb_autopm_put_interface
usb
|
19 |
C |
|
|
2373 |
2212d |
2225d
|
13/29 |
2203d |
7a7591979748
USB: usblp: fix use-after-free on disconnect
|
|
KMSAN: uninit-value in sr9800_bind
usb
|
7 |
C |
|
|
27 |
2214d |
2237d
|
13/29 |
2205d |
77b6d09f4ae6
net: usb: sr9800: fix uninitialized local variable
|
|
KASAN: use-after-free Read in pn533_send_complete
nfc
usb
|
19 |
C |
|
|
4 |
2212d |
2233d
|
13/29 |
2205d |
6af3aa57a098
NFC: pn533: fix use-after-free and memleaks
|
|
possible deadlock in usb_deregister_dev (2)
usb
|
4 |
C |
|
|
956 |
2226d |
2254d
|
13/29 |
2212d |
33a7813219f2
USB: legousbtower: fix deadlock on disconnect
|
|
KMSAN: uninit-value in mts_usb_probe
usb
|
7 |
C |
|
|
29 |
2231d |
2237d
|
13/29 |
2212d |
177238c3d47d
USB: microtek: fix info-leak at probe
|
|
KMSAN: uninit-value in iowarrior_disconnect
usb
|
7 |
C |
|
|
18 |
2230d |
2236d
|
13/29 |
2212d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KASAN: use-after-free Read in adu_disconnect
usb
|
19 |
C |
|
|
5304 |
2226d |
2296d
|
13/29 |
2212d |
44efc269db79
USB: adutux: fix use-after-free on disconnect
|
|
INFO: rcu detected stall in dummy_timer
usb
|
1 |
C |
|
|
16 |
2227d |
2292d
|
13/29 |
2212d |
32a0721c6620
USB: yurex: Don't retry on unexpected errors
|
|
KASAN: invalid-free in disconnect_rio (2)
usb
|
22 |
C |
|
|
51 |
2229d |
2250d
|
13/29 |
2212d |
015664d15270
USB: rio500: Remove Rio 500 kernel driver
|
|
WARNING in em28xx_usb_disconnect
usb
media
|
-1 |
C |
|
|
8 |
2259d |
2292d
|
13/29 |
2224d |
46e4a26615cc
media: em28xx: modules workqueue not inited for 2nd device
|
|
KASAN: use-after-free Read in si470x_int_in_callback
usb
media
|
19 |
C |
|
|
25 |
2234d |
2323d
|
13/29 |
2224d |
0d616f2a3fdb
media: radio/si470x: kill urb on error
|
|
general protection fault in ath6kl_usb_alloc_urb_from_pipe
usb
wireless
|
2 |
C |
|
|
1160 |
2251d |
2411d
|
13/29 |
2224d |
39d170b3cb62
ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
|
|
KMSAN: uninit-value in read_sensor_register
media
usb
|
7 |
C |
|
|
25 |
2224d |
2354d
|
13/29 |
2224d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
KMSAN: kernel-usb-infoleak in ttusb_dec_send_command
usb
|
9 |
C |
|
|
2 |
2292d |
2302d
|
13/29 |
2224d |
a10feaf8c464
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
|
|
KASAN: use-after-free Read in atusb_disconnect
usb
wpan
|
19 |
C |
|
|
112 |
2226d |
2267d
|
13/29 |
2224d |
7fd25e6fc035
ieee802154: atusb: fix use-after-free at disconnect
|
|
KASAN: slab-out-of-bounds Read in hdpvr_probe
usb
media
|
17 |
C |
|
|
10 |
2261d |
2336d
|
13/29 |
2224d |
8b8900b729e4
media: hdpvr: add terminating 0 at end of string
|
|
KASAN: global-out-of-bounds Read in load_next_firmware_from_table
usb
libertas
|
17 |
C |
|
|
5 |
2273d |
2323d
|
13/29 |
2224d |
764f3f1ecffc
libertas: Add missing sentinel at end of if_usb.c fw_table
|
|
divide error in usbnet_update_max_qlen
usb
|
2 |
C |
|
|
17 |
2241d |
2254d
|
13/29 |
2224d |
280ceaed79f1
usbnet: sanity checking of packet sizes and device mtu
|
|
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query
usb
media
|
17 |
C |
|
|
2236 |
2270d |
2408d
|
13/29 |
2224d |
0c4df39e504b
media: technisat-usb2: break out of loop at end of buffer
|
|
KASAN: global-out-of-bounds Read in dvb_pll_attach
