|
KMSAN: uninit-value in sctp_inq_pop (2)
sctp
|
7 |
C |
|
|
4089 |
214d |
1528d
|
29/29 |
158d |
fd60d8a08619
sctp: linearize cloned gso packets in sctp_rcv
|
|
KMSAN: uninit-value in dib3000mb_attach (2)
usb
media
|
7 |
C |
|
|
4873 |
449d |
1970d
|
28/29 |
313d |
2dd59fe0e19e
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
|
|
KMSAN: uninit-value in profile_hits (3)
kernel
|
19 |
C |
|
|
1529 |
596d |
810d
|
27/29 |
570d |
7c51f7bbf057
profiling: remove prof_cpu_mask
|
|
KMSAN: uninit-value in virtqueue_add (4)
mm
|
7 |
C |
|
|
203184 |
642d |
804d
|
25/29 |
642d |
61b258b0d2f6
x86: call instrumentation hooks from copy_mc.c
|
|
KMSAN: uninit-value in em_ret_far
kvm-x86
|
7 |
C |
|
|
37 |
730d |
796d
|
25/29 |
703d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in geneve_xmit (2)
net
|
7 |
C |
|
|
12 |
724d |
801d
|
25/29 |
720d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (2)
net
|
19 |
C |
|
|
126 |
721d |
772d
|
25/29 |
720d |
661779e1fcaf
netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
|
|
KMSAN: uninit-value in __llc_lookup_established
net
|
7 |
C |
|
|
46 |
788d |
831d
|
25/29 |
720d |
e3f9bed9bee2
llc: Drop support for ETH_P_TR_802_2.
|
|
KMSAN: uninit-value in io_rw_fail
io-uring
|
7 |
C |
|
|
25 |
775d |
791d
|
25/29 |
773d |
0a535eddbe0d
io_uring/rw: ensure io->bytes_done is always initialized
|
|
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2)
net
|
7 |
C |
|
|
17 |
775d |
800d
|
25/29 |
773d |
d375b98e0248
ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
C |
|
|
63 |
801d |
795d
|
25/29 |
775d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
KMSAN: uninit-value in netif_skb_features (2)
net
|
7 |
C |
|
|
9 |
819d |
907d
|
25/29 |
775d |
9181d6f8a2bb
net: add more sanity check in virtio_net_hdr_to_skb()
|
|
KMSAN: uninit-value in shrinker_alloc
mm
|
7 |
syz |
|
|
2 |
825d |
803d
|
25/29 |
775d |
7fba9420b726
mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
|
|
KMSAN: uninit-value in drm_mode_setcrtc
dri
|
7 |
C |
|
|
41 |
826d |
1002d
|
25/29 |
785d |
3823119b9c2b
drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
6e455f5dcdd1
drm/crtc: fix uninitialized variable use
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
C |
|
|
93 |
836d |
844d
|
25/29 |
785d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
KMSAN: uninit-value in dccp_v6_err
net
|
7 |
C |
|
|
4 |
910d |
915d
|
25/29 |
797d |
6af289746a63
dccp: fix dccp_v4_err()/dccp_v6_err() again
|
|
KMSAN: uninit-value in smsc95xx_reset
usb
|
7 |
C |
|
|
425 |
872d |
2036d
|
25/29 |
816d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
KASAN: use-after-free Read in bcmp
ntfs3
|
19 |
C |
done |
|
289 |
819d |
978d
|
25/29 |
816d |
34e6552a442f
fs/ntfs3: Fix OOB read in ntfs_init_from_boot
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate
net
|
7 |
C |
|
|
981 |
817d |
2733d
|
25/29 |
816d |
484b4833c604
hsr: Fix uninit-value access in fill_frame_info()
|
|
KMSAN: uninit-value in __tipc_nl_bearer_enable (2)
tipc
|
7 |
C |
|
|
21 |
862d |
906d
|
25/29 |
816d |
19b3f72a41a8
tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
C |
|
|
20713 |
857d |
871d
|
25/29 |
816d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
KMSAN: uninit-value in mii_nway_restart
usb
|
7 |
C |
|
|
2449 |
885d |
2476d
|
25/29 |
816d |
8f8abb863fa5
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
|
|
KMSAN: uninit-value in tipc_nl_node_reset_link_stats
tipc
|
7 |
C |
|
|
2 |
897d |
906d
|
25/29 |
816d |
19b3f72a41a8
tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
|
|
KMSAN: uninit-value in smsc75xx_bind
usb
|
7 |
C |
|
|
63 |
914d |
2410d
|
25/29 |
816d |
e9c65989920f
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
|
|
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy
usb
|
7 |
C |
|
|
521 |
871d |
984d
|
25/29 |
816d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
KMSAN: uninit-value in fq_change
net
|
7 |
C |
|
|
8 |
857d |
859d
|
25/29 |
816d |
f1a3b283f852
UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
|
|
KMSAN: uninit-value in llc_station_rcv
net
|
7 |
C |
|
|
2 |
871d |
880d
|
25/29 |
816d |
7b3ba18703a6
llc: verify mac len before reading mac header
|
|
KASAN: slab-out-of-bounds Read in read_descriptors (3)
usb
|
17 |
C |
error |
|
7 |
973d |
1000d
|
23/29 |
885d |
ff33299ec8bb
USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
|
|
KMSAN: uninit-value in af_alg_free_resources
crypto
|
7 |
C |
|
|
156 |
938d |
975d
|
23/29 |
885d |
080aa61e370b
crypto: fix uninit-value in af_alg_free_resources
|
|
KMSAN: uninit-value in alauda_check_media
usb
usb-storage
|
7 |
C |
|
|
1059 |
968d |
2351d
|
23/29 |
885d |
a6ff6e7a9dd6
usb-storage: alauda: Fix uninit-value in alauda_check_media()
|
|
KMSAN: uninit-value in hwsim_cloned_frame_received_nl
wireless
|
7 |
C |
|
|
8315 |
929d |
1998d
|
23/29 |
885d |
fba360a047d5
wifi: mac80211_hwsim: drop short frames
|
|
KMSAN: uninit-value in ieee802154_subif_start_xmit
bpf
|
8 |
C |
done |
|
119 |
956d |
952d
|
23/29 |
885d |
db2baf82b098
bpf: Fix an incorrect verification success with movsx insn
|
|
KMSAN: uninit-value in ieee80211_rx_handlers
wireless
|
7 |
C |
|
|
8 |
931d |
986d
|
23/29 |
885d |
19e4a47ee747
wifi: mac80211: check S1G action frame size
|
|
KMSAN: uninit-value in __netif_receive_skb_core
wireguard
wireless
|
19 |
C |
done |
|
353 |
925d |
2895d
|
23/29 |
885d |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter
net
|
9 |
|
|
|
68 |
901d |
1006d
|
23/29 |
899d |
aa5406950726
netlink: do not hard code device address lenth in fdb dumps
|
|
KMSAN: uninit-value in ath9k_wmi_ctrl_rx
wireless
|
7 |
C |
|
|
45 |
983d |
1105d
|
23/29 |
899d |
f24292e82708
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
|
|
KMSAN: uninit-value in xfrm_state_find
net
|
17 |
C |
error |
done |
215 |
1031d |
2831d
|
22/29 |
988d |
3d776e31c841
xfrm: Reject optional tunnel/BEET mode templates in outbound policies
|
|
KMSAN: uninit-value in vlan_dev_hard_start_xmit (2)
net
|
7 |
|
|
|
1 |
1064d |
1064d
|
22/29 |
988d |
dacab578c7c6
vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
|
|
KMSAN: kernel-infoleak in iommufd_vfio_ioctl
iommu
|
9 |
C |
|
|
15 |
1113d |
1126d
|
22/29 |
1011d |
b3551ead6163
iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
|
|
KMSAN: uninit-value in ethnl_set_linkmodes (2)
net
|
7 |
C |
|
|
40 |
1044d |
1350d
|
22/29 |
1011d |
9ad685dbfe7e
ethtool: Fix uninitialized number of lanes
|
|
KMSAN: uninit-value in kalmia_send_init_packet
usb
|
7 |
C |
|
|
2 |
1140d |
1140d
|
22/29 |
1011d |
c68f345b7c42
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
|
|
KMSAN: uninit-value in qrtr_tx_resume
net
arm-msm
|
7 |
C |
|
|
8 |
1085d |
1145d
|
22/29 |
1011d |
6417070918de
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
|
|
KMSAN: kernel-infoleak in _copy_to_iter (8)
mm
|
21 |
C |
|
|
21180 |
1011d |
1106d
|
22/29 |
1011d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
KMSAN: uninit-value in raw_sock_get
net
|
7 |
|
|
|
1 |
1071d |
1070d
|
22/29 |
1011d |
0a78cf7264d2
raw: Fix NULL deref in raw_get_next().
