|
INFO: task hung in invalidate_inode_pages2_range (3)
fs
|
1 |
C |
done |
|
56 |
53d |
412d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
memory leak in radix_tree_insert (2)
arm-msm
net
|
3 |
C |
|
|
1 |
79d |
861d
|
26/29 |
never |
2428083101f6
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
|
|
KASAN: slab-use-after-free Read in xfs_buf_rele (4)
xfs
|
19 |
C |
|
|
59 |
3d09h |
226d
|
25/29 |
never |
497560b9ef42
xfs: switch (back) to a per-buftarg buffer hash
|
|
WARNING in ip_rt_bug (2)
net
|
-1 |
C |
done |
error |
594 |
2d01h |
1282d
|
28/29 |
never |
81b84de32bb2
xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
|
|
KASAN: slab-use-after-free Read in xfrm_state_find
net
|
19 |
|
|
|
1395 |
56d |
220d
|
28/29 |
never |
1799d8abeabc
xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
|
|
KASAN: null-ptr-deref Write in sys_io_uring_register
mm
|
12 |
C |
done |
|
15 |
491d |
498d
|
1/29 |
never |
xarray-extract-helper-from-__xa_insertcmpxchg-fix
|
|
BUG: sleeping function called from invalid context in alloc_buffer_head
mm
|
5 |
|
|
|
15 |
1068d |
1073d
|
1/29 |
never |
workingset: add missing rcu_read_unlock() in lru_gen_refault()
|
|
INFO: task hung in wg_netns_pre_exit (5)
wireguard
|
1 |
C |
done |
|
397 |
2d09h |
568d
|
25/29 |
never |
60a25ef8dacb
wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit
|
|
KMSAN: uninit-value in ieee80211_radiotap_iterator_next
wireless
|
7 |
|
|
|
3 |
60d |
58d
|
28/29 |
never |
c854758abe0b
wifi: radiotap: reject radiotap with unknown bits
|
|
KASAN: use-after-free Read in f2fs_write_end_io (2)
f2fs
|
19 |
C |
|
|
14 |
66d |
115d
|
28/29 |
never |
ce2739e482bc
f2fs: fix to avoid UAF in f2fs_write_end_io()
|
|
kernel BUG in f2fs_abort_atomic_write
f2fs
|
-1 |
syz |
|
|
2 |
1156d |
1200d
|
1/29 |
never |
f2fs: fix to avoid race condition of f2fs_abort_atomic_write()
|
|
BUG: unable to handle kernel NULL pointer dereference in set_page_dirty
f2fs
|
10 |
C |
|
|
317 |
615d |
1330d
|
1/29 |
never |
f2fs: fix missing mapping caused by the mount/umount race
|
|
KMSAN: uninit-value in nl80211_send_pmsr_capa
wireless
|
7 |
|
|
|
11 |
28d |
44d
|
27/29 |
never |
bd9121a5e9fa
wifi: mac80211_hwsim: fully initialise PMSR capabilities
|
|
general protection fault in f2fs_in_warm_node_list
f2fs
|
2 |
C |
error |
|
10685 |
13m |
57d
|
2/29 |
never |
f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
|
|
KMSAN: uninit-value in f2fs_sanity_check_node_footer
f2fs
|
7 |
|
|
|
1 |
46d |
42d
|
2/29 |
never |
f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer
|
|
WARNING in ieee80211_tdls_oper (3)
wireless
|
-1 |
C |
error |
|
1 |
39d |
38d
|
27/29 |
never |
7d73872d949c
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
|
|
kernel BUG in f2fs_issue_discard_timeout
f2fs
|
-1 |
|
|
|
6 |
17d |
37d
|
2/29 |
never |
f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally
|
|
WARNING in __static_key_slow_dec_cpuslocked (3)
kernel
|
-1 |
|
|
|
1 |
76d |
43d
|
27/29 |
never |
b94ae8e0d5fe
wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
|
|
KASAN: slab-out-of-bounds Read in ext4_ext_correct_indexes
ext4
|
19 |
C |
error |
error |
7 |
35d |
325d
|
26/29 |
never |
2acb5c12ebd8
ext4: validate p_idx bounds in ext4_ext_correct_indexes
|
|
WARNING in usb_tx_block
usb
libertas
|
-1 |
C |
|
|
15 |
5d20h |
122d
|
28/29 |
never |
d66676e6ca96
wifi: libertas: fix WARNING in usb_tx_block
|
|
kernel BUG in f2fs_write_end_io
f2fs
|
-1 |
C |
inconclusive |
|
283 |
2d13h |
380d
|
28/29 |
never |
50ac3ecd8e05
f2fs: fix to do sanity check on node footer in {read,write}_end_io
|
|
WARNING in __folio_mark_dirty (3)
ext4
|
-1 |
C |
error |
|
115 |
4d10h |
147d
|
2/29 |
never |
ext4: unmap invalidated folios from page tables in mpage_release_unused_pages()
|
|
general protection fault in ext4_split_extent_at
ext4
|
2 |
|
|
|
1 |
33d |
28d
|
26/29 |
never |
3ceda17325fc
ext4: skip split extent recovery on corruption
|
|
linux-next boot error: kernel BUG at include/linux/page-flags.h:LINE!
mm
|
-1 |
|
|
|
3 |
1960d |
1960d
|
1/29 |
never |
fixup for "mm: refactor initialization of stuct page for holes"
|
|
KASAN: slab-use-after-free Read in ext4_ext_remove_space
ext4
|
19 |
C |
error |
|
73 |
23d |
381d
|
26/29 |
never |
3822743dc203
ext4: reject mount if bigalloc with s_first_data_block != 0
|
|
BUG: sleeping function called from invalid context in usb_tx_block
usb
libertas
|
5 |
C |
|
|
729 |
5m |
51d
|
25/29 |
never |
7c5c2b661bdb
wifi: libertas: don't kill URBs in interrupt context
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (5)
net
|
9 |
|
|
|
46 |
17d |
98d
|
28/29 |
never |
21cbf883d073
wifi: avoid kernel-infoleak from struct iw_point
|
|
WARNING in iomap_write_begin
xfs
iomap
|
-1 |
C |
error |
|
6 |
597d |
611d
|
1/29 |
never |
vfs: Fix implicit conversion problem when testing overflow case
|
|
kernel BUG in ext4_write_inline_data (4)
ext4
|
-1 |
C |
error |
|
12 |
1d22h |
73d
|
26/29 |
never |
ed9356a30e59
ext4: convert inline data to extents when truncate exceeds inline size
|
|
KASAN: null-ptr-deref Read in io_sqe_buffer_register
io-uring
|
11 |
C |
done |
|
54 |
220d |
224d
|
2/29 |
never |
fixup: mm/gup: remove record_subpages()
|
|
WARNING: lock held when returning to user space in lock_vma_under_rcu
mm
|
4 |
|
|
|
1 |
33d |
29d
|
2/29 |
never |
userfaultfd: fix lock leak in mfill_get_vma()
|
|
WARNING in folio_add_new_anon_rmap
mm
|
-1 |
C |
error |
|
14 |
33d |
32d
|
2/29 |
never |
userfaultfd-introduce-struct-mfill_state-fix
|
|
INFO: task hung in filename_rmdir
jfs
ext4
|
1 |
C |
error |
|
4 |
37d |
48d
|
26/29 |
never |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
INFO: task hung in filename_unlinkat
jfs
|
1 |
C |
error |
|
14 |
28d |
50d
|
26/29 |
never |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
kernel BUG in ext4_swap_extents
ext4
|
-1 |
C |
|
|
6 |
89d |
129d
|
28/29 |
never |
0ef7ef422730
ext4: add missing down_write_data_sem in mext_move_extent().
|
|
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2)
usb
|
22 |
C |
error |
|
27 |
35d |
745d
|
26/29 |
never |
8a768552f7a8
usb: usbtmc: Flush anchored URBs in usbtmc_release
|
|
WARNING in skb_attempt_defer_free
net
|
-1 |
C |
|
|
16 |
77d |
101d
|
28/29 |
never |
e5c8eda39a9f
udp: call skb_orphan() before skb_attempt_defer_free()
|
|
KCSAN: data-race in __fput / __tty_hangup (4)
serial
|
6 |
|
|
|
8 |
213d |
1091d
|
1/29 |
never |
tty: tty_io: fix race between tty_fops and hung_up_tty_fops
|
|
WARNING in tracing_buffers_mmap_close (3)
trace
|
-1 |
C |
|
|
2 |
51d |
49d
|
28/29 |
never |
e39bb9e02b68
tracing: Fix WARN_ON in tracing_buffers_mmap_close
|
|
WARNING in __dma_map_sg_attrs (2)
trace
|
-1 |
C |
|
|
4 |
77d |
77d
|
28/29 |
never |
daafcc0ef0b3
tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
|
|
KASAN: wild-memory-access Read in md5_update
crypto
|
17 |
C |
done |
|
8 |
222d |
222d
|
2/29 |
never |
fixup: mm/gup: remove record_subpages()
|
|
possible deadlock in writeout_period
mm
fs
|
4 |
|
|
|
1 |
70d |
66d
|
28/29 |
never |
dd9e2f5b38f1
flex_proportions: make fprop_new_period() hardirq safe
|
|
KASAN: slab-use-after-free Read in thermal_zone_device_check
pm
|
19 |
|
|
|
2 |
62d |
114d
|
26/29 |
never |
45b859b07282
thermal: core: Address thermal zone removal races with resume
|
|
kernel BUG in free_bprm
mm
fs
|
-1 |
C |
done |
|
445 |
526d |
527d
|
1/29 |
never |
exec: NULL out bprm->argv0 when it is an ERR_PTR
|
|
KMSAN: uninit-value in longest_match_std (2)
ntfs3
|
7 |
C |
|
|
23820 |
57d |
828d
|
28/29 |
never |
f223ebffa185
fs/ntfs3: Initialize new folios before use
|
|
WARNING in ntfs_extend_initialized_size (2)
ntfs3
|
-1 |
C |
error |
|
7 |
60d |
60d
|
28/29 |
never |
10d7c95af043
fs/ntfs3: add delayed-allocation (delalloc) support
|
|
general protection fault in bond_header_create
net
|
2 |
syz |
|
|
10 |
23d |
34d
|
26/29 |
never |
425000dbf173
team: fix header_ops type confusion with non-Ethernet ports
|
|
INFO: task hung in ni_readpage_cmpr (3)
ntfs3
|
1 |
C |
done |
|
6 |
106d |
121d
|
28/29 |
never |
e37a75bb866c
fs/ntfs3: fix deadlock in ni_read_folio_cmpr
|
|
WARNING in attr_data_get_block_locked
ntfs3
|
-1 |
C |
|
|
11 |
6d00h |
52d
|
2/29 |
never |
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
|
|
KCSAN: data-race in tcp_assign_congestion_control / tcp_v6_syn_recv_sock
race:harmful
net
|
6 |
|
|
|
1 |
62d |
58d
|
28/29 |
never |
858d2a4f67ff
tcp: fix potential race in tcp_v6_syn_recv_sock()
|
|
memory leak in ntfs_init_fs_context (2)
ntfs3
|
3 |
C |
|
|
350 |
57d |
129d
|
28/29 |
never |
f7edab0cee03
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
|
|
INFO: task hung in ntfs_file_write_iter (2)
ntfs3
|
1 |
C |
error |
|
6 |
29d |
111d
|
28/29 |
never |
27b75ca4e51e
fs/ntfs3: prevent infinite loops caused by the next valid being the same
|
|
general protection fault in grab_requested_root
fs
|
2 |
C |
|
|
21 |
50d |
63d
|
28/29 |
never |
81f16c9778d7
statmount: Fix the null-ptr-deref in do_statmount()
|
|
BUG: sleeping function called from invalid context in __bpf_stream_push_str
net
virt
|
5 |
C |
done |
|
88 |
87d |
129d
|
28/29 |
never |
99a3e3a1cfc9
slab: fix kmalloc_nolock() context check for PREEMPT_RT
|
|
KASAN: slab-use-after-free Read in handle_tx (2)
net
|
19 |
C |
|
|
1086 |
63d |
785d
|
28/29 |
never |
308e7e4d0a84
serial: caif: fix use-after-free in caif_serial ldisc_close()
|
|
possible deadlock in __configfs_open_file
fs
|
4 |
C |
|
|
29 |
62d |
480d
|
28/29 |
never |
14d4ac19d189
scsi: target: Fix recursive locking in __configfs_open_file()
|
|
KCSAN: data-race in rxrpc_peer_keepalive_worker / rxrpc_send_data_packet
net
afs
|
6 |
|
|
|
1 |
141d |
99d
|
28/29 |
never |
5d5fe8bcd331
rxrpc: Fix data-race warning and potential load/store tearing
|
|
KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq (6)
rtc
|
6 |
|
|
|
12 |
15d |
89d
|
2/29 |
never |
rtc: add data_race() in rtc_dev_poll()
|
|
KMSAN: uninit-value in ntfs_iomap_begin
ntfs3
|
7 |
C |
|
|
191 |
2d19h |
53d
|
2/29 |
never |
fs/ntfs3: prevent uninitialized lcn caused by zero len
|
|
kernel BUG in folio_set_bh (2)
ntfs3
|
-1 |
C |
|
|
44 |
5d00h |
94d
|
28/29 |
never |
ab7ad7abb366
romfs: check sb_set_blocksize() return value
|
|
KASAN: slab-use-after-free Read in handle_mm_fault
mm
|
19 |
C |
done |
|
107 |
637d |
639d
|
1/29 |
never |
mm: check for VM_DROPPABLE in vma prior to handling mm fault
|
|
KASAN: use-after-free Read in z_erofs_transform_plain (2)
erofs
|
19 |
C |
error |
|
5 |
55d |
51d
|
28/29 |
never |
4a2d046e4b13
erofs: fix interlaced plain identification for encoded extents
|
|
KMSAN: uninit-value in __inet_bind
net
|
7 |
C |
|
|
410 |
56d |
61d
|
28/29 |
never |
7b821da55b3f
rds: tcp: fix uninit-value in __inet_bind
|
|
KASAN: slab-use-after-free Write in rt6_disable_ip
net
|
22 |
|
|
|
1 |
106d |
94d
|
28/29 |
never |
9a6f0c4d5796
dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
|
|
KMSAN: uninit-value in __inet6_bind (2)
net
|
7 |
C |
|
|
78 |
56d |
63d
|
28/29 |
never |
7b821da55b3f
rds: tcp: fix uninit-value in __inet_bind
|
|
KASAN: use-after-free Read in __vma_adjust
mm
|
19 |
C |
done |
|
10 |
1348d |
1404d
|
1/29 |
never |
fs/userfaultfd: fix vma iteration in mas_for_each() loop
|
|
KMSAN: uninit-value in fuse_fileattr_get
fuse
|
7 |
C |
|
|
19 |
56d |
70d
|
28/29 |
never |
cb184dd19154
fs: init flags_valid before calling vfs_fileattr_get
|
|
WARNING in __mmdrop (2)
kernel
|
-1 |
C |
|
|
7 |
63d |
65d
|
28/29 |
never |
61dc9f776705
procfs: fix possible double mmput() in do_procmap_query()
|
|
possible deadlock in blkdev_read_iter
block
|
4 |
C |
|
|
11 |
74d |
83d
|
28/29 |
never |
b5cbacd7f86f
procfs: avoid fetching build ID while holding VMA lock
|
|
KMSAN: uninit-value in fuse_dentry_revalidate (2)
fuse
|
7 |
C |
|
|
261 |
1d19h |
60d
|
21/29 |
never |
5a6baf204610
fuse: fix uninit-value in fuse_dentry_revalidate()
|
|
KASAN: use-after-free Read in p9_req_put
v9fs
|
19 |
|
|
|
296 |
1d17h |
1338d
|
1/29 |
never |
9p: p9_client_create: use p9_client_destroy on failure
|
|
KASAN: slab-use-after-free Read in snd_pcm_stop
sound
|
19 |
C |
error |
|
7 |
11d |
79d
|
28/29 |
never |
826af7fa62e3
ALSA: aloop: Fix racy access at PCM trigger
|
|
possible deadlock in gup_fast_fallback (2)
mm
|
4 |
C |
|
|
17 |
7d12h |
70d
|
28/29 |
never |
b5cbacd7f86f
procfs: avoid fetching build ID while holding VMA lock
|
|
WARNING in _cpu_down
kernel
|
-1 |
C |
|
|
37 |
25d |
38d
|
21/29 |
never |
c8c4a2972f83
padata: Put CPU offline callback in ONLINE section to allow failure
|
|
KMSAN: uninit-value in ovl_fill_real
overlayfs
|
7 |
|
|
|
1 |
88d |
84d
|
28/29 |
never |
1992330d90dd
ovl: Fix uninit-value in ovl_fill_real
|
|
KASAN: use-after-free Read in ocfs2_check_dir_entry
ocfs2
|
19 |
C |
error |
|
6 |
98d |
126d
|
28/29 |
never |
1524af3685b3
ocfs2: validate inline data i_size during inode read
|
|
kernel BUG in ocfs2_remove_refcount_tree
ocfs2
|
-1 |
C |
error |
|
6 |
130d |
129d
|
28/29 |
never |
688dab01c3bb
ocfs2: validate i_refcount_loc when refcount flag is set
|
|
KASAN: slab-use-after-free Read in ocfs2_fault
ocfs2
|
19 |
C |
done |
|
363 |
1d20h |
581d
|
2/29 |
never |
ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
|
|
general protection fault in snd_scarlett2_init
sound
|
2 |
C |
|
|
3 |
43d |
39d
|
28/29 |
never |
df1d8abf36ca
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
|
|
possible deadlock in ocfs2_extend_dir
ocfs2
|
4 |
|
|
|
1 |
47d |
43d
|
2/29 |
never |
ocfs2: fix possible deadlock between unlink and dio_end_io_write
|
|
KASAN: use-after-free Write in ocfs2_write_end_nolock
ocfs2
actionable
|
22 |
|
|
|
9 |
1d18h |
14d
|
25/29 |
never |
7bc5da4842be
ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
|
|
general protection fault in snd_scarlett2_controls_create
sound
|
2 |
C |
|
|
5 |
43d |
40d
|
28/29 |
never |
df1d8abf36ca
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
|
|
UBSAN: array-index-out-of-bounds in __ocfs2_find_path
ocfs2
|
15 |
C |
inconclusive |
|
12 |
63d |
122d
|
28/29 |
never |
e0b0f2834c9b
ocfs2: fix oob in __ocfs2_find_path
|
|
KASAN: slab-out-of-bounds Write in copy_to_urb (2)
usb
sound
|
21 |
C |
|
|
5 |
95d |
94d
|
28/29 |
never |
ef5749ef8b30
ALSA: usb-audio: Prevent excessive number of frames
|
|
INFO: task hung in usb_audio_probe (5)
sound
|
1 |
|
|
|
164 |
53m |
1d20h
|
2/29 |
never |
ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
|
|
KASAN: use-after-free Read in ocfs2_search_dirblock
ocfs2
|
19 |
C |
inconclusive |
|
14 |
462d |
608d
|
1/29 |
never |
ocfs2: fix directory entry check in ocfs2_search_dirblock()
|
|
possible deadlock in ocfs2_del_inode_from_orphan
ocfs2
|
4 |
C |
inconclusive |
|
7555 |
1d08h |
561d
|
2/29 |
never |
ocfs2: fix deadlock when creating quota file
|
|
possible deadlock in ocfs2_acquire_dquot
ocfs2
|
4 |
C |
|
|
71841 |
121d |
564d
|
2/29 |
never |
ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
|
|
KASAN: invalid-free in hci_req_sync_complete
bluetooth
|
24 |
syz |
|
|
179 |
651d |
724d
|
1/29 |
never |
Bluetooth: Fix double free in hci_req_sync_complete
|
|
UBSAN: array-index-out-of-bounds in ocfs2_xa_remove_entry
ocfs2
|
15 |
C |
|
|
62 |
68d |
126d
|
28/29 |
never |
d3cd8de2e17e
ocfs2: adjust ocfs2_xa_remove_entry() to match UBSAN boundary checks
|
|
KASAN: stack-out-of-bounds Read in l2cap_send_cmd
bluetooth
|
17 |
C |
|
|
174 |
21d |
33d
|
26/29 |
never |
9d87cb22195b
Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
22 |
C |
done |
|
46110 |
18h36m |
531d
|
27/29 |
never |
752a6c9596dd
Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
|
|
kernel BUG in ocfs2_write_block
ocfs2
|
-1 |
C |
inconclusive |
|
29 |
101d |
575d
|
28/29 |
never |
4e9f69c06215
ocfs2: add validate function for slot map blocks
|
|
kernel BUG in ocfs2_move_extents
ocfs2
|
-1 |
C |
|
|
163 |
63d |
119d
|
28/29 |
never |
c62e7e6444cd
ocfs2: add check for free bits before allocation in ocfs2_move_extent()
|
|
memory leak in run_add_entry (2)
ntfs3
|
3 |
C |
|
|
1 |
13d |
27d
|
2/29 |
never |
ntfs3: fix memory leak in indx_create_allocate()
|
|
possible deadlock in ntfs_look_for_free_space
ntfs3
|
4 |
C |
error |
|
4338 |
56d |
524d
|
28/29 |
never |
08ce2fee1b86
ntfs3: fix circular locking dependency in run_unpack_ex
|
|
WARNING in nilfs_btree_mark
nilfs
|
-1 |
C |
error |
|
9 |
2d23h |
28d
|
25/29 |
never |
be3e5d10643d
nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
|
|
KASAN: slab-use-after-free Write in le_read_features_complete
bluetooth
|
22 |
C |
error |
|
505 |
24d |
129d
|
26/29 |
never |
035c25007c9e
Bluetooth: hci_sync: Fix UAF in le_read_features_complete
|
|
WARNING in nilfs_ioctl_prepare_clean_segments
nilfs
|
-1 |
C |
error |
|
3 |
11d |
31d
|
25/29 |
never |
be3e5d10643d
nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
|
|
memory leak in __skb_tstamp_tx
bluetooth
|
3 |
C |
|
|
1 |
99d |
99d
|
28/29 |
never |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
general protection fault in nilfs_mdt_save_to_shadow_map
nilfs
|
2 |
C |
error |
|
87 |
2d20h |
31d
|
25/29 |
never |
4a4e0328edd9
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
|
|
memory leak in skb_clone (3)
batman
bluetooth
|
3 |
C |
|
|
3 |
50d |
99d
|
28/29 |
never |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
memory leak in napi_skb_cache_get (2)
net
virt
|
3 |
C |
|
|
1 |
94d |
91d
|
28/29 |
never |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
INFO: task hung in nilfs_segctor_thread (6)
nilfs
|
1 |
C |
done |
|
37 |
4d03h |
121d
|
28/29 |
never |
ed527ef0c264
nilfs2: Fix potential block overflow that cause system hang
|
|
WARNING in asus_remove
input
usb
|
-1 |
C |
|
|
109 |
14h24m |
77d
|
2/29 |
never |
HID: asus: Add check for cancelling fn_lock_sync_work
|
|
INFO: task hung in remove_inode_hugepages
fs
mm
|
1 |
C |
done |
|
52 |
555d |
647d
|
1/29 |
never |
INFO: task hung in remove_inode_hugepages
|
|
BUG: unable to handle kernel paging request in kvm_vgic_destroy
kvmarm
|
8 |
C |
|
|
7 |
35d |
47d
|
28/29 |
never |
ac6769c8f948
KVM: arm64: Eagerly init vgic dist/redist on vgic creation
|
|
memory leak in prepare_creds (6)
lsm
|
3 |
C |
|
|
2 |
60d |
82d
|
28/29 |
never |
1cb968a2013f
nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().
|
|
WARNING: kmalloc bug in memslot_rmap_alloc
kvm-x86
|
-1 |
C |
unreliable |
|
3 |
1654d |
1684d
|
1/29 |
never |
KVM: replace large kvmalloc allocation with vmalloc
|
|
WARNING in kvm_apic_accept_events (2)
kvm-x86
|
-1 |
C |
|
|
72 |
68d |
142d
|
28/29 |
never |
c4a365cd4a4e
KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
|
|
WARNING in vcpu_run
kvm-x86
|
-1 |
C |
done |
|
43 |
93d |
538d
|
28/29 |
never |
ead63640d4e7
KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
|
|
memory leak in percpu_ref_init
nfs
|
3 |
C |
|
|
1 |
111d |
121d
|
28/29 |
never |
0b88bfa42e54
NFSD: net ref data still needs to be freed even if net hasn't startup
|
|
WARNING: locking bug in nci_close_device (3)
net
nfc
|
4 |
|
|
|
10 |
78d |
99d
|
28/29 |
never |
d2492688bb9f
nfc: nci: Fix race between rfkill and nci_unregister_device().
|
|
memory leak in llcp_sock_create
net
nfc
|
3 |
C |
|
|
6 |
99d |
82d
|
28/29 |
never |
165c34fb6068
nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
|
|
WARNING in drm_atomic_helper_wait_for_vblanks (5)
dri
|
-1 |
syz |
|
|
360 |
3h42m |
128d
|
2/29 |
never |
drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks()
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
exfat
f2fs
jfs
|
1 |
C |
done |
|
4117 |
2d10h |
1035d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
KASAN: slab-use-after-free Read in rpm_suspend
pm
|
19 |
|
|
|
3 |
121d |
218d
|
27/29 |
never |
29ab76827761
PM: runtime: Fix a race condition related to device removal
|
|
KFENCE: invalid free in gid_table_release_one
rdma
|
24 |
C |
error |
|
5478 |
3d11h |
16d
|
2/29 |
never |
RDMA/core: Fix memory free for GID table
|
|
unregister_netdevice: waiting for DEV to become free (8)
net
|
2 |
C |
done |
|
443419 |
2h11m |
1042d
|
20/29 |
never |
9af0feae8016
RDMA/core: Fix stale RoCE GIDs during netdev events at registration
fa3c411d21eb
RDMA/core: always drop device refcount in ib_del_sub_device_and_put()
f12b69d8f228
batman-adv: Release references to inactive interfaces
ec69daabe452
bpf: Fix reference count leak in bpf_prog_test_run_xdp()
7fcbe5b2c6a4
can: j1939: implement NETDEV_UNREGISTER notification handler
5d5602236f5d
can: j1939: make j1939_session_activate() fail if device is no longer registered
ac782f4e3bfc
ipv4: Fix reference count leak when using error routes with nexthop objects
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
team: avoid NETDEV_CHANGEMTU event when unregistering slave
xfrm: always flush state and policy upon NETDEV_UNREGISTER event
|
|
general protection fault in to_utf8
serial
|
2 |
C |
error |
|
37 |
78d |
79d
|
28/29 |
never |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
general protection fault in k_pad
serial
|
2 |
C |
error |
|
20 |
78d |
79d
|
28/29 |
never |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
BUG: unable to handle kernel paging request in sk_skb_reason_drop
hams
|
22 |
C |
|
|
39 |
2d02h |
91d
|
28/29 |
never |
ba1096c31528
netrom: fix double-free in nr_route_frame()
|
|
kernel BUG in netfs_limit_iter
netfs
|
-1 |
C |
|
|
371 |
19d |
41d
|
26/29 |
never |
67e467a11f62
netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators
|
|
general protection fault in qt2_read_bulk_callback (2)
usb
|
2 |
C |
error |
|
44 |
78d |
79d
|
28/29 |
never |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
general protection fault in fn_enter
serial
|
2 |
C |
error |
|
6 |
78d |
79d
|
28/29 |
never |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
BUG: unable to handle kernel NULL pointer dereference in netfs_unbuffered_write
netfs
|
19 |
C |
|
|
492 |
3h18m |
41d
|
26/29 |
never |
e9075e420a1e
netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry
|
|
KASAN: slab-use-after-free Read in nft_array_get_cmp
netfilter
|
19 |
C |
error |
|
5 |
78d |
78d
|
28/29 |
never |
35f83a75529a
netfilter: nft_set_rbtree: don't gc elements on insert
|
|
general protection fault in squashfs_copy_data
squashfs
|
2 |
C |
error |
|
4 |
62d |
60d
|
28/29 |
never |
fdb24a820a58
Squashfs: check metadata block offset is within range
|
|
possible deadlock in nf_tables_dumpreset_obj
netfilter
|
4 |
|
|
|
1 |
122d |
118d
|
28/29 |
never |
7f261bb906bf
netfilter: nf_tables: revert commit_mutex usage in reset path
|
|
WARNING in nft_map_deactivate
netfilter
|
-1 |
C |
error |
|
5 |
45d |
56d
|
28/29 |
never |
fb7fb4016300
netfilter: nf_tables: clone set on flush only
|
|
KASAN: use-after-free Read in nf_hook_entry_head
netfilter
|
19 |
syz |
error |
|
62 |
32d |
56d
|
28/29 |
never |
b7cdc5a97d02
netfilter: nf_tables: Fix for duplicate device in netdev hooks
|
|
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts
squashfs
|
-1 |
C |
error |
|
4 |
20d |
58d
|
2/29 |
never |
Squashfs: check xz dictionary size isn't zero
|
|
KMSAN: uninit-value in netif_skb_features (4)
net
|
7 |
C |
|
|
116 |
15d |
191d
|
26/29 |
never |
ddc748a391dd
net: use skb_header_pointer() for TCPv4 GSO frag_off check
|
|
INFO: task hung in rpm_resume (2)
usb
pm
|
1 |
C |
|
|
17 |
60d |
185d
|
27/29 |
never |
069c8f5aebe4
net: usb: aqc111: Do not perform PM inside suspend callback
|
|
WARNING in u32_change (2)
net
|
-1 |
C |
error |
|
760 |
2d00h |
43d
|
25/29 |
never |
34bd3c6b0bd3
net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode()
|
|
WARNING in handle_userfault
mm
|
-1 |
C |
error |
|
71 |
1009d |
1016d
|
1/29 |
never |
mm: fix a lockdep issue in vma_assert_write_locked
|
|
memory leak in fscrypt_setup_filename
fscrypt
f2fs
|
3 |
C |
|
|
1 |
44d |
44d
|
2/29 |
never |
f2fs: fix to avoid memory leak in f2fs_rename()
|
|
KASAN: global-out-of-bounds Read in ip6gre_header
net
|
17 |
C |
error |
|
3 |
12d |
15d
|
25/29 |
never |
b120e4432f9f
net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
|
|
INFO: task hung in usb_bulk_msg (2)
usb
|
1 |
C |
|
|
8 |
38d |
67d
|
28/29 |
never |
7784caa413a8
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
|
|
kernel BUG in pfkey_send_migrate
net
|
-1 |
C |
error |
|
3 |
26d |
33d
|
26/29 |
never |
eb2d16a7d599
af_key: validate families in pfkey_send_migrate()
|
|
BUG: unable to handle kernel paging request in ip_route_output_key_hash_rcu
net
|
17 |
C |
|
|
910 |
42d |
62d
|
28/29 |
never |
21ec92774d15
net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
|
|
KMSAN: uninit-value in sixpack_receive_buf (4)
hams
|
7 |
|
|
|
8 |
94d |
142d
|
25/29 |
never |
bf9a38803b26
net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
|
|
WARNING in fpsimd_restore_current_state
arm
|
-1 |
C |
|
|
27 |
71d |
163d
|
28/29 |
never |
128a7494a9f1
arm64/fpsimd: ptrace: Fix SVE writes on !SME systems
|
|
upstream test error: WARNING in enqueue_to_backlog
net
|
-1 |
|
|
|
70 |
56d |
63d
|
28/29 |
never |
net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT
|
|
WARNING in filename_mkdirat
gfs2
|
-1 |
C |
|
|
80 |
19h41m |
59d
|
21/29 |
never |
2ff7cf7e0640
gfs2: Call unlock_new_inode before d_instantiate
|
|
WARNING in br_multicast_del_pg
bridge
|
-1 |
|
|
|
2 |
60d |
66d
|
28/29 |
never |
8b769e311a86
net: bridge: mcast: always update mdb_n_entries for vlan contexts
|
|
KCSAN: data-race in br_fdb_update / br_fdb_update (8)
bridge
|
6 |
|
|
|
44 |
100d |
99d
|
28/29 |
never |
b25a0b4a2193
net: bridge: annotate data-races around fdb->{updated,used}
|
|
BUG: using __this_cpu_read() in preemptible code in __delay
arm
|
4 |
|
|
|
1 |
53d |
49d
|
28/29 |
never |
e5cb94ba5f96
arm64: Fix sampling the "stable" virtual counter in preemptible section
|
|
KASAN: slab-use-after-free Write in arp_create
net
|
22 |
|
|
|
2 |
29d |
99d
|
28/29 |
never |
c92510f5e3f8
arp: do not assume dev_hard_header() does not change skb->head
|
|
UBSAN: shift-out-of-bounds in ata_qc_issue
ide
|
-1 |
|
|
|
4 |
60d |
58d
|
28/29 |
never |
eddb98ad9364
ata: libata-eh: correctly handle deferred qc timeouts
|
|
general protection fault in sigd_send
net
|
11 |
C |
error |
|
10 |
71d |
168d
|
28/29 |
never |
ae88a5d2f29b
net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
|
|
WARNING in ata_scsi_deferred_qc_work
ide
|
-1 |
|
|
|
2 |
45d |
51d
|
28/29 |
never |
aac9b27f7c1f
ata: libata: cancel pending work after clearing deferred_qc
|
|
KCSAN: data-race in sk_psock_drop / unix_stream_sendmsg
bpf
net
|
6 |
|
|
|
1 |
57d |
50d
|
28/29 |
never |
2ef2b20cf4e0
net: annotate data-races around sk->sk_{data_ready,write_space}
|
|
general protection fault in lec_arp_clear_vccs
net
|
19 |
C |
error |
|
84 |
8d11h |
212d
|
28/29 |
never |
101bacb303e8
atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
|
|
KASAN: slab-use-after-free Read in sock_def_readable (2)
net
|
19 |
C |
|
|
70 |
8m |
39d
|
27/29 |
never |
922814879542
atm: lec: fix use-after-free in sock_def_readable()
|
|
KASAN: slab-use-after-free Read in __list_lru_walk_one (3)
mm
|
19 |
|
|
|
96 |
76d |
137d
|
28/29 |
never |
22150a7d401d
gfs2: Fix slab-use-after-free in qd_put
|
|
KASAN: null-ptr-deref Read in smc_tcp_syn_recv_sock
smc
|
11 |
C |
error |
inconclusive |
24 |
37d |
381d
|
27/29 |
never |
6d5e4538364b
net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
|
|
KASAN: use-after-free Write in iomap_write_end
iomap
|
22 |
|
|
|
6 |
76d |
76d
|
28/29 |
never |
faddeb848305
gfs2: Fix use-after-free in iomap inline data write path
|
|
KASAN: slab-use-after-free Read in qfq_search_class
net
|
19 |
|
|
|
1 |
94d |
94d
|
28/29 |
never |
3879cffd9d07
net/sched: sch_qfq: do not free existing class in qfq_change_class()
|
|
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2)
fs
|
7 |
syz |
|
|
875 |
199d |
365d
|
2/29 |
never |
bcachefs: Add missing ei_last_dirtied update
|
|
general protection fault in ife_tlv_meta_encode
net
|
2 |
C |
error |
|
6 |
84d |
85d
|
28/29 |
never |
27880b0b0d35
net/sched: act_ife: avoid possible NULL deref
|
|
BUG: unable to handle kernel paging request in tcf_idrinfo_destroy
net
|
8 |
|
|
|
1 |
128d |
124d
|
28/29 |
never |
adb25a46dc0a
net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy
|
|
general protection fault in __bch2_err_trace
fs
|
2 |
C |
done |
|
25 |
198d |
254d
|
2/29 |
never |
bcachefs: Delete faulty read_only/nochanges check in fs_open()
|
|
WARNING in bch2_fs_journal_start
fs
|
-1 |
C |
done |
|
14 |
300d |
320d
|
2/29 |
never |
bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
|
|
WARNING in closure_put_after_sub
fs
|
-1 |
|
|
|
2 |
250d |
274d
|
2/29 |
never |
bcachefs: Ensure we don't return with closure on waitlist
|
|
KASAN: slab-use-after-free Write in bch2_get_next_dev
fs
|
22 |
C |
|
|
1331 |
178d |
272d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
KASAN: slab-use-after-free Write in bch2_do_discards
fs
|
22 |
syz |
|
|
137 |
199d |
269d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
KASAN: use-after-free Read in check_dirent
fs
|
19 |
C |
done |
|
13 |
237d |
419d
|
2/29 |
never |
bcachefs: Fix UAF in check_dirent()
|
|
KASAN: use-after-free Read in bch2_check_dirents
fs
|
19 |
C |
done |
|
769 |
198d |
517d
|
2/29 |
never |
bcachefs: Fix UAF in check_dirent()
|
|
KASAN: slab-out-of-bounds Read in __bch2_alloc_to_v4
fs
|
17 |
|
|
|
20 |
286d |
284d
|
2/29 |
never |
bcachefs: Fix __bch2_alloc_to_v4 copy
|
|
kernel BUG in __journal_res_get (3)
fs
|
-1 |
C |
inconclusive |
|
175 |
179d |
302d
|
2/29 |
never |
bcachefs: Fix __bch2_fs_read_write() error path
|
|
kernel BUG in bio_chain
gfs2
block
|
-1 |
C |
error |
|
5696 |
86d |
130d
|
28/29 |
never |
4a94f052e098
gfs2: Initialize bio->bi_opf early
|
|
general protection fault in rose_transmit_link (4)
hams
|
21 |
C |
error |
|
2058 |
20d |
91d
|
27/29 |
never |
e1f0a18c9564
net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
|
|
possible deadlock in inet6_getname
net
|
4 |
C |
error |
|
122 |
49d |
62d
|
28/29 |
never |
021fd0f87004
net/rds: fix recursive lock in rds_tcp_conn_slots_available
|
|
KASAN: slab-use-after-free Read in rds_conn_path_drop
rds
|
19 |
|
|
|
1 |
42d |
42d
|
25/29 |
never |
ebf71dd4aff4
net/rds: Restrict use of RDS/IB to the initial network namespace
|
|
possible deadlock in rds_tcp_tune (2)
rds
|
4 |
|
|
|
1 |
53d |
49d
|
28/29 |
never |
6a877ececd6d
net/rds: Fix circular locking dependency in rds_tcp_tune
|
|
WARNING in bch2_dev_free (2)
fs
|
-1 |
C |
done |
|
5 |
268d |
273d
|
2/29 |
never |
bcachefs: Fix __bch2_fs_read_write() error path
|
|
general protection fault in rds_tcp_accept_one
rds
|
19 |
C |
|
|
1334 |
55d |
66d
|
28/29 |
never |
6bf45704a92a
net/rds: Fix NULL pointer dereference in rds_tcp_accept_one
|
|
kernel panic: in transaction restart: transaction_restart_relock, last restarted by
fs
|
2 |
|
|
|
5 |
260d |
260d
|
2/29 |
never |
bcachefs: Fix incorrect transaction handling
|
|
BUG: unable to handle kernel paging request in bond_rr_gen_slave_id (3)
net
|
8 |
|
|
|
13 |
28d |
62d
|
25/29 |
never |
1921f91298d1
net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
|
|
KMSAN: uninit-value in bch2_check_subvols
fs
|
7 |
C |
|
|
53 |
200d |
289d
|
2/29 |
never |
bcachefs: Fix missing compat code in check_subvol()
|
|
WARNING in mptcp_pm_nl_del_addr_doit
mptcp
|
-1 |
|
|
|
30 |
44d |
173d
|
28/29 |
never |
d191101dee25
mptcp: pm: in-kernel: always set ID as avail when rm endp
|
|
KASAN: stack-out-of-bounds Read in mptcp_pm_nl_get_local_id
mptcp
|
17 |
|
|
|
1 |
102d |
85d
|
28/29 |
never |
e2a9eeb69f7d
mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
|
|
KASAN: slab-use-after-free Read in clone_mnt
fs
|
19 |
|
|
|
130 |
50d |
61d
|
28/29 |
never |
a41dbf5e004e
mount: hold namespace_sem across copy in create_new_namespace()
|
|
general protection fault in __umount_mnt
fs
|
2 |
C |
error |
|
21 |
17d |
27d
|
25/29 |
never |
ad4999496e73
mount: always duplicate mount
|
|
kernel BUG in mfill_atomic_copy
mm
|
-1 |
C |
error |
|
3 |
1011d |
1008d
|
1/29 |
never |
mm: userfaultfd: check for start + len overflow in validate_range: fix
|
|
WARNING in kvm_gmem_fault_user_mapping
kvm
|
-1 |
C |
error |
|
3 |
63d |
76d
|
28/29 |
never |
dd085fe9a8eb
mm: thp: deny THP for files on anonymous inodes
|
|
KASAN: slab-use-after-free Read in move_pages_pte
mm
|
19 |
C |
done |
|
3 |
497d |
495d
|
1/29 |
never |
mm: pgtable: make ptlock be freed by RCU
|
|
kernel BUG in vma_replace_policy
mm
|
-1 |
C |
done |
|
6 |
945d |
954d
|
1/29 |
never |
mm: lock VMAs skipped by a failed queue_pages_range()
|
|
WARNING in folio_memcg
mm
|
-1 |
C |
done |
|
3851 |
122d |
605d
|
1/29 |
never |
mm: kmem: fix split_page_memcg()
|
|
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name
fs
|
21 |
C |
error |
|
1496 |
178d |
303d
|
2/29 |
never |
bcachefs: Fix padding zeroout when creating casefolded dirents
|
|
general protection fault in follow_pfnmap_start
kernel
|
2 |
C |
|
|
38 |
548d |
562d
|
1/29 |
never |
mm: fix null pointer dereference in pfnmap_lockdep_assert
|
|
WARNING in follow_pte
kernel
|
-1 |
C |
|
|
230 |
572d |
652d
|
1/29 |
never |
mm: fix mmap_assert_locked() in follow_pte()
|
|
WARNING in deferred_split_folio
mm
|
-1 |
syz |
error |
|
4 |
16d |
15d
|
21/29 |
never |
3bac01168982
mm: fix deferred split queue races during migration
|
|
general protection fault in usb_gadget_udc_reset (4)
usb
|
2 |
C |
error |
|
16 |
33d |
173d
|
26/29 |
never |
616a63ff495d
USB: dummy-hcd: Fix locking/synchronization error
|
|
KASAN: slab-out-of-bounds Read in xlog_cksum
xfs
|
17 |
C |
error |
|
15 |
92d |
408d
|
28/29 |
never |
44b9553c3dd0
xfs: validate log record version against superblock log version
|
|
general protection fault in aead_recvmsg
crypto
|
2 |
C |
error |
|
165 |
1d12h |
13d
|
25/29 |
never |
3d14bd48e3a7
crypto: algif_aead - Fix minimum RX size check for decryption
|
|
INFO: task hung in bch2_readahead
fs
|
1 |
C |
done |
|
375 |
215d |
696d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
KASAN: slab-out-of-bounds Read in shrink_folio_list
mm
|
19 |
C |
|
|
683 |
1012d |
1012d
|
1/29 |
never |
mm: call folio_mapping() inside folio_needs_release()
|
|
kernel BUG in __kmap_local_pfn_prot
mm
|
-1 |
|
|
|
1 |
36d |
32d
|
26/29 |
never |
631c1111501f
mm/zswap: add missing kunmap_local()
|
|
INFO: rcu detected stall in purge_vmap_node
mm
|
1 |
C |
error |
|
2 |
98d |
94d
|
28/29 |
never |
5747435e0fd4
mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
|
|
INFO: task hung in bchfs_fallocate (2)
fs
|
1 |
C |
done |
inconclusive |
6 |
243d |
470d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
KASAN: slab-use-after-free Read in folio_remove_rmap_ptes
mm
|
19 |
|
|
|
1 |
116d |
111d
|
28/29 |
never |
61f67c230a5e
mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
|
|
WARNING in folio_remove_rmap_ptes
mm
|
-1 |
C |
|
|
1 |
102d |
114d
|
28/29 |
never |
61f67c230a5e
mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
|
|
memory leak in __shmem_file_setup
fs
|
3 |
C |
|
|
1 |
98d |
94d
|
28/29 |
never |
605f6586ecf7
mm/vma: do not leak memory when .mmap_prepare swaps the file
|
|
WARNING in folio_lruvec_lock
cgroups
mm
|
-1 |
|
|
|
1 |
305d |
301d
|
2/29 |
never |
mm/vma: correctly invoke late KSM check after mmap hook
|
|
memory leak in __kthread_create_on_node
gfs2
|
3 |
C |
|
|
1 |
77d |
76d
|
28/29 |
never |
da6f5bbc2e79
gfs2: fix memory leaks in gfs2_fill_super error path
|
|
kernel BUG in resv_map_release (3)
mm
|
-1 |
C |
inconclusive |
error |
35 |
12d |
520d
|
21/29 |
never |
0217c7fb4de4
mm/userfaultfd: fix hugetlb fault mutex hash calculation
|
|
kernel BUG in swap_cgroup_record (2)
mm
cgroups
|
-1 |
C |
error |
|
227 |
93d |
97d
|
2/29 |
never |
mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
|
|
KASAN: slab-use-after-free Read in mremap
mm
|
19 |
C |
done |
|
122 |
240d |
244d
|
2/29 |
never |
mm/mremap: do not incorrectly reference invalid VMA in VM_WARN_ON_ONCE()
|
|
INFO: task hung in bch2_page_fault
exfat
ext4
ntfs3
|
1 |
syz |
done |
|
42 |
239d |
489d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
general protection fault in vma_interval_tree_remove
mm
|
10 |
C |
done |
|
14 |
687d |
1445d
|
1/29 |
never |
mm/mmap: fix advanced maple tree API for mmap_region()
mm/mmap: qvoid dereferencing next on null in BUG_ON()
|
|
memory leak in __build_skb (4)
net
|
3 |
C |
|
|
1 |
97d |
94d
|
28/29 |
never |
9a56796ad258
gue: Fix skb memleak with inner IP protocol 0.
|
|
kernel BUG in hfs_new_inode
hfs
|
-1 |
C |
done |
error |
4 |
104d |
175d
|
28/29 |
never |
b226804532a8
hfs: Replace BUG_ON with error handling for CNID count checks
|
|
WARNING in vma_merge
mm
|
-1 |
C |
done |
|
18115 |
871d |
1450d
|
1/29 |
never |
mm/mlock: use maple state in apply_mlockall_flags()
|
|
linux-next boot error: WARNING in prepare_kswapd_sleep
mm
|
-1 |
|
|
|
15 |
1968d |
1969d
|
1/29 |
never |
mm/memcg: warn on missing memcg on mem_cgroup_page_lruvec()
|
|
BUG: sleeping function called from invalid context in procfs_procmap_ioctl
fs
|
5 |
syz |
done |
|
101 |
286d |
288d
|
2/29 |
never |
mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
|
|
linux-next test error: WARNING in vma_merge
mm
|
-1 |
|
|
|
6 |
1177d |
1178d
|
1/29 |
never |
mm/madvise: fix VMA_ITERATOR start position
|
|
INFO: task hung in bchfs_fpunch (2)
fs
mm
|
1 |
C |
done |
|
2 |
252d |
296d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
possible deadlock in collapse_file
mm
|
4 |
C |
done |
|
189 |
1138d |
1139d
|
1/29 |
never |
mm/khugepaged: fix vm_lock/i_mmap_rwsem inversion in retract_page_tables
|
|
INFO: task hung in pipe_release (6)
fs
|
1 |
syz |
done |
|
18 |
4h09m |
413d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
KMSAN: uninit-value in __bch2_alloc_v4_to_text
fs
|
7 |
C |
|
|
3 |
298d |
303d
|
2/29 |
never |
bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
|
|
kernel BUG in bch2_fill_extent (2)
fs
|
-1 |
|
|
|
10 |
193d |
275d
|
2/29 |
never |
bcachefs: Fix unhandled key type in fiemap_fill_extent
|
|
UBSAN: array-index-out-of-bounds in bch2_accounting_validate
fs
|
15 |
C |
done |
|
23 |
188d |
255d
|
2/29 |
never |
bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
|
|
kernel BUG in collapse_file (3)
mm
|
-1 |
C |
done |
|
14 |
998d |
1004d
|
1/29 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
KASAN: slab-use-after-free Read in madvise_collapse
mm
|
19 |
C |
error |
|
5 |
998d |
998d
|
1/29 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
BUG: unable to handle kernel paging request in alloc_huge_page
mm
|
8 |
C |
unreliable |
|
491 |
1707d |
1706d
|
1/29 |
never |
mm/hugetlb: Initialize page to NULL in alloc_buddy_huge_page_with_mpol()
|
|
general protection fault in shmem_mapping
mm
|
2 |
C |
done |
|
17 |
424d |
426d
|
1/29 |
never |
mm/huge_memory: do not drop the original folio during truncate
|
|
WARNING in bchfs_truncate
fs
|
-1 |
C |
done |
|
366 |
202d |
712d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
WARNING in vmap_pages_range_noflush (2)
bpf
net
|
-1 |
C |
error |
|
250 |
1332d |
1334d
|
1/29 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
general protection fault in vma_is_shmem
mm
io-uring
|
2 |
C |
error |
|
28 |
1333d |
1334d
|
1/29 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
KASAN: slab-out-of-bounds Read in af_alg_pull_tsgl
crypto
|
19 |
C |
error |
|
3375 |
1d08h |
13d
|
25/29 |
never |
31d00156e50e
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
|
|
WARNING in page_add_anon_rmap
mm
|
-1 |
C |
done |
|
1041 |
940d |
941d
|
1/29 |
never |
mm-rmap-simplify-pageanonexclusive-sanity-checks-when-adding-anon-rmap-fix
|
|
INFO: task hung in __closure_sync
fs
|
1 |
C |
done |
|
8591 |
186d |
713d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
INFO: task hung in bch2_copygc_stop
kernel
|
1 |
C |
done |
|
31386 |
186d |
685d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
INFO: task hung in __bch2_fs_stop
fs
|
1 |
C |
done |
|
1589 |
195d |
670d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
kernel BUG in bch2_btree_repair_topology_recurse
fs
|
-1 |
C |
done |
|
7 |
199d |
259d
|
2/29 |
never |
bcachefs: btree_check_root_boundaries()
|
|
kernel BUG in bch2_printbuf_exit
fs
|
-1 |
C |
error |
|
29 |
269d |
273d
|
2/29 |
never |
bcachefs: convert str_hash.c to CLASS
|
|
memory leak in do_cmd_ioctl
comedi
|
3 |
C |
|
|
2 |
38d |
122d
|
26/29 |
never |
29f644f14b89
comedi: runflags cannot determine whether to reclaim chanlist
|
|
memory leak in hfs_init_fs_context
hfs
|
3 |
C |
|
|
2 |
98d |
154d
|
28/29 |
never |
05ce49a902be
hfs: ensure sb->s_fs_info is always cleaned up
|
|
WARNING in bch2_verify_accounting_clean
fs
|
-1 |
|
|
|
29 |
182d |
432d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
kernel BUG in folio_flags
mm
|
-1 |
|
|
|
62 |
743d |
1190d
|
1/29 |
never |
mm-reimplement-compound_nr-fix
|
|
KASAN: slab-use-after-free Read in finish_fault
mm
|
19 |
C |
done |
|
8 |
670d |
672d
|
1/29 |
never |
mm-memory-extend-finish_fault-to-support-large-folio-fix
|
|
kernel BUG in do_bch2_trans_commit_to_journal_replay
fs
|
-1 |
syz |
|
|
22 |
267d |
270d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
kernel BUG in bch2_btree_path_peek_slot
fs
|
-1 |
C |
error |
error |
1546 |
325d |
503d
|
2/29 |
never |
bcachefs: fix assert in bch2_btree_path_traverse_cached()
|
|
KASAN: use-after-free Read in check_extent_overbig
fs
|
19 |
C |
done |
done |
18 |
215d |
497d
|
2/29 |
never |
bcachefs: fix check_extent_overbig() call
|
|
WARNING in bch2_prt_printf
fs
|
-1 |
C |
done |
error |
103 |
201d |
706d
|
2/29 |
never |
bcachefs: journal_entry_btree_keys_to_text() is more careful
|
|
general protection fault in bch2_prt_vprintf
fs
|
2 |
C |
error |
inconclusive |
4 |
466d |
503d
|
2/29 |
never |
bcachefs: journal_entry_btree_keys_to_text() is more careful
|
|
KASAN: slab-use-after-free Read in do_sync_mmap_readahead
mm
|
19 |
C |
done |
|
3 |
299d |
302d
|
2/29 |
never |
mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
|
|
KMSAN: uninit-value in hfsplus_strcasecmp (2)
hfs
|
7 |
C |
|
|
3 |
6d15h |
87d
|
25/29 |
never |
b6b592275aef
hfsplus: fix uninit-value by validating catalog record size
|
|
linux-next test error: kernel BUG in folio_add_new_anon_rmap
mm
|
-1 |
|
|
|
2 |
556d |
555d
|
1/29 |
never |
mm-add-pageanonnotksm-fix
|
|
WARNING in wbt_init_enable_default
block
|
-1 |
C |
error |
|
491 |
1d14h |
112d
|
25/29 |
never |
e9b004ff8306
blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
|
|
general protection fault in bio_alloc_bioset
block
|
2 |
syz |
error |
|
5 |
24d |
27d
|
25/29 |
never |
67807fbaf127
block: fix bio_alloc_bioset slowpath GFP handling
|
|
linux-next boot error: WARNING in kmem_cache_free
fs
|
-1 |
|
|
|
45 |
2121d |
2124d
|
1/29 |
never |
mm, slab/slub: improve error reporting and overhead of cache_from_obj()-fix
|
|
BUG: unable to handle kernel paging request in dt2815_attach
comedi
|
8 |
C |
|
|
4 |
83d |
82d
|
26/29 |
never |
93853512f565
comedi: dt2815: add hardware detection to prevent crash
|
|
KCSAN: data-race in bond_rcv_validate / bond_rcv_validate (2)
net
|
6 |
|
|
|
1 |
86d |
86d
|
28/29 |
never |
f6c3665b6dc5
bonding: annotate data-races around slave->last_rx
|
|
UBSAN: shift-out-of-bounds in minix_statfs
fs
|
-1 |
C |
inconclusive |
error |
75 |
80d |
1585d
|
28/29 |
never |
8c97a6ddc956
minix: Add required sanity checking to minix_check_superblock()
|
|
KASAN: global-out-of-bounds Read in __hw_addr_add_ex (4)
net
|
17 |
|
|
|
1 |
106d |
93d
|
28/29 |
never |
c84fcb79e5db
bonding: limit BOND_MODE_8023AD to Ethernet devices
|
|
INFO: task hung in __rmap_walk_file
mm
|
1 |
C |
error |
|
7 |
98d |
188d
|
28/29 |
never |
b7880cb166ab
migrate: correct lock ordering for hugetlb file folios
|
|
WARNING: suspicious RCU usage in mas_walk (3)
mm
|
4 |
C |
done |
|
12 |
905d |
919d
|
1/29 |
never |
mempolicy: migration attempt to match interleave nodes: fix
|
|
BUG: stack guard page was hit in addrconf_rs_timer
net
|
-1 |
|
|
|
1 |
33d |
33d
|
27/29 |
never |
b7405dcf7385
bonding: prevent potential infinite loop in bond_header_parse()
|
|
BUG: MAX_LOCK_DEPTH too low! (6)
net
|
-1 |
|
|
|
1 |
33d |
33d
|
27/29 |
never |
b7405dcf7385
bonding: prevent potential infinite loop in bond_header_parse()
|
|
KMSAN: uninit-value in vidtv_ts_null_write_into
media
|
7 |
C |
|
|
50 |
1d17h |
60d
|
21/29 |
never |
5f8e73bde67e
media: vidtv: fix pass-by-value structs causing MSAN warnings
|
|
memory leak in vidtv_psi_service_desc_init
media
|
3 |
C |
|
|
10 |
2d06h |
65d
|
21/29 |
never |
a0e5a598fe9a
media: vidtv: fix nfeeds state corruption on start_streaming failure
|
|
general protection fault in vidtv_psi_desc_assign
media
|
2 |
syz |
|
|
160 |
9d14h |
107d
|
21/29 |
never |
f8e1fc918a9f
media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
|
|
memory leak in v4l2_ctrl_handler_init_class (2)
usb
media
|
3 |
C |
|
|
14 |
78d |
142d
|
28/29 |
never |
b8bf939d77c0
media: radio-keene: fix memory leak in error path
|
|
WARNING in __skb_flow_dissect (7)
net
|
-1 |
|
|
|
275 |
93d |
86d
|
28/29 |
never |
5f9b32909659
bonding: provide a net pointer to __skb_flow_dissect()
|
|
WARNING in pvr2_send_request_ex
pvrusb2
usb
|
-1 |
C |
|
|
2 |
123d |
132d
|
28/29 |
never |
a8333c8262ae
media: pvrusb2: fix URB leak in pvr2_send_request_ex
|
|
KASAN: slab-use-after-free Write in number
media
|
22 |
C |
|
|
3 |
108d |
105d
|
28/29 |
never |
a260bd22a355
media: mc: fix potential use-after-free in media_request_alloc()
|
|
WARNING in ops_undo_list
net
|
-1 |
|
|
|
3 |
44d |
57d
|
28/29 |
never |
479d589b40b8
bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
|
|
KMSAN: uninit-value in erspan_build_header (2)
net
|
7 |
C |
|
|
344 |
2d10h |
755d
|
1/29 |
never |
bpf: Don't redirect too small packets
|
|
KASAN: slab-use-after-free Read in v4l2_release (2)
media
|
19 |
C |
error |
error |
6 |
7d19h |
235d
|
21/29 |
never |
3b7da2b4d0fe
media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
|
|
KMSAN: uninit-value in batadv_get_vid (2)
batman
|
7 |
C |
|
|
1172 |
2d08h |
835d
|
1/29 |
never |
bpf: Don't redirect too small packets
|
|
KASAN: slab-use-after-free Read in __video_do_ioctl
media
|
19 |
|
|
|
3 |
94d |
244d
|
21/29 |
never |
3b7da2b4d0fe
media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
|
|
inconsistent lock state in das16m1_interrupt
comedi
|
4 |
|
|
|
35 |
3d16h |
61d
|
26/29 |
never |
4b9a9a6d71e3
comedi: Reinit dev->spinlock between attachments to low-level drivers
|
|
KASAN: use-after-free Read in v4l2_fh_init
usb
media
|
19 |
C |
error |
inconclusive |
7807 |
4h10m |
2554d
|
21/29 |
never |
a66485a934c7
media: em28xx: fix use-after-free in em28xx_v4l2_open()
|
|
BUG: corrupted list in io_poll_remove_entries
media
|
8 |
C |
error |
|
8 |
54d |
66d
|
28/29 |
never |
bfbc0b5b32a8
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
|
|
KASAN: slab-use-after-free Write in as102_release (2)
media
|
22 |
|
|
|
155 |
9d11h |
349d
|
21/29 |
never |
8bd29dbe03fc
media: as102: fix to not free memory after the device is registered in as102_usb_probe()
|
|
WARNING in create_strip_zones
mm
|
-1 |
|
|
|
5 |
43d |
39d
|
25/29 |
never |
078d1d8e688d
md/raid0: use kvzalloc/kvfree for strip_zone and devlist allocations
|
|
KASAN: slab-use-after-free Read in macvlan_forward_source
net
|
19 |
|
|
|
16 |
76d |
98d
|
28/29 |
never |
f8db6475a836
macvlan: fix error recovery in macvlan_common_newlink()
7470a7a63dc1
macvlan: fix possible UAF in macvlan_forward_source()
|
|
KASAN: slab-out-of-bounds Read in ext4_search_dir
ext4
|
19 |
C |
|
|
5 |
113d |
197d
|
28/29 |
never |
08e136ebd193
loop: don't change loop device under exclusive opener in loop_set_status
|
|
general protection fault in rwsem_mark_wake
mm
|
2 |
C |
error |
|
9235 |
27d |
30d
|
25/29 |
never |
68bcd8b6e0b1
locking/rwsem: Fix logic error in rwsem_del_waiter()
|
|
WARNING: refcount bug in __add_used_btf
bpf
|
13 |
C |
error |
|
6 |
60d |
72d
|
28/29 |
never |
ccd2d799ed44
bpf: Fix a potential use-after-free of BTF object
|
|
KASAN: use-after-free Read in __linkwatch_run_queue
net
|
19 |
syz |
|
|
108 |
71d |
337d
|
28/29 |
never |
83b67cc9be92
linkwatch: use __dev_put() in callers to prevent UAF
|
|
BUG: corrupted list in dev_deactivate_many
net
|
8 |
C |
|
|
19 |
6h35m |
227d
|
28/29 |
never |
83b67cc9be92
linkwatch: use __dev_put() in callers to prevent UAF
|
|
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4)
fs
|
10 |
C |
done |
|
5746 |
86d |
516d
|
28/29 |
never |
777a8560fd29
lib/buildid: use __kernel_read() for sleepable context
|
|
INFO: task hung in restrict_one_thread_callback
lsm
kernel
|
1 |
C |
|
|
39 |
24d |
55d
|
26/29 |
never |
ff88df67dbf7
landlock: Serialize TSYNC thread restriction
|
|
kernel BUG in may_open (3)
hfs
|
-1 |
C |
error |
|
11 |
78d |
94d
|
28/29 |
never |
ed8889ca21b6
hfsplus: pretend special inodes as regular files
|
|
general protection fault in task_work_cancel
lsm
|
2 |
syz |
error |
|
15 |
21d |
40d
|
26/29 |
never |
929553bbb4cd
landlock: Fully release unused TSYNC work entries
|
|
general protection fault in bq_flush_to_queue (2)
bpf
net
|
2 |
C |
error |
error |
6 |
48d |
129d
|
28/29 |
never |
869c63d5975d
bpf: Fix race in cpumap on PREEMPT_RT
|
|
KASAN: stack-out-of-bounds Write in dev_map_enqueue_multi
bpf
net
|
21 |
|
|
|
1 |
44d |
44d
|
28/29 |
never |
b7bf516c3ecd
bpf: Fix stack-out-of-bounds write in devmap
|
|
general protection fault in task_work_cancel_match
kernel
|
2 |
|
|
|
10 |
27d |
55d
|
26/29 |
never |
929553bbb4cd
landlock: Fully release unused TSYNC work entries
|
|
WARNING in hfsplus_bnode_create
hfs
|
-1 |
C |
error |
|
1338 |
2d21h |
1231d
|
13/29 |
never |
hfsplus: return error when node already exists in hfs_bnode_create
hfsplus: validate b-tree node 0 bitmap at mount time
|
|
KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release (7)
net
|
6 |
|
|
|
18 |
89d |
91d
|
28/29 |
never |
7a29f6bf60f2
l2tp: avoid one data-race in l2tp_tunnel_del_work()
|
|
KASAN: stack-out-of-bounds Write in dev_map_redirect_multi
bpf
net
|
21 |
|
|
|
2 |
53d |
64d
|
28/29 |
never |
b7bf516c3ecd
bpf: Fix stack-out-of-bounds write in devmap
|
|
general protection fault in rebuild_sched_domains_locked
cgroups
|
2 |
C |
|
|
7 |
44d |
60d
|
28/29 |
never |
085f067389d1
cgroup/cpuset: fix null-ptr-deref in rebuild_sched_domains_cpuslocked
|
|
memory leak in l2tp_tunnel_create
net
|
3 |
C |
|
|
9 |
89d |
93d
|
28/29 |
never |
4d10edfd1475
l2tp: Fix memleak in l2tp_udp_encap_recv().
|
|
possible deadlock in lock_timer_base
bpf
trace
|
4 |
C |
|
|
142 |
456d |
1929d
|
1/29 |
never |
kfence: fix potential deadlock due to wake_up()
|
|
KASAN: slab-out-of-bounds Read in strnchr
bpf
|
17 |
C |
error |
|
14 |
96d |
101d
|
28/29 |
never |
9df5fad801c5
bpf: Reject BPF_MAP_TYPE_INSN_ARRAY in check_reg_const_str()
|
|
WARNING in do_notify_parent
kernel
|
-1 |
C |
error |
|
2428 |
38d |
47d
|
2/29 |
never |
kernel/fork: validate exit_signal in kernel_clone()
|
|
WARNING in kcm_write_msgs
net
|
-1 |
C |
done |
|
622 |
62d |
2219d
|
28/29 |
never |
ca220141fa8e
kcm: fix zero-frag skb in frag_list on partial sendmsg error
|
|
linux-next boot error: BUG: unable to handle kernel NULL pointer dereference in mempool_init_node
fs
ceph
|
-1 |
|
|
|
12 |
1981d |
1982d
|
1/29 |
never |
kasan-simplify-kasan_poison_kfree-temp-fix
|
|
WARNING in jfs_rename
jfs
|
-1 |
C |
inconclusive |
|
13 |
111d |
342d
|
28/29 |
never |
9218dc26fd92
jfs: nlink overflow in jfs_rename
|
|
general protection fault in lmLogSync (2)
jfs
|
22 |
C |
error |
|
8235 |
18h07m |
1295d
|
21/29 |
never |
ca5848ae87d2
jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
|
|
BUG: corrupted list in dbUpdatePMap
jfs
|
8 |
C |
error |
|
141 |
2d23h |
162d
|
21/29 |
never |
3c778ec88208
jfs: fix corrupted list in dbUpdatePMap
|
|
UBSAN: shift-out-of-bounds in dbSplit (3)
jfs
|
-1 |
C |
|
|
8 |
36d |
351d
|
21/29 |
never |
cce219b203c4
jfs: add dmapctl integrity check to prevent invalid operations
|
|
KCSAN: data-race in __inet_lookup_established / inet_put_port (5)
net
|
6 |
|
|
|
5 |
45d |
59d
|
28/29 |
never |
29252397bcc1
inet: annotate data-races around isk->inet_num
|
|
WARNING in reg_bounds_sanity_check (2)
bpf
|
-1 |
C |
done |
|
20146 |
2d14h |
223d
|
25/29 |
never |
b254c6d816e5
bpf: Simulate branches to prune based on range violations
|
|
general protection fault in blk_update_request
jfs
|
19 |
C |
error |
|
230 |
20h16m |
531d
|
21/29 |
never |
b15e4310633f
jfs: Set the lbmDone flag at the end of lbmIODone
|
|
KASAN: slab-use-after-free Read in inet6_addr_del (2)
net
|
19 |
|
|
|
1 |
129d |
94d
|
28/29 |
never |
ddf96c393a33
ipv6: Fix use-after-free in inet6_addr_del().
|
|
KASAN: slab-out-of-bounds Read in fib6_add_rt2node
net
|
17 |
C |
|
|
38 |
56d |
64d
|
28/29 |
never |
8244f959e2c1
ipv6: Fix out-of-bound access in fib6_add_rt2node().
|
|
kernel BUG in fib6_add_rt2node (2)
net
|
-1 |
C |
error |
|
18 |
80d |
100d
|
28/29 |
never |
bbf4a17ad9ff
ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
|
|
possible deadlock in sch_direct_xmit (5)
net
|
4 |
C |
unreliable |
|
1155 |
2h26m |
100d
|
28/29 |
never |
872ac785e768
ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
|
|
KMSAN: uninit-value in bpf_prog_test_run_skb
bpf
|
7 |
C |
|
|
4 |
26d |
106d
|
25/29 |
never |
12bec2bd4b76
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
|
|
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4)
bpf
net
|
19 |
|
|
|
1 |
17d |
16d
|
26/29 |
never |
ad8391d37f33
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
|
|
kernel BUG in ipgre_header (4)
net
|
-1 |
C |
|
|
9 |
89d |
98d
|
28/29 |
never |
e67c577d8989
ipv4: ip_gre: make ipgre_header() robust
|
|
general protection fault in btrfs_evict_inode
btrfs
|
2 |
C |
|
|
11 |
145d |
178d
|
28/29 |
never |
f157dd661339
btrfs: fix NULL dereference on root when tracing inode eviction
|
|
KCSAN: data-race in fib_table_lookup / fib_table_lookup (4)
net
|
6 |
|
|
|
1 |
80d |
79d
|
28/29 |
never |
6e84fc395e90
ipv4: fib: Annotate access to struct fib_alias.fa_state.