media
usb
|
17 |
C |
|
|
2 |
2262d |
2322d
|
13/29 |
2224d |
c268e7adea52
media: dvb-frontends: use ida for pll number
|
|
general protection fault in pk_probe
input
usb
|
2 |
C |
|
|
2 |
2270d |
2267d
|
13/29 |
2224d |
98375b86c791
HID: prodikeys: Fix general protection fault during probe
|
|
KASAN: global-out-of-bounds Read in hdpvr_probe
usb
media
|
17 |
C |
|
|
15 |
2277d |
2391d
|
13/29 |
2224d |
d4a6a9537bc3
media: hdpvr: Add device num check and handling
|
|
WARNING: ODEBUG bug in usbhid_disconnect (2)
input
usb
|
-1 |
C |
|
|
48 |
2245d |
2267d
|
13/29 |
2224d |
2bcdacb70327
HID: sony: Fix memory corruption issue on cleanup.
|
|
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device
usb
|
17 |
syz |
|
|
1 |
2275d |
2267d
|
13/29 |
2224d |
3dd550a2d365
USB: usbcore: Fix slab-out-of-bounds bug during device reset
|
|
KMSAN: uninit-value in i2c_w
usb
media
|
7 |
C |
|
|
2 |
2358d |
2357d
|
13/29 |
2224d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
possible deadlock in open_rio (3)
usb
|
4 |
C |
|
|
169 |
2251d |
2253d
|
13/29 |
2224d |
9472aff16ca0
USB: rio500: Fix lockdep violation
|
|
WARNING in zd_mac_clear
usb
wireless
|
-1 |
C |
|
|
13194 |
2251d |
2411d
|
13/29 |
2224d |
7a2eb7367fde
zd1211rw: remove false assertion from zd_mac_clear()
|
|
KMSAN: uninit-value in sd_init
usb
media
|
7 |
C |
|
|
122 |
2224d |
2357d
|
13/29 |
2224d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
WARNING in iguanair_probe/usb_submit_urb
media
usb
|
-1 |
C |
|
|
3 |
2255d |
2306d
|
13/29 |
2224d |
ab1cbdf159be
media: iguanair: add sanity checks
|
|
general protection fault in __pm_runtime_resume
input
usb
pm
|
2 |
C |
|
|
197 |
2245d |
2308d
|
13/29 |
2224d |
5f9242775bb6
HID: logitech: Fix general protection fault caused by Logitech driver
|
|
divide error in cdc_ncm_update_rxtx_max
usb
|
2 |
C |
|
|
5 |
2240d |
2254d
|
13/29 |
2224d |
3fe4b3351301
cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
|
|
possible deadlock in open_rio
usb
|
4 |
|
|
|
1107 |
2263d |
2300d
|
12/29 |
2263d |
2ca359f4f8b9
Revert "USB: rio500: simplify locking"
|
|
possible deadlock in usb_deregister_dev
usb
|
4 |
C |
|
|
82 |
2289d |
2296d
|
12/29 |
2263d |
c468a8aa790e
usb: iowarrior: fix deadlock on disconnect
|
|
WARNING in __iforce_usb_xmit/usb_submit_urb
input
usb
|
-1 |
C |
|
|
3 |
2291d |
2296d
|
12/29 |
2263d |
849f5ae3a513
Input: iforce - add sanity checks
|
|
WARNING in kbtab_open/usb_submit_urb
usb
|
-1 |
C |
|
|
5 |
2291d |
2309d
|
12/29 |
2263d |
c88090dfc842
Input: kbtab - sanity check for endpoint type
|
|
WARNING in usbtouch_open
input
usb
|
-1 |
C |
|
|
768 |
2289d |
2303d
|
12/29 |
2263d |
b55d996f057b
Input: usbtouchscreen - initialize PM mutex before using it
|
|
KASAN: use-after-free Read in usb_free_coherent
usb
|
19 |
|
|
|
310 |
2289d |
2300d
|
12/29 |
2263d |
fc05481b2fca
usb: yurex: Fix use-after-free in yurex_delete
|
|
KASAN: use-after-free Read in ld_usb_release
usb
|
19 |
C |
|
|
14 |
2282d |
2292d
|
12/29 |
2263d |
303911cfc5b9
USB: core: Fix races in character device registration and deregistraion
|
|
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
net
usb
|
17 |
C |
|
|
2 |
2287d |
2289d
|
12/29 |
2263d |
54364278fb3c
USB: CDC: fix sanity checks in CDC union parser
