|
WARNING in media_create_pad_link
usb
media
|
C |
done |
done |
103 |
3d18h |
1651d
|
20/28 |
never |
3dd075fe8ebb
media: uvcvideo: Require entities to have a non-zero unique ID
|
|
possible deadlock in chaoskey_release
usb
|
C |
|
|
90 |
38d |
43d
|
2/28 |
never |
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
possible deadlock in chaoskey_open
usb
|
C |
|
|
475 |
38d |
43d
|
2/28 |
never |
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
possible deadlock in usb_deregister_dev (3)
usb
|
C |
|
|
103 |
38d |
43d
|
2/28 |
never |
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
INFO: task hung in usb_port_suspend
usb
|
C |
|
|
12 |
31d |
41d
|
28/28 |
8d16h |
5189df7b8088
USB: gadget: dummy-hcd: Fix "task hung" problem
|
|
KASAN: use-after-free Read in rtw_load_firmware_cb
usb
wireless
|
C |
|
|
848 |
55d |
118d
|
28/28 |
30d |
0e735a4c6137
wifi: rtw88: always wait for both firmware loading attempts
|
|
INFO: rcu detected stall in do_vmi_munmap (2)
mm
|
|
|
|
40 |
77d |
94d
|
28/28 |
30d |
f806de88d8f7
maple_tree: remove rcu_read_lock() from mt_validate()
|
|
INFO: task hung in uevent_show
usb
|
C |
done |
|
9704 |
100d |
161d
|
28/28 |
30d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
INFO: rcu detected stall in neigh_timer_handler (8)
net
|
C |
done |
done |
72 |
102d |
161d
|
28/28 |
31d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
INFO: rcu detected stall in __mod_timer (5)
usb
|
C |
error |
done |
10 |
108d |
172d
|
28/28 |
31d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
possible deadlock in touch_wq_lockdep_map
usb
|
C |
|
|
1208 |
53d |
250d
|
28/28 |
49d |
ccbde4b128ef
char: xillybus: Don't destroy workqueue from work item running on it
|
|
WARNING in try_queue_bulk_in/usb_submit_urb
kernel
|
|
|
|
1 |
105d |
101d
|
28/28 |
49d |
2374bf7558de
char: xillybus: Check USB endpoints when probing device
|
|
KASAN: slab-out-of-bounds Read in cougar_report_fixup
input
usb
|
C |
|
|
31 |
80d |
113d
|
28/28 |
49d |
a6e9c391d45b
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
|
|
WARNING in implement
input
usb
|
C |
error |
done |
960 |
163d |
1892d
|
26/28 |
112d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
|
|
WARNING in kcov_remote_start (4)
usb
|
|
|
|
107983 |
134d |
165d
|
26/28 |
134d |
f85d39dd7ed8
kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
|
|
INFO: task hung in linkwatch_event (3)
net
|
|
|
|
1634 |
135d |
729d
|
26/28 |
134d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
INFO: rcu detected stall in raw_ioctl
usb
|
C |
|
|
49 |
141d |
387d
|
26/28 |
134d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
BUG: soft lockup in tcp_write_timer (4)
kasan
mm
|
|
|
|
4 |
138d |
163d
|
26/28 |
134d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
KMSAN: uninit-value in asus_report_fixup
input
usb
|
C |
done |
|
35 |
156d |
180d
|
26/28 |
134d |
89e1ee118d6f
hid: asus: asus_report_fixup: fix potential read out of bounds
|
|
INFO: task hung in rtnetlink_rcv_msg
net
|
C |
inconclusive |
inconclusive |
1970 |
135d |
2098d
|
26/28 |
134d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
INFO: task hung in addrconf_verify_work (8)
net
|
C |
error |
|
1294 |
134d |
339d
|
26/28 |
134d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
WARNING in cxacru_cm/usb_submit_urb
usb
|
C |
error |
inconclusive |
14 |
153d |
1721d
|
26/28 |
134d |
2eabb655a968
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
|
|
WARNING in kcov_remote_start (3)
usb
|
|
|
|
265513 |
169d |
238d
|
25/28 |
169d |
19e35f24750d
nfc: nci: Fix kcov check in nci_rx_work()
|
|
WARNING in ar5523_cmd/usb_submit_urb
usb
wireless
|
C |
error |
|
39 |
201d |
1758d
|
25/28 |
169d |
e120b6388d7d
wifi: ar5523: enable proper endpoint verification
|
|
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb
usb
wireless
|
C |
error |
inconclusive |
18 |
213d |
1357d
|
25/28 |
169d |
b6dd09b3dac8
wifi: carl9170: add a proper sanity check for endpoints
|
|
usb-testing boot error: WARNING: refcount bug in __reset_page_owner
mm
|
|
|
|
126 |
212d |
240d
|
25/28 |
182d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
KASAN: slab-use-after-free Read in pvr2_context_set_notify (2)
pvrusb2
|
C |
|
|
1069 |
225d |
295d
|
25/28 |
225d |
0a0b79ea55de
media: pvrusb2: fix uaf in pvr2_context_set_notify
|
|
WARNING in bcm5974_start_traffic/usb_submit_urb
input
|
C |
error |
|
41 |
244d |
1840d
|
25/28 |
239d |
2b9c3eb32a69
Input: bcm5974 - check endpoint type before starting traffic
|
|
KASAN: slab-use-after-free Read in pvr2_context_set_notify
usb
pvrusb2
|
C |
|
|
3814 |
296d |
502d
|
25/28 |
296d |
ded85b0c0edd
media: pvrusb2: fix use after free on context disconnection
|
|
WARNING in dev_watchdog (2)
net
|
C |
inconclusive |
|
6791 |
298d |
1697d
|
25/28 |
296d |
e316dd1cf135
net: don't dump stack on queue timeout
|
|
WARNING in ieee80211_rfkill_poll
wireless
|
C |
|
|
684 |
346d |
379d
|
25/28 |
305d |
8e2f6f236621
wifi: cfg80211: lock wiphy mutex for rfkill poll
|
|
KASAN: use-after-free Read in __media_entity_remove_links
usb
media
|
C |
|
|
7 |
1704d |
1802d
|
25/28 |
323d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
KASAN: use-after-free Read in powermate_config_complete (4)
input
|
syz |
done |
unreliable |
14 |
440d |
812d
|
25/28 |
336d |
5c15c60e7be6
Input: powermate - fix use-after-free in powermate_config_complete
|
|
UBSAN: shift-out-of-bounds in set_flicker
usb
media
|
syz |
|
|
5 |
381d |
461d
|
25/28 |
336d |
099be1822d1f
media: gspca: cpia1: shift-out-of-bounds in set_flicker
|
|
