|
memory leak in __vsock_create (2)
prio:high
net
virt
|
3 |
syz, C |
|
|
6 |
37d |
152d
|
26/29 |
never |
b8c899cf5e7b
vsock: don't check the listener's sk_err in vsock_accept()
|
|
WARNING in virtio_transport_send_pkt_info (2)
prio:high
kvm
net
virt
|
-1 |
syz, C |
error |
|
4 |
55d |
299d
|
1/29 |
never |
vsock/virtio: restore msg_iter on transmission failure
|
|
BUG: unable to handle kernel paging request in cirrus_primary_plane_helper_atomic_update
prio:high
dri
virt
|
8 |
C |
|
|
35 |
30d |
38d
|
23/29 |
never |
92312d333bf7
drm/cirrus-qemu: Validate BAR0 size during probe
|
|
WARNING in virtio_gpu_free_vbufs
prio:high
dri
virt
|
-1 |
|
|
|
13 |
20d |
52d
|
23/29 |
never |
61d85f99b5a5
drm/virtio: reclaim pending vbufs before tearing down vqs
|
|
BUG: sleeping function called from invalid context in vhost_get_avail_idx
kvm
net
virt
|
5 |
syz, C |
|
|
1 |
158d |
156d
|
29/29 |
125d |
e08a9fac5cf8
vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
|
|
memory leak in napi_skb_cache_get (2)
net
virt
|
3 |
syz, C |
|
|
1 |
253d |
251d
|
29/29 |
140d |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
BUG: sleeping function called from invalid context in __bpf_stream_push_str
net
virt
|
5 |
syz, C |
done |
|
88 |
247d |
289d
|
29/29 |
140d |
99a3e3a1cfc9
slab: fix kmalloc_nolock() context check for PREEMPT_RT
|
|
possible deadlock in vsock_linger
virt
net
|
4 |
syz, C |
|
|
7 |
338d |
337d
|
29/29 |
309d |
f7c877e75352
vsock: fix lock inversion in vsock_assign_transport()
|
|
BUG: sleeping function called from invalid context in __set_page_owner
net
virt
|
5 |
syz, C |
done |
|
79 |
335d |
349d
|
29/29 |
309d |
c83aab85e181
mm: don't spin in add_stack_record when gfp flags don't allow
|
|
possible deadlock in vsock_connectible_setsockopt
net
virt
|
4 |
|
|
|
1 |
372d |
372d
|
29/29 |
329d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in virtio_transport_send_pkt_info
net
virt
kvm
|
-1 |
syz, C |
|
|
145 |
390d |
408d
|
29/29 |
349d |
7fb1291257ea
vsock/virtio: Fix message iterator handling on transmit path
|
|
general protection fault in add_wait_queue
kvm
net
virt
|
10 |
syz, C |
done |
|
676 |
584d |
597d
|
28/29 |
470d |
78dafe1cf3af
vsock: Orphan socket after transport release
|
|
KCSAN: data-race in virtqueue_disable_cb / virtqueue_enable_cb_delayed (9)
virt
|
6 |
|
|
|
1 |
568d |
568d
|
28/29 |
470d |
2e2f925fe737
virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
|
|
general protection fault in vsock_stream_has_data
net
virt
|
2 |
syz, C |
done |
done |
6 |
621d |
617d
|
28/29 |
504d |
df137da9d6d1
vsock/virtio: cancel close work in the destructor
|
|
general protection fault in vsock_connectible_has_data
net
virt
|
2 |
syz, C |
done |
|
7 |
624d |
622d
|
28/29 |
505d |
f6abafcd32f9
vsock/bpf: return early if transport is not assigned
|
|
KCSAN: data-race in virtqueue_disable_cb / vring_interrupt (4)
virt
|
6 |
|
|
|
1 |
741d |
741d
|
28/29 |
679d |
83c334ed5216
virtio_ring: tag event_triggered as racy for KCSAN
|
|
linux-next test error: WARNING in rcu_core
net
virt
|
-1 |
|
|
|
16 |
774d |
782d
|
28/29 |
701d |
b8c8ba73c68b
slub: Introduce CONFIG_SLUB_RCU_DEBUG
|
|
BUG: stack guard page was hit in vsock_bpf_recvmsg
net
virt
|
-1 |
syz, C |
done |
|
6 |
774d |
775d
|
28/29 |
720d |
69139d2919dd
vsock: fix recursive ->recvmsg calls
|
|
upstream test error: KMSAN: uninit-value in receive_buf
net
virt
|
-1 |
|
|
|
351 |
796d |
851d
|
27/29 |
770d |
840b2d39a2dc
virtio_ring: fix KMSAN error for premapped mode
|
|
KMSAN: uninit-value in vsock_assign_transport (2)
net
virt
|
7 |
syz, C |
|
|
14 |
832d |
887d
|
27/29 |
770d |
1e1fdcbdde3b
vhost/vsock: always initialize seqpacket_allow
|
|
KASAN: slab-use-after-free Read in vhost_task_fn
kvm
net
virt
|
19 |
syz, C |
done |
|