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate (3)
net
|
7 |
C |
|
|
4 |
99d |
99d
|
28/29 |
never |
81c734dae203
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
|
|
WARNING in nf_conntrack_cleanup_net_list
netfilter
|
-1 |
|
|
|
762 |
1d23h |
126d
|
28/29 |
never |
2ef02ac38d3c
inet: frags: drop fraglist conntrack references
|
|
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit
net
|
19 |
C |
error |
error |
33 |
105d |
513d
|
0/29 |
never |
ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
|
|
KASAN: slab-use-after-free Read in close_fs_devices
btrfs
|
19 |
|
|
|
22 |
290d |
294d
|
2/29 |
never |
btrfs: fix a use-after-free race if btrfs_open_devices() failed
|
|
INFO: task hung in btrfs_invalidate_folio (3)
btrfs
|
1 |
C |
error |
|
9 |
15d |
28d
|
25/29 |
never |
b48c980b6a7e
btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
|
|
KMSAN: uninit-value in pfn_reader_next
iommu
|
7 |
C |
|
|
395 |
75d |
82d
|
28/29 |
never |
2724138b2f7f
iommufd: Initialize batch->kind in batch_clear()
|
|
possible deadlock in __btrfs_release_delayed_node (5)
btrfs
|
4 |
|
|
|
2 |
90d |
118d
|
28/29 |
never |
1e1f2055ad5a
btrfs: release path before iget_failed() in btrfs_read_locked_inode()
|
|
WARNING in pt_iommu_amdv1_init
iommu
|
-1 |
C |
|
|
15 |
5d06h |
24d
|
2/29 |
never |
iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format
|
|
general protection fault in create_empty_buffers (5)
btrfs
|
2 |
C |
|
|
6 |
96d |
98d
|
28/29 |
never |
3f29d661e568
btrfs: sync read disk super and set block size
|
|
INFO: task hung in io_sq_thread_stop
fs
io-uring
|
1 |
C |
done |
|
211 |
1886d |
2045d
|
1/29 |
never |
io_uring: don't sleep schedule in SQPOLL thread if we need to park
|
|
KCSAN: data-race in io_waitid_complete / io_waitid_wait
io-uring
|
6 |
|
|
|
6 |
99d |
126d
|
28/29 |
never |
b994ace83a2b
io_uring/waitid: fix KCSAN warning on io_waitid->head
|
|
KCSAN: data-race in io_flush_timeouts / io_issue_sqe (2)
io-uring
|
6 |
|
|
|
58 |
71d |
296d
|
28/29 |
never |
42b12cb5fd45
io_uring/timeout: annotate data race in io_flush_timeouts()
|
|
INFO: task hung in io_wq_put_and_exit (6)
io-uring
|
1 |
C |
error |
|
74 |
82d |
241d
|
28/29 |
never |
10dc95939817
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
1f293098a313
io_uring/io-wq: don't trigger hung task for syzbot craziness
|
|
BUG: corrupted list in btrfs_free_compr_folio
btrfs
|
8 |
|
|
|
21 |
18d |
31d
|
26/29 |
never |
0dcabcb920a5
btrfs: zlib: handle page aligned compressed size correctly
|
|
INFO: trying to register non-static key in bcm_can_tx
can
|
-1 |
C |
error |
|
5 |
47d |
58d
|
28/29 |
never |
c35636e91e39
can: bcm: fix locking for bcm_op runtime updates
|
|
memory leak in es58x_open
usb
|
3 |
syz |
|
|
1 |
105d |
115d
|
28/29 |
never |
b1979778e985
can: etas_es58x: allow partial RX URB allocation to succeed
|
|
general protection fault in bio_seg_gap
block
|
2 |
C |
done |
|
231 |
156d |
153d
|
29/29 |
72d |
fd9ecd005252
block: fix merging data-less bios
|
|
WARNING in mdiobus_get_phy
net
usb
|
-1 |
syz |
|
|
2 |
112d |
122d
|
29/29 |
80d |
a1e077a3f76e
net: usb: asix: validate PHY address before use
|
|
KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor
wireless
|
19 |
C |
|
|
989 |
101d |
151d
|
29/29 |
80d |
cbf0dc37bb4e
wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor()
|
|
WARNING in ieee80211_determine_chan_mode
wireless
|
-1 |
C |
|
|
1 |
125d |
135d
|
29/29 |
80d |
99067b58a408
wifi: mac80211: don't WARN for connections on invalid channels
|
|
WARNING in nfc_dev_down
net
nfc
|
-1 |
C |
error |
|
12 |
107d |
122d
|
29/29 |
80d |
1ab526d97a57
net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
|
|
memory leak in rtl8150_set_multicast
net
usb
|
3 |
syz |
|
|
1 |
125d |
121d
|
29/29 |
80d |
12cab1191d98
net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
|
|
kernel BUG in ip6_pol_route (2)
net
|
-1 |
C |
error |
|
1134 |
107d |
152d
|
29/29 |
80d |
1adaea51c61b
ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
|
|
BUG: corrupted list in team_priority_option_set (6)
net
|
8 |
|
|
|
5 |
116d |
168d
|
29/29 |
80d |
932ac51d9953
team: fix check for port enabled in team_queue_override_port_prio_changed()
|
|
KMSAN: uninit-value in ib_nl_handle_ip_res_resp
rdma
|
7 |
C |
|
|
8 |
147d |
198d
|
29/29 |
80d |
a7b8e876e0ef
RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
|
|
WARNING in subflow_data_ready (4)
mptcp
|
-1 |
C |
|
|
556 |
102d |
239d
|
29/29 |
80d |
71154bbe4942
mptcp: fallback earlier on simult connection
|
|
WARNING in ieee80211_ocb_rx_no_sta (2)
wireless
|
-1 |
C |
|
|
7 |
128d |
144d
|
29/29 |
80d |
ff4071c60018
wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
|
|
kernel BUG in dql_completed
net
usb
|
-1 |
|
|
|
1 |
126d |
118d
|
29/29 |
80d |
e34f0df3d81a
usbnet: avoid a possible crash in dql_completed()
|
|
possible deadlock in io_uring_del_tctx_node
io-uring
|
4 |
|
|
|
6 |
106d |
107d
|
29/29 |
80d |
5623eb1ed035
io_uring/tctx: add separate lock for list of tctx's in ctx
|
|
WARNING in gid_table_release_one (3)
rdma
|
-1 |
C |
done |
|
455 |
103d |
338d
|
29/29 |
80d |
57f3cb6c8415
RDMA/cm: Fix leaking the multicast GID table reference
|
|
KASAN: invalid-access Write in do_bad_area
bpf
|
-1 |
C |
|
|
34838 |
108d |
193d
|
29/29 |
80d |
007f5da43b3d
mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN
|
|
kernel BUG in ip6gre_header (6)
net
|
-1 |
C |
|
|
127 |
108d |
126d
|
29/29 |
80d |
db5b4e39c4e6
ip6_gre: make ip6gre_header() robust
|
|
kernel BUG in sctp_getsockopt_peeloff_common
fs
|
-1 |
C |
done |
|
6 |
135d |
136d
|
29/29 |
81d |
afb9917d9b37
Revert "net/socket: convert sock_map_fd() to FD_ADD()"
|
|
kernel BUG in socket
fs
|
-1 |
C |
|
|
145 |
118d |
113d
|
29/29 |
81d |
afb9917d9b37
Revert "net/socket: convert sock_map_fd() to FD_ADD()"
|
|
KASAN: slab-use-after-free Read in br_switchdev_fdb_notify (2)
bridge
|
19 |
|
|
|
4 |
171d |
188d
|
29/29 |
84d |
8dca36978aa8
net: bridge: fix use-after-free due to MST port state bypass
|
|
WARNING in kvm_set_vm_id_reg
kvmarm
|
-1 |
C |
|
|
23 |
149d |
152d
|
29/29 |
85d |
0f559cd91e37
KVM: arm64: Finalize ID registers only once per VM
|
|
possible deadlock in ipv6_sock_mc_close (4)
net
|
4 |
C |
done |
|
7 |
131d |
129d
|
29/29 |
85d |
b98f06f9a5d3
sctp: Fetch inet6_sk() after setting ->pinet6 in sctp_clone_sock().
|
|
general protection fault in simple_xattrs_free
kernfs
|
10 |
|
|
|
350 |
110d |
127d
|
29/29 |
85d |
2b742094582d
fs/kernfs: null-ptr deref in simple_xattrs_free()
|
|
WARNING in iopt_map_pages (3)
iommu
|
-1 |
C |
|
|
4 |
124d |
129d
|
29/29 |
85d |
e6a973af1113
iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
|
|
memory leak in btrfs_read_chunk_tree
btrfs
|
3 |
C |
|
|
1 |
133d |
129d
|
29/29 |
85d |
b57f2ddd2873
btrfs: fix memory leak of fs_devices in degraded seed device path
|
|
memory leak in debugfs_change_name
fs
|
3 |
C |
|
|
1 |
133d |
129d
|
29/29 |
85d |
d412ff9e26eb
debugfs: Fix memleak in debugfs_change_name().
|
|
KASAN: invalid-free in inet_sock_destruct
net
|
24 |
C |
inconclusive |
|
10 |
119d |
129d
|
29/29 |
85d |
d7ff61e6f3ef
sctp: Clear inet_opt in sctp_v6_copy_ip_options().
|
|
KMSAN: uninit-value in skb_clone
batman
|
7 |
C |
|
|
3 |
144d |
142d
|
29/29 |
85d |
188e0fa5a679
net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
|
|
WARNING in minix_unlink
fs
|
-1 |
C |
inconclusive |
done |
458 |
128d |
510d
|
29/29 |
85d |
009a2ba40303
Fix a drop_nlink warning in minix_rename
|
|
kernel BUG in btrfs_qgroup_inherit
btrfs
|
-1 |
C |
|
|
4 |
125d |
129d
|
29/29 |
85d |
428e1b114c1a
Revert "btrfs: add ASSERTs on prealloc in qgroup functions"
|
|
KASAN: slab-use-after-free Write in defer_free
bpf
|
22 |
C |
|
|
238 |
116d |
129d
|
29/29 |
85d |
53ca00a19d34
mm/slub: reset KASAN tag in defer_free() before accessing freed memory
|
|
memory leak in getname_flags
fs
|
3 |
C |
|
|
1 |
113d |
113d
|
29/29 |
85d |
b14fad555302
io_uring: fix filename leak in __io_openat_prep()
|
|
kernel BUG in iommu_pages_start_incoherent
iommu
|
-1 |
|
|
|
3 |
117d |
127d
|
29/29 |
85d |
7a089c5d35aa
iommupt: Return ERR_PTR from _table_alloc()
|
|
memory leak in qgroup_reserve_data
btrfs
|
3 |
C |
|
|
1 |
129d |
126d
|
29/29 |
85d |
37343524f000
btrfs: fix changeset leak on mmap write after failure to reserve metadata
|
|
memory leak in prepare_creds (5)
lsm
|
3 |
C |
|
|
60 |
87d |
160d
|
29/29 |
85d |
df8d829bba3a
nfsd: fix memory leak in nfsd_create_serv error paths
|
|
WARNING in blkdev_common_ioctl
mm
|
-1 |
C |
|
|
5 |
128d |
126d
|
29/29 |
85d |
a58383fa45c7
block: add allocation size check in blkdev_pr_read_keys()
|
|
memory leak in nr_sendmsg
hams
|
3 |
C |
|
|
1 |
143d |
139d
|
29/29 |
85d |
613d12dd794e
netrom: Fix memory leak in nr_sendmsg()
|
|
KASAN: slab-use-after-free Read in driver_remove_file
fs
|
19 |
C |
error |
done |
296 |
132d |
261d
|
29/29 |
86d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
INFO: trying to register non-static key in ntfs_setattr
ntfs3
|
-1 |
C |
done |
done |
8 |
137d |
185d
|
29/29 |
99d |
be99c62ac7e7
ntfs3: init run lock for extend inode
|
|
KASAN: slab-out-of-bounds Write in __bpf_get_stackid
bpf
|
21 |
C |
error |
|
170 |
167d |
262d
|
29/29 |
99d |
23f852daa4ba
bpf: Fix stackmap overflow check in __bpf_get_stackid()
|
|
INFO: task hung in comedi_open
comedi
|
1 |
C |
|
|
24 |
116d |
255d
|
29/29 |
99d |
f24c6e3a39fa
comedi: multiq3: sanitize config options in multiq3_attach()
|
|
WARNING in get_next_unlocked_entry
erofs
|
-1 |
C |
|
|
8 |
135d |
150d
|
29/29 |
99d |
ebe4f3f6eb0c
erofs: correct FSDAX detection
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
7 |
C |
|
|
37 |
163d |
516d
|
29/29 |
99d |
5c5f1f64681c
Bluetooth: hci_event: validate skb length for unknown CC opcode
|
|
WARNING in memory_failure
mm
|
-1 |
C |
|
|
4 |
183d |
205d
|
29/29 |
99d |
77008e1b2ef7
mm/huge_memory: do not change split_huge_page*() target order silently
|
|
UBSAN: shift-out-of-bounds in sctp_transport_update_rto (2)
sctp
|
-1 |
|
|
|
1 |
162d |
161d
|
29/29 |
99d |
1534ff77757e
sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
|
|
INFO: trying to register non-static key in ntfs_set_size
ntfs3
|
-1 |
C |
done |
|
235 |
122d |
213d
|
29/29 |
99d |
be99c62ac7e7
ntfs3: init run lock for extend inode
|
|
KASAN: slab-use-after-free Read in br_switchdev_fdb_populate
bridge
|
19 |
|
|
|
1 |
170d |
164d
|
29/29 |
99d |
8dca36978aa8
net: bridge: fix use-after-free due to MST port state bypass
|
|
WARNING in tcf_classify
net
|
-1 |
|
|
|
2 |
161d |
170d
|
29/29 |
99d |
b8a7826e4b1a
net: sched: Don't use WARN_ON_ONCE() for -ENOMEM in tcf_classify().
|
|
kernel BUG in folio_set_bh
ntfs3
|
-1 |
C |
done |
|
202 |
100d |
288d
|
29/29 |
99d |
d1693a7d5a38
ntfs: set dummy blocksize to read boot_block when mounting
|
|
KASAN: slab-out-of-bounds Write in copy_to_urb
usb
sound
|
21 |
C |
|
|
33 |
102d |
162d
|
29/29 |
99d |
05a1fc5efdd8
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
|
|
memory leak in do_timer_create
kernel
|
3 |
C |
|
|
1 |
155d |
154d
|
29/29 |
99d |
e0fd4d42e27f
posix-timers: Plug potential memory leak in do_timer_create()
|
|
general protection fault in fd_install
fs
|
2 |
C |
|
|
64 |
132d |
133d
|
29/29 |
99d |
8cf01d0c4372
mqueue: correct the type of ro to int
|
|
WARNING in __rt_mutex_slowlock_locked (2)
exfat
|
-1 |
C |
done |
|
9 |
136d |
161d
|
29/29 |
99d |
866cba367541
exfat: validate the cluster bitmap bits of directory
|
|
BUG: unable to handle kernel NULL pointer dereference in posix_clock_ioctl
net
|
10 |
|
|
|
12 |
156d |
184d
|
29/29 |
99d |
329d050bbe63
gve: Implement settime64 with -EOPNOTSUPP
|
|
WARNING in f2fs_rename2 (2)
f2fs
|
-1 |
C |
|
|
5 |
172d |
185d
|
29/29 |
99d |
d33f89b34aa3
f2fs: invalidate dentry cache on failed whiteout creation
|
|
INFO: task hung in io_uring_del_tctx_node (5)
io-uring
|
1 |
C |
done |
|
19 |
113d |
171d
|
29/29 |
99d |
101e596e7404
io_uring/fdinfo: cap SQ iteration at max SQ entries
|
|
WARNING in __blk_add_trace
trace
block
|
-1 |
C |
done |
|
94 |
170d |
174d
|
29/29 |
99d |
4a0940bdcac2
blktrace: use debug print to report dropped events
|
|
WARNING in minix_rmdir
fs
|
-1 |
C |
inconclusive |
|
92 |
149d |
463d
|
29/29 |
99d |
d3e0e8661ceb
Fix a drop_nlink warning in minix_rmdir
|
|
WARNING in nsproxy_ns_active_get
fs
|
-1 |
C |
|
|
377 |
155d |
162d
|
29/29 |
99d |
cefd55bd2159
nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
|
|
kernel BUG in __update_extent_tree_range
f2fs
|
-1 |
|
|
|
18 |
129d |
191d
|
29/29 |
99d |
7c37c7951032
f2fs: fix to avoid updating zero-sized extent in extent cache
|
|
kernel BUG in hfsplus_bnode_put
hfs
|
-1 |
C |
error |
|
180 |
138d |
1184d
|
29/29 |
99d |
152af1142878
hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
|
|
KASAN: global-out-of-bounds Read in bit_putcs (3)
fbdev
|
17 |
C |
|
|
58 |
172d |
624d
|
29/29 |
99d |
18c4ef4e765a
fbdev: bitblit: bound-check glyph index in bit_putcs*
|
|
WARNING in em_nbyte_match
net
|
-1 |
C |
done |
|
7 |
131d |
146d
|
29/29 |
99d |
4fe5a00ec707
net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
|
|
BUG: unable to handle kernel NULL pointer dereference in pc_clock_gettime
net
|
10 |
|
|
|
7 |
161d |
173d
|
29/29 |
99d |
6ab753b5d8e5
gve: Implement gettimex64 with -EOPNOTSUPP
|
|
WARNING: refcount bug in __vma_enter_locked
mm
|
13 |
C |
done |
|
27 |
135d |
143d
|
29/29 |
99d |
faf3c923523e
mm: fix vma_start_write_killable() signal handling
|
|
KMSAN: uninit-value in pctv452e_i2c_msg
media
|
7 |
|
|
|
65 |
135d |
188d
|
29/29 |
99d |
1a31cb278210
media: dvb-usb: pctv452e: move snd/rcv len check before kmalloc
|
|
KASAN: slab-use-after-free Write in kvm_gmem_release
kvm
|
22 |
C |
done |
|
12 |
125d |
175d
|
29/29 |
99d |
ae431059e75d
KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
|
|
kernel BUG in may_open (2)
fs
|
-1 |
C |
done |
|
17716 |
99d |
282d
|
29/29 |
99d |
34ab4c75588c
bfs: Reconstruct file type when loading from disk
7f9d34b0a7cb
cramfs: Verify inode mode when loading from disk
005d4b0d33f6
hfsplus: Verify inode mode when loading from disk
0a9e74051313
isofs: Verify inode mode when loading from disk
7a5aa54fba2b
jfs: Verify inode mode when loading from disk
73861970938a
minixfs: Verify inode mode when loading from disk
4aead50caf67
nilfs2: reject invalid file types when reading inodes
4e8011ffec79
ntfs3: pretend $Extend records as regular files
bc107a619f02
squashfs: verify inode mode when loading from disk
|
|
memory leak in io_submit_sqes (5)
io-uring
|
3 |
syz |
|
|
3 |
136d |
136d
|
29/29 |
99d |
84230ad2d2af
io_uring/poll: correctly handle io_poll_add() return value on update
|
|
KMSAN: kernel-infoleak in hugetlbfs_read_iter
fs
mm
|
9 |
C |
|
|
7 |
158d |
157d
|
29/29 |
99d |
de8798965fd0
mm/memfd: fix information leak in hugetlb folios
|
|
WARNING: refcount bug in mptcp_schedule_work (2)
mptcp
|
13 |
|
|
|
5 |
147d |
154d
|
29/29 |
99d |
035bca3f017e
mptcp: fix race condition in mptcp_schedule_work()
|
|
WARNING in drm_wait_one_vblank (2)
dri
|
-1 |
C |
error |
|
3650 |
99d |
623d
|
29/29 |
99d |
f050da08a4ed
drm/vblank: Increase timeout in drm_wait_one_vblank()
|
|
divide error in __tcp_select_window (4)
net
|
2 |
C |
done |
|
14 |
140d |
142d
|
29/29 |
99d |
f07f4ea53e22
mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
|
|
KASAN: slab-use-after-free Read in mtree_range_walk
mm
|
19 |
|
|
|
3 |
146d |
156d
|
29/29 |
99d |
270065f514c5
mm/mmap_lock: reset maple state on lock_vma_under_rcu() retry
|
|
memory leak in map_create
bpf
|
3 |
C |
|
|
1 |
155d |
151d
|
29/29 |
99d |
688b745401ab
bpf: Fix exclusive map memory leak
|
|
WARNING in xfrm_state_fini (4)
net
|
-1 |
C |
done |
|
89278 |
133d |
186d
|
29/29 |
99d |
10deb6986484
xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
|
|
possible deadlock in dqget
ocfs2
ext4
|
4 |
C |
error |
|
100357 |
109d |
562d
|
29/29 |
99d |
524c3853831c
jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
|
|
BUG: sleeping function called from invalid context in __bio_release_pages (2)
scsi
|
5 |
|
|
|
3 |
157d |
154d
|
29/29 |
99d |
90449f2d1e1f
scsi: sg: Do not sleep in atomic context
|
|
KMSAN: uninit-value in bcmp (3)
ntfs3
|
19 |
C |
error |
|
625 |
133d |
613d
|
29/29 |
99d |
a8a3ca23bbd9
fs/ntfs3: Initialize allocated memory before use
|
|
WARNING in f2fs_delete_entry (2)
f2fs
|
-1 |
C |
|
|
4 |
187d |
199d
|
29/29 |
99d |
f37981edcd06
f2fs: Add sanity checks before unlinking and loading inodes
|
|
KMSAN: uninit-value in ntfs_read_bh
ntfs3
|
7 |
C |
|
|
202 |
139d |
592d
|
29/29 |
99d |
73e6b9dacf72
ntfs3: fix uninit memory after failed mi_read in mi_format_new
|
|
memory leak in smb3_fs_context_fullpath
cifs
|
3 |
C |
|
|
1 |
157d |
154d
|
29/29 |
99d |
7e4d9120cfa4
cifs: fix memory leak in smb3_fs_context_parse_param error path
|
|
memory leak in __blkdev_issue_zero_pages
block
udf
|
3 |
syz |
|
|
1 |
137d |
133d
|
29/29 |
99d |
f7e3f852a42d
block: fix memory leak in __blkdev_issue_zero_pages
|
|
INFO: task hung in io_uring_alloc_task_context (6)
io-uring
|
1 |
syz |
|
|
5 |
136d |
166d
|
29/29 |
99d |
101e596e7404
io_uring/fdinfo: cap SQ iteration at max SQ entries
|
|
general protection fault in ocfs2_prepare_dir_for_insert (2)
ocfs2
|
8 |
C |
error |
|
20 |
131d |
311d
|
29/29 |
99d |
aa5b6a72ccd9
ocfs2: add directory size check to ocfs2_find_dir_space_id()
|
|
KMSAN: uninit-value in ntfs_read_hdr (3)
ntfs3
|
7 |
C |
|
|
6 |
104d |
211d
|
29/29 |
99d |
a8a3ca23bbd9
fs/ntfs3: Initialize allocated memory before use
9948dcb2f7b5
ntfs3: Fix uninit buffer allocated by __getname()
|
|
KASAN: use-after-free Read in ocfs2_dir_foreach_blk
ocfs2
|
19 |
C |
error |
|
115 |
126d |
566d
|
29/29 |
99d |
390ac56cf0f6
ocfs2: add boundary check to ocfs2_check_dir_entry()
|
|
WARNING in indx_insert_into_buffer (3)
ntfs3
|
-1 |
C |
done |
|
11 |
174d |
193d
|
29/29 |
99d |
c3856bb499ea
ntfs3: avoid memcpy size warning
|
|
general protection fault in iomap_dio_bio_end_io
ext4
iomap
|
2 |
C |
error |
|
16 |
141d |
144d
|
29/29 |
99d |
7fd8720dff2d
iomap: allocate s_dio_done_wq for async reads as well
|
|
KASAN: use-after-free Read in ocfs2_claim_suballoc_bits
ocfs2
|
19 |
C |
inconclusive |
|
326 |
129d |
602d
|
29/29 |
99d |
e1c70505ee81
ocfs2: add extra consistency checks for chain allocator dinodes
|
|
WARNING in raw_ioctl
usb
mm
|
-1 |
C |
|
|
664 |
130d |
174d
|
29/29 |
99d |
a5160af78be7
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
|
|
kernel BUG in ipgre_header (3)
net
|
-1 |
C |
|
|
99 |
100d |
178d
|
29/29 |
99d |
0ae9cfc454ea
team: Move team device type change at the end of team_port_add
|
|
BUG: sleeping function called from invalid context in mon_complete
usb
|
5 |
|
|
|
21 |
142d |
216d
|
29/29 |
99d |
09bf21bf5249
usbip: Fix locking bug in RT-enabled kernels
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata (2)
bluetooth
|
19 |
|
|
|
3 |
179d |
218d
|
29/29 |
99d |
79a2d4678ba9
Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
|
|
WARNING in shmem_unlink (2)
overlayfs
|
-1 |
C |
done |
|
3 |
140d |
140d
|
29/29 |
99d |
e9c70084a64e
ovl: fail ovl_lock_rename_workdir() if either target is unhashed
|
|
WARNING in driver_unregister (2)
kernel
|
-1 |
C |
error |
|
3214 |
130d |
286d
|
29/29 |
99d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
kernel BUG in ocfs2_truncate_file
ocfs2
|
-1 |
C |
|
|
179 |
126d |
571d
|
29/29 |
99d |
58b6fcd2ab34
ocfs2: mark inode bad upon validation failure during read
|
|
general protection fault in fsnotify_destroy_group
fs
|
2 |
C |
error |
|
2 |
142d |
140d
|
29/29 |
99d |
7129098f4f7b
fanotify: convert fanotify_init() to FD_PREPARE()
|
|
KASAN: slab-use-after-free Write in recv_work (3)
nbd
|
22 |
C |
|
|
6 |
137d |
165d
|
29/29 |
99d |
9517b82d8d42
nbd: defer config put in recv_work
|
|
KASAN: slab-use-after-free Read in mgmt_pending_remove
bluetooth
|
19 |
syz |
|
|
2 |
155d |
151d
|
29/29 |
99d |
89bb613511cc
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
|
|
KMSAN: uninit-value in sctp_inq_pop (3)
sctp
|
7 |
C |
|
|
9 |
178d |
178d
|
29/29 |
99d |
51e5ad549c43
net: sctp: fix KMSAN uninit-value in sctp_inq_pop
|
|
UBSAN: array-index-out-of-bounds in ocfs2_block_group_fill
ocfs2
|
15 |
C |
done |
|
6 |
182d |
184d
|
29/29 |
99d |
e1c70505ee81
ocfs2: add extra consistency checks for chain allocator dinodes
|
|
WARNING in nsproxy_ns_active_put
fs
|
-1 |
C |
done |
|
38 |
156d |
162d
|
29/29 |
99d |
cefd55bd2159
nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
|
|
possible deadlock in padata_do_serial
crypto
|
4 |
C |
|
|
40877 |
129d |
291d
|
29/29 |
99d |
af3852cda347
padata: remove __padata_list_init()
|
|
kernel BUG in ext4_write_inline_data (3)
ext4
|
-1 |
C |
error |
|
8 |
106d |
215d
|
29/29 |
99d |
892e1cf17555
ext4: refresh inline data size before write operations
|
|
general protection fault in gfs2_log_is_empty
gfs2
|
19 |
C |
done |
|
92 |
175d |
184d
|
29/29 |
99d |
9c4a3de6cd5b
gfs2: Asynchronous withdraw
|
|
WARNING in ntfs_put_super
ntfs3
|
-1 |
C |
done |
|
40466 |
148d |
170d
|
29/29 |
99d |
aee4d5a521e9
ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private
|
|
WARNING in minix_rename
fs
|
-1 |
syz |
error |
|
7 |
209d |
296d
|
29/29 |
99d |
009a2ba40303
Fix a drop_nlink warning in minix_rename
|
|
BUG: corrupted list in sctp_destroy_sock
sctp
|
8 |
C |
done |
|
10 |
157d |
161d
|
29/29 |
99d |
73edb26b06ea
sctp: Don't inherit do_auto_asconf in sctp_clone_sock().
|
|
KASAN: slab-use-after-free Read in btusb_disconnect
usb
bluetooth
|
19 |
C |
|
|
5 |
200d |
286d
|
29/29 |
99d |
23d22f2f7176
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
|
|
KASAN: slab-use-after-free Read in vidtv_psi_eit_event_destroy
media
|
19 |
|
|
|
2 |
260d |
257d
|
29/29 |
99d |
98aabfe2d79f
media: vidtv: initialize local pointers upon transfer of memory ownership
|
|
KASAN: slab-use-after-free Read in cmp_fnames (2)
ntfs3
|
19 |
|
|
|
1 |
242d |
238d
|
29/29 |
99d |
02f312754c87
ntfs3: fix use-after-free of sbi->options in cmp_fnames
|
|
kernel BUG in __ocfs2_move_extent
ocfs2
|
-1 |
C |
|
|
16 |
178d |
191d
|
29/29 |
99d |
8a7d58845fae
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
|
|
divide error in iova_bitmap_alloc
iommu
|
2 |
C |
|
|
1 |
177d |
191d
|
29/29 |
99d |
cb30dfa75d55
iommufd: Don't overflow during division for dirty tracking
|
|
BUG: unable to handle kernel NULL pointer dereference in pc_clock_settime
net
|
10 |
|
|
|
7 |
156d |
169d
|
29/29 |
99d |
329d050bbe63
gve: Implement settime64 with -EOPNOTSUPP
|
|
KASAN: vmalloc-out-of-bounds Read in run_irq_workd
kernel
|
17 |
C |
error |
|
225 |
166d |
229d
|
29/29 |
99d |
4e9077638301
bpf: Sync pending IRQ work before freeing ring buffer
|
|
WARNING in bpf_bprintf_prepare (3)
bpf
|
-1 |
C |
done |
|
6 |
154d |
178d
|
29/29 |
99d |
c1da3df7191f
bpf: Prevent nesting overflow in bpf_try_get_buffers
|
|
KASAN: global-out-of-bounds Read in io_uring_show_fdinfo
io-uring
|
17 |
C |
done |
|
7 |
165d |
168d
|
29/29 |
99d |
8cd5a59e4d51
io_uring/fdinfo: validate opcode before checking if it's an 128b one
|
|
KMSAN: uninit-value in em_canid_match
can
net
|
7 |
C |
|
|
7 |
141d |
142d
|
29/29 |
99d |
0c922106d7a5
net/sched: em_canid: fix uninit-value in em_canid_match
|
|
KASAN: slab-use-after-free Read in tipc_mon_reinit_self
tipc
|
19 |
|
|
|
1 |
215d |
161d
|
29/29 |
99d |
0725e6afb551
tipc: Fix use-after-free in tipc_mon_reinit_self().
|
|
WARNING in tracing_start_tr
trace
|
-1 |
C |
|
|
20 |
131d |
365d
|
29/29 |
99d |
02e7769e38c8
tracing: Fix enabling of tracing on file release
|
|
kernel BUG in ocfs2_commit_truncate
ocfs2
|
-1 |
C |
inconclusive |
|
8 |
145d |
487d
|
29/29 |
99d |
a2b1c419ff72
ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (4)
net
|
18 |
C |
|
|
1050 |
99d |
692d
|
29/29 |
99d |
62b656e43eae
net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
ce50039be49e
net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
|
|
KASAN: use-after-free Read in ocfs2_dx_dir_lookup_rec
ocfs2
|
19 |
C |
|
|
14 |
143d |
200d
|
29/29 |
99d |
1b34743c31fe
ocfs2: add extra consistency check to ocfs2_dx_dir_lookup_rec()
|
|
kernel BUG in ocfs2_remove_btree_range (2)
ocfs2
|
-1 |
C |
|
|
5 |
135d |
141d
|
29/29 |
99d |
4ac577ae741e
ocfs2: check tl_used after reading it from trancate log inode
|
|
WARNING in ocfs2_unlink
ocfs2
|
-1 |
C |
inconclusive |
|
139 |
124d |
457d
|
29/29 |
99d |
7efb45f9685f
ocfs2: invalidate inode if i_mode is zero after block read
|
|
memory leak in iovec_from_user (2)
io-uring
|
3 |
C |
|
|
1 |
160d |
157d
|
29/29 |
99d |
d3c9c213c0b8
io_uring/rw: ensure allocated iovec gets cleared for early failure
|
|
WARNING in destroy_super_work
fs
|
-1 |
syz |
done |
|
107 |
155d |
160d
|
29/29 |
99d |
f8d5a8970d2f
ns: handle setns(pidfd, ...) cleanly
|
|
general protection fault in afs_request_key
afs
|
2 |
|
|
|
14 |
140d |
145d
|
29/29 |
99d |
d27c71257825
afs: Fix delayed allocation of a cell's anonymous key
19eef1d98eed
afs: Fix uninit var in afs_alloc_anon_key()
|
|
memory leak in ocfs2_new_path_from_path
ocfs2
|
3 |
C |
|
|
5 |
125d |
160d
|
29/29 |
99d |
2214ec4bf89d
ocfs2: fix memory leak in ocfs2_merge_rec_left()
|
|
WARNING in ring_buffer_map_get_reader
trace
|
-1 |
|
|
|
5 |
104d |
162d
|
29/29 |
99d |
aa997d2d2a0b
ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up
|
|
memory leak in smb3_fs_context_parse_param
cifs
|
3 |
C |
|
|
1 |
160d |
160d
|
29/29 |
99d |
e8c73eb7db0a
cifs: client: fix memory leak in smb3_fs_context_parse_param
|
|
general protection fault in pcl818_ai_cancel
comedi
|
2 |
C |
error |
|
14192 |
130d |
285d
|
29/29 |
99d |
a51f025b5038
comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
|
|
KASAN: slab-use-after-free Read in mptcp_pm_del_add_timer
mptcp
|
19 |
|
|
|
1 |
182d |
150d
|
29/29 |
99d |
426358d9be7c
mptcp: fix a race in mptcp_pm_del_add_timer()
|
|
BUG: unable to handle kernel NULL pointer dereference in parse_insn
comedi
|
10 |
|
|
|
26 |
158d |
274d
|
29/29 |
99d |
0de7d9cd07a2
comedi: check device's attached status in compat ioctls
|
|
general protection fault in mntput
fs
|
2 |
C |
error |
|
17 |
135d |
140d
|
29/29 |
99d |
05885f41658c
namespace: convert fsmount() to FD_PREPARE()
|
|
BUG: unable to handle kernel NULL pointer dereference in pc_clock_adjtime
net
|
10 |
|
|
|
5 |
149d |
165d
|
29/29 |
99d |
6ab753b5d8e5
gve: Implement gettimex64 with -EOPNOTSUPP
|
|
WARNING: ODEBUG bug in gfs2_fill_super
gfs2
|
-1 |
C |
done |
|
24 |
175d |
178d
|
29/29 |
99d |
9c4a3de6cd5b
gfs2: Asynchronous withdraw
|
|
KMSAN: uninit-value in attr_set_size
ntfs3
|
7 |
C |
|
|
3 |
179d |
193d
|
29/29 |
99d |
5f33da04e6ce
fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list
|
|
WARNING: ODEBUG bug in nilfs_detach_log_writer (2)
nilfs
|
-1 |
C |
|
|
4 |
173d |
171d
|
29/29 |
99d |
9a6b60cb147d
nilfs2: avoid having an active sc_timer before freeing sci
|
|
kernel BUG in ocfs2_claim_suballoc_bits
ocfs2
|
-1 |
C |
inconclusive |
|
1706 |
122d |
602d
|
29/29 |
99d |
039bef30e320
ocfs2: fix kernel BUG in ocfs2_find_victim_chain
|
|
KASAN: use-after-free Read in ocfs2_listxattr
ocfs2
|
19 |
C |
|
|
5 |
145d |
157d
|
29/29 |
99d |
2a4f33430e96
ocfs2: validate inline xattr size and entry count in ocfs2_xattr_ibody_list
|
|
WARNING in xfrm_state_migrate (2)
net
|
-1 |
|
|
|
2 |
164d |
193d
|
29/29 |
99d |
5502bc4746e8
xfrm: make state as DEAD before final put when migrate fails
|
|
divide error in ocfs2_block_group_fill (3)
ocfs2
|
2 |
C |
|
|
3 |
173d |
179d
|
29/29 |
99d |
93ce0ff117b0
ocfs2: validate cl_bpc in allocator inodes to prevent divide-by-zero
|
|
memory leak in ni_add_subrecord
ntfs3
|
3 |
C |
|
|
1 |
145d |
157d
|
29/29 |
99d |
ccc4e86d1c24
fs/ntfs3: Prevent memory leaks in add sub record
|
|
WARNING in tracing_buffers_mmap_close (2)
trace
|
-1 |
C |
|
|
4 |
118d |
156d
|
29/29 |
99d |
b042fdf18e89
tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
|
|
BUG: sleeping function called from invalid context in hook_sb_delete
fs
|
5 |
C |
done |
|
11887 |
117d |
205d
|
29/29 |
99d |
56325e8c68c0
landlock: fix splats from iput() after it started calling might_sleep()
|
|
WARNING in dax_iomap_rw
fs
|
-1 |
C |
|
|
5 |
183d |
197d
|
29/29 |
136d |
154d1e7ad9e5
dax: skip read lock assertion for read-only filesystems
|
|
INFO: task hung in v9fs_evict_inode
v9fs
|
1 |
C |
error |
done |
2597 |
181d |
497d
|
29/29 |
141d |
netfs: fix reference leak
|
|
kernel BUG in kvm_s2_put_page
kvmarm
|
-1 |
C |
|
|
88 |
169d |
209d
|
29/29 |
146d |
fc670ad5966f
Revert "KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables"
|
|
BUG: sleeping function called from invalid context in f2fs_drop_inode
f2fs
|
5 |
|
|
|
43 |
171d |
191d
|
29/29 |
146d |
1ee889fdf409
f2fs: don't call iput() from f2fs_drop_inode()
|
|
WARNING in hugetlb_vma_assert_locked
mm
|
-1 |
C |
|
|
8 |
203d |
205d
|
29/29 |
148d |
cec944dd329f
hugetlbfs: move lock assertions after early returns in huge_pmd_unshare()
dd83609b8898
hugetlbfs: skip VMAs without shareable locks in hugetlb_vmdelete_list
|
|
WARNING in invalidate_bh_lru
fs
|
-1 |
C |
done |
done |
5172 |
383d |
1212d
|
29/29 |
149d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in gro_cells_receive
net
|
4 |
|
|
|
1 |
180d |
178d
|
29/29 |
149d |
c5394b8b7a92
net: gro_cells: fix lock imbalance in gro_cells_receive()
|
|
KASAN: slab-use-after-free Read in hdm_disconnect
usb
|
19 |
C |
error |
|
18706 |
169d |
626d
|
29/29 |
149d |
4b1270902609
most: usb: Fix use-after-free in hdm_disconnect
|
|
WARNING: locking bug in __set_page_owner (2)
mm
|
4 |
|
|
|
4 |
183d |
189d
|
29/29 |
149d |
c83aab85e181
mm: don't spin in add_stack_record when gfp flags don't allow
|
|
WARNING in xfs_init_fs_context
mm
|
-1 |
syz |
|
|
21 |
187d |
291d
|
29/29 |
149d |
0f41997b1b2b
xfs: don't use __GFP_NOFAIL in xfs_init_fs_context
|
|
BUG: sleeping function called from invalid context in sock_map_delete_elem
net
bpf
|
5 |
C |
error |
|
58 |
180d |
232d
|
29/29 |
149d |
7c33e97a6ef5
bpf: Do not disable preemption in bpf_test_run().
|
|
VFS: Busy inodes after unmount (use-after-free) (3)
fs
|
2 |
C |
error |
|
85 |
168d |
198d
|
29/29 |
149d |
56094ad3eaa2
vfs: Don't leak disconnected dentries on umount
|
|
kernel BUG in qlist_free_all (2)
fs
|
-1 |
C |
done |
|
5 |
183d |
214d
|
29/29 |
149d |
25718fdcbdd2
net: gro_cells: Use nested-BH locking for gro_cell
|
|
divide error in comedi_buf_write_free
comedi
|
2 |
|
|
|
130 |
174d |
281d
|
29/29 |
149d |
87b318ba81dd
comedi: fix divide-by-zero in comedi_buf_munge()
|
|
KASAN: slab-out-of-bounds Read in __cpa_addr
kernel
|
17 |
C |
done |
|
601 |
179d |
193d
|
29/29 |
149d |
f25785f9b088
x86/mm: Fix overflow in __cpa_addr()
|
|
kernel BUG in ext4_es_cache_extent (3)
ext4
|
-1 |
C |
|
|
4 |
211d |
224d
|
29/29 |
149d |
1d3ad183943b
ext4: detect invalid INLINE_DATA + EXTENTS flag combination
|
|
kernel BUG in populate_free_space_tree (2)
btrfs
|
-1 |
syz |
error |
|
3 |
198d |
198d
|
29/29 |
149d |
a5a51bf4e9b7
btrfs: do not assert we found block group item when creating free space tree
|
|
WARNING in cgroup_freeze
cgroups
|
-1 |
C |
done |
|
847 |
177d |
196d
|
29/29 |
149d |
93a4b36ef3cf
cgroup: Fix seqcount lockdep assertion in cgroup freezer
|
|
KASAN: stack-out-of-bounds Read in cp2112_xfer
input
|
17 |
C |
error |
|
8 |
183d |
213d
|
29/29 |
149d |
362f21536966
HID: cp2112: Add parameter validation to data length
|
|
possible deadlock in vsock_linger
virt
net
|
4 |
C |
|
|
7 |
178d |
178d
|
29/29 |
149d |
f7c877e75352
vsock: fix lock inversion in vsock_assign_transport()
|
|
kernel BUG in scrub_stripe_get_kaddr
btrfs
|
-1 |
C |
error |
|
293 |
181d |
199d
|
29/29 |
149d |
42d3a055d946
btrfs: do not use folio_test_partial_kmap() in ASSERT()s
|
|
KMSAN: uninit-value in poly1305_blocks
crypto
|
7 |
C |
|
|
10 |
178d |
178d
|
29/29 |
149d |
1af424b15401
lib/crypto: poly1305: Restore dependency of arch code on !KMSAN
|
|
WARNING in nsfs_fh_to_dentry
nfs
|
-1 |
C |
|
|
77 |
170d |
209d
|
29/29 |
149d |
15623c860c93
nsfs: handle inode number mismatches gracefully in file handles
|
|
kernel BUG in ocfs2_refcount_cal_cow_clusters
ocfs2
|
-1 |
C |
|
|
8 |
176d |
194d
|
29/29 |
149d |
78a63493f8e3
ocfs2: clear extent cache after moving/defragmenting extents
|
|
WARNING in copy_highpage
arm
|
-1 |
|
|
|
1 |
201d |
197d
|
29/29 |
149d |
b98c94eed4a9
arm64: mte: Do not warn if the page is already tagged in copy_highpage()
|
|
BUG: sleeping function called from invalid context in __set_page_owner
net
virt
|
5 |
C |
done |
|
79 |
175d |
189d
|
29/29 |
149d |
c83aab85e181
mm: don't spin in add_stack_record when gfp flags don't allow
|
|
general protection fault in __smc_diag_dump (4)
smc
|
2 |
C |
done |
|
6 |
175d |
211d
|
29/29 |
149d |
f584239a9ed2
net/smc: fix general protection fault in __smc_diag_dump
|
|
KASAN: stack-out-of-bounds Read in exfat_nls_to_utf16
exfat
|
17 |
C |
done |
|
36 |
173d |
193d
|
29/29 |
149d |
2d8636119b92
exfat: fix out-of-bounds in exfat_nls_to_ucs2()
|
|
kernel BUG in dnotify_free_mark
ntfs3
|
-1 |
C |
error |
done |
22993 |
248d |
1266d
|
29/29 |
150d |
55ad333de0f8
fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
|
|
WARNING in media_create_pad_link (2)
usb
media
|
-1 |
C |
error |
done |
11 |
190d |
393d
|
29/29 |
153d |
0e2ee70291e6
media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
|
|
possible deadlock in f2fs_do_truncate_blocks
f2fs
|
4 |
|
|
|
5 |
172d |
187d
|
29/29 |
153d |
ca8b201f2854
f2fs: fix to avoid potential deadlock
|
|
INFO: rcu detected stall in watchdog
bpf
|
1 |
C |
error |
done |
14 |
215d |
1337d
|
29/29 |
153d |
eecd203ada43
media: imon: make send_packet() more robust
|
|
INFO: rcu detected stall in dummy_timer (4)
usb
|
1 |
C |
inconclusive |
done |
25 |
216d |
1377d
|
29/29 |
153d |
eecd203ada43
media: imon: make send_packet() more robust
|
|
INFO: task hung in bch2_direct_write (2)
fs
|
1 |
C |
unreliable |
done |
15 |
235d |
244d
|
29/29 |
155d |
f2c61db29f27
Remove bcachefs core code
|
|
general protection fault in hfs_find_init
hfs
|
10 |
C |
done |
done |
1024 |
258d |
2938d
|
29/29 |
164d |
736a0516a162
hfs: fix general protection fault in hfs_find_init()
|
|
WARNING in br_nf_local_in
bridge
netfilter
|
-1 |
|
|
|
1 |
223d |
219d
|
29/29 |
164d |
netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
|
|
general protection fault in unpin_user_pages_dirty_lock
mm
|
2 |
C |
|
|
4 |
221d |
221d
|
29/29 |
168d |
e3c05b6e370c
mm/gup: remove record_subpages()
|
|
WARNING in ext4_init_orphan_info
ext4
mm
|
-1 |
C |
done |
|
5 |
195d |
220d
|
29/29 |
169d |
0a6ce20c1564
ext4: verify orphan file size is not too big
|
|
KASAN: slab-use-after-free Read in io_waitid_wait
io-uring
|
19 |
C |
|
|
3 |
192d |
191d
|
29/29 |
169d |
2f8229d53d98
io_uring/waitid: always prune wait queue entry in io_waitid_wait()
|
|
general protection fault in vc_deallocate
serial
|
2 |
C |
done |
|
475 |
211d |
220d
|
29/29 |
169d |
fc702e7df456
vt: move vc_saved_screen to within tty allocated judgment
|
|
possible deadlock in xfs_ilock_attr_map_shared (2)
kasan
|
4 |
|
|
|
3 |
227d |
281d
|
29/29 |
169d |
79357cd06d41
mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
|
|
KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
iommu
|
22 |
C |
|
|
5 |
215d |
213d
|
29/29 |
169d |
4e034bf045b1
iommufd: Fix race during abort for file descriptors
|
|
possible deadlock in __snd_pcm_lib_xfer (2)
sound
|
4 |
C |
done |
|
9 |
208d |
230d
|
29/29 |
169d |
9fc4a3da9a02
ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
|
|
possible deadlock in kernfs_unlink_sibling
kernfs
|
4 |
|
|
|
26 |
193d |
224d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in device_create
kernel
|
4 |
|
|
|
25 |
193d |
225d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
KASAN: use-after-free Read in ocfs2_get_system_file_inode
ocfs2
|
19 |
C |
done |
|
5 |
236d |
234d
|
29/29 |
169d |
fe7a283b3916
ocfs2: add suballoc slot check in ocfs2_validate_inode_block()
|
|
WARNING in write_raw_marker_to_buffer
trace
|
-1 |
C |
|
|
29 |
186d |
188d
|
29/29 |
169d |
bda745ee8fbb
tracing: Fix tracing_mark_raw_write() to use buf and not ubuf
54b91e54b113
tracing: Stop fortify-string from warning in tracing_mark_raw_write()
|
|
KMSAN: uninit-value in hfs_find_set_zero_bits
hfs
|
7 |
C |
|
|
4210 |
200d |
1137d
|
29/29 |
169d |
2048ec5b98db
hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
|
|
KCSAN: data-race in ip_vs_add_service / ip_vs_out_hook
lvs
|
6 |
|
|
|
6 |
206d |
316d
|
29/29 |
169d |
944b6b216c03
ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
|
|
general protection fault in bcsp_recv
bluetooth
|
8 |
C |
error |
|
1003 |
177d |
425d
|
29/29 |
169d |
ca94b2b036c2
Bluetooth: bcsp: receive data only if registered
|
|
possible deadlock in __alloc_workqueue
kernel
|
4 |
|
|
|
6 |
193d |
214d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
INFO: task hung in __bread_gfp (7)
udf
jfs
|
1 |
C |
done |
|
6 |
203d |
209d
|
29/29 |
169d |
ab073abf6d97
block: fix EOD return for device with nr_sectors == 0
|
|
WARNING in rtl8150_start_xmit/usb_submit_urb
net
usb
|
-1 |
C |
|
|
5 |
210d |
230d
|
29/29 |
169d |
958baf5eaee3
net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
|
|
KASAN: slab-use-after-free Read in media_devnode_unregister
usb
media
|
19 |
C |
|
|
2055 |
216d |
219d
|
29/29 |
169d |
8cfc8cec1b4d
media: mc: Clear minor number before put device
|
|
general protection fault in snd_usbmidi_do_output
usb
sound
|
2 |
C |
error |
|
8 |
199d |
206d
|
29/29 |
169d |
9f2c0ac1423d
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
|
|
possible deadlock in mptcp_pm_addr_send_ack
mptcp
|
4 |
|
|
|
2 |
218d |
223d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in do_ip_setsockopt (5)
net
|
4 |
|
|
|
4 |
197d |
218d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
KASAN: slab-out-of-bounds Write in fuse_dev_do_write
fuse
|
21 |
C |
|
|
6 |
232d |
237d
|
29/29 |
169d |
9d81ba6d49a7
fuse: Block access to folio overlimit
|
|
WARNING in __rt_mutex_slowlock_locked
exfat
ext4
|
-1 |
C |
done |
|
10 |
179d |
238d
|
29/29 |
169d |
79c1587b6cda
exfat: validate cluster allocation bits of the allocation bitmap
|
|
general protection fault in print_reg_state
bpf
|
2 |
C |
done |
|
4 |
200d |
205d
|
29/29 |
169d |
34904582b502
bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
|
|
possible deadlock in mptcp_subflow_shutdown
mptcp
|
4 |
|
|
|
1 |
225d |
225d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in ext4_xattr_inode_update_ref
ext4
|
-1 |
C |
error |
|
1291 |
169d |
218d
|
29/29 |
169d |
57295e835408
ext4: guard against EA inode refcount underflow in xattr update
|
|
WARNING: bad unlock balance in copy_process
mm
|
4 |
C |
|
|
304 |
195d |
320d
|
29/29 |
169d |
4ec3c15462b9
futex: Use correct exit on failure from futex_hash_allocate_default()
|
|
KASAN: slab-use-after-free Read in snd_usbmidi_error_timer (2)
sound
|
19 |
|
|
|
12 |
200d |
204d
|
29/29 |
169d |
9f2c0ac1423d
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
|
|
KASAN: use-after-free Read in __pnet_find_base_ndev
smc
|
19 |
|
|
|
2 |
205d |
218d
|
29/29 |
169d |
3d3466878afd
smc: Fix use-after-free in __pnet_find_base_ndev().
|
|
INFO: task hung in v9fs_file_fsync
fs
mm
|
1 |
C |
done |
|
14 |
201d |
241d
|
29/29 |
169d |
e8fe3f07a357
9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
|
|
KMSAN: uninit-value in __hfsplus_ext_cache_extent
hfs
|
7 |
C |
|
|
2471 |
199d |
840d
|
29/29 |
169d |
4840ceadef42
hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
|
|
WARNING in ah6_output
net
|
-1 |
C |
error |
|
8 |
206d |
327d
|
29/29 |
169d |
2327a3d6f65c
net: ipv6: fix field-spanning memcpy warning in AH output
|
|
KASAN: slab-use-after-free Read in release_sock (2)
bluetooth
|
19 |
|
|
|
1 |
238d |
232d
|
29/29 |
169d |
862c62810856
Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
|
|
WARNING in convert_ctx_accesses (2)
bpf
|
-1 |
C |
|
|
16 |
200d |
215d
|
29/29 |
169d |
6fabca2fc94d
bpf: Explicitly check accesses to bpf_sock_addr
|
|
WARNING in maybe_exit_scc
bpf
|
-1 |
C |
done |
|
59 |
197d |
213d
|
29/29 |
169d |
a3c73d629ea1
bpf: dont report verifier bug for missing bpf_scc_visit on speculative path
|
|
KMSAN: uninit-value in squashfs_get_parent
squashfs
|
7 |
C |
|
|
2 |
210d |
210d
|
29/29 |
169d |
74058c0a9fc8
Squashfs: fix uninit-value in squashfs_get_parent
|
|
general protection fault in btrfs_root_node
btrfs
|
8 |
C |
done |
|
670 |
193d |
590d
|
29/29 |
169d |
ed4e6b5d644c
btrfs: ref-verify: handle damaged extent root tree
|
|
possible deadlock in __mptcp_close_ssk
mptcp
|
4 |
|
|
|
5 |
194d |
223d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
general protection fault in ocfs2_evict_inode (2)
ocfs2
|
2 |
C |
error |
|
68 |
233d |
240d
|
29/29 |
169d |
f46e8ef8bb7b
ocfs2: prevent release journal inode after journal shutdown
|
|
KASAN: global-out-of-bounds Read in z_erofs_decompress_queue
erofs
|
17 |
C |
done |
|
6 |
237d |
237d
|
29/29 |
169d |
131897c65e2b
erofs: fix invalid algorithm for encoded extents
|
|
WARNING in ovl_copy_up_file (2)
squashfs
|
-1 |
C |
error |
|
12 |
203d |
203d
|
29/29 |
169d |
9f1c14c1de1b
Squashfs: reject negative file sizes in squashfs_read_inode()
|
|
WARNING in max_vclocks_store
mm
net
|
-1 |
C |
|
|
3 |
229d |
465d
|
29/29 |
169d |
e9f35294e18d
ptp: Add a upper bound on max_vclocks
|
|
KMSAN: uninit-value in hfsplus_delete_cat
hfs
|
7 |
C |
|
|
4901 |
199d |
1228d
|
29/29 |
169d |
9b3d15a75891
hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
|
|
INFO: task hung in ocfs2_page_mkwrite (2)
ocfs2
|
1 |
C |
error |
|
4 |
239d |
238d
|
29/29 |
169d |
04100f775c2e
ocfs2: fix recursive semaphore deadlock in fiemap call
|
|
general protection fault in xa_destroy
ext4
|
8 |
|
|
|
17 |
179d |
235d
|
29/29 |
169d |
3c3fac6bc0a9
ext4: fix potential null deref in ext4_mb_init()
|
|
possible deadlock in snd_pcm_drop
sound
|
4 |
C |
error |
|
4 |
201d |
199d
|
29/29 |
169d |
9fc4a3da9a02
ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
|
|
possible deadlock in sctp_sock_migrate (2)
sctp
|
4 |
|
|
|
5 |
199d |
223d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
KMSAN: uninit-value in nci_dev_up (2)
nfc
net
|
7 |
C |
|
|
34 |
196d |
252d
|
29/29 |
169d |
9c328f54741b
net: nfc: nci: Add parameter validation for packet data
|
|
KCSAN: data-race in __unmap_hugepage_range / alloc_surplus_hugetlb_folio
mm
|
6 |
|
|
|
1 |
245d |
245d
|
29/29 |
169d |
21cc2b5c5062
mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range()
|
|
kernel BUG in netfs_perform_write
netfs
|
-1 |
C |
error |
|
17 |
205d |
224d
|
29/29 |
169d |
66d938e89e94
netfs: Prevent duplicate unlocking
|
|
WARNING in __linkwatch_sync_dev (2)
net
|
-1 |
C |
done |
|
952 |
182d |
309d
|
29/29 |
169d |
23a6037ce76c
bonding: Remove support for use_carrier
|
|
KCSAN: data-race in snd_seq_fifo_cell_out / snd_seq_fifo_poll_wait
sound
|
6 |
|
|
|
1 |
248d |
248d
|
29/29 |
169d |
1f9fc89cbbe8
ALSA: seq: Fix KCSAN data-race warning at snd_seq_fifo_poll_wait()
|
|
possible deadlock in tcp_sendmsg
net
|
4 |
|
|
|
6 |
197d |
224d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
BUG: sleeping function called from invalid context in dummy_dequeue
usb
|
5 |
C |
error |
|
6278 |
214d |
234d
|
29/29 |
169d |
8d63c83d8eb9
USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
|
|
possible deadlock in mptcp_close (2)
mptcp
|
4 |
|
|
|
1 |
229d |
229d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
kernel BUG in clear_inode (4)
f2fs
|
-1 |
C |
done |
|
6 |
188d |
219d
|
29/29 |
169d |
9251a9e6e871
f2fs: fix to truncate first page in error path of f2fs_truncate()
|
|
kernel BUG in f2fs_truncate_hole (2)
f2fs
|
-1 |
|
|
|
2 |
237d |
239d
|
29/29 |
169d |
c18ecd99e0c7
f2fs: fix to do sanity check on node footer for non inode dnode
|
|
general protection fault in blk_mq_free_tags_callback
block
|
2 |
C |
|
|
3 |
206d |
206d
|
29/29 |
169d |
670bfe683850
blk-mq: fix null-ptr-deref in blk_mq_free_tags() from error path
|
|
WARNING in nfsd_file_cache_init
mm
|
-1 |
C |
error |
|
4 |
193d |
191d
|
29/29 |
169d |
f7dfa0f31b13
slub: Don't call lockdep_unregister_key() for immature kmem_cache.
