|
memory leak in __vsock_create (2)
prio:high
net
virt
|
3 |
syz, C |
|
|
6 |
12d |
127d
|
24/29 |
never |
b8c899cf5e7b
vsock: don't check the listener's sk_err in vsock_accept()
|
|
WARNING in virtio_transport_send_pkt_info (2)
prio:high
kvm
net
virt
|
-1 |
syz, C |
error |
|
4 |
30d |
274d
|
7/29 |
never |
5ab3b28c5b3b
vsock/virtio: restore msg_iter on transmission failure
|
|
WARNING in virtio_gpu_free_vbufs
prio:high
dri
virt
|
-1 |
|
|
|
3 |
5h21m |
27d
|
2/29 |
never |
drm/virtio: reclaim pending vbufs before tearing down vqs
|
|
BUG: sleeping function called from invalid context in vhost_get_avail_idx
kvm
net
virt
|
5 |
syz, C |
|
|
1 |
133d |
130d
|
29/29 |
100d |
e08a9fac5cf8
vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
|
|
memory leak in napi_skb_cache_get (2)
net
virt
|
3 |
syz, C |
|
|
1 |
228d |
225d
|
29/29 |
115d |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
BUG: sleeping function called from invalid context in __bpf_stream_push_str
net
virt
|
5 |
syz, C |
done |
|
88 |
221d |
264d
|
29/29 |
115d |
99a3e3a1cfc9
slab: fix kmalloc_nolock() context check for PREEMPT_RT
|
|
possible deadlock in vsock_linger
virt
net
|
4 |
syz, C |
|
|
7 |
313d |
312d
|
29/29 |
284d |
f7c877e75352
vsock: fix lock inversion in vsock_assign_transport()
|
|
BUG: sleeping function called from invalid context in __set_page_owner
net
virt
|
5 |
syz, C |
done |
|
79 |
310d |
324d
|
29/29 |
284d |
c83aab85e181
mm: don't spin in add_stack_record when gfp flags don't allow
|
|
possible deadlock in vsock_connectible_setsockopt
net
virt
|
4 |
|
|
|
1 |
347d |
347d
|
29/29 |
303d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in virtio_transport_send_pkt_info
net
virt
kvm
|
-1 |
syz, C |
|
|
145 |
364d |
382d
|
29/29 |
324d |
7fb1291257ea
vsock/virtio: Fix message iterator handling on transmit path
|
|
general protection fault in add_wait_queue
kvm
net
virt
|
10 |
syz, C |
done |
|
676 |
558d |
572d
|
28/29 |
445d |
78dafe1cf3af
vsock: Orphan socket after transport release
|
|
KCSAN: data-race in virtqueue_disable_cb / virtqueue_enable_cb_delayed (9)
virt
|
6 |
|
|
|
1 |
543d |
542d
|
28/29 |
445d |
2e2f925fe737
virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
|
|
general protection fault in vsock_stream_has_data
net
virt
|
2 |
syz, C |
done |
done |
6 |
595d |
592d
|
28/29 |
479d |
df137da9d6d1
vsock/virtio: cancel close work in the destructor
|
|
general protection fault in vsock_connectible_has_data
net
virt
|
2 |
syz, C |
done |
|
7 |
599d |
597d
|
28/29 |
480d |
f6abafcd32f9
vsock/bpf: return early if transport is not assigned
|
|
KCSAN: data-race in virtqueue_disable_cb / vring_interrupt (4)
virt
|
6 |
|
|
|
1 |
716d |
716d
|
28/29 |
654d |
83c334ed5216
virtio_ring: tag event_triggered as racy for KCSAN
|
|
linux-next test error: WARNING in rcu_core
net
virt
|
-1 |
|
|
|
16 |
749d |
757d
|
28/29 |
676d |
b8c8ba73c68b
slub: Introduce CONFIG_SLUB_RCU_DEBUG
|
|
BUG: stack guard page was hit in vsock_bpf_recvmsg
net
virt
|
-1 |
syz, C |
done |
|
6 |
749d |
749d
|
28/29 |
695d |
69139d2919dd
vsock: fix recursive ->recvmsg calls
|
|
upstream test error: KMSAN: uninit-value in receive_buf
net
virt
|
-1 |
|
|
|
351 |
770d |
826d
|
27/29 |
744d |
840b2d39a2dc
virtio_ring: fix KMSAN error for premapped mode
|
|
KMSAN: uninit-value in vsock_assign_transport (2)
net
virt
|
7 |
syz, C |
|
|
14 |
807d |
862d
|
27/29 |
745d |
1e1fdcbdde3b
vhost/vsock: always initialize seqpacket_allow
|
|
KASAN: slab-use-after-free Read in vhost_task_fn
kvm
net
virt
|
19 |
syz, C |
done |
|
2661 |
849d |
851d
|
25/29 |
815d |
db5247d9bf5c
vhost_task: Handle SIGKILL by flushing work and exiting
|
|
net-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