|
|
INFO: task hung in lock_mount
nilfs
|
1 |
C |
error |
error |
1238 |
1061d |
2876d
|
22/29 |
1011d |
a6a491c04888
nilfs2: fix infinite loop in nilfs_mdt_get_block()
|
|
KMSAN: uninit-value in vfs_write
fs
|
7 |
C |
|
|
3 |
1135d |
1104d
|
22/29 |
1011d |
2b4c99f7d9a5
can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
|
|
KMSAN: uninit-value in ipv6_find_tlv
net
|
7 |
C |
|
|
271 |
1053d |
2406d
|
22/29 |
1011d |
ea30388baebc
ipv6: Fix an uninit variable access bug in __ip6_make_skb()
|
|
KMSAN: kernel-infoleak in copyout (2)
net
|
17 |
C |
|
|
6723 |
1012d |
2180d
|
22/29 |
1011d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
KMSAN: uninit-value in qdisc_run
kernel
|
7 |
C |
|
|
2 |
1223d |
1159d
|
22/29 |
1011d |
3a415d59c1db
net/sched: sch_taprio: fix possible use-after-free
|
|
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast
kvm-x86
|
7 |
C |
|
|
20 |
1323d |
1356d
|
22/29 |
1115d |
8a414f943f8b
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
|
|
KMSAN: uninit-value in ax88178_reset
usb
|
7 |
C |
|
|
284 |
1424d |
1530d
|
22/29 |
1115d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (3)
tipc
|
7 |
C |
|
|
65 |
1212d |
1228d
|
22/29 |
1115d |
1c075b192fe4
tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
|
|
KMSAN: uninit-value in mpol_rebind_mm (2)
mm
|
7 |
C |
|
|
11 |
1369d |
1493d
|
22/29 |
1115d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
KMSAN: uninit-value in asix_mdio_read (3)
usb
|
7 |
C |
|
|
1582 |
1399d |
1464d
|
22/29 |
1115d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
KMSAN: uninit-value in mpol_rebind_task (2)
mm
|
7 |
C |
|
|
7 |
1371d |
1531d
|
22/29 |
1115d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
KMSAN: kernel-infoleak in vcs_read (2)
serial
|
18 |
C |
|
|
1556 |
1138d |
2293d
|
22/29 |
1115d |
af77c56aa353
tty: vt: initialize unicode screen buffer
|
|
KMSAN: uninit-value in can_send
can
|
7 |
C |
|
|
630 |
1210d |
1228d
|
22/29 |
1115d |
3eb3d283e857
can: j1939: j1939_send_one(): fix missing CAN header initialization
|
|
KMSAN: uninit-value in __tipc_nl_bearer_enable
tipc
|
7 |
C |
|
|
1288 |
1116d |
2644d
|
22/29 |
1115d |
7f36f798f89b
tipc: check attribute length for bearer name
|
|
KMSAN: uninit-value in ipvlan_queue_xmit
net
|
7 |
C |
|
|
2 |
1294d |
1876d
|
22/29 |
1115d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
KMSAN: uninit-value in iforce_init_device (2)
input
|
7 |
|
|
|
3 |
1251d |
1224d
|
22/29 |
1115d |
b8ebf250997c
Input: iforce - invert valid length check when fetching device IDs
|
|
KMSAN: kernel-infoleak in _copy_to_iter (7)
net
|
21 |
C |
|
|
138977 |
1115d |
1468d
|
22/29 |
1115d |
633593a80898
sctp: fix kernel-infoleak for SCTP sockets
|
|
KMSAN: uninit-value in asix_mdio_write_nopm
net
usb
|
7 |
|
|
|
2 |
1440d |
1461d
|
22/29 |
1115d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
KMSAN: kernel-usb-infoleak in hif_usb_send
wireless
|
9 |
C |
|
|
18149 |
1423d |
2042d
|
22/29 |
1115d |
d1e0df1c57bd
ath9k_htc: fix uninit value bugs
|
|
KMSAN: uninit-value in idmouse_open
usb
|
7 |
C |
|
|
5 |
1278d |
1274d
|
22/29 |
1115d |
bce2b0539933
usb: idmouse: fix an uninit-value in idmouse_open
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (2)
kernel
|
9 |
C |
|
|
2 |
1265d |
1264d
|
22/29 |
1115d |
e5b0d06d9b10
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
|
|
KMSAN: uninit-value in ath9k_htc_rx_msg
wireless
|
7 |
C |
|
|
17731 |
1126d |
2044d
|
22/29 |
1115d |
b383e8abed41
wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
|
|
KMSAN: uninit-value in ___bpf_prog_run (3)
bpf
|
7 |
C |
|
|
5 |
1430d |
1431d
|
22/29 |
1115d |
99c07327ae11
netlink: reset network and mac headers in netlink_dump()
|
|
KMSAN: uninit-value in r871xu_drv_init
usb
|
7 |
C |
|
|
7342 |
1363d |
2474d
|
22/29 |
1115d |
0458e5428e5e
staging: rtl8712: fix uninit-value in r871xu_drv_init()
d1b57669732d
staging: rtl8712: fix uninit-value in usb_read8() and friends
|
|
KMSAN: uninit-value in bcmp
net
|
19 |
C |
error |
done |
907 |
1151d |
2472d
|
22/29 |
1115d |
4f1dc7d9756e
fs/ntfs3: Validate attribute name offset
|
|
KMSAN: uninit-value in tomoyo_path_chown
fs
|
7 |
C |
|
|
13763 |
1272d |
1274d
|
22/29 |
1115d |
f52d74b190f8
open: always initialize ownership fields
|
|
KMSAN: uninit-value in asix_check_host_enable
usb
|
7 |
C |
|
|
109 |
1424d |
1481d
|
22/29 |
1115d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
KMSAN: uninit-value in tcp_recvmsg
net
|
7 |
C |
|
|
25918 |
1238d |
1363d
|
22/29 |
1115d |
1228b34c8d0e
net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
|
|
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2)
media
usb
|
7 |
C |
|
|
34 |
1729d |
1944d
|
20/29 |
1460d |
c5453769f77c
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
899a61a3305d
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
|
|
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control
media
usb
|
7 |
C |
|
|
186 |
1578d |
1919d
|
20/29 |
1468d |
afae4ef7d5ad
media: dvb-usb: fix ununit-value in az6027_rc_query
|
|
KMSAN: kernel-infoleak in move_addr_to_user (6)
tipc
|
9 |
C |
|
|
4 |
1508d |
1546d
|
20/29 |
1468d |
d6d86830705f
net ticp:fix a kernel-infoleak in __tipc_sendmsg()
|
|
KMSAN: kernel-infoleak in _copy_to_iter (6)
net
|
9 |
C |
|
|
748 |
1468d |
1557d
|
20/29 |
1468d |
71ddeac8cd1d
inet_diag: fix kernel-infoleak for UDP sockets
|
|
kmsan boot error: KMSAN: uninit-value in tcp_child_process
net
|
-1 |
|
|
|
48 |
1553d |
1564d
|
20/29 |
1468d |
03cfda4fa6ea
tcp: fix another uninit-value (sk_rx_queue_mapping)
|
|
kmsan boot error: KMSAN: uninit-value in tcp_conn_request
net
|
-1 |
|
|
|
27 |
1566d |
1566d
|
20/29 |
1468d |
a37a0ee4d25c
net: avoid uninit-value from tcp_conn_request
|
|
KMSAN: uninit-value in __mpol_equal (3)
mm
|
7 |
|
|
|
13 |
1607d |
1630d
|
20/29 |
1468d |
6d2aec9e123b
mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()
|
|
KMSAN: uninit-value in ppp_send_frame
ppp
|
7 |
C |
|
|
5 |
1512d |
1532d
|
20/29 |
1468d |
44073187990d
ppp: ensure minimum packet size in ppp_write()
|
|
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3)
usb
|
9 |
C |
|
|
256 |
1486d |
1530d
|
20/29 |
1468d |
d668769eb9c5
net: mcs7830: handle usb read errors properly
|
|
KMSAN: uninit-value in ppp_async_push (2)
ppp
|
7 |
C |
|
|
323 |
1488d |
1559d
|
20/29 |
1468d |
44073187990d
ppp: ensure minimum packet size in ppp_write()
|
|
KMSAN: uninit-value in ieee80211_sta_tx_notify (2)
wireless
|
7 |
|
|
|
283 |
1486d |
1576d
|
20/29 |
1468d |
d5e568c3a4ec
mac80211: track only QoS data frames for admission control
|
|
KMSAN: uninit-value in ax88772a_hw_reset
usb
|
7 |
C |
|
|
94 |
1486d |
1574d
|
20/29 |
1468d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
KMSAN: uninit-value in asix_mdio_read (2)
usb
|
7 |
C |
|
|
1075 |
1468d |
1548d
|
20/29 |
1468d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
KMSAN: uninit-value in kvm_cpuid
kvm-x86
|
7 |
C |
|
|
22 |
1602d |
1627d
|
20/29 |
1468d |
e8a747d0884e
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
|
|
KMSAN: uninit-value in pneigh_fill_info
net
|
7 |
C |
|
|
14 |
1556d |
1560d
|
20/29 |
1468d |
e195e9b5dee6
net, neigh: clear whole pneigh_entry at alloc time
|
|
KMSAN: uninit-value in snd_rawmidi_ioctl
sound
|
7 |
C |
|
|
1506 |
1486d |
1548d
|
20/29 |
1468d |
39a8fc4971a0
ALSA: rawmidi - fix the uninitalized user_pversion
|
|
KMSAN: uninit-value in fib_get_nhs
net
|
7 |
C |
|
|
14 |
1486d |
1557d
|
20/29 |
1468d |
7a3429bace0e
ipv4: Check attribute length for RTA_GATEWAY in multipath route
|
|
KMSAN: uninit-value in _ieee802_11_parse_elems_crc