|
|
general protection fault in f2fs_check_opt_consistency
f2fs
|
2 |
C |
done |
|
5 |
196d |
244d
|
29/29 |
169d |
930a9a6ee8e7
f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency()
|
|
WARNING: locking bug in vgic_put_irq
kvmarm
|
4 |
C |
|
|
7 |
227d |
234d
|
29/29 |
169d |
d54594accf73
KVM: arm64: vgic-v3: Erase LPIs from xarray outside of raw spinlocks
|
|
KASAN: slab-use-after-free Read in __io_req_task_work_add (2)
io-uring
|
19 |
|
|
|
2 |
209d |
210d
|
29/29 |
169d |
df8922afc37a
io_uring/msg_ring: kill alloc_cache for io_kiocb allocations
|
|
WARNING in ni_rename
ntfs3
|
-1 |
C |
error |
|
233 |
171d |
291d
|
29/29 |
169d |
0dc7117da8f9
fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
|
|
possible deadlock in vsock_connectible_setsockopt
net
virt
|
4 |
|
|
|
1 |
213d |
213d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
KASAN: slab-use-after-free Write in __xfrm_state_delete
net
|
22 |
C |
done |
|
4863 |
178d |
261d
|
29/29 |
169d |
cd8ae32e4e46
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
|
|
general protection fault in try_to_wake_up (3)
kernel
|
2 |
syz |
|
|
23 |
206d |
226d
|
29/29 |
169d |
b549113738e8
futex: Prevent use-after-free during requeue-PI
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (5)
fbdev
|
21 |
C |
|
|
1075 |
169d |
220d
|
29/29 |
169d |
3637d34b35b2
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
|
|
KASAN: slab-out-of-bounds Read in hfsplus_bmap_alloc
hfs
|
17 |
C |
|
|
1 |
260d |
416d
|
29/29 |
169d |
738d5a51864e
hfs: validate record offset in hfsplus_bmap_alloc
|
|
general protection fault in exfat_utf16_to_nls
exfat
|
2 |
C |
done |
|
11 |
203d |
204d
|
29/29 |
169d |
29c063658d53
exfat: combine iocharset and utf8 option setup
|
|
INFO: task hung in erofs_bread
erofs
|
1 |
C |
|
|
4 |
213d |
213d
|
29/29 |
169d |
334c0e493c2a
erofs: avoid reading more for fragment maps
|
|
WARNING in sysfs_emit_at
fs
|
-1 |
C |
|
|
2 |
222d |
218d
|
29/29 |
169d |
9dfec4a51df9
USB: core: remove the move buf action
|
|
KASAN: use-after-free Read in udf_update_tag
udf
|
19 |
C |
|
|
27 |
202d |
603d
|
29/29 |
169d |
3bd5e45c2ce3
fs: udf: fix OOB read in lengthAllocDescs handling
|
|
WARNING: possible circular locking dependency detected (5)
|
-1 |
C |
|
|
1 |
213d |
213d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in serial8250_handle_irq
hams
|
4 |
C |
|
|
180 |
199d |
1000d
|
29/29 |
169d |
38b04ed7072e
6pack: drop redundant locking and refcounting
|
|
INFO: trying to register non-static key in skb_dequeue (4)
audit
|
-1 |
C |
done |
|
20 |
224d |
224d
|
29/29 |
169d |
2aef21a6a603
audit: init ab->skb_list earlier in audit_buffer_alloc()
|
|
possible deadlock in inet_shutdown
net
|
4 |
C |
done |
|
11 |
214d |
223d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in inet_sock_destruct (5)
net
|
-1 |
C |
error |
|
8 |
182d |
219d
|
29/29 |
169d |
a3967baad4d5
tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
|
|
WARNING in kvm_arch_vcpu_ioctl_run (6)
kvm-x86
|
-1 |
C |
|
|
117 |
192d |
273d
|
29/29 |
169d |
e750f8539128
KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
|
|
possible deadlock in tipc_shutdown
tipc
|
4 |
|
|
|
6 |
209d |
224d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
KASAN: slab-use-after-free Read in napi_gro_frags (2)
net
|
19 |
C |
done |
|
3 |
219d |
212d
|
29/29 |
169d |
1091860a16a8
net: tun: Update napi->skb after XDP process
|
|
WARNING in do_misc_fixups
bpf
|
-1 |
C |
|
|
7604 |
217d |
255d
|
29/29 |
169d |
e4414b01c1cd
bpf: Check the helper function is valid in get_helper_proto
|
|
possible deadlock in smc_diag_dump_proto
smc
|
4 |
C |
error |
|
113 |
223d |
226d
|
29/29 |
169d |
5d6b58c932ec
net: lockless sock_i_ino()
|
|
general protection fault in find_match (6)
net
|
17 |
C |
|
|
102 |
206d |
212d
|
29/29 |
169d |
390b3a300d78
nexthop: Forbid FDB status change while nexthop is in a group
|
|
KMSAN: kernel-infoleak in rng_recvmsg
crypto
|
9 |
C |
|
|
50 |
196d |
251d
|
29/29 |
169d |
9aa7e045f4af
crypto: jitter - Mark intermediary memory as clean
|
|
WARNING in ext4_xattr_block_set (3)
ext4
|
-1 |
C |
error |
|
73 |
181d |
212d
|
29/29 |
169d |
44d2a72f4d64
ext4: validate ea_ino and size in check_xattrs
|
|
WARNING in est_timer
net
|
-1 |
C |
error |
|
497 |
224d |
233d
|
29/29 |
169d |
9f74c0ea9b26
net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
|
|
KMSAN: uninit-value in lan78xx_reset
net
usb
|
7 |
C |
|
|
14 |
190d |
224d
|
29/29 |
169d |
49bdb63ff644
net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
|
|
possible deadlock in inet_sendmsg
net
|
4 |
|
|
|
2 |
220d |
221d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in tracing_buffers_mmap_close
trace
|
-1 |
C |
|
|
1378 |
189d |
487d
|
29/29 |
169d |
de4cbd704731
ring buffer: Propagate __rb_map_vma return value to caller
|
|
KASAN: slab-use-after-free Read in cmp_bss
wireless
|
19 |
C |
|
|
13 |
226d |
248d
|
29/29 |
169d |
26e84445f02c
wifi: cfg80211: fix use-after-free in cmp_bss()
|
|
possible deadlock in path_openat (3)
fs
|
4 |
|
|
|
1 |
228d |
228d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in do_tcp_setsockopt
net
|
4 |
|
|
|
1 |
223d |
223d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
KCSAN: data-race in try_to_migrate_one / zap_page_range_single_batched
mm
|
6 |
|
|
|
1 |
204d |
202d
|
29/29 |
169d |
989c2f55ca48
mm: silence data-race in update_hiwater_rss
|
|
possible deadlock in __mptcp_push_pending
mptcp
|
4 |
|
|
|
3 |
194d |
225d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in __netdev_update_features
net
|
4 |
C |
done |
|
227 |
171d |
318d
|
29/29 |
169d |
0f82c3ba66c6
macsec: sync features on RTM_NEWLINK
|
|
possible deadlock in smc_shutdown (3)
smc
|
4 |
|
|
|
2 |
202d |
229d
|
29/29 |
169d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in task_fork_fair
bpf
trace
|
4 |
C |
done |
done |
9106 |
508d |
921d
|
29/29 |
183d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
UBSAN: shift-out-of-bounds in aio_iiro_16_attach
comedi
|
-1 |
C |
|
|
56 |
270d |
283d
|
29/29 |
183d |
66acb1586737
comedi: aio_iiro_16: Fix bit shift out of bounds
|
|
general protection fault in iter_file_splice_write
fs
|
2 |
C |
done |
done |
2812 |
239d |
696d
|
29/29 |
183d |
netfs: Fix unbuffered write error handling
|
|
WARNING in try_to_migrate_one (3)
mm
|
-1 |
C |
done |
done |
6 |
227d |
250d
|
29/29 |
183d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
WARNING in kvm_apic_accept_events
kvm-x86
|
-1 |
C |
error |
done |
27 |
217d |
315d
|
29/29 |
183d |
0fe3e8d804fd
KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
|
|
WARNING in nf_reject_fill_skb_dst
netfilter
|
-1 |
C |
done |
|
214 |
225d |
238d
|
29/29 |
185d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
WARNING in nf_send_reset6
netfilter
|
-1 |
C |
|
|
9 |
230d |
238d
|
29/29 |
185d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
WARNING in nf_send_unreach6
netfilter
|
-1 |
|
|
|
508 |
225d |
239d
|
29/29 |
185d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
KMSAN: uninit-value in sctp_inq_pop (2)
sctp
|
7 |
C |
|
|
4089 |
246d |
1559d
|
29/29 |
190d |
fd60d8a08619
sctp: linearize cloned gso packets in sctp_rcv
|
|
KMSAN: kernel-infoleak in do_insn_ioctl
comedi
|
18 |
C |
|
|
164 |
236d |
273d
|
29/29 |
190d |
3cd212e895ca
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
|
|
general protection fault in rose_rt_ioctl
hams
|
2 |
C |
|
|
64 |
231d |
232d
|
29/29 |
190d |
1cc8a5b534e5
net: rose: fix a typo in rose_clear_routes()
|
|
UBSAN: shift-out-of-bounds in pcl726_attach
comedi
|
-1 |
C |
|
|
318 |
236d |
285d
|
29/29 |
190d |
96cb948408b3
comedi: pcl726: Prevent invalid irq number
|
|
KASAN: slab-out-of-bounds Read in mcp2221_raw_event
input
usb
|
19 |
C |
|
|
1144 |
190d |
496d
|
29/29 |
190d |
b56cc41a3ae7
hid: fix I2C read buffer overflow in raw_event() for mcp2221
|
|
possible deadlock in bch2_symlink
exfat
|
4 |
C |
error |
|
1135 |
226d |
564d
|
29/29 |
190d |
5f1c8965e748
ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
|
|
general protection fault in atmtcp_c_send
atm
|
2 |
C |
done |
|
7 |
233d |
239d
|
29/29 |
190d |
ec79003c5f9d
atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
|
|
BUG: unable to handle kernel paging request in move_pages
mm
|
8 |
C |
|
|
4 |
259d |
273d
|
29/29 |
190d |
aba6faec0103
userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
|
|
UBSAN: shift-out-of-bounds in ax88772_bind
usb
|
-1 |
C |
done |
|
19 |
238d |
244d
|
29/29 |
190d |
24ef2f53c07f
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
|
|
WARNING in xfrm_state_fini (3)
net
|
-1 |
C |
done |
|
122008 |
190d |
261d
|
29/29 |
190d |
42e42562c9cf
xfrm: flush all states in xfrm_state_fini
|
|
possible deadlock in posix_clock_unregister
kernel
|
4 |
|
|
|
16 |
245d |
286d
|
29/29 |
190d |
2efe41234dbd
ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
|
|
WARNING: ODEBUG bug in __sk_destruct (3)
net
|
-1 |
C |
error |
|
12 |
235d |
251d
|
29/29 |
190d |
52565a935213
net: kcm: Fix race condition in kcm_unattach()
|
|
WARNING in shmem_unlink
overlayfs
|
-1 |
syz |
inconclusive |
|
12 |
206d |
244d
|
29/29 |
190d |
e8bd877fb76b
ovl: fix possible double unlink
|
|
WARNING in css_rstat_exit
cgroups
|
-1 |
syz |
|
|
39 |
238d |
307d
|
29/29 |
190d |
eea51c6e3f66
cgroup: avoid null de-ref in css_rstat_exit()
|
|
WARNING in __ww_mutex_wound
dri
|
-1 |
C |
|
|
16832 |
229d |
261d
|
29/29 |
190d |
21924af67d69
locking: Fix __clear_task_blocked_on() warning from __ww_mutex_wound() path
|
|
possible deadlock in xsk_diag_dump (2)
net
bpf
|
4 |
|
|
|
1 |
255d |
255d
|
29/29 |
190d |
c64237960819
hamradio: ignore ops-locked netdevs
|
|
KMSAN: uninit-value in sctp_assoc_bh_rcv
sctp
|
7 |
C |
|
|
258 |
246d |
376d
|
29/29 |
190d |
fd60d8a08619
sctp: linearize cloned gso packets in sctp_rcv
|
|
BUG: unable to handle kernel paging request in nsim_queue_free
net
|
8 |
syz |
|
|
49 |
225d |
259d
|
29/29 |
190d |
b2cafefaf047
netdevsim: Fix wild pointer access in nsim_queue_free().
|
|
KMSAN: uninit-value in hsr_get_node (3)
net
|
7 |
C |
|
|
30 |
239d |
728d
|
29/29 |
190d |
7af76e9d18a9
net, hsr: reject HSR frame if skb can't hold tag
|
|
KASAN: slab-use-after-free Read in rose_timer_expiry (3)
hams
|
19 |
|
|
|
6059 |
225d |
332d
|
29/29 |
190d |
da9c9c877597
net: rose: include node references in rose_neigh refcount
|
|
WARNING in move_page_tables
mm
|
-1 |
C |
|
|
3 |
247d |
247d
|
29/29 |
190d |
772e5b4a5e83
mm/mremap: fix WARN with uffd that has remap events disabled
|
|
WARNING in nft_socket_init (2)
netfilter
|
-1 |
C |
done |
|
6 |
248d |
265d
|
29/29 |
190d |
1dee968d22ea
netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
|
|
WARNING in follow_page_pte
input
usb
mm
|
-1 |
C |
done |
|
6 |
254d |
253d
|
29/29 |
190d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
WARNING in virtio_transport_send_pkt_info
net
virt
kvm
|
-1 |
C |
|
|
145 |
230d |
248d
|
29/29 |
190d |
7fb1291257ea
vsock/virtio: Fix message iterator handling on transmit path
|
|
possible deadlock in xsk_notifier (3)
bpf
net
|
4 |
|
|
|
3 |
245d |
296d
|
29/29 |
190d |
53898ebabe84
net: lapbether: ignore ops-locked netdevs
|
|
KMSAN: uninit-value in __sctp_v6_cmp_addr (2)
sctp
|
7 |
C |
|
|
9 |
234d |
233d
|
29/29 |
190d |
2e8750469242
sctp: initialize more fields in sctp_v6_from_sk()
|
|
KMSAN: kernel-infoleak in do_insnlist_ioctl
comedi
|
18 |
C |
|
|
10 |
238d |
269d
|
29/29 |
190d |
3cd212e895ca
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
|
|
WARNING in rxe_skb_tx_dtor
rdma
|
-1 |
C |
|
|
11 |
237d |
350d
|
29/29 |
190d |
3c3e9a9f2972
RDMA/rxe: Flush delayed SKBs while releasing RXE resources
|
|
WARNING in path_noexec
mm
fs
|
-1 |
C |
done |
|
14318 |
198d |
283d
|
29/29 |
198d |
secretmem: use SB_I_NOEXEC
|
|
kernel BUG in f2fs_sync_node_pages
f2fs
|
-1 |
C |
done |
|
4275 |
223d |
305d
|
29/29 |
203d |
6dea74e454c2
f2fs: Fix __write_node_folio() conversion
|
|
WARNING in bdev_count_inflight_rw
block
|
-1 |
|
|
|
2 |
293d |
293d
|
29/29 |
208d |
c007062188d8
block: fix false warning in bdev_count_inflight_rw()
|
|
WARNING: suspicious RCU usage in corrupted (3)
net
|
4 |
C |
done |
done |
1 |
264d |
325d
|
29/29 |
211d |
7f12c3385048
net, bpf: Fix RCU usage in task_cls_state() for BPF programs
|
|
INFO: task hung in hub_activate (3)
usb
|
1 |
|
|
|
177 |
288d |
289d
|
29/29 |
213d |
9bd9c8026341
usb: hub: Fix flushing of delayed work used for post resume purposes
|
|
WARNING in flush_delayed_work
usb
|
-1 |
C |
|
|
704 |
288d |
293d
|
29/29 |
213d |
9bd9c8026341
usb: hub: Fix flushing of delayed work used for post resume purposes
|
|
kernel BUG in bch2_journal_keys_peek_max
fs
|
-1 |
C |
done |
|
45 |
291d |
428d
|
29/29 |
213d |
425da82c63e3
bcachefs: btree_iter: fix updates, journal overlay
|
|
kernel BUG in bch2_journal_keys_peek_prev_min
fs
|
-1 |
|
|
|
1 |
295d |
291d
|
29/29 |
217d |
1f8aede70d49
bcachefs: fix bch2_journal_keys_peek_prev_min() underflow
|
|
WARNING in osif_xfer/usb_submit_urb
usb
|
-1 |
C |
error |
done |
18 |
299d |
346d
|
29/29 |
217d |
56ad91c1aa9c
i2c: robotfuzz-osif: disable zero-length read messages
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (3)
kernel
|
9 |
C |
|
|
20 |
272d |
301d
|
29/29 |
219d |
8282013b5605
vmci: Prevent the dispatching of uninitialized payloads
vmci: Prevent the dispatching of uninitialized payloads
|
|
WARNING in move_to_new_folio (2)
gfs2
mm
|
-1 |
C |
error |
|
398 |
262d |
282d
|
29/29 |
220d |
5c8f12cf1e64
gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
|
|
WARNING in __vmap_pages_range_noflush
io-uring
|
-1 |
C |
done |
|
14 |
252d |
251d
|
29/29 |
224d |
33503c083fda
io_uring/memmap: cast nr_pages to size_t before shifting
|
|
WARNING in bpf_check (4)
bpf
|
-1 |
C |
done |
|
5241 |
224d |
330d
|
29/29 |
224d |
e09299225d5b
bpf: Reject narrower access to pointer ctx fields
|
|
WARNING in ip6_mr_output
net
|
-1 |
C |
done |
|
143 |
289d |
293d
|
29/29 |
224d |
af232e7615e4
ipv6: guard ip6_mr_output() with rcu
|
|
KASAN: use-after-free Read in bch2_btree_node_read_done
fs
|
19 |
C |
done |
|
64 |
298d |
507d
|
29/29 |
224d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
WARNING in _ieee80211_sta_cur_vht_bw
wireless
|
-1 |
C |
|
|
52 |
281d |
294d
|
29/29 |
224d |
58fcb1b4287c
wifi: mac80211: reject VHT opmode for unsupported channel widths
|
|
KASAN: slab-use-after-free Read in rose_get_neigh
hams
|
19 |
C |
error |
|
1449 |
282d |
674d
|
29/29 |
224d |
34a500caf48c
rose: fix dangling neighbour pointers in rose_rt_device_down()
|
|
KASAN: slab-use-after-free Read in br_multicast_has_router_adjacent
bridge
|
19 |
|
|
|
2 |
298d |
295d
|
29/29 |
224d |
7544f3f5b0b5
bridge: mcast: Fix use-after-free during router port configuration
|
|
KASAN: slab-out-of-bounds Read in mon_copy_to_buff
usb
|
17 |
C |
|
|
7 |
276d |
283d
|
29/29 |
224d |
0d0777ccaa2d
HID: core: ensure __hid_request reserves the report ID as the first byte
|
|
KASAN: slab-use-after-free Read in do_check
bpf
|
19 |
C |
|
|
15 |
307d |
309d
|
29/29 |
224d |
3d71b8b9abae
bpf: Fix state use-after-free on push_stack() err
|
|
WARNING in ieee80211_tdls_oper
wireless
|
-1 |
C |
|
|
6 |
315d |
339d
|
29/29 |
224d |
16ecdab5446f
wifi: mac80211: reject TDLS operations when station is not associated
|
|
WARNING in ipv6_gso_segment
net
|
-1 |
C |
|
|
8 |
260d |
260d
|
29/29 |
224d |
d45cf1e7d718
ipv6: reject malicious packets in ipv6_gso_segment()
|
|
kernel BUG in try_to_unmap_one (2)
mm
|
-1 |
C |
|
|
7 |
291d |
315d
|
29/29 |
224d |
9f1e8cd0b7c4
mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
|
|
kernel BUG in bch2_btree_path_level_init (3)
fs
|
-1 |
C |
done |
|
489 |
224d |
481d
|
29/29 |
224d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
WARNING in perf_pending_task
perf
|
-1 |
C |
|
|
35773 |
271d |
296d
|
29/29 |
224d |
3da6bb419750
perf/core: Fix WARN in perf_sigtrap()
|
|
possible deadlock in team_del_slave (3)
net
|
4 |
C |
error |
|
386707 |
236d |
720d
|
29/29 |
224d |
bfb4fb77f9a8
team: replace team lock with rtnl lock
|
|
general protection fault in __smc_diag_dump (3)
smc
|
2 |
C |
error |
|
102 |
231d |
525d
|
29/29 |
224d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
UBSAN: shift-out-of-bounds in das16m1_attach
comedi
|
-1 |
C |
|
|
92 |
270d |
286d
|
29/29 |
224d |
ed93c6f68a3b
comedi: das16m1: Fix bit shift out of bounds
|
|
WARNING in hashtab_init
selinux
|
-1 |
C |
|
|
992 |
260d |
302d
|
29/29 |
224d |
9ab71d9204c3
selinux: add __GFP_NOWARN to hashtab_init() allocations
|
|
kernel BUG in __bch2_bkey_compat
fs
|
-1 |
C |
done |
done |
5 |
307d |
307d
|
29/29 |
224d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
possible deadlock in bdev_release
block
|
4 |
|
|
|
11 |
257d |
300d
|
29/29 |
224d |
8b428f42f3ed
nbd: fix lockdep deadlock warning
|
|
INFO: task hung in generic_file_write_iter (3)
exfat
|
1 |
C |
error |
|
4 |
228d |
267d
|
29/29 |
224d |
fb0e9db99eef
fat: fix too many log in fat_chain_add()
|
|
KASAN: slab-use-after-free Read in br_multicast_add_router
bridge
|
19 |
|
|
|
1 |
312d |
307d
|
29/29 |
224d |
7544f3f5b0b5
bridge: mcast: Fix use-after-free during router port configuration
|
|
WARNING in bdev_getblk
udf
|
-1 |
C |
done |
|
146 |
225d |
284d
|
29/29 |
224d |
7e49538288e5
loop: Avoid updating block size under exclusive owner
|
|
kernel BUG in do_write_page
f2fs
|
-1 |
|
|
|
23 |
282d |
289d
|
29/29 |
224d |
8f4688591d96
f2fs: fix to use f2fs_is_valid_blkaddr_raw() in do_write_page()
|
|
kernel BUG in bch2_trans_update_by_path
fs
|
-1 |
C |
done |
|
857 |
226d |
301d
|
29/29 |
224d |
c72d628469b8
bcachefs: Fix btree for nonexistent tree depth
|
|
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key
fs
|
8 |
C |
|
|
75 |
300d |
324d
|
29/29 |
224d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
KMSAN: uninit-value in __try_merge_extent_node
f2fs
|
7 |
|
|
|
3 |
265d |
302d
|
29/29 |
224d |
154467f4ad03
f2fs: fix KMSAN uninit-value in extent_info usage
|
|
WARNING in udf_process_sequence
udf
|
-1 |
C |
error |
|
1 |
280d |
279d
|
29/29 |
224d |
1a11201668e8
udf: Verify partition map count
|
|
WARNING in btrfs_rebuild_free_space_tree
btrfs
|
-1 |
C |
|
|
1 |
316d |
312d
|
29/29 |
224d |
1e6ed33cabba
btrfs: fix failure to rebuild free space tree using multiple transactions
|
|
WARNING in reg_bounds_sanity_check
bpf
|
-1 |
C |
done |
|
6525 |
224d |
289d
|
29/29 |
224d |
6279846b9b25
bpf: Forget ranges when refining tnum after JSET
|
|
general protection fault in clip_push
ext4
net
|
8 |
C |
|
|
5 |
293d |
300d
|
29/29 |
224d |
b993ea46b3b6
atm: clip: prevent NULL deref in clip_push()
|
|
general protection fault in qfq_qlen_notify
net
|
2 |
C |
|
|
18 |
280d |
286d
|
29/29 |
224d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
KASAN: slab-use-after-free Read in disk_add_events
fuse
block
|
19 |
C |
|
|
4 |
261d |
261d
|
29/29 |
224d |
1df1fc845d22
md: fix create on open mddev lifetime regression
|
|
WARNING in ip_mr_output
netfilter
|
-1 |
C |
error |
|
74 |
291d |
293d
|
29/29 |
224d |
beead7eea896
net: ipv4: guard ip_mr_output() with rcu
|
|
kernel BUG in clear_inode (3)
jfs
|
-1 |
C |
error |
|
637 |
227d |
308d
|
29/29 |
224d |
2d91b3765cd0
jfs: truncate good inode pages when hard link is 0
|
|
general protection fault in drr_qlen_notify
net
|
10 |
C |
done |
|
101 |
278d |
286d
|
29/29 |
224d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
general protection fault in qdisc_tree_reduce_backlog
net
|
8 |
C |
done |
|
255 |
274d |
286d
|
29/29 |
224d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
WARNING: refcount bug in process_scheduled_works
fuse
|
13 |
C |
done |
|
277 |
251d |
261d
|
29/29 |
224d |
1df1fc845d22
md: fix create on open mddev lifetime regression
|
|
Unable to handle kernel write to read-only memory at virtual address ADDR (2)
net
lsm
|
-1 |
|
|
|
1 |
283d |
282d
|
29/29 |
224d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
kernel panic: trans should be locked, unlocked by bch2_btree_update_start
fs
|
2 |
C |
error |
error |
361 |
306d |
497d
|
29/29 |
224d |
5c4acbc8ce90
bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
|
|
upstream build error (23)
|
-1 |
|
|
|
46 |
260d |
261d
|
29/29 |
224d |
f627b51aaa04
compiler_types: Provide __no_kstack_erase to disable coverage only on Clang
|
|
KMSAN: uninit-value in xfrm_state_find (4)
net
|
19 |
|
|
|
2406 |
224d |
330d
|
29/29 |
224d |
94d077c33173
xfrm: state: initialize state_ptrs earlier in xfrm_state_find
|
|
WARNING in usbnet_status_start
usb
|
-1 |
C |
|
|
349 |
269d |
282d
|
29/29 |
224d |
4c4ca3c46167
usb: net: sierra: check for no status endpoint
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (4)
bluetooth
|
12 |
C |
|
|
8 |
283d |
283d
|
29/29 |
224d |
a0075accbf0d
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
|
|
BUG: unable to handle kernel paging request in ocfs2_unlock_and_free_folios
ocfs2
|
8 |
C |
|
|
141 |
249d |
305d
|
29/29 |
224d |
2ae826799932
ocfs2: reset folio to NULL when get folio fails
|
|
general protection fault in hfsc_qlen_notify
net
|
10 |
C |
|
|
161 |
273d |
287d
|
29/29 |
224d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
KMSAN: uninit-value in pptp_xmit (3)
net
|
7 |
C |
|
|
49 |
254d |
261d
|
29/29 |
224d |
de9c4861fb42
pptp: ensure minimal skb length in pptp_xmit()
|
|
KASAN: use-after-free Read in crypto_poly1305_update
bcachefs
|
19 |
C |
done |
done |
20 |
304d |
423d
|
29/29 |
224d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason (3)
bluetooth
|
19 |
|
|
|
5 |
296d |
304d
|
29/29 |
224d |
1d6123102e9f
Bluetooth: hci_core: Fix use-after-free in vhci_flush()
|
|
KASAN: slab-use-after-free Read in __io_req_task_work_add
io-uring
|
19 |
|
|
|
1 |
287d |
282d
|
29/29 |
224d |
fc582cd26e88
io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
|
|
KASAN: slab-out-of-bounds Read in ntfs_utf16_to_nls
ntfs3
|
17 |
C |
error |
|
5 |
312d |
316d
|
29/29 |
224d |
e841ecb13933
fs/ntfs3: Add sanity check for file name
|
|
general protection fault in htb_qlen_notify
net
|
10 |
C |
done |
|
166 |
277d |
287d
|
29/29 |
224d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
BUG: stack guard page was hit in sock_close
net
|
-1 |
|
|
|
1 |
290d |
288d
|
29/29 |
224d |
c489f3283dbf
atm: clip: Fix infinite recursive call of clip_push().
|
|
KASAN: slab-use-after-free Write in recv_work (2)
nbd
|
22 |
C |
|
|
16 |
243d |
339d
|
29/29 |
224d |
aa9552438ebf
nbd: fix uaf in nbd_genl_connect() error path
|
|
WARNING in do_check
bpf
|
-1 |
C |
error |
|
51 |
236d |
307d
|
29/29 |
224d |
3157f7e29996
bpf: handle jset (if a & b ...) as a jump in CFG computation
|
|
KASAN: slab-out-of-bounds Read in poly1305_update_arch
bcachefs
|
19 |
C |
done |
done |
29 |
319d |
710d
|
29/29 |
224d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
kernel BUG in bch2_bkey_cmp_packed (2)
fs
|
-1 |
C |
|
|
7 |
308d |
318d
|
29/29 |
224d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
kernel BUG in bch2_reconstruct_snapshots
fs
|
-1 |
C |
done |
done |
7 |
332d |
423d
|
29/29 |
224d |
b2e2bed11980
bcachefs: Add missing key type checks to check_snapshot_exists()
|
|
KMSAN: uninit-value in get_temp_cnct
hwmon
|
7 |
|
|
|
9 |
275d |
301d
|
29/29 |
224d |
495a4f0dce9c
hwmon: (corsair-cpro) Validate the size of the received input buffer
|
|
UBSAN: array-index-out-of-bounds in dbAllocAG
jfs
|
15 |
C |
|
|
1 |
348d |
358d
|
29/29 |
224d |
c214006856ff
jfs: upper bound check of tree index in dbAllocAG
|
|
KASAN: slab-use-after-free Read in neon_poly1305_update
bcachefs
|
19 |
C |
|
|
5 |
632d |
700d
|
29/29 |
224d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
possible deadlock in __ocfs2_flush_truncate_log
ocfs2
|
4 |
C |
inconclusive |
|
3410 |
248d |
397d
|
29/29 |
224d |
08eabe4b9e98
ocfs2: avoid potential ABBA deadlock by reordering tl_inode lock
|
|
UBSAN: shift-out-of-bounds in gfs2_dir_read (2)
gfs2
|
-1 |
C |
|
|
13 |
272d |
276d
|
29/29 |
224d |
557c024ca725
gfs2: Validate i_depth for exhash directories
|
|
KMSAN: uninit-value in dt2817_dio_insn_bits
comedi
|
7 |
|
|
|
2 |
285d |
283d
|
29/29 |
224d |
e9cb26291d00
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
|
|
kernel BUG in sanity_check_pinned_pages
mm
|
-1 |
C |
|
|
3 |
299d |
317d
|
29/29 |
224d |
5afb4bf9fc62
io_uring/rsrc: fix folio unpinning
|
|
WARNING in btrfs_add_delayed_iput
btrfs
|
-1 |
|
|
|
2 |
280d |
316d
|
29/29 |
224d |
a26bf338cdad
btrfs: fix race between async reclaim worker and close_ctree()
|
|
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start
fs
|
10 |
C |
|
|
6 |
294d |
307d
|
29/29 |
224d |
56be92c63f02
bcachefs: Fix pool->alloc NULL pointer dereference
|
|
WARNING in check_helper_call
bpf
|
-1 |
C |
done |
|
7 |
247d |
289d
|
29/29 |
224d |
65fdafd6765f
bpf: Avoid warning on multiple referenced args in call
|
|
KASAN: use-after-free Read in bch2_checksum
fs
|
19 |
C |
error |
done |
8 |
328d |
340d
|
29/29 |
224d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
kernel BUG in bch2_btree_node_iter_init (2)
fs
|
-1 |
C |
done |
|
3 |
281d |
281d
|
29/29 |
224d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
possible deadlock in upgrade_mmap_lock_carefully (2)
ntfs3
mm
|
4 |
C |
error |
|
6 |
294d |
312d
|
29/29 |
224d |
a49f0abd8959
Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
|
|
KASAN: slab-out-of-bounds Read in pause_parse_request
net
|
17 |
C |
done |
|
217 |
288d |
294d
|
29/29 |
224d |
99e3eb454cc4
net: ethtool: avoid OOB accesses in PAUSE_SET
|
|
possible deadlock in dev_set_allmulti (2)
net
|
4 |
|
|
|
2 |
297d |
305d
|
29/29 |
224d |
bfb4fb77f9a8
team: replace team lock with rtnl lock
|
|
WARNING in kvfree_call_rcu
net
lsm
|
-1 |
C |
|
|
2 |
283d |
282d
|
29/29 |
224d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
WARNING in format_decode (3)
bpf
trace
|
-1 |
C |
done |
|
2248 |
270d |
877d
|
29/29 |
224d |
f8242745871f
bpf: Reject %p% format string in bprintf-like helpers
|
|
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry
netfilter
|
17 |
C |
done |
|
7 |
275d |
273d
|
29/29 |
224d |
bf58e667af7d
netfilter: xt_nfacct: don't assume acct name is null-terminated
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (4)
fbdev
|
21 |
C |
|
|
3869 |
224d |
603d
|
29/29 |
224d |
af0db3c1f898
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
|
|
kernel BUG in __hfsplus_setxattr
hfs
|
-1 |
C |
error |
|
18903 |
248d |
1237d
|
29/29 |
224d |
c7c6363ca186
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
|
|
kernel panic: in transaction restart: transaction_restart_mem_realloced, last restarted by
fs
|
2 |
|
|
|
2 |
293d |
290d
|
29/29 |
224d |
fbf913cb72a5
bcachefs: Fix incorrect transaction restart handling
|
|
WARNING in record_func_key
bpf
|
-1 |
C |
|
|
90 |
286d |
289d
|
29/29 |
224d |
032547272eb0
bpf: Avoid warning on unexpected map for tail call
|
|
WARNING in hfsplus_free_extents
hfs
|
-1 |
C |
error |
|
402 |
268d |
1228d
|
29/29 |
224d |
fcb96956c921
hfsplus: remove mutex_lock check in hfsplus_free_extents
|
|
KMSAN: uninit-value in nf_flow_offload_inet_hook (2)
netfilter
|
7 |
C |
|
|
13 |
281d |
283d
|
29/29 |
224d |
18cdb3d982da
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
|
|
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key
fs
|
19 |
C |
done |
|
226 |
290d |
310d
|
29/29 |
224d |
9b54efe66c9b
bcachefs: Fix alloc_req use after free
|
|
general protection fault in tipc_conn_close (4)
tipc
|
2 |
|
|
|
1 |
292d |
288d
|
29/29 |
224d |
667eeab4999e
tipc: Fix use-after-free in tipc_conn_close().
|
|
kernel BUG in __bch2_bkey_unpack_key
fs
|
-1 |
C |
|
|
43 |
303d |
324d
|
29/29 |
224d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert
fs
|
-1 |
C |
done |
|
434 |
286d |
470d
|
29/29 |
224d |
96de8f852031
bcachefs: mark invalid_btree_id autofix
|
|
KASAN: slab-out-of-bounds Read in ocfs2_dx_dir_lookup_rec
ocfs2
|
19 |
C |
|
|
76 |
224d |
504d
|
29/29 |
224d |
44acc46d182f
ocfs2: avoid NULL pointer dereference in dx_dir_lookup_rec()
|
|
kernel BUG in folio_unlock (3)
f2fs
netfs
|
-1 |
C |
done |
|
2837 |
309d |
420d
|
29/29 |
224d |
6dea74e454c2
f2fs: Fix __write_node_folio() conversion
|
|
KASAN: slab-use-after-free Read in io_poll_remove_entries
comedi
|
19 |
C |
|
|
12 |
262d |
271d
|
29/29 |
224d |
35b6fc51c666
comedi: fix race between polling and detaching
|
|
possible deadlock in rpc_close_pipes
net
nfs
|
4 |
C |
|
|
904 |
286d |
288d
|
29/29 |
224d |
2a8061ee5e41
better lockdep annotations for simple_recursive_removal()
|
|
WARNING: suspicious RCU usage in task_cls_state
net
|
4 |
C |
done |
|
175 |
237d |
325d
|
29/29 |
224d |
7f12c3385048
net, bpf: Fix RCU usage in task_cls_state() for BPF programs
|
|
BUG: assuming non migratable context at ./include/linux/filter.h:LINE
netfilter
|
-1 |
C |
done |
|
1189 |
236d |
273d
|
29/29 |
224d |
17ce3e5949bc
bpf: Disable migration in nf_hook_run_bpf().
|
|
WARNING in remove_proc_entry (8)
net
nfs
|
-1 |
syz |
|
|
76 |
258d |
308d
|
29/29 |
224d |
e8d6f3ab5946
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
|
|
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans
fs
|
19 |
C |
error |
|
550 |
290d |
308d
|
29/29 |
224d |
9b54efe66c9b
bcachefs: Fix alloc_req use after free
|
|
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key
fs
|
-1 |
C |
done |
|
54 |
307d |
323d
|
29/29 |
224d |
03208bd06a61
bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
|
|
WARNING in taprio_get_start_time (2)
net
|
-1 |
|
|
|
1 |
307d |
307d
|
29/29 |
224d |
ae8508b25def
net/sched: taprio: enforce minimum value for picos_per_byte
|
|
KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
afs
|
17 |
C |
|
|
659 |
265d |
485d
|
29/29 |
224d |
9aa64182952d
afs: Fix check for NULL terminator
|
|
possible deadlock in team_device_event (3)
net
|
4 |
C |
error |
|
38569 |
236d |
707d
|
29/29 |
224d |
bfb4fb77f9a8
team: replace team lock with rtnl lock
|
|
UBSAN: shift-out-of-bounds in s32ton (2)
input
usb
|
-1 |
C |
|
|
4 |
269d |
276d
|
29/29 |
224d |
a6b87bfc2ab5
HID: core: Harden s32ton() against conversion to 0 bits
|
|
linux-next test error: WARNING in apparmor_unix_stream_connect
apparmor
|
-1 |
|
|
|
30 |
260d |
269d
|
29/29 |
224d |
f3c0675bb9e0
apparmor: fix test error: WARNING in apparmor_unix_stream_connect
|
|
general protection fault in pick_link (2)
ntfs3
|
2 |
C |
error |
|
7 |
289d |
303d
|
29/29 |
224d |
d99208b91933
fs/ntfs3: cancle set bad inode after removing name fails
|
|
KASAN: invalid-free in nl80211_dump_station
wireless
|
24 |
|
|
|
5 |
274d |
288d
|
29/29 |
224d |
9a44b5e36cd6
wifi: cfg80211: fix double free for link_sinfo in nl80211_station_dump()
|
|
UBSAN: array-index-out-of-bounds in ieee80211_request_ibss_scan (2)
wireless
|
15 |
|
|
|
238 |
269d |
278d
|
29/29 |
224d |
444020f4bf06
wifi: cfg80211: remove scan request n_channels counted_by
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
17 |
C |
|
|
1512 |
260d |
381d
|
29/29 |
224d |
7af4d7b53502
Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
|
|
VFS: Busy inodes after unmount (use-after-free) (2)
btrfs
|
2 |
C |
error |
|
277 |
228d |
340d
|
29/29 |
224d |
d0118d7d20bb
ocfs2: update d_splice_alias() return code checking
|
|
KASAN: slab-use-after-free Read in tcp_prune_ofo_queue
net
|
19 |
C |
done |
|
356 |
273d |
275d
|
29/29 |
224d |
7eeabfb23738
tcp: fix UaF in tcp_prune_ofo_queue()
|
|
WARNING: kernel/bpf/verifier.c:LINE at do_check, CPU: syz.NUM.NUM/NUM
bpf
|
-1 |
syz |
done |
|
5 |
304d |
296d
|
29/29 |
224d |
dadb59104c64
bpf: Fix aux usage after do_check_insn()
|
|
UBSAN: shift-out-of-bounds in pcl812_attach
comedi
|
-1 |
C |
|
|
288 |
269d |
286d
|
29/29 |
224d |
b14b076ce593
comedi: pcl812: Fix bit shift out of bounds
|
|
kernel BUG in __btree_trans_update_by_path
fs
|
-1 |
C |
done |
|
20 |
282d |
287d
|
29/29 |
224d |
c72d628469b8
bcachefs: Fix btree for nonexistent tree depth
|
|
BUG: unable to handle kernel paging request in afs_put_vlserverlist
afs
|
8 |
C |
|
|
3 |
279d |
368d
|
29/29 |
224d |
8b3c655fa240
afs: Set vllist to NULL if addr parsing fails
|
|
kernel BUG in ext4_update_inline_data
ext4
|
-1 |
C |
|
|
15 |
261d |
283d
|
29/29 |
224d |
099b847ccc6c
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
|
|
kernel BUG in populate_free_space_tree
btrfs
|
-1 |
C |
|
|
4 |
316d |
315d
|
29/29 |
224d |
1961d20f6fa8
btrfs: fix assertion when building free space tree
|
|
WARNING in inet_sock_destruct (4)
net
|
-1 |
C |
done |
|
6683 |
226d |
1028d
|
29/29 |
224d |
d3a5f2871adc
tcp: Correct signedness in skb remaining space calculation
|
|
WARNING: proc registration bug in atm_dev_register
net
|
-1 |
C |
error |
|
5 |
295d |
302d
|
29/29 |
224d |
a433791aeaea
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
|
|
BUG: unable to handle kernel NULL pointer dereference in vcc_sendmsg
net
|
10 |
|
|
|
1 |
333d |
329d
|
29/29 |
224d |
22fc46cea91d
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
|
|
kernel BUG in alloc_hugetlb_folio_reserve
mm
|
-1 |
C |
done |
|
98 |
278d |
467d
|
29/29 |
224d |
c39b87456411
mm/hugetlb: don't crash when allocating a folio if there are no resv
|
|
kernel BUG in __bkey_unpack_pos (2)
fs
|
-1 |
C |
done |
|
24 |
279d |
476d
|
29/29 |
224d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
KASAN: slab-use-after-free Read in __free_filter
trace
|
19 |
C |
|
|
4 |
297d |
297d
|
29/29 |
224d |
6921d1e07cb5
tracing: Fix filter logic error
|
|
WARNING in convert_ctx_accesses
bpf
|
-1 |
C |
done |
|
80 |
238d |
260d
|
29/29 |
224d |
ead3d7b2b6af
bpf: Check flow_dissector ctx accesses are aligned
|
|
WARNING in comedi_unlocked_ioctl
comedi
mm
|
-1 |
C |
|
|
262 |
270d |
286d
|
29/29 |
224d |
08ae4b20f5e8
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
|
|
BUG: sleeping function called from invalid context in __xas_nomem (2)
block
|
5 |
|
|
|
1 |
297d |
293d
|
29/29 |
224d |
0d519bb0de3b
brd: fix sleeping function called from invalid context in brd_insert_page()
|
|
WARNING in iopt_map_pages (2)
iommu
|
-1 |
C |
|
|
4 |
283d |
296d
|
29/29 |
224d |
b42497e3c0e7
iommufd: Prevent ALIGN() overflow
|
|
KASAN: use-after-free Read in poly1305_update
fs
|
19 |
C |
done |
|
8 |
292d |
307d
|
29/29 |
224d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2)
fs
|
10 |
C |
done |
|
8 |
303d |
319d
|
29/29 |
224d |
56be92c63f02
bcachefs: Fix pool->alloc NULL pointer dereference
|
|
KASAN: null-ptr-deref Write in rcuref_put (4)
net
|
12 |
C |
done |
|
7 |
254d |
372d
|
29/29 |
224d |
ae633388cae3
pptp: fix pptp_xmit() error path
|
|
KASAN: slab-use-after-free Read in bch2_copygc
fs
|
19 |
C |
done |
|
25 |
224d |
282d
|
29/29 |
224d |
c02b943f7d12
bcachefs: Fix reference to invalid bucket in copygc
|
|
kernel BUG in unregister_vlan_dev (3)
net
|
-1 |
|
|
|
7 |
306d |
347d
|
29/29 |
224d |
579d4f9ca9a9
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
|
|
kernel BUG in jfs_truncate_nolock
jfs
|
-1 |
C |
error |
|
5 |
304d |
317d
|
29/29 |
224d |
2d04df811642
jfs: Regular file corruption check
|
|
KCSAN: data-race in pcpu_balance_workfn / pcpu_nr_pages (2)
kernel
|
6 |
|
|
|
1 |
293d |
293d
|
29/29 |
224d |
b112a4e0a1af
mm/percpu: prevent concurrency problem for pcpu_nr_populated read with spin lock
|
|
WARNING in pend_sync_exception
kvmarm
|
-1 |
C |
|
|
100 |
274d |
278d
|
29/29 |
236d |
efa1368ba9f4
KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
|
|
WARNING in pend_serror_exception
kvmarm
|
-1 |
C |
|
|
49 |
275d |
278d
|
29/29 |
236d |
efa1368ba9f4
KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
|
|
possible deadlock in trans_set_locked
fs
|
4 |
C |
|
|
113 |
302d |
503d
|
29/29 |
251d |
ff1dd05f8233
bcachefs: bch2_trans_relock() is trylock for lockdep
|
|
BUG: Bad rss-counter state (5)
mm
|
-1 |
C |
done |
|
2365 |
277d |
703d
|
29/29 |
252d |
43e027e41423
mm: memory: extend finish_fault() to support large folio
|
|
KASAN: wild-memory-access Read in get_futex_key
kernel
|
17 |
C |
|
|
34 |
298d |
324d
|
29/29 |
253d |
8337204c5889
futex: Handle invalid node numbers supplied by user
|
|
UBSAN: array-index-out-of-bounds in ip6_route_info_create
net
|
15 |
|
|
|
27 |
259d |
309d
|
29/29 |
253d |
b3979e3d2fc9
ipv6: Move fib6_config_validate() to ip6_route_add().
|
|
WARNING in ath6kl_bmi_get_target_info (2)
usb
wireless
|
-1 |
C |
error |
|
10349 |
285d |
623d
|
29/29 |
253d |
e7417421d893
wifi: ath6kl: remove WARN on bad firmware input
|
|
possible deadlock in __bch2_count_fsck_err
fs
|
4 |
|
|
|
12 |
317d |
335d
|
29/29 |
253d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
WARNING in rhashtable_init_noprof
fs
|
-1 |
C |
done |
|
131 |
307d |
325d
|
29/29 |
253d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
WARNING in vma_modify
mm
|
-1 |
C |
done |
|
21 |
306d |
314d
|
29/29 |
253d |
0cf4b1687a18
mm/vma: reset VMA iterator on commit_merge() OOM failure
|
|
WARNING in bio_alloc_bioset
bcachefs
|
-1 |
C |
done |
|
22792 |
300d |
369d
|
29/29 |
253d |
f946ce0be45e
bcachefs: Make sure opts.read_only gets propagated back to VFS
|
|
INFO: task hung in __bch2_fsck_err
kernel
|
1 |
syz |
|
|
2 |
391d |
387d
|
29/29 |
253d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
19 |
C |
error |
|
44 |
321d |
592d
|
29/29 |
253d |
6fe26f694c82
Bluetooth: MGMT: Protect mgmt_pending list with its own lock
|
|
KMSAN: uninit-value in atmtcp_c_send
atm
|
7 |
C |
|
|
6 |
271d |
308d
|
29/29 |
253d |
2f370ae1fb63
atm: atmtcp: Free invalid length skb in atmtcp_c_send().
|
|
WARNING in sta_info_insert_rcu (4)
wireless
|
-1 |
C |
|
|
27 |
302d |
514d
|
29/29 |
253d |
d1b1a5eb27c4
wifi: mac80211: drop invalid source address OCB frames
|
|
possible deadlock in blk_mq_freeze_queue_nomemsave
block
|
4 |
C |
done |
|
7798 |
305d |
381d
|
29/29 |
253d |
4bb08cf974c5
loop: move lo_set_size() out of queue freeze
|
|
possible deadlock in rtnl_newlink
net
|
4 |
C |
|
|
11 |
309d |
322d
|
29/29 |
253d |
b4a8085ceefb
e1000: Move cancel_work_sync to avoid deadlock
|
|
general protection fault in veth_xdp_rcv
wireguard
|
2 |
|
|
|
12 |
313d |
318d
|
29/29 |
253d |
9337c54401a5
veth: prevent NULL pointer dereference in veth_xdp_rcv
|
|
WARNING: suspicious RCU usage in mpls_getroute
net
|
4 |
|
|
|
4 |
329d |
304d
|
29/29 |
253d |
6dbb0d97c509
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
|
|
possible deadlock in __bch2_folio_reservation_get (2)
fs
|
4 |
|
|
|
25 |
310d |
339d
|
29/29 |
253d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
KASAN: slab-use-after-free Read in thread_group_cputime (2)
kernel
|
19 |
|
|
|
1 |
336d |
332d
|
29/29 |
253d |
ac0b8b327a56
io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3)
bluetooth
|
19 |
C |
|
|
5 |
314d |
337d
|
29/29 |
253d |
e6ed54e86aae
Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
|
|
UBSAN: array-index-out-of-bounds in cfg80211_inform_bss_frame_data
wireless
|
15 |
C |
done |
|
4 |
309d |
308d
|
29/29 |
253d |
a85b8544d463
wifi: remove zero-length arrays
|
|
WARNING in iomap_iter (5)
erofs
iomap
|
-1 |
C |
done |
|
6 |
307d |
307d
|
29/29 |
253d |
7869738b6908
erofs: refuse crafted out-of-file-range encoded extents
|
|
WARNING in lookup_object_or_alloc
fs
|
-1 |
|
|
|
7 |
310d |
320d
|
29/29 |
253d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
WARNING in __ieee80211_beacon_get
wireless
|
-1 |
C |
done |
|
143787 |
290d |
2019d
|
29/29 |
253d |
d19bac3d4edc
wifi: mac80211: don't WARN for late channel/color switch
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text
fs
|
17 |
C |
done |
|
6 |
310d |
310d
|
29/29 |
253d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
possible deadlock in loop_set_status
block
|
4 |
C |
done |
|
20143 |
301d |
509d
|
29/29 |
253d |
4bb08cf974c5
loop: move lo_set_size() out of queue freeze
|
|
KASAN: slab-use-after-free Read in hci_sock_get_channel
bluetooth
|
19 |
syz |
|
|
1 |
330d |
326d
|
29/29 |
253d |
6fe26f694c82
Bluetooth: MGMT: Protect mgmt_pending list with its own lock
|
|
possible deadlock in __bch2_fsck_err (2)
fs
|
4 |
C |
|
|
4 |
337d |
339d
|
29/29 |
253d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
possible deadlock in console_flush_all (3)
kernel
|
4 |
C |
error |
|
52145 |
253d |
642d
|
29/29 |
253d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
KASAN: slab-use-after-free Read in lane_ioctl
net
|
19 |
syz |
|
|
7 |
301d |
302d
|
29/29 |
253d |
d13a3824bfd2
net: atm: add lec_mutex
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text
fs
|
17 |
C |
done |
|
34 |
309d |
325d
|
29/29 |
253d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
WARNING in __init_work (2)
fs
|
-1 |
C |
|
|
5971 |
300d |
308d
|
29/29 |
253d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
WARNING: ODEBUG bug in io_sq_offload_create
io-uring
|
-1 |
C |
|
|
8 |
302d |
303d
|
29/29 |
253d |
f2320f1dd6f6
io_uring/sqpoll: don't put task_struct on tctx setup failure
|
|
WARNING in io_register_clone_buffers
io-uring
|
-1 |
C |
|
|
4 |
309d |
305d
|
29/29 |
253d |
1d27f11bf02b
io_uring/rsrc: validate buffer count with offset for cloning
|
|
possible deadlock in bch2_trans_begin
fs
|
4 |
|
|
|
5 |
322d |
452d
|
29/29 |
253d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
divide error in bch2_sb_members_v2_to_text
fs
|
2 |
C |
done |
|
3 |
310d |
310d
|
29/29 |
253d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update
fs
|
15 |
C |
|
|
539 |
301d |
353d
|
29/29 |
253d |
082c74411491
bcachefs: Fix downgrade_table_extra()
|
|
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc
bluetooth
|
17 |
C |
|
|
4 |
337d |
347d
|
29/29 |
259d |
03f1700b9b4d
Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
|
|
WARNING in bch2_printbuf_make_room
fs
|
-1 |
C |
error |
|
2 |
311d |
702d
|
29/29 |
262d |
dc5bfdf8eaed
bcachefs: fix the memory leak in exception case
|
|
possible deadlock in deactivate_super (2)
ocfs2
|
4 |
C |
inconclusive |
done |
8072 |
341d |
438d
|
29/29 |
266d |
fcaf3b2683b0
ocfs2: stop quota recovery before disabling quotas
|
|
BUG: unable to handle kernel paging request in bch2_dirent_to_text
fs
|
8 |
C |
done |
error |
3 |
327d |
638d
|
29/29 |
268d |
f39055220f6f
bcachefs: Add missing validation for superblock section clean
|
|
kernel BUG in zero_user_segments
ntfs3
|
-1 |
C |
inconclusive |
inconclusive |
19179 |
504d |
608d
|
29/29 |
273d |
045fff619312
fs/ntfs3: Equivalent transition from page to folio
|
|
INFO: task hung in uevent_show (2)
kernel
|
1 |
C |
inconclusive |
|
8325 |
285d |
523d
|
29/29 |
273d |
dc1771f71854
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
|
|
kernel BUG in vfs_get_tree (2)
fs
|
-1 |
C |
done |
|
22 |
316d |
312d
|
29/29 |
274d |
9c6185609947
bcachefs: Call bch2_fs_start before getting vfs superblock
|
|
WARNING in __folio_mark_dirty (2)
gfs2
|
-1 |
C |
error |
|
790989 |
287d |
1143d
|
29/29 |
274d |
ae9f3bd8259a
gfs2: replace sd_aspace with sd_inode
|
|
KASAN: use-after-free Read in sysv_new_inode (2)
fs
|
19 |
C |
inconclusive |
error |
21224 |
374d |
707d
|
29/29 |
274d |
448fa70158f9
sysv: Remove the filesystem
|
|
kernel BUG in bch2_fill_extent
fs
|
-1 |
|
|
|
8 |
332d |
352d
|
29/29 |
280d |
a2f546330ef9
bcachefs: Fix losing return code in next_fiemap_extent()
|
|
WARNING in get_pat_info
kernel
|
-1 |
C |
done |
done |
36 |
320d |
586d
|
29/29 |
282d |
f8e97613fed2
mm: convert VM_PFNMAP tracking to pfnmap_track() + pfnmap_untrack()
|
|
BUG: corrupted list in ring_buffer_subbuf_order_set
trace
|
8 |
C |
|
|
1 |
318d |
314d
|
29/29 |
283d |
40ee2afafc1d
ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
|
|
KMSAN: uninit-value in mii_nway_restart (2)
usb
|
7 |
C |
|
|
224 |
315d |
423d
|
29/29 |
283d |
9ad0452c0277
net: ch9200: fix uninitialised access during mii_nway_restart
|
|
WARNING in bpf_map_lookup_percpu_elem
bpf
|
-1 |
C |
done |
|
2116 |
333d |
717d
|
29/29 |
283d |
d4965578267e
bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
|
|
WARNING: refcount bug in tipc_crypto_xmit
tipc
|
13 |
C |
done |
|
4968 |
314d |
325d
|
29/29 |
283d |
f29ccaa07cf3
net: tipc: fix refcount warning in tipc_aead_encrypt
|
|
general protection fault in jbd2_journal_dirty_metadata
ext4
|
2 |
syz |
|
|
9 |
350d |
354d
|
29/29 |
283d |
af98b0157adf
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
|
|
KASAN: slab-out-of-bounds Read in iov_iter_revert
netfs
|
17 |
C |
|
|
30 |
317d |
340d
|
29/29 |
283d |
4481f7f2b3df
netfs: Fix oops in write-retry from mis-resetting the subreq iterator
|
|
possible deadlock in __nilfs_error (3)
nilfs
|
4 |
C |
error |
|
947 |
337d |
352d
|
29/29 |
283d |
fb881cd76045
nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
|
|
BUG: unable to handle kernel NULL pointer dereference in lo_rw_aio
block
|
10 |
C |
|
|
10 |
349d |
357d
|
29/29 |
283d |
f5c84eff634b
loop: Add sanity check for read/write_iter
|
|
BUG: unable to handle kernel NULL pointer dereference in io_buffer_select
io-uring
|
10 |
C |
|
|
102 |
335d |
341d
|
29/29 |
283d |
f446c6311e86
io_uring/memmap: don't use page_address() on a highmem page
|
|
KASAN: slab-use-after-free Read in ib_register_device
rdma
|
19 |
|
|
|
1 |
355d |
351d
|
29/29 |
283d |
d0706bfd3ee4
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
|
|
BUG: sleeping function called from invalid context in team_change_rx_flags
net
|
5 |
C |
done |
|
71 |
284d |
331d
|
29/29 |
283d |
d8d85ef0a631
af_packet: move notifier's packet_dev_mc out of rcu critical section
|
|
upstream test error: KASAN: slab-use-after-free Write in binderfs_evict_inode
kernel
|
-1 |
|
|
|
31 |
316d |
400d
|
29/29 |
283d |
8c0a55982528
binder: fix use-after-free in binderfs_evict_inode()
|
|
divide error in mac80211_hwsim_set_tsf
wireless
|
2 |
syz |
|
|
1 |
373d |
369d
|
29/29 |
283d |
c575f5374be7
wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
|
|
KMSAN: uninit-value in cxusb_i2c_xfer
media
|
7 |
C |
|
|
556 |
324d |
377d
|
29/29 |
283d |
73fb3b92da84
media: cxusb: no longer judge rbuf when the write fails
|
|
kernel BUG in ext4_write_inline_data (2)
ext4
|
-1 |
C |
error |
|
46 |
297d |
511d
|
29/29 |
283d |
227cb4ca5a65
ext4: inline: fix len overflow in ext4_prepare_inline_data
|
|
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan
fs
|
10 |
C |
inconclusive |
done |
45 |
341d |
843d
|
29/29 |
283d |
65c66047259f
proc: fix the issue of proc_mem_open returning NULL
|
|
kernel BUG in may_open
fs
|
-1 |
C |
error |
|
137019 |
283d |
379d
|
29/29 |
283d |
cfd86ef7e8e7
anon_inode: use a proper mode internally
|
|
WARNING in get_bpf_raw_tp_regs
bpf
trace
|
-1 |
C |
|
|
2 |
337d |
339d
|
29/29 |
283d |
3880cdbed1c4
bpf: Fix WARN() in get_bpf_raw_tp_regs
|
|
BUG: unable to handle kernel NULL pointer dereference in generic_file_read_iter
ntfs3
|
10 |
C |
done |
|
10 |
326d |
371d
|
29/29 |
283d |
8b26c8c376b2
fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr
|
|
upstream test error: KMSAN: use-after-free in mctp_dump_addrinfo
net
|
-1 |
|
|
|
128 |
336d |
350d
|
29/29 |
283d |
f11cf946c0a9
net: mctp: Don't access ifa_index when missing
|
|
KASAN: slab-use-after-free Write in binder_remove_device
kernel
|
22 |
C |
done |
|
7 |
326d |
327d
|
29/29 |
283d |
9857af0fcff3
binder: fix yet another UAF in binder_devices
|
|
UBSAN: shift-out-of-bounds in gfs2_fill_super
gfs2
|
-1 |
|
|
|
3 |
353d |
370d
|
29/29 |
283d |
27d2f101e789
gfs2: check sb_min_blocksize return value
|
|
INFO: task hung in freeze_super (6)
f2fs
|
1 |
C |
done |
|
3 |
334d |
330d
|
29/29 |
283d |
c836d3b8d94e
f2fs: fix to skip f2fs_balance_fs() if checkpoint is disabled
|
|
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (3)
media
|
21 |
C |
|
|
271 |
284d |
638d
|
29/29 |
283d |
f83ac8d30c43
media: vivid: Change the siize of the composing
|
|
KCSAN: data-race in try_to_migrate_one / zap_page_range_single
mm
|
6 |
|
|
|
1 |
423d |
422d
|
29/29 |
283d |
2e9765672332
mm: annotate data race in update_hiwater_rss
|
|
KASAN: slab-use-after-free Read in idr_for_each
kernel
|
19 |
|
|
|
5 |
423d |
426d
|
29/29 |
283d |
d66adabe9180
ipc: fix to protect IPCS lookups using RCU
|
|
INFO: trying to register non-static key in rxe_qp_do_cleanup
rdma
|
-1 |
|
|
|
7 |
321d |
363d
|
29/29 |
283d |
1c7eec4d5f3b
RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug
|
|
KASAN: use-after-free Write in __crypto_shash_import
crypto
|
22 |
C |
done |
|
40 |
324d |
325d
|
29/29 |
283d |
0a84874c7e7d
crypto: shash - Fix buffer overrun in import function
|
|
UBSAN: array-index-out-of-bounds in add_missing_indices
jfs
|
15 |
C |
|
|
187 |
311d |
506d
|
29/29 |
283d |
5dff41a86377
jfs: fix array-index-out-of-bounds read in add_missing_indices
|
|
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence (2)
sound
|
8 |
C |
|
|
4 |
334d |
348d
|
29/29 |
283d |
93a81ca06577
ALSA: pcm: Fix race of buffer access at PCM OSS layer
|
|
general protection fault in dev_set_group
net
|
2 |
C |
error |
|
3 |
316d |
316d
|
29/29 |
283d |
feafc73f3e6a
net: prevent a NULL deref in rtnl_create_link()
|
|
WARNING in __bpf_prog_ret0_warn
bpf
|
-1 |
C |
|
|
9 |
324d |
347d
|
29/29 |
283d |
86bc9c742426
bpf: Avoid __bpf_prog_ret0_warn when jit fails
|
|
BUG: sleeping function called from invalid context in dev_set_promiscuity
net
|
5 |
|
|
|
370 |
283d |
338d
|
29/29 |
283d |
6b1d3c5f675c
team: grab team lock during team_change_rx_flags
|
|
KASAN: slab-use-after-free Read in page_pool_put_unrefed_netmem
net
|
19 |
|
|
|
3 |
389d |
550d
|
29/29 |
283d |
271683bb2cf3
page_pool: Fix use-after-free in page_pool_recycle_in_ring
|
|
KCSAN: data-race in io_submit_sqes / io_uring_show_fdinfo
io-uring
|
6 |
|
|
|
1 |
351d |
351d
|
29/29 |
283d |
f024d3a8ded0
io_uring/fdinfo: annotate racy sq/cq head/tail reads
|
|
UBSAN: array-index-out-of-bounds in ieee80211_request_ibss_scan
wireless
|
15 |
C |
error |
|
29652 |
283d |
353d
|
29/29 |
283d |
82bbe02b2500
wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
|
|
possible deadlock in nilfs_get_block
nilfs
|
4 |
syz |
|
|
30 |
341d |
351d
|
29/29 |
283d |
fb881cd76045
nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
|
|
general protection fault in lookup_or_create_module_kobject
bluetooth
usb
|
2 |
C |
|
|
266 |
342d |
346d
|
29/29 |
283d |
a6aeb739974e
module: ensure that kobject_put() is safe for module type kobjects
|
|
BUG: sleeping function called from invalid context in pcpu_alloc_noprof
net
|
5 |
C |
done |
|
4 |
333d |
347d
|
29/29 |
283d |
8e5f1bb81274
ipv6: Narrow down RCU critical section in inet6_rtm_newroute().
|
|
possible deadlock in print_event_fields
trace
|
4 |
|
|
|
2 |
354d |
350d
|
29/29 |
283d |
0a8f11f8569e
tracing: Do not take trace_event_sem in print_event_fields()
|
|
KMSAN: uninit-value in xa_find
io-uring
net
|
7 |
|
|
|
28964 |
314d |
324d
|
29/29 |
283d |
eda4623cf989
io_uring/zcrx: init id for xa_find
|
|
linux-next test error: WARNING in switch_mm_irqs_off
kernel
|
-1 |
|
|
|
27 |
345d |
367d
|
29/29 |
283d |
52ebfe7412ce
x86/mm: Remove the mm_cpumask(prev) warning from switch_mm_irqs_off()
|
|
BUG: unable to handle kernel NULL pointer dereference in io_ring_buffers_peek
io-uring
|
10 |
C |
|
|
68 |
336d |
341d
|
29/29 |
283d |
f446c6311e86
io_uring/memmap: don't use page_address() on a highmem page
|
|
KCSAN: data-race in process_one_work / process_one_work
kernel
|
6 |
syz |
|
|
231 |
958d |
861d
|
29/29 |
283d |
70e1683ca3a6
workqueue: Fix race condition in wq->stats incrementation
|
|
general protection fault in native_tss_update_io_bitmap
kernel
|
2 |
C |
error |
|
7 |
331d |
414d
|
29/29 |
283d |
8b68e978718f
x86/iopl: Cure TIF_IO_BITMAP inconsistencies
|
|
INFO: task hung in f2fs_grab_cache_page
f2fs
|
1 |
C |
|
|
1 |
393d |
389d
|
29/29 |
283d |
061cf3a84bde
f2fs: fix to do sanity check on ino and xnid
|
|
kernel BUG in __bch2_trans_commit (2)
fs
|
-1 |
|
|
|
105 |
283d |
327d
|
29/29 |
283d |
97e69f12edb1
bcachefs: Fix missing BTREE_UPDATE_internal_snapshot_node
|
|
UBSAN: shift-out-of-bounds in __kfifo_alloc
input
usb
|
-1 |
C |
|
|
33349 |
313d |
382d
|
29/29 |
283d |
6bf8ab7774a2
HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
|
|
UBSAN: shift-out-of-bounds in dbAllocAG (2)
jfs
|
-1 |
C |
done |
|
5 |
354d |
405d
|
29/29 |
283d |
37bfb464ddca
jfs: validate AG parameters in dbMount() to prevent crashes
|
|
KMSAN: uninit-value in do_output_route4
lvs
|
7 |
|
|
|
15 |
337d |
350d
|
29/29 |
283d |
e34090d7214e
ipvs: fix uninit-value for saddr in do_output_route4
|
|
WARNING in move_to_new_folio
mm
|
-1 |
C |
done |
|
1366 |
283d |
369d
|
29/29 |
283d |
906d7ce3b59d
jfs: implement migrate_folio for jfs_metapage_aops
|
|
WARNING in ipv6_addr_prefix
net
|
-1 |
C |
error |
|
3056 |
301d |
350d
|
29/29 |
283d |
586ceac9acb7
ipv6: Restore fib6_config validation for SIOCADDRT.
|
|
WARNING in udp_tunnel_update_gro_rcv
net
|
-1 |
C |
error |
|
108 |
364d |
394d
|
29/29 |
283d |
c26c192c3d48
udp: properly deal with xfrm encap and ADDRFORM
|
|
UBSAN: array-index-out-of-bounds in usbhid_parse
usb
|
15 |
C |
error |
|
89 |
317d |
913d
|
29/29 |
283d |
fe7f7ac8e0c7
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
|
|
upstream test error: KMSAN: uninit-value in mctp_dump_addrinfo
net
|
-1 |
|
|
|
9 |
341d |
350d
|
29/29 |
283d |
f11cf946c0a9
net: mctp: Don't access ifa_index when missing
|
|
upstream-arm64 test error: WARNING in __apply_to_page_range
arm
|
-1 |
|
|
|
5 |
337d |
341d
|
29/29 |
283d |
b81c688426a9
arm64/mm: Disable barrier batching in interrupt contexts
|
|
WARNING in folio_large_mapcount
mm
|
-1 |
|
|
|
2 |
318d |
334d
|
29/29 |
283d |
595cf683519a
mm/khugepaged: fix race with folio split/free using temporary reference
|
|
KASAN: null-ptr-deref Read in gfs2_drop_inode
gfs2
|
11 |
C |
done |
|
1050 |
317d |
325d
|
29/29 |
283d |
9126d2754c5e
gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add
|
|
KASAN: slab-use-after-free Read in vidtv_mux_init
media
|
19 |
syz |
|
|
5 |
357d |
402d
|
29/29 |
283d |
1d5f88f05348
media: vidtv: Terminating the subsequent process of initialization failure
|
|
WARNING: ODEBUG bug in snd_rawmidi_free
sound
usb
|
-1 |
C |
error |
|
1 |
347d |
343d
|
29/29 |
283d |
0718a78f6a9f
ALSA: usb-audio: Kill timer properly at removal
|
|
KMSAN: uninit-value in usbnet_probe (3)
usb
|
7 |
C |
|
|
159 |
324d |
341d
|
29/29 |
283d |
405b0d610745
net: usb: aqc111: fix error handling of usbnet read calls
|
|
KASAN: slab-out-of-bounds Write in tracing_splice_read_pipe
trace
|
21 |
|
|
|
1 |
369d |
364d
|
29/29 |
283d |
f5178c41bb43
tracing: Fix oob write in trace_seq_to_buffer()
|
|
WARNING in nla_get_range_unsigned (3)
net
|
-1 |
C |
done |
|
22 |
339d |
343d
|
29/29 |
283d |
a96876057b9e
netlink: fix policy dump for int with validation callback
|
|
kernel BUG in dec_valid_block_count
f2fs
|
-1 |
C |
|
|
13 |
325d |
374d
|
29/29 |
283d |
05872a167c2c
f2fs: fix to do sanity check on sbi->total_valid_block_count
|
|
UBSAN: shift-out-of-bounds in squashfs_bio_read
squashfs
|
-1 |
C |
|
|
9 |
321d |
376d
|
29/29 |
283d |
734aa85390ea
Squashfs: check return result of sb_min_blocksize
|
|
UBSAN: array-index-out-of-bounds in fbcon_info_from_console
fbdev
|
15 |
|
|
|
3 |
436d |
440d
|
29/29 |
283d |
cedc1b63394a
fbcon: Make sure modelist not set on unregistered console
|
|
WARNING in ipmr_rules_exit (2)
net
|
-1 |
|
|
|
1 |
329d |
317d
|
29/29 |
283d |
c46286fdd6aa
mr: consolidate the ipmr_can_free_table() checks.