799 |
855d |
890d
|
25/29 |
828d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
linux-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
177 |
885d |
922d
|
25/29 |
828d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
net boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
297 |
855d |
885d
|
25/29 |
828d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
upstream boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
1463 |
862d |
893d
|
25/29 |
828d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
bpf-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
210 |
852d |
881d
|
25/29 |
828d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
bpf boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
132 |
854d |
882d
|
25/29 |
828d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
KCSAN: data-race in virtnet_poll / virtnet_stats (2)
net
virt
|
6 |
|
|
|
1 |
1071d |
1069d
|
25/29 |
957d |
61217d8f6360
virtio_net: use u64_stats_t infra to avoid data-races
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
syz, C |
|
|
20713 |
1023d |
1037d
|
25/29 |
982d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
general protection fault in vhost_work_queue
net
virt
kvm
|
2 |
|
|
|
1 |
1192d |
1187d
|
23/29 |
1152d |
a284f09effea
vhost: Fix crash during early vhost_transport_send_pkt calls
|
|
riscv/fixes test error: BUG: soft lockup in corrupted (2)
net
virt
|
-1 |
|
|
|
4 |
1417d |
1494d
|
22/29 |
1178d |
61fc1ee8be26
riscv: Bump COMMAND_LINE_SIZE value to 1024
|
|
memory leak in __vsock_create
net
virt
io-uring
|
3 |
syz, C |
|
|
1 |
1606d |
1602d
|
22/29 |
1282d |
7e97cfed9929
vsock: Fix memory leak in vsock_connect()
|
|
kernel BUG in vhost_get_vq_desc
virt
kvm
net
|
-1 |
syz, C |
inconclusive |
|
19 |
1646d |
1658d
|
22/29 |
1282d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
INFO: task hung in vhost_work_dev_flush
virt
kvm
net
|
1 |
syz, C |
error |
|
2 |
1662d |
1652d
|
22/29 |
1282d |
e2ae38cf3d91
vhost: fix hung thread due to erroneous iotlb entries
|
|
WARNING in vhost_dev_cleanup (2)
net
virt
kvm
|
-1 |
|
|
|
79 |
1646d |
1654d
|
22/29 |
1282d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
general protection fault in virtio_gpu_array_put_free
dri
virt
|
2 |
|
|
|
4 |
1692d |
1729d
|
22/29 |
1282d |
6b79f96f4a23
drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
|
|
usb-testing boot error: WARNING in __netif_set_xps_queue
virt
net
|
-1 |
|
|
|
57 |
1400d |
1412d
|
22/29 |
1282d |
fc8695eb11f0
Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
|
|
KASAN: out-of-bounds Write in virtio_gpu_cmd_set_scanout
dri
virt
|
21 |
|
|
|
1 |
1760d |
1760d
|
20/29 |
1635d |
5bd4f20de8ac
virtio-gpu: fix possible memory allocation failure
|
|
linux-next boot error: KASAN: use-after-free Read in page_to_skb
net
virt
|
-1 |
|
|
|
7 |
1956d |
1958d
|
20/29 |
1753d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
memory leak in virtio_transport_send_pkt_info
virt
kvm
net
|
3 |
syz, C |
|
|
2 |
1965d |
2028d
|
20/29 |
1753d |
8432b8114957
vsock/virtio: free queued packets when closing socket
|
|
linux-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
virt
net
|
-1 |
|
|
|
5 |
1956d |
1957d
|
20/29 |
1753d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
net-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
net
virt
|
-1 |
|
|
|
15 |
1956d |
1960d
|
20/29 |
1753d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
net-next boot error: KASAN: use-after-free Read in page_to_skb
net
virt
|
-1 |
|
|
|
11 |
1956d |
1959d
|
20/29 |
1753d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
general protection fault in vsock_poll
net
virt
|
2 |
syz |
done |
|
15 |