wireless
|
7 |
|
|
|
1 |
1563d |
1556d
|
20/29 |
1468d |
768c0b19b506
mac80211: validate extended element ID is present
|
|
KMSAN: uninit-value in number (3)
media
|
7 |
C |
|
|
8575 |
1587d |
1830d
|
20/29 |
1587d |
eaaea4681984
media: gspca/sq905.c: fix uninitialized variable
|
|
KMSAN: uninit-value in hsr_fill_frame_info
net
|
7 |
C |
|
|
249 |
1704d |
2002d
|
20/29 |
1587d |
2e9f60932a2c
net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
|
|
KMSAN: uninit-value in virtio_net_hdr_to_skb
net
|
7 |
C |
|
|
325 |
1704d |
1763d
|
20/29 |
1587d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
KMSAN: kernel-infoleak in i2cdev_read
i2c
|
9 |
C |
|
|
592 |
1704d |
1829d
|
20/29 |
1587d |
86ff25ed6cd8
i2c: dev: zero out array used for i2c reads from userspace
|
|
KMSAN: uninit-value in ip_rcv_core
net
|
7 |
C |
|
|
141 |
1703d |
2737d
|
20/29 |
1587d |
6628ddfec758
net: geneve: check skb is large enough for IPv4/IPv6 header
|
|
KMSAN: uninit-value in pegasus_probe
usb
|
7 |
C |
|
|
258 |
1685d |
2355d
|
20/29 |
1587d |
af35fc37354c
net: pegasus: fix uninit-value in get_interrupt_interval
|
|
KMSAN: kernel-infoleak in move_addr_to_user (5)
tipc
|
9 |
|
|
|
3 |
1688d |
1829d
|
20/29 |
1587d |
50535249f624
net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
|
|
general protection fault in try_grab_compound_head
io-uring
mm
|
7 |
C |
done |
|
5 |
1688d |
1716d
|
20/29 |
1587d |
d08af0a59684
mm/hugetlb: fix refs calculation from unaligned @vaddr
|
|
BUG: unable to handle kernel paging request in corrupted (3)
|
8 |
C |
done |
|
45 |
1595d |
1763d
|
20/29 |
1587d |
7a274727702c
io_uring: don't modify req->poll for rw
|
|
KMSAN: kernel-infoleak in copy_page_to_iter (2)
fs
mm
|
9 |
C |
|
|
2099 |
1682d |
2740d
|
20/29 |
1587d |
ce3aba43599f
ext4: fix kernel infoleak via ext4_extent_header
|
|
KMSAN: kernel-infoleak in fb_cmap_to_user
fbdev
|
9 |
C |
|
|
439 |
1704d |
1854d
|
20/29 |
1587d |
19ab233989d0
fbdev: zero-fill colormap in fbcmap.c
|
|
KMSAN: kernel-usb-infoleak in hid_submit_ctrl
input
usb
|
9 |
C |
|
|
839 |
1761d |
2369d
|
20/29 |
1587d |
6be388f4a35d
HID: usbhid: fix info leak in hid_submit_ctrl
|
|
KMSAN: uninit-value in asix_mdio_read
usb
|
7 |
C |
|
|
915 |
1688d |
2351d
|
20/29 |
1587d |
a786e3195d6a
net: asix: fix uninit value bugs
|
|
KMSAN: uninit-value in validate_beacon_head
wireless
|
7 |
C |
|
|
284 |
1706d |
1933d
|
20/29 |
1587d |
9a6847ba1747
nl80211: fix beacon head validation
|
|
KASAN: use-after-free Read in firmware_fallback_sysfs
kernel
|
19 |
C |
error |
|
16514 |
1669d |
1869d
|
20/29 |
1587d |
75d95e2e39b2
firmware_loader: fix use-after-free in firmware_fallback_sysfs
|
|
KMSAN: kernel-infoleak in _copy_to_iter (5)
net
|
9 |
C |
|
|
23883 |
1696d |
2132d
|
20/29 |
1587d |
08c27f3322fe
batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
|
|
KMSAN: uninit-value in __dev_mc_add
net
|
7 |
C |
|
|
213 |
2531d |
2727d
|
20/29 |
1587d |
cca8ea3b05c9
net: tun: set tun->dev->addr_len during TUNSETLINK processing
|
|
KMSAN: uninit-value in ax88179_get_mac_addr
usb
|
7 |
C |
|
|
149 |
1705d |
1970d
|
20/29 |
1587d |
bd78980be1a6
net: usb: ax88179_178a: initialize local variables before use
|
|
unexpected kernel reboot (3)
input
usb
|
-1 |
C |
error |
error |
21132 |
1801d |
2802d
|
20/29 |
1801d |
c8e2fe13d1d1
x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
|
|
KMSAN: uninit-value in INET_ECN_decapsulate
net
|
7 |
|
|
|
3 |
1899d |
1931d
|
19/29 |
1832d |
4179b00c04d1
geneve: pull IP header before ECN decapsulation
|
|
KMSAN: uninit-value in __nla_validate_parse (2)
net
|
7 |
C |
|
|
2 |
1893d |
1889d
|
19/29 |
1832d |
c96adff95619
cls_flower: call nla_ok() before nla_next()
|
|
KMSAN: uninit-value in gre_parse_header
net
|
7 |
C |
|
|
9283 |
1860d |
2457d
|
19/29 |
1832d |
085c7c4e1c0e
erspan: fix version 1 check in gre_parse_header()
|
|
kernel BUG at net/core/skbuff.c:LINE! (3)
|
-1 |
C |
done |
|
4399 |
1847d |
2964d
|
19/29 |
1832d |
afbc293add64
af_key: relax availability checks for skb size calculation
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl
kernel
|
9 |
C |
|
|
22 |
1860d |
1944d
|
19/29 |
1832d |
31dcb6c30a26
misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
|
|
KMSAN: uninit-value in number (2)
can
|
7 |
C |
|
|
168 |
1832d |
2211d
|
19/29 |
1832d |
c8c958a58fc6
can: af_can: prevent potential access of uninitialized member in can_rcv()
9aa9379d8f86
can: af_can: prevent potential access of uninitialized member in canfd_rcv()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (4)
net
|
9 |
C |
|
|
59 |
1838d |
1890d
|
19/29 |
1832d |
b42b3a2744b3
can: isotp: isotp_getname(): fix kernel information leak
|
|
KMSAN: uninit-value in ieee80211_skb_resize
wireless
|
7 |
C |
|
|
5 |
1974d |
1998d
|
15/29 |
1945d |
14f46c1e5108
mac80211: fix use of skb payload instead of header
|
|
KMSAN: uninit-value in ip_tunnel_xmit (2)
net
|
7 |
C |
|
|
11778 |
1949d |
2774d
|
15/29 |
1945d |
fdafed459998
ip_gre: set dev->hard_header_len and dev->needed_headroom properly
|
|
KMSAN: uninit-value in can_receive (2)
can
|
7 |
C |
|
|
2060 |
1950d |
2044d
|
15/29 |
1945d |
e009f95b1543
can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
|
|
KMSAN: uninit-value in unix_find_other
net
|
7 |
C |
|
|
57 |
1990d |
2807d
|
15/29 |
1945d |
7ca1db21ef8e
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
|
|
KMSAN: uninit-value in batadv_hard_if_event (2)
batman
usb
|
7 |
C |
|
|
162 |
1961d |
2044d
|
15/29 |
1945d |
f45a4248ea4c
net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
|
|
KMSAN: uninit-value in do_ip_vs_set_ctl
lvs
|
7 |
C |
|
|
365 |
1950d |
2739d
|
15/29 |
1945d |
c5a8a8498eed
ipvs: Fix uninit-value in do_ip_vs_set_ctl()
|
|
KMSAN: uninit-value in __inet_diag_dump
net
|
7 |
C |
|
|
37 |
1984d |
2002d
|
15/29 |
1983d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
KMSAN: uninit-value in inet_diag_cmd_exact
net
|
7 |
C |
|
|
31 |
1984d |
1996d
|
15/29 |
1983d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
KMSAN: kernel-infoleak in move_addr_to_user (3)
net
|
9 |
C |
|
|
79 |
2006d |
2040d
|
15/29 |
1994d |
38ba8b9241f5
can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
|
|
KMSAN: uninit-value in video_usercopy
media
|
7 |
C |
|
|
28 |
2063d |
2063d
|
15/29 |
1998d |
4ffb879ea648
media: media/v4l2-core: Fix kernel-infoleak in video_put_user()
|
|
KMSAN: kernel-infoleak in raw_ioctl
usb
|
9 |
C |
|
|
22 |
2020d |
2044d
|
15/29 |
1998d |
a092b7233f0e
net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
|
|
KMSAN: uninit-value in netlink_policy_dump_start
net
|
7 |
C |
|
|
31 |
2011d |
2015d
|
15/29 |
2006d |
d1fb55592909
netlink: fix state reallocation in policy export
|
|
KMSAN: uninit-value in geneve_xmit
net
|
7 |
C |
|
|
163 |
2010d |
2063d
|
15/29 |
2006d |
32818c075c54
geneve: fix an uninitialized value in geneve_changelink()
|
|
KMSAN: uninit-value in ucma_connect
rdma
|
7 |
C |
|
|
138 |
2011d |
2063d
|
15/29 |
2006d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
|
KMSAN: uninit-value in __tipc_nl_compat_dumpit (3)
tipc
|
7 |
C |
|
|
6181 |
2007d |
2071d
|
15/29 |
2006d |
47733f9daf4f
tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
|
|
KMSAN: uninit-value in xa_load
rdma
|
7 |
C |
|
|
208 |
2007d |
2063d
|
15/29 |
2006d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
|
KMSAN: uninit-value in tbf_enqueue
net
|
7 |
|
|
|
21 |
2067d |
2154d
|
15/29 |
2067d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
KMSAN: uninit-value in do_tcp_getsockopt
net
|
7 |
|
|
|
5 |
2080d |
2132d
|
15/29 |