|
|
possible deadlock in smc_switch_to_fallback (2)
smc
|
4 |
C |
error |
done |
27435 |
353d |
661d
|
29/29 |
285d |
752e2217d789
smc: Fix lockdep false-positive for IPPROTO_SMC.
|
|
WARNING in inode_set_cached_link
ext4
|
-1 |
C |
done |
unreliable |
78396 |
374d |
434d
|
29/29 |
286d |
5f920d5d6083
ext4: verify fast symlink length
|
|
WARNING: locking bug in __set_page_owner
mm
|
4 |
C |
error |
inconclusive |
179425 |
437d |
529d
|
29/29 |
286d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
KASAN: use-after-free Write in ext4_insert_dentry
ext4
|
22 |
C |
done |
|
117 |
370d |
538d
|
28/29 |
304d |
94824ac9a8aa
ext4: fix off-by-one error in do_split
|
|
possible deadlock in trie_delete_elem
bpf
|
4 |
C |
done |
done |
21444 |
383d |
757d
|
28/29 |
304d |
47979314c0fe
bpf: Convert lpm_trie.c to rqspinlock
|
|
WARNING in ipv6_add_dev
net
|
-1 |
|
|
|
4 |
372d |
373d
|
28/29 |
307d |
04efcee6ef8d
net: hold instance lock during NETDEV_CHANGE
|
|
WARNING in bch2_dev_free
fs
|
-1 |
C |
done |
|
258 |
311d |
373d
|
28/29 |
307d |
d62922ba3cfc
bcachefs: Prevent granting write refs when filesystem is read-only
|
|
KMSAN: uninit-value in btree_interior_update_work
fs
|
7 |
|
|
|
2 |
390d |
442d
|
28/29 |
307d |
1f88c3567495
bcachefs: Fix a KMSAN splat in btree_update_nodes_written()
|
|
general protection fault in d_splice_alias
udf
|
2 |
C |
done |
done |
15 |
437d |
437d
|
28/29 |
307d |
902e09c8acde
fix braino in "9p: fix ->rename_sem exclusion"
|
|
general protection fault in __d_unalias
udf
nilfs
|
8 |
C |
done |
|
835 |
427d |
437d
|
28/29 |
307d |
902e09c8acde
fix braino in "9p: fix ->rename_sem exclusion"
|
|
KMSAN: uninit-value in bch2_extent_crc_append (2)
fs
|
7 |
C |
|
|
4 |
393d |
403d
|
28/29 |
308d |
53cf2a3daa4c
bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
|
|
general protection fault in lock_vma_under_rcu
mm
|
2 |
syz |
done |
|
3 |
416d |
415d
|
28/29 |
309d |
f35ab95ca0af
mm: replace vm_lock and detached flag with a reference count
|
|
KMSAN: uninit-value in bch2_trans_start_alloc_update
fs
|
7 |
C |
|
|
1051 |
384d |
507d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_iter_init (2)
fs
|
7 |
C |
|
|
309 |
384d |
515d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_inode_v3_validate
fs
|
7 |
C |
|
|
5866 |
385d |
513d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_get
fs
|
7 |
C |
|
|
18 |
395d |
501d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_check_topology
fs
|
7 |
C |
|
|
19 |
411d |
522d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
upstream test error: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init
pci
|
-1 |
|
|
|
10 |
386d |
386d
|
28/29 |
309d |
3ece3e8e5976
PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
|
|
upstream test error: general protection fault in msix_capability_init
pci
|
-1 |
|
|
|
16 |
386d |
383d
|
28/29 |
309d |
3ece3e8e5976
PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
|
|
KMSAN: uninit-value in bch2_dev_freespace_init
fs
|
7 |
C |
|
|
432 |
384d |
498d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_checksum_update (2)
fs
|
19 |
C |
done |
|
7 |
392d |
487d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bucket_alloc_early
fs
|
7 |
C |
|
|
219 |
388d |
526d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_trans_start_alloc_update_noupdate
fs
|
7 |
|
|
|
2 |
473d |
469d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in __build_ro_aux_tree
fs
|
7 |
|
|
|
3 |
478d |
489d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_ptr_v2_validate
fs
|
7 |
C |
|
|
55 |
385d |
436d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_xattr_validate
fs
|
7 |
C |
|
|
22 |
407d |
489d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_alloc_v4_validate (2)
fs
|
7 |
C |
|
|
514 |
388d |
515d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed
fs
|
7 |
syz |
|
|
2 |
451d |
478d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in rw_aux_tree_set (2)
fs
|
7 |
C |
|
|
2356 |
386d |
510d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
WARNING in bch2_opt_check_may_set
fs
|
-1 |
|
|
|
4 |
385d |
381d
|
28/29 |
309d |
2dd202dbaf0a
bcachefs: Recovery no longer holds state_lock
|
|
KMSAN: uninit-value in bch2_dirent_rename (2)
fs
|
7 |
|
|
|
5 |
473d |
483d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_dirent_validate
fs
|
7 |
|
|
|
214 |
450d |
502d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
general protection fault in sys_mremap
mm
|
2 |
C |
|
|
35 |
377d |
380d
|
28/29 |
309d |
36eed5400805
mm/mremap: do not set vrm->vma NULL immediately prior to checking it
|
|
KMSAN: uninit-value in bch2_bkey_val_validate
fs
|
7 |
C |
|
|
17 |
391d |
503d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_inode_unpack (2)
fs
|
7 |
|
|
|
9 |
454d |
470d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bkey_ptrs_validate
fs
|
7 |
C |
|
|
15 |
390d |
501d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_readdir (2)
fs
|
7 |
|
|
|
2 |
460d |
460d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bucket_alloc_trans
fs
|
7 |
C |
|
|
15 |
362d |
494d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2)
fs
|
7 |
C |
|
|
309 |
385d |
505d
|
28/29 |
309d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KASAN: slab-use-after-free Read in nla_put (2)
rdma
|
19 |
|
|
|
1 |
410d |
405d
|
28/29 |
310d |
1d6a9e7449e2
RDMA/core: Fix use-after-free when rename device name
|
|
BUG: sleeping function called from invalid context in __do_fault
afs
|
5 |
|
|
|
1 |
386d |
382d
|
28/29 |
310d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
kernel BUG in bch2_fs_initialize
fs
|
-1 |
syz |
done |
|
1004 |
364d |
369d
|
28/29 |
310d |
806776ad9c20
bcachefs: Add missing error handling
|
|
possible deadlock in __bpf_ringbuf_reserve
bpf
|
4 |
C |
error |
|
2490 |
360d |
765d
|
28/29 |
310d |
a650d38915c1
bpf: Convert ringbuf map to rqspinlock
|
|
WARNING in dev_xdp_install
bpf
|
-1 |
C |
|
|
245 |
377d |
384d
|
28/29 |
310d |
d996e412b2df
bpf: add missing ops lock around dev_xdp_attach_link
|
|
WARNING: locking bug in kernfs_path_from_node
kernfs
|
4 |
C |
done |
|
1037 |
440d |
531d
|
28/29 |
310d |
741c10b096bc
kernfs: Use RCU to access kernfs_node::name.
|
|
WARNING in do_wp_page
mm
|
-1 |
|
|
|
1 |
373d |
369d
|
28/29 |
310d |
8bdea2fce980
mm/memory: move sanity checks in do_wp_page() after mapcount vs. refcount stabilization
|
|
WARNING in __free_event
perf
|
-1 |
C |
done |
|
73 |
360d |
377d
|
28/29 |
310d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
0ba3a4ab76fd
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
|
|
KMSAN: uninit-value in isofs_readdir
isofs
|
7 |
C |
|
|
2 |
435d |
431d
|
28/29 |
310d |
81a82e8f3388
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
|
|
KMSAN: uninit-value in __request_module (6)
modules
|
7 |
C |
|
|
4 |
426d |
428d
|
28/29 |
310d |
5bef3ac184b5
team: better TEAM_OPTION_TYPE_STRING validation
|
|
WARNING in release_mtd_partition
mtd
|
-1 |
C |
|
|
8 |
319d |
440d
|
28/29 |
310d |
6697dae1e2da
mtd: capture device name setting failure when adding mtd
|
|
KASAN: slab-out-of-bounds Read in isofs_fh_to_parent
isofs
|
17 |
C |
|
|
3 |
381d |
378d
|
28/29 |
310d |
0405d4b63d08
isofs: Prevent the use of too small fid
|
|
possible deadlock in lapbeth_device_event
x25
|
4 |
C |
error |
|
121826 |
378d |
403d
|
28/29 |
310d |
7220e8f4d4ee
net: lapbether: use netdev_lockdep_set_classes() helper
|
|
KMSAN: uninit-value in ___bpf_prog_run (4)
bpf
|
7 |
C |
|
|
322 |
428d |
842d
|
28/29 |
310d |
4c2d14c40a68
ppp: Fix KMSAN uninit-value warning with bpf
|
|
possible deadlock in xsk_diag_dump
net
bpf
|
4 |
|
|
|
4 |
367d |
373d
|
28/29 |
310d |
f0433eea4688
net: don't mix device locking in dev_close_many() calls
|
|
possible deadlock in get_partial_node (2)
kernel
|
4 |
C |
done |
done |
4 |
401d |
424d
|
28/29 |
310d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
WARNING in usbnet_start_xmit/usb_submit_urb (2)
usb
|
-1 |
C |
error |
|
10 |
422d |
760d
|
28/29 |
310d |
1cf9631d836b
usbnet: gl620a: fix endpoint checking in genelink_bind()
|
|
general protection fault in ir_raw_event_store_with_filter
usb
media
|
22 |
C |
error |
|
879 |
430d |
2227d
|
28/29 |
310d |
f656cfbc7a29
media: streamzap: fix race between device disconnection and urb callback
|
|
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key (2)
hfs
|
21 |
C |
inconclusive |
|
2056 |
395d |
560d
|
28/29 |
310d |
bb5e07cb9277
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
|
|
WARNING in tls_strp_msg_load
net
|
-1 |
C |
done |
|
4 |
392d |
384d
|
28/29 |
310d |
5071a1e606b3
net: tls: explicitly disallow disconnect
|
|
WARNING in net_passive_dec
net
|
-1 |
|
|
|
33 |
413d |
419d
|
28/29 |
310d |
5c70eb5c593d
net: better track kernel sockets lifetime
|
|
KASAN: slab-use-after-free Read in key_put
lsm
keyrings
|
19 |
C |
done |
|
9 |
416d |
514d
|
28/29 |
310d |
75845c6c1a64
keys: Fix UAF in key_put()
|
|
possible deadlock in btrfs_tree_lock_nested
btrfs
|
4 |
|
|
|
14 |
463d |
466d
|
28/29 |
310d |
a216542027b8
btrfs: fix lockdep splat while merging a relocation root
|
|
kernel BUG in qlist_free_all
net
fs
|
-1 |
C |
done |
done |
12 |
362d |
510d
|
28/29 |
310d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
WARNING in __linkwatch_sync_dev
net
|
-1 |
C |
done |
|
1038 |
310d |
373d
|
28/29 |
310d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
f7a11cba0ed7
bonding: hold ops lock around get_link
|
|
WARNING in free_ruleset
lsm
|
-1 |
C |
|
|
76 |
356d |
382d
|
28/29 |
310d |
fe81536af397
landlock: Remove incorrect warning
|
|
BUG: unable to handle kernel paging request in has_enough_free_secs
f2fs
|
8 |
|
|
|
1 |
448d |
444d
|
28/29 |
310d |
986c50f6bca1
f2fs: fix to avoid accessing uninitialized curseg
|
|
WARNING: refcount bug in io_send_zc_cleanup (2)
io-uring
|
13 |
C |
done |
|
6 |
391d |
390d
|
28/29 |
310d |
67c007d6c12d
io_uring/net: fix sendzc double notif flush
|
|
WARNING in f2fs_unlink
f2fs
|
-1 |
C |
done |
|
215 |
385d |
510d
|
28/29 |
310d |
81edb983b3f5
f2fs: add check for deleted inode
|
|
WARNING in bch2_bkey_pick_read_device
fs
|
-1 |
C |
error |
|
89 |
380d |
384d
|
28/29 |
310d |
3c72d3eea97b
bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
|
|
WARNING: suspicious RCU usage in kernfs_node_dentry
kernfs
|
4 |
C |
done |
|
476 |
414d |
422d
|
28/29 |
310d |
6ef5b6fae304
kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
|
|
INFO: trying to register non-static key in cfg80211_dev_free
wireless
|
-1 |
C |
|
|
304 |
375d |
395d
|
28/29 |
310d |
fc88dee89d7b
wifi: cfg80211: init wiphy_work before allocating rfkill fails
|
|
KMSAN: uninit-value in validate_set (2)
openvswitch
|
7 |
C |
|
|
6 |
373d |
370d
|
28/29 |
310d |
65d91192aa66
net: openvswitch: fix nested key length validation in the set() action
|
|
WARNING in vma_merge_existing_range
mm
|
-1 |
|
|
|
87 |
320d |
470d
|
28/29 |
310d |
47b16d0462a4
mm: abort vma_modify() on merge out of memory failure
|
|
KCSAN: data-race in p9_conn_cancel / p9_poll_workfn (9)
v9fs
|
6 |
|
|
|
2 |
395d |
433d
|
28/29 |
310d |
fbc0283fbeae
9p/trans_fd: mark concurrent read and writes to p9_conn->err
|
|
WARNING in cleanup_net (4)
net
|
-1 |
C |
error |
|
309 |
401d |
420d
|
28/29 |
310d |
5c70eb5c593d
net: better track kernel sockets lifetime
|
|
general protection fault in bioset_exit (2)
bcachefs
|
10 |
C |
done |
done |
23 |
398d |
438d
|
28/29 |
310d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
INFO: task hung in io_wq_put_and_exit (4)
io-uring
|
1 |
C |
unreliable |
|
86 |
314d |
544d
|
28/29 |
310d |
cf960726eb65
io_uring/kbuf: reject zero sized provided buffers
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2)
bluetooth
|
19 |
C |
done |
|
132 |
315d |
699d
|
28/29 |
310d |
5df5dafc171b
Bluetooth: hci_uart: Fix another race during initialization
|
|
WARNING in net_free (4)
net
|
-1 |
syz |
|
|
4 |
437d |
508d
|
28/29 |
310d |
5c70eb5c593d
net: better track kernel sockets lifetime
|
|
WARNING in ntfs_extend_initialized_size
ntfs3
|
-1 |
C |
inconclusive |
inconclusive |
4 |
513d |
558d
|
28/29 |
310d |
ff3559264458
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
|
|
general protection fault in ethnl_default_dumpit
net
|
2 |
C |
error |
|
321 |
404d |
405d
|
28/29 |
310d |
f36a9285828c
net: ethtool: use correct device pointer in ethnl_default_dump_one()
|
|
WARNING: bad unlock balance in do_setlink
net
|
4 |
C |
done |
|
401 |
368d |
374d
|
28/29 |
310d |
445e99bdf68d
rtnetlink: Fix bad unlock balance in do_setlink().
|
|
UBSAN: array-index-out-of-bounds in bpf_prog_select_runtime
bpf
|
15 |
C |
done |
|
1160 |
382d |
763d
|
28/29 |
310d |
6ebc5030e0c5
bpf: Fix array bounds error with may_goto
|
|
general protection fault in tipc_mon_reinit_self (3)
tipc
|
2 |
|
|
|
2 |
363d |
365d
|
28/29 |
310d |
d63527e109e8
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
|
|
KASAN: slab-use-after-free Read in bchfs_read
fs
|
19 |
C |
done |
|
34 |
369d |
376d
|
28/29 |
310d |
34b47e3d73a2
bcachefs: Fix UAF in bchfs_read()
|
|
general protection fault in rtnl_create_link
net
|
8 |
C |
done |
|
49 |
357d |
368d
|
28/29 |
310d |
4798cfa2097f
net: don't try to ops lock uninitialized devs
|
|
general protection fault in kernel_sock_shutdown (3)
net
|
2 |
syz |
|
|
5 |
382d |
381d
|
28/29 |
310d |
10206302af85
sctp: add mutual exclusion in proc_sctp_do_udp_port()
|
|
KASAN: slab-out-of-bounds Read in atomic_ptr_type_ok
bpf
|
17 |
C |
done |
|
4 |
403d |
399d
|
28/29 |
310d |
9aa8fe29f624
Merge branch 'bpf-fix-oob-read-and-add-tests-for-load-acquire-store-release'
c03bb2fa327e
bpf: Fix out-of-bounds read in check_atomic_load/store()
|
|
possible deadlock in __snd_timer_user_ioctl
sound
|
4 |
|
|
|
1 |
395d |
391d
|
28/29 |
310d |
3424c8f53bc6
ALSA: timer: Don't take register_mutex with copy_from/to_user()
|
|
kernel BUG in bch2_run_recovery_pass (2)
fs
|
-1 |
C |
|
|
70 |
377d |
447d
|
28/29 |
310d |
962322475bb5
bcachefs: Handle backpointers with unknown data types
|
|
general protection fault in relocate_file_extent_cluster
btrfs
|
2 |
C |
|
|
24 |
359d |
376d
|
28/29 |
310d |
50fecb8cf069
btrfs: fix invalid inode pointer after failure to create reloc inode
|
|
KCSAN: data-race in io_req_task_cancel / io_wq_free_work
io-uring
|
6 |
|
|
|
1 |
378d |
378d
|
28/29 |
310d |
390513642ee6
io_uring: always do atomic put from iowq
|
|
possible deadlock in kvm_arch_pm_notifier
kvm-x86
|
4 |
|
|
|
2 |
438d |
465d
|
28/29 |
310d |
d9c5ed0a9b52
KVM: x86: Don't take kvm->lock when iterating over vCPUs in suspend notifier
|
|
WARNING in restore_regulatory_settings (3)
wireless
|
-1 |
C |
inconclusive |
error |
2 |
472d |
555d
|
28/29 |
310d |
59b348be7597
wifi: cfg80211: regulatory: improve invalid hints checking
|
|
KMSAN: uninit-value in __alloc_frozen_pages_noprof
mm
|
7 |
C |
|
|
6 |
406d |
419d
|
28/29 |
310d |
8fe9ed44dc29
mm/page_alloc: fix uninitialized variable
|
|
WARNING in cxacru_cm/usb_submit_urb (2)
usb
|
-1 |
C |
|
|
8 |
424d |
434d
|
28/29 |
310d |
c90aad369899
usb: atm: cxacru: fix a flaw in existing endpoint checks
|
|
kernel BUG in btrfs_split_ordered_extent
btrfs
|
-1 |
|
|
|
1 |
472d |
468d
|
28/29 |
310d |
0d85f5c2dd91
btrfs: fix assertion failure when splitting ordered extent after transaction abort
|
|
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2)
fs
|
5 |
C |
error |
|
59 |
377d |
380d
|
28/29 |
310d |
b2ffadcc7f8f
bcachefs: Fix scheduling while atomic from logging changes
|
|
KMSAN: uninit-value in diFree
jfs
|
7 |
C |
|
|
2 |
421d |
421d
|
28/29 |
310d |
9629d7d66c62
jfs: Fix uninit-value access of imap allocated in the diMount() function
|
|
possible deadlock in pcpu_alloc_noprof
block
|
4 |
C |
|
|
257 |
310d |
564d
|
28/29 |
310d |
677bdb7346b6
bcachefs: Fix deadlock
|
|
KASAN: slab-out-of-bounds Read in ea_get (4)
jfs
|
17 |
C |
|
|
4 |
405d |
428d
|
28/29 |
310d |
fdf480da5837
jfs: fix slab-out-of-bounds read in ea_get()
|
|
INFO: task hung in __blockdev_direct_IO (4)
exfat
|
1 |
C |
done |
|
3 |
333d |
396d
|
28/29 |
310d |
b0522303f672
exfat: fix the infinite loop in exfat_find_last_cluster()
|
|
possible deadlock in gtp_encap_enable_socket
net
|
4 |
C |
error |
done |
24 |
369d |
570d
|
28/29 |
310d |
752e2217d789
smc: Fix lockdep false-positive for IPPROTO_SMC.
|
|
kernel BUG in bch2_btree_node_iter_init
fs
|
-1 |
C |
done |
done |
167 |
334d |
438d
|
28/29 |
310d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
KCSAN: data-race in can_send / can_send (5)
can
|
6 |
|
|
|
56 |
393d |
403d
|
28/29 |
310d |
80b5f90158d1
can: statistics: use atomic access in hot path
|
|
general protection fault in clone_private_mount
overlayfs
|
2 |
C |
done |
|
713 |
430d |
434d
|
28/29 |
310d |
db04662e2f4f
fs: allow detached mounts in clone_private_mount()
|
|
WARNING: refcount bug in ax25_release (3)
hams
|
13 |
C |
done |
|
5256 |
385d |
690d
|
28/29 |
310d |
bca0902e6173
ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
2f6efbabceb6
ax25: Remove broken autobind
|
|
KCSAN: data-race in snd_seq_poll / snd_seq_pool_init
sound
|
6 |
|
|
|
3 |
394d |
407d
|
28/29 |
310d |
e3cd33ab17c3
ALSA: seq: Improve data consistency at polling
|
|
general protection fault in bch2_snapshot_tree_oldest_subvol
fs
|
8 |
C |
done |
|
14 |
355d |
378d
|
28/29 |
310d |
aa6a591f0fd7
bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol()
71f8e806a5e4
bcachefs: Stricter checks on "key allowed in this btree"
|
|
WARNING in dev_setup_tc
netfilter
|
-1 |
|
|
|
38 |
400d |
405d
|
28/29 |
310d |
0a13c1e0a449
net: revert to lockless TC_SETUP_BLOCK and TC_SETUP_FT
|
|
possible deadlock in queue_stack_map_push_elem
bpf
|
4 |
C |
error |
|
78 |
376d |
729d
|
28/29 |
310d |
2f41503d6476
bpf: Convert queue_stack map to rqspinlock
|
|
KASAN: slab-out-of-bounds Read in validate_bset_keys
fs
|
19 |
C |
|
|
5 |
410d |
409d
|
28/29 |
310d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
KMSAN: uninit-value in bch2_copygc (2)
fs
|
7 |
|
|
|
1 |
385d |
381d
|
28/29 |
310d |
9ea24b287b3b
bcachefs: Eliminate padding in move_bucket_key
|
|
WARNING: suspicious RCU usage in kvm_vcpu_gfn_to_memslot
kvm
|
4 |
C |
|
|
67 |
389d |
448d
|
28/29 |
310d |
3617c0ee7dec
KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR
|
|
BUG: soft lockup in rose_loopback_timer
hams
|
1 |
C |
|
|
1 |
441d |
437d
|
28/29 |
310d |
a1300691aed9
net: rose: lock the socket in rose_bind()
|
|
linux-next test error: KASAN: slab-use-after-free Write in binder_add_device
kernel
|
-1 |
|
|
|
28 |
442d |
455d
|
28/29 |
310d |
e77aff5528a1
binderfs: fix use-after-free in binder_devices
|
|
general protection fault in vxlan_vnigroup_uninit
net
|
2 |
C |
|
|
9 |
428d |
430d
|
28/29 |
310d |
5805402dcc56
vxlan: check vxlan_vnigroup_init() return value
|
|
possible deadlock in __queue_map_get
bpf
|
4 |
C |
error |
|
180 |
375d |
733d
|
28/29 |
310d |
2f41503d6476
bpf: Convert queue_stack map to rqspinlock
|
|
kernel BUG in new_curseg (2)
f2fs
|
-1 |
C |
done |
|
24 |
386d |
489d
|
28/29 |
310d |
48ea8b200414
f2fs: fix to avoid panic once fallocation fails for pinfile
|
|
general protection fault in add_wait_queue
kvm
net
virt
|
10 |
C |
done |
|
676 |
424d |
437d
|
28/29 |
310d |
78dafe1cf3af
vsock: Orphan socket after transport release
|
|
kernel BUG in write_all_supers
btrfs
|
-1 |
C |
|
|
20 |
366d |
385d
|
28/29 |
310d |
65f2a3b2323e
btrfs: remove folio order ASSERT()s in super block writeback path
|
|
KMSAN: uninit-value in bch2_write_inode
fs
|
7 |
C |
|
|
4476 |
398d |
446d
|
28/29 |
310d |
58517f4df842
bcachefs: Initialize from_inode members for bch_io_opts
|
|
kernel BUG in pskb_expand_head (4)
intel-wired-lan
|
-1 |
|
|
|
1 |
414d |
413d
|
28/29 |
310d |
64e6a754d33d
llc: do not use skb_get() before dev_queue_xmit()
|
|
general protection fault in ip_route_output_key_hash_rcu (3)
net
|
7 |
|
|
|
4 |
414d |
440d
|
28/29 |
310d |
27843ce6ba3d
ipvlan: ensure network headers are in skb linear part
|
|
BUG: sleeping function called from invalid context in snd_card_locked
sound
|
5 |
|
|
|
1 |
416d |
412d
|
28/29 |
310d |
c9ce148ea753
ALSA: seq: Avoid module auto-load handling at event delivery
|
|
BUG: sleeping function called from invalid context in ovl_cache_entry_new
ntfs3
afs
|
5 |
C |
done |
|
52 |
353d |
385d
|
28/29 |
310d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
KCSAN: data-race in p9_conn_cancel / p9_write_work (7)
v9fs
|
6 |
|
|
|
2 |
404d |
429d
|
28/29 |
310d |
fbc0283fbeae
9p/trans_fd: mark concurrent read and writes to p9_conn->err
|
|
KCSAN: data-race in virtqueue_disable_cb / virtqueue_enable_cb_delayed (9)
virt
|
6 |
|
|
|
1 |
408d |
408d
|
28/29 |
310d |
2e2f925fe737
virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
|
|
WARNING in drv_remove_interface
wireless
|
-1 |
C |
done |
inconclusive |
29 |
416d |
2012d
|
28/29 |
310d |
49f27f29446a
wifi: nl80211: reject cooked mode if it is set along with other flags
|
|
kernel BUG in skbprio_enqueue
net
|
-1 |
C |
|
|
7 |
385d |
385d
|
28/29 |
310d |
ce8fe975fd99
net_sched: skbprio: Remove overly strict queue assertions
|
|
general protection fault in afs_atcell_get_link
afs
|
2 |
C |
|
|
25 |
391d |
394d
|
28/29 |
310d |
0307d16f3610
afs: Fix afs_atcell_get_link() to check if ws_cell is unset first
|
|
WARNING in call_s_stream
media
|
-1 |
C |
|
|
83 |
391d |
750d
|
28/29 |
310d |
36cef585e2a3
media: vimc: skip .s_stream() for stopped entities
|
|
KMSAN: uninit-value in __ipv6_addr_type
net
|
7 |
C |
|
|
3 |
420d |
420d
|
28/29 |
310d |
27843ce6ba3d
ipvlan: ensure network headers are in skb linear part
|
|
BUG: sleeping function called from invalid context in crypto_put_default_null_skcipher
crypto
|
5 |
C |
error |
|
5 |
472d |
472d
|
28/29 |
310d |
dcc47a028c24
crypto: null - Use spin lock instead of mutex
5b0af621c3f6
net: restrict SO_REUSEPORT to inet sockets
|
|
KASAN: slab-use-after-free Read in join_transaction
btrfs
|
19 |
|
|
|
1 |
457d |
451d
|
28/29 |
310d |
e2f0943cf373
btrfs: fix use-after-free when attempting to join an aborted transaction
|
|
KASAN: use-after-free Read in __ocfs2_find_path
ocfs2
|
19 |
C |
inconclusive |
|
65 |
395d |
554d
|
28/29 |
310d |
a406aff8c051
ocfs2: validate l_tree_depth to avoid out-of-bounds access
|
|
kernel BUG in bch2_stripe_validate
fs
|
-1 |
C |
done |
done |
6 |
388d |
472d
|
28/29 |
310d |
71f8e806a5e4
bcachefs: Stricter checks on "key allowed in this btree"
|
|
kernel BUG in __journal_res_get (2)
fs
|
-1 |
C |
error |
done |
1527 |
310d |
518d
|
28/29 |
310d |
4c0d2c67ac6d
bcachefs: Fix early startup error path
|
|
WARNING in mptcp_pm_nl_addr_send_ack
mptcp
|
-1 |
|
|
|
1 |
424d |
422d
|
28/29 |
310d |
f865c24bc551
mptcp: always handle address removal under msk socket lock
|
|
KASAN: slab-use-after-free Read in steam_input_open
input
usb
|
19 |
C |
done |
|
5 |
405d |
418d
|
28/29 |
310d |
e53fc232a65f
HID: hid-steam: Fix use-after-free when detaching device
|
|
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2)
netfilter
|
19 |
syz |
|
|
1 |
411d |
410d
|
28/29 |
310d |
fb8286562ecf
netfilter: nf_tables: make destruction work queue pernet
|
|
KCSAN: data-race in bprm_execve / copy_fs (4)
mm
fs
|
6 |
|
|
|
1 |
392d |
392d
|
28/29 |
310d |
af7bb0d2ca45
exec: fix the racy usage of fs_struct->in_exec
|
|
KMSAN: uninit-value in ppp_sync_send (2)
ppp
|
7 |
C |
|
|
3 |
417d |
427d
|
28/29 |
310d |
aabc6596ffb3
net: ppp: Add bound checking for skb data on ppp_sync_txmung
|
|
KMSAN: uninit-value in __nf_conncount_add
netfilter
|
7 |
|
|
|
1 |
408d |
404d
|
28/29 |
310d |
d653bfeb07eb
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
|
|
BUG: unable to handle kernel paging request in txBeginAnon
jfs
|
11 |
C |
inconclusive |
|
43 |
402d |
692d
|
28/29 |
310d |
b5799dd77054
jfs: add check read-only before truncation in jfs_truncate_nolock()
0176e69743ec
jfs: add check read-only before txBeginAnon() call
|
|
KASAN: slab-use-after-free Read in afs_dynroot_readdir
afs
|
19 |
C |
|
|
2 |
368d |
382d
|
28/29 |
310d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
possible deadlock in dev_set_allmulti
net
|
4 |
|
|
|
218 |
352d |
401d
|
28/29 |
310d |
27b918007d96
net: vlan: don't propagate flags on open
|
|
WARNING in fsnotify_file_area_perm
xfs
|
-1 |
C |
|
|
9 |
397d |
434d
|
28/29 |
310d |
955fbe0ef19d
Revert "fsnotify: generate pre-content permission event on page fault"
|
|
possible deadlock in diFree (2)
jfs
|
4 |
C |
|
|
40 |
386d |
511d
|
28/29 |
310d |
b61e69bb1c04
jfs: Prevent copying of nlink with value 0 from disk inode
|
|
KASAN: slab-use-after-free Read in software_node_notify_remove
acpi
|
19 |
C |
done |
|
28 |
353d |
375d
|
28/29 |
310d |
bc2c46426f2d
software node: Prevent link creation failure from causing kobj reference count imbalance
|
|
kernel BUG in clear_inode (2)
jfs
|
-1 |
C |
inconclusive |
|
986 |
310d |
535d
|
28/29 |
310d |
8c3f9a70d2d4
jfs: reject on-disk inodes of an unsupported type
|
|
general protection fault in p9_client_walk
v9fs
|
2 |
C |
|
|
3 |
386d |
402d
|
28/29 |
310d |
3f61ac7c65bd
fs/9p: fix NULL pointer dereference on mkdir
|
|
possible deadlock in ipv6_sock_ac_close (4)
net
|
4 |
C |
error |
|
5 |
377d |
414d
|
28/29 |
310d |
752e2217d789
smc: Fix lockdep false-positive for IPPROTO_SMC.
|
|
WARNING in __ceph_open_session
ceph
|
-1 |
C |
done |
|
321 |
372d |
373d
|
28/29 |
310d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst (2)
jfs
|
19 |
C |
error |
|
119 |
353d |
481d
|
28/29 |
310d |
a8dfb2168906
jfs: add index corruption check to DT_GETPAGE()
|
|
kernel BUG in filemap_fault
sound
|
-1 |
C |
done |
|
138 |
315d |
412d
|
28/29 |
310d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
|
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
19 |
C |
done |
|
34 |
450d |
780d
|
28/29 |
310d |
b4f82f9ed43a
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
|
|
BUG: unable to handle kernel paging request in efivarfs_pm_notify
fs
efi
|
8 |
C |
|
|
1037 |
407d |
417d
|
28/29 |
310d |
cb6ae457bc6a
efivarfs: Defer PM notifier registration until .fill_super
|
|
WARNING: bad unlock balance in __rtnl_unlock
net
|
4 |
C |
done |
|
18 |
407d |
408d
|
28/29 |
310d |
f130a0cc1b4f
inet: fix lwtunnel_valid_encap_type() lock imbalance
|
|
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter (2)
ntfs3
|
10 |
C |
|
|
8 |
439d |
473d
|
28/29 |
310d |
285cec318bf5
fs/ntfs3: Keep write operations atomic
|
|
possible deadlock in lock_system_sleep
pm
|
4 |
C |
|
|
3 |
421d |
420d
|
28/29 |
310d |
52323ed1444e
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
|
|
WARNING in file_seek_cur_needs_f_lock
overlayfs
ext4
|
-1 |
C |
done |
|
10 |
324d |
374d
|
28/29 |
310d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
|
|
BUG: sleeping function called from invalid context in __alloc_frozen_pages_noprof
afs
|
5 |
C |
done |
|
61 |
367d |
385d
|
28/29 |
310d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
KCSAN: assert: race in srcu_gp_start_if_needed
perf
trace
|
14 |
|
|
|
1 |
509d |
508d
|
28/29 |
310d |
d31e31365b5b
srcu: Force synchronization for srcu_get_delay()
|
|
possible deadlock in elv_iosched_store
block
|
4 |
C |
|
|
56 |
325d |
384d
|
28/29 |
310d |
01b91bf14f6d
block: don't grab elevator lock during queue initialization
|
|
WARNING in __nf_unregister_net_hook (8)
netfilter
|
-1 |
|
|
|
2 |
369d |
381d
|
28/29 |
310d |
688c15017d5c
netfilter: nf_tables: don't unregister hook when table is dormant
|
|
possible deadlock in efivarfs_actor
mm
|
4 |
C |
|
|
8 |
387d |
404d
|
28/29 |
310d |
dec1277875a5
efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume
|
|
INFO: task hung in _free_event
perf
|
1 |
C |
|
|
2 |
491d |
514d
|
28/29 |
310d |
56799bc03565
perf: Fix hang while freeing sigtrap event
|
|
KCSAN: data-race in mprotect_fixup / try_to_migrate_one
mm
|
6 |
|
|
|
1 |
436d |
435d
|
28/29 |
310d |
e92b6e7bb618
mm: use READ/WRITE_ONCE() for vma->vm_flags on migrate, mprotect
|
|
WARNING: refcount bug in io_tx_ubuf_complete
io-uring
|
13 |
|
|
|
15 |
390d |
387d
|
28/29 |
310d |
67c007d6c12d
io_uring/net: fix sendzc double notif flush
|
|
divide error in dbAllocAG
jfs
|
2 |
C |
done |
|
172 |
384d |
499d
|
28/29 |
310d |
ddf2846f22e8
jfs: add sanity check for agwidth in dbMount
|
|
WARNING in vmx_handle_exit (2)
kvm-x86
|
-1 |
C |
|
|
3 |
411d |
491d
|
28/29 |
310d |
64c947a1cf35
KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
|
|
BUG: unable to handle kernel paging request in vma_merge_existing_range
mm
|
8 |
C |
done |
|
8 |
365d |
392d
|
28/29 |
310d |
41e6ddcaa0f1
mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
|
|
WARNING in ucan_probe
can
|
-1 |
C |
done |
|
143 |
392d |
423d
|
28/29 |
310d |
1d22a122ffb1
can: ucan: fix out of bound read in strscpy() source
|
|
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints
usb
|
17 |
C |
|
|
61 |
381d |
444d
|
28/29 |
310d |
0b43d98ff29b
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
|
|
WARNING in remove_proc_entry (7)
nfs
|
-1 |
syz |
|
|
682 |
311d |
434d
|
28/29 |
310d |
930b64ca0c51
nfsd: don't ignore the return code of svc_proc_register()
|
|
BUG: bad usercopy in vfs_readlink
ext4
|
-1 |
C |
done |
|
5 |
407d |
436d
|
28/29 |
310d |
5f920d5d6083
ext4: verify fast symlink length
|
|
possible deadlock in crypto_exit_scomp_ops_async
crypto
|
4 |
|
|
|
2 |
407d |
416d
|
28/29 |
310d |
c11bcbc0a517
mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
|
|
BUG: corrupted list in hci_chan_del (2)
bluetooth
|
19 |
C |
done |
|
502 |
430d |
434d
|
28/29 |
310d |
ab4eedb790ca
Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
|
|
general protection fault in bpf_map_offload_map_alloc
bpf
|
2 |
|
|
|
494 |
404d |
405d
|
28/29 |
310d |
0a5c8b2c8ccb
bpf: fix a possible NULL deref in bpf_map_offload_map_alloc()
|
|
possible deadlock in bpf_map_mmap
bpf
|
4 |
|
|
|
1 |
455d |
451d
|
28/29 |
310d |
bc27c52eea18
bpf: avoid holding freeze_mutex during mmap operation
|
|
BUG: sleeping function called from invalid context in folio_mc_copy
mm
|
5 |
C |
done |
|
5415 |
353d |
385d
|
28/29 |
310d |
2d900efff915
mm/migrate: fix sleep in atomic for large folios and buffer heads
|
|
WARNING in to_nfit_bus_uuid
acpi
nvdimm
|
-1 |
C |
|
|
4 |
414d |
579d
|
28/29 |
310d |
2ff0e408db36
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
|
|
KASAN: slab-use-after-free Read in rose_timer_expiry (2)
hams
|
19 |
|
|
|
158 |
337d |
461d
|
28/29 |
337d |
5de7665e0a07
net: rose: fix timer races against user threads
|
|
kernel BUG in __bch2_trans_commit
fs
|
-1 |
C |
unreliable |
|
11858 |
518d |
542d
|
28/29 |
341d |
8b22abb4c840
bcachefs: -o norecovery now bails out of recovery earlier
|
|
possible deadlock in ax25_setsockopt
hams
|
4 |
|
|
|
2 |
463d |
471d
|
28/29 |
342d |
95fc45d1dea8
ax25: rcu protect dev->ax25_ptr
|
|
WARNING in kvm_timer_update_irq
kvmarm
|
-1 |
C |
|
|
15 |
510d |
542d
|
28/29 |
342d |
38d7aacca092
KVM: arm64: Get rid of userspace_irqchip_in_use
|
|
WARNING in kvm_handle_mmio_return
kvmarm
|
-1 |
C |
|
|
5 |
511d |
518d
|
28/29 |
343d |
e735a5da6442
KVM: arm64: Don't retire aborted MMIO instruction
|
|
possible deadlock in bch2_alloc_sectors_start_trans
fs
|
4 |
C |
inconclusive |
|
64 |
499d |
521d
|
28/29 |
343d |
2cd85fea49d8
bcachefs: Don't recurse in check_discard_freespace_key
|
|
WARNING in sk_skb_reason_drop (2)
net
|
-1 |
|
|
|
1 |
486d |
486d
|
28/29 |
343d |
cdd0b9132d71
ip: Return drop reason if in_dev is NULL in ip_route_input_rcu().
|
|
KASAN: slab-use-after-free Read in ipvlan_get_iflink
net
|
19 |
|
|
|
6 |
469d |
566d
|
28/29 |
343d |
cb358ff94154
ipvlan: Fix use-after-free in ipvlan_get_iflink().
|
|
KASAN: vmalloc-out-of-bounds Write in push_insn_history
bpf
|
21 |
|
|
|
136 |
494d |
507d
|
28/29 |
344d |
d699440f58ce
mm: fix vrealloc()'s KASAN poisoning logic
|
|
KASAN: vmalloc-out-of-bounds Write in vrealloc_noprof
bpf
|
21 |
C |
done |
|
440 |
344d |
508d
|
28/29 |
344d |
d699440f58ce
mm: fix vrealloc()'s KASAN poisoning logic
|
|
upstream test error: WARNING in enable_work
mm
|
-1 |
|
|
|
20 |
465d |
462d
|
28/29 |
344d |
cd6313beaeae
Revert "vmstat: disable vmstat_work on vmstat_cpu_down_prep()"
|
|
kernel BUG in bch2_get_scanned_nodes
fs
|
-1 |
C |
done |
|
101 |
443d |
504d
|
28/29 |
344d |
a6f4794fcd86
bcachefs: struct bkey_validate_context
|
|
WARNING: lock held when returning to user space in rtnl_link_ops_get
net
|
4 |
C |
done |
|
9 |
507d |
515d
|
28/29 |
344d |
9b234a97b10c
rtnetlink: fix rtnl_dump_ifinfo() error path
|
|
WARNING in udf_rmdir (2)
udf
|
-1 |
C |
inconclusive |
done |
2 |
504d |
505d
|
28/29 |
344d |
c5566903af56
udf: Skip parent dir link count update if corrupted
|
|
WARNING: lock held when returning to user space in nsim_pp_hold_write
net
|
4 |
C |
|
|
4 |
483d |
488d
|
28/29 |
344d |
b9b8301d369b
net: netdevsim: fix nsim_pp_hold_write()
|
|
general protection fault in vsock_stream_has_data
net
virt
|
2 |
C |
done |
done |
6 |
461d |
457d
|
28/29 |
344d |
df137da9d6d1
vsock/virtio: cancel close work in the destructor
|
|
possible deadlock in zswap_store
mm
|
4 |
C |
inconclusive |
|
24203 |
416d |
466d
|
28/29 |
344d |
4dff389c9f1d
Revert "mm: zswap: fix race between [de]compression and CPU hotunplug"
|
|
BUG: unable to handle kernel paging request in __hwasan_check_x0_ADDR
kvmarm
|
8 |
|
|
|
3 |
491d |
490d
|
28/29 |
344d |
d561491ba927
KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
|
|
kernel BUG in bch2_evacuate_bucket
fs
|
-1 |
C |
done |
|
4 |
508d |
507d
|
28/29 |
344d |
9e92d6e9efb0
bcachefs: Kill bch2_get_next_backpointer()
|
|
KASAN: slab-use-after-free Read in binder_release_work
kernel
|
19 |
C |
done |
done |
2151 |
491d |
561d
|
28/29 |
344d |
7e20434cbca8
binder: fix freeze UAF in binder_release_work()
|
|
KASAN: slab-use-after-free Write in zswap_store
mm
|
22 |
|
|
|
8 |
465d |
479d
|
28/29 |
344d |
12dcb0ef5406
mm: zswap: properly synchronize freeing resources during CPU hotunplug
|
|
linux-next test error: general protection fault in of_pci_supply_present
pci
|
-1 |
|
|
|
1 |
511d |
511d
|
28/29 |
344d |
278dd091e95d
PCI/pwrctl: Create pwrctl device only if at least one power supply is present
|
|
KASAN: slab-use-after-free Read in dev_get_flags
rdma
|
19 |
|
|
|
7 |
510d |
497d
|
28/29 |
345d |
2ac5415022d1
RDMA/rxe: Remove the direct link to net_device
16b87037b488
RDMA/siw: Remove direct link to net_device
|
|
KASAN: use-after-free Read in ring_buffer_map
trace
|
19 |
C |
|
|
15 |
482d |
486d
|
28/29 |
345d |
c58a812c8e49
ring-buffer: Fix overflow in __rb_map_vma
|
|
WARNING in io_pin_pages
io-uring
|
-1 |
C |
done |
|
14 |
513d |
510d
|
28/29 |
345d |
0c0a4eae26ac
io_uring: check for overflows in io_pin_pages
|
|
WARNING in nsim_udp_tunnel_set_port
net
|
-1 |
C |
|
|
15 |
442d |
456d
|
28/29 |
345d |
50bf398e1cea
net: netdevsim: try to close UDP port harness races
|
|
BUG: sleeping function called from invalid context in static_key_slow_dec
kernel
|
5 |
|
|
|
3 |
490d |
505d
|
28/29 |
345d |
b04df3da1b5c
netfilter: nf_tables: do not defer rule destruction via call_rcu
|
|
KMSAN: uninit-value in ocfs2_file_read_iter
ocfs2
|
7 |
C |
|
|
3 |
539d |
535d
|
28/29 |
345d |
adc77b19f62d
ocfs2: fix uninitialized value in ocfs2_file_read_iter()
|
|
possible deadlock in fat_count_free_clusters
exfat
|
4 |
|
|
|
4 |
502d |
522d
|
28/29 |
345d |
b49125574cae
loop: Fix ABBA locking race
|
|
KASAN: slab-use-after-free Read in sco_sock_connect
bluetooth
|
19 |
syz |
|
|
1 |
509d |
507d
|
28/29 |
345d |
ed9588554943
Bluetooth: SCO: remove the redundant sco_conn_put
|
|
WARNING in copy_net_ns
net
|
-1 |
|
|
|
1 |
500d |
500d
|
28/29 |
345d |
50b94204446e
ipmr: tune the ipmr_can_free_table() checks.
|
|
WARNING in nft_socket_init
netfilter
|
-1 |
C |
done |
|
14 |
439d |
507d
|
28/29 |
345d |
b7529880cb96
netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
|
|
BUG: unable to handle kernel paging request in try_to_wake_up (2)
net
|
19 |
C |
error |
|
31 |
421d |
506d
|
28/29 |
345d |
f10bef73fb35
btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
|
|
VFS: Busy inodes after unmount (use-after-free)
fs
|
2 |
C |
error |
|
55684 |
346d |
1177d
|
28/29 |
345d |
965b5dd1894f
ocfs2: free inode when ocfs2_get_init_inode() fails
|
|
general protection fault in exfat_init_ext_entry
exfat
|
2 |
C |
done |
|
43 |
467d |
501d
|
28/29 |
345d |
70465acbb0ce
exfat: fix exfat_find_empty_entry() not returning error on failure
|
|
general protection fault in qt2_read_bulk_callback
usb
|
2 |
C |
error |
|
5 |
464d |
461d
|
28/29 |
345d |
575a5adf48b0
USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
|
|
general protection fault in put_page (4)
net
|
2 |
C |
done |
|
170 |
468d |
485d
|
28/29 |
345d |
cbb26f7d8451
mptcp: fix TCP options overflow.
|
|
WARNING in nilfs_rmdir
nilfs
|
-1 |
C |
error |
|
295 |
465d |
512d
|
28/29 |
345d |
901ce9705fbb
nilfs2: prevent use of deleted inode
|
|
UBSAN: array-index-out-of-bounds in cake_enqueue (2)
net
|
15 |
|
|
|
1 |
481d |
479d
|
28/29 |
345d |
737d4d91d35b
sched: sch_cake: add bounds checks to host bulk flow fairness counts
|
|
general protection fault in account_kernel_stack (3)
mm
|
2 |
C |
|
|
7 |
470d |
485d
|
28/29 |
345d |
4db3d750ac7e
nvmet: Don't overflow subsysnqn
|
|
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
5 |
C |
done |
|
380 |
497d |
739d
|
28/29 |
345d |
4d94f0555827
Bluetooth: hci_core: Fix sleeping function called from invalid context
|
|
WARNING in nsim_dev_health_break_write
net
|
-1 |
C |
|
|
10 |
484d |
489d
|
28/29 |
345d |
ee76746387f6
netdevsim: prevent bad user input in nsim_dev_health_break_write()
|
|
possible deadlock in ieee80211_remove_interfaces
wireless
|
4 |
C |
error |
|
326122 |
404d |
588d
|
28/29 |
345d |
e759e1e4a4bd
net: revert RTNL changes in unregister_netdevice_many_notify()
|
|
WARNING in netlink_ack_tlv_fill
net
|
-1 |
C |
error |
|
3 |
523d |
519d
|
28/29 |
345d |
3bf39fa849ab
netlink: fix false positive warning in extack during dumps
|
|
KASAN: use-after-free Read in nilfs_find_entry
nilfs
|
19 |
C |
inconclusive |
|
8 |
499d |
520d
|
28/29 |
345d |
985ebec4ab0a
nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
|
|
kernel BUG in __pskb_pull_tail
tipc
|
-1 |
C |
done |
|
13 |
484d |
490d
|
28/29 |
345d |
429fde2d81bc
net: tun: fix tun_napi_alloc_frags()
|
|
KMSAN: uninit-value in nsim_get_ringparam
net
|
7 |
C |
|
|
59 |
440d |
448d
|
28/29 |
345d |
6db9d3a536cd
netdevsim: don't assume core pre-populates HDS params on GET
|
|
WARNING: lock held when returning to user space in afs_proc_addr_prefs_write
afs
|
4 |
C |
|
|
5 |
469d |
477d
|
28/29 |
345d |
17a4fde81d3a
afs: Fix merge preference rule failure condition
|
|
WARNING in lock_list_lru_of_memcg
mm
|
-1 |
syz |
|
|
2 |
426d |
488d
|
28/29 |
345d |
62e72d2cf702
mm, madvise: fix potential workingset node list_lru leaks
|
|
kernel BUG in bch2_btree_path_traverse_one
fs
|
-1 |
C |
done |
|
9 |
493d |
526d
|
28/29 |
345d |
f11ca2ab18e3
bcachefs: Guard against backpointers to unknown btrees
|
|
general protection fault in ocfs2_prepare_dir_for_insert
ocfs2
|
8 |
C |
inconclusive |
|
1072 |
355d |
604d
|
28/29 |
345d |
b0fce54b8c0d
ocfs2: check dir i_size in ocfs2_find_entry
|
|
possible deadlock in xfs_dquot_detach_buf
xfs
|
4 |
C |
done |
|
6864 |
437d |
485d
|
28/29 |
345d |
1aacd3fac248
xfs: release the dquot buf outside of qli_lock
|
|
kernel BUG in bch2_journal_pin_set
fs
|
-1 |
C |
done |
|
11 |
454d |
507d
|
28/29 |
345d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
WARNING in get_mode_access
lsm
|
-1 |
C |
inconclusive |
|
12 |
459d |
517d
|
28/29 |
345d |
49440290a093
landlock: Handle weird files
|
|
general protection fault in pick_link
ntfs3
|
2 |
C |
|
|
5 |
368d |
518d
|
28/29 |
345d |
2afd4d267e6d
fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
|
|
WARNING in geneve_xmit (2)
net
|
-1 |
|
|
|
1 |
504d |
499d
|
28/29 |
345d |
8588c99c7d47
geneve: do not assume mac header is set in geneve_xmit_skb()
|
|
KASAN: vmalloc-out-of-bounds Read in acpi_nfit_ctl (2)
acpi
nvdimm
|
17 |
C |
|
|
23 |
485d |
527d
|
28/29 |
345d |
265e98f72bac
acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
|
|
WARNING in bch2_journal_flush_seq_async
fs
|
-1 |
C |
|
|
27 |
451d |
575d
|
28/29 |
345d |
4746ee182a76
bcachefs: Check for inode journal seq in the future
|
|
bpf-next test error: possible deadlock in ieee80211_remove_interfaces
wireless
|
-1 |
|
|
|
4 |
442d |
447d
|
28/29 |
345d |
e759e1e4a4bd
net: revert RTNL changes in unregister_netdevice_many_notify()
|
|
general protection fault in proc_scheduler
fs
|
2 |
syz |
|
|
6 |
464d |
469d
|
28/29 |
345d |
d38e26e36206
mptcp: sysctl: sched: avoid using current->nsproxy
|
|
UBSAN: shift-out-of-bounds in iova_bitmap_alloc
iommu
|
-1 |
C |
done |
|
6 |
453d |
459d
|
28/29 |
345d |
e24c15510592
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
|
|
KASAN: slab-use-after-free Read in chaoskey_disconnect
usb
|
19 |
|
|
|
2 |
579d |
566d
|
28/29 |
345d |
422dc0a4d12d
USB: chaoskey: fail open after removal
|
|
KASAN: slab-out-of-bounds Read in selinux_ip_output
selinux
|
19 |
C |
done |
|
1490 |
496d |
506d
|
28/29 |
345d |
eedcad2f2a37
selinux: use sk_to_full_sk() in selinux_ip_output()
|
|
KMSAN: uninit-value in ima_add_template_entry (2)
exfat
|
7 |
C |
|
|
123 |
351d |
561d
|
28/29 |
345d |
98e2fb26d1a9
exfat: fix the new buffer was not zeroed before writing
|
|
general protection fault in modify_prefix_route
net
|
2 |
C |
done |
|
11 |
506d |
506d
|
28/29 |
345d |
a747e02430df
ipv6: avoid possible NULL deref in modify_prefix_route()
|
|
KASAN: slab-use-after-free Read in z_erofs_decompress_queue
erofs
|
19 |
|
|
|
6 |
479d |
501d
|
28/29 |
345d |
b10a1e5643e5
erofs: fix rare pcluster memory leak after unmounting
|
|
WARNING in NUM
net
|
-1 |
|
|
|
1 |
499d |
495d
|
28/29 |
345d |
50b94204446e
ipmr: tune the ipmr_can_free_table() checks.
|
|
general protection fault in do_migrate_pages
mm
|
2 |
C |
|
|
2 |
495d |
513d
|
28/29 |
345d |
091c1dd2d4df
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
|
|
kernel BUG in bch2_rechecksum_bio
fs
|
-1 |
C |
|
|
4 |
514d |
524d
|
28/29 |
345d |
9bdb3b73e732
bcachefs: Check for extent crc uncompressed/compressed size mismatch
|
|
WARNING in iguanair_probe/usb_submit_urb (2)
media
|
-1 |
C |
done |
|
18 |
445d |
567d
|
28/29 |
345d |
b98d5000c505
media: rc: iguanair: handle timeouts
|
|
WARNING in ip6mr_net_exit_batch
net
|
-1 |
|
|
|
1 |
498d |
498d
|
28/29 |
345d |
50b94204446e
ipmr: tune the ipmr_can_free_table() checks.