2661 |
874d |
876d
|
25/29 |
840d |
db5247d9bf5c
vhost_task: Handle SIGKILL by flushing work and exiting
|
|
net-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
799 |
881d |
915d
|
25/29 |
853d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
linux-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
177 |
910d |
947d
|
25/29 |
853d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
net boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
297 |
881d |
910d
|
25/29 |
853d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
upstream boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
1463 |
887d |
918d
|
25/29 |
853d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
bpf-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
210 |
877d |
906d
|
25/29 |
853d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
bpf boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
132 |
879d |
907d
|
25/29 |
853d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
KCSAN: data-race in virtnet_poll / virtnet_stats (2)
net
virt
|
6 |
|
|
|
1 |
1096d |
1094d
|
25/29 |
982d |
61217d8f6360
virtio_net: use u64_stats_t infra to avoid data-races
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
syz, C |
|
|
20713 |
1048d |
1062d
|
25/29 |
1007d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
general protection fault in vhost_work_queue
net
virt
kvm
|
2 |
|
|
|
1 |
1217d |
1212d
|
23/29 |
1177d |
a284f09effea
vhost: Fix crash during early vhost_transport_send_pkt calls
|
|
riscv/fixes test error: BUG: soft lockup in corrupted (2)
net
virt
|
-1 |
|
|
|
4 |
1442d |
1519d
|
22/29 |
1203d |
61fc1ee8be26
riscv: Bump COMMAND_LINE_SIZE value to 1024
|
|
memory leak in __vsock_create
net
virt
io-uring
|
3 |
syz, C |
|
|
1 |
1631d |
1627d
|
22/29 |
1307d |
7e97cfed9929
vsock: Fix memory leak in vsock_connect()
|
|
kernel BUG in vhost_get_vq_desc
virt
kvm
net
|
-1 |
syz, C |
inconclusive |
|
19 |
1671d |
1683d
|
22/29 |
1307d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
INFO: task hung in vhost_work_dev_flush
virt
kvm
net
|
1 |
syz, C |
error |
|
2 |
1687d |
1677d
|
22/29 |
1307d |
e2ae38cf3d91
vhost: fix hung thread due to erroneous iotlb entries
|
|
WARNING in vhost_dev_cleanup (2)
net
virt
kvm
|
-1 |
|
|
|
79 |
1671d |
1679d
|
22/29 |
1307d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
general protection fault in virtio_gpu_array_put_free
dri
virt
|
2 |
|
|
|
4 |
1717d |
1754d
|
22/29 |
1307d |
6b79f96f4a23
drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
|
|
usb-testing boot error: WARNING in __netif_set_xps_queue
virt
net
|
-1 |
|
|
|
57 |
1425d |
1437d
|
22/29 |
1307d |
fc8695eb11f0
Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
|
|
KASAN: out-of-bounds Write in virtio_gpu_cmd_set_scanout
dri
virt
|
21 |
|
|
|
1 |
1785d |
1785d
|
20/29 |
1660d |
5bd4f20de8ac
virtio-gpu: fix possible memory allocation failure
|
|
linux-next boot error: KASAN: use-after-free Read in page_to_skb
net
virt
|
-1 |
|
|
|
7 |
1981d |
1983d
|
20/29 |
1778d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
memory leak in virtio_transport_send_pkt_info
virt
kvm
net
|
3 |
syz, C |
|
|
2 |
1990d |
2053d
|
20/29 |
1778d |
8432b8114957
vsock/virtio: free queued packets when closing socket
|
|
linux-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
virt
net
|
-1 |
|
|
|
5 |
1981d |
1982d
|
20/29 |
1778d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
net-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
net
virt
|
-1 |
|
|
|
15 |
1981d |
1985d
|
20/29 |
1778d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
net-next boot error: KASAN: use-after-free Read in page_to_skb
net
virt
|
-1 |
|
|
|
11 |
1981d |
1985d
|
20/29 |
1778d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