2067d |
e776af608f69
net-backports: tcp: fix error recovery in tcp_zerocopy_receive()
|
|
KMSAN: uninit-value in skbprio_enqueue
net
|
7 |
syz |
|
|
11 |
2082d |
2145d
|
15/29 |
2067d |
2761121af87d
net_sched: sch_skbprio: add message validation to skbprio_change()
|
|
KMSAN: uninit-value in etf_enqueue_timesortedlist
net
|
7 |
|
|
|
3 |
2137d |
2145d
|
15/29 |
2096d |
a1211bf9a777
sched: etf: do not assume all sockets are full blown
|
|
KMSAN: uninit-value in simple_attr_read
fs
|
7 |
C |
|
|
6 |
2138d |
2208d
|
15/29 |
2135d |
a65cab7d7f05
libfs: fix infoleak in simple_attr_read()
|
|
BUG: corrupted list in rdma_listen
rdma
|
8 |
C |
|
|
202 |
2308d |
2887d
|
15/29 |
2135d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
KMSAN: uninit-value in tcf_exts_change
net
|
7 |
C |
|
|
5 |
2187d |
2196d
|
15/29 |
2135d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KMSAN: uninit-value in __iptunnel_pull_header
net
|
7 |
C |
|
|
12 |
2191d |
2200d
|
15/29 |
2160d |
17c25cafd4d3
gre: fix uninit-value in __iptunnel_pull_header
|
|
KMSAN: use-after-free in netdev_state_change
net
|
18 |
|
|
|
2 |
2204d |
2204d
|
15/29 |
2160d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: uninit-value in slhc_compress
net
|
7 |
C |
|
|
3 |
2203d |
2203d
|
15/29 |
2160d |
110a40dfb708
slip: make slhc_compress() more robust against malicious packets
|
|
KMSAN: use-after-free in find_match
net
|
18 |
C |
|
|
52 |
2190d |
2220d
|
15/29 |
2160d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in bpf_skb_load_helper_32_no_cache
bpf
net
|
7 |
|
|
|
2 |
2230d |
2228d
|
15/29 |
2160d |
457fed775c97
net/smc: fix leak of kernel memory to user space
|
|
KMSAN: uninit-value in bond_alb_xmit
net
|
7 |
syz |
|
|
3 |
2201d |
2203d
|
15/29 |
2160d |
b7469e83d2ad
bonding/alb: make sure arp header is pulled before accessing it
|
|
KMSAN: use-after-free in inet_gifconf
net
|
18 |
|
|
|
10 |
2191d |
2214d
|
15/29 |
2160d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in ip6_dst_destroy
net
|
18 |
C |
|
|
2 |
2193d |
2205d
|
15/29 |
2160d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: use-after-free in veth_xmit
net
|
18 |
|
|
|
8 |
2191d |
2206d
|
15/29 |
2160d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in kstrdup
net
|
7 |
C |
|
|
8 |
2196d |
2223d
|
15/29 |
2160d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: use-after-free in l3mdev_master_ifindex_rcu
net
|
18 |
C |
|
|
5 |
2190d |
2214d
|
15/29 |
2160d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in dev_alloc_name_ns
net
|
18 |
|
|
|
3 |
2191d |
2204d
|
15/29 |
2160d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in rdma_listen
rdma
|
18 |
C |
|
|
26 |
2201d |
2347d
|
15/29 |
2181d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
|
KMSAN: uninit-value in rdma_listen
rdma
|
7 |
C |
|
|
28 |
2358d |
2723d
|
15/29 |
2181d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
|
KMSAN: uninit-value in setup_udp_tunnel_sock
net
|
7 |
C |
|
|
1 |
2245d |
2245d
|
15/29 |
2217d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
KMSAN: uninit-value in can_receive
can
|
7 |
C |
|
|
14 |
2220d |
2309d
|
15/29 |
2217d |
e7153bf70c34
can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs
|
|
KMSAN: uninit-value in sd_init (2)
media
usb
|
7 |
C |
|
|
94 |
2323d |
2319d
|
15/29 |
2217d |
de89d0864f66
media: gspca: zero usb_buf
|
|
KMSAN: uninit-value in __request_module (3)
kernel
|
7 |
C |
|
|
58 |
2218d |
2246d
|
15/29 |
2217d |
36d79af7fb59
net-backports: net_sched: use validated TCA_KIND attribute in tc_new_tfilter()
|
|
KMSAN: uninit-value in rsvp_change
net
|
7 |
C |
|
|
4 |
2238d |
2238d
|
15/29 |
2217d |
cb3c0e6bdf64
cls_rsvp: fix rsvp_policy
|
|
KMSAN: uninit-value in macvlan_broadcast
net
|
7 |
C |
|
|
2 |
2260d |
2260d
|
15/29 |
2217d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
KMSAN: uninit-value in digitv_rc_query
media
usb
|
7 |
C |
|
|
4 |
2336d |
2319d
|
15/29 |
2217d |
eecc70d22ae5
media: digitv: don't continue if remote control state can't be read
569bc8d6a6a5
media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
|
|
KMSAN: uninit-value in number
media
usb
|
7 |
C |
|
|
190 |
2222d |
2319d
|
15/29 |
2217d |
51d0c99b391f
media: af9005: uninitialized variable printked
|
|
KMSAN: uninit-value in __tipc_nl_compat_dumpit
tipc
|
7 |
C |
|
|
4428 |
2217d |
2286d
|
15/29 |
2217d |
a7869e5f9174
tipc: eliminate KMSAN: uninit-value in __tipc_nl_compat_dumpit error
|
|
KMSAN: uninit-value in i2c_w (2)
media
usb
|
7 |
C |
|
|
3 |
2331d |
2319d
|
15/29 |
2217d |
de89d0864f66
media: gspca: zero usb_buf
|
|
WARNING in tracepoint_probe_register_prio (3)
trace
|
-1 |
syz |
done |
|
979 |
2221d |
2858d
|
15/29 |
2217d |
64ae572bc7d0
tracing: Fix sched switch start/stop refcount racy updates
|
|
KMSAN: uninit-value in read_sensor_register (2)
media
usb
|
7 |
C |
|
|
44 |
2325d |
2342d
|
15/29 |
2217d |
de89d0864f66
media: gspca: zero usb_buf
|
|
KMSAN: uninit-value in dvb_usb_adapter_dvb_init
media
|
7 |
|
|
|
1 |
2327d |
2319d
|
15/29 |
2217d |
26cff637121d
media: vp7045: do not read uninitialized values if usb transfer fails
|
|
WARNING in tcp_enter_loss (2)
net
|
-1 |
C |
done |
unreliable |
4 |
2875d |
2925d
|
15/29 |
2217d |
16ae6aa17052
tcp: ignore Fast Open on repair mode
|
|
KMSAN: uninit-value in __crc32c_le_base
crypto
|
7 |
syz |
|
|
567 |
2258d |
2304d
|
15/29 |
2222d |
b6f3320b1d52
sctp: fully initialize v4 addr in some functions
|
|
unregister_netdevice: waiting for DEV to become free (2)
|
2 |
C |
done |
|
385621 |
2222d |
2769d
|
15/29 |
2222d |
ddd9b5e3e765
net-sysfs: Call dev_hold always in rx_queue_add_kobject
|
|
KMSAN: uninit-value in br_nf_forward_arp (3)
bridge
netfilter
|
7 |
|
|
|
2 |
2298d |
2290d
|
15/29 |
2222d |
5604285839aa
net-backports: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
|
|
KMSAN: uninit-value in bond_neigh_setup
net
|
7 |
|
|
|
64 |
2266d |
2290d
|
15/29 |
2222d |
f394722fb0d0
net-backports: neighbour: remove neigh_cleanup() method
|
|
BUG: Bad rss-counter state (3)
|
-1 |
C |
unreliable |
done |
438 |
2421d |
2888d
|
15/29 |
2235d |
173d9d9fd3dd
mm/huge_memory: splitting set mapping+index before unfreeze
|
|
KMSAN: uninit-value in __request_module (2)
kernel
|
7 |
|
|
|
3 |
2278d |
2290d
|
15/29 |
2259d |
2dd5616ecdce
net-backports: net_sched: validate TCA_KIND attribute in tc_chain_tmplt_add()
|
|
KMSAN: uninit-value in usbnet_probe
usb
|
7 |
C |
|
|
1 |
2475d |
2475d
|
15/29 |
2259d |
78226f6eaac8
net: usb: asix: init MAC address buffers
|
|
KMSAN: uninit-value in nf_conntrack_tcp_packet
netfilter
|
7 |
syz |
|
|
3 |
2293d |
2295d
|
15/29 |
2259d |
9424e2e7ad93
net-backports: tcp: md5: fix potential overestimation of TCP option space
|
|
KMSAN: use-after-free in netlink_recvmsg
net
|
18 |
C |
|
|
1 |
2315d |
2315d
|
15/29 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in kfree_skb
bluetooth
|
18 |
syz |
|
|
34 |
2302d |
2350d
|
15/29 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in __skb_try_recv_from_queue
net
|
18 |
C |
|
|
4 |
2314d |
2337d
|
15/29 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in sk_forced_mem_schedule
net
|
18 |
|
|
|
2 |
2308d |
2316d
|
15/29 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in __netif_receive_skb_core
kernel
|
18 |
|
|
|
1 |
2315d |
2315d
|
15/29 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in skb_dequeue
bluetooth
|
18 |
C |
|
|
1 |
2345d |
2345d
|
15/29 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in copyout
net
|
18 |
C |
|
|
1 |
2350d |
2350d
|
15/29 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: uninit-value in ax88172a_bind