KASAN: slab-use-after-free Read in input_dev_uevent
input
|
C |
done |
|
7 |
446d |
457d
|
23/28 |
406d |
dd613a4e45f8
HID: uclogic: Correct devm device reference for hidinput input_dev name
|
|
WARNING in usbnet_start_xmit/usb_submit_urb
usb
|
C |
done |
|
92 |
519d |
1102d
|
23/28 |
406d |
5e1627cb43dd
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
|
INFO: trying to register non-static key in skb_queue_tail
wireless
|
C |
unreliable |
done |
171 |
510d |
1612d
|
23/28 |
419d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
WARNING in dlfb_submit_urb/usb_submit_urb (2)
fbdev
usb
|
C |
|
|
2 |
557d |
553d
|
22/28 |
508d |
ed9de4ed3987
fbdev: udlfb: Fix endpoint check
|
|
WARNING in __usbnet_read_cmd/usb_submit_urb
usb
|
C |
error |
|
5 |
654d |
685d
|
22/28 |
527d |
93fd565919cf
net: USB: Fix wrong-direction WARNING in plusb.c
net: USB: Fix wrong-direction WARNING in plusb.c
|
|
WARNING in sisusb_send_bulk_msg/usb_submit_urb
usb
|
C |
unreliable |
|
418 |
583d |
1969d
|
22/28 |
532d |
df05a9b05e46
USB: sisusbvga: Add endpoint checks
|
|
WARNING in c_start (2)
kernel
|
|
|
|
616173 |
605d |
622d
|
22/28 |
532d |
e7304080e0e5
cpumask: relax sanity checking constraints
|
|
WARNING in pegasus_open/usb_submit_urb
input
usb
|
C |
|
|
7 |
612d |
1623d
|
22/28 |
532d |
b3d80fd27a3c
Input: pegasus-notetaker - check pipe type when probing
|
|
WARNING in shark_write_reg/usb_submit_urb
usb
|
C |
error |
|
63 |
581d |
1955d
|
22/28 |
532d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
WARNING in remove_proc_entry (5)
scsi
|
C |
|
|
158 |
614d |
657d
|
22/28 |
532d |
2172e84ea00b
SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes
|
|
general protection fault in pn533_out_complete
nfc
|
C |
error |
|
15 |
662d |
677d
|
22/28 |
532d |
484b7059796e
nfc: pn533: initialize struct pn533_out_arg properly
|
|
WARNING in ath6kl_htc_pipe_rx_complete
usb
wireless
|
C |
error |
|
2008 |
571d |
1841d
|
22/28 |
532d |
75c4a8154cb6
wifi: ath6kl: reduce WARN to dev_dbg() in callback
|
|
WARNING in shark_write_val/usb_submit_urb
usb
|
C |
error |
done |
51 |
589d |
1949d
|
22/28 |
532d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
INFO: task hung in addrconf_verify_work (6)
|
C |
done |
|
86 |
639d |
876d
|
22/28 |
636d |
ff1fa2081d17
net: tun: avoid disabling NAPI twice
|
|
possible deadlock in display_open
usb
|
C |
inconclusive |
|
48888 |
904d |
1931d
|
22/28 |
636d |
db264d4c66c0
media: imon: reorganize serialization
|
|
WARNING in send_packet/usb_submit_urb
usb
|
C |
inconclusive |
|
847 |
704d |
870d
|
22/28 |
636d |
813ceef062b5
media: imon: fix a race condition in send_packet()
|
|
KASAN: slab-out-of-bounds Read in thrustmaster_probe
input
usb
|
C |
unreliable |
|
92 |
981d |
1005d
|
22/28 |
636d |
fc3ef2e3297b
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in dequeue_task_fair
acpi
|
|
|
|
1 |
815d |
815d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in dev_uevent
kernel
|
syz |
|
|
54 |
643d |
1616d
|
22/28 |
636d |
16b1941eac2b
usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in __handle_mm_fault
mm
|
|
|
|
1 |
828d |
828d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
usb-testing boot error: general protection fault in rcu_core
mm
fs
|
|
|
|
23 |
810d |
828d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
usb-testing boot error: WARNING in anon_vma_clone
mm
|
|
|
|
1 |
828d |
828d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
usb-testing boot error: INFO: task hung in add_early_randomness
crypto
|
|
|
|
7 |
891d |
898d
|
22/28 |
636d |
228432551bd8
virtio-rng: make device ready before making request
|
|
general protection fault in ath9k_hif_usb_rx_cb (2)
wireless
|
C |
error |
|
1678 |
834d |
1587d
|
22/28 |
636d |
0ac4827f78c7
ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
|
|
KASAN: use-after-free Read in usb_udc_uevent
usb
|
syz |
error |
|
30 |
846d |
1633d
|
22/28 |
636d |
2191c00855b0
USB: gadget: Fix use-after-free Read in usb_udc_uevent()
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header
fs
|
|
|
|
1 |
814d |
814d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
usb-testing boot error: general protection fault in __handle_irq_event_percpu
kernel
|
|
|
|
1 |
815d |
815d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in ar5523_cmd_tx_cb
usb
wireless
|
C |
inconclusive |
|
372 |
731d |
786d
|
22/28 |
636d |
b6702a942a06
wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
|
|
WARNING in dlfb_submit_urb/usb_submit_urb
usb
fbdev
|
C |
done |
|
481 |
708d |
1970d
|
22/28 |
636d |
aaf7dbe07385
video: fbdev: udlfb: properly check endpoint type
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in enqueue_task_fair
mm
|
|
|
|
1 |
814d |
814d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
usb-testing boot error: general protection fault in __register_sysctl_table (2)
fs
|
|
|
|
1 |
814d |
814d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in si470x_int_in_callback (2)
usb
media
|
C |
error |
|
7303 |
704d |
1861d
|
22/28 |
636d |
7d21e0b1b41b
media: si470x: Fix use-after-free in si470x_int_in_callback()
|
|
KASAN: use-after-free Read in jbd2_journal_wait_updates
ext4
|
C |
error |
|
143 |
973d |
1017d
|
22/28 |
636d |
cc16eecae687
jbd2: fix use-after-free of transaction_t race
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in follow_page_mask
mm
|
|
|
|
1 |
811d |
807d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
INFO: task hung in hci_dev_close_sync
bluetooth
|
C |
unreliable |
|
2366 |
777d |
932d
|
22/28 |
636d |
e36bea6e78ab
Bluetooth: core: Fix deadlock on hci_power_on_sync.
