| WARNING in em28xx_usb_disconnect |
C |
|
8 |
39d |
72d
|
4d22h |
46e4a266
media: em28xx: modules workqueue not inited for 2nd device
|
| KASAN: use-after-free Read in si470x_int_in_callback |
C |
|
25 |
14d |
103d
|
4d22h |
0d616f2a
media: radio/si470x: kill urb on error
|
| general protection fault in ath6kl_usb_alloc_urb_from_pipe |
C |
|
1160 |
31d |
191d
|
4d22h |
39d170b3
ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
|
| KASAN: use-after-free Read in atusb_disconnect |
C |
|
112 |
6d09h |
47d
|
4d22h |
7fd25e6f
ieee802154: atusb: fix use-after-free at disconnect
|
| KASAN: slab-out-of-bounds Read in hdpvr_probe |
C |
|
10 |
41d |
116d
|
4d22h |
8b8900b7
media: hdpvr: add terminating 0 at end of string
|
| KASAN: global-out-of-bounds Read in load_next_firmware_from_table |
C |
|
5 |
53d |
103d
|
4d22h |
764f3f1e
libertas: Add missing sentinel at end of if_usb.c fw_table
|
| divide error in usbnet_update_max_qlen |
C |
|
17 |
21d |
34d
|
4d22h |
280ceaed
usbnet: sanity checking of packet sizes and device mtu
|
| KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query |
C |
|
2236 |
50d |
189d
|
4d22h |
0c4df39e
media: technisat-usb2: break out of loop at end of buffer
|
| KASAN: global-out-of-bounds Read in dvb_pll_attach |
C |
|
2 |
42d |
102d
|
4d22h |
c268e7ad
media: dvb-frontends: use ida for pll number
|
| general protection fault in pk_probe |
C |
|
2 |
51d |
47d
|
4d22h |
98375b86
HID: prodikeys: Fix general protection fault during probe
|
| KASAN: global-out-of-bounds Read in hdpvr_probe |
C |
|
15 |
58d |
171d
|
4d22h |
d4a6a953
media: hdpvr: Add device num check and handling
|
| WARNING: ODEBUG bug in usbhid_disconnect (2) |
C |
|
48 |
25d |
47d
|
4d22h |
2bcdacb7
HID: sony: Fix memory corruption issue on cleanup.
|
| KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device |
syz |
|
1 |
55d |
47d
|
4d22h |
3dd550a2
USB: usbcore: Fix slab-out-of-bounds bug during device reset
|
| BUG: MAX_STACK_TRACE_ENTRIES too low! (2) |
C |
cause
|
5045 |
36d |
205d
|
4d22h |
12593b74
locking/lockdep: Reduce space occupied by stack traces
|
| possible deadlock in open_rio (3) |
C |
|
169 |
31d |
33d
|
4d22h |
9472aff1
USB: rio500: Fix lockdep violation
|
| WARNING in zd_mac_clear |
C |
|
13194 |
31d |
191d
|
4d22h |
7a2eb736
zd1211rw: remove false assertion from zd_mac_clear()
|
| WARNING in iguanair_probe/usb_submit_urb |
C |
|
3 |
35d |
86d
|
4d22h |
ab1cbdf1
media: iguanair: add sanity checks
|
| general protection fault in __pm_runtime_resume |
C |
|
197 |
25d |
88d
|
4d22h |
5f924277
HID: logitech: Fix general protection fault caused by Logitech driver
|
| divide error in cdc_ncm_update_rxtx_max |
C |
|
5 |
20d |
34d
|
4d22h |
3fe4b335
cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
|
| KASAN: slab-out-of-bounds Read in hidraw_ioctl |
C |
|
104 |
32d |
82d
|
4d22h |
416dacb8
HID: hidraw: Fix invalid read in hidraw_ioctl
|
| possible deadlock in open_rio |
|
|
1107 |
43d |
80d
|
43d |
2ca359f4
Revert "USB: rio500: simplify locking"
|
| possible deadlock in usb_deregister_dev |
C |
|
82 |
69d |
76d
|
44d |
c468a8aa
usb: iowarrior: fix deadlock on disconnect
|
| WARNING in __iforce_usb_xmit/usb_submit_urb |
C |
|
3 |
72d |
76d
|
44d |
849f5ae3
Input: iforce - add sanity checks
|
| WARNING in kbtab_open/usb_submit_urb |
C |
|
5 |
71d |
89d
|
44d |
c88090df