2217d |
2229d
|
15/29 |
2172d |
1980c0584483
vsock: fix potential null pointer dereference in vsock_poll()
|
|
upstream boot error: KASAN: slab-out-of-bounds Write in virtio_gpu_object_create
dri
virt
|
-1 |
|
|
|
6 |
2327d |
2336d
|
15/29 |
2253d |
b513b0d4563a
drm/virtio: fix OOB in virtio_gpu_object_create
|
|
kernel panic: stack is corrupted in vhost_net_ioctl
kvm
net
virt
|
2 |
syz, C |
done |
|
2 |
2387d |
2473d
|
15/29 |
2327d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
INFO: task hung in lock_sock_nested (2)
net
virt
kvm
|
1 |
syz, C |
done |
|
418 |
2366d |
2379d
|
15/29 |
2327d |
3f74957fcbea
vsock: fix potential deadlock in transport->release()
|
|
general protection fault in virtio_transport_release
kvm
net
virt
|
2 |
syz, C |
done |
|
7 |
2473d |
2475d
|
15/29 |
2451d |
039fcccaed33
vsock: avoid to assign transport if its initialization fails
|
|
INFO: task hung in vhost_net_stop_vq
net
virt
kvm
|
1 |
syz, C |
done |
|
136 |
2691d |
2828d
|
12/29 |
2651d |
813dbeb656d6
vhost: reject zero size iova range
|
|
KASAN: use-after-free Read in vhost_transport_send_pkt
kvm
net
virt
|
19 |
syz |
|
|
36 |
2825d |
2951d
|
11/29 |
2811d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_work_queue
kvm
net
virt
|
19 |
syz |
|
|
30 |
2823d |
2923d
|
11/29 |
2811d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_transport_cancel_pkt
kvm
net
virt
|
19 |
syz |
|
|
17 |
2850d |
2894d
|
11/29 |
2811d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in iotlb_access_ok
kvm
net
virt
|
19 |
|
|
|
1 |
2948d |
2944d
|
8/29 |
2922d |
b13f9c636437
vhost: reset metadata cache when initializing new IOTLB
|
|
WARNING: ODEBUG bug in vsock_stream_connect
net
virt
|
-1 |
syz, C |
|
|
42 |
2942d |
2952d
|
8/29 |
2922d |
455f05ecd2b2
vsock: split dwork to avoid reinitializations
|
|
KMSAN: uninit-value in _copy_to_iter (2)
kvm
net
virt
|
7 |
syz, C |
|
|
226 |
3004d |
3050d
|
8/29 |
2972d |
670ae9caaca4
vhost: fix info leak due to uninitialized memory
|
|
kernel BUG at drivers/vhost/vhost.c:LINE! (2)
virt
kvm
net
|
-1 |
syz, C |
|
|
139 |
3036d |
3066d
|
5/29 |
3034d |
d14d2b78090c
vhost: fix vhost_vq_access_ok() log check
|
|
KASAN: use-after-free Read in perf_trace_lock_acquire (2)
kvm
net
virt
|
19 |
syz, C |
|
|
188 |
3130d |
3202d
|
5/29 |
3048d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
BUG: corrupted list in remove_wait_queue
virt
kvm
net
|
8 |
syz, C |
|
|
5 |
3080d |
3083d
|
5/29 |
3067d |
dc6455a71c7f
vhost: correctly remove wait queue during poll failure
|
|
kernel BUG at drivers/vhost/vhost.c:LINE!
kvm
net
virt
|
-1 |
syz, C |
|
|
152 |
3067d |
3085d
|
5/29 |
3067d |
d65026c6c62e
vhost: validate log when IOTLB is enabled
|
|
possible deadlock in handle_rx
virt
kvm
net
|
4 |
syz, C |
|
|
4 |
3078d |
3078d
|
5/29 |
3067d |
aaa3149bbee9
vhost_net: add missing lock nesting notation
|
|
KASAN: use-after-free Read in __list_add_valid (3)
kvm
net
virt
|
19 |
|
|
|
16 |
3131d |
3138d
|
4/29 |
3128d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
KASAN: double-free or invalid-free in skb_free_head
net
virt
|
24 |
syz, C |
|
|
13 |
3170d |
3176d
|
4/29 |
3131d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
WARNING in vhost_dev_cleanup
net
virt
kvm
|
-1 |
syz, C |
|
|
4 |
3132d |
3138d
|
4/29 |
3131d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
possible deadlock in vhost_chr_write_iter
kvm
net
virt
|
4 |
syz, C |
|
|
25952 |
3138d |
3140d
|
4/29 |
3134d |
e9cb4239134c
vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
|
|
BUG: unable to handle kernel paging request in vsock_diag_dump
net
virt
|
8 |
syz, C |
|
|
6 |
3228d |
3231d
|
3/29 |
3196d |
c1eef220c176
vsock: always call vsock_init_tables()
|