|
|
INFO: task hung in scsi_remove_host
scsi
usb
|
C |
done |
|
328 |
787d |
823d
|
22/28 |
636d |
2b36209ca818
scsi: core: Revert "Call blk_mq_free_tag_set() earlier"
d94b2d00f7bf
scsi: core: Revert "Make sure that hosts outlive targets"
f782201ebc2b
scsi: core: Revert "Make sure that targets outlive devices"
70e8d057bef5
scsi: core: Revert "Simplify LLD module reference counting"
|
|
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init
pvrusb2
usb
|
C |
inconclusive |
|
4 |
920d |
951d
|
22/28 |
636d |
471bec68457a
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in copy_namespaces
kernel
|
|
|
|
1 |
813d |
813d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2)
|
C |
done |
|
48810 |
832d |
1465d
|
22/28 |
636d |
0ac4827f78c7
ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
|
|
WARNING in mcba_usb_probe/usb_submit_urb
usb
can
|
C |
error |
|
537 |
966d |
1961d
|
22/28 |
636d |
136bed0bfd3b
can: mcba_usb: properly check endpoint type
|
|
KASAN: use-after-free Read in remove_wait_queue (3)
kernfs
|
C |
inconclusive |
|
123 |
675d |
1101d
|
22/28 |
636d |
a06247c6804f
psi: Fix uaf issue when psi trigger is destroyed while being polled
|
|
WARNING: locking bug in hfa384x_usbctlx_completion_task
staging
usb
|
C |
|
|
2 |
882d |
878d
|
22/28 |
636d |
ee6c6e734247
staging/wlan-ng: get the correct struct hfa384x in work callback
|
|
INFO: task hung in add_early_randomness (2)
usb
crypto
|
C |
done |
|
182 |
683d |
902d
|
22/28 |
636d |
228432551bd8
virtio-rng: make device ready before making request
|
|
usb-testing boot error: kernel BUG in putname
fs
|
|
|
|
1 |
814d |
814d
|
22/28 |
636d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING in hif_usb_send/usb_submit_urb
wireless
|
C |
unreliable |
done |
374 |
716d |
1508d
|
22/28 |
636d |
16ef02bad239
wifi: ath9k: verify the expected usb_endpoints are present
|
|
usb-testing boot error: WARNING in __netif_set_xps_queue
net
virt
|
|
|
|
57 |
754d |
766d
|
22/28 |
636d |
fc8695eb11f0
Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
|
|
KASAN: use-after-free Read in driver_register
usb
|
C |
|
|
131 |
879d |
930d
|
22/28 |
636d |
5f0b5f4d50fa
usb: gadget: fix race when gadget driver register via ioctl
|
|
WARNING in driver_unregister
input
usb
|
C |
|
|
1 |
913d |
909d
|
22/28 |
636d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
INFO: task hung in ath6kl_usb_power_off
wireless
|
|
|
|
7454 |
833d |
1599d
|
22/28 |
636d |
62ebaf2f9261
ath6kl: avoid flush_scheduled_work() usage
|
|
WARNING in aiptek_open/usb_submit_urb
usb
input
|
C |
error |
|
2380 |
972d |
1994d
|
22/28 |
636d |
5600f6986628
Input: aiptek - properly check endpoint type
|
|
INFO: task hung in __input_unregister_device (4)
usb
input
|
C |
done |
|
924 |
808d |
873d
|
22/28 |
636d |
98e01215708b
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
|
|
INFO: task hung in linkwatch_event (2)
net
|
C |
done |
done |
1033 |
941d |
1667d
|
20/28 |
923d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3)
wireless
usb
|
C |
unreliable |
done |
7 |
1012d |
1415d
|
20/28 |
980d |
6ce708f54cc8
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
|
|
KASAN: slab-out-of-bounds Write in betop_probe
input
usb
|
C |
unreliable |
|
9 |
1189d |
1745d
|
20/28 |
980d |
689e453a9b9c
HID: betop: fix slab-out-of-bounds Write in betop_probe
HID: betop: fix slab-out-of-bounds Write in betop_probe
|
|
divide error in usbnet_start_xmit
usb
|
C |
|
|
760 |
1112d |
1129d
|
20/28 |
988d |
397430b50a36
usbnet: sanity check for maxpacket
|
|
INFO: trying to register non-static key in mxl111sf_ctrl_msg
usb
media
|
C |
|
|
73 |
1944d |
2047d
|
20/28 |
988d |
44870a9e7a3c
media: mxl111sf: change mutex_init() location
|
|
WARNING in atp_close (3)
input
|
C |
|
|
125 |
1053d |
1145d
|
20/28 |
988d |
9f3ccdc3f6ef
Input: appletouch - initialize work before device registration
|
|
INFO: trying to register non-static key in ath9k_htc_rxep
wireless
|
C |
unreliable |
|
9896 |
1043d |
1616d
|
20/28 |
988d |
b0ec7e55fce6
ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
|
|
KASAN: use-after-free Read in rtl8712_dl_fw
usb
staging
|
C |
|
|
6961 |
1105d |
1129d
|
20/28 |
988d |
c052cc1a069c
staging: rtl8712: fix use-after-free in rtl8712_dl_fw
|
|
WARNING in rtl92cu_hw_init
wireless
|
|
|
|
1 |
1088d |
1084d
|
20/28 |
988d |
8b144dedb928
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
|
|
INFO: trying to register non-static key in ath9k_wmi_event_tasklet
wireless
usb
|
C |
unreliable |
|
7 |
1079d |
1256d
|
20/28 |
988d |
8b3046abc99e
ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
|
|
INFO: rcu detected stall in dummy_timer (3)
usb
|
C |
error |
|
132 |
1002d |
1590d
|
20/28 |
988d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
BUG: corrupted list in em28xx_init_extension
usb
media
|
C |
error |
|
18 |
1219d |
1764d
|
20/28 |
988d |
2c98b8a3458d
media: em28xx: add missing em28xx_close_extension
|
|
WARNING: held lock freed in spi_unregister_controller
spi
usb
|
C |
inconclusive |
|
251 |
1088d |
1129d
|
20/28 |
988d |
6c53b45c71b4
spi: fix use-after-free of the add_lock mutex
|
|
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb
usb
|
C |
|
|
50 |
1229d |
1277d
|
20/28 |
1107d |
76f22c93b209
media: rtl28xxu: fix zero-length control request
media: rtl28xxu: fix zero-length control request
|
|
WARNING in hso_free_net_device
usb
|
C |
error |
|
528 |
1225d |
1906d
|
20/28 |
1107d |
788e67f18d79
usb: hso: fix error handling code of hso_create_net_device
usb: hso: fix error handling code of hso_create_net_device
|
|
KASAN: null-ptr-deref Read in phy_disconnect
net
usb
|
C |
|
|
255 |
1174d |
1178d
|
20/28 |
1107d |
1406e8cb4b05
net: usb: asix: do not call phy_disconnect() for ax88178
|
|
WARNING in dtv5100_probe/usb_submit_urb
usb
|
C |
|
|
51 |
1229d |
1274d
|
20/28 |
1107d |
8c8b9a9be2af
media: dtv5100: fix control-request directions
|
|
WARNING in e2i_init/usb_submit_urb
usb
|
|
|
|
4 |
1248d |
1277d
|
20/28 |
1107d |
41e81022a04a
Input: usbtouchscreen - fix control-request directions
|
|
usb-testing boot error: WARNING in kvm_wait
kvm
|
|
|
|
3 |
1350d |
1353d
|
20/28 |
1107d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
WARNING in hid_submit_ctrl/usb_submit_urb
input
usb
|
C |
done |
|
38 |
1173d |
1222d
|
20/28 |
1107d |
0a824efdb724
HID: usbhid: Fix warning caused by 0-length input reports
|
|
WARNING in kvm_wait
kvm
|
C |
error |
|
119882 |
1336d |
1353d
|
20/28 |
1107d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0)
kernel
|
|
|
|
27 |
1228d |
1233d
|
20/28 |