usb
|
7 |
C |
|
|
5 |
2330d |
2344d
|
14/29 |
2298d |
a9a51bd727d1
ax88172a: fix information leak on short answers
|
|
KMSAN: uninit-value in gf128mul_4k_lle (3)
crypto
|
7 |
C |
|
|
2958 |
2304d |
2669d
|
14/29 |
2298d |
683916f6a840
net/tls: fix sk_msg trim on fallback to copy mode
|
|
KMSAN: uninit-value in aesti_encrypt
crypto
|
7 |
C |
|
|
54 |
2352d |
2453d
|
14/29 |
2298d |
683916f6a840
net/tls: fix sk_msg trim on fallback to copy mode
|
|
KMSAN: use-after-free in build_audio_procunit
sound
usb
|
18 |
C |
|
|
2 |
2336d |
2336d
|
14/29 |
2298d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
KMSAN: uninit-value in get_min_max_with_quirks
sound
usb
|
7 |
C |
|
|
11 |
2331d |
2319d
|
14/29 |
2298d |
167beb175679
ALSA: usb-audio: Fix missing error check at mixer resolution test
|
|
KMSAN: uninit-value in cdc_ncm_set_dgram_size
usb
|
7 |
C |
|
|
4 |
2329d |
2328d
|
14/29 |
2298d |
332f989a3b00
CDC-NCM: handle incomplete transfer of MTU
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_wait_rsp
usb
|
9 |
C |
|
|
2 |
2342d |
2342d
|
14/29 |
2298d |
f7a1337f0d29
can: peak_usb: fix slab info leak
|
|
WARNING in generic_make_request_checks
|
-1 |
C |
done |
|
7760 |
2299d |
2776d
|
13/29 |
2299d |
8b2ded1c94c0
block: don't warn when doing fsync on read-only devices
|
|
KMSAN: use-after-free in adu_disconnect
usb
|
18 |
C |
|
|
16 |
2344d |
2350d
|
13/29 |
2301d |
44efc269db79
USB: adutux: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in mutex_spin_on_owner
usb
|
18 |
C |
|
|
1 |
2350d |
2349d
|
13/29 |
2301d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in iowarrior_disconnect
usb
|
18 |
C |
|
|
21 |
2344d |
2350d
|
13/29 |
2301d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in usb_autopm_put_interface
usb
|
18 |
C |
|
|
63 |
2330d |
2344d
|
13/29 |
2301d |
7a7591979748
USB: usblp: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in __pm_runtime_resume
usb
|
18 |
|
|
|
1 |
2350d |
2350d
|
13/29 |
2301d |
5f9242775bb6
HID: logitech: Fix general protection fault caused by Logitech driver
|
|
KMSAN: use-after-free in hidraw_ioctl
fs
lsm
|
18 |
|
|
|
1 |
2350d |
2350d
|
13/29 |
2301d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
|
KMSAN: use-after-free in rxrpc_put_peer
afs
net
|
18 |
|
|
|
1 |
2341d |
2341d
|
13/29 |
2301d |
91fcfbe8852e
rxrpc: Fix call crypto state cleanup
|
|
KMSAN: uninit-value in lg4ff_set_autocenter_default
input
usb
|
7 |
C |
|
|
1 |
2331d |
2330d
|
13/29 |
2301d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
WARNING in sk_stream_kill_queues (3)
net
|
-1 |
C |
done |
|
622 |
2472d |
2831d
|
13/29 |
2301d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
INFO: task hung in fuse_reverse_inval_entry
fuse
|
1 |
C |
|
done |
23 |
2780d |
2793d
|
13/29 |
2316d |
c59fd85e4fd0
fuse: change interrupt requests allocation algorithm
|
|
KMSAN: uninit-value in sr9800_bind
usb
|
7 |
C |
|
|
27 |
2333d |
2356d
|
13/29 |
2323d |
77b6d09f4ae6
net: usb: sr9800: fix uninitialized local variable
|
|
KMSAN: uninit-value in mts_usb_probe
usb
|
7 |
C |
|
|
29 |
2350d |
2356d
|
13/29 |
2331d |
177238c3d47d
USB: microtek: fix info-leak at probe
|
|
KMSAN: uninit-value in iowarrior_disconnect
usb
|
7 |
C |
|
|
18 |
2349d |
2355d
|
13/29 |
2331d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KMSAN: uninit-value in read_sensor_register
media
usb
|
7 |
C |
|
|
25 |
2343d |
2473d
|
13/29 |
2343d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
KMSAN: kernel-usb-infoleak in ttusb_dec_send_command
usb
|
9 |
C |
|
|
2 |
2411d |
2420d
|
13/29 |
2343d |
a10feaf8c464
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
|
|
KMSAN: uninit-value in inet_ehash_insert
net
|
7 |
C |
|
|
7 |
2352d |
2358d
|
13/29 |
2343d |
6af1799aaf3f
net-backports: ipv6: drop incoming packets having a v4mapped source address
|
|
KMSAN: uninit-value in i2c_w
media
usb
|
7 |
C |
|
|
2 |
2477d |
2476d
|
13/29 |
2343d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
KMSAN: uninit-value in __request_module
kernel
|
7 |
C |
|
|
13 |
2353d |
2372d
|
13/29 |
2343d |
62794fc4fbf5
net_sched: add max len check for TCA_KIND
|
|
KMSAN: uninit-value in sd_init
media
usb
|
7 |
C |
|
|
122 |
2343d |
2476d
|
13/29 |
2343d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
KMSAN: uninit-value in capi_write
net
|
7 |
C |
|
|
445 |
2349d |
2589d
|
13/29 |
2349d |
fe163e534e5e
isdn/capi: check message length in capi_write()
|
|
KMSAN: uninit-value in batadv_iv_send_outstanding_bat_ogm_packet
batman
|
7 |
C |
|
|
9 |
2398d |
2398d
|
12/29 |
2373d |
a15d56a60760
batman-adv: Only read OGM tvlv_len after buffer len check
|
|
KMSAN: uninit-value in rtm_new_nexthop
net
|
7 |
C |
|
|
8 |
2398d |
2398d
|
12/29 |
2382d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
KMSAN: uninit-value in batadv_netlink_dump_hardif
batman
|
7 |
C |
|
|
58 |
2393d |
2428d
|
12/29 |
2382d |
3ee1bb7aae97
batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
|
|
KMSAN: uninit-value in rtm_dump_nexthop
net
|
7 |
C |
|
|
6 |
2392d |
2408d
|
12/29 |
2382d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_pro_send_req
usb
|
9 |
C |
|
|
16 |
2395d |
2420d
|
12/29 |
2392d |
30a8beeb3042
can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_pro_init
usb
|
9 |
C |
|
|
13 |
2396d |
2420d
|
12/29 |
2392d |
ead16e53c2f0
can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
|
|
KMSAN: uninit-value in read_eprom_word
usb
|
7 |
C |
|
|
31 |
2394d |
2420d
|
12/29 |
2392d |
224c04973db1
net: usb: pegasus: fix improper read if get_registers() fail
|
|
KMSAN: uninit-value in ax88772_bind
usb
|
7 |
C |
|
|
80 |
2416d |
2477d
|
12/29 |
2414d |
78226f6eaac8
net: usb: asix: init MAC address buffers
|
|
KMSAN: uninit-value in bond_start_xmit (2)
net
|
7 |
C |
|
|
2309 |
2414d |
2738d
|
12/29 |
2414d |
9d1bc24b52fb
bonding: validate ip header before check IPPROTO_IGMP
|
|
KMSAN: uninit-value in tipc_nl_compat_bearer_disable
tipc
|
7 |
C |
|
|
19 |
2448d |
2461d
|
12/29 |
2421d |
4f07b80c9733
tipc: check msg->req data len in tipc_nl_compat_bearer_disable
|
|
KMSAN: uninit-value in tcp_create_openreq_child
net
|
7 |
C |
|
|
4000 |
2441d |
2461d
|
12/29 |
2440d |
85f9aa7565bd
inet: clear num_timeout reqsk_alloc()
|
|
KMSAN: kernel-infoleak in copy_siginfo_to_user (2)
kernel
|
9 |
C |
|
|
15 |
2470d |
2499d
|
12/29 |
2440d |
f6e2aa91a46d
signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
|
|
KMSAN: uninit-value in aa_fqlookupn_profile
apparmor
|
7 |
C |
|
|
39 |
2681d |
2725d
|
12/29 |
2469d |
250f2da49cb8
apparmor: Fix uninitialized value in aa_split_fqname
|
|
KMSAN: uninit-value in br_mdb_ip_get
bridge
|
7 |
|
|
|
5 |
2544d |
2603d
|
12/29 |
2480d |
1515a63fc413
net: bridge: always clear mcast matching struct on reports and leaves
|
|
WARNING in xfrm_state_fini (2)
net
|
-1 |
C |
|
|
37510 |
2509d |
2961d
|
12/29 |
2484d |
dbb2483b2a46
xfrm: clean up xfrm protocol checks
|
|
KMSAN: uninit-value in rds_connect
rds
|
7 |
C |
|
|
952 |
2512d |
2754d
|
12/29 |
2484d |
dd3ac9a68435
net/rds: Check address length before reading address family
|
|
KMSAN: uninit-value in rtnl_stats_dump
net
|
7 |
syz |
|
|
14 |
2515d |
2529d
|
12/29 |
2484d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
KMSAN: uninit-value in tomoyo_check_inet_address
tomoyo
|
7 |
|
|
|
33 |
2495d |
2495d
|
12/29 |
2484d |
e6193f78bb68
tomoyo: Check address length before reading address family
|
|
KMSAN: uninit-value in rds_bind
rds
|
7 |
C |
|
|
6202 |
2512d |
2754d
|
12/29 |
2484d |
dd3ac9a68435
net/rds: Check address length before reading address family
