|
KASAN: use-after-free Read in p9_req_put
v9fs
|
19 |
|
|
|
338 |
8h42m |
1453d
|
1/29 |
never |
9p: p9_client_create: use p9_client_destroy on failure
|
|
INFO: task hung in v9fs_evict_inode
v9fs
|
1 |
syz, C |
error |
done |
2597 |
295d |
611d
|
29/29 |
255d |
netfs: fix reference leak
|
|
KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (9)
v9fs
|
6 |
|
|
|
2 |
509d |
547d
|
28/29 |
424d |
fbc0283fbeae
9p/trans_fd: mark concurrent read and writes to p9_conn->err
|
|
KCSAN: data-race in p9_conn_cancel / p9_write_work (7)
v9fs
|
6 |
|
|
|
2 |
518d |
543d
|
28/29 |
424d |
fbc0283fbeae
9p/trans_fd: mark concurrent read and writes to p9_conn->err
|
|
general protection fault in p9_client_walk
v9fs
|
2 |
syz, C |
|
|
3 |
501d |
516d
|
28/29 |
424d |
3f61ac7c65bd
fs/9p: fix NULL pointer dereference on mkdir
|
|
BUG: stack guard page was hit in sys_open
mm
v9fs
|
-1 |
syz, C |
|
|
11 |
599d |
635d
|
28/29 |
459d |
4acb665cf4f3
netfs: Work around recursion by abandoning retry if nothing read
|
|
WARNING in p9_client_create (2)
v9fs
|
-1 |
syz, C |
done |
|
26070 |
649d |
685d
|
28/29 |
634d |
79efebae4afc
9p: Avoid creating multiple slab caches with the same name
|
|
KASAN: slab-use-after-free Read in p9_fid_destroy
v9fs
|
19 |
syz, C |
|
|
13 |
804d |
885d
|
25/29 |
789d |
f89ea63f1c65
netfs, 9p: Fix race between umount and async request completion
|
|
KASAN: slab-use-after-free Read in p9_client_destroy
v9fs
|
19 |
|
|
|
7 |
807d |
820d
|
25/29 |
789d |
f89ea63f1c65
netfs, 9p: Fix race between umount and async request completion
|
|
KASAN: slab-use-after-free Write in v9fs_free_request
v9fs
|
22 |
|
|
|
9 |
804d |
818d
|
25/29 |
789d |
f89ea63f1c65
netfs, 9p: Fix race between umount and async request completion
|
|
KMSAN: uninit-value in p9_client_rpc (2)
v9fs
|
7 |
syz, C |
|
|
5 |
828d |
861d
|
25/29 |
789d |
25460d6f3902
net/9p: fix uninit-value in p9_client_rpc()
|
|
KMSAN: uninit-value in v9fs_evict_inode
v9fs
|
7 |
syz, C |
|
|
5206 |
863d |
875d
|
25/29 |
808d |
6630036b7c22
fs/9p: fix uninitialized values during inode evict
|
|
KASAN: slab-use-after-free Read in v9fs_stat2inode_dotl
v9fs
|
19 |
syz, C |
done |
|
585 |
864d |
919d
|
25/29 |
808d |
11763a8598f8
fs/9p: fix uaf in in v9fs_stat2inode_dotl
|
|
KASAN: wild-memory-access Write in v9fs_get_acl
v9fs
|
21 |
syz, C |
|
|
7 |
1217d |
1250d
|
22/29 |
1157d |
707823e7f22f
9P FS: Fix wild-memory-access write in v9fs_get_acl
|
|
BUG: corrupted list in p9_fd_cancel (2)
v9fs
fuse
|
8 |
syz, C |
error |
|
8 |
1360d |
1385d
|
22/29 |
1261d |
11c10956515b
9p/fd: fix issue of list_del corruption in p9_fd_cancel()
|
|
KFENCE: memory corruption in p9_req_put
v9fs
|
20 |
|
|
|
2 |
1359d |
1361d
|
22/29 |
1261d |
26273ade77f5
9p: set req refcount to zero to avoid uninitialized usage
|
|
inconsistent lock state in p9_req_put
v9fs
|
4 |
|
|
|
181 |
1403d |
1454d
|
22/29 |
1261d |
296ab4a81384
net/9p: use a dedicated spinlock for trans_fd
|
|
INFO: task hung in p9_fd_close
v9fs
|
1 |
syz, C |
error |
error |
484 |
1371d |
2535d
|
22/29 |
1261d |
ef575281b21e
9p/trans_fd: always use O_NONBLOCK read/write
|
|
KMSAN: uninit-value in p9pdu_readf
v9fs
|
7 |
|
|
|
14 |
1649d |
1764d
|
20/29 |
1614d |
27eb4c3144f7
9p/net: fix missing error check in p9_check_errors
|
|
KASAN: invalid-free in p9_client_create (2)
v9fs
|
24 |
syz, C |