1107d |
c43ddbf97f46
scsi: virtio_scsi: Do not overwrite SCSI status
|
|
general protection fault in magicmouse_remove
usb
input
|
C |
|
|
47 |
1257d |
1284d
|
20/28 |
1107d |
4b4f6cecca44
HID: magicmouse: fix NULL-deref on disconnect
|
|
WARNING in osif_probe/usb_submit_urb
usb
|
C |
|
|
45 |
1232d |
1277d
|
20/28 |
1107d |
4ca070ef0dd8
i2c: robotfuzz-osif: fix control-request directions
|
|
general protection fault in cdev_del (2)
fs
|
C |
error |
|
45 |
1241d |
1519d
|
20/28 |
1107d |
8a12f8836145
net: hso: fix null-ptr-deref during tty device unregistration
0a360e8b65d6
tty: n_gsm: check error while registering tty devices
|
|
WARNING in qt2_attach/usb_submit_urb
usb
|
C |
|
|
171 |
1256d |
1277d
|
20/28 |
1107d |
eb8dbe80326c
USB: serial: quatech2: fix control-request directions
|
|
BUG: sleeping function called from invalid context in stack_depot_save
mm
|
C |
unreliable |
|
8490 |
1206d |
1236d
|
20/28 |
1107d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
WARNING in usb_new_device/usb_submit_urb
usb
|
C |
|
|
2 |
1271d |
1267d
|
20/28 |
1107d |
60dfe484cef4
USB: core: Avoid WARNings for 0-length descriptor requests
|
|
WARNING in rtl8152_probe
usb
|
C |
|
|
23 |
1265d |
1289d
|
20/28 |
1107d |
1a44fb38cc65
r8152: check the informaton of the device
|
|
KASAN: use-after-free Read in r871xu_dev_remove
usb
staging
|
C |
unreliable |
|
152 |
1201d |
1227d
|
20/28 |
1107d |
e9e6aa51b273
staging: rtl8712: error handling refactoring
|
|
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info
alsa
usb
|
C |
|
|
10 |
1286d |
1291d
|
20/28 |
1107d |
e84749a78dc8
ALSA: usb-audio: Validate MS endpoint descriptors
|
|
WARNING in input_register_device
input
usb
|
C |
error |
done |
11 |
1324d |
1476d
|
20/28 |
1107d |
b4104180a2ef
kobject_uevent: remove warning in init_uevent_argv()
|
|
INFO: task hung in usb_remote_wakeup (2)
usb
|
syz |
inconclusive |
done |
9 |
1189d |
1387d
|
20/28 |
1107d |
363eaa3a450a
usbip: synchronize event handler with sysfs code paths
|
|
WARNING in pvr2_i2c_core_done
usb
fs
|
C |
error |
|
5780 |
1228d |
1884d
|
20/28 |
1107d |
f8194e5e63fd
media: pvrusb2: fix warning in pvr2_i2c_core_done
|
|
WARNING: zero-size vmalloc in dvb_dmx_init
usb
media
|
C |
|
|
62 |
1229d |
1293d
|
20/28 |
1107d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
WARNING in __vmalloc_node_range
media
usb
|
C |
|
|
7 |
1293d |
1295d
|
20/28 |
1107d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
general protection fault in drm_client_buffer_vunmap
usb
dri
|
C |
unreliable |
done |
247 |
1350d |
1451d
|
20/28 |
1317d |
874a52f9b693
drm/fb-helper: only unmap if buffer not null
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_printdata
media
usb
|
C |
error |
|
331 |
1368d |
1435d
|
20/28 |
1321d |
9dec0f48a75e
media: mceusb: sanity check for prescaler value
|
|
UBSAN: shift-out-of-bounds in snto32
input
usb
|
C |
error |
|
58 |
1366d |
1438d
|
20/28 |
1321d |
a0312af1f94d
HID: core: detect and skip invalid inputs to snto32()
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_recv
media
usb
|
C |
|
|
13 |
1368d |
1432d
|
20/28 |
1321d |
1b43bad31fb0
media: mceusb: Fix potential out-of-bounds shift
|
|
unexpected kernel reboot (3)
input
usb
|
C |
error |
error |
21132 |
1321d |
2322d
|
20/28 |
1321d |
c8e2fe13d1d1
x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
|
|
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2)
|
C |
done |
|
640 |
1416d |
1534d
|
19/28 |
1352d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
WARNING: suspicious RCU usage in get_wiphy_regdom
wireless
|
C |
done |
|
5031 |
1403d |
1435d
|
19/28 |
1352d |
51d62f2f2c50
cfg80211: Save the regulatory domain with a lock
|
|
WARNING in spi_register_controller
usb
spi
|
C |
|
|
1848 |
1436d |
2050d
|
19/28 |
1352d |
9c60cc797cf7
media: msi2500: assign SPI bus number dynamically
|
|
KASAN: use-after-free Write in rtl_fw_do_work (2)
wireless
|
|
|
|
4 |
1437d |
1443d
|
19/28 |
1352d |
4dfde294b979
rtlwifi: rise completion at the last step of firmware callback
|
|
kernel BUG at net/core/skbuff.c:LINE! (3)
|
C |
done |
|
4399 |
1368d |
2484d
|
19/28 |
1352d |
afbc293add64
af_key: relax availability checks for skb size calculation
|
|
WARNING in yurex_write/usb_submit_urb
usb
|
C |
error |
|
78 |
1411d |
1439d
|
19/28 |
1352d |
372c93131998
USB: yurex: fix control-URB timeout handling
|
|
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info
alsa
usb
|
C |
error |
|
9 |
1410d |
1429d
|
19/28 |
1352d |
c06ccf3ebb75
ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
|
|
general protection fault in tower_disconnect
usb
|
C |
|
|
53 |
1436d |
1444d
|
19/28 |
1352d |
b175d273d4e4
USB: legotower: fix logical error in recent commit
|
|
KASAN: use-after-free Read in service_outstanding_interrupt
usb
|
C |
|
|
28 |
1411d |
1567d
|
19/28 |
1352d |
5e5ff0b4b6bc
USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
|
|
INFO: task hung in wdm_flush
usb
|
C |
|
|
38294 |
1543d |
1928d
|
15/28 |
1466d |
37d2a36394d9
USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
|
|
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
wireless
|
C |
|
|
2849 |
1466d |
1701d
|
15/28 |
1466d |
03fb92a432ea
ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
|
|
WARNING in ati_remote_sendpacket/usb_submit_urb
usb
media
|
C |
|
|
22 |
1637d |
1948d
|
15/28 |
1466d |
a8be80053ea7
media: ati_remote: sanity check for both endpoints
|
|
general protection fault in vmk80xx_write_packet
usb
staging
|
C |
|
|
82 |
1506d |
1962d
|
15/28 |
1466d |
e1f13c879a7c
staging: comedi: check validity of wMaxPacketSize of usb endpoints found
|
|
INFO: trying to register non-static key in del_timer_sync (2)
wireless
usb
|
C |
|
|
1206 |
1998d |
2050d
|
15/28 |
1466d |
621a3a8b1c0e
mwifiex: don't call del_timer_sync() on uninitialized timer
|
|
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb
staging
usb
|
C |
|
|
8 |
1544d |
1575d
|
15/28 |
1503d |
fea22e159d51
staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
|
|
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage
input
usb
|
C |
|
|
279 |
1545d |
1889d
|
15/28 |
1518d |
25a097f52046
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
|
|
WARNING in slab_pre_alloc_hook
usb
|
C |
|
|
210 |
1543d |
1564d
|
15/28 |
1518d |
f176ede3a3bd
USB: yurex: Fix bad gfp argument
|
|
KASAN: use-after-free Read in rc_dev_uevent
media
|
|
|
|
1 |
1567d |
1567d
|
15/28 |
1518d |
4f0835d6677d
media: rc: uevent sysfs file races with rc_unregister_device()
|
|
WARNING in r871xu_dev_remove
usb
staging
|
C |
|