|
|
kernel BUG in __bch2_journal_pin_put
fs
|
-1 |
C |
|
|
11 |
466d |
508d
|
28/29 |
345d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
KASAN: slab-use-after-free Write in recv_work
nbd
|
22 |
|
|
|
10 |
349d |
489d
|
28/29 |
345d |
844b8cdc6816
nbd: don't allow reconnect after disconnect
|
|
KMSAN: uninit-value in netdev_pick_tx
net
|
7 |
|
|
|
3 |
502d |
507d
|
28/29 |
345d |
0a4cc4accf00
tcp: populate XPS related fields of timewait sockets
|
|
WARNING: refcount bug in sk_skb_reason_drop
can
|
13 |
C |
done |
|
8107 |
493d |
560d
|
28/29 |
345d |
a8c695005bfe
can: j1939: j1939_session_new(): fix skb reference counting
|
|
KMSAN: uninit-value in inode_go_dump (5)
gfs2
|
7 |
C |
|
|
6 |
508d |
562d
|
28/29 |
345d |
f9417fcfca3c
KMSAN: uninit-value in inode_go_dump (5)
|
|
possible deadlock in xfs_icwalk_ag (2)
xfs
|
4 |
C |
|
|
1066 |
385d |
730d
|
28/29 |
345d |
45f69d091bab
xfs: eliminate lockdep false positives in xfs_attr_shortform_list
|
|
KASAN: slab-use-after-free Read in btrfs_cow_block
btrfs
|
19 |
|
|
|
2 |
495d |
491d
|
28/29 |
345d |
44f52bbe96df
btrfs: fix use-after-free when COWing tree bock and tracing is enabled
|
|
kernel BUG in const_folio_flags (2)
fs
mm
|
-1 |
syz |
|
|
3 |
449d |
509d
|
28/29 |
345d |
3203b3ab0fcf
mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
|
|
KASAN: slab-use-after-free Read in __mmap_region
mm
|
19 |
C |
|
|
7 |
458d |
496d
|
28/29 |
345d |
42c4e4b20d9c
mm: correctly reference merged VMA
|
|
general protection fault in bpf_prog_array_delete_safe
bpf
|
2 |
C |
done |
|
5 |
494d |
496d
|
28/29 |
345d |
978c4486cca5
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
|
|
INFO: task hung in lock_sock_nested (5)
mptcp
tipc
|
1 |
C |
done |
|
43 |
355d |
476d
|
28/29 |
345d |
06cc8786516f
tls: skip setting sk_write_space on rekey
|
|
UBSAN: array-index-out-of-bounds in read_inline_xattr
f2fs
|
15 |
C |
done |
|
25 |
442d |
499d
|
28/29 |
345d |
5c1768b67250
f2fs: fix to do sanity check correctly on i_inline_xattr_size
|
|
WARNING in __dev_queue_xmit (5)
net
|
-1 |
C |
|
|
41 |
487d |
485d
|
28/29 |
345d |
5eb70dbebf32
netdev-genl: avoid empty messages in queue dump
|
|
WARNING in free_netdev (2)
net
|
-1 |
syz |
|
|
259 |
349d |
454d
|
28/29 |
345d |
bff406bc0424
net: destroy dev->lock later in free_netdev()
|
|
possible deadlock in f2fs_evict_inode
f2fs
|
4 |
syz |
|
|
2 |
559d |
555d
|
28/29 |
345d |
f10a890308a7
f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
|
|
WARNING in bitmap_parse_user
trace
|
-1 |
C |
|
|
83 |
466d |
487d
|
28/29 |
345d |
98feccbf32cf
tracing: Prevent bad count for tracing_cpumask_write
|
|
kernel BUG in __bch2_btree_node_write
fs
|
-1 |
C |
|
|
110 |
451d |
560d
|
28/29 |
345d |
75eabea6988e
bcachefs: Fix dup/misordered check in btree node read
|
|
kernel BUG in bch2_btree_node_lock_write
fs
|
-1 |
C |
done |
|
8 |
499d |
511d
|
28/29 |
345d |
f9e0a9be70c8
bcachefs: Issue a transaction restart after commit in repair
|
|
KMSAN: uninit-value in io_recv
io-uring
|
7 |
C |
|
|
31 |
468d |
469d
|
28/29 |
345d |
c6e60a0a68b7
io_uring/net: always initialize kmsg->msg.msg_inq upfront
|
|
KASAN: slab-use-after-free Read in __dev_get_by_index
net
|
19 |
|
|
|
1 |
505d |
499d
|
28/29 |
345d |
750e51603395
net: avoid potential UAF in default_operstate()
|
|
BUG: stack guard page was hit in sys_open
mm
v9fs
|
-1 |
C |
|
|
11 |
485d |
521d
|
28/29 |
345d |
4acb665cf4f3
netfs: Work around recursion by abandoning retry if nothing read
|
|
general protection fault in cleanup_bearer
tipc
|
19 |
C |
|
|
13668 |
483d |
498d
|
28/29 |
345d |
b04d86fff66b
tipc: fix NULL deref in cleanup_bearer()
|
|
kernel BUG in f2fs_get_victim
f2fs
|
-1 |
|
|
|
1 |
484d |
480d
|
28/29 |
345d |
207764e5d6f1
f2fs: fix to avoid return invalid mtime from f2fs_get_section_mtime()
|
|
KCSAN: data-race in __se_sys_io_uring_register / io_sqe_files_register (3)
io-uring
|
6 |
|
|
|
1 |
521d |
519d
|
28/29 |
345d |
e358e09a894d
io_uring: protect register tracing
|
|
kernel BUG in send_hsr_supervision_frame
net
|
-1 |
|
|
|
2 |
511d |
500d
|
28/29 |
345d |
af8edaeddbc5
net: hsr: must allocate more bytes for RedBox support
|
|
WARNING in rtl8150_open/usb_submit_urb
usb
|
-1 |
C |
|
|
5 |
438d |
590d
|
28/29 |
345d |
90b7f2961798
net: usb: rtl8150: enable basic endpoint checking
|
|
KMSAN: uninit-value in hsr_forward_skb (2)
net
|
7 |
C |
|
|
22 |
499d |
506d
|
28/29 |
345d |
b9653d19e556
net: hsr: avoid potential out-of-bound access in fill_frame_info()
|
|
kernel BUG in bch2_btree_pos_to_text (2)
fs
|
-1 |
C |
|
|
51 |
452d |
510d
|
28/29 |
345d |
abf23afa36eb
bcachefs: Fix btree node scan when unknown btree IDs are present
|
|
kernel BUG in bch2_bucket_alloc_trans (3)
fs
|
-1 |
C |
error |
|
711 |
451d |
514d
|
28/29 |
345d |
828552ca74a4
bcachefs: Kill bch2_bucket_alloc_new_fs()
|
|
kernel BUG in nr_header
hams
|
-1 |
|
|
|
2 |
511d |
498d
|
28/29 |
345d |
a6d75ecee2bf
net: lapb: increase LAPB_HEADER_LEN
|
|
possible deadlock in blk_unregister_queue
block
|
4 |
|
|
|
29 |
453d |
507d
|
28/29 |
345d |
b769a2f409e7
blktrace: move copy_[to|from]_user() out of ->debugfs_lock
|
|
general protection fault in vsscanf (2)
mm
|
2 |
C |
|
|
11 |
481d |
486d
|
28/29 |
345d |
d3ac65d274b3
mm: huge_memory: handle strsep not finding delimiter
|
|
WARNING in iommufd_device_unbind
iommu
|
-1 |
syz |
error |
|
3 |
499d |
510d
|
28/29 |
345d |
d9df72c6acd6
iommu: iommufd: fix WARNING in iommufd_device_unbind
|
|
kernel BUG in f2fs_invalidate_blocks
f2fs
|
-1 |
|
|
|
4 |
347d |
576d
|
28/29 |
345d |
6babe00ccd34
f2fs: fix to do sanity check on node blkaddr in truncate_node()
|
|
WARNING in ni_fiemap
ntfs3
|
-1 |
C |
|
|
99 |
494d |
608d
|
28/29 |
345d |
e2705dd3d16d
fs/ntfs3: Fix warning in ni_fiemap
|
|
WARNING in nilfs_btree_propagate (2)
nilfs
|
-1 |
C |
error |
inconclusive |
2 |
506d |
548d
|
28/29 |
345d |
ca76bb226bf4
nilfs2: do not force clear folio if buffer is referenced
|
|
WARNING in bitmap_parselist_user
kernel
|
-1 |
C |
|
|
35 |
466d |
485d
|
28/29 |
345d |
dd2a5b5514ab
mm/util: make memdup_user_nul() similar to memdup_user()
|
|
KASAN: slab-use-after-free Read in thread_group_cputime
io-uring
|
19 |
|
|
|
3 |
386d |
461d
|
28/29 |
345d |
4b7cfa8b6c28
io_uring/sqpoll: zero sqd->thread on tctx errors
|
|
BUG: sleeping function called from invalid context in vfree
sound
|
5 |
|
|
|
1 |
507d |
507d
|
28/29 |
345d |
20c0c49720dc
ALSA: rawmidi: Fix kvfree() call in spinlock
|
|
WARNING in mptcp_pm_nl_set_flags (2)
mptcp
|
-1 |
syz |
done |
|
2 |
462d |
457d
|
28/29 |
345d |
1bb0d1348546
mptcp: pm: only set fullmesh for subflow endp
|
|
kernel BUG in nilfs_delete_entry
nilfs
|
-1 |
C |
done |
|
22 |
454d |
717d
|
28/29 |
345d |
ee70999a988b
nilfs2: handle errors that nilfs_prepare_chunk() may return
|
|
WARNING in thrustmaster_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
25 |
450d |
551d
|
28/29 |
345d |
50420d7c79c3
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
|
|
WARNING in tomoyo_write_control
tomoyo
|
-1 |
C |
|
|
301 |
448d |
487d
|
28/29 |
345d |
3df7546fc03b
tomoyo: don't emit warning in tomoyo_write_control()
|
|
KASAN: slab-use-after-free Read in free_block_entry
btrfs
|
19 |
|
|
|
1 |
521d |
517d
|
28/29 |
345d |
7c4e39f9d2af
btrfs: ref-verify: fix use-after-free after invalid ref action
|
|
bpf test error: possible deadlock in ieee80211_remove_interfaces
wireless
|
-1 |
|
|
|
12 |
421d |
448d
|
28/29 |
345d |
e759e1e4a4bd
net: revert RTNL changes in unregister_netdevice_many_notify()
|
|
WARNING in handle_policy_update
lsm
|
-1 |
C |
|
|
61 |
466d |
487d
|
28/29 |
345d |
f09ff307c729
safesetid: check size of policy writes
|
|
KASAN: slab-out-of-bounds Read in led_tg_check
netfilter
|
17 |
C |
done |
|
5 |
501d |
512d
|
28/29 |
345d |
04317f4eb2aa
netfilter: x_tables: fix LED ID check in led_tg_check()
|
|
KASAN: slab-use-after-free Read in ocfs2_lock_global_qf
ocfs2
|
19 |
C |
inconclusive |
|
11 |
470d |
521d
|
28/29 |
345d |
5f3fd772d152
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
|
|
kernel BUG in bch2_journal_noflush_seq
fs
|
-1 |
C |
done |
done |
841 |
451d |
645d
|
28/29 |
345d |
0eafe758ac44
bcachefs: Check for bucket journal seq in the future
|
|
KMSAN: uninit-value in __exfat_get_dentry_set
exfat
|
7 |
C |
|
|
14 |
504d |
558d
|
28/29 |
345d |
02dffe9ab092
exfat: fix uninit-value in __exfat_get_dentry_set
|
|
UBSAN: array-index-out-of-bounds in mr_table_dump
net
|
15 |
C |
|
|
4 |
450d |
450d
|
28/29 |
345d |
15a901361ec3
ipmr: do not call mr_mfc_uses_dev() for unres entries
|
|
KASAN: slab-use-after-free Read in set_powered_sync
bluetooth
|
19 |
C |
done |
|
153 |
504d |
640d
|
28/29 |
345d |
0b882940665c
Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
|
|
WARNING in snd_ctl_led_register
sound
|
-1 |
|
|
|
1 |
498d |
494d
|
28/29 |
345d |
b2e538a9827d
ALSA: control: Avoid WARN() for symlink errors
|
|
WARNING in __io_uring_free
io-uring
|
-1 |
|
|
|
1 |
517d |
513d
|
28/29 |
345d |
7eb75ce75271
io_uring/tctx: work around xa_store() allocation error issue
|
|
divide error in drm_mode_vrefresh
dri
|
2 |
C |
done |
|
15 |
485d |
1030d
|
28/29 |
345d |
9398332f23fa
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
|
|
KASAN: use-after-free Read in ocfs2_search_extent_list
ocfs2
|
19 |
C |
inconclusive |
|
3 |
463d |
493d
|
28/29 |
345d |
34bb50c42335
ocfs2: check el->l_next_free_rec in ocfs2_get_clusters_nocache
|
|
KASAN: out-of-bounds Read in copy_from_kernel_nofault
mm
|
17 |
C |
done |
|
1628 |
387d |
563d
|
28/29 |
345d |
e4137f08816b
mm, kasan, kmsan: instrument copy_from/to_kernel_nofault
|
|
UBSAN: array-index-out-of-bounds in inline_xattr_addr
f2fs
|
15 |
C |
|
|
6 |
451d |
483d
|
28/29 |
345d |
5c1768b67250
f2fs: fix to do sanity check correctly on i_inline_xattr_size
|
|
INFO: task hung in process_measurement (2)
integrity
lsm
|
1 |
C |
done |
|
607 |
347d |
950d
|
28/29 |
345d |
a5324b3a488d
exfat: fix the infinite loop in __exfat_free_cluster()
|
|
general protection fault in find_mergeable_anon_vma
mm
|
2 |
|
|
|
1 |
498d |
493d
|
28/29 |
345d |
8ac662f5da19
fork: avoid inappropriate uprobe access to invalid mm
|
|
WARNING: suspicious RCU usage in __ethtool_get_ts_info
net
|
4 |
C |
done |
|
41 |
465d |
485d
|
28/29 |
345d |
4c61d809cf60
net: ethtool: Fix suspicious rcu_dereference usage
|
|
general protection fault in bch2_checksum
fs
|
19 |
C |
done |
|
34 |
347d |
638d
|
28/29 |
345d |
f7f196170dcd
bcachefs: cryptographic MACs on superblock are not (yet?) supported
|
|
WARNING in ovl_encode_real_fh
overlayfs
|
-1 |
C |
|
|
7 |
468d |
535d
|
28/29 |
345d |
974e3fe0ac61
fs: relax assertions on failure to encode file handles
|
|
KASAN: slab-use-after-free Read in sg_release
scsi
usb
|
19 |
syz |
|
|
1 |
516d |
526d
|
28/29 |
345d |
f10593ad9bc3
scsi: sg: Fix slab-use-after-free read in sg_release()
|
|
UBSAN: shift-out-of-bounds in flow_classify
net
|
-1 |
C |
error |
|
5 |
469d |
468d
|
28/29 |
345d |
a039e54397c6
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
|
|
possible deadlock in __bch2_fsck_err
fs
|
4 |
|
|
|
2 |
495d |
495d
|
28/29 |
345d |
49f2d182638a
bcachefs: Kill unnecessary mark_lock usage
|
|
WARNING in rxrpc_send_data
afs
net
|
-1 |
C |
done |
|
275 |
486d |
492d
|
28/29 |
345d |
ae4f89989479
rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
|
|
WARNING in l2tp_exit_net
net
|
-1 |
syz |
done |
|
219 |
496d |
581d
|
28/29 |
345d |
5d066766c5f1
net/l2tp: fix warning in l2tp_exit_net found by syzbot
|
|
KMSAN: uninit-value in hfs_read_inode
hfs
|
7 |
C |
|
|
2 |
500d |
510d
|
28/29 |
345d |
b905bafdea21
hfs: Sanity check the root record
|
|
KASAN: slab-out-of-bounds Read in f2fs_getxattr
f2fs
|
17 |
C |
done |
|
9 |
409d |
469d
|
28/29 |
345d |
5c1768b67250
f2fs: fix to do sanity check correctly on i_inline_xattr_size
|
|
possible deadlock in team_port_change_check (2)
net
|
4 |
C |
done |
|
16406 |
356d |
777d
|
28/29 |
345d |
3fff5da4ca21
team: prevent adding a device which is already a team device lower
|
|
BUG: unable to handle kernel paging request in crypto_skcipher_encrypt
bcachefs
|
8 |
C |
|
|
433 |
437d |
671d
|
28/29 |
345d |
dba8243f3b46
bcachefs: Don't try to en/decrypt when encryption not available
|
|
KASAN: slab-out-of-bounds Read in orangefs_debug_write
orangefs
|
17 |
C |
|
|
6 |
445d |
480d
|
28/29 |
345d |
f7c848431632
orangefs: fix a oob in orangefs_debug_write
|
|
WARNING: locking bug in __rmqueue_pcplist
mm
|
4 |
C |
|
|
11148 |
436d |
529d
|
28/29 |
345d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
general protection fault in vidtv_mux_stop_thread
media
|
2 |
C |
|
|
9 |
447d |
473d
|
28/29 |
345d |
1221989555db
media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
|
|
KASAN: slab-use-after-free Read in ila_nf_input
net
|
19 |
syz |
|
|
38 |
469d |
472d
|
28/29 |
345d |
260466b576bc
ila: serialize calls to nf_register_net_hooks()
|
|
KCSAN: data-race in io_sq_thread / io_uring_try_cancel_requests (12)
io-uring
|
6 |
|
|
|
4 |
462d |
494d
|
28/29 |
345d |
a13030fd194c
io_uring: simplify the SQPOLL thread check when cancelling requests
|
|
WARNING in ieee80211_set_active_links
wireless
|
-1 |
C |
|
|
2 |
455d |
472d
|
28/29 |
345d |
7553477cbfd7
wifi: mac80211: prohibit deactivating all links
|
|
WARNING: locking bug in eventfd_signal_mask
io-uring
fs
|
4 |
C |
done |
|
6 |
469d |
473d
|
28/29 |
345d |
a9c83a0ab66a
io_uring/timeout: flush timeouts outside of the timeout lock
|
|
general protection fault in dev_prep_valid_name
wireless
|
2 |
C |
done |
|
792 |
473d |
516d
|
28/29 |
345d |
48327566769a
rtnetlink: fix double call of rtnl_link_get_net_ifla()
|
|
general protection fault in btrfs_search_slot
btrfs
|
2 |
C |
done |
|
9 |
501d |
539d
|
28/29 |
345d |
3ed51857a50f
btrfs: add a sanity check for btrfs root in btrfs_search_slot()
|
|
kernel BUG in ocfs2_truncate_log_append
ocfs2
|
-1 |
C |
|
|
4 |
472d |
526d
|
28/29 |
345d |
01676ecd0b5c
ocfs2: check tl->count of truncate log inode in ocfs2_get_truncate_log_info
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync
bluetooth
|
19 |
syz |
|
|
40 |
459d |
631d
|
28/29 |
345d |
26fbd3494a7d
Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
|
|
kernel BUG in iov_iter_revert (2)
fuse
netfs
|
-1 |
C |
done |
|
61 |
461d |
532d
|
28/29 |
345d |
105549d09a53
netfs: Fix enomem handling in buffered reads
|
|
kernel BUG in vlan_get_tci
net
|
-1 |
C |
done |
|
5 |
472d |
472d
|
28/29 |
345d |
77ee7a6d16b6
af_packet: fix vlan_get_tci() vs MSG_PEEK
|
|
WARNING in ip6mr_free_table
net
|
-1 |
C |
done |
|
97859 |
494d |
500d
|
28/29 |
345d |
50b94204446e
ipmr: tune the ipmr_can_free_table() checks.
|
|
general protection fault in __skb_frag_ref
net
|
2 |
|
|
|
2 |
469d |
480d
|
28/29 |
345d |
cbb26f7d8451
mptcp: fix TCP options overflow.
|
|
WARNING in __io_submit_flush_completions
io-uring
|
-1 |
C |
|
|
23 |
462d |
482d
|
28/29 |
345d |
60495b08cf7a
io_uring: silence false positive warnings
|
|
net-next test error: possible deadlock in ieee80211_remove_interfaces
wireless
|
-1 |
|
|
|
9 |
449d |
455d
|
28/29 |
345d |
e759e1e4a4bd
net: revert RTNL changes in unregister_netdevice_many_notify()
|
|
possible deadlock in chaoskey_release
usb
|
4 |
C |
|
|
90 |
549d |
555d
|
28/29 |
345d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
WARNING in wnd_add_free_ext (3)
ntfs3
|
-1 |
C |
done |
|
19 |
374d |
609d
|
28/29 |
345d |
5fc982fe7eca
fs/ntfs3: Fix case when unmarked clusters intersect with zone
|
|
KASAN: slab-out-of-bounds Read in xfrm_state_find
net
|
17 |
|
|
|
10 |
352d |
506d
|
28/29 |
345d |
e952837f3ddb
xfrm: state: fix out-of-bounds read during lookup
|
|
possible deadlock in cleanup_net (3)
wireless
|
4 |
|
|
|
6 |
442d |
444d
|
28/29 |
345d |
e759e1e4a4bd
net: revert RTNL changes in unregister_netdevice_many_notify()
|
|
WARNING in __mptcp_clean_una (2)
mptcp
|
-1 |
C |
done |
|
11 |
446d |
486d
|
28/29 |
345d |
619af16b3b57
mptcp: handle fastopen disconnect correctly
|
|
BUG: using smp_processor_id() in preemptible code in nft_inner_eval
netfilter
|
4 |
|
|
|
2 |
511d |
511d
|
28/29 |
345d |
7b1d83da254b
netfilter: nft_inner: incorrect percpu area handling under softirq
|
|
general protection fault in bch2_btree_path_traverse_one
fs
|
8 |
C |
done |
|
564 |
437d |
538d
|
28/29 |
345d |
90f3683e8f7c
bcachefs: Fix null ptr deref in btree_path_lock_root()
c7e78f7b0178
bcachefs: Ignore empty btree root journal entries
|
|
possible deadlock in __bch2_trans_relock
btrfs
|
4 |
C |
|
|
52 |
453d |
540d
|
28/29 |
345d |
ff1dd05f8233
bcachefs: bch2_trans_relock() is trylock for lockdep
|
|
KMSAN: uninit-value in mptcp_incoming_options (2)
mptcp
|
7 |
|
|
|
9 |
452d |
457d
|
28/29 |
345d |
c86b000782da
mptcp: consolidate suboption status
|
|
BUG: corrupted list in bch2_btree_and_journal_iter_exit
fs
|
8 |
C |
done |
|
7 |
461d |
507d
|
28/29 |
345d |
0184dfa3b821
bcachefs: Fix journal_iter list corruption
|
|
WARNING: locking bug in get_random_u8
kernel
|
4 |
syz |
|
|
70 |
444d |
516d
|
28/29 |
345d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
WARNING in posixtimer_send_sigqueue (2)
kernel
|
-1 |
C |
done |
|
557 |
437d |
485d
|
28/29 |
345d |
8c4840277b6d
signal/posixtimers: Handle ignore/blocked sequences correctly
|
|
KASAN: slab-use-after-free Read in bpf_trace_run2 (2)
bpf
trace
|
19 |
syz |
error |
|
123 |
528d |
545d
|
28/29 |
345d |
2e8a12b82c40
tracing: Fix syscall tracepoint use-after-free
|
|
WARNING in mac80211_hwsim_config_mac_nl
wireless
|
-1 |
|
|
|
85 |
490d |
522d
|
28/29 |
345d |
52cebabb1264
wifi: mac80211: fix vif addr when switching from monitor to station
|
|
BUG: corrupted list in ieee802154_if_remove
wpan
|
8 |
C |
error |
|
3 |
524d |
526d
|
28/29 |
345d |
eb09fbeb4870
mac802154: check local interfaces before deleting sdata list
|
|
KMSAN: uninit-value in dib3000mb_attach (2)
usb
media
|
7 |
C |
|
|
4873 |
480d |
2001d
|
28/29 |
345d |
2dd59fe0e19e
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
|
|
KMSAN: uninit-value in io_nop
io-uring
|
7 |
C |
|
|
39 |
502d |
511d
|
28/29 |
345d |
ee116574de84
io_uring/nop: ensure nop->fd is always initialized
|
|
WARNING in mark_buffer_dirty (6)
fs
|
-1 |
C |
error |
|
11669 |
345d |
912d
|
28/29 |
345d |
ca76bb226bf4
nilfs2: do not force clear folio if buffer is referenced
|
|
KASAN: slab-out-of-bounds Read in nsim_dev_health_break_write
net
|
17 |
C |
|
|
4 |
483d |
488d
|
28/29 |
345d |
ee76746387f6
netdevsim: prevent bad user input in nsim_dev_health_break_write()
|
|
BUG: unable to handle kernel paging request in find_first_extent_item
btrfs
|
8 |
C |
|
|
4 |
474d |
470d
|
28/29 |
345d |
6aecd91a5c5b
btrfs: avoid NULL pointer dereference if no valid extent tree
|
|
kernel BUG in snd_pcm_mmap_data_fault
sound
|
-1 |
|
|
|
1 |
576d |
572d
|
28/29 |
345d |
d2913a07d903
ALSA: pcm: Add sanity NULL check for the default mmap fault handler
|
|
WARNING in uvc_status_unregister
usb
media
|
-1 |
C |
done |
|
61256 |
436d |
543d
|
28/29 |
345d |
a67f75c2b5ec
media: uvcvideo: Fix deadlock during uvc_probe
|
|
INFO: rcu detected stall in hub_event
usb
|
1 |
C |
done |
|
1233 |
345d |
2338d
|
28/29 |
345d |
64f2657b5793
HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
|
|
kernel BUG in bch2_bio_compress (2)
fs
|
-1 |
C |
|
|
5 |
393d |
518d
|
28/29 |
345d |
3d0b3b51c5ab
bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
|
|
WARNING in page_pool_put_unrefed_netmem
net
|
-1 |
C |
error |
|
7 |
458d |
598d
|
28/29 |
345d |
a126061c80d5
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
|
|
INFO: task hung in _cfg80211_unregister_wdev (2)
wireless
|
1 |
|
|
|
552 |
441d |
449d
|
28/29 |
345d |
e759e1e4a4bd
net: revert RTNL changes in unregister_netdevice_many_notify()
|
|
possible deadlock in chaoskey_open
usb
|
4 |
C |
|
|
475 |
549d |
555d
|
28/29 |
345d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
WARNING in udf_rename (2)
udf
|
-1 |
C |
error |
|
8 |
498d |
506d
|
28/29 |
345d |
6756af923e06
udf: Verify inode link counts before performing rename
|
|
KMSAN: uninit-value in f2fs_new_node_page
f2fs
|
7 |
C |
|
|
39 |
445d |
499d
|
28/29 |
345d |
76f01376df39
f2fs: ensure that node info flags are always initialized
|
|
WARNING: locking bug in __lock_task_sighand
bpf
trace
|
4 |
C |
unreliable |
|
89 |
448d |
504d
|
28/29 |
345d |
87c544108b61
bpf: Send signals asynchronously if !preemptible
|
|
kernel BUG in nilfs_set_link
nilfs
|
-1 |
|
|
|
1 |
465d |
461d
|
28/29 |
345d |
ee70999a988b
nilfs2: handle errors that nilfs_prepare_chunk() may return
|
|
KASAN: slab-out-of-bounds Read in ovl_inode_upper
overlayfs
|
17 |
C |
|
|
4 |
507d |
507d
|
28/29 |
345d |
2957fa4931a3
fs/backing_file: fix wrong argument in callback
|
|
kernel BUG in bch2_btree_write_buffer_flush_locked
fs
|
-1 |
C |
done |
|
35 |
455d |
535d
|
28/29 |
345d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
KASAN: null-ptr-deref Read in fuse_copy_do
fuse
|
12 |
C |
done |
|
10 |
465d |
505d
|
28/29 |
345d |
78f2560fc9fa
fuse: Set *nbytesp=0 in fuse_get_user_pages on allocation failure
|
|
WARNING in __proc_create (3)
afs
|
-1 |
C |
|
|
2 |
473d |
469d
|
28/29 |
345d |
8fd56ad6e7c9
afs: Fix the maximum cell name length
|
|
general protection fault in vsock_connectible_has_data
net
virt
|
2 |
C |
done |
|
7 |
464d |
462d
|
28/29 |
345d |
f6abafcd32f9
vsock/bpf: return early if transport is not assigned
|
|
kernel BUG in vlan_get_protocol_dgram
net
|
-1 |
C |
done |
|
8 |
472d |
472d
|
28/29 |
345d |
f91a5b808938
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
|
|
kernel BUG in bch2_btree_root_read
fs
|
-1 |
C |
|
|
9 |
436d |
510d
|
28/29 |
345d |
828552ca74a4
bcachefs: Kill bch2_bucket_alloc_new_fs()
|
|
WARNING in current_check_refer_path
lsm
|
-1 |
C |
|
|
90 |
459d |
644d
|
28/29 |
345d |
49440290a093
landlock: Handle weird files
|
|
INFO: task hung in exfat_sync_fs
exfat
|
1 |
C |
error |
|
1859 |
476d |
992d
|
28/29 |
345d |
fee873761bd9
exfat: fix the infinite loop in exfat_readdir()
|
|
general protection fault in netfs_write_collection_worker
netfs
|
2 |
|
|
|
14 |
451d |
549d
|
28/29 |
345d |
794d8cf3a87a
netfs: Report on NULL folioq in netfs_writeback_unlock_folios()
|
|
KASAN: slab-out-of-bounds Write in __put_unused_fd
fs
|
22 |
C |
done |
|
5 |
467d |
471d
|
28/29 |
345d |
0c0214df28f0
fanotify: Fix crash in fanotify_init(2)
|
|
possible deadlock in usb_deregister_dev (3)
usb
|
4 |
C |
|
|
103 |
549d |
555d
|
28/29 |
345d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
possible deadlock in page_cache_ra_unbounded
mm
fs
|
4 |
C |
error |
done |
163 |
451d |
1212d
|
28/29 |
407d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in skb_checksum_help (3)
net
|
-1 |
C |
done |
done |
9460 |
519d |
847d
|
28/29 |
444d |
89add40066f9
net: drop bad gso csum_start and offset in virtio_net_hdr
|
|
KASAN: use-after-free Read in reiserfs_fill_super (3)
fs
|
19 |
C |
error |
done |
47 |
514d |
559d
|
28/29 |
458d |
fb6f20ecb121
reiserfs: The last commit
|
|
kernel BUG in bch2_fs_btree_write_buffer_exit
fs
|
-1 |
C |
done |
|
6138 |
514d |
566d
|
28/29 |
474d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
kernel BUG in bch2_journal_res_get (2)
fs
|
-1 |
C |
|
|
1710 |
514d |
538d
|
28/29 |
474d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
kernel BUG in bch2_fs_btree_cache_exit
fs
|
-1 |
C |
done |
|
2766 |
514d |
545d
|
28/29 |
474d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
WARNING in netlink_sock_destruct (2)
net
|
-1 |
|
|
|
1 |
533d |
533d
|
28/29 |
484d |
1904fb9ebf91
netlink: terminate outstanding dump on socket close
|
|
divide error in __tcp_select_window (3)
net
|
2 |
C |
|
|
5 |
525d |
530d
|
28/29 |
485d |
ce7356ae3594
mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
|
|
BUG: using smp_processor_id() in preemptible code in bpf_mem_alloc
bpf
|
4 |
C |
done |
|
12 |
517d |
514d
|
28/29 |
485d |
4ff04abf9d5b
bpf: Add necessary migrate_disable to range_tree.
|
|
WARNING: suspicious RCU usage in phonet_route_del
net
|
4 |
C |
done |
|
7 |
526d |
530d
|
28/29 |
486d |
38a1f50a5efb
phonet: do not call synchronize_rcu() from phonet_route_del()
|
|
general protection fault in io_uring_show_fdinfo (2)
io-uring
|
2 |
C |
done |
|
19 |
532d |
531d
|
28/29 |
486d |
d50f94d761a5
io_uring/rsrc: get rid of the empty node and dummy_ubuf
|
|
general protection fault in io_sqe_buffer_register
io-uring
|
2 |
C |
done |
|
55 |
529d |
531d
|
28/29 |
486d |
d50f94d761a5
io_uring/rsrc: get rid of the empty node and dummy_ubuf
|
|
kernel BUG in __bch2_btree_node_hash_insert
fs
|
-1 |
C |
done |
|
396 |
515d |
523d
|
28/29 |
486d |
0b6ec0c5ac6c
bcachefs: Fix assertion pop in topology repair
|
|
general protection fault in put_page (3)
net
|
2 |
C |
done |
|
47 |
487d |
531d
|
28/29 |
486d |
341468e0ab4b
lib/iov_iter: fix bvec iterator setup
|
|
WARNING in hrtimer_forward (3)
kernel
|
-1 |
|
|
|
3 |
526d |
619d
|
28/29 |
486d |
6ee0270943b5
wifi: mac80211_hwsim: use hrtimer_active()
|
|
net-next test error: WARNING in __sock_create
net
|
-1 |
|
|
|
41 |
535d |
547d
|
28/29 |
486d |
ba4e469e42fe
vsock: do not leave dangling sk pointer in vsock_create()
|
|
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text
fs
|
17 |
C |
done |
|
33 |
516d |
626d
|
28/29 |
486d |
657d4282d8c4
bcachefs: Fix journal_entry_dev_usage_to_text() overrun
|
|
WARNING in posixtimer_send_sigqueue
kernel
|
-1 |
C |
error |
|
196 |
486d |
519d
|
28/29 |
486d |
cdc905d16b07
posix-timers: Fix spurious warning on double enqueue versus do_exit()
|
|
BUG: Bad page state in kvm_coalesced_mmio_init
mm
|
-1 |
|
|
|
1 |
528d |
527d
|
28/29 |
486d |
66edc3a5894c
mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
|
|
general protection fault in touch_buffer
nilfs
|
2 |
C |
|
|
8 |
523d |
533d
|
28/29 |
486d |
cd45e963e44b
nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
|
|
UBSAN: array-index-out-of-bounds in jfs_readdir
jfs
|
19 |
C |
inconclusive |
|
89 |
493d |
745d
|
28/29 |
486d |
839f102efb16
jfs: fix array-index-out-of-bounds in jfs_readdir
|
|
kernel BUG in __bkey_unpack_pos
fs
|
-1 |
C |
|
|
4 |
494d |
533d
|
28/29 |
486d |
dc537189b5cf
bcachefs: Fix validate_bset() repair path
|
|
kernel BUG in bch2_trans_node_iter_init
fs
|
-1 |
C |
done |
|
13 |
524d |
538d
|
28/29 |
486d |
f8f1dde68681
bcachefs: Fix missing validation for bch_backpointer.level
|
|
kernel BUG in bch2_btree_path_level_init (2)
fs
|
-1 |
C |
done |
|
29 |
490d |
540d
|
28/29 |
486d |
f8f1dde68681
bcachefs: Fix missing validation for bch_backpointer.level
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2)
netfilter
|
17 |
C |
|
|
3 |
524d |
521d
|
28/29 |
486d |
35f56c554eb1
netfilter: ipset: add missing range check in bitmap_ip_uadt
|
|
WARNING in sk_skb_reason_drop
net
|
-1 |
C |
done |
|
1447 |
487d |
516d
|
28/29 |
486d |
85c7975acd97
net: ip: fix unexpected return in fib_validate_source()
|
|
UBSAN: shift-out-of-bounds in ocfs2_fill_super (2)
ocfs2
|
-1 |
C |
|
|
81 |
516d |
537d
|
28/29 |
486d |
23aab037106d
ocfs2: fix UBSAN warning in ocfs2_verify_volume()
|
|
KCSAN: data-race in __ep_remove / __fput (5)
fs
|
6 |
|
|
|
1 |
573d |
573d
|
28/29 |
486d |
6474353a5e3d
epoll: annotate racy check
|
|
WARNING in media_create_pad_link
usb
media
|
-1 |
C |
done |
done |
104 |
511d |
2163d
|
28/29 |
486d |
3dd075fe8ebb
media: uvcvideo: Require entities to have a non-zero unique ID
|
|
UBSAN: shift-out-of-bounds in dbSplit (2)
jfs
|
-1 |
C |
error |
|
403 |
499d |
745d
|
28/29 |
486d |
a5f5e4698f8a
jfs: fix shift-out-of-bounds in dbSplit
|
|
kernel BUG in bch2_dev_btree_bitmap_mark
fs
|
-1 |
C |
done |
|
31 |
518d |
542d
|
28/29 |
486d |
27a036a0c3e7
bcachefs: Fix bch_member.btree_bitmap_shift validation
|
|
kernel BUG in ocfs2_set_new_buffer_uptodate
ocfs2
|
-1 |
C |
inconclusive |
|
55 |
495d |
606d
|
28/29 |
486d |
737f34137844
ocfs2: uncache inode which has failed entering the group
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree (2)
jfs
|
15 |
C |
inconclusive |
|
77 |
513d |
698d
|
28/29 |
486d |
a174706ba4da
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
kernel BUG in bch2_bkey_pack_pos_lossy
fs
|
-1 |
C |
|
|
7 |
525d |
537d
|
28/29 |
486d |
dc537189b5cf
bcachefs: Fix validate_bset() repair path
|
|
KASAN: use-after-free Read in netdev_unregister_kobject
pm
|
19 |
C |
error |
|
6281 |
493d |
724d
|
28/29 |
486d |
27aabf27fd01
Bluetooth: fix use-after-free in device_for_each_child()
|
|
KMSAN: uninit-value in hci_rx_work
bluetooth
|
7 |
C |
|
|
29 |
513d |
632d
|
28/29 |
486d |
3fe288a8214e
Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
|
|
WARNING: locking bug in ext4_move_extents
ext4
|
4 |
C |
done |
|
12000 |
493d |
1046d
|
28/29 |
486d |
d7fe143cb115
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
|
|
INFO: task hung in snd_card_free
sound
|
1 |
C |
error |
|
24 |
515d |
530d
|
28/29 |
486d |
dafb28f02be4
ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
|
|
kernel BUG in bch2_run_recovery_pass
fs
|
-1 |
C |
done |
|
17 |
518d |
539d
|
28/29 |
486d |
2642084f26b5
bcachefs: Allow for unknown key types in backpointers fsck
|
|
WARNING in thermal_thresholds_flush
pm
|
-1 |
C |
done |
|
76 |
544d |
545d
|
28/29 |
486d |
54219ee4eaeb
thermal: thresholds: Fix thermal lock annotation issue
|
|
general protection fault in swap_reclaim_full_clusters
mm
|
2 |
C |
|
|
1530 |
519d |
527d
|
28/29 |
486d |
dcf32ea7eced
mm: swapfile: fix cluster reclaim work crash on rotational devices
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst
jfs
|
19 |
C |
error |
|
200 |
488d |
715d
|
28/29 |
486d |
ca84a2c9be48
jfs: array-index-out-of-bounds fix in dtReadFirst
|
|
WARNING in hci_conn_timeout
bluetooth
|
-1 |
C |
done |
|
6022 |
486d |
2084d
|
28/29 |
486d |
2b0f2fc9ed62
Bluetooth: hci_conn: Use disable_delayed_work_sync
|
|
kernel BUG in bch2_ptr_swab
fs
|
-1 |
C |
inconclusive |
|
11 |
523d |
540d
|
28/29 |
486d |
840c2fbcc5cd
bcachefs: Fix assertion pop in bch2_ptr_swab()
|
|
WARNING in __v4l2_ctrl_modify_dimensions
media
|
-1 |
C |
|
|
237 |
511d |
591d
|
28/29 |
486d |
9f070b1862f3
media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
|
|
general protection fault in fuse_do_readpage
fuse
|
8 |
C |
|
|
9 |
505d |
529d
|
28/29 |
486d |
3a23787ca875
erofs: fix file-backed mounts over FUSE
|
|
KCSAN: data-race in __mod_timer / kvfree_call_rcu
rcu
|
6 |
|
|
|
5 |
514d |
549d
|
28/29 |
486d |
a23da88c6c80
rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
|
|
WARNING in iomap_iter (4)
iomap
erofs
|
-1 |
C |
done |
|
1 |
521d |
517d
|
28/29 |
486d |
0bc8061ffc73
erofs: handle NONHEAD !delta[1] lclusters gracefully
|
|
general protection fault in ocfs2_xa_block_wipe_namevalue
ocfs2
|
2 |
C |
|
|
4 |
540d |
536d
|
28/29 |
491d |
0b63c0e01fba
ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
|
|
kernel BUG in __bch2_bkey_cmp_packed_format_checked
fs
|
-1 |
C |
|
|
4 |
538d |
538d
|
28/29 |
491d |
d335bb3fd3a4
bcachefs: Ancient versions with bad bkey_formats are no longer supported
|
|
kernel BUG in bch2_bkey_cmp_packed
fs
|
-1 |
C |
|
|
8 |
525d |
538d
|
28/29 |
491d |
d335bb3fd3a4
bcachefs: Ancient versions with bad bkey_formats are no longer supported
|
|
WARNING in __sock_create
net
|
-1 |
C |
done |
|
4 |
526d |
526d
|
28/29 |
491d |
d293958a8595
net/smc: do not leave a dangling sk pointer in __smc_create()
|
|
KMSAN: uninit-value in sctp_sf_ootb
sctp
|
7 |
C |
|
|
18 |
530d |
598d
|
28/29 |
491d |
0ead60804b64
sctp: properly validate chunk size in sctp_sf_ootb()
|
|
kernel BUG in bch2_inconsistent_error
fs
|
-1 |
C |
|
|
4 |
525d |
536d
|
28/29 |
491d |
f9f0a5390dce
bcachefs: Change OPT_STR max to be 1 less than the size of choices array
|
|
possible deadlock in ni_fiemap
ntfs3
|
4 |
C |
error |
done |
4007 |
549d |
1276d
|
28/29 |
503d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: null-ptr-deref Write in dst_release (4)
net
|
12 |
|
|
|
23 |
555d |
742d
|
28/29 |
503d |
ac888d58869b
net: do not delay dst_entries_add() in dst_release()
|
|
upstream test error: KASAN: invalid-access Write in setup_arch
arm
|
-1 |
|
|
|
1 |
595d |
594d
|
28/29 |
506d |
7aed6a2c51ff
kasan: Disable Software Tag-Based KASAN with GCC
894b00a3350c
kasan: Fix Software Tag-Based KASAN with GCC
|
|
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
22 |
C |
done |
|
275 |
538d |
882d
|
28/29 |
506d |
1bf4470a3939
Bluetooth: SCO: Fix UAF on sco_sock_timeout
|
|
kernel BUG in eth_header (3)
net
|
-1 |
|
|
|
1 |
539d |
539d
|
28/29 |
517d |
4ed234fe793f
netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
|
|
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc
fs
|
19 |
C |
done |
|
2 |
535d |
540d
|
28/29 |
518d |
8e910ca20e11
bcachefs: Fix UAF in bch2_reconstruct_alloc()
|
|
BUG: Bad page state in bpf_test_run_xdp_live
net
|
-1 |
C |
done |
|
17 |
532d |
536d
|
28/29 |
518d |
c40dd8c47325
bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
|
|
WARNING in folio_walk_start
mm
|
-1 |
|
|
|
1 |
551d |
549d
|
28/29 |
518d |
7c18d4811000
mm/pagewalk: fix usage of pmd_leaf()/pud_leaf() without present check
|
|
kernel BUG in bch2_bucket_alloc_trans (2)
fs
|
-1 |
C |
done |
|
103 |
518d |
546d
|
28/29 |
518d |
3fd27e9c57bf
bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
|
|
kernel BUG in ocfs2_truncate_inline
ocfs2
|
-1 |
C |
inconclusive |
|
3 |
540d |
554d
|
28/29 |
518d |
bc0a2f3a73fc
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
|
|
WARNING in fuse_write_file_get (2)
fuse
|
-1 |
|
|
|
6 |
546d |
562d
|
28/29 |
518d |
184429a17f8f
Revert "fuse: move initialization of fuse_file to fuse_writepages() instead of in callback"
|
|
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra
fs
|
11 |
C |
|
|
2 |
544d |
540d
|
28/29 |
518d |
a25a83de45b4
bcachefs: fix null-ptr-deref in have_stripes()
|
|
possible deadlock in nilfs_dirty_inode (4)
nilfs
|
4 |
C |
|
|
2 |
534d |
544d
|
28/29 |
518d |
b3a033e3ecd3
nilfs2: fix potential deadlock with newly created symlinks
|
|
WARNING in push_jmp_history
bpf
|
-1 |
C |
done |
|
5 |
556d |
556d
|
28/29 |
518d |
aa30eb3260b2
bpf: Force checkpoint when jmp history is too long
|
|
general protection fault in btree_node_iter_and_journal_peek
fs
|
2 |
C |
|
|
3 |
541d |
563d
|
28/29 |
518d |
3726a1970bd7
bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
|
|
UBSAN: shift-out-of-bounds in bch2_alloc_to_text
fs
|
-1 |
C |
|
|
29 |
530d |
542d
|
28/29 |
518d |
5c41f75d1b92
bcachefs: fix shift oob in alloc_lru_idx_fragmentation
|
|
KASAN: slab-use-after-free Write in kvfree_call_rcu
wireless
|
22 |
|
|
|
2 |
550d |
546d
|
28/29 |
518d |
d5fee261dfd9
wifi: cfg80211: clear wdev->cqm_config pointer on free
|
|
KASAN: null-ptr-deref Write in xfs_filestream_select_ag (2)
xfs
|
12 |
syz |
|
|
3 |
545d |
545d
|
28/29 |
518d |
dc60992ce76f
xfs: fix finding a last resort AG in xfs_filestream_pick_ag
|
|
possible deadlock in process_measurement (4)
integrity
lsm
|
4 |
C |
done |
|
7976 |
528d |
565d
|
28/29 |
518d |
58a039e679fe
mm: split critical region in remap_file_pages() and invoke LSMs in between
|
|
KCSAN: assert: race in dequeue_entities
netfilter
audit
|
14 |
|
|
|
2118 |
529d |
566d
|
28/29 |
518d |
b55945c500c5
sched: Fix pick_next_task_fair() vs try_to_wake_up() race
|
|
UBSAN: shift-out-of-bounds in validate_sb_layout
fs
|
-1 |
C |
done |
|
7 |
532d |
540d
|
28/29 |
518d |
2045fc4295c4
bcachefs: Fix invalid shift in validate_sb_layout()
|
|
kernel BUG in __block_write_begin_int (3)
nilfs
|
-1 |
C |
|
|
4 |
547d |
547d
|
28/29 |
518d |
41e192ad2779
nilfs2: fix kernel bug due to missing clearing of checked flag
|
|
possible deadlock in lock_mm_and_find_vma (2)
mm
|
4 |
C |
|
|
6626 |
522d |
593d
|
28/29 |
518d |
58a039e679fe
mm: split critical region in remap_file_pages() and invoke LSMs in between
|
|
possible deadlock in bch2_replicas_entry_validate
fs
|
4 |
C |
done |
|
9468 |
541d |
560d
|
28/29 |
519d |
bf4baaa087e2
bcachefs: Fix lockdep splat in bch2_accounting_read
|
|
possible deadlock in ext4_xattr_inode_iget (3)
ext4
|
4 |
C |
error |
done |
183 |
561d |
743d
|
28/29 |
519d |
d1bc560e9a9c
ext4: nested locking for xattr inode
|
|
KASAN: slab-use-after-free Read in rhashtable_walk_enter
nfs
|
19 |
|
|
|
8 |
557d |
575d
|
28/29 |
519d |
dc0d0f885aa4
NFSD: Mark filecache "down" if init fails
|
|
KASAN: slab-use-after-free Read in kvm_put_kvm
kvm
|
19 |
|
|
|
1 |
541d |
541d
|
28/29 |
519d |
ae8f8b376102
KVM: arm64: Unregister redistributor for failed vCPU creation
|
|
inconsistent lock state in ppp_input
ppp
|
4 |
C |
|
|
15 |
548d |
566d
|
28/29 |
520d |
aec7291003df
ppp: do not assume bh is held in ppp_channel_bridge_input()
|
|
kernel BUG in bch2_btree_pos_to_text
fs
|
-1 |
C |
|
|
8 |
523d |
572d
|
28/29 |
520d |
0151d10a480d
bcachefs: add check for btree id against max in try read node
|
|
possible deadlock in fsnotify_destroy_mark
squashfs
|
4 |
C |
|
|
46 |
559d |
602d
|
28/29 |
520d |
cad3f4a22cfa
inotify: Fix possible deadlock in fsnotify_destroy_mark
|
|
INFO: task hung in vcs_open (8)
nilfs
serial
|
1 |
C |
inconclusive |
|
7 |
561d |
567d
|
28/29 |
520d |
08cfa12adf88
nilfs2: propagate directory read errors from nilfs_find_entry()
|
|
possible deadlock in sk_clone_lock (3)
mptcp
|
4 |
C |
|
|
21 |
539d |
588d
|
28/29 |
520d |
3d041393ea8c
mptcp: prevent MPC handshake on port-based signal endpoints
|
|
general protection fault in btrfs_update_reloc_root
btrfs
|
2 |
|
|
|
3 |
574d |
566d
|
28/29 |
520d |
c3b47f49e831
btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
|
|
WARNING in __mptcp_move_skbs_from_subflow
mptcp
|
-1 |
C |
error |
|
90 |
553d |
640d
|
28/29 |
520d |
4dabcdf58121
tcp: fix mptcp DSS corruption due to large pmtu xmit
|
|
INFO: task hung in usb_port_suspend
usb
|
1 |
C |
|
|
12 |
542d |
552d
|
28/29 |
520d |
5189df7b8088
USB: gadget: dummy-hcd: Fix "task hung" problem
|
|
KCSAN: data-race in __fsnotify_parent / __fsnotify_recalc_mask (5)
fs
|
6 |
|
|
|
15 |
564d |
651d
|
28/29 |
520d |
35ceae44742e
fsnotify: Avoid data race between fsnotify_recalc_mask() and fsnotify_object_watched()
|
|
general protection fault in dev_map_enqueue (2)
bpf
net
|
19 |
C |
error |
done |
336 |
624d |
690d
|
28/29 |
520d |
09d88791c7cd
bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
|
|
kernel BUG in submit_bh_wbc (3)
nilfs
fs
|
-1 |
C |
done |
|
18 |
542d |
549d
|
28/29 |
520d |
6ed469df0bfb
nilfs2: fix kernel bug due to missing clearing of buffer delay flag
|
|
KCSAN: data-race in __delete_from_swap_cache / __try_to_reclaim_swap
mm
|
6 |
|
|
|
1 |
561d |
561d
|
28/29 |
520d |
818f916e3a07
mm: swap: prevent possible data-race in __try_to_reclaim_swap
|
|
general protection fault in prt_str
fs
|
2 |
C |
done |
|
2 |
562d |
577d
|
28/29 |
520d |
a30f32222df2
bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
|
|
WARNING in kthread_unpark (2)
wireguard
gfs2
|
-1 |
syz |
done |
|
35 |
558d |
705d
|
28/29 |
520d |
214e01ad4ed7
kthread: unpark only parked kthread
|
|
general protection fault in bch2_alloc_read
fs
|
2 |
C |
|
|
7 |
560d |
567d
|
28/29 |
520d |
a319aeaebb6c
bcachefs: Fix missing bounds checks in bch2_alloc_read()
|
|
INFO: task hung in nsim_dev_hwstats_exit
net
|
1 |
|
|
|
43 |
520d |
559d
|
28/29 |
520d |
a1494d532e28
netdevsim: use cond_resched() in nsim_dev_trap_report_work()
|
|
general protection fault in run_is_mapped_full
ntfs3
|
8 |
C |
error |
|
72 |
555d |
642d
|
28/29 |
520d |
a33fb016e49e
fs/ntfs3: Fix general protection fault in run_is_mapped_full
|
|
WARNING: kmalloc bug in wnd_init
ntfs3
|
-1 |
C |
done |
|
3 |
625d |
771d
|
28/29 |
520d |
c4a8ba334262
fs/ntfs3: Add rough attr alloc_size check
|
|
KASAN: slab-use-after-free Read in mptcp_pm_nl_rm_addr_or_subflow
mptcp
|
19 |
|
|
|
1 |
550d |
549d
|
28/29 |
520d |
7decd1f5904a
mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
|
|
WARNING: locking bug in try_to_wake_up
kernel
|
19 |
C |
error |
|
157 |
520d |
701d
|
28/29 |
520d |
41fd1e94066a
btrfs: wait for fixup workers before stopping cleaner kthread during umount
|
|
KASAN: slab-out-of-bounds Read in udf_get_filelongad (2)
udf
|
17 |
C |
|
|
4 |
576d |
590d
|
28/29 |
520d |
c226964ec786
udf: refactor inode_bmap() to handle error
|
|
INFO: trying to register non-static key in mark_as_free_ex
ntfs3
|
-1 |
C |
done |
|
2 |
578d |
590d
|
28/29 |
520d |
d178944db36b
fs/ntfs3: Additional check in ni_clear()
|
|
UBSAN: shift-out-of-bounds in xfrm_selector_match (2)
net
|
-1 |
C |
error |
|
10 |
564d |
577d
|
28/29 |
520d |
3f0ab59e6537
xfrm: validate new SA's prefixlen using SA family when sel.family is unset
|
|
KMSAN: kernel-infoleak in con_font_op (2)
serial
|
9 |
|
|
|
8 |
544d |
553d
|
28/29 |
520d |
f956052e00de
vt: prevent kernel-infoleak in con_font_get()
|
|
WARNING in p9_client_create (2)
v9fs
|
-1 |
C |
done |
|
26070 |
535d |
571d
|
28/29 |
520d |
79efebae4afc
9p: Avoid creating multiple slab caches with the same name
|
|
possible deadlock in ppp_do_recv
ppp
|
4 |
|
|
|
8 |
555d |
570d
|
28/29 |
520d |
aec7291003df
ppp: do not assume bh is held in ppp_channel_bridge_input()
|
|
WARNING in xt_cluster_mt (2)
netfilter
|
-1 |
C |
inconclusive |
|
5 |
562d |
560d
|
28/29 |
520d |
0bfcb7b71e73
netfilter: xtables: avoid NFPROTO_UNSPEC where needed
|
|
KMSAN: uninit-value in ppp_async_push (4)
ppp
|
7 |
C |
|
|
43 |
553d |
554d
|
28/29 |
520d |
40dddd4b8bd0
ppp: fix ppp_async_encode() illegal access
|
|
KMSAN: uninit-value in netfs_clear_buffer
netfs
|
7 |
C |
|
|
46 |
564d |
573d
|
28/29 |
520d |
f6023535b52f
netfs: Fix a KMSAN uninit-value error in netfs_clear_buffer
|
|
UBSAN: shift-out-of-bounds in bch2_stripe_to_text
fs
|
-1 |
C |
|
|
3 |
571d |
567d
|
28/29 |
520d |
9f25dbe0bf91
bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
|
|
BUG: using __this_cpu_write() in preemptible code in nf_dup_ipv4
netfilter
|
4 |
|
|
|
1 |
577d |
577d
|
28/29 |
520d |
92ceba94de6f
netfilter: nf_tables: prevent nf_skb_duplicated corruption
|
|
INFO: task hung in devlink_pernet_pre_exit (2)
net
|
1 |
|
|
|
32 |
524d |
543d
|
28/29 |
520d |
a1494d532e28
netdevsim: use cond_resched() in nsim_dev_trap_report_work()
|
|
UBSAN: shift-out-of-bounds in member_to_text
fs
|
-1 |
C |
|
|
12 |
547d |
591d
|
28/29 |
520d |
c1bd21bb6518
bcachefs: Fix invalid shift in member_to_text()
|
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
4 |
C |
done |
|
22650 |
548d |
1676d
|
28/29 |
520d |
08d1914293da
Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
|
|
KCSAN: data-race in virtqueue_disable_cb / vring_interrupt (4)
virt
|
6 |
|
|
|
1 |
582d |
581d
|
28/29 |
520d |
83c334ed5216
virtio_ring: tag event_triggered as racy for KCSAN
|
|
general protection fault in write_all_supers
btrfs
|
8 |
C |
|
|
21 |
540d |
583d
|
28/29 |
520d |
3c36a72c1d27
btrfs: reject ro->rw reconfiguration if there are hard ro requirements
|
|
KMSAN: uninit-value in from_kuid (2)
ocfs2
|
7 |
C |
|
|
75 |
542d |
573d
|
28/29 |
520d |
15f343474816
fs: Fix uninitialized value issue in from_kuid and from_kgid
|
|
KASAN: slab-use-after-free Read in bch2_direct_write
fs
|
19 |
|
|
|
11 |
564d |
567d
|
28/29 |
520d |
573ddcdc5607
bcachefs: fix uaf in bch2_dio_write_done()
|
|
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (3)
erofs
|
10 |
C |
|
|
492 |
520d |
576d
|
28/29 |
520d |
416a8b2c02fe
erofs: ensure regular inodes for file-backed mounts
|
|
KMSAN: uninit-value in vfat_rename2
exfat
|
7 |
C |
|
|
2 |
563d |
560d
|
28/29 |
520d |
963a7f4d3b90
fat: fix uninitialized variable
|
|
possible deadlock in ppp_input_error
ppp
|
4 |
|
|
|
61 |
560d |
572d
|
28/29 |
520d |
aec7291003df
ppp: do not assume bh is held in ppp_channel_bridge_input()
|
|
possible deadlock in mi_read
ntfs3
|
4 |
C |
error |
|
11141 |
520d |
1293d
|
28/29 |
520d |
03b097099eef
fs/ntfs3: Fix possible deadlock in mi_read
|
|
INFO: task hung in ip_tunnel_init_net (3)
netfilter
|
1 |
|
|
|
41 |
521d |
552d
|
28/29 |
520d |
a1494d532e28
netdevsim: use cond_resched() in nsim_dev_trap_report_work()
|
|
kernel BUG in dma_alloc_attrs
iommu
|
-1 |
C |
|
|
4 |
543d |
548d
|
28/29 |
520d |
78b2770c935f
dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory
|
|
INFO: rcu detected stall in br_handle_frame (5)
bridge
|
1 |
syz |
|
|
24 |
523d |
551d
|
28/29 |
520d |
a1494d532e28
netdevsim: use cond_resched() in nsim_dev_trap_report_work()
|
|
general protection fault in sctp_inet_listen
sctp
|
2 |
|
|
|
1 |
580d |
566d
|
28/29 |
520d |
8beee4d8dee7
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
|
|
BUG: sleeping function called from invalid context in ntfs_d_hash
ntfs3
|
5 |
C |
done |
|
740 |
555d |
592d
|
28/29 |
520d |
589996bf8c45
ntfs3: Change to non-blocking allocation in ntfs_d_hash
|
|
KMSAN: uninit-value in udf_get_fileshortad
udf
|
7 |
C |
|
|
3 |
564d |
576d
|
28/29 |
520d |
264db9d666ad
udf: fix uninit-value use in udf_get_fileshortad
|
|
INFO: trying to register non-static key in ntfs_file_release
ntfs3
|
-1 |
|
|
|
2 |
548d |
590d
|
28/29 |
520d |
031d6f608290
fs/ntfs3: Additional check in ntfs_file_release
|
|
KASAN: slab-use-after-free Read in advance_sched
net
|
19 |
C |
error |
|
15 |
563d |
850d
|
28/29 |
520d |
f504465970ae
net: sched: fix use-after-free in taprio_change()
|
|
WARNING in copy_huge_pmd
mm
|
-1 |
C |
done |
|
361 |
553d |
570d
|
28/29 |
520d |
47fa30118f02
mm/huge_memory: check pmd_special() only after pmd_present()
|
|
possible deadlock in ntfs_set_state (2)
ntfs3
|
4 |
C |
error |
|
943 |
552d |
793d
|
28/29 |
520d |
5b2db723455a
fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
|
|
KMSAN: uninit-value in slhc_remember
net
|
7 |
|
|
|
4 |
555d |
554d
|
28/29 |
520d |
7d3fce8cbe3a
slip: make slhc_remember() more robust against malicious packets
|
|
KASAN: slab-use-after-free Read in l2cap_connect (2)
bluetooth
|
19 |
C |
done |
|
8 |
572d |
661d
|
28/29 |
520d |
333b4fd11e89
Bluetooth: L2CAP: Fix uaf in l2cap_connect
|
|
KASAN: stack-out-of-bounds Read in profile_pc
kernel
|
17 |
C |
error |
done |
9302 |
656d |
1781d
|
28/29 |
532d |
093d9603b600
x86: stop playing stack games in profile_pc()
|
|
INFO: task hung in ext4_stop_mmpd
ext4
|
1 |
C |
done |
done |
483 |
573d |
645d
|
28/29 |
535d |
d3476f3dad4a
ext4: don't set SB_RDONLY after filesystem errors
|
|
WARNING in io_sq_offload_create
io-uring
|
-1 |
C |
|
|
284 |
569d |
573d
|
28/29 |
535d |
a09c17240bdf
io_uring/sqpoll: retain test for whether the CPU is valid
|
|
riscv/fixes test error: kernel panic: Kernel stack overflow
riscv
|
-1 |
|
|
|
11 |
560d |
578d
|
28/29 |
536d |
cfb10de18538
riscv: Fix kernel stack size when KASAN is enabled
|
|
general protection fault in ethnl_phy_doit
net
|
2 |
C |
done |
|
6 |
582d |
583d
|
28/29 |
538d |
fce1e9f86af1
net: ethtool: phy: Check the req_info.pdn field for GET commands
|
|
WARNING in __bch2_fsck_err (2)
fs
|
-1 |
C |
|
|
3 |
559d |
556d
|
28/29 |
539d |
5612daafb764
bcachefs: Fix fsck warnings from bkey validation
|
|
WARNING in fuse_request_end (2)
fuse
|
-1 |
|
|
|
677 |
569d |
565d
|
28/29 |
539d |
fcd2d9e1fdcd
fuse: clear FR_PENDING if abort is detected when sending request
|
|
general protection fault in rt6_disable_ip
net
|
2 |
|
|
|
1 |
581d |
581d
|
28/29 |
539d |
04ccecfa959d
UPSTREAM: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
|
|
WARNING in gid_table_release_one (2)
rdma
|
-1 |
|
|
|
1 |
595d |
591d
|
28/29 |
540d |
1403c8b14765
IB/core: Fix ib_cache_setup_one error flow cleanup
|
|
KASAN: use-after-free Read in ila_nf_input (2)
net
|
19 |
|
|
|
14 |
545d |
593d
|
28/29 |
541d |
031ae72825ce
ila: call nf_unregister_net_hooks() sooner
|
|
BUG: unable to handle kernel NULL pointer dereference in attr_make_nonresident
ntfs3
|
10 |
C |
error |
done |
110 |
633d |
715d
|
28/29 |
541d |
0f9579d9e033
fs/ntfs3: Add missing .dirty_folio in address_space_operations
|
|
UBSAN: array-index-out-of-bounds in dbNextAG (2)
jfs
|
15 |
C |
inconclusive |
|
53 |
574d |
644d
|
28/29 |
541d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
WARNING in kcov_remote_start (5)
wireless
|
-1 |
|
|
|
4243 |
541d |
641d
|
28/29 |
541d |
7d4df2dad312
kcov: properly check for softirq context
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
kernel BUG in __page_table_check_zero
usb
|
-1 |
C |
error |
done |
213 |
574d |
1061d
|
28/29 |
541d |
79a61cc3fc04
mm: avoid leaving partial pfn mappings around in error case
|
|
WARNING: still has locks held in f2fs_ioc_start_atomic_write
f2fs
|
4 |
|
|
|
1 |
612d |
608d
|
28/29 |
541d |
b2c160f4f3cf
f2fs: atomic: fix to forbid dio in atomic_file
|
|
WARNING: lock held when returning to user space in f2fs_ioc_start_atomic_write
f2fs
|
4 |
C |
done |
|
34 |
609d |
610d
|
28/29 |
541d |
b2c160f4f3cf
f2fs: atomic: fix to forbid dio in atomic_file
|
|
general protection fault in ovl_llseek
overlayfs
|
2 |
C |
|
|
5 |
567d |
567d
|
28/29 |
541d |
0c33037c825e
ovl: fix file leak in ovl_real_fdget_meta()
|
|
riscv/fixes test error: can't ssh into the instance
|
-1 |
|
|
|
48 |
590d |
608d
|
28/29 |
541d |
1ff95eb2bebd
riscv: Fix RISCV_ALTERNATIVE_EARLY
|
|
WARNING in pppol2tp_release
net
|
-1 |
|
|
|
3 |
616d |
619d
|
28/29 |
541d |
c1b2e36b8776
l2tp: flush workqueue before draining it
|
|
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put
netfilter
|
7 |
C |
|
|
136 |
567d |
580d
|
28/29 |
541d |
9c778fe48d20
UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
|
|
WARNING in remove_proc_entry (6)
can
|
-1 |
C |
done |
|
377 |
560d |
589d
|
28/29 |
541d |
94b0818fa635
can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
|
|
kernel BUG in btrfs_get_ordered_extents_for_logging
btrfs
|
-1 |
syz |
|
|
3 |
598d |
595d
|
28/29 |
541d |
cd9253c23aed
btrfs: fix race between direct IO write and fsync when using same fd
|
|
kernel BUG in clear_inode
btrfs
|
-1 |
C |
|
|
12 |
543d |
685d
|
28/29 |
541d |
88b1afbf0f6b
vfs: fix race between evice_inodes() and find_inode()&iput()
|
|
general protection fault in nilfs_btree_insert (2)
nilfs
|
2 |
C |
inconclusive |
|
1 |
582d |
592d
|
28/29 |
541d |
9403001ad65a
nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
|
|
general protection fault in bch2_fs_recovery
fs
|
8 |
C |
|
|
10 |
564d |
583d
|
28/29 |
541d |
025c55a4c7f1
bcachefs: return err ptr instead of null in read sb clean
|
|
memory leak in clear_state_bit
btrfs
|
3 |
C |
|
|
3 |
863d |
874d
|
28/29 |
541d |
c346c629765a
btrfs: qgroup: don't use extent changeset when not needed
|
|
WARNING in rcu_sync_dtor
f2fs
|
-1 |
C |
done |
|
749 |
565d |
629d
|
28/29 |
541d |
930c6ab93492
f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
|
|
KASAN: null-ptr-deref Write in jbd2_journal_update_sb_log_tail
ext4
|
12 |
C |
|
|
4 |
568d |
605d
|
28/29 |
541d |
5784d9fcfd43
ocfs2: fix null-ptr-deref when journal load failed.
|
|
KASAN: slab-use-after-free Read in __uprobe_unregister
perf
trace
|
19 |
C |
|
|
9 |
576d |
614d
|
28/29 |
541d |
5fe6e308abae
bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
|
|
KASAN: use-after-free Read in ext4_search_dir (2)
ext4
|
19 |
C |
|
|
5 |
582d |
605d
|
28/29 |
541d |
c6b72f5d82b1
ext4: avoid OOB when system.data xattr changes underneath the filesystem
|
|
WARNING: refcount bug in ethnl_phy_done
net
|
13 |
C |
done |
|
4 |
583d |
582d
|
28/29 |
541d |
1ad84a151af7
net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP
|
|
WARNING: bad unlock balance in ocfs2_read_blocks
ocfs2
|
4 |
C |
|
|
240 |
574d |
606d
|
28/29 |
541d |
c03a82b4a0c9
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
|
|
kernel BUG in f2fs_evict_inode (3)
f2fs
|
-1 |
C |
error |
|
33 |
559d |
606d
|
28/29 |
541d |
884ee6dc85b9
f2fs: get rid of online repaire on corrupted directory
|
|
kernel BUG in trace_dma_unmap_sg
iommu
|
-1 |
C |
|
|
5 |
565d |
568d
|
28/29 |
541d |
bfc4a245a794
dma-mapping: fix DMA API tracing for chained scatterlists
|
|
INFO: rcu detected stall in schedule_timeout (6)
usb
|
1 |
C |
done |
|
40 |
543d |
700d
|
28/29 |
541d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
general protection fault in is_page_fault_stale
kvm-x86
|
2 |
|
|
|
3 |
609d |
633d
|
28/29 |
541d |
28cec7f08b8b
KVM: x86/mmu: Check that root is valid/loaded when pre-faulting SPTEs
|
|
general protection fault in __smc_diag_dump (2)
smc
|
2 |
|
|
|
14 |
542d |
595d
|
28/29 |
541d |
98d4435efcbf
net/smc: prevent NULL pointer dereference in txopt_get
|
|
divide error in ext4_mb_regular_allocator
ext4
|
2 |
C |
done |
|
2 |
601d |
611d
|
28/29 |
541d |
ee85e0938aa8
ext4: check stripe size compatibility on remount as well
|
|
linux-next test error: WARNING in rcu_core
net
virt
|
-1 |
|
|
|
16 |
615d |
622d
|
28/29 |
541d |
b8c8ba73c68b
slub: Introduce CONFIG_SLUB_RCU_DEBUG
|
|
WARNING in __rate_control_send_low (2)
wireless
|
-1 |
C |
done |
|
3233 |
541d |
693d
|
28/29 |
541d |
e7a7ef9a0742
wifi: mac80211: don't use rate mask for offchannel TX either
|
|
WARNING in l2tp_udp_encap_destroy
net
|
-1 |
|
|
|
3 |
615d |
614d
|
28/29 |
541d |
c1b2e36b8776
l2tp: flush workqueue before draining it
|
|
kernel BUG in __sock_sendmsg
net
|
-1 |
C |
|
|
111 |
590d |
607d
|
28/29 |
541d |
fe1910f9337b
tcp_bpf: fix return value of tcp_bpf_sendmsg()
|
|
kernel BUG in vfs_get_tree
fs
|
-1 |
C |
done |
|
318 |
559d |
603d
|
28/29 |
541d |
b29c30ab48e0
bcachefs: Fix incorrect IS_ERR_OR_NULL usage
|
|
general protection fault in ata_msense_control
ide
|
2 |
C |
|
|
13 |
566d |
573d
|
28/29 |
541d |
03a9cfc1314b
ata: libata-scsi: Fix ata_msense_control_spgt2()
|
|
KASAN: slab-use-after-free Read in __timer_delete_sync
mptcp
|
19 |
syz |
error |
|
1 |
593d |
590d
|
28/29 |
541d |
b4cd80b03389
mptcp: pm: Fix uaf in __timer_delete_sync
|
|
UBSAN: array-index-out-of-bounds in dbSplit
jfs
|
15 |
C |
inconclusive |
|
31 |
581d |
629d
|
28/29 |
541d |
d64ff0d23067
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: shift-out-of-bounds in dbFindBits
jfs
|
-1 |
C |
error |
|
53 |
544d |
647d
|
28/29 |
541d |
b0b2fc815e51
jfs: UBSAN: shift-out-of-bounds in dbFindBits
|
|
KMSAN: uninit-value in lzo1x_1_do_compress (3)
mm
|
7 |
|
|
|
1 |
599d |
595d
|
28/29 |
541d |
2b59ffad47db
jfs: Fix uninit-value access of new_ea in ea_buffer
|
|
KASAN: use-after-free Read in rtw_load_firmware_cb
usb
wireless
|
19 |
C |
|
|
848 |
567d |
630d
|
28/29 |
541d |
0e735a4c6137
wifi: rtw88: always wait for both firmware loading attempts
|
|
INFO: rcu detected stall in aoecmd_cfg (2)
usb
block
|
1 |
C |
done |
|
7 |
595d |
708d
|
28/29 |
541d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
KCSAN: data-race in next_expiry_recalc / update_process_times (2)
kernel
|
6 |
|
|
|
2 |
596d |
611d
|
28/29 |
541d |
79f8b28e85f8
timers: Annotate possible non critical data race of next_expiry
|
|
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined
fs
|
7 |
C |
|
|
7 |
564d |
584d
|
28/29 |
541d |
0696a18a8cc3
bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
|
|
WARNING in mptcp_pm_nl_set_flags
mptcp
|
-1 |
syz |
done |
|
3 |
598d |
598d
|
28/29 |
541d |
9366922adc6a
mptcp: pm: fix ID 0 endp usage after multiple re-creations
|
|
INFO: rcu detected stall in do_vmi_munmap (2)
mm
|
1 |
|
|
|
40 |
588d |
605d
|
28/29 |
541d |
f806de88d8f7
maple_tree: remove rcu_read_lock() from mt_validate()
|
|
INFO: task hung in z_erofs_runqueue
erofs
|
1 |
C |
|
|
379 |
559d |
628d
|
28/29 |
541d |
9e2f9d34dd12
erofs: handle overlapped pclusters out of crafted images properly
|
|
WARNING in handle_std_frame
net
|
-1 |
|
|
|
3 |
587d |
590d
|
28/29 |
541d |
430d67bdcb04
net: hsr: Use the seqnr lock for frames received via interlink port.
|
|
KASAN: slab-use-after-free Read in hugetlb_fault (2)
mm
|
19 |
|
|
|
2 |
581d |
585d
|
28/29 |
541d |
98b74bb4d7e9
mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway
2a058ab3286d
mm: change vmf_anon_prepare() to __vmf_anon_prepare()
|
|
possible deadlock in ocfs2_get_system_file_inode
ocfs2
|
4 |
C |
done |
|
14785 |
559d |
609d
|
28/29 |
541d |
7bf1823e010e
ocfs2: fix deadlock in ocfs2_get_system_file_inode
|
|
WARNING: ODEBUG bug in ocfs2_local_read_info
ocfs2
|
-1 |
C |
inconclusive |
|
7 |
559d |
591d
|
28/29 |
541d |
35fccce29feb
ocfs2: cancel dqi_sync_work before freeing oinfo
|
|
UBSAN: array-index-out-of-bounds in cake_enqueue
net
|
15 |
|
|
|
1 |
606d |
605d
|
28/29 |
541d |
546ea84d07e3
sched: sch_cake: fix bulk flow accounting logic for host fairness
|
|
KASAN: slab-use-after-free Read in dbFreeBits
jfs
|
19 |
C |
done |
|
6 |
578d |
608d
|
28/29 |
541d |
d6c1b3599b2f
jfs: Fix uaf in dbFreeBits
|
|
KMSAN: uninit-value in skb_trim (2)
wireless
|
7 |
|
|
|
5 |
584d |
614d
|
28/29 |
541d |
94745807f3eb
wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
|
|
KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter
cgroups
mm
|
6 |
|
|
|
59 |
573d |
594d
|
28/29 |
541d |
ec0db74b4b1f
mm: restart if multiple traversals raced
|
|
WARNING in __dev_queue_xmit (4)
net
|
-1 |
C |
|
|
387 |
543d |
589d
|
28/29 |
541d |
9d301de12da6
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
|
|
BUG: corrupted list in gfs2_fill_super
gfs2
|
22 |
C |
done |
|
8527 |
568d |
683d
|
28/29 |
541d |
6cb9df81a2c4
gfs2: fix double destroy_workqueue error
|
|
WARNING in hsr_fill_frame_info
net
|
-1 |
C |
error |
|
80 |
566d |
595d
|
28/29 |
541d |
430d67bdcb04
net: hsr: Use the seqnr lock for frames received via interlink port.