general protection fault in vsock_poll
net
virt
|
2 |
syz |
done |
|
15 |
2242d |
2254d
|
15/29 |
2197d |
1980c0584483
vsock: fix potential null pointer dereference in vsock_poll()
|
|
upstream boot error: KASAN: slab-out-of-bounds Write in virtio_gpu_object_create
dri
virt
|
-1 |
|
|
|
6 |
2352d |
2361d
|
15/29 |
2278d |
b513b0d4563a
drm/virtio: fix OOB in virtio_gpu_object_create
|
|
kernel panic: stack is corrupted in vhost_net_ioctl
kvm
net
virt
|
2 |
syz, C |
done |
|
2 |
2412d |
2498d
|
15/29 |
2352d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
INFO: task hung in lock_sock_nested (2)
net
virt
kvm
|
1 |
syz, C |
done |
|
418 |
2392d |
2405d
|
15/29 |
2352d |
3f74957fcbea
vsock: fix potential deadlock in transport->release()
|
|
general protection fault in virtio_transport_release
kvm
net
virt
|
2 |
syz, C |
done |
|
7 |
2499d |
2500d
|
15/29 |
2476d |
039fcccaed33
vsock: avoid to assign transport if its initialization fails
|
|
INFO: task hung in vhost_net_stop_vq
net
virt
kvm
|
1 |
syz, C |
done |
|
136 |
2716d |
2853d
|
12/29 |
2676d |
813dbeb656d6
vhost: reject zero size iova range
|
|
KASAN: use-after-free Read in vhost_transport_send_pkt
kvm
net
virt
|
19 |
syz |
|
|
36 |
2850d |
2977d
|
11/29 |
2836d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_work_queue
kvm
net
virt
|
19 |
syz |
|
|
30 |
2848d |
2948d
|
11/29 |
2836d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_transport_cancel_pkt
kvm
net
virt
|
19 |
syz |
|
|
17 |
2875d |
2919d
|
11/29 |
2836d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in iotlb_access_ok
kvm
net
virt
|
19 |
|
|
|
1 |
2973d |
2969d
|
8/29 |
2948d |
b13f9c636437
vhost: reset metadata cache when initializing new IOTLB
|
|
WARNING: ODEBUG bug in vsock_stream_connect
net
virt
|
-1 |
syz, C |
|
|
42 |
2968d |
2977d
|
8/29 |
2948d |
455f05ecd2b2
vsock: split dwork to avoid reinitializations
|
|
KMSAN: uninit-value in _copy_to_iter (2)
kvm
net
virt
|
7 |
syz, C |
|
|
226 |
3029d |
3075d
|
8/29 |
2998d |
670ae9caaca4
vhost: fix info leak due to uninitialized memory
|
|
kernel BUG at drivers/vhost/vhost.c:LINE! (2)
virt
kvm
net
|
-1 |
syz, C |
|
|
139 |
3061d |
3092d
|
5/29 |
3060d |
d14d2b78090c
vhost: fix vhost_vq_access_ok() log check
|
|
KASAN: use-after-free Read in perf_trace_lock_acquire (2)
kvm
net
virt
|
19 |
syz, C |
|
|
188 |
3155d |
3227d
|
5/29 |
3074d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
BUG: corrupted list in remove_wait_queue
virt
kvm
net
|
8 |
syz, C |
|
|
5 |
3105d |
3108d
|
5/29 |
3092d |
dc6455a71c7f
vhost: correctly remove wait queue during poll failure
|
|
kernel BUG at drivers/vhost/vhost.c:LINE!
kvm
net
virt
|
-1 |
syz, C |
|
|
152 |
3092d |
3110d
|
5/29 |
3092d |
d65026c6c62e
vhost: validate log when IOTLB is enabled
|
|
possible deadlock in handle_rx
virt
kvm
net
|
4 |
syz, C |
|
|
4 |
3103d |
3103d
|
5/29 |
3092d |
aaa3149bbee9
vhost_net: add missing lock nesting notation
|
|
KASAN: use-after-free Read in __list_add_valid (3)
kvm
net
virt
|
19 |
|
|
|
16 |
3156d |
3163d
|
4/29 |
3153d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
KASAN: double-free or invalid-free in skb_free_head
net
virt
|
24 |
syz, C |
|
|
13 |
3195d |
3201d
|
4/29 |
3156d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
WARNING in vhost_dev_cleanup
net
virt
kvm
|
-1 |
syz, C |
|
|
4 |
3157d |
3163d
|
4/29 |
3156d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
possible deadlock in vhost_chr_write_iter
kvm
net
virt
|
4 |
syz, C |
|
|
25952 |
3163d |
3166d
|
4/29 |
3159d |
e9cb4239134c
vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
|
|
BUG: unable to handle kernel paging request in vsock_diag_dump
net
virt
|
8 |
syz, C |
|
|
6 |
3253d |
3256d
|
3/29 |
3221d |
c1eef220c176
vsock: always call vsock_init_tables()
|