|
47375 |
1566d |
1918d
|
15/28 |
1526d |
b4383c971bc5
staging: rtl8712: handle firmware load failure
|
|
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs
sound
|
|
|
|
2 |
1594d |
1608d
|
15/28 |
1526d |
68359a1ad844
ALSA: line6: Sync the pending work cancel at disconnection
|
|
general protection fault in cdev_del
usb
fs
|
C |
|
|
315 |
1536d |
2004d
|
15/28 |
1526d |
e911e99a0770
usb: hso: check for return value in hso_serial_common_create()
|
|
WARNING in submit_rx_urb/usb_submit_urb
usb
staging
|
C |
|
|
397 |
1578d |
2003d
|
15/28 |
1526d |
faaff9765664
staging: wlan-ng: properly check endpoint types
|
|
KASAN: use-after-free Read in ax88172a_unbind
usb
|
C |
done |
|
2723 |
1578d |
1818d
|
15/28 |
1526d |
c28d9a285668
ax88172a: fix ax88172a_unbind() failures
|
|
WARNING in submit_audio_out_urb/usb_submit_urb
sound
usb
|
syz |
|
|
2 |
1596d |
1596d
|
15/28 |
1526d |
6e8a914ad619
ALSA: line6: Perform sanity check for each URB creation
|
|
INFO: task hung in __do_sys_reboot
kernel
|
|
|
|
1554 |
1543d |
1599d
|
15/28 |
1526d |
b292b50b0efc
driver core: Fix probe_count imbalance in really_probe()
|
|
general protection fault in go7007_usb_probe
usb
media
|
C |
|
|
2103 |
1566d |
1674d
|
15/28 |
1526d |
137641287eb4
go7007: add sanity checking for endpoints
|
|
KASAN: use-after-free Write in ath9k_htc_rx_msg
wireless
|
C |
|
|
93 |
1623d |
1701d
|
15/28 |
1587d |
e4ff08a4d727
ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id
usb
sound
|
C |
done |
|
39 |
1606d |
1611d
|
15/28 |
1587d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
INFO: task hung in locks_remove_posix
fs
input
usb
|
syz |
|
|
2231 |
1623d |
1645d
|
15/28 |
1587d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
|
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
wireless
|
C |
|
|
57 |
1623d |
1696d
|
15/28 |
1587d |
19d6c375d671
ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
|
|
KASAN: use-after-free Read in usblp_bulk_read
usb
|
|
|
|
7 |
1597d |
1675d
|
15/28 |
1587d |
296a193b0612
usblp: poison URBs upon disconnect
|
|
KASAN: use-after-free Read in htc_connect_service
wireless
|
C |
|
|
41041 |
1623d |
1701d
|
15/28 |
1587d |
ced21a4c726b
ath9k: Fix use-after-free Read in htc_connect_service
|
|
WARNING in usbhid_raw_request/usb_submit_urb (3)
usb
|
syz |
|
|
18 |
1666d |
1773d
|
15/28 |
1587d |
ac854131d984
USB: core: Fix misleading driver bug report
|
|
KASAN: slab-out-of-bounds Read in garmin_read_process
usb
|
C |
|
|
1 |
1706d |
1706d
|
15/28 |
1587d |
e9b3c610a05c
USB: serial: garmin_gps: add sanity checking for data length
|
|
KASAN: use-after-free Read in usbhid_close (3)
input
usb
|
C |
|
|
6 |
1661d |
1689d
|
15/28 |
1587d |
0ed08faded1d
HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
|
|
KASAN: use-after-free Read in ath9k_wmi_ctrl_rx
wireless
|
C |
|
|
1 |
1700d |
1700d
|
15/28 |
1587d |
abeaa85054ff
ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
|
|
general protection fault in ath9k_hif_usb_rx_cb
wireless
|
C |
|
|
913 |
1588d |
1701d
|
15/28 |
1587d |
2bbcaaee1fcb
ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
|
|
WARNING in wa_nep_create/usb_submit_urb
usb
staging
|
C |
|
|
114 |
1677d |
1961d
|
15/28 |
1607d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
WARNING in hwarc_neep_init/usb_submit_urb
staging
usb
|
C |
|
|
1 |
1711d |
1711d
|
15/28 |
1607d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
BUG: corrupted list in __uwb_rc_neh_rm
staging
usb
|
C |
|
|
9 |
1683d |
1717d
|
15/28 |
1607d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
KASAN: use-after-free Read in chaoskey_disconnect
crypto
usb
|
C |
|
|
44 |
1820d |
1849d
|
15/28 |
1616d |
93ddb1f56ae1
USB: chaoskey: fix use-after-free on release
|
|
general protection fault in fbcon_switch
fbdev
|
|
|
|
1 |
1700d |
1700d
|
15/28 |
1656d |
b139f8b00db4
fbcon: fix null-ptr-deref in fbcon_switch
|
|
WARNING: ODEBUG bug in prism2sta_disconnect_usb
staging
|
|
|
|
1 |
1705d |
1704d
|
15/28 |
1656d |
a1f165a6b738
staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
|
|
KASAN: slab-out-of-bounds Read in edge_interrupt_callback
usb
|
C |
|
|
1 |
1705d |
1704d
|
15/28 |
1656d |
57aa9f294b09
USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
|
|
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback
staging
usb
|
C |
|
|
1 |
1706d |
1706d
|
15/28 |
1656d |
1165dd73e811
staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
|
|
BUG: soft lockup in sys_exit_group
usb
|
C |
|
|
6 |
1706d |
1729d
|
15/28 |
1680d |
d683469b3c93
ALSA: line6: Fix endless MIDI read loop
|
|
KASAN: use-after-free Write in hiddev_disconnect
input
usb
|
|
|
|
20 |
1708d |
1773d
|
15/28 |
1680d |
5c02c447eaed
HID: hiddev: Fix race in in hiddev_disconnect()
|
|
WARNING in _chaoskey_fill/usb_submit_urb
usb
|
C |
|
|
15 |
1833d |
1886d
|
15/28 |
1715d |
92aa5986f4f7
USB: chaoskey: fix error case of a timeout
|
|
WARNING in flexcop_usb_probe/usb_submit_urb
usb
media
|
C |
|
|
4 |
1881d |
1919d
|
15/28 |
1715d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
KASAN: use-after-free Read in rsi_rx_done_handler
wireless
|
|
|
|
8 |
1777d |
1906d
|
15/28 |
1738d |
e93cd35101b6
rsi: fix use-after-free on failed probe and unbind
|
|
general protection fault in timer_is_static_object
input
|
C |
|
|
2 |
1822d |
1819d
|
15/28 |
1738d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
BUG: spinlock already unlocked in input_set_keycode
input
|
C |
|
|
2 |
1831d |
1829d
|
15/28 |
1738d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
WARNING: refcount bug in cdev_get
|
C |
done |
|
105 |
1779d |
1919d
|
15/28 |
1738d |
68faa679b8be
chardev: Avoid potential use-after-free in 'chrdev_open()'
|
|
WARNING in dln2_start_rx_urbs/usb_submit_urb
usb
|
C |
|
|
44 |
1753d |
1842d
|
15/28 |
1738d |
2b8bd606b1e6
mfd: dln2: More sanity checking for endpoints
|
|
KASAN: slab-out-of-bounds Read in hid_field_extract
input
usb
|
C |
|
|
6 |
1778d |
1812d
|
15/28 |
1738d |
8ec321e96e05
HID: Fix slab-out-of-bounds read in hid_field_extract
|
|
WARNING: ODEBUG bug in rsi_probe
usb
wireless
|
C |
|
|
10487 |
1752d |
2047d
|
15/28 |
1738d |
92aafe77123a
rsi: fix use-after-free on probe errors
|
|
WARNING in uvc_scan_chain_forward
usb
media
|
C |
|
|
6 |
1777d |
1802d
|
15/28 |
1738d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
general protection fault in gigaset_probe
staging
usb
|
C |
|
|
6 |
1827d |
1946d
|
15/28 |
1742d |
53f35a39c386
staging: gigaset: fix general protection fault on probe
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit (2)