|
|
KASAN: use-after-free Read in device_release_driver_internal
usb
|
19 |
C |
|
|
5 |
2285d |
2309d
|
12/29 |
2263d |
c52873e5a1ef
usb: cdc-acm: make sure a refcount is taken early enough
|
|
WARNING in wdm_write/usb_submit_urb
usb
|
-1 |
C |
|
|
15 |
2267d |
2282d
|
12/29 |
2263d |
1426bd2c9f7e
USB: cdc-wdm: fix race between write and disconnect due to flag abuse
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_pro_send_req
usb
|
9 |
C |
|
|
16 |
2276d |
2302d
|
12/29 |
2274d |
30a8beeb3042
can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
|
|
KASAN: use-after-free Read in hiddev_release
input
usb
|
19 |
C |
|
|
11 |
2284d |
2300d
|
12/29 |
2274d |
9c09b214f30e
HID: hiddev: avoid opening a disconnected device
6d4472d7bec3
HID: hiddev: do cleanup in failure of opening a device
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_pro_init
usb
|
9 |
C |
|
|
13 |
2278d |
2302d
|
12/29 |
2274d |
ead16e53c2f0
can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
|
|
WARNING in gpio_to_desc
usb
gpio
|
-1 |
C |
|
|
3 |
2291d |
2322d
|
12/29 |
2274d |
c3953a3c2d31
NFC: nfcmrvl: fix gpio-handling regression
|
|
KMSAN: uninit-value in read_eprom_word
usb
|
7 |
C |
|
|
31 |
2276d |
2302d
|
12/29 |
2274d |
224c04973db1
net: usb: pegasus: fix improper read if get_registers() fail
|
|
general protection fault in snd_usb_pipe_sanity_check
usb
sound
|
2 |
C |
|
|
72 |
2289d |
2303d
|
12/29 |
2287d |
5d78e1c2b7f4
ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
|
|
KASAN: stack-out-of-bounds Read in hfcsusb_probe
usb
isdn4linux
|
17 |
C |
|
|
634 |
2303d |
2408d
|
12/29 |
2287d |
f384e62a82ba
ISDN: hfcsusb: checking idx of ep configuration
|
|
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE!
usb
|
-1 |
C |
|
|
1 |
2309d |
2309d
|
12/29 |
2287d |
f90bf1ece48a
usb: wusbcore: fix unbalanced get/put cluster_id
|
|
WARNING: Support for this device (Terratec Grabster AV400) is experimental.
usb
|
-1 |
C |
|
|
371 |
2303d |
2393d
|
12/29 |
2296d |
1753c7c4367a
media: pvrusb2: use a different format for warnings
|
|
KMSAN: uninit-value in ax88772_bind
usb
|
7 |
C |
|
|
80 |
2298d |
2359d
|
12/29 |
2296d |
78226f6eaac8
net: usb: asix: init MAC address buffers
|
|
KASAN: use-after-free Read in cpia2_usb_disconnect
usb
media
|
19 |
C |
|
|
3 |
2322d |
2407d
|
12/29 |
2296d |
eff73de2b160
media: cpia2_usb: first wake up, then free in disconnect
|
|
WARNING in __flush_work (3)
usb
|
-1 |
C |
|
|
1251 |
2298d |
2408d
|
12/29 |
2296d |
11a087f484bf
media: uvcvideo: Fix access to uninitialized fields on probe error
|
|
KASAN: use-after-free Read in dvb_usb_device_exit
usb
|
19 |
C |
|
|
825 |
2296d |
2411d
|
12/29 |
2296d |
6cf97230cd5f
media: dvb: usb: fix use after free in dvb_usb_device_exit
|
|
INFO: trying to register non-static key in rtl_c2hcmd_launcher
usb
wireless
|
-1 |
C |
|
|
48950 |
2303d |
2411d
|
12/29 |
2296d |
6c0ed66f1a5b
rtlwifi: rtl8192cu: fix error handle when usb probe failed
|
|
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap
usb
media
|
11 |
C |
|
|
76 |
2303d |
2394d
|
12/29 |
2296d |
5d2e73a5f80a
media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
|
|
WARNING: ath10k USB support is incomplete, don't expect anything to work!