done |
|
3 |
2019d |
2019d
|
19/29 |
1978d |
757fed1d0898
Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
|
|
WARNING: refcount bug in p9_req_put
v9fs
|
13 |
syz |
inconclusive |
done |
6 |
2270d |
2823d
|
15/29 |
2091d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
BUG: corrupted list in p9_read_work (2)
v9fs
|
8 |
syz |
done |
error |
38 |
2454d |
2816d
|
15/29 |
2152d |
74d6a5d56629
9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
|
|
KASAN: use-after-free Read in p9_fd_poll
v9fs
|
19 |
syz, C |
|
done |
8 |
2918d |
2950d
|
13/29 |
2453d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
BUG: corrupted list in p9_conn_cancel
v9fs
|
8 |
syz, C |
|
done |
18 |
2852d |
2952d
|
13/29 |
2462d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
general protection fault in p9_conn_cancel
v9fs
|
2 |
syz, C |
|
done |
2 |
2932d |
2950d
|
13/29 |
2462d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
WARNING: ODEBUG bug in p9_fd_close
v9fs
|
-1 |
syz, C |
|
done |
82 |
2913d |
2953d
|
13/29 |
2462d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
BUG: corrupted list in p9_write_work
v9fs
|
8 |
syz, C |
|
done |
5 |
2875d |
2921d
|
13/29 |
2462d |
728356dedeff
9p: Add refcount to p9_req_t
|
|
memory leak in v9fs_cache_session_get_cookie
v9fs
|
3 |
syz, C |
|
|
242 |
2489d |
2636d
|
13/29 |
2489d |
962a991c5de1
9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
|
|
BUG: unable to handle kernel NULL pointer dereference in setup_kmem_cache_node
v9fs
|
10 |
|
|
|
3 |
2775d |
2775d
|
11/29 |
2713d |
09c2e76ed734
slab: alien caches must not be initialized if the allocation of the alien cache failed
|
|
WARNING in kmem_cache_create_usercopy
v9fs
|
-1 |
syz, C |
|
|
10 |
2778d |
2836d
|
11/29 |
2762d |
574d356b7a02
9p/net: put a lower bound on msize
|
|
KASAN: invalid-free in p9stat_free
v9fs
|
24 |
syz, C |
|
|
3 |
2904d |
2904d
|
11/29 |
2826d |
62e3941776fe
9p: clear dangling pointers in p9stat_free
81c99089bce6
v9fs_dir_readdir: fix double-free on p9stat_read error
|
|
KASAN: use-after-free Read in _copy_from_iter
v9fs
|
19 |
syz, C |
|
|
12 |
2930d |
2942d
|
11/29 |
2826d |
728356dedeff
9p: Add refcount to p9_req_t
|
|
WARNING: kmalloc bug in __v9fs_get_acl
v9fs
|
-1 |
syz, C |
|
|
212 |
2844d |
2951d
|
11/29 |
2826d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
BUG: corrupted list in p9_read_work
v9fs
|
8 |
syz |
|
|
23 |
2834d |
2946d
|
11/29 |
2826d |
e4ca13f7d075
9p/trans_fd: abort p9_read_work if req status changed
|
|
general protection fault in vsscanf
v9fs
|
2 |
syz, C |
|
|
7 |
2921d |
2951d
|
8/29 |
2896d |
10aa14527f45
9p: fix multiple NULL-pointer-dereferences
|
|
KASAN: slab-out-of-bounds Read in pdu_read
v9fs
|
17 |
syz, C |
|
|
267 |
2918d |
2953d
|
8/29 |
2902d |
f984579a01d8
9p: validate PDU length
7913690dcc5e
net/9p/client.c: version pointer uninitialized
|
|
general protection fault in p9_fd_create_unix
v9fs
|
2 |
syz, C |
|
|
4 |
2948d |
2952d
|
8/29 |
2902d |
10aa14527f45
9p: fix multiple NULL-pointer-dereferences
|
|
BUG: corrupted list in p9_fd_cancel
v9fs
|
8 |
syz, C |
|
|
34 |
2938d |
2952d
|
8/29 |
2902d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
KASAN: use-after-free Read in p9_poll_workfn
v9fs
|
19 |
syz, C |
|
|
148 |
2913d |
2952d
|
8/29 |
2902d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|