sound
usb
|
C |
|
|
1 |
1841d |
1841d
|
15/28 |
1763d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
KASAN: global-out-of-bounds Write in kbd_event
serial
input
usb
|
C |
|
|
6 |
1819d |
1841d
|
15/28 |
1805d |
b2b2dd71e085
tty: vt: keyboard: reject invalid keycodes
|
|
general protection fault in flexcop_usb_probe
usb
media
|
C |
|
|
403 |
1819d |
2050d
|
15/28 |
1805d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
kernel BUG at kernel/time/timer.c:LINE! (4)
media
usb
|
syz |
|
|
1 |
1875d |
1872d
|
15/28 |
1805d |
f3f5ba42c58d
media: imon: invalid dereference in imon_touch_event
|
|
KASAN: use-after-free Read in appledisplay_bl_get_brightness
usb
|
C |
|
|
1 |
1888d |
1886d
|
15/28 |
1805d |
91feb01596e5
appledisplay: fix error handling in the scheduled work
|
|
INFO: trying to register non-static key in ida_destroy
usb
media
|
C |
|
|
4272 |
1819d |
1941d
|
15/28 |
1805d |
8c279e9394ca
media: uvcvideo: Fix error path in control parsing failure
|
|
general protection fault in snd_usb_create_mixer
sound
usb
|
C |
|
|
1 |
1828d |
1827d
|
15/28 |
1805d |
9435f2bb6687
ALSA: usb-audio: Fix NULL dereference at parsing BADD
|
|
general protection fault in usb_set_interface
usb
|
C |
|
|
3 |
1890d |
1893d
|
15/28 |
1805d |
c7a191464078
media: usbvision: Fix invalid accesses after device disconnect
|
|
WARNING in port100_send_cmd_async/usb_submit_urb
usb
nfc
|
C |
|
|
83 |
1820d |
1961d
|
15/28 |
1807d |
5f9f0b11f081
nfc: port100: handle command failure cleanly
|
|
WARNING: ODEBUG bug in input_ff_destroy
usb
input
|
C |
|
|
6 |
1827d |
1835d
|
14/28 |
1819d |
fa3a5a1880c9
Input: ff-memless - kill timer in destroy()
|
|
KASAN: use-after-free Read in mcba_usb_disconnect
can
usb
|
C |
|
|
2 |
1846d |
1878d
|
14/28 |
1819d |
4d6636498c41
can: mcba_usb: fix use-after-free on disconnect
|
|
KASAN: invalid-free in rsi_91x_deinit
usb
wireless
|
C |
|
|
109 |
1891d |
2039d
|
13/28 |
1819d |
8b51dc729147
rsi: fix a double free bug in rsi_91x_deinit()
|
|
divide error in dummy_timer
usb
|
C |
|
|
3 |
1849d |
1855d
|
13/28 |
1825d |
54f83b8c8ea9
USB: gadget: Reject endpoints with 0 maxpacket value
|
|
INFO: task hung in ld_usb_write
usb
|
C |
|
|
831 |
1844d |
1857d
|
13/28 |
1825d |
52403cfbc635
USB: ldusb: fix control-message timeout
|
|
KASAN: use-after-free Read in iowarrior_disconnect
usb
|
C |
|
|
3056 |
1865d |
1921d
|
13/28 |
1827d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
divide error in usbtmc_generic_read
usb
|
C |
|
|
2 |
1926d |
1926d
|
13/28 |
1827d |
de7b9aa633b6
usbtmc: more sanity checking for packet size
|
|
KASAN: slab-out-of-bounds Read in ld_usb_read (3)
usb
|
C |
|
|
74 |
1851d |
1862d
|
13/28 |
1842d |
7a6f22d7479b
USB: ldusb: fix read info leaks
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit
usb
sound
|
C |
|
|
6 |
1848d |
1857d
|
13/28 |
1842d |
ba8bf0967a15
ALSA: usb-audio: Fix copy&paste error in the validator
|
|
KASAN: slab-out-of-bounds Write in ga_probe
input
|
C |
|
|
5 |
1871d |
1893d
|
13/28 |
1842d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
KASAN: use-after-free Read in usb_autopm_put_interface
usb
|
C |
|
|
2373 |
1850d |
1864d
|
13/28 |
1842d |
7a7591979748
USB: usblp: fix use-after-free on disconnect
|
|
KASAN: use-after-free Read in pn533_send_complete
nfc
usb
|
C |
|
|
4 |
1851d |
1872d
|
13/28 |
1844d |
6af3aa57a098
NFC: pn533: fix use-after-free and memleaks
|
|
possible deadlock in usb_deregister_dev (2)
usb
|
C |
|
|
956 |
1865d |
1892d
|
13/28 |
1851d |
33a7813219f2
USB: legousbtower: fix deadlock on disconnect
|
|
WARNING in mark_lock (2)
fs
|
|
|
|
14 |
1858d |
1885d
|
13/28 |
1851d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
|
BUG: bad usercopy in read_rio
hardening
mm
|
|
|
|
2 |
1866d |
1869d
|
13/28 |
1851d |
015664d15270
USB: rio500: Remove Rio 500 kernel driver
|
|
general protection fault in open_rio
kernel
|
|
|
|
2 |
1884d |
1885d
|
13/28 |
1851d |
015664d15270
USB: rio500: Remove Rio 500 kernel driver
|
|
KASAN: use-after-free Read in adu_disconnect
usb
|
C |
|
|
5304 |
1865d |
1935d
|
13/28 |
1851d |
44efc269db79
USB: adutux: fix use-after-free on disconnect
|
|
INFO: rcu detected stall in dummy_timer
usb
|
C |
|
|
16 |
1866d |
1931d
|
13/28 |
1851d |
32a0721c6620
USB: yurex: Don't retry on unexpected errors
|
|
KASAN: invalid-free in disconnect_rio (2)
usb
|
C |
|
|
51 |
1868d |
1889d
|
13/28 |
1851d |
015664d15270
USB: rio500: Remove Rio 500 kernel driver
|
|
WARNING in em28xx_usb_disconnect
usb
media
|
C |
|
|
8 |
1898d |
1931d
|
13/28 |
1863d |
46e4a26615cc
media: em28xx: modules workqueue not inited for 2nd device
|
|
KASAN: use-after-free Read in si470x_int_in_callback
usb
media
|
C |
|
|
25 |
1873d |
1962d
|
13/28 |
1863d |
0d616f2a3fdb
media: radio/si470x: kill urb on error
|
|
general protection fault in ath6kl_usb_alloc_urb_from_pipe
usb
wireless
|
C |
|
|
1160 |
1890d |
2050d
|
13/28 |
1863d |
39d170b3cb62
ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
|
|
KASAN: use-after-free Read in atusb_disconnect
usb
wpan
|
C |
|
|
112 |
1865d |
1906d
|
13/28 |
1863d |
7fd25e6fc035
ieee802154: atusb: fix use-after-free at disconnect
|
|
KASAN: slab-out-of-bounds Read in hdpvr_probe
usb
media
|
C |
|
|
10 |
1900d |
1975d
|
13/28 |
1863d |
8b8900b729e4
media: hdpvr: add terminating 0 at end of string
|
|
KASAN: global-out-of-bounds Read in load_next_firmware_from_table
usb
libertas
|
C |
|
|
5 |
1912d |
1962d
|
13/28 |
1863d |
764f3f1ecffc
libertas: Add missing sentinel at end of if_usb.c fw_table
|
|
divide error in usbnet_update_max_qlen
usb
|
C |
|
|
17 |
1880d |
1893d
|
13/28 |
1863d |
280ceaed79f1
usbnet: sanity checking of packet sizes and device mtu
|
|
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query
usb
media
|
C |
|
|
2236 |
1909d |
2047d
|
13/28 |
1863d |
0c4df39e504b
media: technisat-usb2: break out of loop at end of buffer
|
|
KASAN: global-out-of-bounds Read in dvb_pll_attach
media
usb
|
C |
|
|
2 |
1901d |
1960d
|
13/28 |
1863d |
c268e7adea52
media: dvb-frontends: use ida for pll number
|
|
general protection fault in pk_probe
input
usb
|
C |
|
|
2 |
1909d |
1906d
|
13/28 |
1863d |
98375b86c791
HID: prodikeys: Fix general protection fault during probe
|
|
KASAN: global-out-of-bounds Read in hdpvr_probe
usb
media
|
C |
|
|
15 |
1916d |
2030d
|
13/28 |
1863d |
d4a6a9537bc3
media: hdpvr: Add device num check and handling
|
|
WARNING: ODEBUG bug in usbhid_disconnect (2)
input
usb
|
C |
|
|
48 |
1883d |
1906d
|
13/28 |
1863d |
2bcdacb70327
HID: sony: Fix memory corruption issue on cleanup.