usb
|
-1 |
C |
|
|
347 |
2304d |
2384d
|
12/29 |
2296d |
265df32eae58
ath10k: Change the warning message string
|
|
KASAN: use-after-free Read in v4l2_release
usb
media
|
19 |
C |
|
|
275 |
2304d |
2408d
|
12/29 |
2296d |
c666355e60dd
media: radio-raremono: change devm_k*alloc to k*alloc
|
|
WARNING: Detected a wedged cx25840 chip; the device will not work.
usb
|
-1 |
C |
|
|
62 |
2304d |
2393d
|
12/29 |
2296d |
1753c7c4367a
media: pvrusb2: use a different format for warnings
|
|
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb
usb
|
-1 |
C |
|
|
3 |
2312d |
2351d
|
12/29 |
2296d |
801ebf1043ae
ALSA: usb-audio: Sanity checks for each pipe and EP types
|
|
KASAN: use-after-free Read in p54u_load_firmware_cb
wireless
usb
|
19 |
syz |
|
|
40 |
2303d |
2387d
|
12/29 |
2296d |
6e41e2257f10
p54usb: Fix race between disconnect and firmware loading
|
|
KASAN: global-out-of-bounds Read in qmi_wwan_probe
usb
|
17 |
C |
|
|
2 |
2326d |
2338d
|
12/29 |
2303d |
904d88d743b0
qmi_wwan: Fix out-of-bounds read
|
|
KASAN: null-ptr-deref Write in submit_audio_out_urb (2)
usb
|
12 |
C |
|
|
3423 |
2303d |
2335d
|
12/29 |
2303d |
3450121997ce
ALSA: line6: Fix write on zero-sized buffer
|
|
WARNING: proc registration bug in snd_info_card_register
usb
sound
|
-1 |
C |
|
|
453 |
2367d |
2411d
|
12/29 |
2337d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
general protection fault in sisusb_probe
usb
|
2 |
C |
|
|
3 |
2381d |
2384d
|
12/29 |
2342d |
9a5729f68d3a
USB: sisusbvga: fix oops in error path of sisusb_probe
|
|
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor
usb
|
23 |
syz |
|
|
3 |
2370d |
2382d
|
12/29 |
2342d |
a03ff5446081
USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
|
|
KASAN: invalid-free in disconnect_rio
usb
|
22 |
C |
|
|
180 |
2366d |
2411d
|
12/29 |
2342d |
3864d33943b4
USB: rio500: refuse more than one device at a time
|
|
general protection fault in smsusb_init_device
media
usb
|
2 |
C |
|
|
23 |
2366d |
2405d
|
12/29 |
2342d |
31e0456de5be
media: usb: siano: Fix general protection fault in smsusb
|
|
KASAN: null-ptr-deref Write in submit_audio_out_urb
sound
usb
|
12 |
C |
|
|
185 |
2350d |
2366d
|
12/29 |
2344d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
INFO: task hung in usb_kill_urb
usb
|
1 |
C |
|
|
1515 |
2405d |
2411d
|
12/29 |
2347d |
50896c410354
USB: dummy-hcd: Fix failure to give back unlinked URBs
USB: dummy-hcd: Fix failure to give back unlinked URBs
|
|
general protection fault in __dev_printk
usb
|
2 |
C |
|
|
300 |
2392d |
2406d
|
12/29 |
2366d |
ef61eb43ada6
USB: yurex: Fix protection fault after device removal
|
|
INFO: trying to register non-static key in vmk80xx_detach
usb