|
|
KMSAN: uninit-value in rtnl_stats_get
net
|
7 |
C |
|
|
5 |
2521d |
2529d
|
12/29 |
2484d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
KMSAN: uninit-value in tomoyo_check_unix_address
tomoyo
|
7 |
|
|
|
8 |
2495d |
2495d
|
12/29 |
2484d |
e6193f78bb68
tomoyo: Check address length before reading address family
|
|
KMSAN: uninit-value in ip6_compressed_string
nfs
net
|
7 |
C |
|
|
9024 |
2512d |
2664d
|
12/29 |
2512d |
7c2bd9a39845
NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
|
|
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (2)
tipc
|
7 |
C |
|
|
6 |
2559d |
2544d
|
12/29 |
2530d |
2ac695d1d602
tipc: handle the err returned from cmd header function
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (3)
sctp
|
9 |
syz |
|
|
11 |
2532d |
2544d
|
12/29 |
2530d |
09279e615c81
sctp: initialize _pad of sockaddr_in before copying to user memory
|
|
KMSAN: uninit-value in tipc_nl_compat_link_set (3)
tipc
|
7 |
C |
|
|
15 |
2535d |
2545d
|
12/29 |
2530d |
8c63bf9ab4be
tipc: check link name with right length in tipc_nl_compat_link_set
|
|
KMSAN: uninit-value in tipc_nl_compat_bearer_enable (2)
tipc
|
7 |
C |
|
|
51 |
2532d |
2545d
|
12/29 |
2530d |
6f07e5f06c87
tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
|
|
KMSAN: uninit-value in mpol_rebind_mm
mm
|
7 |
|
|
|
6 |
2547d |
2632d
|
11/29 |
2544d |
2e25644e8da4
mm, mempolicy: fix uninit memory access
|
|
KMSAN: kernel-infoleak in video_usercopy
media
|
9 |
C |
|
|
410 |
2545d |
2644d
|
11/29 |
2544d |
f45f3f753b0a
media: v4l2-ctrls.c/uvc: zero v4l2_event
|
|
KMSAN: uninit-value in gue6_err (2)
net
|
7 |
C |
|
|
2826 |
2544d |
2566d
|
11/29 |
2544d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (2)
net
|
9 |
C |
|
|
8 |
2546d |
2560d
|
11/29 |
2544d |
163d1c3d6f17
l2tp: fix infoleak in l2tp_ip6_recvmsg()
|
|
KMSAN: uninit-value in gue_err (2)
net
|
7 |
C |
|
|
1617 |
2544d |
2566d
|
11/29 |
2544d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
KMSAN: uninit-value in batadv_interface_tx
batman
|
7 |
C |
|
|
98 |
2567d |
2589d
|
11/29 |
2567d |
4ffcbfac6064
batman-adv: fix uninit-value in batadv_interface_tx()
|
|
KMSAN: uninit-value in tipc_subscrb_rcv_cb
tipc
|
7 |
C |
|
|
13 |
2877d |
2898d
|
11/29 |
2567d |
a88289f4ddee
tipc: fix uninit-value in in tipc_conn_rcv_sub
|
|
KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page
kvm
|
9 |
C |
|
|
25 |
2658d |
2686d
|
11/29 |
2567d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
KMSAN: uninit-value in tipc_nl_compat_doit
tipc
|
7 |
C |
|
|
153 |
2582d |
2733d
|
11/29 |
2567d |
2753ca5d9009
tipc: fix uninit-value in tipc_nl_compat_doit
|
|
KMSAN: uninit-value in tipc_nl_compat_name_table_dump
tipc
|
7 |
C |
|
|
51 |
2652d |
2693d
|
11/29 |
2567d |
974cb0e3e7c9
tipc: fix uninit-value in tipc_nl_compat_name_table_dump
|
|
KMSAN: uninit-value in tipc_nl_compat_link_set (2)
tipc
|
7 |
C |
|
|
13 |
2603d |
2644d
|
11/29 |
2567d |
edf5ff04a457
tipc: fix uninit-value in tipc_nl_compat_link_set
|
|
KMSAN: uninit-value in tipc_nl_compat_bearer_enable
tipc
|
7 |
C |
|
|
144 |
2568d |
2693d
|
11/29 |
2567d |
0762216c0ad2
tipc: fix uninit-value in tipc_nl_compat_bearer_enable
|
|
KMSAN: kernel-infoleak in move_addr_to_user
net
|
9 |
|
|
|
5 |
2574d |
2624d
|
11/29 |
2567d |
7d033c9f6a7f
ipv6: fix kernel-infoleak in ipv6_local_error()
|
|
KMSAN: uninit-value in tipc_nl_compat_link_reset_stats
tipc
|
7 |
syz |
|
|
16 |
2571d |
2624d
|
11/29 |
2567d |
8b66fee7f8ee
tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
|
|
KMSAN: uninit-value in kvm_clear_dirty_log_protect
kvm
|
7 |
|
|
|
6 |
2567d |
2611d
|
11/29 |
2567d |
98938aa8edd6
KVM: validate userspace input in kvm_clear_dirty_log_protect()
|
|
KMSAN: kernel-infoleak in vmx_get_nested_state
kvm-x86
|
9 |
C |
|
|
6 |
2567d |
2678d
|
11/29 |
2567d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
KMSAN: uninit-value in tipc_nl_compat_dumpit
tipc
|
7 |
C |
|
|
209 |
2582d |
2732d
|
11/29 |
2567d |
2753ca5d9009
tipc: fix uninit-value in tipc_nl_compat_doit
|
|
KMSAN: uninit-value in gue_err
net
|
7 |
C |
|
|
4686 |
2567d |
2621d
|
11/29 |
2567d |
26fc181e6cac
fou, fou6: do not assume linear skbs
|
|
WARNING in xfrm6_tunnel_net_exit (2)
net
|
-1 |
C |
|
|
48816 |
2576d |
2858d
|
11/29 |
2567d |
f75a2804da39
xfrm: destroy xfrm_state synchronously on net exit path
|
|
KMSAN: uninit-value in tipc_conn_rcv_sub
tipc
|
7 |
C |
|
|
557 |
2568d |
2863d
|
11/29 |
2567d |
a88289f4ddee
tipc: fix uninit-value in in tipc_conn_rcv_sub
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (2)
sctp
|
9 |
C |
|
|
16 |
2567d |
2617d
|
11/29 |
2567d |
400b8b9a2a17
sctp: allocate sctp_sockaddr_entry with kzalloc
|
|
KMSAN: uninit-value in gue6_err
net
|
7 |
C |
|
|
8359 |
2567d |
2621d
|
11/29 |
2567d |
26fc181e6cac
fou, fou6: do not assume linear skbs
|
|
KMSAN: uninit-value in vti6_tnl_xmit
net
|
7 |
syz |
|
|
60 |
2621d |
2644d
|
11/29 |
2616d |
cb9f1b783850
ip: validate header length on virtual device xmit
|
|
KMSAN: uninit-value in check_6rd
net
|
7 |
C |
|
|
81 |
2622d |
2644d
|
11/29 |
2616d |
cb9f1b783850
ip: validate header length on virtual device xmit
|
|
KMSAN: kernel-infoleak in capi_unlocked_ioctl
net
|
9 |
C |
|
|
109 |
2621d |
2631d
|
11/29 |
2616d |
d63967e475ae
isdn: fix kernel-infoleak in capi_unlocked_ioctl
|
|
KMSAN: kernel-infoleak in sctp_getsockopt
sctp
|
9 |
syz |
|
|
147 |
2621d |
2657d
|
11/29 |
2621d |
4a2eb0c37b47
sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
|
|
KMSAN: uninit-value in __inet6_bind
net
|
7 |
C |
|
|
56 |
2622d |
2652d
|
11/29 |
2621d |
fb2427454631
ipv6: explicitly initialize udp6_addr in udp_sock_create6()
|
|
KMSAN: uninit-value in packet_sendmsg
net
|
7 |
|
|
|
5 |
2670d |
2644d
|
11/29 |
2621d |
99137b7888f4
packet: validate address length
|
|
KMSAN: kernel-infoleak in _copy_to_iter (4)
net
|
9 |
C |
|
|
56 |
2659d |
2663d
|
11/29 |
2644d |
688838934c23
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
|
|
KMSAN: uninit-value in linear_transfer (2)
sound
|
7 |
C |
|
|
7 |
2661d |
2684d
|
11/29 |
2656d |
65766ee0bf7f
ALSA: oss: Use kvzalloc() for local buffer allocations
|
|
KMSAN: kernel-infoleak in kvm_write_guest_page
kvm
|
9 |
C |
|
|
36 |
2658d |
2685d
|
11/29 |
2656d |
bcbfbd8ec210
KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
|
|
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl
kvm-x86
|
9 |
C |
|
|
31 |
2661d |
2676d
|
11/29 |
2656d |
7f9ad1dfa3c7
KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
|
|
KMSAN: uninit-value in synaptics_detect
input
|
7 |
C |
|
|
137 |
2680d |
2733d
|
11/29 |
2680d |
f39f8688888a
Input: synaptics - avoid using uninitialized variable when probing
|
|
KMSAN: uninit-value in dev_mc_add_excl
net
|
7 |
C |
|
|
13 |
2685d |
2697d
|
11/29 |
2680d |
da71577545a5
rtnetlink: Disallow FDB configuration for non-Ethernet device
|
|
KMSAN: uninit-value in dev_uc_add_excl
net
|
7 |
C |
|
|
20 |
2691d |
2733d
|
11/29 |
2680d |
da71577545a5
rtnetlink: Disallow FDB configuration for non-Ethernet device
|
|
KMSAN: uninit-value in ip_tunnel_lookup (2)
net
|
7 |
C |
|
|
2 |
2698d |
2698d
|
11/29 |
2680d |
b0350d51f001
ip_gre: fix parsing gre header in ipgre_err
|
|
KMSAN: uninit-value in vcs_read
serial
|
7 |
C |
|
|
2343 |
2837d |
2861d
|
11/29 |
2684d |
21eff69aaaa0
vt: prevent leaking uninitialized data to userspace via /dev/vcs*
|
|
KMSAN: kernel-infoleak in _copy_to_iter (3)
net
|
9 |
C |
|
|
36 |
2694d |
2705d
|
11/29 |
2694d |
b06f9d9f1a90
tipc: fix info leak from kernel tipc_event
|
|
KMSAN: uninit-value in ip6_tnl_start_xmit
net
|
7 |