|
|
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device
usb
|
syz |
|
|
1 |
1914d |
1906d
|
13/28 |
1863d |
3dd550a2d365
USB: usbcore: Fix slab-out-of-bounds bug during device reset
|
|
BUG: MAX_STACK_TRACE_ENTRIES too low! (2)
|
C |
done |
|
5045 |
1895d |
2064d
|
13/28 |
1863d |
12593b7467f9
locking/lockdep: Reduce space occupied by stack traces
|
|
possible deadlock in open_rio (3)
usb
|
C |
|
|
169 |
1890d |
1892d
|
13/28 |
1863d |
9472aff16ca0
USB: rio500: Fix lockdep violation
|
|
WARNING in zd_mac_clear
usb
wireless
|
C |
|
|
13194 |
1890d |
2050d
|
13/28 |
1863d |
7a2eb7367fde
zd1211rw: remove false assertion from zd_mac_clear()
|
|
WARNING in iguanair_probe/usb_submit_urb
media
usb
|
C |
|
|
3 |
1894d |
1945d
|
13/28 |
1863d |
ab1cbdf159be
media: iguanair: add sanity checks
|
|
general protection fault in __pm_runtime_resume
input
usb
pm
|
C |
|
|
197 |
1884d |
1947d
|
13/28 |
1863d |
5f9242775bb6
HID: logitech: Fix general protection fault caused by Logitech driver
|
|
divide error in cdc_ncm_update_rxtx_max
usb
|
C |
|
|
5 |
1879d |
1893d
|
13/28 |
1863d |
3fe4b3351301
cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
|
|
KASAN: slab-out-of-bounds Read in hidraw_ioctl
input
|
C |
|
|
104 |
1890d |
1941d
|
13/28 |
1863d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
|
possible deadlock in open_rio
usb
|
|
|
|
1107 |
1902d |
1939d
|
12/28 |
1902d |
2ca359f4f8b9
Revert "USB: rio500: simplify locking"
|
|
possible deadlock in usb_deregister_dev
usb
|
C |
|
|
82 |
1928d |
1935d
|
12/28 |
1902d |
c468a8aa790e
usb: iowarrior: fix deadlock on disconnect
|
|
WARNING in __iforce_usb_xmit/usb_submit_urb
usb
input
|
C |
|
|
3 |
1930d |
1935d
|
12/28 |
1902d |
849f5ae3a513
Input: iforce - add sanity checks
|
|
WARNING in kbtab_open/usb_submit_urb
usb
|
C |
|
|
5 |
1930d |
1947d
|
12/28 |
1902d |
c88090dfc842
Input: kbtab - sanity check for endpoint type
|
|
WARNING in usbtouch_open
input
usb
|
C |
|
|
768 |
1928d |
1941d
|
12/28 |
1902d |
b55d996f057b
Input: usbtouchscreen - initialize PM mutex before using it
|
|
KASAN: use-after-free Read in usb_free_coherent
usb
|
|
|
|
310 |
1928d |
1939d
|
12/28 |
1902d |
fc05481b2fca
usb: yurex: Fix use-after-free in yurex_delete
|
|
KASAN: use-after-free Read in ld_usb_release
usb
|
C |
|
|
14 |
1921d |
1931d
|
12/28 |
1902d |
303911cfc5b9
USB: core: Fix races in character device registration and deregistraion
|
|
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
net
usb
|
C |
|
|
2 |
1926d |
1928d
|
12/28 |
1902d |
54364278fb3c
USB: CDC: fix sanity checks in CDC union parser
|
|
KASAN: use-after-free Read in device_release_driver_internal
usb
|
C |
|
|
5 |
1924d |
1948d
|
12/28 |
1902d |
c52873e5a1ef
usb: cdc-acm: make sure a refcount is taken early enough
|
|
WARNING in wdm_write/usb_submit_urb
usb
|
C |
|
|
15 |
1906d |
1921d
|
12/28 |
1902d |
1426bd2c9f7e
USB: cdc-wdm: fix race between write and disconnect due to flag abuse
|
|
WARNING in mark_lock
kernel
|
syz |
done |
|
2 |
1921d |
1976d
|
12/28 |
1912d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
general protection fault in holtek_kbd_input_event
input
|
C |
|
|
67 |
1933d |
1946d
|
12/28 |
1912d |
01ec0a5f19c8
HID: holtek: test for sanity of intfdata
|
|
KASAN: use-after-free Read in hiddev_release
input
usb
|
C |
|
|
11 |
1923d |
1939d
|
12/28 |
1912d |
9c09b214f30e
HID: hiddev: avoid opening a disconnected device
6d4472d7bec3
HID: hiddev: do cleanup in failure of opening a device
|
|
WARNING in gpio_to_desc
usb
gpio
|
C |
|
|
3 |
1930d |
1961d
|
12/28 |
1912d |
c3953a3c2d31
NFC: nfcmrvl: fix gpio-handling regression
|
|
usb-fuzzer boot error: general protection fault in dma_direct_max_mapping_size
iommu
|
|
|
|
21 |
1944d |
1948d
|
12/28 |
1926d |
1b5d9a6e9835
scsi: core: fix the dma_max_mapping_size call
|
|
general protection fault in snd_usb_pipe_sanity_check
usb
sound
|
C |
|
|
72 |
1928d |
1941d
|
12/28 |
1926d |
5d78e1c2b7f4
ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
|
|
KASAN: stack-out-of-bounds Read in hfcsusb_probe
usb
isdn4linux
|
C |
|
|
634 |
1942d |
2047d
|
12/28 |
1926d |
f384e62a82ba
ISDN: hfcsusb: checking idx of ep configuration
|
|
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE!