Input: kbtab - sanity check for endpoint type
|
| WARNING in usbtouch_open |
C |
|
768 |
69d |
83d
|
44d |
b55d996f
Input: usbtouchscreen - initialize PM mutex before using it
|
| KASAN: use-after-free Read in usb_free_coherent |
|
|
310 |
69d |
80d
|
44d |
fc05481b
usb: yurex: Fix use-after-free in yurex_delete
|
| KASAN: use-after-free Read in ld_usb_release |
C |
|
14 |
63d |
72d
|
44d |
303911cf
USB: core: Fix races in character device registration and deregistraion
|
| KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind |
C |
|
2 |
67d |
69d
|
44d |
54364278
USB: CDC: fix sanity checks in CDC union parser
|
| KASAN: use-after-free Read in device_release_driver_internal |
C |
|
5 |
65d |
89d
|
44d |
c52873e5
usb: cdc-acm: make sure a refcount is taken early enough
|
| WARNING in wdm_write/usb_submit_urb |
C |
|
15 |
47d |
62d
|
44d |
1426bd2c
USB: cdc-wdm: fix race between write and disconnect due to flag abuse
|
| WARNING in mark_lock |
syz |
cause
|
2 |
62d |
117d
|
54d |
95fa1454
bpf: sockmap/tls, close can race with map free
|
| general protection fault in holtek_kbd_input_event |
C |
|
67 |
74d |
87d
|
54d |
01ec0a5f
HID: holtek: test for sanity of intfdata
|
| KASAN: use-after-free Read in hiddev_release |
C |
|
11 |
64d |
80d
|
54d |
9c09b214
HID: hiddev: avoid opening a disconnected device
6d4472d7
HID: hiddev: do cleanup in failure of opening a device
|
| WARNING in gpio_to_desc |
C |
|
3 |
71d |
102d
|
54d |
c3953a3c
NFC: nfcmrvl: fix gpio-handling regression
|
| usb-fuzzer boot error: general protection fault in dma_direct_max_mapping_size |
|
|
21 |
85d |
89d
|
67d |
1b5d9a6e
scsi: core: fix the dma_max_mapping_size call
|
| general protection fault in snd_usb_pipe_sanity_check |
C |
|
72 |
69d |
83d
|
67d |
5d78e1c2
ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
|
| KASAN: stack-out-of-bounds Read in hfcsusb_probe |
C |
|
634 |
83d |
189d
|
67d |
f384e62a
ISDN: hfcsusb: checking idx of ep configuration
|
| kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE! |
C |
|
1 |
89d |
89d
|
67d |
f90bf1ec
usb: wusbcore: fix unbalanced get/put cluster_id
|
| WARNING: Support for this device (Terratec Grabster AV400) is experimental. |
C |
|
371 |
83d |
173d
|
76d |
1753c7c4
media: pvrusb2: use a different format for warnings
|
| KASAN: use-after-free Read in cpia2_usb_disconnect |
C |
|
3 |
103d |
187d
|
76d |
eff73de2
media: cpia2_usb: first wake up, then free in disconnect
|
| WARNING in __flush_work (3) |
C |
|
1251 |
79d |
189d
|
76d |
11a087f4
media: uvcvideo: Fix access to uninitialized fields on probe error
|
| KASAN: use-after-free Read in dvb_usb_device_exit |
C |
|
825 |
76d |
191d
|
76d |
6cf97230
media: dvb: usb: fix use after free in dvb_usb_device_exit
|
| KASAN: slab-out-of-bounds Read in au0828_rc_unregister (2) |
|
|
11 |
147d |
158d
|
76d |
6d0d1ff9
media: au0828: fix null dereference in error path
|
| INFO: trying to register non-static key in rtl_c2hcmd_launcher |
C |
|
48950 |
83d |
191d
|
76d |
6c0ed66f
rtlwifi: rtl8192cu: fix error handle when usb probe failed
|
| KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap |
C |
|
76 |
83d |
174d
|
76d |
5d2e73a5
media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
|
| WARNING: ath10k USB support is incomplete, don't expect anything to work! |
C |
|
347 |
84d |
164d
|
76d |
265df32e
ath10k: Change the warning message string