|
|
KMSAN: uninit-value in ocfs2_get_block
ocfs2
|
7 |
C |
|
|
5 |
572d |
569d
|
28/29 |
541d |
2af148ef8549
ocfs2: fix uninit-value in ocfs2_get_block()
|
|
memory leak in corrupted (2)
mm
exfat
|
3 |
syz |
|
|
432 |
579d |
745d
|
28/29 |
541d |
c290fe508eee
exfat: resolve memory leak from exfat_create_upcase_table()
|
|
general protection fault in hook_inode_free_security
lsm
|
2 |
|
|
|
12 |
641d |
708d
|
28/29 |
541d |
63dff3e48871
lsm: add the inode_free_security_rcu() LSM implementation hook
|
|
KMSAN: kernel-infoleak in raw_ioctl (2)
usb
|
9 |
C |
|
|
18201 |
566d |
632d
|
28/29 |
541d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
WARNING in vmx_handle_exit
kvm-x86
|
-1 |
C |
error |
|
5 |
571d |
744d
|
28/29 |
541d |
3f6821aa147b
KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
|
|
WARNING in fscrypt_fname_siphash
ext4
fscrypt
|
-1 |
C |
unreliable |
|
32 |
593d |
687d
|
28/29 |
541d |
985b67cd8639
ext4: filesystems without casefold feature cannot be mounted with siphash
|
|
kernel BUG in new_curseg
f2fs
|
-1 |
C |
|
|
8 |
572d |
584d
|
28/29 |
541d |
65a6ce4726c2
f2fs: fix to don't panic system for no free segment fault injection
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3)
fbdev
btrfs
|
10 |
C |
|
|
4 |
570d |
583d
|
28/29 |
541d |
5b97eebcce1b
fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
|
|
general protection fault in hsr_proxy_announce
net
|
2 |
|
|
|
2 |
589d |
587d
|
28/29 |
541d |
a7789fd4caaf
net: hsr: prevent NULL pointer dereference in hsr_proxy_announce()
|
|
general protection fault in smack_log_callback
audit
|
10 |
C |
done |
|
12 |
569d |
574d
|
28/29 |
541d |
8a23c9e1ba46
selinux,smack: properly reference the LSM blob in security_watch_key()
|
|
WARNING in sock_map_close (2)
bpf
net
|
-1 |
C |
done |
|
3 |
602d |
602d
|
28/29 |
541d |
1461f5a3d810
l2tp: avoid overriding sk->sk_user_data
|
|
WARNING in bond_xdp_get_xmit_slave (2)
net
|
-1 |
|
|
|
124 |
575d |
675d
|
28/29 |
541d |
0cbfd45fbcf0
bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
|
|
KCSAN: data-race in inode_doinit_with_dentry / selinux_file_open
selinux
|
6 |
|
|
|
1 |
601d |
601d
|
28/29 |
541d |
2571bb9d553b
selinux: annotate false positive data race to avoid KCSAN warnings
|
|
KASAN: null-ptr-deref Write in f2fs_stop_gc_thread
f2fs
|
22 |
C |
done |
|
5 |
584d |
631d
|
28/29 |
541d |
c7f114d864ac
f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
|
|
KMSAN: kernel-usb-infoleak in usbtmc_write
usb
|
9 |
C |
|
|
167 |
566d |
630d
|
28/29 |
541d |
625fa77151f0
USB: usbtmc: prevent kernel-usb-infoleak
|
|
INFO: task hung in uevent_show
usb
|
1 |
C |
done |
|
9704 |
612d |
673d
|
28/29 |
541d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol
fs
|
4 |
C |
|
|
21 |
564d |
576d
|
28/29 |
541d |
39c3aad43f6f
bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
|
|
general protection fault in __copy_super
fs
|
2 |
C |
done |
|
5 |
570d |
572d
|
28/29 |
541d |
40d40c6bea19
bcachefs: assign return error when iterating through layout
|
|
KASAN: slab-use-after-free Read in unix_stream_read_actor (2)
net
|
19 |
C |
inconclusive |
|
4 |
594d |
589d
|
28/29 |
541d |
5aa57d9f2d53
af_unix: Don't return OOB skb in manage_oob().
|
|
KASAN: slab-use-after-free Read in lockref_get_not_dead (2)
fs
|
19 |
syz |
error |
|
1 |
591d |
587d
|
28/29 |
541d |
4e32c25b58b9
libfs: fix get_stashed_dentry()
|
|
INFO: rcu detected stall in sys_io_uring_enter (2)
io-uring
|
1 |
|
|
|
37 |
553d |
573d
|
28/29 |
541d |
eac2ca2d682f
io_uring: check if we need to reschedule during overflow flush
|
|
UBSAN: shift-out-of-bounds in ocfs2_fill_super
ocfs2
|
-1 |
C |
|
|
199 |
542d |
609d
|
28/29 |
541d |
7f86b2942791
ocfs2: fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume()
|
|
WARNING: lock held when returning to user space in ethnl_act_cable_test
net
|
4 |
C |
done |
|
43 |
597d |
598d
|
28/29 |
541d |
3d6a0c4f4552
net: fix unreleased lock in cable test
|
|
BUG: unable to handle kernel paging request in bpf_prog_ADDR (3)
bpf
net
|
8 |
C |
done |
|
6 |
642d |
642d
|
28/29 |
541d |
92de36080c93
bpf: Fail verification for sign-extension of packet data/data_end/data_meta
|
|
WARNING in iopt_map_pages
iommu
|
-1 |
C |
error |
|
3 |
595d |
676d
|
28/29 |
541d |
8f6887349b2f
iommufd: Protect against overflow of ALIGN() during iova allocation
|
|
KASAN: slab-use-after-free Read in btrfs_cleanup_defrag_inodes
btrfs
|
19 |
C |
|
|
266 |
571d |
577d
|
28/29 |
541d |
7f1b63f981b8
btrfs: fix use-after-free on rbtree that tracks inodes for auto defrag
|
|
WARNING in ethnl_req_get_phydev
net
|
-1 |
C |
done |
|
73 |
597d |
598d
|
28/29 |
541d |
cff69f72d333
ethtool: pse-pd: move pse validation into set
|
|
linux-next test error: general protection fault in fuse_get_req
fuse
|
-1 |
|
|
|
17 |
570d |
581d
|
28/29 |
541d |
3988a60d3aaa
fs/fuse: fix null-ptr-deref when checking SB_I_NOIDMAP flag
|
|
possible deadlock in hfsplus_file_extend
hfs
|
4 |
C |
error |
done |
31659 |
549d |
1237d
|
28/29 |
542d |
be4edd1642ee
hfsplus: fix to avoid false alarm of circular locking
|
|
WARNING: ODEBUG bug in ext4_fill_super (4)
ext4
|
-1 |
C |
|
|
6 |
572d |
665d
|
28/29 |
542d |
0ce160c5bdb6
ext4: fix timer use-after-free on failed mount
|
|
WARNING in ext4_fileattr_get
ext4
|
-1 |
|
|
|
120 |
653d |
667d
|
28/29 |
542d |
be27cd64461c
ext4: use memtostr_pad() for s_volume_name
|
|
WARNING in input_mt_init_slots
input
|
-1 |
C |
inconclusive |
|
14301 |
612d |
1922d
|
28/29 |
542d |
99d3bf5f7377
Input: MT - limit max slots
206f533a0a7c
Input: uinput - reject requests with unreasonable number of slots
|
|
INFO: rcu detected stall in neigh_timer_handler (8)
net
|
1 |
C |
done |
done |
72 |
613d |
673d
|
28/29 |
542d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
INFO: rcu detected stall in __mod_timer (5)
usb
|
1 |
C |
error |
done |
10 |
619d |
683d
|
28/29 |
542d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
KASAN: slab-use-after-free Read in ip6_send_skb
netfilter
|
19 |
|
|
|
1 |
607d |
607d
|
28/29 |
554d |
faa389b2fbaa
ipv6: prevent UAF in ip6_send_skb()
|
|
KMSAN: uninit-value in gtp_dev_xmit
net
|
7 |
|
|
|
3 |
625d |
625d
|
28/29 |
554d |
3a3be7ff9224
gtp: pull network headers in gtp_dev_xmit()
|
|
possible deadlock in touch_wq_lockdep_map
usb
|
4 |
C |
|
|
1208 |
565d |
761d
|
28/29 |
560d |
ccbde4b128ef
char: xillybus: Don't destroy workqueue from work item running on it
|
|
kernel BUG in bch2_lru_change (2)
fs
|
-1 |
C |
|
|
2 |
609d |
608d
|
28/29 |
560d |
9482f3b05332
bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
|
|
WARNING in bch2_fs_journal_stop
fs
|
-1 |
C |
done |
|
1463 |
607d |
638d
|
28/29 |
560d |
7f2de6947f92
bcachefs: Fix warning in bch2_fs_journal_stop()
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u33:NUM[NUM]
bluetooth
|
-1 |
C |
|
|
13 |
616d |
629d
|
28/29 |
560d |
c531e63871c0
Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
|
|
general protection fault in reuseport_add_sock (3)
net
|
2 |
C |
done |
|
3 |
627d |
626d
|
28/29 |
560d |
9ab0faa7f9ff
sctp: Fix null-ptr-deref in reuseport_add_sock().
|
|
KMSAN: uninit-value in line6_midibuf_read
usb
sound
|
7 |
C |
|
|
357 |
569d |
632d
|
28/29 |
560d |
15b7a03205b3
ALSA: line6: Fix racy access to midibuf
|
|
kernel BUG in bch2_journal_replay
fs
|
-1 |
C |
done |
|
3 |
603d |
675d
|
28/29 |
560d |
cab18be6957b
bcachefs: Fix replay_now_at() assert
|
|
WARNING in bch2_write_super
fs
|
-1 |
|
|
|
3 |
607d |
604d
|
28/29 |
560d |
6575b8c9877c
bcachefs: Fix locking in bch2_ioc_setlabel()
|
|
BUG: stack guard page was hit in vsock_bpf_recvmsg
net
virt
|
-1 |
C |
done |
|
6 |
615d |
615d
|
28/29 |
560d |
69139d2919dd
vsock: fix recursive ->recvmsg calls
|
|
general protection fault in z_erofs_gbuf_growsize
erofs
|
2 |
|
|
|
1 |
609d |
604d
|
28/29 |
560d |
0005e01e1e87
erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails
|
|
KMSAN: uninit-value in bch2_alloc_v4_validate
fs
|
7 |
C |
|
|
5 |
604d |
602d
|
28/29 |
560d |
8ed823b19214
bcachefs: Fix compat issue with old alloc_v4 keys
|
|
KMSAN: uninit-value in pick_link
squashfs
|
7 |
C |
|
|
9 |
620d |
624d
|
28/29 |
560d |
810ee43d9cd2
Squashfs: sanity check symbolic link size
|
|
KMSAN: uninit-value in nf_flow_offload_inet_hook
netfilter
|
7 |
|
|
|
4 |
605d |
615d
|
28/29 |
560d |
6ea14ccb60c8
netfilter: flowtable: validate vlan header
|
|
KASAN: slab-use-after-free Read in br_multicast_port_group_expired
bridge
|
19 |
|
|
|
1 |
659d |
658d
|
28/29 |
560d |
92c4ee25208d
net: bridge: mcast: wait for previous gc cycles when removing port
|
|
WARNING in kvm_recalculate_apic_map
kvm-x86
|
-1 |
C |
done |
|
23 |
611d |
647d
|
28/29 |
560d |
4b7c3f6d04bd
KVM: x86: Make x2APIC ID 100% readonly
|
|
KASAN: slab-use-after-free Read in percpu_ref_put
block
|
19 |
|
|
|
18 |
561d |
632d
|
28/29 |
560d |
0b50b7313ef2
bcachefs: Fix refcounting in discard path
|
|
KCSAN: data-race in __flush_work / __flush_work (2)
kernel
|
6 |
|
|
|
6 |
606d |
619d
|
28/29 |
560d |
8bc35475ef1a
workqueue: Fix spruious data race in __flush_work()
|
|
BUG: unable to handle kernel paging request in net_generic
net
|
8 |
|
|
|
1 |
635d |
630d
|
28/29 |
560d |
86a41ea9fd79
l2tp: fix lockdep splat
|
|
WARNING: refcount bug in inet_twsk_kill
net
|
13 |
|
|
|
5 |
614d |
614d
|
28/29 |
560d |
565d121b6998
tcp: prevent concurrent execution of tcp_sk_exit_batch
|
|
WARNING in try_queue_bulk_in/usb_submit_urb
kernel
|
-1 |
|
|
|
1 |
616d |
612d
|
28/29 |
560d |
2374bf7558de
char: xillybus: Check USB endpoints when probing device
|
|
WARNING in __bch2_fsck_err
fs
|
-1 |
C |
|
|
200 |
561d |
608d
|
28/29 |
560d |
075cabf324c3
bcachefs: Fix forgetting to pass trans to fsck_err()
|
|
possible deadlock in __kernfs_remove
kernfs
|
4 |
C |
|
|
438 |
618d |
661d
|
28/29 |
560d |
15fffc6a5624
driver core: Fix uevent_show() vs driver detach race
|
|
KASAN: slab-use-after-free Read in kcm_release
net
|
19 |
C |
|
|
2 |
669d |
709d
|
28/29 |
560d |
807067bf014d
kcm: Serialise kcm_sendmsg() for the same socket.
|
|
KCSAN: data-race in io_sq_thread / io_sq_thread_park (9)
io-uring
|
6 |
|
|
|
1 |
616d |
611d
|
28/29 |
560d |
e4956dc7a84d
io_uring/sqpoll: annotate debug task == current with data_race()
|
|
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init
fs
|
21 |
C |
|
|
2 |
606d |
606d
|
28/29 |
560d |
bdbdd4759f08
bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
|
|
kernel BUG in binder_inc_ref_for_node
kernel
|
-1 |
C |
error |
|
16721 |
613d |
642d
|
28/29 |
560d |
11512c197d38
binder: fix descriptor lookup for context manager
|
|
WARNING in tcp_sk_exit_batch
net
|
-1 |
|
|
|
3 |
610d |
648d
|
28/29 |
560d |
565d121b6998
tcp: prevent concurrent execution of tcp_sk_exit_batch
|
|
WARNING in skb_warn_bad_offload (5)
net
|
-1 |
C |
done |
|
18 |
606d |
640d
|
28/29 |
560d |
30b03f2a0592
udp: Fall back to software USO if IPv6 extension headers are present
|
|
KASAN: slab-out-of-bounds Read in cougar_report_fixup
input
usb
|
17 |
C |
|
|
31 |
591d |
625d
|
28/29 |
560d |
a6e9c391d45b
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
|
|
WARNING: bad unlock balance in btrfs_direct_write
btrfs
|
4 |
C |
done |
|
235 |
617d |
622d
|
28/29 |
560d |
e0391e92f9ab
btrfs: fix double inode unlock for direct IO sync writes
|
|
WARNING in discard_new_inode
fs
|
-1 |
C |
|
|
3 |
608d |
608d
|
28/29 |
560d |
99c87fe0f584
bcachefs: fix incorrect i_state usage
|
|
KASAN: slab-use-after-free Read in htab_map_alloc (2)
bpf
|
19 |
|
|
|
224 |
706d |
712d
|
27/29 |
581d |
86735b57c905
net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
|
|
kernel BUG in bch2_sort_keys
fs
|
-1 |
C |
error |
|
3 |
687d |
711d
|
27/29 |
587d |
5dfd3746b6c4
bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
|
|
WARNING in __virt_to_phys (5)
fs
|
-1 |
|
|
|
4 |
611d |
607d
|
27/29 |
595d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
possible deadlock in bch2_btree_roots_to_journal_entries
exfat
|
4 |
C |
done |
|
29 |
648d |
682d
|
27/29 |
595d |
1841027c7de4
bcachefs: bch2_gc_btree() should not use btree_root_lock
|
|
possible deadlock in bch2_gc_mark_key
fs
|
4 |
C |
done |
|
86 |
612d |
689d
|
27/29 |
595d |
1841027c7de4
bcachefs: bch2_gc_btree() should not use btree_root_lock
|
|
possible deadlock in __mmap_lock_do_trace_start_locking
mm
|
4 |
C |
done |
done |
30 |
627d |
721d
|
27/29 |
596d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
BUG: unable to handle kernel paging request in list_lru_add
mm
|
10 |
C |
done |
done |
11367 |
643d |
955d
|
27/29 |
596d |
aacd897d4d75
Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT"
|
|
WARNING in __replicas_deltas_realloc
fs
|
-1 |
C |
|
|
9 |
615d |
638d
|
27/29 |
597d |
1d16c605cc55
bcachefs: Disk space accounting rewrite
|
|
kernel BUG in bch2_bucket_alloc_freelist
fs
|
-1 |
|
|
|
1 |
666d |
662d
|
27/29 |
597d |
44ec5990357b
bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
|
|
kernel BUG in bch2_fs_journal_stop
fs
|
-1 |
C |
done |
|
4370 |
611d |
703d
|
27/29 |
597d |
600b8be5e747
bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
|
|
kernel BUG in __replicas_entry_idx
fs
|
-1 |
C |
done |
unreliable |
3 |
693d |
696d
|
27/29 |
597d |
8bb8d683a401
bcachefs: Delete journal-buf-sharded old style accounting
|
|
WARNING in bch2_fs_usage_read_one
f2fs
|
-1 |
C |
done |
|
18 |
709d |
709d
|
27/29 |
597d |
8bb8d683a401
bcachefs: Delete journal-buf-sharded old style accounting
|
|
kernel BUG in bch2_fs_release (2)
fs
|
-1 |
|
|
|
1 |
661d |
657d
|
27/29 |
598d |
759b2e800f16
bcachefs: Switch online_reserved shutdown assert to WARN()
|
|
WARNING: refcount bug in get_taint
net
|
13 |
|
|
|
2 |
598d |
624d
|
27/29 |
598d |
2fe5273f149c
net/smc: prevent UAF in inet_create()
|
|
WARNING: refcount bug in sk_common_release
net
|
13 |
C |
|
|
9 |
623d |
638d
|
27/29 |
598d |
2fe5273f149c
net/smc: prevent UAF in inet_create()
|
|
WARNING: refcount bug in inet_create
net
|
13 |
C |
done |
|
10 |
625d |
652d
|
27/29 |
598d |
2fe5273f149c
net/smc: prevent UAF in inet_create()
|
|
kernel panic: not locked: inodes NUM:NUM:NUM cached
fs
|
2 |
C |
|
|
2 |
681d |
692d
|
27/29 |
598d |
385f0c05d670
bcachefs: kill key cache arg to bch2_assert_pos_locked()
|
|
BUG: MAX_LOCK_DEPTH too low! (4)
fs
|
-1 |
C |
error |
|
1364 |
612d |
708d
|
27/29 |
599d |
375476c41405
bcachefs: Add lockdep support for btree node locks
|
|
WARNING in bch2_fs_ioctl
fs
|
-1 |
C |
done |
|
36 |
612d |
674d
|
27/29 |
602d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
KASAN: global-out-of-bounds Read in srcu_gp_start_if_needed
fs
|
17 |
|
|
|
1 |
694d |
689d
|
27/29 |
602d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev
fs
|
2 |
C |
done |
|
21 |
692d |
702d
|
27/29 |
602d |
9667214b30ef
bcachefs: Fix ref in trans_mark_dev_sbs() error path
|
|
KASAN: wild-memory-access Read in __timer_delete_sync
bcachefs
|
19 |
|
|
|
5 |
622d |
689d
|
27/29 |
602d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
kernel BUG in btrfs_folio_end_all_writers
btrfs
|
-1 |
C |
done |
|
102 |
621d |
633d
|
27/29 |
602d |
478574370bef
btrfs: make cow_file_range_inline() honor locked_page on error
|
|
KMSAN: uninit-value in profile_hits (3)
kernel
|
19 |
C |
|
|
1529 |
628d |
842d
|
27/29 |
602d |
7c51f7bbf057
profiling: remove prof_cpu_mask
|
|
KASAN: stack-out-of-bounds Read in xdp_do_check_flushed
bpf
net
|
17 |
C |
done |
|
127 |
622d |
643d
|
27/29 |
602d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
KMSAN: uninit-value in io_req_task_work_add_remote
io-uring
|
7 |
C |
|
|
10 |
630d |
631d
|
27/29 |
602d |
0db4618e8fab
io_uring/msg_ring: fix uninitialized use of target_req->flags
|
|
general protection fault in __dev_flush
net
bpf
|
19 |
C |
|
|
35 |
623d |
636d
|
27/29 |
602d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
KMSAN: uninit-value in cfg80211_inform_bss_frame_data
wireless
|
7 |
|
|
|
6 |
623d |
631d
|
27/29 |
602d |
6873cc441607
wifi: cfg80211: correct S1G beacon length calculation
|
|
KMSAN: uninit-value in tcf_ct_flow_table_get
net
|
7 |
C |
|
|
603 |
623d |
630d
|
27/29 |
602d |
2191a54f6322
sched: act_ct: take care of padding in struct zones_ht_key
|
|
general protection fault in bq_flush_to_queue
bpf
net
|
17 |
|
|
|
22 |
623d |
632d
|
27/29 |
602d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
KASAN: slab-use-after-free Read in bq_xmit_all
bpf
net
|
19 |
C |
done |
|
29 |
623d |
636d
|
27/29 |
602d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
kernel BUG in nilfs_btnode_create_block (2)
nilfs
|
-1 |
|
|
|
1 |
674d |
670d
|
27/29 |
602d |
4811f7af6090
nilfs2: handle inconsistent state in nilfs_btnode_create_block()
|
|
general protection fault in __xsk_map_flush
net
bpf
|
19 |
C |
done |
|
26 |
623d |
640d
|
27/29 |
602d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
general protection fault in __cpu_map_flush
bpf
net
|
10 |
C |
inconclusive |
|
25 |
623d |
637d
|
27/29 |
602d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
kernel BUG in ext4_write_inline_data
ext4
|
-1 |
C |
error |
|
36 |
641d |
1127d
|
27/29 |
603d |
5c099c4fdc43
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
|
|
kernel BUG in f2fs_vm_page_mkwrite
f2fs
|
-1 |
C |
error |
done |
12 |
652d |
679d
|
27/29 |
603d |
a8eb3de28e7a
f2fs: fix return value of f2fs_convert_inline_inode()
|
|
possible deadlock in __mmap_lock_do_trace_released
mm
|
4 |
C |
done |
done |
5 |
636d |
653d
|
27/29 |
605d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
WARNING in __hci_cmd_sync_sk
bluetooth
|
-1 |
syz |
|
|
36 |
631d |
646d
|
27/29 |
607d |
f1a8f402f13f
Bluetooth: L2CAP: Fix deadlock
|
|
WARNING in __btrfs_free_extent (2)
btrfs
|
-1 |
C |
done |
|
118 |
611d |
662d
|
27/29 |
608d |
a776bf5f3c23
btrfs: slightly loosen the requirement for qgroup removal
|
|
divide error in tcp_rcv_space_adjust (3)
net
|
2 |
C |
done |
|
3 |
715d |
716d
|
27/29 |
610d |
94062790aedb
UPSTREAM: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
|
|
KASAN: slab-use-after-free Read in lru_add_fn
nilfs
mm
|
19 |
C |
inconclusive |
|
68 |
659d |
707d
|
27/29 |
610d |
49ae997f8f0d
nilfs2: add missing check for inode numbers on directory entries
nilfs2: add missing check for inode numbers on directory entries
|
|
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (5)
btrfs
|
-1 |
C |
|
|
931 |
611d |
641d
|
27/29 |
610d |
375476c41405
bcachefs: Add lockdep support for btree node locks
|
|
upstream test error: KMSAN: uninit-value in receive_buf
net
virt
|
-1 |
|
|
|
351 |
636d |
691d
|
27/29 |
610d |
840b2d39a2dc
virtio_ring: fix KMSAN error for premapped mode
|
|
WARNING in __skb_flow_dissect (6)
net
|
-1 |
|
|
|
1 |
710d |
710d
|
27/29 |
610d |
b975d3ee5962
net: add and use skb_get_hash_net
|
|
BUG: corrupted list in __folio_undo_large_rmappable
mm
|
8 |
C |
error |
|
36 |
645d |
645d
|
27/29 |
610d |
1390a3334a48
mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio
|
|
KMSAN: uninit-value in zswap_store
mm
|
7 |
|
|
|
2 |
619d |
677d
|
27/29 |
610d |
65121eff3e4c
ext4: avoid writing unitialized memory to disk in EA inodes
|
|
KMSAN: uninit-value in hfs_revalidate_dentry
hfs
|
7 |
C |
|
|
11669 |
671d |
1238d
|
27/29 |
610d |
26a2ed107929
hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
|
|
general protection fault in xdp_do_generic_redirect
net
bpf
|
2 |
|
|
|
8 |
646d |
650d
|
27/29 |
610d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
possible deadlock in udf_setsize
udf
|
4 |
|
|
|
23 |
677d |
699d
|
27/29 |
610d |
8832fc1e5026
udf: Fix lock ordering in udf_evict_inode()
|
|
WARNING: suspicious RCU usage in bch2_bucket_ref_update
fs
|
4 |
C |
done |
|
5 |
647d |
646d
|
27/29 |
610d |
6f692b1672bd
bcachefs: Fix RCU splat
|
|
inconsistent lock state in valid_state (3)
mm
|
4 |
C |
error |
|
376 |
622d |
671d
|
27/29 |
610d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
kernel BUG in f2fs_evict_inode (2)
f2fs
|
-1 |
C |
error |
|
575 |
611d |
890d
|
27/29 |
610d |
192b8fb8d1c8
f2fs: fix to don't dirty inode for readonly filesystem
|
|
general protection fault in dev_map_redirect
bpf
net
|
2 |
C |
|
|
362 |
646d |
654d
|
27/29 |
610d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
stack segment fault in dev_hash_map_redirect
bpf
net
|
2 |
C |
done |
|
29 |
646d |
654d
|
27/29 |
610d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
general protection fault in dtInsertEntry
jfs
|
17 |
C |
inconclusive |
|
501 |
612d |
737d
|
27/29 |
610d |
ce6dede912f0
jfs: fix null ptr deref in dtInsertEntry
|
|
BUG: sleeping function called from invalid context in cgroup_rstat_flush
cgroups
|
5 |
|
|
|
6 |
646d |
658d
|
27/29 |
610d |
5a4d8944d6b1
cachestat: do not flush stats in recency check
|
|
WARNING in __fortify_report
ext4
|
-1 |
C |
|
|
251 |
660d |
693d
|
27/29 |
610d |
be27cd64461c
ext4: use memtostr_pad() for s_volume_name
|
|
UBSAN: array-index-out-of-bounds in diFree
jfs
|
15 |
C |
inconclusive |
|
226 |
612d |
723d
|
27/29 |
610d |
f73f969b2eb3
jfs: Fix array-index-out-of-bounds in diFree
|
|
WARNING in _ieee80211_change_chanctx
wireless
|
-1 |
|
|
|
7 |
640d |
717d
|
27/29 |
610d |
23daf1b4c91d
wifi: nl80211: disallow setting special AP channel widths
|
|
WARNING in __ip6_make_skb (2)
net
|
-1 |
C |
done |
|
104 |
675d |
689d
|
27/29 |
610d |
73451e9aaa24
net: validate SO_TXTIME clockid coming from userspace
|
|
general protection fault in xdp_do_redirect
net
bpf
|
2 |
|
|
|
15 |
647d |
654d
|
27/29 |
610d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
KMSAN: uninit-value in ext4_inlinedir_to_tree
ext4
|
7 |
C |
|
|
267 |
671d |
717d
|
27/29 |
610d |
8dc9c3da79c8
ext4: fix uninitialized variable in ext4_inlinedir_to_tree
|
|
KASAN: slab-use-after-free Read in l2tp_tunnel_del_work
net
|
19 |
C |
done |
|
99 |
646d |
660d
|
27/29 |
610d |
f8ad00f3fb2a
l2tp: fix possible UAF when cleaning up tunnels
|
|
kernel BUG in bch2_bucket_alloc_trans
fs
|
-1 |
|
|
|
18 |
636d |
666d
|
27/29 |
610d |
44ec5990357b
bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs
|
|
BUG: unable to handle kernel paging request in do_split
ext4
|
8 |
C |
inconclusive |
|
17 |
643d |
656d
|
27/29 |
610d |
50ea741def58
ext4: check dot and dotdot of dx_root before making dir indexed
f9ca51596bbf
ext4: make sure the first directory block is not a hole
|
|
WARNING in __cfg80211_connect_result (2)
wireless
|
-1 |
C |
error |
|
232 |
624d |
689d
|
27/29 |
610d |
b5d14b0c6716
wifi: virt_wifi: avoid reporting connection success with wrong SSID
|
|
KASAN: slab-use-after-free Read in sanity_check_extent_cache
f2fs
|
19 |
C |
done |
|
5 |
674d |
717d
|
27/29 |
610d |
d7409b05a64f
f2fs: fix to cover read extent cache access with lock
|
|
possible deadlock in try_to_wake_up (5)
mm
|
4 |
C |
|
|
88 |
613d |
686d
|
27/29 |
610d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
BUG: sleeping function called from invalid context in bch2_printbuf_make_room
fs
|
5 |
C |
done |
|
27 |
635d |
633d
|
27/29 |
610d |
737759fc098f
bcachefs: Fix printbuf usage while atomic
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG
jfs
|
-1 |
C |
unreliable |
|
5 |
649d |
664d
|
27/29 |
610d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
kernel BUG in __block_write_begin_int (2)
nilfs
|
-1 |
C |
inconclusive |
|
2 |
648d |
712d
|
27/29 |
610d |
a9e1ddc09ca5
nilfs2: fix kernel bug on rename operation of broken directory
|
|
possible deadlock in hfsplus_file_truncate
hfs
|
4 |
C |
error |
|
51400 |
611d |
1237d
|
27/29 |
610d |
be4edd1642ee
hfsplus: fix to avoid false alarm of circular locking
|
|
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2)
fs
|
-1 |
C |
|
|
117 |
611d |
675d
|
27/29 |
610d |
a0bd30e4ea9d
bcachefs: Fix shift greater than integer size
|
|
KMSAN: uninit-value in ppp_async_push (3)
ppp
|
7 |
C |
|
|
4 |
694d |
651d
|
27/29 |
610d |
f2aeb7306a89
ppp: reject claimed-as-LCP but actually malformed packets
|
|
KCSAN: data-race in __swap_writepage / scan_swap_map_slots (2)
mm
|
6 |
|
|
|
2 |
647d |
647d
|
27/29 |
610d |
7b7aca6d7c0f
mm: ignore data-race in __swap_writepage
|
|
memory leak in _r8712_init_xmit_priv (2)
usb
staging
|
3 |
C |
|
|
2 |
863d |
879d
|
27/29 |
610d |
9ed3e0a0e1b1
staging: rtl8712: remove unnecessary alignment of pxmitpriv->pxmitbuf
|
|
KMSAN: uninit-value in hfsplus_listxattr (2)
hfs
|
7 |
C |
|
|
6 |
713d |
737d
|
27/29 |
610d |
0570730c1630
hfsplus: fix uninit-value in copy_name
|
|
stack segment fault in bpf_xdp_redirect
bpf
net
|
2 |
C |
|
|
181 |
646d |
654d
|
27/29 |
610d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
general protection fault in __block_commit_write
ext4
|
8 |
C |
inconclusive |
|
7 |
654d |
801d
|
27/29 |
610d |
83f4414b8f84
ext4: sanity check for NULL pointer after ext4_force_shutdown
|
|
general protection fault in tomoyo_socket_bind_permission
io-uring
|
2 |
C |
|
|
4 |
642d |
642d
|
27/29 |
610d |
ad00e629145b
io_uring/net: check socket is valid in io_bind()/io_listen()
|
|
KMSAN: uninit-value in copy_name
hfs
|
7 |
C |
|
|
300 |
671d |
698d
|
27/29 |
610d |
0570730c1630
hfsplus: fix uninit-value in copy_name
|
|
kernel BUG in btrfs_free_tree_block
btrfs
|
-1 |
C |
error |
|
150 |
612d |
1298d
|
27/29 |
610d |
bb3868033a4c
btrfs: do not BUG_ON() when freeing tree block after error
|
|
KASAN: slab-use-after-free Read in add_ra_bio_pages (3)
btrfs
|
19 |
|
|
|
1 |
663d |
651d
|
27/29 |
610d |
8e7860543a94
btrfs: fix extent map use-after-free when adding pages to compressed bio
|
|
WARNING in __kvm_gpc_refresh (2)
kvm
|
-1 |
C |
error |
|
2 |
674d |
688d
|
27/29 |
610d |
ebbdf37ce9ab
KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
|
|
possible deadlock in exfat_evict_inode
exfat
|
4 |
|
|
|
2 |
661d |
698d
|
27/29 |
610d |
89fc548767a2
exfat: fix potential deadlock on __exfat_get_dentry_set
|
|
stack segment fault in cpu_map_redirect
bpf
net
|
2 |
C |
done |
|
11 |
647d |
646d
|
27/29 |
610d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
KASAN: slab-use-after-free Write in l2tp_session_delete
net
|
22 |
C |
done |
|
1286 |
641d |
660d
|
27/29 |
610d |
f8ad00f3fb2a
l2tp: fix possible UAF when cleaning up tunnels
|
|
KMSAN: uninit-value in vsock_assign_transport (2)
net
virt
|
7 |
C |
|
|
14 |
672d |
727d
|
27/29 |
610d |
1e1fdcbdde3b
vhost/vsock: always initialize seqpacket_allow
|
|
WARNING in __ip_make_skb
net
|
-1 |
C |
done |
|
54 |
675d |
689d
|
27/29 |
610d |
73451e9aaa24
net: validate SO_TXTIME clockid coming from userspace
|
|
WARNING in btusb_submit_intr_urb/usb_submit_urb
bluetooth
usb
|
-1 |
C |
error |
|
2 |
649d |
660d
|
27/29 |
610d |
a368ecde8a50
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
|
|
possible deadlock in attr_data_get_block
ntfs3
|
4 |
C |
error |
|
3111 |
611d |
1277d
|
27/29 |
610d |
d57431c6f511
fs/ntfs3: Do copy_to_user out of run_lock
|
|
possible deadlock in btrfs_commit_inode_delayed_inode
btrfs
|
4 |
|
|
|
8 |
665d |
679d
|
27/29 |
610d |
68a3ebd18bc8
btrfs: use delayed iput during extent map shrinking
|
|
general protection fault in __io_remove_buffers
io-uring
|
2 |
C |
done |
|
3 |
639d |
638d
|
27/29 |
610d |
bcc87d978b83
io_uring: fix error pbuf checking
|
|
UBSAN: shift-out-of-bounds in parse_audio_unit
sound
|
-1 |
C |
error |
|
3 |
642d |
641d
|
27/29 |
610d |
2f38cf730cae
ALSA: usb: Fix UBSAN warning in parse_audio_unit()
|
|
KMSAN: uninit-value in udf_update_tag
udf
|
7 |
C |
|
|
877 |
674d |
840d
|
27/29 |
610d |
27ab33854873
udf: Fix bogus checksum computation in udf_rename()
|
|
general protection fault in dequeue_hugetlb_folio_nodemask (2)
mm
|
2 |
C |
done |
|
14 |
668d |
674d
|
27/29 |
610d |
09a533622842
mm/hugetlb: guard dequeue_hugetlb_folio_nodemask against NUMA_NO_NODE uses
|
|
WARNING: lock held when returning to user space in ns_ioctl
fs
|
4 |
C |
done |
|
147 |
626d |
638d
|
27/29 |
610d |
280e36f0d5b9
nsfs: use cleanup guard
|
|
general protection fault in coalesce_fill_reply
net
|
2 |
C |
done |
|
27 |
654d |
659d
|
27/29 |
610d |
74d6529b78f7
net: ethtool: Fix the panic caused by dev being null when dumping coalesce
|
|
kernel BUG in submit_bh_wbc (2)
udf
|
-1 |
C |
done |
|
123 |
616d |
721d
|
27/29 |
610d |
a90d4471146d
udf: Avoid using corrupted block bitmap buffer
|
|
WARNING in io_cqring_event_overflow (2)
io-uring
|
-1 |
|
|
|
16 |
654d |
654d
|
27/29 |
610d |
3b7c16be30e3
io_uring/msg_ring: fix overflow posting
|
|
WARNING in bpf_lwt_seg6_adjust_srh
net
bpf
|
-1 |
C |
done |
|
30 |
646d |
660d
|
27/29 |
610d |
c13fda93aca1
bpf: Remove tst_run from lwt_seg6local_prog_ops.
|
|
kernel BUG in f2fs_write_inline_data
f2fs
|
-1 |
C |
inconclusive |
|
41 |
663d |
716d
|
27/29 |
610d |
a8eb3de28e7a
f2fs: fix return value of f2fs_convert_inline_inode()
fc01008c92f4
f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
|
|
BUG: sleeping function called from invalid context in vma_alloc_folio_noprof
mm
|
5 |
C |
done |
|
1 |
641d |
640d
|
27/29 |
610d |
280e36f0d5b9
nsfs: use cleanup guard
|
|
UBSAN: shift-out-of-bounds in try_to_shrink_lruvec
mm
|
-1 |
C |
done |
|
4 |
686d |
688d
|
27/29 |
610d |
462966dc7d70
mm: vmscan: reset sc->priority on retry
|
|
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed
fs
|
10 |
C |
|
|
23 |
631d |
635d
|
27/29 |
610d |
f60d38cb02d0
pidfs: when time ns disabled add check for ioctl
|
|
INFO: rcu detected stall in security_file_ioctl (8)
tomoyo
|
1 |
C |
error |
done |
8 |
654d |
693d
|
26/29 |
618d |
e63413418088
net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
|
|
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work
netfilter
|
19 |
C |
error |
|
147 |
646d |
654d
|
26/29 |
618d |
9f6958ba2e90
netfilter: nf_tables: unconditionally flush pending work before notifier
|
|
KASAN: slab-out-of-bounds Read in btrfs_qgroup_inherit
btrfs
|
17 |
C |
done |
|
2 |
681d |
677d
|
26/29 |
618d |
724d8042cef8
btrfs: always do the basic checks for btrfs_qgroup_inherit structure
|
|
general protection fault in l2cap_sock_recv_cb
bluetooth
|
8 |
C |
inconclusive |
|
8 |
652d |
678d
|
26/29 |
618d |
89e856e124f9
bluetooth/l2cap: sync sock recv cb and release
|
|
WARNING in filemap_unaccount_folio
nilfs
|
-1 |
C |
inconclusive |
|
13 |
660d |
695d
|
26/29 |
618d |
49ae997f8f0d
nilfs2: add missing check for inode numbers on directory entries
|
|
BUG: soft lockup in mld_ifc_work (2)
wireless
|
1 |
C |
|
|
2 |
705d |
717d
|
26/29 |
618d |
d1cba2ea8121
wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
|
|
possible deadlock in __flush_workqueue
bluetooth
|
4 |
|
|
|
1456 |
621d |
820d
|
26/29 |
618d |
0d151a103775
Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
|
|
WARNING in hci_conn_del
bluetooth
|
-1 |
C |
done |
|
10497 |
647d |
778d
|
26/29 |
618d |
015d79c96d62
Bluetooth: Ignore too large handle values in BIG
1cc18c2ab2e8
bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
|
|
WARNING in ieee80211_rx_list (2)
wireless
|
-1 |
|
|
|
4 |
657d |
659d
|
26/29 |
618d |
321028bc45f0
wifi: mac80211: disable softirqs for queued frame handling
|
|
WARNING in __mptcp_clean_una
mptcp
|
-1 |
C |
done |
done |
248 |
665d |
790d
|
26/29 |
622d |
fb7a0d334894
mptcp: ensure snd_nxt is properly initialized on connect
|
|
WARNING in implement
input
usb
|
-1 |
C |
error |
done |
960 |
674d |
2404d
|
26/29 |
624d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
|
|
INFO: rcu detected stall in __run_timer_base
usb
|
1 |
C |
done |
done |
10 |
664d |
733d
|
26/29 |
624d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
INFO: trying to register non-static key in btrfs_stop_all_workers
btrfs
|
-1 |
|
|
|
1 |
681d |
677d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
kernel BUG in btrfs_free_fs_info
btrfs
|
-1 |
|
|
|
2 |
684d |
687d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
KMSAN: uninit-value in btrfs_compress_heuristic
btrfs
|
7 |
|
|
|
4 |
687d |
687d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
general protection fault in btrfs_stop_all_workers (2)
btrfs
|
8 |
|
|
|
307 |
659d |
702d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
KMSAN: uninit-value in ZSTD_compressBlock_doubleFast
btrfs
|
7 |
|
|
|
2 |
683d |
678d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
BUG: spinlock bad magic in btrfs_stop_all_workers
btrfs
|
4 |
|
|
|
5 |
667d |
667d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
general protection fault in btrfs_simple_end_io
btrfs
|
2 |
|
|
|
18 |
666d |
691d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
KMSAN: uninit-value in deflate_fast
btrfs
|
7 |
|
|
|
3 |
674d |
678d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
general protection fault in put_pwq_unlocked
btrfs
|
2 |
|
|
|
7 |
681d |
695d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
general protection fault in apply_wqattrs_cleanup
btrfs
|
2 |
|
|
|
10 |
660d |
682d
|
26/29 |
625d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
KMSAN: uninit-value in io_req_cqe_overflow (3)
io-uring
|
7 |
C |
|
|
16 |
671d |
672d
|
26/29 |
629d |
18414a4a2eab
io_uring/net: assign kmsg inq/flags before buffer selection
|
|
WARNING in unmap_page_range (3)
mm
|
-1 |
C |
|
|
169 |
749d |
758d
|
26/29 |
635d |
f8572367eaff
mm/memory: fix missing pte marker for !page on pte zaps
|
|
kernel BUG in bch2_ioctl_fsck_online
fs
|
-1 |
C |
done |
|
3 |
667d |
663d
|
26/29 |
642d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
WARNING in __virt_to_phys (4)
fs
|
-1 |
C |
|
|
2 |
655d |
651d
|
26/29 |
642d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done
fs
|
-1 |
C |
|
|
3 |
670d |
693d
|
26/29 |
644d |
9e7cfb35e266
bcachefs: Check for invalid btree IDs
|
|
INFO: rcu detected stall in sys_wait4 (4)
mm
|
1 |
C |
done |
done |
2 |
702d |
735d
|
26/29 |
644d |
fb66df20a720
net/sched: taprio: extend minimum interval restriction to entire cycle too
|
|
general protection fault in find_match (5)
net
|
2 |
|
|
|
2 |
675d |
676d
|
26/29 |
645d |
b86762dbe19a
ipv6: prevent possible NULL dereference in rt6_probe()
|
|
possible deadlock in br_forward_delay_timer_expired (2)
net
|
4 |
|
|
|
1 |
666d |
666d
|
26/29 |
645d |
62e58ddb1465
net: add softirq safety to netdev_rename_lock
|
|
UBSAN: array-index-out-of-bounds in bch2_bkey_swab_key
fs
|
15 |
|
|
|
2 |
679d |
677d
|
26/29 |
645d |
d47df4f616d5
bcachefs: Fix array-index-out-of-bounds
|
|
general protection fault in xfrm6_get_saddr (2)
net
|
2 |
|
|
|
1 |
676d |
676d
|
26/29 |
645d |
d46401052c2d
xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
|
|
INFO: task hung in journal_quiesce
fs
|
1 |
syz |
|
|
76 |
657d |
685d
|
26/29 |
645d |
89d21b69b4f8
bcachefs: Add missing bch2_journal_do_writes() call
|
|
WARNING in kcov_remote_start (4)
usb
|
-1 |
|
|
|
107983 |
645d |
676d
|
26/29 |
645d |
f85d39dd7ed8
kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
|
|
net-next test error: WARNING: suspicious RCU usage in _destroy_all_sets
netfilter
|
-1 |
|
|
|
128 |
665d |
671d
|
26/29 |
646d |
8ecd06277a76
netfilter: ipset: Fix suspicious rcu_dereference_protected()
|
|
INFO: task hung in nilfs_segctor_thread (2)
nilfs
|
1 |
C |
inconclusive |
|
98 |
677d |
787d
|
26/29 |
646d |
7373a51e7998
nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
|
|
INFO: task hung in devinet_ioctl (5)
net
|
1 |
|
|
|
59 |
646d |
672d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
INFO: task hung in addrconf_dad_work (4)
net
|
1 |
|
|
|
2632 |
646d |
697d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
general protection fault in fib6_nh_init (2)
net
|
2 |
|
|
|
2 |
667d |
671d
|
26/29 |
646d |
2eab4543a220
ipv6: prevent possible NULL deref in fib6_nh_init()
|
|
WARNING: suspicious RCU usage in br_mst_set_state (2)
bridge
|
4 |
|
|
|
10 |
666d |
677d
|
26/29 |
646d |
546ceb1dfdac
net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
36c92936e868
net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
|
|
WARNING in btrfs_put_transaction (2)
btrfs
|
-1 |
|
|
|
3 |
686d |
682d
|
26/29 |
646d |
fb33eb2ef0d8
btrfs: fix leak of qgroup extent records after transaction abort
|
|
INFO: task hung in ieee80211_unregister_hw
wireless
|
1 |
|
|
|
151 |
650d |
686d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
UBSAN: array-index-out-of-bounds in lock_timer_base
fs
kvm
|
15 |
|
|
|
4 |
668d |
682d
|
26/29 |
646d |
b79922009214
bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
|
|
WARNING in bch2_fs_read_write_early
fs
|
-1 |
C |
|
|
35 |
663d |
671d
|
26/29 |
646d |
1ba44217f825
bcachefs: delete_dead_snapshots() doesn't need to go RW
|
|
INFO: task hung in linkwatch_event (3)
net
|
1 |
|
|
|
1634 |
646d |
1241d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
upstream test error: WARNING: suspicious RCU usage in _destroy_all_sets
netfilter
|
-1 |
|
|
|
293 |
665d |
671d
|
26/29 |
646d |
8ecd06277a76
netfilter: ipset: Fix suspicious rcu_dereference_protected()
|
|
INFO: task hung in wg_netns_pre_exit (4)
wireguard
|
1 |
|
|
|
127 |
647d |
686d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
WARNING in hid_output_report
usb
input
|
-1 |
C |
error |
|
3 |
691d |
711d
|
26/29 |
646d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
fba383985354
net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
|
|
INFO: task hung in register_nexthop_notifier (3)
net
|
1 |
|
|
|
44 |
649d |
759d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
INFO: task hung in rfkill_global_led_trigger_worker (2)
net
nfc
|
1 |
C |
error |
|
1362 |
646d |
1248d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
UBSAN: shift-out-of-bounds in read_one_super (2)
fs
|
-1 |
|
|
|
4 |
672d |
668d
|
26/29 |
646d |
d406545613b5
bcachefs: Fix shift overflow in read_one_super()
|
|
KASAN: slab-out-of-bounds Read in ea_get (2)
jfs
|
17 |
C |
|
|
33 |
648d |
713d
|
26/29 |
646d |
7c55b78818cf
jfs: xattr: fix buffer overflow for invalid xattr
|
|
INFO: task hung in wdm_release
usb
|
1 |
C |
error |
|
1 |
669d |
665d
|
26/29 |
646d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
WARNING in rdev_scan
wireless
|
-1 |
C |
done |
|
3 |
669d |
674d
|
26/29 |
646d |
0941772342d5
wifi: cfg80211: wext: set ssids=NULL for passive scans
|
|
INFO: task hung in cfg80211_dfs_channels_update_work (7)
wireless
|
1 |
|
|
|
37 |
661d |
665d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
memory leak in nr_create (3)
hams
|
3 |
C |
|
|
9 |
848d |
1038d
|
26/29 |
646d |
0b9130247f3b
netrom: Fix a memory leak in nr_heartbeat_expiry()
|
|
INFO: rcu detected stall in raw_ioctl
usb
|
1 |
C |
|
|
49 |
652d |
898d
|
26/29 |
646d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
BUG: soft lockup in tcp_write_timer (4)
mm
|
1 |
|
|
|
4 |
650d |
674d
|
26/29 |
646d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu
fs
|
19 |
C |
|
|
2 |
663d |
660d
|
26/29 |
646d |
211c581de28e
bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
|
|
KMSAN: uninit-value in asus_report_fixup
input
usb
|
17 |
C |
done |
|
35 |
667d |
692d
|
26/29 |
646d |
89e1ee118d6f
hid: asus: asus_report_fixup: fix potential read out of bounds
|
|
general protection fault in detach_extent_buffer_folio
btrfs
|
2 |
|
|
|
9 |
664d |
680d
|
26/29 |
646d |
f3a5367c679d
btrfs: protect folio::private when attaching extent buffer folios
|
|
INFO: task hung in cangw_pernet_exit_batch (3)
can
|
1 |
|
|
|
33 |
647d |
662d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc
fs
|
-1 |
C |
|
|
45 |
660d |
660d
|
26/29 |
646d |
472237b69d07
bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
|
|
INFO: task hung in rtnetlink_rcv_msg
net
|
1 |
C |
inconclusive |
inconclusive |
1970 |
647d |
2610d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
kernel BUG in bch2_journal_res_get
fs
|
-1 |
C |
|
|
2 |
676d |
672d
|
26/29 |
646d |
dbf4d79b7fc7
bcachefs: Fix early init error path in journal code
|
|
INFO: task hung in addrconf_verify_work (8)
net
|
1 |
C |
error |
|
1294 |
646d |
850d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
kernel BUG in bch2_lru_change
fs
|
-1 |
C |
done |
|
4 |
663d |
679d
|
26/29 |
646d |
cff07e2739d8
bcachefs: Guard against overflowing LRU_TIME_BITS
|
|
INFO: task hung in mpls_net_exit (2)
net
|
1 |
|
|
|
50 |
652d |
672d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
INFO: task hung in switchdev_deferred_process_work (2)
net
|
1 |
C |
inconclusive |
|
1226 |
646d |
2089d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
possible deadlock in ovl_copy_up_flags
overlayfs
|
4 |
C |
done |
|
7 |
672d |
693d
|
26/29 |
646d |
db03d39053a9
ovl: fix copy-up in tmpfile
|
|
possible deadlock in console_flush_all (2)
trace
bpf
|
4 |
C |
error |
|
52996 |
646d |
921d
|
26/29 |
646d |
ae01e52da244
serial: drop debugging WARN_ON_ONCE() from uart_write()
|
|
kernel BUG in __vma_reservation_common
mm
|
-1 |
C |
error |
|
8 |
677d |
710d
|
26/29 |
646d |
8daf9c702ee7
mm/hugetlb: do not call vma_add_reservation upon ENOMEM
|
|
WARNING: locking bug in srcu_gp_start_if_needed
kvm
fs
|
4 |
|
|
|
2 |
673d |
675d
|
26/29 |
646d |
f770a6e9a3d7
bcachefs: Fix initialization order for srcu barrier
|
|
INFO: task hung in crda_timeout_work (7)
wireless
|
1 |
|
|
|
1084 |
648d |
692d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
KMSAN: kernel-infoleak in raw_recvmsg
can
|
9 |
C |
|
|
121 |
672d |
720d
|
26/29 |
646d |
b7cdf1dd5d2a
net: can: j1939: Initialize unused data in j1939_send_one()
|
|
BUG: soft lockup in inet6_rtm_newroute
net
|
1 |
|
|
|
1 |
662d |
662d
|
26/29 |
646d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
possible deadlock in btrfs_log_inode
btrfs
|
4 |
|
|
|
1 |
677d |
673d
|
26/29 |
646d |
d1825752e307
btrfs: use NOFS context when getting inodes during logging and log replay
|
|
INFO: task hung in reg_check_chans_work (6)
wireless
|
1 |
C |
error |
|
129 |
649d |
722d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
INFO: task hung in wg_destruct
wireguard
|
1 |
|
|
|
207 |
649d |
688d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
WARNING: kmalloc bug in __snapshot_t_mut
fs
|
-1 |
C |
done |
|
10 |
656d |
687d
|
26/29 |
646d |
64cd7de998f3
bcachefs: Fix kmalloc bug in __snapshot_t_mut
|
|
WARNING in skb_ensure_writable
bpf
net
|
-1 |
C |
done |
|
2893 |
647d |
724d
|
26/29 |
646d |
2bbe3e5a2f4e
bpf: Avoid splat in pskb_pull_reason
|
|
BUG: soft lockup in hci_cmd_timeout
bluetooth
usb
|
1 |
C |
|
|
1 |
677d |
673d
|
26/29 |
646d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
KASAN: slab-use-after-free Read in bch2_fs_recovery
fs
|
19 |
|
|
|
21 |
664d |
665d
|
26/29 |
646d |
2fe79ce7d1e8
bcachefs: Fix a UAF after write_super()
|
|
WARNING in cxacru_cm/usb_submit_urb
usb
|
-1 |
C |
error |
inconclusive |
14 |
665d |
2233d
|
26/29 |
646d |
2eabb655a968
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
|
|
WARNING: locking bug in __timer_delete_sync
fs
kvm
|
4 |
|
|
|
6 |
660d |
684d
|
26/29 |
646d |
b79922009214
bcachefs: Add missing synchronize_srcu_expedited() call when shutting down
|
|
INFO: task hung in bpf_prog_dev_bound_destroy
bpf
|
1 |
|
|
|
94 |
665d |
677d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
kernel BUG in gc_bucket
fs
|
-1 |
C |
done |
|
221 |
679d |
684d
|
26/29 |
646d |
9432e90df1b8
bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
|
|
INFO: task hung in regdb_fw_cb
wireless
|
1 |
|
|
|
596 |
650d |
691d
|
26/29 |
646d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
KASAN: slab-out-of-bounds Read in cfg80211_wext_freq
wireless
|
17 |
C |
inconclusive |
|
133 |
661d |
687d
|
26/29 |
646d |
6ef09cdc5ba0
wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
|
|
possible deadlock in xfs_can_free_eofblocks
xfs
|
4 |
|
|
|
4 |
681d |
706d
|
26/29 |
652d |
6fe60465e1d5
stackdepot: respect __GFP_NOLOCKDEP allocation flag
|
|
possible deadlock in __sock_map_delete
net
bpf
|
4 |
C |
|
|
14 |
688d |
732d
|
26/29 |
654d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
WARNING in geneve_xmit
net
|
-1 |
C |
done |
|
42 |
720d |
727d
|
26/29 |
665d |
d8a6213d70ac
geneve: fix header validation in geneve[6]_xmit_skb
|
|
general protection fault in bch2_fs_btree_key_cache_exit
fs
|
2 |
|
|
|
6 |
672d |
672d
|
26/29 |
665d |
b30b70ad8bff
bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
|
|
possible deadlock in __hrtimer_run_queues (2)
kernel
|
4 |
C |
error |
done |
16 |
721d |
753d
|
26/29 |
665d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
general protection fault in ip6_pol_route
net
|
8 |
|
|
|
73 |
668d |
706d
|
26/29 |
667d |
b01e1c030770
ipv6: fix possible race in __fib6_drop_pcpu_from()
|
|
general protection fault in __fib6_drop_pcpu_from (5)
net
|
8 |
|
|
|
467 |
667d |
712d
|
26/29 |
667d |
b01e1c030770
ipv6: fix possible race in __fib6_drop_pcpu_from()
|
|
WARNING in ieee80211_link_info_change_notify (2)
wireless
|
-1 |
C |
inconclusive |
|
8918 |
675d |
1143d
|
26/29 |
667d |
02c665f048a4
wifi: mac80211: apply mcast rate only if interface is up
|
|
general protection fault in bpf_get_attach_cookie_tracing
trace
bpf
|
2 |
C |
error |
|
7 |
680d |
711d
|
26/29 |
667d |
d0d1df8ba18a
bpf: Set run context for rawtp test_run callback
|
|
KASAN: slab-use-after-free Read in bpf_link_free (2)
bpf
|
19 |
syz |
|
|
52 |
677d |
689d
|
26/29 |
667d |
2884dc7d08d9
bpf: Fix a potential use-after-free in bpf_link_free()
|
|
WARNING in ieee80211_rx_list
wireless
|
-1 |
C |
inconclusive |
error |
3489 |
678d |
2030d
|
26/29 |
667d |
177c6ae9725d
wifi: mac80211: handle tasklet frames before stopping
|
|
WARNING in fuse_request_end
fuse
|
-1 |
C |
error |
|
3 |
695d |
705d
|
26/29 |
671d |
246014876d78
fuse: clear FR_SENT when re-adding requests into pending list
|
|
WARNING in packet_setsockopt
net
|
-1 |
C |
|
|
83 |
703d |
742d
|
26/29 |
672d |
86d43e2bf93c
af_packet: avoid a false positive warning in packet_setsockopt()
|
|
kernel BUG in dev_gro_receive
net
|
-1 |
C |
done |
|
72 |
685d |
701d
|
25/29 |
674d |
be008726d0ac
net: gro: initialize network_offset in network layer
|
|
KMSAN: uninit-value in virtqueue_add (4)
mm
|
7 |
C |
|
|
203184 |
674d |
836d
|
25/29 |
674d |
61b258b0d2f6
x86: call instrumentation hooks from copy_mc.c
|
|
KMSAN: uninit-value in nilfs_add_checksums_on_logs (2)
nilfs
|
7 |
C |
|
|
171 |
674d |
835d
|
25/29 |
674d |
61b258b0d2f6
x86: call instrumentation hooks from copy_mc.c
|
|
KMSAN: uninit-value in nci_ntf_packet (2)
net
nfc
|
7 |
C |
|
|
13 |
677d |
690d
|
25/29 |
674d |
068648aab72c
nfc/nci: Add the inconsistency check between the input data length and count
|
|
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data
fs
|
-1 |
C |
done |
|
15 |
704d |
702d
|
25/29 |
674d |
bcfbaea8e547
bcachefs: Fix shift overflows in replicas.c
|
|
inconsistent lock state in valid_state (2)
sound
|
4 |
C |
inconclusive |
|
57405 |
675d |
800d
|
25/29 |
674d |
b79491896151
dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
|
|
kernel panic: not locked: inodes NUM:ADDR:NUM cached
fs
|
2 |
C |
|
|
2 |
701d |
697d
|
25/29 |
674d |
6ce26ad376bd
bcachefs: Fix missing parens in drop_locks_do()
|
|
kernel BUG in bch2_btree_iter_verify_entry_exit
fs
|
-1 |
C |
done |
|
3 |
694d |
700d
|
25/29 |
674d |
765b8cb8acab
bcachefs: Check for subvolues with bogus snapshot/inode fields
|
|
kernel BUG in bch2_checksum
fs
|
-1 |
C |
done |
|
9 |
692d |
702d
|
25/29 |
674d |
6b74fdcc8e25
bcachefs: bch2_checksum() returns 0 for unknown checksum type
|
|
WARNING in sock_map_close
bpf
net
|
-1 |
C |
error |
|
182 |
675d |
738d
|
25/29 |
674d |
4b4647add7d3
sock_map: avoid race between sock_map_close and sk_psock_put
|
|
possible deadlock in sock_hash_delete_elem (2)
bpf
net
|
4 |
C |
|
|
1127 |
675d |
758d
|
25/29 |
674d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
general protection fault in poll_state_synchronize_srcu
fs
|
2 |
|
|
|
5 |
694d |
694d
|
25/29 |
674d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
KASAN: slab-use-after-free Read in p9_fid_destroy
v9fs
|
19 |
C |
|
|
13 |
689d |
770d
|
25/29 |
674d |
f89ea63f1c65
netfs, 9p: Fix race between umount and async request completion
|
|
kernel BUG in cpu_replicas_add_entry
fs
|
-1 |
C |
done |
|
11 |
685d |
704d
|
25/29 |
674d |
5fa421448d1f
bcachefs: Fix bogus verify_replicas_entry() assert
|
|
kernel BUG in __journal_res_get
ext4
|
-1 |
C |
done |
|
7 |
683d |
707d
|
25/29 |
674d |
cd3b31f9d417
bcachefs: Ensure we're RW before journalling
|
|
general protection fault in nf_tproxy_laddr4
netfilter
|
8 |
C |
error |
|
5 |
694d |
703d
|
25/29 |
674d |
21a673bddc8f
netfilter: tproxy: bail out if IP has been disabled on the device
|
|
KASAN: slab-use-after-free Read in p9_client_destroy
v9fs
|
19 |
|
|
|
7 |
693d |
706d
|
25/29 |
674d |
f89ea63f1c65
netfs, 9p: Fix race between umount and async request completion
|
|
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio
fs
|
17 |
C |
done |
|
2 |
705d |
702d
|
25/29 |
674d |
2ba24864d2f6
bcachefs: Fix stack oob in __bch2_encrypt_bio()
|
|
KASAN: slab-use-after-free Write in v9fs_free_request
v9fs
|
22 |
|
|
|
9 |
689d |
704d
|
25/29 |
674d |
f89ea63f1c65
netfs, 9p: Fix race between umount and async request completion
|
|
INFO: rcu detected stall in packet_release
net
|
1 |
C |
unreliable |
|
1 |
767d |
689d
|
25/29 |
674d |
fb66df20a720
net/sched: taprio: extend minimum interval restriction to entire cycle too
|
|
WARNING in collect_domain_accesses
lsm
|
-1 |
C |
done |
|
3 |
694d |
706d
|
25/29 |
674d |
88da52ccd66e
landlock: Fix d_parent walk
|
|
WARNING: suspicious RCU usage in nfqnl_reinject
netfilter
|
4 |
|
|
|
2 |
685d |
702d
|
25/29 |
674d |
dc21c6cc3d69
netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
|
|
UBSAN: shift-out-of-bounds in bch2_btree_lost_data
fs
|
-1 |
C |
done |
|
3 |
700d |
699d
|
25/29 |
674d |
f108ddd467b5
bcachefs: Fix shift overflow in btree_lost_data()
|
|
KMSAN: uninit-value in p9_client_rpc (2)
v9fs
|
7 |
C |
|
|
5 |
714d |
747d
|
25/29 |
674d |
25460d6f3902
net/9p: fix uninit-value in p9_client_rpc()
|
|
WARNING: lock held when returning to user space in srcu_lock_acquire
rcu
|
4 |
C |
|
|
3 |
704d |
703d
|
25/29 |
674d |
70dd062e27e6
bcachefs: Fix btree_trans leak in bch2_readahead()
|
|
kernel BUG in bch2_fs_release
fs
|
-1 |
|
|
|
3 |
687d |
691d
|
25/29 |
674d |
d509cadc3a48
bcachefs: Fix debug assert
|
|
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc
fs
|
2 |
C |
done |
|
6 |
692d |
703d
|
25/29 |
674d |
9667214b30ef
bcachefs: Fix ref in trans_mark_dev_sbs() error path
|
|
KMSAN: uninit-value in io_issue_sqe
io-uring
|
7 |
|
|
|
2 |
675d |
689d
|
25/29 |
674d |
18414a4a2eab
io_uring/net: assign kmsg inq/flags before buffer selection
|
|
general protection fault in __bch2_insert_snapshot_whiteouts
fs
|
8 |
C |
done |
|
65 |
690d |
702d
|
25/29 |
674d |
6d48e61364ae
bcachefs: Add missing guard in bch2_snapshot_has_children()
|
|
KASAN: slab-use-after-free Read in evict_inodes
fs
|
19 |
C |
done |
|
2 |
707d |
703d
|
25/29 |
674d |
d93ff5fa40b9
bcachefs: Fix race path in bch2_inode_insert()
|
|
INFO: task hung in nilfs_detach_log_writer
nilfs
|
1 |
C |
inconclusive |
|
125 |
694d |
1270d
|
25/29 |
674d |
eb85dace897c
nilfs2: fix potential hang in nilfs_detach_log_writer()
|
|
general protection fault in crypto_skcipher_encrypt
crypto
|
8 |
C |
error |
|
66 |
675d |
702d
|
25/29 |
674d |
c06a8b75679d
bcachefs: Fix bch2_alloc_ciphers()
|
|
INFO: rcu detected stall in snd_timer_user_release (3)
sound
|
1 |
C |
inconclusive |
|
3 |
708d |
717d
|
25/29 |
674d |
4a63bd179fa8
ALSA: timer: Set lower bound of start tick time
|
|
KMSAN: uninit-value in bch2_dirent_invalid
fs
|
7 |
C |
|
|
239 |
675d |
703d
|
25/29 |
674d |
2195b755ebd2
bcachefs: Fix unsafety in bch2_dirent_name_bytes()
|
|
kernel BUG in bch2_fs_recovery
fs
|
-1 |
C |
done |
done |
161 |
707d |
713d
|
25/29 |
675d |
7ffec9ccdc6a
bcachefs: don't free error pointers
|
|
INFO: trying to register non-static key in __timer_delete_sync (2)
net
|
-1 |
C |
|
|
45524 |
702d |
720d
|
25/29 |
678d |
3c668cef61ad
net: hsr: init prune_proxy_timer sooner
|
|
possible deadlock in nr_rt_ioctl
hams
|
4 |
C |
inconclusive |
|
8 |
684d |
712d
|
25/29 |
678d |
e03e7f20ebf7
netrom: fix possible dead-lock in nr_rt_ioctl()
|
|
WARNING in __inet_accept
net
|
-1 |
C |
done |
|
3 |
696d |
696d
|
25/29 |
680d |
26afda78cda3
UPSTREAM: net: relax socket state check at accept time.