C |
|
|
69 |
2726d |
2736d
|
11/29 |
2712d |
76c0ddd8c3a6
ip6_tunnel: be careful when accessing the inner header
|
|
WARNING in usb_submit_urb (2)
usb
|
-1 |
C |
|
|
259 |
2712d |
2750d
|
11/29 |
2712d |
7a68d9fb8510
USB: usbdevfs: sanitize flags more
|
|
KMSAN: uninit-value in pppoe_rcv
net
|
7 |
C |
|
|
2 |
2872d |
2741d
|
11/29 |
2712d |
8540827ebac6
pppoe: fix reception of frames with no mac header
|
|
KMSAN: kernel-infoleak in _copy_to_iter (2)
net
|
9 |
C |
|
|
7 |
2721d |
2748d
|
11/29 |
2715d |
45c180bc29ba
xfrm_user: prevent leaking 2 bytes of kernel memory
|
|
WARNING in apparmor_secid_to_secctx
apparmor
|
-1 |
C |
|
|
3344 |
2740d |
2755d
|
10/29 |
2727d |
edf4e7b7b910
apparmor: fix bad debug check in apparmor_secid_to_secctx()
|
|
KMSAN: uninit-value in snd_midi_event_encode_byte
sound
|
7 |
C |
|
|
3 |
2751d |
2751d
|
10/29 |
2727d |
5a7b44a8df82
ALSA: rawmidi: Initialize allocated buffers
|
|
BUG: unable to handle kernel paging request in kfree (2)
mm
|
8 |
C |
|
|
297 |
2755d |
2807d
|
10/29 |
2729d |
7913690dcc5e
net/9p/client.c: version pointer uninitialized
|
|
KMSAN: uninit-value in memcmp (2)
net
|
7 |
C |
|
|
131 |
2741d |
2732d
|
10/29 |
2730d |
77d36398d99f
net: fix uninit-value in __hw_addr_add_ex()
|
|
WARNING in wiphy_register (2)
wireless
|
-1 |
C |
|
|
8 |
2768d |
2769d
|
10/29 |
2743d |
484004339d45
mac80211_hwsim: require at least one channel
|
|
WARNING in input_alloc_absinfo
input
|
-1 |
C |
|
|
318 |
2759d |
2831d
|
8/29 |
2756d |
100294cee9a9
Input: do not use WARN() in input_alloc_absinfo()
|
|
KMSAN: uninit-value in do_msgrcv
kernel
|
7 |
C |
|
|
8 |
2756d |
2833d
|
8/29 |
2756d |
39cfffd774a2
ipc/util.c: use ipc_rcu_putref() for failues in ipc_addid()
615c999cd8a0
ipc: compute kern_ipc_perm.id under the ipc lock
e2652ae6bd74
ipc: reorganize initialization of kern_ipc_perm.seq
|
|
BUG: corrupted list in p9_fd_cancel
v9fs
|
8 |
C |
|
|
34 |
2792d |
2806d
|
8/29 |
2756d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
kernel BUG at net/ipv6/route.c:LINE!
net
|
-1 |
C |
|
|
197 |
2779d |
2801d
|
8/29 |
2776d |
e873e4b9cc7e
ipv6: use fib6_info_hold_safe() when necessary
|
|
KMSAN: uninit-value in __nf_conntrack_find_get
netfilter
|
7 |
C |
|
|
67 |
2792d |
2798d
|
8/29 |
2776d |
6613b6173dee
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
|
|
KMSAN: kernel-infoleak in put_cmsg
net
|
9 |
C |
|
|
3 |
2809d |
2798d
|
8/29 |
2776d |
2efd4fca703a
ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
|
|
KMSAN: uninit-value in gc_worker
netfilter
|
7 |
|
|
|
10 |
2792d |
2804d
|
8/29 |
2776d |
6613b6173dee
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
|
|
kernel BUG at fs/userfaultfd.c:LINE! (2)
fs
mm
|
-1 |
C |
|
|
8 |
2782d |
2800d
|
8/29 |
2776d |
31e810aa1033
userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
|
|
KMSAN: kernel-infoleak in _copy_to_iter
net
|
9 |
C |
|
|
285 |
2792d |
2827d
|
8/29 |
2776d |
45c180bc29ba
xfrm_user: prevent leaking 2 bytes of kernel memory
|
|
unregister_netdevice: waiting for DEV to become free
|
2 |
C |
|
|
170521 |
2776d |
2887d
|
8/29 |
2776d |
8cc88773855f
xfrm: fix missing dst_release() after policy blocking lbcast and multicast
|
|
KMSAN: uninit-value in af_alg_free_areq_sgls
crypto
|
7 |
C |
|
|
640 |
2791d |
2899d
|
8/29 |
2777d |
2546da99212f
crypto: af_alg - Initialize sg_num_bytes in error code path
|
|
WARNING in iov_iter_revert
net
|
-1 |
C |
|
|
74 |
2797d |
2863d
|
8/29 |
2777d |
32da12216e46
tls: Stricter error checking in zerocopy sendmsg path
|
|
WARNING in smc_unhash_sk
smc
|
-1 |
C |
|
|
155731 |
2780d |
2942d
|
8/29 |
2777d |
e1bbdd570474
net/smc: reduce sock_put() for fallback sockets
|
|
KMSAN: uninit-value in ip_tunnel_xmit
net
|
7 |
C |
|
|
2594 |
2798d |
2885d
|
8/29 |
2798d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
KMSAN: uninit-value in br_nf_forward_arp
netfilter
bridge
|
7 |
|
|
|
1 |
2845d |
2841d
|
8/29 |
2798d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
KMSAN: kernel-infoleak in vcs_read
serial
|
9 |
C |
|
|
531 |
2827d |
2837d
|
8/29 |
2802d |
21eff69aaaa0
vt: prevent leaking uninitialized data to userspace via /dev/vcs*
|
|
WARNING in kernfs_add_one
kernfs
|
-1 |
C |
|
|
174 |
2807d |
2871d
|
8/29 |
2806d |
84d0c27d6233
driver core: Don't ignore class_dir_create_and_add() failure.
|
|
WARNING in bpf_int_jit_compile
bpf
net
|
-1 |
syz |
|
|
11 |
2814d |
2850d
|
8/29 |
2806d |
9facc336876f
bpf: reject any prog that failed read-only lock
|
|
KMSAN: uninit-value in _copy_to_iter (2)
kvm
net
virt
|
7 |
C |
|
|
226 |
2838d |
2883d
|
8/29 |
2806d |
670ae9caaca4
vhost: fix info leak due to uninitialized memory
|
|
KMSAN: uninit-value in ip_vs_lblcr_check_expire
lvs
|
7 |
|
|
|
2050 |
2806d |
2883d
|
8/29 |
2806d |
3aa1409a7b16
ipvs: initialize tbl->entries after allocation
|
|
WARNING in bpf_prog_select_runtime
bpf
|
-1 |
syz |
|
|
45 |
2830d |
2832d
|
8/29 |
2806d |
9facc336876f
bpf: reject any prog that failed read-only lock
|
|
KMSAN: uninit-value in nfqnl_recv_config (2)
netfilter
|
7 |
C |
|
|
10 |
2819d |
2835d
|
8/29 |
2806d |
ba062ebb2cd5
netfilter: nf_queue: augment nfqa_cfg_policy
|
|
KMSAN: uninit-value in ebt_stp_mt_check (2)
bridge
netfilter
|
7 |
C |
|
|
222 |
2806d |
2838d
|
8/29 |
2806d |
c568503ef020
netfilter: x_tables: initialise match/target check parameter struct
|
|
KMSAN: uninit-value in eth_mac_addr
net
|
7 |
|
|
|
2 |
2808d |
2841d
|
8/29 |
2806d |
644c7eebbfd5
rtnetlink: validate attributes in do_setlink()
|
|
INFO: rcu detected stall in dev_queue_xmit_nit
net
|
1 |
|
|
|
1 |
2851d |
2851d
|
8/29 |
2806d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
KMSAN: uninit-value in rtnetlink_put_metrics
net
|
7 |
syz |
|
|
3 |
2840d |
2842d
|
8/29 |
2806d |
5b5e7a0de2bb
net: metrics: add proper netlink validation
|
|
unexpected kernel reboot (2)
kernel
|
-1 |
C |
|
|
2073 |
2806d |
2896d
|
8/29 |
2806d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
WARNING in ebt_do_table
bridge
netfilter
|
-1 |
C |
|
|
13 |
2815d |
2840d
|
8/29 |
2806d |
11ff7288beb2
netfilter: ebtables: reject non-bridge targets
|
|
WARNING in sysfs_remove_group
fs
|
-1 |
C |
|
|
11125 |
2808d |
3061d
|
8/29 |
2806d |
d3349b6b3c37
loop: remember whether sysfs_create_group() was done
|
|
INFO: task hung in blk_queue_enter
block
|
1 |
C |
|
|
1595 |
2806d |
2878d
|
8/29 |
2806d |
cd4a4ae4683d
block: don't use blocking queue entered for recursive bio submits
|
|
KMSAN: uninit-value in ip_vs_lblc_check_expire
lvs
|
7 |
C |
|
|
1431 |
2806d |
2883d
|
8/29 |
2806d |
8b2ebb6cf064
ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
|
|
INFO: rcu detected stall in blkdev_ioctl
block
|
1 |
C |
|
|
249 |
2837d |
3012d
|
8/29 |
2806d |
d2ac838e4cd7
loop: add recursion validation to LOOP_CHANGE_FD
|
|
INFO: task hung in blk_freeze_queue
block
|
1 |
C |
|
|
188 |
2808d |
2959d
|
8/29 |
2806d |
d2ac838e4cd7
loop: add recursion validation to LOOP_CHANGE_FD
|
|
BUG: corrupted list in tipc_nametbl_unsubscribe
tipc
|
8 |
C |
|
|
40 |
2869d |
2928d
|
5/29 |
2811d |
c3317f4db831
tipc: fix unbalanced reference counter
|
|
WARNING in kcm_exit_net (3)
net
|
-1 |
syz |
|
|
5 |
2845d |
2846d
|
5/29 |
2838d |
eb7f54b90bd8
kcm: Fix use-after-free caused by clonned sockets
|
|
KMSAN: uninit-value in ebt_stp_mt_check
netfilter
bridge
|
7 |
C |
|
|
211 |
2839d |
2884d
|
5/29 |
2838d |
a4995684a949
netfilter: bridge: stp fix reference to uninitialized data
|
|
WARNING in xfrm6_tunnel_net_exit
net
|
-1 |
syz |
|
|
14002 |
2862d |
2992d
|
5/29 |
2859d |
b48c05ab5d32
xfrm: Fix warning in xfrm6_tunnel_net_exit.