|
| KASAN: use-after-free Read in v4l2_release |
C |
|
275 |
84d |
188d
|
76d |
c666355e
media: radio-raremono: change devm_k*alloc to k*alloc
|
| WARNING: Detected a wedged cx25840 chip; the device will not work. |
C |
|
62 |
84d |
173d
|
76d |
1753c7c4
media: pvrusb2: use a different format for warnings
|
| WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb |
C |
|
3 |
93d |
131d
|
76d |
801ebf10
ALSA: usb-audio: Sanity checks for each pipe and EP types
|
| KASAN: use-after-free Read in p54u_load_firmware_cb |
syz |
|
40 |
84d |
167d
|
76d |
6e41e225
p54usb: Fix race between disconnect and firmware loading
|
| KASAN: global-out-of-bounds Read in qmi_wwan_probe |
C |
|
2 |
106d |
118d
|
83d |
904d88d7
qmi_wwan: Fix out-of-bounds read
|
| KASAN: null-ptr-deref Write in submit_audio_out_urb (2) |
C |
|
3423 |
83d |
115d
|
83d |
34501219
ALSA: line6: Fix write on zero-sized buffer
|
| WARNING: proc registration bug in snd_info_card_register |
C |
|
453 |
147d |
191d
|
117d |
0b074ab7
ALSA: line6: Assure canceling delayed work at disconnection
|
| general protection fault in sisusb_probe |
C |
|
3 |
161d |
164d
|
122d |
9a5729f6
USB: sisusbvga: fix oops in error path of sisusb_probe
|
| KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor |
syz |
|
3 |
150d |
163d
|
122d |
a03ff544
USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
|
| KASAN: invalid-free in disconnect_rio |
C |
|
180 |
146d |
191d
|
122d |
3864d339
USB: rio500: refuse more than one device at a time
|
| general protection fault in smsusb_init_device |
C |
|
23 |
146d |
185d
|
122d |
31e0456d
media: usb: siano: Fix general protection fault in smsusb
|
| KASAN: null-ptr-deref Write in submit_audio_out_urb |
C |
|
185 |
131d |
146d
|
124d |
0b074ab7
ALSA: line6: Assure canceling delayed work at disconnection
|
| INFO: task hung in usb_kill_urb |
C |
|
1515 |
186d |
191d
|
128d |
50896c41
USB: dummy-hcd: Fix failure to give back unlinked URBs
USB: dummy-hcd: Fix failure to give back unlinked URBs
|
| BUG: sleeping function called from invalid context in line6_pcm_acquire |
|
|
119 |
146d |
165d
|
128d |
7f84ff68
ALSA: line6: toneport: Fix broken usage of timer for delayed execution
|
| general protection fault in __dev_printk |
C |
|
300 |
173d |
186d
|
146d |
ef61eb43
USB: yurex: Fix protection fault after device removal
|
| INFO: trying to register non-static key in vmk80xx_detach |
C |
|
1528 |
146d |
191d
|
146d |
08b7c2f9
staging: comedi: vmk80xx: Fix use of uninitialized semaphore
|
| INFO: trying to register non-static key in ni6501_detach |
C |
|
127 |
146d |
189d
|
146d |
660cf4ce
staging: comedi: ni_usb6501: Fix use of uninitialized mutex
|
| KASAN: use-after-free Read in snd_info_free_entry |
C |
|
47 |
158d |
189d
|
146d |
2a3f7221
ALSA: core: Fix card races between register and disconnect
8c2f8708
ALSA: info: Fix racy addition/deletion of nodes
|
| KASAN: slab-out-of-bounds Read in ds_probe |
C |
|
5 |
148d |
186d
|
146d |
c114944d
USB: w1 ds2490: Fix bug caused by improper use of altsetting array
|
| KASAN: stack-out-of-bounds Read in string |
C |
|
46 |
179d |
191d
|
157d |
c01c348e
USB: core: Fix unterminated string returned by usb_string()
|
| WARNING in usb_submit_urb (4) |
syz |
cause
|
46 |
159d |
347d
|
157d |
c2b71462
USB: core: Fix bug caused by duplicate interface PM usage counter
|