|
|
KASAN: slab-out-of-bounds Read in f2fs_get_node_info
f2fs
|
17 |
C |
error |
|
4 |
708d |
721d
|
25/29 |
680d |
20faaf30e555
f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
|
|
BUG: soft lockup in batadv_purge_orig
batman
|
1 |
|
|
|
1 |
748d |
748d
|
25/29 |
680d |
40dc8ab60589
batman-adv: bypass empty buckets in batadv_purge_orig_ref()
|
|
general protection fault in subflow_v6_route_req
mptcp
|
2 |
C |
done |
|
2 |
710d |
710d
|
25/29 |
680d |
445c0b69c729
mptcp: fix possible NULL dereferences
|
|
general protection fault in ip6_output
net
|
2 |
|
|
|
4 |
713d |
733d
|
25/29 |
680d |
4db783d68b9b
ipv6: prevent NULL dereference in ip6_output()
|
|
WARNING in sg_remove_sfp_usercontext
scsi
|
-1 |
C |
|
|
36031 |
735d |
749d
|
25/29 |
680d |
d4e655c49f47
scsi: sg: Avoid race in error handling & drop bogus warn
|
|
KMSAN: uninit-value in __bpf_strtoull
bpf
|
7 |
C |
|
|
119 |
681d |
758d
|
25/29 |
680d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
WARNING in iomap_iter (2)
iomap
|
-1 |
C |
|
|
4 |
718d |
714d
|
25/29 |
680d |
0c12028aec83
block: refine the EOF check in blkdev_iomap_begin
|
|
inconsistent lock state in padata_do_parallel (2)
crypto
|
4 |
|
|
|
2 |
745d |
745d
|
25/29 |
680d |
58329c431203
padata: Disable BH when taking works lock on MT path
|
|
KMSAN: uninit-value in trie_delete_elem
bpf
|
7 |
C |
|
|
52 |
681d |
751d
|
25/29 |
680d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
UBSAN: shift-out-of-bounds in read_one_super
fs
|
-1 |
C |
done |
|
31 |
681d |
710d
|
25/29 |
680d |
71dac2482ad3
bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
|
|
KMSAN: uninit-value in nci_rx_work
nfc
net
|
7 |
C |
|
|
582 |
680d |
836d
|
25/29 |
680d |
e4a87abf5885
nfc: nci: Fix uninit-value in nci_rx_work
|
|
KASAN: slab-use-after-free Read in unix_del_edges
net
|
19 |
C |
done |
|
2 |
728d |
727d
|
25/29 |
680d |
1af2dface5d2
af_unix: Don't access successor in unix_del_edges() during GC.
|
|
INFO: task hung in ext4_quota_write
ext4
|
1 |
C |
inconclusive |
|
22 |
731d |
836d
|
25/29 |
680d |
0a46ef234756
ext4: do not create EA inode under buffer lock
|
|
WARNING: kmalloc bug in bch2_dev_buckets_resize
fs
|
-1 |
C |
|
|
17 |
681d |
712d
|
25/29 |
680d |
db42549d402c
bcachefs: Add a better limit for maximum number of buckets
|
|
general protection fault in fib6_rule_action
net
|
2 |
|
|
|
1 |
729d |
729d
|
25/29 |
680d |
d101291b2681
ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
|
|
WARNING in mb_cache_destroy
ext4
|
-1 |
C |
done |
|
738 |
698d |
716d
|
25/29 |
680d |
0c0b4a49d3e7
ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
|
|
WARNING in __virt_to_phys (3)
fs
|
-1 |
C |
|
|
447 |
680d |
713d
|
25/29 |
680d |
7ffec9ccdc6a
bcachefs: don't free error pointers
|
|
KMSAN: uninit-value in br_dev_xmit (2)
bridge
|
7 |
C |
|
|
2 |
708d |
704d
|
25/29 |
680d |
8bd67ebb50c0
net: bridge: xmit: make sure we have at least eth header len bytes
|
|
KMSAN: uninit-value in dev_map_lookup_elem
bpf
net
|
7 |
C |
|
|
3 |
746d |
752d
|
25/29 |
680d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
KMSAN: uninit-value in __bch2_write_index
fs
|
7 |
|
|
|
1 |
712d |
712d
|
25/29 |
680d |
1267df40acb2
bcachefs: Initialize bch_write_op->failed in inline data path
|
|
BUG: sleeping function called from invalid context in console_lock (2)
serial
|
5 |
C |
inconclusive |
inconclusive |
7447 |
680d |
1774d
|
25/29 |
680d |
6bd23e0c2bb6
tty: add the option to have a tty reject a new ldisc
|
|
KMSAN: uninit-value in trie_lookup_elem
bpf
|
7 |
C |
|
|
12 |
738d |
756d
|
25/29 |
680d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
possible deadlock in kvfree_call_rcu
bpf
|
4 |
C |
|
|
1431 |
682d |
751d
|
25/29 |
680d |
59f2f841179a
bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
|
|
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit
fs
|
8 |
C |
|
|
1002 |
680d |
713d
|
25/29 |
680d |
b30b70ad8bff
bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
|
|
WARNING: suspicious RCU usage in bch2_fs_quota_read
ext4
|
4 |
C |
done |
|
24 |
681d |
711d
|
25/29 |
680d |
8060bf1d83f7
bcachefs: Fix snapshot_t() usage in bch2_fs_quota_read_inode()
|
|
WARNING in kcov_remote_start (3)
usb
|
-1 |
|
|
|
265513 |
680d |
749d
|
25/29 |
680d |
19e35f24750d
nfc: nci: Fix kcov check in nci_rx_work()
|
|
KASAN: slab-out-of-bounds Write in do_handle_open
nfs
|
21 |
C |
|
|
643 |
742d |
744d
|
25/29 |
680d |
68d6f4f3fbd9
fs: Annotate struct file_handle with __counted_by() and use struct_size()
|
|
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid
fs
|
-1 |
C |
done |
|
6 |
685d |
711d
|
25/29 |
680d |
2bb9600d5d47
bcachefs: Guard against unknown k.k->type in __bkey_invalid()
|
|
BUG: unable to handle kernel paging request in bpf_prog_ADDR (2)
bpf
|
8 |
C |
|
|
3 |
724d |
737d
|
25/29 |
680d |
543576ec15b1
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
|
|
KMSAN: uninit-value in unwind_dump
net
|
7 |
|
|
|
1 |
731d |
727d
|
25/29 |
680d |
90d1f14cbb9d
kmsan: compiler_types: declare __no_sanitize_or_inline
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text
fs
|
17 |
C |
done |
|
32 |
697d |
710d
|
25/29 |
680d |
692aa7a54b2b
bcachefs: Fix sb_field_downgrade validation
|
|
KMSAN: uninit-value in array_map_lookup_elem
bpf
|
7 |
C |
|
|
10 |
735d |
755d
|
25/29 |
680d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
KMSAN: uninit-value in sock_map_delete_elem
bpf
net
|
7 |
C |
|
|
44 |
682d |
752d
|
25/29 |
680d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
KASAN: slab-use-after-free Read in fsnotify
ext4
|
19 |
C |
error |
|
3 |
729d |
735d
|
25/29 |
680d |
795bb82d12a1
fsnotify: fix UAF from FS_ERROR event on a shutting down filesystem
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text
fs
|
17 |
C |
done |
|
3 |
701d |
711d
|
25/29 |
680d |
f39055220f6f
bcachefs: Add missing validation for superblock section clean
|
|
WARNING in ar5523_cmd/usb_submit_urb
usb
wireless
|
-1 |
C |
error |
|
39 |
713d |
2269d
|
25/29 |
680d |
e120b6388d7d
wifi: ar5523: enable proper endpoint verification
|
|
possible deadlock in sch_direct_xmit (4)
net
|
4 |
|
|
|
1 |
719d |
719d
|
25/29 |
680d |
86735b57c905
net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
|
|
WARNING in qdisc_alloc
net
|
-1 |
C |
error |
|
1069 |
702d |
716d
|
25/29 |
680d |
86735b57c905
net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
|
|
WARNING in __mark_chain_precision (4)
bpf
|
-1 |
C |
|
|
8 |
725d |
745d
|
25/29 |
680d |
1f2a74b41ea8
bpf: prevent r10 register from being marked as precise
|
|
kernel BUG in bch2_alloc_v4_invalid
fs
|
-1 |
C |
error |
|
3 |
688d |
711d
|
25/29 |
680d |
6b8cbfc3db75
bcachefs: Fix assert in bch2_alloc_v4_invalid()
|
|
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast
fs
|
17 |
C |
|
|
583 |
680d |
713d
|
25/29 |
680d |
4a8521b6bb81
bcachefs: Inodes need extra padding for varint_decode_fast()
|
|
WARNING in __page_table_check_ptes_set
mm
|
-1 |
C |
|
|
2 |
729d |
725d
|
25/29 |
680d |
c88033efe9a3
mm/userfaultfd: reset ptes when close() for wr-protected ones
|
|
KASAN: global-out-of-bounds Read in __nla_validate_parse
net
|
17 |
C |
|
|
5 |
738d |
738d
|
25/29 |
680d |
8750539ba317
net: team: fix incorrect maxattr
|
|
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid
fs
|
-1 |
C |
|
|
45 |
683d |
708d
|
25/29 |
680d |
61692c7812ab
bcachefs: bch2_bkey_format_field_overflows()
|
|
WARNING in __mod_memcg_lruvec_state
cgroups
mm
|
-1 |
C |
|
|
270 |
709d |
744d
|
25/29 |
680d |
4f687281012e
mm: do not update memcg stats for NR_{FILE/SHMEM}_PMDMAPPED
|
|
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb
usb
wireless
|
-1 |
C |
error |
inconclusive |
18 |
724d |
1868d
|
25/29 |
680d |
b6dd09b3dac8
wifi: carl9170: add a proper sanity check for endpoints
|
|
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred
fs
|
-1 |
C |
done |
|
3 |
711d |
711d
|
25/29 |
680d |
0ec5b3b7ccfc
bcachefs: Fix shift-by-64 in bformat_needs_redo()
|
|
kernel BUG in bch2_btree_node_read_done
fs
|
-1 |
C |
error |
|
5 |
710d |
713d
|
25/29 |
680d |
a2ddaf965f6a
bcachefs: bucket_pos_to_bp_noerror()
|
|
WARNING: suspicious RCU usage in br_mst_set_state
bridge
|
4 |
|
|
|
45 |
680d |
714d
|
25/29 |
680d |
3a7c1661ae13
net: bridge: mst: fix vlan use-after-free
|
|
KASAN: slab-use-after-free Read in vhost_task_fn
kvm
net
virt
|
19 |
C |
done |
|
2661 |
714d |
716d
|
25/29 |
680d |
db5247d9bf5c
vhost_task: Handle SIGKILL by flushing work and exiting
|
|
WARNING: zero-size vmalloc in ubi_read_volume_table
mtd
|
-1 |
C |
|
|
3 |
747d |
745d
|
25/29 |
692d |
68a24aba7c59
ubi: Check for too small LEB size in VTBL code
|
|
WARNING in emit_fiemap_extent
btrfs
|
-1 |
C |
error |
done |
14 |
775d |
1031d
|
25/29 |
693d |
a1a4a9ca77f1
btrfs: fix race between ordered extent completion and fiemap
|
|
KASAN: slab-use-after-free Read in ovs_ct_exit
openvswitch
|
19 |
|
|
|
6 |
724d |
750d
|
25/29 |
693d |
5ea7b72d4fac
net: openvswitch: Fix Use-After-Free in ovs_ct_exit
|
|
possible deadlock in move_pages
mm
|
4 |
C |
|
|
206 |
749d |
758d
|
25/29 |
694d |
30af24facf0a
userfaultfd: fix deadlock warning when locking src and dst VMAs
|
|
KASAN: stack-out-of-bounds Read in hash
bpf
|
17 |
C |
done |
|
5 |
733d |
740d
|
25/29 |
694d |
a8d89feba7e5
bpf: Check bloom filter map value size
|
|
possible deadlock in force_sig_info_to_task
bpf
trace
|
4 |
C |
error |
|
6 |
714d |
721d
|
25/29 |
694d |
02b670c1f88e
x86/mm: Remove broken vsyscall emulation code from the page fault code
|
|
KMSAN: kernel-infoleak in btrfs_ioctl_logical_to_ino (2)
btrfs
|
9 |
|
|
|
1 |
730d |
730d
|
25/29 |
694d |
2f7ef5bb4a2f
btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
|
|
possible deadlock in seq_read_iter (3)
overlayfs
|
4 |
|
|
|
148 |
705d |
794d
|
25/29 |
694d |
16b52bbee482
kernfs: annotate different lockdep class for of->mutex of writable files
|
|
KMSAN: uninit-value in geneve_xmit (3)
net
|
7 |
C |
|
|
14 |
735d |
743d
|
25/29 |
694d |
d8a6213d70ac
geneve: fix header validation in geneve[6]_xmit_skb
|
|
WARNING in mmu_free_root_page
kvm-x86
|
-1 |
C |
|
|
104 |
726d |
748d
|
25/29 |
694d |
1bc26cb90902
KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (3)
net
|
9 |
C |
|
|
25 |
696d |
750d
|
25/29 |
694d |
d313eb8b7755
net/sched: act_skbmod: prevent kernel-infoleak
|
|
KASAN: slab-use-after-free Read in ip_skb_dst_mtu
netfilter
|
19 |
C |
error |
|
5 |
740d |
771d
|
25/29 |
694d |
18685451fc4e
inet: inet_defrag: prevent sk release while still in use
|
|
KMSAN: uninit-value in gre_rcv (3)
net
|
7 |
C |
|
|
3 |
748d |
749d
|
25/29 |
694d |
17af420545a7
erspan: make sure erspan_base_hdr is present in skb->head
|
|
KMSAN: uninit-value in line6_pod_process_message
sound
|
7 |
C |
|
|
5 |
744d |
745d
|
25/29 |
694d |
c4e51e424e2c
ALSA: line6: Zero-initialize message buffers
|
|
KCSAN: data-race in sk_psock_drop / sk_psock_skb_ingress_enqueue
bpf
net
|
6 |
|
|
|
1 |
762d |
755d
|
25/29 |
694d |
6648e613226e
bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
|
|
net-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
799 |
721d |
755d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
WARNING: suspicious RCU usage in __do_softirq
kernel
|
4 |
C |
|
|
199 |
717d |
744d
|
25/29 |
694d |
1dd1eff161bd
softirq: Fix suspicious RCU usage in __do_softirq()
|
|
upstream boot error: WARNING: refcount bug in __reset_page_owner
mm
|
-1 |
|
|
|
555 |
728d |
759d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt
net
nfc
|
17 |
C |
error |
|
5 |
731d |
740d
|
25/29 |
694d |
7a87441c9651
nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
|
|
KASAN: slab-use-after-free Read in __vma_reservation_common
mm
|
19 |
syz |
|
|
13 |
720d |
734d
|
25/29 |
694d |
37641efaa3fa
hugetlb: check for anon_vma prior to folio allocation
|
|
linux-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
177 |
750d |
787d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
riscv/fixes boot error: can't ssh into the instance (3)
|
-1 |
|
|
|
210 |
695d |
749d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
upstream test error: WARNING: refcount bug in __reset_page_owner
mm
|
-1 |
|
|
|
13 |
736d |
758d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
net boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
297 |
721d |
751d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
WARNING in vmk80xx_auto_attach/usb_submit_urb
usb
|
-1 |
C |
unreliable |
inconclusive |
2 |
769d |
1770d
|
25/29 |
694d |
d1718530e3f6
comedi: vmk80xx: fix incomplete endpoint checking
|
|
WARNING: refcount bug in __reset_page_owner
mm
|
13 |
C |
|
|
93128 |
727d |
758d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
upstream boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
1463 |
728d |
758d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
KASAN: slab-out-of-bounds Read in update_counters
netfilter
bridge
|
17 |
C |
|
|
3 |
740d |
740d
|
25/29 |
694d |
0c83842df40f
netfilter: validate user input for expected length
|
|
KMSAN: uninit-value in ieee80211_rx_handlers (2)
wireless
|
7 |
C |
|
|
4 |
733d |
751d
|
25/29 |
694d |
7c1c73bf84c5
wifi: mac80211: check EHT/TTLM action frame length
|
|
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl
netfilter
|
17 |
C |
|
|
111 |
731d |
742d
|
25/29 |
694d |
0c83842df40f
netfilter: validate user input for expected length
|
|
usb-testing boot error: WARNING: refcount bug in __reset_page_owner
mm
|
-1 |
|
|
|
126 |
723d |
751d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
bpf-next boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
210 |
717d |
746d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
bpf boot error: WARNING: refcount bug in __free_pages_ok
virt
|
-1 |
|
|
|
132 |
720d |
747d
|
25/29 |
694d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
possible deadlock in tty_port_tty_get (2)
net
bpf
|
4 |
|
|
|
3 |
737d |
755d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in put_pwq_unlocked
trace
bpf
|
4 |
|
|
|
3 |
731d |
731d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_delete_elem
bpf
net
|
-1 |
C |
|
|
17183 |
720d |
759d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in scheduler_tick (3)
bpf
net
|
4 |
C |
|
|
1179 |
721d |
757d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in pit_timer_fn
net
bpf
|
4 |
|
|
|
7 |
731d |
742d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
BUG: soft lockup in sys_sendmsg
tipc
batman
|
1 |
C |
|
|
3 |
753d |
794d
|
25/29 |
694d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
possible deadlock in rcu_exp_handler
net
bpf
|
4 |
C |
|
|
1 |
734d |
730d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
KMSAN: uninit-value in v9fs_evict_inode
v9fs
|
7 |
C |
|
|
5206 |
749d |
761d
|
25/29 |
694d |
6630036b7c22
fs/9p: fix uninitialized values during inode evict
|
|
possible deadlock in rcu_report_exp_cpu_mult
net
bpf
|
4 |
C |
done |
|
30 |
721d |
759d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in try_to_wake_up (4)
bpf
net
|
4 |
C |
error |
|
19 |
696d |
759d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in ahci_single_level_irq_intr
bpf
net
|
4 |
C |
|
|
10 |
742d |
750d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_unref
bpf
net
|
-1 |
C |
error |
|
97 |
721d |
735d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
INFO: rcu detected stall in rtnl_newlink (4)
sctp
fs
|
1 |
C |
error |
|
9 |
701d |
777d
|
25/29 |
694d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
possible deadlock in __lock_task_sighand (2)
bpf
|
4 |
C |
|
|
1476 |
695d |
759d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_hash_delete_elem
bpf
net
|
-1 |
C |
done |
|
16982 |
720d |
759d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in hrtimer_run_queues
bpf
net
|
4 |
C |
error |
|
592 |
721d |
758d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in swake_up_one
bpf
net
|
4 |
C |
|
|
4 |
732d |
731d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2)
mm
|
8 |
C |
|
|
2 |
734d |
744d
|
25/29 |
694d |
c6f48506ba30
arm32, bpf: Reimplement sign-extension mov instruction
|
|
possible deadlock in pwq_dec_nr_in_flight
trace
bpf
|
4 |
|
|
|
1 |
736d |
732d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in _prb_commit
bpf
net
|
-1 |
|
|
|
4 |
731d |
727d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in posix_timer_fn (2)
net
bpf
|
4 |
|
|
|
1 |
735d |
731d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in drm_handle_vblank
net
bpf
|
4 |
|
|
|
30 |
732d |
757d
|
25/29 |
694d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
KASAN: slab-out-of-bounds Read in xsk_setsockopt
bpf
net
|
17 |
C |
|
|
17 |
733d |
742d
|
25/29 |
694d |
237f3cf13b20
xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
|
|
KMSAN: uninit-value in ipvlan_queue_xmit (2)
net
|
7 |
C |
|
|
2 |
767d |
728d
|
25/29 |
694d |
4b911a9690d7
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
|
|
possible deadlock in __unix_gc
net
|
4 |
C |
done |
|
5 |
721d |
723d
|
25/29 |
694d |
1971d13ffa84
af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
|
|
WARNING in gre_tap_xmit (2)
net
|
-1 |
C |
done |
|
67 |
702d |
727d
|
25/29 |
694d |
4b911a9690d7
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
|
|
UBSAN: array-index-out-of-bounds in check_stack_range_initialized
bpf
|
15 |
C |
error |
|
21 |
725d |
758d
|
25/29 |
694d |
ecc6a2101840
bpf: Protect against int overflow for stack access size
|
|
general protection fault in dev_map_enqueue
net
bpf
|
19 |
C |
|
|
676 |
694d |
751d
|
25/29 |
694d |
5bcf0dcbf906
xdp: use flags field to disambiguate broadcast redirect
|
|
KMSAN: uninit-value in xt_check_entry_offsets
netfilter
|
7 |
|
|
|
1 |
738d |
738d
|
25/29 |
694d |
65acf6e0501a
netfilter: complete validation of user input
|
|
KMSAN: uninit-value in nci_ntf_packet
net
nfc
|
7 |
C |
|
|
79 |
695d |
836d
|
25/29 |
694d |
d24b03535e5e
nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
|
|
KASAN: slab-use-after-free Read in v9fs_stat2inode_dotl
v9fs
|
19 |
C |
done |
|
585 |
749d |
804d
|
25/29 |
694d |
11763a8598f8
fs/9p: fix uaf in in v9fs_stat2inode_dotl
|
|
possible deadlock in unix_del_edges
net
|
4 |
C |
|
|
49 |
737d |
742d
|
25/29 |
694d |
b46f4eaa4f0e
af_unix: Clear stale u->oob_skb.
|
|
WARNING in __hugetlb_cgroup_uncharge_folio
mm
|
-1 |
syz |
|
|
3 |
723d |
732d
|
25/29 |
694d |
b76b46902c2d
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
|
|
KASAN: slab-use-after-free Read in bpf_link_free
bpf
|
19 |
syz |
|
|
181 |
694d |
742d
|
25/29 |
694d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
WARNING: refcount bug in ax25_release (2)
hams
|
13 |
C |
|
|
240 |
694d |
759d
|
25/29 |
694d |
467324bcfe1a
ax25: Fix netdev refcount issue
|
|
KASAN: slab-out-of-bounds Read in data_sock_setsockopt
net
|
17 |
C |
|
|
2 |
738d |
738d
|
25/29 |
694d |
138b787804f4
mISDN: fix MISDN_TIME_STAMP handling
|
|
KASAN: slab-use-after-free Read in bpf_trace_run4
bpf
trace
|
19 |
C |
error |
|
169 |
738d |
756d
|
25/29 |
694d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
KMSAN: uninit-value in nci_dev_up
net
nfc
|
7 |
C |
|
|
7 |
753d |
812d
|
25/29 |
694d |
d24b03535e5e
nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
|
|
UBSAN: array-index-out-of-bounds in nilfs_add_link
nilfs
|
15 |
C |
error |
|
4 |
730d |
731d
|
25/29 |
694d |
c4a7dc9523b5
nilfs2: fix OOB in nilfs_set_de_type
|
|
KASAN: slab-use-after-free Read in bpf_trace_run2
bpf
trace
|
19 |
C |
error |
|
653 |
738d |
756d
|
25/29 |
694d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
KASAN: slab-use-after-free Read in __fput (2)
fs
|
19 |
C |
done |
|
6 |
718d |
723d
|
25/29 |
694d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
KASAN: slab-use-after-free Read in bpf_trace_run1
bpf
trace
|
19 |
C |
error |
|
78 |
738d |
753d
|
25/29 |
694d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
possible deadlock in unix_notinflight
net
|
4 |
C |
|
|
7 |
720d |
736d
|
25/29 |
694d |
b46f4eaa4f0e
af_unix: Clear stale u->oob_skb.
|
|
general protection fault in __ep_remove
fs
|
2 |
C |
|
|
1 |
739d |
738d
|
25/29 |
694d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
general protection fault in jbd2__journal_start
ext4
|
2 |
C |
error |
|
3 |
757d |
811d
|
25/29 |
694d |
f2e812c1522d
xfs: don't use current->journal_info
|
|
kernel BUG in sg_init_one
mm
|
-1 |
C |
|
|
1032 |
749d |
759d
|
25/29 |
694d |
9c500835f279
mm: zswap: fix kernel BUG in sg_init_one
|
|
WARNING in __rate_control_send_low
wireless
|
-1 |
C |
inconclusive |
|
2759 |
694d |
2010d
|
25/29 |
694d |
ab9177d83c04
wifi: mac80211: don't use rate mask for scanning
|
|
kernel BUG in PageHuge
mm
|
-1 |
|
|
|
1 |
756d |
752d
|
25/29 |
694d |
d99e3140a4d3
mm: turn folio_test_hugetlb into a PageType
|
|
WARNING in clear_dirty_gfn_range
kvm-x86
|
-1 |
C |
|
|
3 |
743d |
765d
|
25/29 |
694d |
2673dfb591a3
KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
|
|
KMSAN: uninit-value in nf_flow_offload_ip_hook
netfilter
|
7 |
C |
|
|
5 |
742d |
742d
|
25/29 |
694d |
87b3593bed18
netfilter: flowtable: validate pppoe header
|
|
WARNING: ODEBUG bug in bdev_super_lock (2)
fs
|
-1 |
C |
done |
|
3 |
731d |
729d
|
25/29 |
694d |
22650a99821d
fs,block: yield devices early
|
|
WARNING in hugetlb_change_protection (2)
mm
|
-1 |
C |
|
|
631 |
714d |
741d
|
25/29 |
694d |
c5977c95dff1
mm/userfaultfd: allow hugetlb change protection upon poison entry
|
|
WARNING in __kvm_gpc_refresh
kvm
|
-1 |
C |
|
|
178 |
695d |
759d
|
25/29 |
694d |
5c9ca4ed8908
KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
|
|
WARNING in btrfs_sync_log
btrfs
|
-1 |
C |
error |
inconclusive |
6 |
767d |
1278d
|
25/29 |
694d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
WARNING in btrfs_put_transaction
btrfs
|
-1 |
C |
error |
inconclusive |
83 |
711d |
1233d
|
25/29 |
694d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
WARNING in __btrfs_free_extent
btrfs
|
-1 |
C |
error |
|
300 |
703d |
1261d
|
25/29 |
694d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
WARNING in btrfs_get_root_ref
btrfs
|
-1 |
syz |
unreliable |
inconclusive |
3 |
769d |
784d
|
25/29 |
695d |
e2b54eaf28df
btrfs: fix double free of anonymous device after snapshot creation failure
|
|
kernel BUG at fs/inode.c:LINE! (2)
fs
|
-1 |
C |
done |
unreliable |
322 |
709d |
2057d
|
25/29 |
695d |
319c15174757
epoll: take epitem list out of struct file
|
|
kernel BUG in create_pending_snapshot
btrfs
|
-1 |
C |
error |
done |
32 |
934d |
1239d
|
25/29 |
697d |
df9f27823904
btrfs: do not BUG_ON on failure to get dir index for new snapshot
|
|
WARNING in btrfs_free_reserved_data_space_noquota
btrfs
|
-1 |
C |
done |
done |
7 |
822d |
1234d
|
25/29 |
697d |
9e65bfca24cf
btrfs: fix qgroup_free_reserved_data int overflow
|
|
WARNING in stashed_dentry_prune (2)
fs
|
-1 |
C |
done |
|
54 |
720d |
729d
|
25/29 |
698d |
9d9539db8638
pidfs: remove config option
|
|
kernel BUG in __extent_writepage_io
btrfs
|
-1 |
syz |
done |
inconclusive |
8 |
775d |
893d
|
25/29 |
699d |
5571e41ec6e5
btrfs: don't drop extent_map for free space inode on write error
|
|
BUG: sleeping function called from invalid context in gsm_send
serial
|
5 |
C |
error |
|
16 |
782d |
1296d
|
25/29 |
720d |
acdab4cb4ba7
Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
|
|
kernel BUG in submit_bh_wbc
nilfs
|
-1 |
C |
done |
|
10 |
722d |
732d
|
25/29 |
722d |
269cdf353b5b
nilfs2: prevent kernel bug at submit_bh_wbc()
|
|
inconsistent lock state in snd_hrtimer_callback (2)
sound
|
4 |
C |
|
|
2600 |
731d |
732d
|
25/29 |
724d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in snd_timer_close_locked (2)
sound
|
4 |
C |
done |
|
3036 |
731d |
732d
|
25/29 |
724d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
inconsistent lock state in snd_timer_interrupt (3)
sound
|
4 |
C |
|
|
710 |
731d |
735d
|
25/29 |
724d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
INFO: rcu detected stall in snd_timer_user_release (2)
sound
|
1 |
C |
|
|
7 |
725d |
738d
|
25/29 |
724d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (5)
sound
|
4 |
C |
|
|
5210 |
731d |
732d
|
25/29 |
724d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
INFO: task hung in netlink_dump (4)
net
|
1 |
|
|
|
72 |
738d |
778d
|
25/29 |
734d |
00af2aa93b76
net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
|
|
INFO: task hung in xfs_inodegc_flush
xfs
|
1 |
C |
error |
|
7 |
803d |
799d
|
25/29 |
734d |
c70e1779b73a
workqueue: Fix pwq->nr_in_flight corruption in try_to_grab_pending()
|
|
INFO: task hung in devinet_ioctl (4)
net
|
1 |
|
|
|
5 |
765d |
765d
|
25/29 |
734d |
00af2aa93b76
net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
|
|
WARNING in __sk_destruct
batman
fs
|
-1 |
|
|
|
2 |
748d |
781d
|
25/29 |
734d |
2a750d6a5b36
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
|
|
WARNING in cleanup_net (3)
net
|
-1 |
syz |
|
|
240 |
735d |
868d
|
25/29 |
734d |
2a750d6a5b36
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
|
|
WARNING in net_free (2)
net
|
-1 |
syz |
|
|
27 |
741d |
787d
|
25/29 |
734d |
2a750d6a5b36
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
|
|
inconsistent lock state in snd_timer_interrupt (2)
sound
|
4 |
C |
done |
|
208 |
735d |
736d
|
25/29 |
735d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
KMSAN: uninit-value in em_ret_far
kvm-x86
|
7 |
C |
|
|
37 |
762d |
828d
|
25/29 |
735d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in em_ret_near_imm
kvm-x86
|
7 |
|
|
|
2 |
773d |
786d
|
25/29 |
735d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in em_ret
kvm-x86
|
7 |
|
|
|
3 |
764d |
785d
|
25/29 |
735d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in ip_tunnel_rcv (2)
net
|
7 |
|
|
|
1 |
771d |
771d
|
25/29 |
735d |
b0ec2abf9826
net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
|
|
WARNING in stashed_dentry_prune
fs
|
-1 |
C |
done |
|
20 |
765d |
764d
|
25/29 |
735d |
9d9539db8638
pidfs: remove config option
|
|
possible deadlock in sch_direct_xmit (3)
net
|
4 |
|
|
|
1 |
794d |
794d
|
25/29 |
736d |
0bef512012b1
UPSTREAM: net: add netdev_lockdep_set_classes() to virtual drivers
|
|
BUG: bad usercopy in raw_getsockopt
mm
hardening
|
-1 |
C |
done |
|
4 |
786d |
786d
|
25/29 |
736d |
c8fba5d6df5e
can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS
|
|
WARNING: ODEBUG bug in bdev_super_lock
fs
|
-1 |
C |
|
|
3 |
739d |
749d
|
25/29 |
736d |
59a55a63c246
fs,block: get holder during claim
|
|
KMSAN: uninit-value in cookie_v4_check
net
|
7 |
C |
|
|
9 |
758d |
764d
|
25/29 |
736d |
956c0d619107
tcp: Clear req->syncookie in reqsk_alloc().
|
|
linux-next boot error: WARNING in register_btf_kfunc_id_set
bpf
|
-1 |
|
|
|
9 |
804d |
805d
|
25/29 |
736d |
a05e90427ef6
bpf: btf: Add BTF_KFUNCS_START/END macro pair
|
|
KMSAN: uninit-value in bcmp (2)
sound
|
7 |
C |
|
|
7 |
801d |
823d
|
25/29 |
736d |
fde2497d2bc3
fat: fix uninitialized field in nostale filehandles
|
|
KASAN: slab-use-after-free Read in sys_io_cancel
fs
|
19 |
C |
done |
|
894 |
737d |
774d
|
25/29 |
736d |
28468cbed92e
Revert "fs/aio: Make io_cancel() generate completions again"
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (4)
sound
|
4 |
C |
|
|
24677 |
736d |
759d
|
25/29 |
736d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
divide error in isd200_ata_command
usb-storage
|
2 |
C |
done |
|
10 |
776d |
780d
|
25/29 |
736d |
014bcf41d946
USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
|
|
KASAN: slab-use-after-free Read in rt6_fill_node
net
|
19 |
|
|
|
1 |
788d |
788d
|
25/29 |
736d |
685f7d531264
net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
|
|
KCSAN: data-race in dev_queue_xmit_nit / packet_setsockopt
net
|
6 |
|
|
|
1 |
763d |
763d
|
25/29 |
736d |
6ebfad33161a
packet: annotate data-races around ignore_outgoing
|
|
UBSAN: shift-out-of-bounds in taprio_change
net
|
-1 |
C |
done |
|
4 |
766d |
766d
|
25/29 |
736d |
343041b59b78
net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
|
|
WARNING: suspicious RCU usage in in6_dump_addrs (2)
net
|
4 |
C |
done |
|
3 |
779d |
779d
|
25/29 |
736d |
67ea41d19d2a
inet6: expand rcu_read_lock() scope in inet6_dump_addr()
|
|
KASAN: slab-use-after-free Read in f2fs_filemap_fault
f2fs
|
19 |
C |
unreliable |
|
40 |
741d |
822d
|
25/29 |
736d |
eb70d5a6c932
f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
|
|
KMSAN: uninit-value in ieee80211_amsdu_to_8023s
wireless
|
7 |
C |
|
|
4 |
773d |
780d
|
25/29 |
736d |
9ad797485692
wifi: cfg80211: check A-MSDU format more carefully
|
|
general protection fault in btintel_read_version
bluetooth
|
2 |
C |
error |
|
5 |
809d |
820d
|
25/29 |
736d |
b79e04091010
Bluetooth: btintel: Fix null ptr deref in btintel_read_version
|
|
KMSAN: uninit-value in hsr_get_node (2)
net
|
7 |
C |
|
|
49 |
737d |
823d
|
25/29 |
736d |
ddbec99f5857
hsr: Fix uninit-value access in hsr_get_node()
|
|
KMSAN: kernel-infoleak in sys_name_to_handle_at (4)
nfs
|
9 |
C |
|
|
7 |
774d |
823d
|
25/29 |
736d |
3948abaa4e2b
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
|
|
KASAN: slab-use-after-free Write in __hci_acl_create_connection_sync
bluetooth
|
22 |
C |
done |
|
87 |
787d |
798d
|
25/29 |
736d |
5f641f03abcc
Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
|
|
WARNING in mpls_gso_segment
net
|
-1 |
C |
done |
|
20 |
782d |
785d
|
25/29 |
736d |
025f8ad20f2e
net: mpls: error out if inner headers are not set
|
|
possible deadlock in snd_pcm_period_elapsed (4)
sound
|
4 |
C |
done |
|
90659 |
736d |
762d
|
25/29 |
736d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in xfs_ilock
xfs
|
4 |
|
|
|
30 |
736d |
763d
|
25/29 |
736d |
0c6ca06aad84
xfs: quota radix tree allocations need to be NOFS on insert
|
|
inconsistent lock state in snd_timer_interrupt
sound
|
4 |
C |
|
|
1927 |
736d |
759d
|
25/29 |
736d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
WARNING in rds_conn_connect_if_down
rds
|
-1 |
C |
error |
|
17 |
770d |
1101d
|
25/29 |
736d |
c055fc00c07b
net/rds: fix WARNING in rds_conn_connect_if_down
|
|
general protection fault in bpf_struct_ops_find_value
bpf
|
2 |
C |
done |
|
9 |
809d |
812d
|
25/29 |
736d |
e6be8cd5d3cf
bpf: Fix error checks against bpf_get_btf_vmlinux().
|
|
BUG: unable to handle kernel NULL pointer dereference in dev_map_hash_update_elem
net
bpf
|
10 |
C |
|
|
2 |
780d |
788d
|
25/29 |
736d |
281d464a34f5
bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
|
|
WARNING in sk_nulls_del_node_init_rcu
net
|
-1 |
|
|
|
1 |
770d |
769d
|
25/29 |
736d |
04d9d1fc428a
tcp: Fix refcnt handling in __inet_hash_connect().
|
|
KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll (2)
wireguard
|
6 |
|
|
|
721 |
756d |
1528d
|
25/29 |
736d |
bba045dc4d99
wireguard: receive: annotate data-race around receiving_counter.counter
|
|
KMSAN: uninit-value in geneve_udp_encap_recv
net
|
7 |
C |
|
|
2 |
781d |
812d
|
25/29 |
736d |
1ca1ba465e55
geneve: make sure to pull inner header in geneve_rx()
|
|
WARNING in ovl_copy_up_file
overlayfs
|
-1 |
C |
|
|
2 |
764d |
764d
|
25/29 |
736d |
77a28aa47687
ovl: relax WARN_ON in ovl_verify_area()
|
|
kernel BUG at fs/buffer.c:LINE!
nilfs
|
-1 |
C |
done |
error |
567 |
738d |
2919d
|
25/29 |
736d |
f2f26b4a84a0
nilfs2: fix failure to detect DAT corruption in btree and direct mappings
|
|
kernel BUG in __nla_validate_parse
net
|
-1 |
C |
done |
|
13 |
765d |
768d
|
25/29 |
736d |
d8a21070b6e1
nexthop: Fix out-of-bounds access during attribute validation
|
|
KASAN: slab-use-after-free Read in pvr2_context_set_notify (2)
pvrusb2
|
19 |
C |
|
|
1069 |
737d |
807d
|
25/29 |
736d |
0a0b79ea55de
media: pvrusb2: fix uaf in pvr2_context_set_notify
|
|
possible deadlock in xfs_qm_dqget_cache_insert
xfs
|
4 |
|
|
|
8 |
762d |
763d
|
25/29 |
736d |
0c6ca06aad84
xfs: quota radix tree allocations need to be NOFS on insert
|
|
KMSAN: uninit-value in ima_add_template_entry
erofs
|
7 |
C |
|
|
5 |
774d |
786d
|
25/29 |
736d |
893e5e9b7369
erofs: fix uninitialized page cache reported by KMSAN
|
|
BUG: sleeping function called from invalid context in __getblk_gfp
fs
|
5 |
C |
error |
done |
3673 |
841d |
1235d
|
25/29 |
736d |
f123dc86388c
sysv: don't call sb_bread() with pointers_lock held
|
|
general protection fault in btf_is_module
bpf
|
2 |
C |
error |
|
318 |
808d |
812d
|
25/29 |
736d |
e6be8cd5d3cf
bpf: Fix error checks against bpf_get_btf_vmlinux().
|
|
KMSAN: uninit-value in io_sendrecv_fail
io-uring
|
7 |
C |
|
|
29 |
754d |
762d
|
25/29 |
736d |
e21e1c45e1fe
io_uring: clear opcode specific data for an early failure
|
|
INFO: task hung in deactivate_super (2)
jfs
|
1 |
C |
inconclusive |
done |
121 |
774d |
1114d
|
25/29 |
738d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in __lock_sock_fast (2)
net
|
5 |
C |
|
|
6 |
776d |
778d
|
25/29 |
744d |
d6a9608af9a7
mptcp: fix possible deadlock in subflow diag
|
|
possible deadlock in tcp_diag_get_aux
net
|
4 |
C |
|
|
117 |
770d |
787d
|
25/29 |
744d |
d6a9608af9a7
mptcp: fix possible deadlock in subflow diag
|
|
kernel BUG in eth_header (2)
net
|
-1 |
C |
|
|
2 |
820d |
820d
|
25/29 |
744d |
dad555c816a5
llc: make llc_ui_sendmsg() more robust against bonding changes
|
|
BUG: unable to handle kernel NULL pointer dereference in unix_stream_sendmsg
net
bpf
|
10 |
C |
|
|
1 |
780d |
780d
|
25/29 |
744d |
4cd12c6065df
bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
|
|
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready
bpf
net
|
10 |
C |
unreliable |
|
15 |
775d |
895d
|
25/29 |
744d |
4cd12c6065df
bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
|
|
WARNING in blk_rq_map_user_iov
block
|
-1 |
C |
done |
|
3546 |
809d |
951d
|
25/29 |
748d |
13f3956eb568
block: Fix WARNING in _copy_from_iter
|
|
WARNING in copy_page_from_iter
block
|
-1 |
C |
done |
|
1987 |
817d |
1129d
|
25/29 |
748d |
13f3956eb568
block: Fix WARNING in _copy_from_iter
|
|
possible deadlock in unix_set_peek_off
net
|
4 |
|
|
|
8 |
785d |
790d
|
25/29 |
749d |
56667da7399e
net: implement lockless setsockopt(SO_PEEK_OFF)
|
|
INFO: task hung in unix_stream_sendmsg
net
|
1 |
C |
done |
|
4 |
785d |
788d
|
25/29 |
749d |
aa82ac51d633
af_unix: Drop oob_skb ref before purging queue in GC.
|
|
possible deadlock in __unix_dgram_recvmsg (2)
net
|
4 |
|
|
|
3 |
787d |
790d
|
25/29 |
749d |
56667da7399e
net: implement lockless setsockopt(SO_PEEK_OFF)
|
|
WARNING in __alloc_skb (3)
ppp
|
-1 |
C |
|
|
2 |
801d |
801d
|
25/29 |
749d |
cb88cb53badb
ppp_async: limit MRU to 64K
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault
mm
|
8 |
C |
done |
|
5 |
780d |
879d
|
25/29 |
749d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
WARNING in zswap_folio_swapin
mm
|
-1 |
|
|
|
1 |
807d |
803d
|
25/29 |
749d |
16e96ba5e92c
mm/swap_state: update zswap LRU's protection range with the folio locked
|
|
KASAN: slab-out-of-bounds Read in getname_kernel (2)
btrfs
|
17 |
C |
done |
|
5 |
803d |
850d
|
25/29 |
749d |
9845664b9ee4
btrfs: dev-replace: properly validate device names
|
|
kernel BUG in end_buffer_async_write
nilfs
|
-1 |
C |
inconclusive |
|
6 |
837d |
1048d
|
25/29 |
749d |
5bc09b397cbf
nilfs2: fix potential bug in end_buffer_async_write
|
|
WARNING in send_hsr_supervision_frame (3)
net
|
-1 |
|
|
|
153 |
812d |
1248d
|
25/29 |
749d |
37e8c97e5390
net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
|
|
memory leak in pppoe_sendmsg
net
|
3 |
C |
|
|
26 |
840d |
2512d
|
25/29 |
749d |
dc34ebd5c018
pppoe: Fix memory leak in pppoe_sendmsg()
|
|
memory leak in corrupted
bluetooth
|
3 |
syz |
|
|
536 |
749d |
821d
|
25/29 |
749d |
0a186b49bba5
batman-adv: mcast: fix memory leak on deleting a batman-adv interface
|
|
WARNING in __unix_gc
net
|
-1 |
C |
|
|
49 |
798d |
804d
|
25/29 |
749d |
1279f9d9dec2
af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
|
|
KMSAN: uninit-value in des3_ede_decrypt
crypto
|
7 |
|
|
|
1 |
790d |
786d
|
25/29 |
749d |
7cfc2ab3f025
crypto: lskcipher - Copy IV in lskcipher glue code always
|
|
kernel BUG in iov_iter_revert
exfat
|
-1 |
C |
done |
|
5 |
802d |
821d
|
25/29 |
749d |
0991abeddefa
exfat: fix zero the unwritten part for dio read
|
|
WARNING: ODEBUG bug in ip_set_free
netfilter
|
-1 |
C |
|
|
42 |
790d |
793d
|
25/29 |
750d |
27c5a095e251
netfilter: ipset: Missing gc cancellations fixed
|
|
BUG: unable to handle kernel NULL pointer dereference in hrtimer_active
kernel
|
10 |
|
|
|
1 |
796d |
794d
|
25/29 |
750d |
fe9f801355f0
net: veth: clear GRO when clearing XDP even when down
|
|
possible deadlock in rds_wake_sk_sleep (4)
rds
|
4 |
C |
error |
|
16 |
800d |
1429d
|
25/29 |
750d |
f1acf1ac84d2
net:rds: Fix possible deadlock in rds_message_put
|
|
bpf test error: INFO: trying to register non-static key in inet_csk_listen_stop
net
|
-1 |
|
|
|
4 |
815d |
815d
|
25/29 |
750d |
435e202d645c
ipv6: init the accept_queue's spinlocks in inet6_create
|
|
net test error: INFO: trying to register non-static key in inet_csk_listen_stop
net
|
-1 |
|
|
|
21 |
814d |
817d
|
25/29 |
750d |
435e202d645c
ipv6: init the accept_queue's spinlocks in inet6_create
|
|
possible deadlock in rds_message_put
rds
|
4 |
C |
done |
error |
5 |
888d |
1199d
|
25/29 |
750d |
f1acf1ac84d2
net:rds: Fix possible deadlock in rds_message_put
|
|
linux-next test error: INFO: trying to register non-static key in inet_csk_listen_stop
net
|
-1 |
|
|
|
12 |
814d |
816d
|
25/29 |
750d |
435e202d645c
ipv6: init the accept_queue's spinlocks in inet6_create
|
|
possible deadlock in skb_queue_tail (6)
net
|
4 |
|
|
|
1 |
809d |
809d
|
25/29 |
750d |
4d322dce82a1
UPSTREAM: af_unix: fix lockdep positive in sk_diag_dump_icons()
|
|
KASAN: slab-use-after-free Read in sock_wfree (2)
intel-wired-lan
|
19 |
C |
|
|
4 |
812d |
820d
|
25/29 |
750d |
aa2b2eb39348
llc: call sock_orphan() at release time
|
|
WARNING: ODEBUG bug in hash_netiface4_destroy
netfilter
|
-1 |
C |
done |
|
80 |
790d |
804d
|
25/29 |
750d |
27c5a095e251
netfilter: ipset: Missing gc cancellations fixed
|
|
KMSAN: uninit-value in __nla_validate_parse (3)
netfilter
|
17 |
|
|
|
24 |
765d |
786d
|
25/29 |
751d |
9a0d18853c28
netlink: add nla be16/32 types to minlen array
|
|
possible deadlock in j1939_sk_queue_drop_all
can
|
4 |
C |
error |
done |
281 |
808d |
1681d
|
25/29 |
751d |
6cdedc18ba7b
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
|
|
possible deadlock in j1939_sk_errqueue (2)
can
|
4 |
C |
done |
|
24 |
791d |
1017d
|
25/29 |
751d |
6cdedc18ba7b
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
|
|
memory leak in virtual_ncidev_write (2)
net
nfc
|
3 |
C |
|
|
2 |
849d |
1009d
|
25/29 |
751d |
bfb007aebe6b
nfc: nci: free rx_data_reassembly skb on NCI device cleanup
|
|
general protection fault in tipc_udp_is_known_peer
tipc
|
2 |
C |
error |
|
1 |
837d |
850d
|
25/29 |
751d |
3871aa01e1a7
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate (2)
net
|
7 |
C |
|
|
3 |
802d |
817d
|
25/29 |
751d |
8d975c15c0cd
ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
|
|
INFO: task hung in rtnl_lock (3)
net
|
1 |
C |
|
|
128 |
756d |
1108d
|
25/29 |
751d |
3871aa01e1a7
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
|
|
WARNING in inet_csk_destroy_sock (5)
net
|
-1 |
|
|
|
1 |
816d |
816d
|
25/29 |
751d |
66b60b0c8c4a
dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().
|
|
possible deadlock in j1939_session_activate
can
|
4 |
C |
done |
done |
67 |
803d |
1637d
|
25/29 |
751d |
6cdedc18ba7b
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
|
|
WARNING in bcm5974_start_traffic/usb_submit_urb
input
|
-1 |
C |
error |
|
41 |
755d |
2351d
|
25/29 |
751d |
2b9c3eb32a69
Input: bcm5974 - check endpoint type before starting traffic
|
|
WARNING in ieee80211_bss_info_change_notify (2)
wireless
|
-1 |
C |
done |
|
1392 |
772d |
917d
|
25/29 |
751d |
f78c1375339a
wifi: nl80211: reject iftype change with mesh ID change
|
|
WARNING in btrfs_issue_discard
btrfs
|
-1 |
C |
done |
|
9 |
809d |
822d
|
25/29 |
751d |
a208b3f132b4
btrfs: don't warn if discard range is not aligned to sector
|
|
WARNING in __nf_unregister_net_hook (6)
netfilter
|
-1 |
C |
error |
|
2 |
795d |
912d
|
25/29 |
751d |
bccebf647017
netfilter: nf_tables: set dormant flag on hook register failure
|
|
memory leak in sctp_packet_transmit
sctp
|
3 |
C |
|
|
14 |
876d |
2094d
|
25/29 |
751d |
4e45170d9acc
net: sctp: fix skb leak in sctp_inq_free()
|
|
KMSAN: uninit-value in geneve_xmit (2)
net
|
7 |
C |
|
|
12 |
756d |
833d
|
25/29 |
752d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
WARNING in ip6gre_tunnel_xmit
net
|
-1 |
C |
done |
|
2 |
781d |
781d
|
25/29 |
752d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
KASAN: use-after-free Read in __skb_flow_dissect (3)
net
|
19 |
C |
|
|
1 |
826d |
836d
|
25/29 |
752d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
memory leak in add_block_entry
btrfs
|
3 |
C |
|
|
4 |
849d |
1041d
|
25/29 |
752d |
f03e274a8b29
btrfs: ref-verify: free ref cache before clearing mount opt
|
|
INFO: task hung in nsim_create
net
|
1 |
|
|
|
1 |
800d |
800d
|
25/29 |
752d |
ba5e1272142d
netdevsim: avoid potential loop in nsim_dev_trap_report_work()
|
|
KMSAN: uninit-value in af_alg_free_sg (2)
crypto
|
7 |
|
|
|
1 |
829d |
823d
|
25/29 |
752d |
24c890dd712f
crypto: algif_hash - Remove bogus SGL free on zero-length error path
|
|
INFO: task hung in addrconf_dad_work (3)
net
|
1 |
C |
|
|
185 |
765d |
807d
|
25/29 |
752d |
ba5e1272142d
netdevsim: avoid potential loop in nsim_dev_trap_report_work()
|
|
KASAN: invalid-access Read in neon_aes_ctr_encrypt
arm
crypto
|
17 |
C |
|
|
3 |
779d |
790d
|
25/29 |
752d |
1c0cf6d19690
crypto: arm64/neonbs - fix out-of-bounds access on short input
|
|
memory leak in add_tree_block
btrfs
|
3 |
C |
|
|
5 |
834d |
1235d
|
25/29 |
752d |
f03e274a8b29
btrfs: ref-verify: free ref cache before clearing mount opt
|
|
KASAN: slab-out-of-bounds Read in ntfs_listxattr (2)
ntfs3
|
17 |
C |
error |
|
15 |
800d |
842d
|
25/29 |
752d |
731ab1f98288
fs/ntfs3: Fix oob in ntfs_listxattr
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (2)
net
|
19 |
C |
|
|
126 |
752d |
804d
|
25/29 |
752d |
661779e1fcaf
netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
|
|
INFO: task hung in unix_dgram_sendmsg
net
|
1 |
C |
done |
|
36 |
778d |
797d
|
25/29 |
752d |
25236c91b5ab
af_unix: Fix task hung while purging oob_skb in GC.
|
|
upstream boot error: can't ssh into the instance (16)
|
-1 |
|
|
|
415 |
775d |
828d
|
25/29 |
752d |
f6564fce256a
mm, kmsan: fix infinite recursion due to RCU critical section
|
|
KMSAN: uninit-value in __llc_lookup_established
net
|
7 |
C |
|
|
46 |
820d |
863d
|
25/29 |
752d |
e3f9bed9bee2
llc: Drop support for ETH_P_TR_802_2.