|
|
KMSAN: uninit-value in move_addr_to_user (2)
net
|
7 |
C |
|
|
44 |
2861d |
2868d
|
5/29 |
2859d |
09c8b9718a7a
tipc: fix one byte leak in tipc_sk_set_orig_addr()
|
|
KMSAN: uninit-value in strcmp
tipc
|
7 |
C |
|
|
3 |
2871d |
2873d
|
5/29 |
2859d |
94f6a80c0c11
tipc: eliminate KMSAN uninit-value in strcmp complaint
|
|
KMSAN: uninit-value in __sctp_v6_cmp_addr
sctp
|
7 |
C |
|
|
1109 |
2860d |
2861d
|
5/29 |
2860d |
d625329b06e4
sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
|
|
WARNING: kobject bug in br_add_if
bridge
|
-1 |
|
|
|
41 |
2868d |
2895d
|
5/29 |
2860d |
e8238fc2bd7b
bridge: check iface upper dev when setting master via ioctl
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
|
BUG: unable to handle kernel NULL pointer dereference in smc_getsockopt
smc
|
10 |
C |
|
|
9 |
2861d |
2866d
|
5/29 |
2860d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
WARNING in tracepoint_probe_register_prio (2)
trace
|
-1 |
C |
|
|
849 |
2861d |
2925d
|
5/29 |
2860d |
d66a270be331
tracepoint: Do not warn on ENOMEM
|
|
WARNING in tcp_mark_head_lost
net
|
-1 |
C |
|
|
18 |
2869d |
2952d
|
5/29 |
2860d |
16ae6aa17052
net-backports: tcp: ignore Fast Open on repair mode
|
|
KMSAN: uninit-value in put_cmsg
net
|
7 |
C |
|
|
2 |
2874d |
2874d
|
5/29 |
2860d |
eb80ca476ec1
rds: do not leak kernel memory to user land
|
|
KMSAN: uninit-value in rt6_multipath_hash
net
|
7 |
C |
|
|
3 |
2861d |
2878d
|
5/29 |
2860d |
cea67a2dd6b2
ipv6: fix uninit-value in ip6_multipath_l3_keys()
|
|
KMSAN: uninit-value in tipc_node_get_mtu
tipc
|
7 |
C |
|
|
139 |
2868d |
2899d
|
5/29 |
2868d |
335b929b28ae
tipc: fix missing initializer in tipc_sendmsg()
|
|
KMSAN: uninit-value in inet_getpeer
net
|
7 |
C |
|
|
54 |
2868d |
2897d
|
5/29 |
2868d |
b6a37e5e2541
inetpeer: fix uninit-value in inet_getpeer
|
|
kernel panic: n_tty: init_tty
serial
|
2 |
C |
|
|
141 |
2868d |
3052d
|
5/29 |
2868d |
903f9db10f18
tty: Don't call panic() at tty_ldisc_init()
|
|
KMSAN: uninit-value in pppol2tp_connect
net
|
7 |
C |
|
|
13 |
2868d |
2884d
|
5/29 |
2868d |
eb1c28c05894
l2tp: check sockaddr length in pppol2tp_connect()
|
|
KMSAN: uninit-value in ip6table_mangle_hook
netfilter
|
7 |
C |
|
|
601 |
2868d |
2899d
|
5/29 |
2868d |
b855ff827476
dccp: initialize ireq->ir_mark
|
|
KMSAN: uninit-value in ip_route_output_key_hash_rcu
net
|
7 |
|
|
|
179 |
2868d |
2899d
|
5/29 |
2868d |
d0ea2b125005
ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
|
|
KMSAN: uninit-value in fib6_new_table
net
|
7 |
C |
|
|
3 |
2884d |
2885d
|
5/29 |
2868d |
aa8f8778493c
ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
|
|
KMSAN: uninit-value in strlcpy
net
|
7 |
C |
|
|
2 |
2871d |
2870d
|
5/29 |
2868d |
537b361fbcbc
vti6: better validate user provided tunnel names
|
|
WARNING in tty_set_ldisc
serial
|
-1 |
syz |
|
|
177 |
2877d |
3052d
|
5/29 |
2868d |
598c2d41ff44
tty: Avoid possible error pointer dereference at tty_ldisc_restore().
|
|
KMSAN: uninit-value in fib_create_info
net
|
7 |
C |
|
|
19 |
2893d |
2899d
|
5/29 |
2868d |
b1993a2de12c
net: fix rtnh_ok()
|
|
INFO: rcu detected stall in bitmap_parselist
cgroups
|
1 |
|
|
|
8 |
2876d |
2905d
|
5/29 |
2868d |
8351760ff5b2
lib: fix stall in __bitmap_parselist()
|
|
KMSAN: uninit-value in sctp_do_bind
sctp
|
7 |
C |
|
|
31 |
2869d |
2898d
|
5/29 |
2868d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
KMSAN: uninit-value in alg_bind
crypto
|
7 |
C |
|
|
1950 |
2868d |
2899d
|
5/29 |
2868d |
a466856e0b7a
crypto: af_alg - fix possible uninit-value in alg_bind()
|
|
KMSAN: uninit-value in memcmp
net
|
7 |
C |
|
|
30 |
2870d |
2899d
|
5/29 |
2868d |
77d36398d99f
net: fix uninit-value in __hw_addr_add_ex()
|
|
KMSAN: uninit-value in tcp_parse_options
net
|
7 |
C |
|
|
38 |
2869d |
2895d
|
5/29 |
2868d |
721230326891
tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
|
|
KMSAN: uninit-value in inet_csk_bind_conflict
net
|
7 |
C |
|
|
446 |
2868d |
2899d
|
5/29 |
2868d |
3099a5291893
soreuseport: initialise timewait reuseport field
|
|
KMSAN: uninit-value in sctp_sendmsg
sctp
|
7 |
syz |
|
|
27 |
2869d |
2898d
|
5/29 |
2868d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
WARNING: kobject bug in netdev_queue_update_kobjects
net
|
-1 |
C |
|
|
27 |
2870d |
2932d
|
5/29 |
2868d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
|
KMSAN: uninit-value in neigh_dump_info
net
|
7 |
C |
|
|
6 |
2881d |
2895d
|
5/29 |
2868d |
7dd07c143a4b
net: validate attribute sizes in neigh_dump_table()
|
|
WARNING: kobject bug in device_add
kernel
|
-1 |
C |
|
|
563 |
2868d |
2908d
|
5/29 |
2868d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
|
KMSAN: uninit-value in move_addr_to_user
net
|
7 |
C |
|
|
74 |
2868d |
2899d
|
5/29 |
2868d |
6780db244d6b
sctp: do not leak kernel memory to user space
|
|
kernel BUG at drivers/vhost/vhost.c:LINE! (2)
virt
kvm
net
|
-1 |
C |
|
|
139 |
2869d |
2900d
|
5/29 |
2868d |
d14d2b78090c
vhost: fix vhost_vq_access_ok() log check
|
|
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
sound
|
8 |
syz |
|
|
11 |
2868d |
2895d
|
5/29 |
2868d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
KMSAN: uninit-value in netif_skb_features
net
|
7 |
C |
|
|
119 |
2868d |
2895d
|
5/29 |
2868d |
7ce2367254e8
vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
|
|
KMSAN: uninit-value in __skb_try_recv_from_queue
net
|
7 |
C |
|
|
108 |
2868d |
2899d
|
5/29 |
2868d |
b13dda9f9aa7
net: initialize skb->peeked when cloning
|
|
KMSAN: uninit-value in packet_set_ring
net
|
7 |
C |
|
|
6 |
2875d |
2891d
|
5/29 |
2868d |
5171b37d9596
net: af_packet: fix race in PACKET_{R|T}X_RING
|
|
KMSAN: uninit-value in inet6_rtm_delroute
net
|
7 |
C |
|
|
9 |
2888d |
2899d
|
5/29 |
2868d |
b1993a2de12c
net: fix rtnh_ok()
|
|
KMSAN: uninit-value in iptable_mangle_hook
netfilter
|
7 |
C |
|
|
1134 |
2868d |
2899d
|
5/29 |
2868d |
b855ff827476
dccp: initialize ireq->ir_mark
|
|
KMSAN: uninit-value in pppoe_connect
net
|
7 |
|
|
|
47 |
2868d |
2884d
|
5/29 |
2868d |
a49e2f5d5fb1
pppoe: check sockaddr length in pppoe_connect()
|
|
KMSAN: uninit-value in netlink_sendmsg
net
|
7 |
C |
|
|
2493 |
2868d |
2899d
|
5/29 |
2868d |
6091f09c2f79
netlink: fix uninit-value in netlink_sendmsg
|