usb
|
C |
|
|
1 |
1948d |
1948d
|
12/28 |
1926d |
f90bf1ece48a
usb: wusbcore: fix unbalanced get/put cluster_id
|
|
WARNING: Support for this device (Terratec Grabster AV400) is experimental.
usb
|
C |
|
|
371 |
1942d |
2032d
|
12/28 |
1935d |
1753c7c4367a
media: pvrusb2: use a different format for warnings
|
|
KASAN: use-after-free Read in cpia2_usb_disconnect
usb
media
|
C |
|
|
3 |
1961d |
2046d
|
12/28 |
1935d |
eff73de2b160
media: cpia2_usb: first wake up, then free in disconnect
|
|
WARNING in __flush_work (3)
usb
|
C |
|
|
1251 |
1937d |
2047d
|
12/28 |
1935d |
11a087f484bf
media: uvcvideo: Fix access to uninitialized fields on probe error
|
|
KASAN: use-after-free Read in dvb_usb_device_exit
usb
|
C |
|
|
825 |
1935d |
2050d
|
12/28 |
1935d |
6cf97230cd5f
media: dvb: usb: fix use after free in dvb_usb_device_exit
|
|
KASAN: slab-out-of-bounds Read in au0828_rc_unregister (2)
media
|
|
|
|
11 |
2006d |
2016d
|
12/28 |
1935d |
6d0d1ff9ff21
media: au0828: fix null dereference in error path
|
|
INFO: trying to register non-static key in rtl_c2hcmd_launcher
usb
wireless
|
C |
|
|
48950 |
1942d |
2050d
|
12/28 |
1935d |
6c0ed66f1a5b
rtlwifi: rtl8192cu: fix error handle when usb probe failed
|
|
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap
usb
media
|
C |
|
|
76 |
1942d |
2033d
|
12/28 |
1935d |
5d2e73a5f80a
media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
|
|
WARNING: ath10k USB support is incomplete, don't expect anything to work!
usb
|
C |
|
|
347 |
1942d |
2023d
|
12/28 |
1935d |
265df32eae58
ath10k: Change the warning message string
|
|
KASAN: use-after-free Read in v4l2_release
usb
media
|
C |
|
|
275 |
1943d |
2047d
|
12/28 |
1935d |
c666355e60dd
media: radio-raremono: change devm_k*alloc to k*alloc
|
|
WARNING: Detected a wedged cx25840 chip; the device will not work.
usb
|
C |
|
|
62 |
1943d |
2032d
|
12/28 |
1935d |
1753c7c4367a
media: pvrusb2: use a different format for warnings
|
|
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb
usb
|
C |
|
|
3 |
1951d |
1990d
|
12/28 |
1935d |
801ebf1043ae
ALSA: usb-audio: Sanity checks for each pipe and EP types
|
|
KASAN: use-after-free Read in p54u_load_firmware_cb
wireless
usb
|
syz |
|
|
40 |
1942d |
2026d
|
12/28 |
1935d |
6e41e2257f10
p54usb: Fix race between disconnect and firmware loading
|
|
KASAN: global-out-of-bounds Read in qmi_wwan_probe
usb
|
C |
|
|
2 |
1965d |
1977d
|
12/28 |
1942d |
904d88d743b0
qmi_wwan: Fix out-of-bounds read
|
|
KASAN: null-ptr-deref Write in submit_audio_out_urb (2)
usb
|
C |
|
|
3423 |
1942d |
1973d
|
12/28 |
1942d |
3450121997ce
ALSA: line6: Fix write on zero-sized buffer
|
|
WARNING: proc registration bug in snd_info_card_register
usb
sound
|
C |
|
|
453 |
2005d |
2050d
|
12/28 |
1976d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
general protection fault in sisusb_probe
usb
|
C |
|
|
3 |
2020d |
2023d
|
12/28 |
1981d |
9a5729f68d3a
USB: sisusbvga: fix oops in error path of sisusb_probe
|
|
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor
usb
|
syz |
|
|
3 |
2008d |
2021d
|
12/28 |
1981d |
a03ff5446081
USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
|
|
KASAN: invalid-free in disconnect_rio
usb
|
C |
|
|
180 |
2005d |
2050d
|
12/28 |
1981d |
3864d33943b4
USB: rio500: refuse more than one device at a time
|
|
general protection fault in smsusb_init_device
media
usb
|
C |
|
|
23 |
2005d |
2044d
|
12/28 |
1981d |
31e0456de5be
media: usb: siano: Fix general protection fault in smsusb
|
|
KASAN: null-ptr-deref Write in submit_audio_out_urb
sound
usb
|
C |
|
|
185 |
1989d |
2005d
|
12/28 |
1982d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
INFO: task hung in usb_kill_urb
usb
|
C |
|
|
1515 |
2044d |
2050d
|
12/28 |
1986d |
50896c410354
USB: dummy-hcd: Fix failure to give back unlinked URBs
USB: dummy-hcd: Fix failure to give back unlinked URBs
|
|
BUG: sleeping function called from invalid context in line6_pcm_acquire
sound
|
|
|
|
119 |
2005d |
2024d
|
12/28 |
1986d |
7f84ff68be05
ALSA: line6: toneport: Fix broken usage of timer for delayed execution
|
|
general protection fault in __dev_printk
usb
|
C |
|
|
300 |
2031d |
2045d
|
12/28 |
2005d |
ef61eb43ada6
USB: yurex: Fix protection fault after device removal
|
|
INFO: trying to register non-static key in vmk80xx_detach
staging
usb
|
C |
|
|
1528 |
2005d |
2050d
|
12/28 |
2005d |
08b7c2f9208f
staging: comedi: vmk80xx: Fix use of uninitialized semaphore
|
|
INFO: trying to register non-static key in ni6501_detach
staging
usb
|
C |
|
|
127 |
2005d |
2047d
|
12/28 |
2005d |
660cf4ce9d0f
staging: comedi: ni_usb6501: Fix use of uninitialized mutex
|
|
KASAN: use-after-free Read in snd_info_free_entry
usb
sound
|
C |
|
|
47 |
2017d |
2047d
|
12/28 |
2005d |
2a3f7221acdd
ALSA: core: Fix card races between register and disconnect
8c2f870890fd
ALSA: info: Fix racy addition/deletion of nodes
|
|
KASAN: slab-out-of-bounds Read in ds_probe
usb
|
C |
|
|
5 |
2007d |
2045d
|
12/28 |
2005d |
c114944d7d67
USB: w1 ds2490: Fix bug caused by improper use of altsetting array
|
|
KASAN: stack-out-of-bounds Read in string
usb
|
C |
|
|
46 |
2038d |
2050d
|
12/28 |
2016d |
c01c348ecdc6
USB: core: Fix unterminated string returned by usb_string()
|
|
WARNING in usb_submit_urb (4)
usb
|
syz |
done |
|
46 |
2018d |
2206d
|
12/28 |
2016d |
c2b71462d294
USB: core: Fix bug caused by duplicate interface PM usage counter
|