staging
|
-1 |
C |
|
|
1528 |
2366d |
2411d
|
12/29 |
2366d |
08b7c2f9208f
staging: comedi: vmk80xx: Fix use of uninitialized semaphore
|
|
INFO: trying to register non-static key in ni6501_detach
staging
usb
|
-1 |
C |
|
|
127 |
2366d |
2408d
|
12/29 |
2366d |
660cf4ce9d0f
staging: comedi: ni_usb6501: Fix use of uninitialized mutex
|
|
KASAN: use-after-free Read in snd_info_free_entry
usb
sound
|
19 |
C |
|
|
47 |
2378d |
2408d
|
12/29 |
2366d |
2a3f7221acdd
ALSA: core: Fix card races between register and disconnect
8c2f870890fd
ALSA: info: Fix racy addition/deletion of nodes
|
|
KASAN: slab-out-of-bounds Read in ds_probe
usb
|
17 |
C |
|
|
5 |
2368d |
2406d
|
12/29 |
2366d |
c114944d7d67
USB: w1 ds2490: Fix bug caused by improper use of altsetting array
|
|
KASAN: stack-out-of-bounds Read in string
usb
|
17 |
C |
|
|
46 |
2399d |
2411d
|
12/29 |
2377d |
c01c348ecdc6
USB: core: Fix unterminated string returned by usb_string()
|
|
WARNING in usb_submit_urb (4)
usb
|
-1 |
syz |
done |
|
46 |
2379d |
2567d
|
12/29 |
2377d |
c2b71462d294
USB: core: Fix bug caused by duplicate interface PM usage counter
|
|
KASAN: invalid-free in hub_event
usb
|
22 |
|
|
|
1 |
2548d |
2548d
|
11/29 |
2526d |
d81bb019d7bb
USB: Fix invalid-free bug in port_over_current_notify()
|
|
WARNING in usb_submit_urb (3)
usb
|
-1 |
C |
|
|
58 |
2577d |
2592d
|
11/29 |
2575d |
665c365a77fb
USB: fix the usbfs flag sanitization for control transfers
|
|
KASAN: slab-out-of-bounds Read in vhci_hub_control
usb
|
17 |
C |
|
|
43 |
2586d |
2630d
|
11/29 |
2575d |
81f7567c51ad
usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
|
|
general protection fault in usb_find_alt_setting (2)
usb
|
2 |
C |
|
|
53 |
2610d |
2632d
|
11/29 |
2594d |
c9a4cb204e9e
USB: handle NULL config in usb_find_alt_setting()
|
|
KASAN: use-after-free Read in destroy_async_on_interface
usb
|
19 |
C |
|
|
134 |
2610d |
2632d
|
11/29 |
2594d |
bd729f9d67aa
USB: fix error handling in usb_driver_claim_interface()
|
|
WARNING in usb_submit_urb (2)
usb
|
-1 |
C |
|
|
259 |
2594d |
2631d
|
11/29 |
2594d |
7a68d9fb8510
USB: usbdevfs: sanitize flags more
|
|
KASAN: use-after-free Read in mon_bin_vma_fault
usb
|
19 |
|
|
|
7 |
2869d |
2880d
|
4/29 |
2843d |
46eb14a6e158
USB: fix usbmon BUG trigger
|
|
BUG: Bad page state (3)
usb
|
-1 |
C |
|
|
3 |
2870d |
2877d
|
4/29 |
2845d |
46eb14a6e158
USB: fix usbmon BUG trigger
|
|
WARNING in usb_submit_urb
usb
|
-1 |
C |
|
|
2 |
2940d |
2932d
|
4/29 |
2845d |
446f666da9f0
USB: usbfs: Filter flags passed in from user space
|
|
kernel BUG at ./include/linux/mm.h:LINE! (3)
usb
|
-1 |
C |
|
|
621 |
2864d |
2881d
|
3/29 |
2859d |
46eb14a6e158
USB: fix usbmon BUG trigger
|