|
|
INFO: task hung in migrate_pages_batch
nilfs
|
1 |
C |
|
|
22 |
797d |
809d
|
25/29 |
752d |
38296afe3c6e
nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
|
|
BUG: unable to handle kernel NULL pointer dereference in crypto_arc4_crypt
crypto
|
10 |
C |
done |
|
4 |
810d |
808d
|
25/29 |
752d |
69fba378edca
crypto: cbc - Ensure statesize is zero
|
|
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry
jfs
|
19 |
C |
error |
done |
29 |
805d |
1298d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in reiserfs_dirty_inode
fs
|
4 |
C |
done |
done |
519 |
807d |
1235d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in ntfs_lookup_inode_by_name
ntfs3
|
19 |
C |
error |
done |
17 |
768d |
1203d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in do_open_execat
ntfs3
|
-1 |
C |
error |
done |
12 |
812d |
972d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in udf_finalize_lvid
udf
|
19 |
C |
inconclusive |
done |
39 |
829d |
1032d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in gfs2_withdraw
gfs2
|
5 |
C |
error |
done |
182 |
829d |
949d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in ntfs_iget
ntfs3
|
-1 |
C |
error |
done |
9 |
810d |
1051d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in ntfs_iget5
ntfs3
|
19 |
C |
done |
done |
3633 |
821d |
1455d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in udf_free_blocks
udf
|
19 |
C |
done |
done |
2 |
831d |
1041d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: trying to register non-static key in txEnd
jfs
|
-1 |
C |
inconclusive |
done |
20 |
830d |
928d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KMSAN: uninit-value in __crc32c_le_base (3)
xfs
|
7 |
|
|
|
15526 |
767d |
1085d
|
25/29 |
757d |
0573676fdde7
xfs: initialise di_crc in xfs_log_dinode
|
|
KASAN: use-after-free Read in ntfs_read_folio
ntfs3
|
19 |
C |
error |
done |
12 |
818d |
1126d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in hfs_mdb_commit
hfs
|
1 |
C |
error |
done |
25 |
808d |
1186d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in map_mft_record
ntfs3
|
4 |
C |
error |
done |
845 |
806d |
1275d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in ext4_xattr_inode_iget (2)
ext4
|
4 |
C |
done |
done |
22 |
822d |
1015d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key
hfs
|
21 |
C |
error |
done |
4 |
820d |
1043d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in jfs_readdir
jfs
|
19 |
C |
error |
done |
17 |
830d |
1190d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in __bread_gfp
fs
|
5 |
C |
error |
done |
359 |
833d |
1234d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in ntfs_iget
ntfs3
|
-1 |
C |
error |
done |
73 |
771d |
1148d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in reiserfs_sync_fs
fs
|
1 |
C |
error |
done |
22 |
833d |
1212d
|
25/29 |
757d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (3)
kvm
|
-1 |
C |
inconclusive |
done |
44 |
821d |
881d
|
25/29 |
770d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
WARNING in gfs2_check_blk_type
gfs2
|
-1 |
C |
error |
done |
67 |
818d |
1221d
|
25/29 |
773d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in perf_event_open
perf
|
-1 |
C |
done |
done |
43004 |
833d |
848d
|
25/29 |
779d |
7e2c1e4b34f0
perf: Fix perf_event_validate_size() lockdep splat
|
|
KASAN: slab-out-of-bounds Write in udf_adinicb_writepage
udf
|
21 |
C |
error |
done |
5 |
831d |
1119d
|
25/29 |
780d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in lmLogClose (2)
jfs
|
1 |
C |
inconclusive |
done |
5 |
827d |
919d
|
25/29 |
783d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel panic: stack is corrupted in run_unpack_ex
ntfs3
|
2 |
C |
done |
done |
3 |
837d |
1195d
|
25/29 |
783d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in common_perm_cond
ext4
apparmor
|
2 |
C |
error |
done |
1 |
837d |
1002d
|
25/29 |
784d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in udf_process_sequence
udf
|
15 |
C |
error |
done |
6 |
831d |
990d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in __fget_files (2)
fs
|
2 |
C |
done |
done |
1 |
840d |
836d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __generic_file_fsync (3)
exfat
|
1 |
C |
inconclusive |
done |
8 |
838d |
1345d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ext4_discard_allocated_blocks
ext4
|
-1 |
C |
inconclusive |
done |
4 |
831d |
948d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in write_cache_pages (3)
gfs2
|
1 |
C |
done |
done |
10 |
830d |
955d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __get_metapage
jfs
|
1 |
C |
error |
done |
32 |
829d |
1283d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Write in udf_close_lvid
udf
|
22 |
C |
done |
|
144 |
830d |
1424d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in ext4_search_dir
prio:low
ext4
|
19 |
C |
error |
done |
20 |
830d |
1071d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel paging request in reiserfs_readdir_inode
fs
|
19 |
C |
error |
done |
11 |
831d |
1197d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in entry_points_to_object
fs
|
-1 |
C |
done |
done |
21 |
831d |
876d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel panic: stack is corrupted in __lock_acquire (5)
ntfs3
|
2 |
C |
error |
done |
18 |
830d |
1207d
|
25/29 |
785d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txLock
jfs
|
-1 |
C |
inconclusive |
done |
10 |
832d |
950d
|
25/29 |
790d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in lock_two_nondirectories
ext4
|
-1 |
C |
|
|
3 |
842d |
853d
|
25/29 |
790d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in utf8nlookup
exfat
ext4
|
2 |
C |
done |
done |
3 |
832d |
939d
|
25/29 |
790d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in ext4_enable_quotas
ext4
|
-1 |
C |
error |
done |
16 |
834d |
1015d
|
25/29 |
790d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: out-of-bounds Read in ext4_ext_remove_space
ext4
|
17 |
C |
error |
done |
8 |
833d |
1007d
|
25/29 |
790d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list
fs
|
17 |
C |
error |
done |
100 |
834d |
1266d
|
25/29 |
790d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in hfsplus_read_wrapper
hfs
|
19 |
C |
inconclusive |
done |
7 |
841d |
1064d
|
25/29 |
791d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KMSAN: uninit-value in io_rw_fail (2)
io-uring
|
7 |
|
|
|
1 |
801d |
797d
|
25/29 |
792d |
0a535eddbe0d
io_uring/rw: ensure io->bytes_done is always initialized
|
|
KASAN: null-ptr-deref Read in ida_free (4)
bluetooth
|
11 |
C |
done |
done |
29 |
845d |
884d
|
25/29 |
792d |
af73483f4e8b
ida: Fix crash in ida_free when the bitmap is empty
|
|
KASAN: use-after-free Read in set_de_name_and_namelen
fs
|
19 |
C |
error |
done |
15 |
837d |
1238d
|
25/29 |
793d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dtSearch
jfs
|
19 |
C |
error |
done |
33 |
836d |
1299d
|
25/29 |
793d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KMSAN: uninit-value in tcp_recvmsg (3)
net
|
7 |
|
|
|
1 |
838d |
825d
|
25/29 |
797d |
78fbb92af27d
nbd: always initialize struct msghdr completely
|
|
UBSAN: shift-out-of-bounds in dbSplit
jfs
|
-1 |
C |
error |
done |
7 |
836d |
1290d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in hci_rfkill_set_block
bluetooth
|
4 |
C |
done |
|
3391 |
833d |
906d
|
25/29 |
801d |
769bf60e17ee
Bluetooth: Fix deadlock in vhci_send_frame
|
|
KASAN: use-after-free Read in udf_sync_fs
udf
|
19 |
C |
done |
done |
37 |
840d |
978d
|
25/29 |
803d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in ext4_convert_inline_data_nolock
ext4
|
19 |
C |
error |
done |
7 |
839d |
1116d
|
25/29 |
803d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING: ODEBUG bug in netdev_run_todo
batman
|
-1 |
C |
error |
error |
5467 |
1027d |
2081d
|
25/29 |
803d |
abac3ac97fe8
batman-adv: Broken sync while rescheduling delayed work
|
|
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry
fs
|
19 |
C |
error |
done |
25 |
840d |
1276d
|
25/29 |
804d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in ext4_handle_clustersize (2)
ext4
|
-1 |
C |
error |
done |
3 |
841d |
845d
|
25/29 |
804d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in seq_read_iter (2)
overlayfs
|
4 |
C |
done |
done |
14 |
842d |
1002d
|
25/29 |
804d |
da40448ce4eb
fs: move file_start_write() into direct_splice_actor()
|
|
KMSAN: uninit-value in io_rw_fail
io-uring
|
7 |
C |
|
|
25 |
807d |
823d
|
25/29 |
804d |
0a535eddbe0d
io_uring/rw: ensure io->bytes_done is always initialized
|
|
KASAN: slab-use-after-free Write in fib6_purge_rt
net
|
22 |
|
|
|
1 |
875d |
875d
|
25/29 |
805d |
5a08d0065a91
ipv6: add debug checks in fib6_info_release()
|
|
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2)
net
|
7 |
C |
|
|
17 |
807d |
832d
|
25/29 |
805d |
d375b98e0248
ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
|
|
riscv/fixes boot error: failed to read from qemu: EOF
|
-1 |
|
|
|
54 |
861d |
870d
|
25/29 |
805d |
420370f3ae3d
riscv: Check if the code to patch lies in the exit section
|
|
kernel BUG in ntfs_truncate
ntfs3
|
-1 |
C |
error |
done |
4 |
842d |
1200d
|
25/29 |
806d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in hfsplus_find_init
hfs
|
1 |
C |
error |
done |
1 |
848d |
942d
|
25/29 |
806d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in reiserfs_get_unused_objectid
fs
|
19 |
C |
inconclusive |
done |
3 |
842d |
1115d
|
25/29 |
806d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in timerqueue_del (2)
kernel
|
2 |
C |
done |
done |
3 |
848d |
989d
|
25/29 |
806d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in udf_new_block
udf
|
-1 |
C |
inconclusive |
done |
31 |
842d |
1126d
|
25/29 |
806d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in __mark_chain_precision (3)
bpf
|
-1 |
C |
done |
|
19 |
837d |
858d
|
25/29 |
806d |
482d548d40b0
bpf: handle fake register spill to stack with BPF_ST_MEM instruction
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
C |
|
|
63 |
832d |
827d
|
25/29 |
806d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
KASAN: use-after-free Read in ext4_find_extent (3)
prio:low
ext4
|
19 |
C |
error |
done |
31 |
842d |
1024d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in ext4_write_inline_data_end
ext4
|
-1 |
C |
error |
done |
32 |
843d |
1141d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in path_mount (2)
jfs
|
1 |
C |
error |
done |
8 |
843d |
971d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in crc_itu_t
udf
|
19 |
C |
inconclusive |
done |
50 |
843d |
1293d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in scatterwalk_copychunks (5)
crypto
|
2 |
C |
done |
|
2920 |
835d |
842d
|
25/29 |
807d |
744e1885922a
crypto: scomp - fix req->dst buffer overflow
|
|
KASAN: slab-out-of-bounds Write in squashfs_readahead (2)
squashfs
|
21 |
C |
done |
|
2 |
890d |
886d
|
25/29 |
807d |
12427de9439d
Squashfs: fix variable overflow triggered by sysbot
|
|
KASAN: slab-use-after-free Read in nla_find
bpf
net
|
19 |
C |
done |
|
4 |
851d |
850d
|
25/29 |
807d |
2130c519a401
bpf: Use nla_ok() instead of checking nla_len directly
|
|
KASAN: slab-use-after-free Read in nfc_alloc_send_skb
net
nfc
|
19 |
C |
error |
|
3 |
860d |
889d
|
25/29 |
807d |
c95f919567d6
nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
|
|
KASAN: slab-use-after-free Read in jfs_evict_inode
jfs
|
19 |
syz |
error |
|
1 |
906d |
902d
|
25/29 |
807d |
e0e1958f4c36
jfs: fix uaf in jfs_evict_inode
|
|
kernel BUG in move_pages
mm
|
-1 |
C |
done |
|
2 |
830d |
826d
|
25/29 |
807d |
5d4747a6cc8e
userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
|
|
general protection fault in bio_first_folio
block
|
2 |
C |
done |
|
683 |
818d |
852d
|
25/29 |
807d |
7bed6f3d08b7
block: Fix iterating over an empty bio with bio_for_each_folio_all
|
|
general protection fault in bfs_get_block (2)
bfs
|
2 |
C |
error |
done |
2 |
854d |
873d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in arc4_crypt
crypto
|
17 |
C |
done |
|
6 |
839d |
850d
|
25/29 |
807d |
37c6fc323a81
crypto: skcipher - Pass statesize for simple lskcipher instances
|
|
WARNING in get_pte_pfn
mm
io-uring
|
-1 |
C |
error |
|
2 |
836d |
846d
|
25/29 |
807d |
c28ac3c7eb94
mm/mglru: skip special VMAs in lru_gen_look_around()
|
|
UBSAN: array-index-out-of-bounds in diNewExt
jfs
|
15 |
C |
inconclusive |
|
31 |
807d |
858d
|
25/29 |
807d |
49f9637aafa6
jfs: fix array-index-out-of-bounds in diNewExt
|
|
INFO: task hung in gfs2_gl_hash_clear (3)
gfs2
|
1 |
C |
error |
done |
80 |
846d |
1234d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: corrupted list in efivar_entry_remove
efi
|
8 |
C |
|
|
104 |
808d |
1329d
|
25/29 |
807d |
cdb46a8aefbf
efivarfs: Move efivarfs list into superblock s_fs_info
|
|
KCSAN: data-race in udpv6_sendmsg / udpv6_sendmsg (6)
net
|
6 |
|
|
|
1 |
829d |
825d
|
25/29 |
807d |
482521d8e0c6
udp: annotate data-races around up->pending
|
|
general protection fault in dtSplitUp
jfs
|
2 |
C |
error |
done |
2 |
857d |
1293d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ip6_route_multipath_add
net
|
-1 |
|
|
|
1 |
857d |
857d
|
25/29 |
807d |
a3c205d0560f
ipv6: do not check fib6_has_expires() in fib6_info_release()
|
|
BUG: unable to handle kernel NULL pointer dereference in __bio_release_pages
block
|
10 |
C |
|
|
6 |
823d |
821d
|
25/29 |
807d |
7bed6f3d08b7
block: Fix iterating over an empty bio with bio_for_each_folio_all
|
|
general protection fault in tomoyo_check_acl (3)
hfs
|
2 |
C |
inconclusive |
done |
1 |
857d |
1014d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in hfsc_tcf_block
net
|
2 |
C |
done |
|
1020 |
830d |
837d
|
25/29 |
807d |
94e2557d086a
net: sched: move block device tracking into tcf_block_get/put_ext()
|
|
possible deadlock in chown_common
fs
|
4 |
C |
error |
done |
22 |
815d |
1285d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in __udf_add_aext (2)
udf
|
-1 |
syz |
error |
done |
6 |
857d |
1038d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in glock_hash_walk
gfs2
|
5 |
C |
done |
done |
31 |
853d |
954d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in diWrite
jfs
|
15 |
C |
error |
done |
13 |
854d |
1273d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in pvr2_context_set_notify
usb
pvrusb2
|
22 |
C |
|
|
3814 |
807d |
1013d
|
25/29 |
807d |
ded85b0c0edd
media: pvrusb2: fix use after free on context disconnection
|
|
BUG: sleeping function called from invalid context in gfs2_make_fs_ro
gfs2
|
5 |
C |
error |
done |
1 |
853d |
996d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in kill_f2fs_super
f2fs
|
19 |
C |
done |
|
2331 |
820d |
825d
|
25/29 |
807d |
c919330dd578
f2fs: fix double free of f2fs_sb_info
|
|
kernel BUG in balance_leaf
fs
|
-1 |
C |
error |
done |
16 |
847d |
1198d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING: locking bug in corrupted (2)
bpf
|
4 |
C |
done |
done |
1 |
857d |
1011d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in mptcp_check_listen_stop
mptcp
|
-1 |
C |
done |
|
47 |
807d |
855d
|
25/29 |
807d |
4c0288299fd0
mptcp: prevent tcp diag from closing listener subflows
|
|
WARNING in __sk_msg_free
bpf
net
|
-1 |
C |
done |
|
4 |
833d |
832d
|
25/29 |
807d |
dc9dfc8dc629
net: tls, fix WARNIING in __sk_msg_free
|
|
possible deadlock in pipe_write
fs
|
4 |
C |
inconclusive |
|
181 |
809d |
1488d
|
25/29 |
807d |
055ca8355991
fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
|
|
KMSAN: uninit-value in z_erofs_lz4_decompress (2)
erofs
|
7 |
C |
|
|
33 |
808d |
841d
|
25/29 |
807d |
496530c7c1df
erofs: avoid debugging output for (de)compressed data
|
|
INFO: trying to register non-static key in do_mpage_readpage
ntfs3
|
-1 |
C |
error |
done |
24 |
851d |
1205d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in direntry_check_right
fs
|
-1 |
C |
done |
done |
2 |
845d |
889d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dsa_user_changeupper
net
|
17 |
C |
done |
|
1303 |
814d |
828d
|
25/29 |
807d |
844f104790bd
net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
|
|
WARNING in __folio_rmap_sanity_checks
mm
|
-1 |
C |
done |
|
168 |
829d |
834d
|
25/29 |
807d |
9c5938694cd0
mm/rmap: silence VM_WARN_ON_FOLIO() in __folio_rmap_sanity_checks()
|
|
WARNING in ea_get
jfs
|
-1 |
C |
error |
done |
10 |
849d |
1295d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
riscv/fixes boot error: kernel BUG in __phys_addr_symbol
riscv
|
-1 |
|
|
|
24 |
848d |
860d
|
25/29 |
807d |
c29fc621e1a4
riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping
|
|
INFO: task hung in find_inode_fast (2)
ext4
|
1 |
C |
unreliable |
done |
10 |
854d |
1008d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in search_by_key (2)
fs
|
17 |
C |
|
|
4435 |
829d |
1260d
|
25/29 |
807d |
dd8f87f21dc3
reiserfs: fix uninit-value in comp_keys
|
|
UBSAN: array-index-out-of-bounds in dtSplitRoot
jfs
|
15 |
C |
error |
inconclusive |
2 |
951d |
1279d
|
25/29 |
807d |
27e56f59bab5
UBSAN: array-index-out-of-bounds in dtSplitRoot
|
|
possible deadlock in ntfs_set_state
ntfs3
|
4 |
C |
done |
done |
1360 |
819d |
1212d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txEnd
jfs
|
-1 |
C |
inconclusive |
done |
6 |
817d |
1031d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING: suspicious RCU usage in __cfg80211_bss_update
wireless
|
4 |
C |
done |
|
92 |
832d |
834d
|
25/29 |
807d |
1184950e341c
wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
|
|
general protection fault in qdisc_create
net
|
10 |
C |
done |
|
2821 |
829d |
837d
|
25/29 |
807d |
94e2557d086a
net: sched: move block device tracking into tcf_block_get/put_ext()
|
|
BUG: unable to handle kernel paging request in lookup_open
ntfs3
|
8 |
C |
error |
done |
1 |
856d |
1001d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in gfs2_rgrp_dump
gfs2
|
10 |
C |
done |
|
9 |
863d |
1207d
|
25/29 |
807d |
8877243beafa
gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
|
|
general protection fault in __hrtimer_run_queues (3)
kernel
|
17 |
C |
error |
done |
2 |
858d |
1023d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in dev_watchdog (2)
net
|
-1 |
C |
inconclusive |
|
6791 |
809d |
2208d
|
25/29 |
807d |
e316dd1cf135
net: don't dump stack on queue timeout
|
|
WARNING in kvm_mmu_notifier_change_pte
kvm
|
-1 |
C |
inconclusive |
|
2 |
845d |
855d
|
25/29 |
807d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
WARNING: refcount bug in tcp_sigpool_alloc_ahash
net
|
13 |
|
|
|
1 |
848d |
848d
|
25/29 |
807d |
b901a4e27694
net/tcp_sigpool: Use kref_get_unless_zero()
|
|
possible deadlock in stack_depot_put
kasan
|
4 |
|
|
|
23 |
851d |
873d
|
25/29 |
807d |
a414d4286f34
kasan: handle concurrent kasan_record_aux_stack calls
|
|
KMSAN: uninit-value in netif_skb_features (2)
net
|
7 |
C |
|
|
9 |
851d |
939d
|
25/29 |
807d |
9181d6f8a2bb
net: add more sanity check in virtio_net_hdr_to_skb()
|
|
INFO: task hung in hwrng_fillfn
crypto
|
1 |
C |
error |
|
27 |
809d |
873d
|
25/29 |
807d |
78aafb3884f6
hwrng: core - Fix page fault dead lock on mmap-ed hwrng
|
|
kernel BUG in ext4_split_extent_at (2)
ext4
|
-1 |
C |
error |
done |
3 |
843d |
1038d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in gfs2_rindex_update
gfs2
|
10 |
C |
error |
done |
4 |
852d |
1211d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ip6_route_info_create
net
|
-1 |
C |
done |
|
241 |
857d |
861d
|
25/29 |
807d |
a3c205d0560f
ipv6: do not check fib6_has_expires() in fib6_info_release()
|
|
general protection fault in page_pool_unlist
net
|
2 |
C |
done |
|
648 |
867d |
869d
|
25/29 |
807d |
f9893fdac319
net: page_pool: fix general protection fault in page_pool_unlist
|
|
KMSAN: uninit-value in shrinker_alloc
mm
|
7 |
syz |
|
|
2 |
857d |
835d
|
25/29 |
807d |
7fba9420b726
mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
|
|
possible deadlock in __run_timers
kernel
|
4 |
C |
error |
done |
1 |
855d |
851d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbJoin
jfs
|
-1 |
C |
error |
|
3 |
900d |
1284d
|
25/29 |
807d |
cca974daeb6c
jfs: fix shift-out-of-bounds in dbJoin
|
|
KCSAN: data-race in ipv6_mc_down / mld_ifc_work (2)
net
|
6 |
|
|
|
2 |
819d |
825d
|
25/29 |
807d |
2e7ef287f07c
ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
jfs
|
15 |
C |
error |
error |
41 |
821d |
1298d
|
25/29 |
807d |
9862ec7ac1cb
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
74ecdda68242
jfs: fix array-index-out-of-bounds in dbAdjTree
|
|
KASAN: slab-use-after-free Read in destroy_device_list
f2fs
|
19 |
C |
done |
|
3597 |
820d |
824d
|
25/29 |
807d |
c919330dd578
f2fs: fix double free of f2fs_sb_info
|
|
kernel BUG in gfs2_quota_cleanup
gfs2
|
-1 |
C |
done |
|
4 |
849d |
949d
|
25/29 |
807d |
71733b492200
gfs2: fix kernel BUG in gfs2_quota_cleanup
|
|
KMSAN: uninit-value in validate_xmit_skb
net
|
7 |
C |
|
|
21 |
808d |
826d
|
25/29 |
807d |
9181d6f8a2bb
net: add more sanity check in virtio_net_hdr_to_skb()
|
|
kernel BUG in flush_journal_list
exfat
|
-1 |
C |
done |
done |
3 |
851d |
1039d
|
25/29 |
807d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in htb_tcf_block
net
|
2 |
C |
done |
|
885 |
829d |
837d
|
25/29 |
807d |
94e2557d086a
net: sched: move block device tracking into tcf_block_get/put_ext()
|
|
KMSAN: uninit-value in ppp_sync_receive
ppp
|
7 |
|
|
|
2 |
884d |
883d
|
25/29 |
808d |
719639853d88
tty: Fix uninit-value access in ppp_sync_receive()
|
|
INFO: trying to register non-static key in debugfs_file_get
fs
|
-1 |
|
|
|
289 |
847d |
847d
|
25/29 |
814d |
88ac06a9f938
Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
|
|
WARNING in debugfs_file_get
fs
|
-1 |
|
|
|
239 |
848d |
865d
|
25/29 |
814d |
88ac06a9f938
Revert "debugfs: annotate debugfs handlers vs. removal with lockdep"
|
|
kernel BUG in prog_array_map_poke_run
bpf
|
-1 |
C |
done |
done |
35 |
850d |
891d
|
25/29 |
815d |
4b7de801606e
bpf: Fix prog_array_map_poke_run map poke update
|
|
WARNING in rose_device_event
hams
|
-1 |
|
|
|
1 |
855d |
855d
|
25/29 |
815d |
64b8bc7d5f14
net/rose: fix races in rose_kill_by_device()
|
|
general protection fault in skb_segment (4)
net
|
8 |
C |
error |
|
4 |
851d |
859d
|
25/29 |
816d |
23d05d563b7e
net: prevent mss overflow in skb_segment()
|
|
Internal error in fib6_table_lookup
net
|
2 |
|
|
|
2 |
884d |
885d
|
25/29 |
816d |
18f039428c7d
ipvlan: add ipvlan_route_v6_outbound() helper
|
|
KCSAN: data-race in wg_xmit / wg_xmit (4)
wireguard
|
6 |
|
|
|
1 |
889d |
883d
|
25/29 |
816d |
93da8d75a665
wireguard: use DEV_STATS_INC()
|
|
Internal error in fib6_rule_lookup
net
|
2 |
|
|
|
2 |
887d |
895d
|
25/29 |
816d |
18f039428c7d
ipvlan: add ipvlan_route_v6_outbound() helper
|
|
KASAN: slab-use-after-free Read in ife_tlv_meta_decode
net
|
19 |
|
|
|
1 |
862d |
860d
|
25/29 |
816d |
19391a2ca98b
net: sched: ife: fix potential use-after-free
|
|
WARNING in fib6_add (5)
net
|
-1 |
C |
done |
|
6 |
861d |
1024d
|
25/29 |
816d |
75475bb51e78
ipv6: fix potential NULL deref in fib6_add()
|
|
KASAN: slab-use-after-free Read in btrfs_qgroup_account_extent
btrfs
|
22 |
C |
done |
|
40 |
885d |
896d
|
25/29 |
817d |
6c8e69e4a702
btrfs: fix race between accounting qgroup extents and removing a qgroup
|
|
KASAN: slab-out-of-bounds Read in dns_resolver_preparse
net
|
17 |
C |
done |
|
46 |
841d |
854d
|
25/29 |
817d |
1997b3cb4217
keys, dns: Fix missing size check of V1 server-list header
|
|
WARNING in rate_control_rate_init (2)
wireless
|
-1 |
C |
done |
|
9 |
848d |
1019d
|
25/29 |
817d |
c1393c132b90
wifi: mac80211: check if the existing link config remains unchanged
|
|
general protection fault in dccp_write_xmit (2)
net
|
8 |
C |
done |
|
32 |
849d |
904d
|
25/29 |
817d |
cac23b7d7627
net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
|
|
WARNING in ieee80211_rfkill_poll
wireless
|
-1 |
C |
|
|
684 |
857d |
890d
|
25/29 |
817d |
8e2f6f236621
wifi: cfg80211: lock wiphy mutex for rfkill poll
|
|
general protection fault in d_path
integrity
overlayfs
|
2 |
C |
done |
|
210 |
874d |
1016d
|
25/29 |
817d |
8a924db2d7b5
fs: Pass AT_GETATTR_NOSEC flag to getattr interface function
|
|
KASAN: null-ptr-deref Write in unix_stream_bpf_update_proto
bpf
net
|
12 |
C |
done |
|
54 |
838d |
868d
|
25/29 |
817d |
8d6650646ce4
bpf: syzkaller found null ptr deref in unix_bpf proto add
|
|
memory leak in skb_copy (2)
nfc
net
|
3 |
syz |
|
|
3 |
889d |
1007d
|
25/29 |
817d |
84d2db91f14a
nfc: virtual_ncidev: Add variable to check if ndev is running
|
|
WARNING in squashfs_read_data
squashfs
|
-1 |
C |
error |
|
2 |
887d |
883d
|
25/29 |
817d |
eb66b8abae98
squashfs: squashfs_read_data need to check if the length is 0
|
|
general protection fault in hugetlb_vma_lock_write
mm
|
2 |
C |
done |
|
110 |
860d |
900d
|
25/29 |
817d |
187da0f8250a
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
|
|
general protection fault in tls_merge_open_record
net
|
2 |
syz |
unreliable |
|
5 |
899d |
899d
|
25/29 |
817d |
53f2cb491b50
tls: fix NULL deref on tls_sw_splice_eof() with empty record
|
|
WARNING in pagemap_scan_pmd_entry
fs
|
-1 |
C |
inconclusive |
|
48 |
861d |
883d
|
25/29 |
817d |
0dff1b407def
mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
|
|
WARNING in __alloc_skb (2)
ppp
|
-1 |
C |
done |
|
2 |
872d |
886d
|
25/29 |
817d |
c0a2a1b0d631
ppp: limit MRU to 64K
|
|
WARNING in nilfs_sufile_set_segment_usage
nilfs
|
-1 |
C |
inconclusive |
|
341 |
876d |
1294d
|
25/29 |
817d |
675abf8df135
nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
|
|
WARNING in unmap_page_range (2)
mm
|
-1 |
C |
done |
|
2112 |
857d |
883d
|
25/29 |
817d |
4980e837cab7
mm/pagemap: fix wr-protect even if PM_SCAN_WP_MATCHING not set
|
|
UBSAN: array-index-out-of-bounds in FSE_decompress_wksp_body_bmi2
btrfs
|
15 |
|
|
|
1 |
964d |
960d
|
25/29 |
817d |
77618db34645
zstd: Fix array-index-out-of-bounds UBSAN warning
|
|
memory leak in btrfs_ref_tree_mod
btrfs
|
3 |
syz |
|
|
1 |
979d |
975d
|
25/29 |
817d |
f91192cd6859
btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
|
|
general protection fault in autofs_fill_super
autofs
|
2 |
syz |
done |
|
7 |
876d |
885d
|
25/29 |
817d |
66917f85db60
autofs: add: new_inode check in autofs_fill_super()
|
|
general protection fault in __mptcp_set_connected
mptcp
|
2 |
|
|
|
2 |
888d |
892d
|
25/29 |
817d |
d109a7767273
mptcp: fix possible NULL pointer dereference on close
|
|
BUG: unable to handle kernel paging request in __pte_offset_map_lock
mm
|
8 |
C |
|
|
2 |
893d |
903d
|
25/29 |
817d |
9aa1345d66b8
mm: fix oops when filemap_map_pmd() without prealloc_pte
|
|
memory leak in ovl_parse_param
overlayfs
|
3 |
C |
|
|
1 |
890d |
886d
|
25/29 |
817d |
37f32f526438
ovl: fix memory leak in ovl_parse_param()
|
|
KMSAN: uninit-value in drm_mode_setcrtc
dri
|
7 |
C |
|
|
41 |
858d |
1034d
|
25/29 |
817d |
3823119b9c2b
drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
6e455f5dcdd1
drm/crtc: fix uninitialized variable use
|
|
WARNING in blk_mq_start_request
block
|
-1 |
C |
done |
|
29 |
875d |
891d
|
25/29 |
817d |
53f2bca26092
block/null_blk: Fix double blk_mq_start_request() warning
|
|
KASAN: slab-use-after-free Read in unix_stream_read_actor
net
|
19 |
C |
error |
|
6 |
871d |
887d
|
25/29 |
817d |
4b7b492615cf
af_unix: fix use-after-free in unix_stream_read_actor()
|
|
WARNING in create_pending_snapshot
btrfs
|
-1 |
C |
done |
|
3 |
884d |
889d
|
25/29 |
817d |
8049ba5d0a28
btrfs: do not abort transaction if there is already an existing qgroup
|
|
general protection fault in ptp_ioctl
net
|
2 |
C |
done |
|
8 |
892d |
893d
|
25/29 |
817d |
8a4f030dbced
ptp: Fixes a null pointer dereference in ptp_ioctl
|
|
kernel BUG in ip6gre_header (2)
net
|
-1 |
C |
|
|
2 |
916d |
931d
|
25/29 |
817d |
3cffa2ddc4d3
bonding: stop the device in bond_setup_by_slave()
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
C |
|
|
93 |
868d |
876d
|
25/29 |
817d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
WARNING in __kernel_write_iter
btrfs
|
-1 |
C |
inconclusive |
|
1149 |
868d |
1284d
|
25/29 |
817d |
0ac1d13a55eb
btrfs: send: ensure send_fd is writable
|
|
memory leak in btrfs_add_delayed_tree_ref
btrfs
|
3 |
C |
|
|
6 |
888d |
892d
|
25/29 |
817d |
609d99379736
btrfs: fix qgroup record leaks when using simple quotas
|
|
WARNING in ext4_dio_write_end_io
ext4
|
-1 |
C |
done |
|
2 |
877d |
876d
|
25/29 |
817d |
619f75dae2cf
ext4: fix warning in ext4_dio_write_end_io()
|
|
KASAN: slab-use-after-free Read in iommufd_vfio_ioas
iommu
|
19 |
C |
done |
|
4 |
878d |
896d
|
25/29 |
817d |
6f9c4d8c468c
iommufd: Do not UAF during iommufd_put_object()
|
|
BUG: unable to handle kernel paging request in nsim_bpf
net
|
8 |
C |
|
|
3 |
874d |
889d
|
25/29 |
817d |
c0c6bde586c7
netdevsim: Don't accept device bound programs
|
|
WARNING in subflow_data_ready
mptcp
|
-1 |
|
|
|
42 |
820d |
904d
|
25/29 |
817d |
4fd19a307016
mptcp: fix inconsistent state on fastopen race
|
|
BUG: Dentry still in use in unmount
f2fs
|
-1 |
C |
done |
|
58 |
852d |
1329d
|
25/29 |
817d |
413ba91089c7
ovl: fix dentry reference leak after changes to underlying layers
|
|
kernel BUG in ipgre_header
net
|
-1 |
C |
|
|
4 |
866d |
881d
|
25/29 |
817d |
3cffa2ddc4d3
bonding: stop the device in bond_setup_by_slave()
|
|
KCSAN: data-race in virtnet_poll / virtnet_stats (2)
net
virt
|
6 |
|
|
|
1 |
936d |
934d
|
25/29 |
822d |
61217d8f6360
virtio_net: use u64_stats_t infra to avoid data-races
|
|
KASAN: use-after-free Read in j1939_session_get_by_addr
|
19 |
C |
done |
error |
66 |
2342d |
2354d
|
25/29 |
825d |
d966635b384b
can: j1939: transport: make sure the aborted session will be deactivated only once
|
|
KASAN: stack-out-of-bounds Read in tcp_inbound_hash
net
|
17 |
C |
done |
|
28 |
886d |
900d
|
25/29 |
827d |
02f0717e9835
net/tcp: fix possible out-of-bounds reads in tcp_hash_fail()
|
|
WARNING in dev_index_reserve (2)
net
|
-1 |
C |
done |
|
68 |
907d |
917d
|
25/29 |
827d |
cbfbfe3aee71
tun: prevent negative ifindex
|
|
possible deadlock in super_lock
ext4
|
4 |
C |
done |
done |
52 |
875d |
956d
|
25/29 |
828d |
fd1464105cb3
fs: Avoid grabbing sb->s_umount under bdev->bd_holder_lock
|
|
KMSAN: uninit-value in dccp_v6_err
net
|
7 |
C |
|
|
4 |
942d |
947d
|
25/29 |
829d |
6af289746a63
dccp: fix dccp_v4_err()/dccp_v6_err() again
|
|
KCSAN: data-race in fib_select_path / fib_select_path
net
|
6 |
|
|
|
1 |
925d |
912d
|
25/29 |
829d |
195374d89368
ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
|
|
UBSAN: array-index-out-of-bounds in xtSearch
jfs
|
15 |
C |
unreliable |
done |
122 |
872d |
1290d
|
25/29 |
829d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in txCommit
jfs
|
15 |
C |
error |
done |
396 |
896d |
1277d
|
25/29 |
829d |
a779ed754e52
jfs: define xtree root and page independently
|
|
inconsistent lock state in nf_connlabels_put
netfilter
|
4 |
C |
done |
|
4 |
903d |
904d
|
25/29 |
834d |
643d12603664
netfilter: conntrack: switch connlabels to atomic_t
|
|
KCSAN: data-race in xfrm_sk_policy_insert / xfrm_sk_policy_insert (3)
net
|
6 |
|
|
|
1 |
978d |
951d
|
25/29 |
834d |
3e4bc23926b8
xfrm: fix a data-race in xfrm_gen_index()
|
|
KASAN: use-after-free Read in __media_entity_remove_links
usb
media
|
19 |
C |
|
|
7 |
2215d |
2313d
|
25/29 |
834d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
KASAN: slab-out-of-bounds Read in ntfs_listxattr
ntfs3
|
17 |
C |
done |
|
70 |
847d |
1226d
|
25/29 |
846d |
8e7e27b2ee1e
fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
3c675ddffb17
ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
|
|
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (7)
net
|
6 |
|
|
|
1 |
930d |
926d
|
25/29 |
846d |
d0f95894fda7
netlink: annotate data-races around sk->sk_err
|
|
general protection fault in scatterwalk_copychunks (4)
net
crypto
|
19 |
C |
done |
done |
1341 |
846d |
1857d
|
25/29 |
846d |
cfaa80c91f6f
net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
|
|
WARNING in bpf_mprog_pos_after
bpf
|
-1 |
|
|
|
3 |
933d |
941d
|
25/29 |
847d |
f9b0e1088bbf
bpf, mprog: Fix maximum program check on mprog attachment
|
|
WARNING in page_copy_sane
fs
mm
|
-1 |
C |
done |
|
3 |
945d |
941d
|
25/29 |
847d |
a08c7193e4f1
mm/filemap: remove hugetlb special casing in filemap.c
|
|
general protection fault in ovl_encode_real_fh
overlayfs
|
2 |
C |
done |
|
3 |
927d |
927d
|
25/29 |
847d |
c7242a45cb8c
ovl: fix NULL pointer defer when encoding non-decodable lower fid
|
|
KASAN: slab-use-after-free Read in ptp_poll
net
|
19 |
|
|
|
1 |
891d |
891d
|
25/29 |
847d |
b714ca2ccf6a
ptp: ptp_read should not release queue
|
|
possible deadlock in __btrfs_release_delayed_node (3)
btrfs
|
4 |
syz |
|
|
2 |
965d |
962d
|
25/29 |
847d |
e110f8911ddb
btrfs: fix lockdep splat and potential deadlock after failure running delayed items
|
|
kernel BUG in btrfs_insert_delayed_dir_index
btrfs
|
-1 |
|
|
|
3 |
958d |
963d
|
25/29 |
847d |
8e7f82deb0c0
btrfs: fix race between reading a directory and adding entries to it
|
|
KMSAN: uninit-value in smsc95xx_reset
usb
|
7 |
C |
|
|
425 |
903d |
2068d
|
25/29 |
847d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
general protection fault in lbmStartIO
jfs
|
2 |
C |
done |
|
2 |
914d |
922d
|
25/29 |
847d |
6306ff39a7fc
jfs: fix log->bdev_handle null ptr deref in lbmStartIO
|
|
general protection fault in usb_hub_create_port_device
kernel
|
2 |
C |
done |
done |
4 |
948d |
954d
|
25/29 |
847d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
KASAN: slab-out-of-bounds Read in create_monitor_event
bluetooth
|
17 |
C |
done |
|
952 |
906d |
920d
|
25/29 |
847d |
18f547f3fc07
Bluetooth: hci_sock: fix slab oob read in create_monitor_event
|
|
WARNING: zero-size vmalloc in xskq_create
net
bpf
|
-1 |
|
|
|
20 |
917d |
925d
|
25/29 |
847d |
a12bbb3cccf0
xdp: Fix zero-size allocation warning in xskq_create()
|
|
WARNING: zero-size vmalloc in print_tainted
bpf
net
|
-1 |
C |
|
|
79 |
1040d |
1074d
|
25/29 |
847d |
a12bbb3cccf0
xdp: Fix zero-size allocation warning in xskq_create()
|
|
BUG: unable to handle kernel NULL pointer dereference in __io_remove_buffers (2)
io-uring
|
10 |
|
|
|
86 |
922d |
927d
|
25/29 |
847d |
f8024f1f36a3
io_uring/kbuf: don't allow registered buffer rings on highmem pages
|
|
UBSAN: shift-out-of-bounds in dbAlloc (2)
jfs
|
-1 |
|
|
|
1 |
945d |
941d
|
25/29 |
847d |
525b861a0081
fs/jfs: Add check for negative db_l2nbperpage
|
|
kernel BUG in __block_write_begin_int
block
|
-1 |
C |
done |
|
14 |
936d |
955d
|
25/29 |
847d |
4aa8cdd5e523
iomap: handle error conditions more gracefully in iomap_to_bh
|
|
WARNING in ext4_iomap_begin (2)
ext4
|
-1 |
C |
done |
|
7 |
920d |
1035d
|
25/29 |
847d |
ce56d21355cd
ext4: fix racy may inline data check in dio write
|
|
KASAN: use-after-free Read in bcmp
ntfs3
|
19 |
C |
done |
|
289 |
851d |
1009d
|
25/29 |
847d |
34e6552a442f
fs/ntfs3: Fix OOB read in ntfs_init_from_boot
|
|
general protection fault in serio_handle_event
kernel
|
2 |
C |
done |
done |
6 |
943d |
951d
|
25/29 |
847d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate
net
|
7 |
C |
|
|
981 |
849d |
2765d
|
25/29 |
847d |
484b4833c604
hsr: Fix uninit-value access in fill_frame_info()
|
|
UBSAN: array-index-out-of-bounds in diAlloc
jfs
|
15 |
C |
error |
inconclusive |
37 |
888d |
1297d
|
25/29 |
847d |
05d9ea1ceb62
jfs: fix array-index-out-of-bounds in diAlloc
|
|
KMSAN: uninit-value in __tipc_nl_bearer_enable (2)
tipc
|
7 |
C |
|
|
21 |
893d |
938d
|
25/29 |
847d |
19b3f72a41a8
tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
|
|
memory leak in kcm_sendmsg (2)
net
|
3 |
C |
|
|
1 |
961d |
995d
|
25/29 |
847d |
c821a88bd720
kcm: Fix memory leak in error path of kcm_sendmsg()
|
|
INFO: task hung in clean_bdev_aliases
block
|
1 |
C |
done |
|
201 |
929d |
954d
|
25/29 |
847d |
381c043233e6
iomap: add a workaround for racy i_size updates on block devices
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
C |
|
|
20713 |
888d |
902d
|
25/29 |
847d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
WARNING in skb_warn_bad_offload (4)
net
|
-1 |
C |
done |
|
1763 |
910d |
937d
|
25/29 |
847d |
fc8b2a619469
net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
|
|
UBSAN: array-index-out-of-bounds in io_setup_async_msg
io-uring
|
15 |
C |
done |
|
3 |
947d |
946d
|
25/29 |
847d |
c21a8027ad8a
io_uring/net: fix iter retargeting for selected buf
|
|
linux-next boot error: KASAN: slab-out-of-bounds Write in vhci_setup
usb
|
-1 |
|
|
|
34 |
912d |
916d
|
25/29 |
847d |
17d6b82d2d6d
usb/usbip: fix wrong data added to platform device
|
|
WARNING in bpf_mprog_attach
bpf
|
-1 |
C |
|
|
3 |
925d |
933d
|
25/29 |
847d |
f9b0e1088bbf
bpf, mprog: Fix maximum program check on mprog attachment
|
|
WARNING in __ip6_append_data
net
|
-1 |
C |
unreliable |
|
5 |
918d |
946d
|
25/29 |
847d |
9d4c75800f61
ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
|
|
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e (2)
ntfs3
|
10 |
C |
done |
|
4 |
915d |
987d
|
25/29 |
847d |
1f9b94af923c
fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e()
|
|
BUG: corrupted list in ptp_open
net
|
8 |
C |
done |
|
7 |
893d |
903d
|
25/29 |
847d |
1bea2c3e6df8
ptp: fix corrupted list in ptp_open
b714ca2ccf6a
ptp: ptp_read should not release queue
|
|
general protection fault in nfc_register_device
kernel
|
11 |
C |
done |
|
190 |
849d |
962d
|
25/29 |
847d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
possible deadlock in rfkill_send_events
wireless
|
4 |
C |
done |
|
22 |
910d |
920d
|
25/29 |
847d |
f2ac54ebf856
net: rfkill: reduce data->mtx scope in rfkill_fop_open
|
|
general protection fault in wpan_phy_register
kernel
|
2 |
C |
done |
done |
7 |
940d |
947d
|
25/29 |
847d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
BUG: Bad page map (7)
mm
|
-1 |
C |
done |
|
19 |
928d |
950d
|
25/29 |
847d |
ce60f27bb62d
mm: abstract moving to the next PFN
|
|
KMSAN: uninit-value in mii_nway_restart
usb
|
7 |
C |
|
|
2449 |
917d |
2508d
|
25/29 |
847d |
8f8abb863fa5
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
|
|
WARNING in bpf_mprog_pos_before
bpf
|
-1 |
C |
done |
|
26 |
925d |
933d
|
25/29 |
847d |
f9b0e1088bbf
bpf, mprog: Fix maximum program check on mprog attachment
|
|
KCSAN: data-race in xfrmi_xmit / xfrmi_xmit (3)
net
|
6 |
|
|
|
2 |
933d |
957d
|
25/29 |
847d |
f7c4e3e5d4f6
xfrm: interface: use DEV_STATS_INC()
|
|
kernel BUG in f2fs_put_super
f2fs
|
-1 |
|
|
|
2 |
924d |
954d
|
25/29 |
847d |
a4639380bbe6
f2fs: fix to drop meta_inode's page cache in f2fs_put_super()
|
|
general protection fault in io_get_cqe_overflow
io-uring
|
2 |
C |
done |
|
2 |
929d |
927d
|
25/29 |
847d |
1658633c0465
io_uring: ensure io_lockdep_assert_cq_locked() handles disabled rings
|
|
general protection fault in hci_register_dev
kernel
|
2 |
C |
unreliable |
done |
4 |
945d |
952d
|
25/29 |
847d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
WARNING in skb_checksum_help (2)
net
|
-1 |
C |
done |
|
3816 |
848d |
937d
|
25/29 |
847d |
fc8b2a619469
net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
|
|
divide error in iommufd_test
iommu
|
2 |
C |
done |
|
4 |
900d |
902d
|
25/29 |
847d |
2e22aac3ea9c
iommufd/selftest: Fix page-size check in iommufd_test_dirty()
|
|
KMSAN: uninit-value in tipc_nl_node_reset_link_stats
tipc
|
7 |
C |
|
|
2 |
929d |
938d
|
25/29 |
847d |
19b3f72a41a8
tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
|
|
WARNING: suspicious RCU usage in gfs2_permission
gfs2
|
4 |
C |
done |
|
263 |
898d |
919d
|
25/29 |
847d |
074d7306a4fe
gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
|
|
BUG: corrupted list in nfc_llcp_register_device
net
nfc
|
22 |
C |
error |
|
136 |
924d |
1212d
|
25/29 |
847d |
dfc7f7a988da
net: nfc: llcp: Add lock when modifying device list
|
|
KASAN: slab-use-after-free Read in pwq_release_workfn
kernel
|
19 |
C |
unreliable |
|
79 |
910d |
960d
|
25/29 |
847d |
643445531829
workqueue: Fix UAF report by KASAN in pwq_release_workfn()
|
|
UBSAN: array-index-out-of-bounds in dbFindLeaf
jfs
|
15 |
C |
error |
|
6 |
947d |
1261d
|
25/29 |
847d |
22cad8bc1d36
jfs: fix array-index-out-of-bounds in dbFindLeaf
|
|
KMSAN: uninit-value in smsc75xx_bind
usb
|
7 |
C |
|
|
63 |
945d |
2442d
|
25/29 |
847d |
e9c65989920f
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
|
|
BUG: sleeping function called from invalid context in __hci_cmd_sync_sk
bluetooth
|
5 |
C |
done |
|
34 |
917d |
1034d
|
25/29 |
847d |
acab8ff29a2a
Bluetooth: ISO: Fix invalid context error
|
|
general protection fault in bpf_prog_offload_verifier_prep
bpf
|
8 |
C |
done |
|
31 |
937d |
956d
|
25/29 |
847d |
1a49f4195d34
bpf: Avoid dummy bpf_offload_netdev in __bpf_prog_dev_bound_init
|
|
possible deadlock in btrfs_search_slot (2)
btrfs
|
4 |
C |
error |
|
2 |
969d |
965d
|
25/29 |
847d |
ee34a82e890a
btrfs: release path before inode lookup during the ino lookup ioctl
|
|
KASAN: slab-out-of-bounds Read in imon_probe
media
usb
|
17 |
syz |
|
|
2 |
942d |
964d
|
25/29 |
847d |
a1766a4fd83b
media: imon: fix access to invalid resource for the second interface
|
|
KASAN: slab-use-after-free Write in gfs2_qd_dealloc
gfs2
|
22 |
C |
inconclusive |
|
27 |
877d |
930d
|
25/29 |
847d |
bdcb8aa434c6
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
|
|
memory leak in binder_transaction (2)
kernel
|
3 |
C |
|
|
2 |
948d |
1243d
|
25/29 |
847d |
1aa3aaf8953c
binder: fix memory leaks of spam and pending work
|
|
general protection fault in inherit_task_group
perf
|
2 |
C |
done |
done |
4 |
900d |
898d
|
25/29 |
847d |
a71ef31485bb
perf/core: Fix potential NULL deref
|
|
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy
usb
|
7 |
C |
|
|
521 |
903d |
1016d
|
25/29 |
847d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
UBSAN: shift-out-of-bounds in nci_activate_target
net
nfc
|
-1 |
C |
done |
|
6 |
926d |
1110d
|
25/29 |
847d |
354a6e707e29
nfc: nci: assert requested protocol is valid
|
|
KASAN: use-after-free Read in powermate_config_complete (4)
input
|
19 |
syz |
done |
unreliable |
14 |
951d |
1323d
|
25/29 |
847d |
5c15c60e7be6
Input: powermate - fix use-after-free in powermate_config_complete
|
|
UBSAN: shift-out-of-bounds in set_flicker
usb
media
|
-1 |
syz |
|
|
5 |
893d |
973d
|
25/29 |
847d |
099be1822d1f
media: gspca: cpia1: shift-out-of-bounds in set_flicker
|
|
UBSAN: shift-out-of-bounds in ntfs_fill_super (2)
ntfs3
|
-1 |
C |
error |
|
5716 |
873d |
1143d
|
25/29 |
847d |
91a4b1ee78cb
fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super
|
|
possible deadlock in mnt_want_write (2)
integrity
overlayfs
|
4 |
C |
done |
|
867 |
898d |
1766d
|
25/29 |
848d |
e044374a8a0a
ima: annotate iint mutex to avoid lockdep false positive warnings
|
|
WARNING in inet_csk_get_port (2)
net
|
-1 |
C |
done |
|
88 |
909d |
939d
|
25/29 |
848d |
8702cf12e6ba
tcp: Fix listen() warning with v4-mapped-v6 address.
|
|
WARNING in ieee80211_get_ringparam
wireless
|
-1 |
C |
done |
|
151 |
934d |
941d
|
25/29 |
848d |
6b348f6e34ce
wifi: mac80211: ethtool: always hold wiphy mutex
|
|
KASAN: slab-use-after-free Read in ntfs_write_bh
ntfs3
|
19 |
C |
done |
|
100 |
924d |
948d
|
25/29 |
848d |
493c71926c20
ntfs3: put resources during ntfs_fill_super()
|
|
KCSAN: data-race in udp_lib_setsockopt / udp_lib_setsockopt
net
|
6 |
|
|
|
2 |
968d |
954d
|
25/29 |
848d |
882af43a0fc3
udplite: fix various data-races
|
|
KASAN: use-after-free Read in ntfs_test_inode
ntfs3
|
19 |
C |
done |
|
402 |
861d |
1795d
|
25/29 |
848d |
493c71926c20
ntfs3: put resources during ntfs_fill_super()
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
jfs
|
15 |
C |
inconclusive |
inconclusive |
52 |
871d |
1298d
|
25/29 |
848d |
64933ab7b048
fs/jfs: Add validity check for db_maxag and db_agpref
|
|
KMSAN: uninit-value in fq_change
net
|
7 |
C |
|
|
8 |
889d |
891d
|
25/29 |
848d |
f1a3b283f852
UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
|
|
possible deadlock in ieee80211_change_mac
wireless
|
4 |
|
|
|
1 |
921d |
917d
|
25/29 |
848d |
74a7c93f45ab
wifi: mac80211: fix change_address deadlock during unregister
|
|
KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish (8)
bridge
|
6 |
|
|
|
1 |
942d |
941d
|
25/29 |
848d |
44bdb313da57
net: bridge: use DEV_STATS_INC()
|
|
KCSAN: data-race in xfrm_lookup_with_ifid / xfrm_lookup_with_ifid (7)
net
|
6 |
|
|
|
1 |
926d |
925d
|
25/29 |
848d |
de5724ca38fd
xfrm: fix a data-race in xfrm_lookup_with_ifid()
|
|
KMSAN: uninit-value in llc_station_rcv
net
|
7 |
C |
|
|
2 |
903d |
912d
|
25/29 |
848d |
7b3ba18703a6
llc: verify mac len before reading mac header
|
|
KASAN: invalid-free in ovl_copy_up_one
overlayfs
|
24 |
C |
done |
|
2 |
938d |
934d
|
25/29 |
848d |
5b02bfc1e7e3
ovl: do not encode lower fh with upper sb_writers held
|
|
WARNING in try_grab_page
xfs
mm
|
-1 |
C |
|
|
48 |
933d |
1018d
|
23/29 |
917d |
f443fd5af5db
crypto, cifs: fix error handling in extract_iter_to_sg()
|
|
kernel BUG in add_new_free_space
btrfs
|
-1 |
C |
|
|
3 |
1022d |
1090d
|
23/29 |
917d |
d8ccbd21918f
btrfs: remove BUG_ON()'s in add_new_free_space()
|
|
KCSAN: data-race in sctp_poll / sctp_wfree (3)
sctp
|
6 |
|
|
|
1 |
963d |
962d
|
23/29 |
917d |
dc9511dd6f37
sctp: annotate data-races around sk->sk_wmem_queued
|
|
INFO: rcu detected stall in sys_close (5)
net
|
1 |
C |
done |
|
1 |
961d |
961d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
general protection fault in io_sqpoll_wq_cpu_affinity
io-uring
|
2 |
|
|
|
33 |
951d |
962d
|
23/29 |
917d |
bd6fc5da4c51
io_uring: Don't set affinity on a dying sqpoll thread
|
|
possible deadlock in shmem_uncharge (2)
mm
|
4 |
C |
done |
|
29 |
1005d |
1003d
|
23/29 |
917d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
|
WARNING in unregister_vlan_dev
net
|
-1 |
C |
done |
|
1310 |
970d |
979d
|
23/29 |
917d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
general protection fault in __drop_extent_tree
f2fs
|
2 |
C |
error |
|
3 |
1062d |
1101d
|
23/29 |
917d |
458c15dfbce6
f2fs: don't reset unchangable mount option in f2fs_remount()
|
|
KCSAN: data-race in ____sys_sendmsg / do_ipv6_setsockopt
net
|
6 |
|
|
|
1 |
1040d |
1023d
|
23/29 |
917d |
1ded5e5a5931
net: annotate data-races around sock->ops
|
|
general protection fault in io_uring_show_fdinfo
io-uring
|
2 |
C |
done |
|
17 |
949d |
958d
|
23/29 |
917d |
32f5dea040ee
io_uring/fdinfo: only print ->sq_array[] if it's there
|
|
KCSAN: data-race in random_recv_done / virtio_read (3)
crypto
|
6 |
|
|
|
13 |
1027d |
1091d
|
23/29 |
917d |
ac52578d6e8d
hwrng: virtio - Fix race on data_avail and actual data
|
|
KCSAN: data-race in netlink_setsockopt / netlink_setsockopt
net
|
6 |
|
|
|
1 |
981d |
981d
|
23/29 |
917d |
8fe08d70a2b6
netlink: convert nlk->flags to atomic flags
|
|
KASAN: slab-out-of-bounds Read in read_descriptors (3)
usb
|
17 |
C |
error |
|
7 |
1004d |
1032d
|
23/29 |
917d |
ff33299ec8bb
USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
|
|
WARNING in do_chunk_alloc
btrfs
|
-1 |
C |
error |
done |
35 |
1024d |
1240d
|
23/29 |
917d |
cd361199ff23
btrfs: wait on uncached block groups on every allocation loop
|
|
general protection fault in generic_hwtstamp_ioctl_lower
net
|
2 |
C |
done |
|
7 |
984d |
986d
|
23/29 |
917d |
c35e927cbe09
net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib()
|
|
KASAN: use-after-free Read in raw_release
can
|
19 |
|
|
|
1 |
989d |
989d
|
23/29 |
917d |
11c9027c983e
can: raw: fix lockdep issue in raw_release()
|
|
INFO: rcu detected stall in unix_release
net
|
1 |
C |
done |
|
1 |
981d |
977d
|
23/29 |
917d |
da71714e359b
net/sched: fix a qdisc modification with ambiguous command request
|
|
UBSAN: array-index-out-of-bounds in f2fs_iget
f2fs
|
15 |
C |
done |
|
6 |
957d |
1001d
|
23/29 |
917d |
958ccbbf1ce7
Revert "f2fs: fix to do sanity check on extent cache correctly"
|
|
WARNING in init_module_from_file
modules
|
-1 |
C |
|
|
98 |
1010d |
1018d
|
23/29 |
917d |
f1962207150c
module: fix init_module_from_file() error handling
|
|
WARNING: refcount bug in xp_put_pool
bpf
net
|
13 |
C |
done |
|
2 |
992d |
990d
|
23/29 |
917d |
85c2c79a0730
xsk: fix refcount underflow in error path
|
|
WARNING in ip6_tnl_exit_batch_net
net
|
-1 |
C |
done |
|
29 |
973d |
979d
|
23/29 |
917d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
KASAN: invalid-free in dbUnmount
jfs
|
24 |
syz |
error |
|
119 |
934d |
1193d
|
23/29 |
917d |
cade5397e546
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
|
|
KASAN: stack-out-of-bounds Write in __nla_validate_parse
net
|
21 |
C |
done |
|
4 |
985d |
1000d
|
23/29 |
917d |
4d50e50045aa
net: flower: fix stack-out-of-bounds in fl_set_key_cfm()
|
|
KMSAN: uninit-value in af_alg_free_resources
crypto
|
7 |
C |
|
|
156 |
970d |
1007d
|
23/29 |
917d |
080aa61e370b
crypto: fix uninit-value in af_alg_free_resources
|
|
general protection fault in sco_conn_add
bluetooth
|
2 |
C |
done |
|
4 |
1003d |
1012d
|
23/29 |
917d |
b4066eb04bb6
Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link
|
|
net-next test error: UBSAN: array-index-out-of-bounds in alloc_pid
kernel
|
-1 |
|
|
|
30 |
1016d |
1018d
|
23/29 |
917d |
b69f0aeb0689
pid: Replace struct pid 1-element array with flex-array
|
|
KASAN: null-ptr-deref Read in txBegin
jfs
|
11 |
C |
error |
|
30 |
1018d |
1153d
|
23/29 |
917d |
47cfdc338d67
FS: JFS: Fix null-ptr-deref Read in txBegin
|
|
WARNING in ntfs_load_attr_list
ntfs3
|
-1 |
C |
|
|
4 |
1083d |
1200d
|
23/29 |
917d |
ea303f72d70c
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
|
|
WARNING in iommufd_access_destroy
iommu
|
-1 |
C |
done |
|
3 |
1006d |
1007d
|
23/29 |
917d |
99f98a7c0d69
iommufd: IOMMUFD_DESTROY should not increase the refcount
|
|
BUG: unable to handle kernel paging request in handshake_nl_done_doit
tls
|
8 |
C |
|
|
2 |
963d |
963d
|
23/29 |
917d |
82ba0ff7bf04
net/handshake: fix null-ptr-deref in handshake_nl_done_doit()
|
|
WARNING: bad unlock balance in sockopt_release_sock
net
|
4 |
C |
done |
|
2 |
966d |
966d
|
23/29 |
917d |
8be6f88b9d3f
inet: fix IP_TRANSPARENT error handling
|
|
KASAN: slab-use-after-free Read in xsk_diag_dump
net
bpf
|
19 |
C |
done |
|
9 |
952d |
961d
|
23/29 |
917d |
3e019d8a05a3
xsk: Fix xsk_diag use-after-free error during socket cleanup
|
|
linux-next test error: UBSAN: array-index-out-of-bounds in alloc_pid
kernel
|
-1 |
|
|
|
9 |
1065d |
1065d
|
23/29 |
917d |
b69f0aeb0689
pid: Replace struct pid 1-element array with flex-array
|
|
KMSAN: uninit-value in alauda_check_media
usb
usb-storage
|
7 |
C |
|
|
1059 |
999d |
2383d
|
23/29 |
917d |
a6ff6e7a9dd6
usb-storage: alauda: Fix uninit-value in alauda_check_media()
|
|
INFO: rcu detected stall in tipc_sendmsg (2)
tipc
|
1 |
|
|
|
1 |
987d |
987d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
UBSAN: array-index-out-of-bounds in xfs_attr3_leaf_add_work
xfs
|
15 |
C |
error |
done |
1923 |
994d |
1034d
|
23/29 |
917d |
a49bbce58ea9
xfs: convert flex-array declarations in xfs attr leaf blocks
|
|
UBSAN: array-index-out-of-bounds in bpf_mprog_detach
bpf
|
15 |
|
|
|
3 |
986d |
992d
|
23/29 |
917d |
d210f9735e13
bpf: Fix mprog detachment for empty mprog entry
|
|
KASAN: slab-use-after-free Read in input_dev_uevent
input
|
19 |
C |
done |
|
7 |
958d |
969d
|
23/29 |
917d |
dd613a4e45f8
HID: uclogic: Correct devm device reference for hidinput input_dev name
|
|
BUG: unable to handle kernel paging request in ovs_vport_add
openvswitch
|
8 |
C |
done |
|
2 |
980d |
979d
|
23/29 |
917d |
a552bfa16bab
net: openvswitch: reject negative ifindex
|
|
KASAN: slab-use-after-free Read in nilfs_load_inode_block (2)
nilfs
|
19 |
C |
done |
|
4 |
984d |
999d
|
23/29 |
917d |
f8654743a0e6
nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
|
|
KCSAN: data-race in bpf_percpu_array_update / bpf_percpu_array_update (2)
bpf
|
6 |
|
|
|
1 |
962d |
961d
|
23/29 |
917d |
6a86b5b5cd76
bpf: Annotate bpf_long_memcpy with data_race
|
|
memory leak in autofs_wait
autofs
|
3 |
C |
|
|
4 |
1051d |
1422d
|
23/29 |
917d |
ccbe77f7e45d
autofs: fix memory leak of waitqueues in autofs_catatonic_mode
|
|
KCSAN: data-race in dccp_connect / dccp_sendmsg (3)
net
|
6 |
|
|
|
1 |
987d |
987d
|
23/29 |
917d |
a47e598fbd86
dccp: fix data-race around dp->dccps_mss_cache
|
|
general protection fault in f2fs_drop_extent_tree
f2fs
|
2 |
C |
error |
done |
1 |
1027d |
1023d
|
23/29 |
917d |
458c15dfbce6
f2fs: don't reset unchangable mount option in f2fs_remount()
|
|
KCSAN: data-race in __ip4_datagram_connect / __ip_make_skb (5)
net
|
6 |
|
|
|
3 |
995d |
1023d
|
23/29 |
917d |
f866fbc842de
ipv4: fix data-races around inet->inet_id
|
|
WARNING in mark_buffer_dirty (5)
nilfs
|
-1 |
C |
done |
|
172 |
920d |
1039d
|
23/29 |
917d |
cdaac8e7e5a0
nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
|
|
KMSAN: uninit-value in udf_name_from_CS0
udf
|
7 |
|
|
|
1 |
1030d |
1030d
|
23/29 |
917d |
028f6055c912
udf: Fix uninitialized array access for some pathnames
|
|
INFO: rcu detected stall in statfs
fs
|
1 |
|
|
|
1 |
977d |
977d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
WARNING in ieee80211_probe_client
wireless
|
-1 |
C |
done |
error |
124 |
949d |
2018d
|
23/29 |
917d |
67dfa589aa88
wifi: mac80211: check for station first in client probe
|
|
general protection fault in skb_segment (3)
net
|
2 |
C |
done |
|
2 |
977d |
977d
|
23/29 |
917d |
b616be6b9768
net: do not allow gso_size to be set to GSO_BY_FRAGS
|
|
INFO: rcu detected stall in bond_3ad_state_machine_handler
net
|
1 |
|
|
|
1 |
995d |
995d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
BUG: soft lockup in fq_pie_timer (4)
net
|
1 |
syz |
|
|
5 |
947d |
998d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
UBSAN: array-index-out-of-bounds in dbAllocDmapLev
jfs
|
15 |
C |
error |
|
2 |
1037d |
1210d
|
23/29 |
917d |
4e302336d5ca
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
|
|
INFO: rcu detected stall in nsim_dev_trap_report_work
net
|
1 |
syz |
|
|
4 |
953d |
996d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
WARNING in rtnl_dellink (3)
net
|
-1 |
C |
done |
|
492 |
969d |
979d
|
23/29 |
917d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
INFO: rcu detected stall in shmem_fault (5)
cgroups
mm
|
1 |
|
|
|
3 |
973d |
993d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
KASAN: slab-use-after-free Read in team_device_event
net
|
19 |
C |
done |
|
2 |
953d |
952d
|
23/29 |
917d |
6afcf0fb9270
Revert "net: team: do not use dynamic lockdep key"
|
|
general protection fault in ext4_finish_bio
ext4
|
2 |
C |
done |
|
1 |
1022d |
1018d
|
23/29 |
917d |
0b7ec177b589
crypto: algif_hash - Fix race between MORE and non-MORE sends
|
|
WARNING in sta_info_insert_rcu (3)
wireless
|
-1 |
C |
done |
|
6 |
965d |
1006d
|
23/29 |
917d |
5d4e04bf3a0f
wifi: cfg80211: reject auth/assoc to AP with our address
|
|
KCSAN: data-race in fib_release_info / fib_table_lookup
net
|
6 |
|
|
|
1 |
962d |
962d
|
23/29 |
917d |
fce92af1c29d
ipv4: annotate data-races around fi->fib_dead
|
|
KASAN: slab-use-after-free Read in fuse_test_super
fuse
|
19 |
C |
done |
|
6 |
961d |
964d
|
23/29 |
917d |
dc3216b14160
super: ensure valid info
|
|
KASAN: slab-use-after-free Read in iopt_unmap_iova_range
iommu
|
19 |
C |
error |
|
7 |
1024d |
1035d
|
23/29 |
917d |
804ca14d04df
iommufd: Do not access the area pointer after unlocking
|
|
possible deadlock in inode_add_bytes
fs
|
4 |
C |
done |
|
124 |
1005d |
1003d
|
23/29 |
917d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
|
general protection fault in ingress_destroy
net
|
19 |
|
|
|
10 |
997d |
1001d
|
23/29 |
917d |
079082c60aff
tcx: Fix splat during dev unregister
|
|
KCSAN: data-race in tcp_make_synack / tcp_rtx_synack
net
|
6 |
|
|
|
1 |
1008d |
1007d
|
23/29 |
917d |
5e5265522a9a
tcp: annotate data-races around tcp_rsk(req)->txhash
|
|
KASAN: slab-out-of-bounds Read in xlog_pack_data
xfs
|
17 |
C |
error |
done |
4 |
1037d |
1034d
|
23/29 |
917d |
f1e1765aad7d
xfs: journal geometry is not properly bounds checked
|
|
WARNING in tcx_uninstall
net
bpf
|
-1 |
C |
done |
|
7 |
991d |
996d
|
23/29 |
917d |
079082c60aff
tcx: Fix splat during dev unregister
|
|
INFO: task hung in pipe_release (4)
fs
|
1 |
C |
done |
|
51 |
1009d |
1009d
|
23/29 |
917d |
0f71c9caf267
udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
|
|
possible deadlock in do_user_addr_fault
exfat
|
4 |
C |
unreliable |
done |
39 |
1024d |
1115d
|
23/29 |
917d |
ff84772fd45d
exfat: release s_lock before calling dir_emit()
|
|
KCSAN: data-race in tcp_check_req / tcp_check_req
net
|
6 |
|
|
|
2 |
1025d |
1023d
|
23/29 |
917d |
eba20811f326
tcp: annotate data-races around tcp_rsk(req)->ts_recent
|
|
general protection fault in sys_finit_module
modules
|
21 |
C |
error |
done |
84 |
1017d |
1017d
|
23/29 |
917d |
f1962207150c
module: fix init_module_from_file() error handling
|
|
KASAN: slab-out-of-bounds Read in do_csum
net
|
19 |
C |
|
|
160 |
922d |
962d
|
23/29 |
917d |
8bd795fedb84
arm64: csum: Fix OoB access in IP checksum code for negative lengths
|
|
kernel BUG in btrfs_ioctl
btrfs
|
-1 |
C |
error |
|
1 |
1033d |
1029d
|
23/29 |
917d |
b19c98f237cd
btrfs: fix race between balance and cancel/pause
|
|
KCSAN: data-race in iptunnel_xmit / iptunnel_xmit (5)
net
|
6 |
|
|
|
1 |
954d |
954d
|
23/29 |
917d |
9b271ebaf9a2
ip_tunnels: use DEV_STATS_INC()
|
|
KMSAN: uninit-value in hwsim_cloned_frame_received_nl
wireless
|
7 |
C |
|
|
8315 |
961d |
2030d
|
23/29 |
917d |
fba360a047d5
wifi: mac80211_hwsim: drop short frames
|
|
WARNING in dev_index_reserve
bridge
|
-1 |
C |
done |
|
7120 |
919d |
974d
|
23/29 |
917d |
f534f6581ec0
net: validate veth and vxcan peer ifindexes
30188bd7838c
rtnetlink: Reject negative ifindexes in RTM_NEWLINK
|
|
memory leak in raw_open
usb
|
3 |
C |
|
|
1 |
1012d |
1008d
|
23/29 |
917d |
83e30f2bf86e
USB: gadget: Fix the memory leak in raw_gadget driver
|
|
possible deadlock in lock_mm_and_find_vma
exfat
|
4 |
C |
error |
|
2 |
988d |
1008d
|
23/29 |
917d |
ff84772fd45d
exfat: release s_lock before calling dir_emit()
|
|
possible deadlock in raw_bind
can
|
4 |
|
|
|
4535 |
990d |
1003d
|
23/29 |
917d |
11c9027c983e
can: raw: fix lockdep issue in raw_release()
|
|
KCSAN: data-race in __ip_make_skb / __ip_make_skb
net
|
6 |
|
|
|
624 |
966d |
1535d
|
23/29 |
917d |
f866fbc842de
ipv4: fix data-races around inet->inet_id
|
|
WARNING in netdev_open
staging
|
-1 |
|
|
|
1 |
995d |
991d
|
23/29 |
917d |
1422b526fba9
staging: rtl8712: fix race condition
|
|
KASAN: use-after-free Read in gsm_cleanup_mux
serial
|
19 |
C |
done |
done |
16 |
983d |
1262d
|
23/29 |
917d |
3c4f8333b582
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
|
|
inconsistent lock state in btrfs_run_delayed_iputs
btrfs
|
4 |
|
|
|
1 |
1020d |
1016d
|
23/29 |
917d |
866e98a4d95d
btrfs: use irq safe locking when running and adding delayed iputs
|
|
UBSAN: shift-out-of-bounds in ext2_fill_super (2)
ext4
|
-1 |
C |
|
|
571 |
995d |
1039d
|
23/29 |
917d |
404615d7f1dc
ext2: Drop fragment support
|
|
WARNING in bpf_xdp_adjust_tail (4)
bpf
|
-1 |
C |
error |
|
466 |
983d |
1193d
|
23/29 |
917d |
d14eea09edf4
net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
|
|
KMSAN: uninit-value in ieee802154_subif_start_xmit
bpf
|
8 |
C |
done |
|
119 |
988d |
984d
|
23/29 |
917d |
db2baf82b098
bpf: Fix an incorrect verification success with movsx insn
|
|
WARNING: ODEBUG bug in ingress_destroy
net
|
-1 |
C |
done |
|
16 |
998d |
1001d
|
23/29 |
917d |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
WARNING in ext4_file_write_iter
ext4
|
-1 |
C |
error |
|
17314 |
935d |
1034d
|
23/29 |
917d |
194505b55dd7
ext4: drop dio overwrite only flag and associated warning
|
|
KASAN: slab-out-of-bounds Read in mt_validate_nulls
mm
|
17 |
C |
error |
done |
15 |
1017d |
1016d
|
23/29 |
917d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
general protection fault in rxe_completer
rdma
|
2 |
|
|
|
281 |
951d |
1032d
|
23/29 |
917d |
5993b75d0bc7
RDMA/rxe: Fix unsafe drain work queue code
|
|
general protection fault in prepare_to_wait (2)
hams
|
8 |
syz |
inconclusive |
|
4 |
934d |
972d
|
23/29 |
917d |
c2f8fd794960
netrom: Deny concurrent connect().
|
|
kernel BUG in validate_mm (2)
mm
|
-1 |
C |
unreliable |
done |
217 |
1017d |
1016d
|
23/29 |
917d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
KASAN: invalid-free in init_file
overlayfs
|
24 |
C |
done |
|
6 |
1019d |
1020d
|
23/29 |
917d |
dff745c1221a
fs: move cleanup from init_file() into its callers
|
|
kernel BUG in prepare_to_merge
btrfs
|
-1 |
C |
done |
|
48 |
980d |
1020d
|
23/29 |
917d |
773e722a98e2
btrfs: avoid race between qgroup tree creation and relocation
05d7ce504545
btrfs: exit gracefully if reloc roots don't match
6ebcd021c92b
btrfs: reject invalid reloc tree root keys with stack dump
|
|
KASAN: slab-out-of-bounds Read in bio_split_rw
block
|
17 |
C |
done |
|
1 |
1022d |
1018d
|
23/29 |
917d |
0b7ec177b589
crypto: algif_hash - Fix race between MORE and non-MORE sends
|
|
WARNING: ODEBUG bug in tcx_uninstall
bpf
net
|
-1 |
C |
done |
|
38 |
997d |
1001d
|
23/29 |
917d |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
INFO: rcu detected stall in ext4_file_write_iter (7)
mm
bpf
ext4
|
1 |
|
|
|
3 |
959d |
1001d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (2)
kernel
|
-1 |
C |
|
|
2688 |
918d |
1874d
|
23/29 |
917d |
39285e124edb
net: team: do not use dynamic lockdep key
|
|
KMSAN: uninit-value in ieee80211_rx_handlers
wireless
|
7 |
C |
|
|
8 |
962d |
1018d
|
23/29 |
917d |
19e4a47ee747
wifi: mac80211: check S1G action frame size
|
|
WARNING in call_netdevice_notifiers_info
batman
|
-1 |
C |
done |
|
20 |
967d |
969d
|
23/29 |
917d |
987aae75fc10
batman-adv: Hold rtnl lock during MTU update via netlink
|
|
KASAN: slab-use-after-free Read in test_bdev_super_fc
fs
|
19 |
C |
done |
|
7 |
984d |
987d
|
23/29 |
917d |
aca740cecbe5
fs: open block device after superblock creation
|
|
KASAN: slab-use-after-free Read in afs_dynroot_test_super
afs
|
19 |
C |
done |
|
4 |
961d |
957d
|
23/29 |
917d |
dc3216b14160
super: ensure valid info
|
|
general protection fault in folio_create_empty_buffers
nilfs
|
2 |
C |
error |
|
6 |
986d |
1061d
|
23/29 |
917d |
f83913f8c5b8
nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
|
|
WARNING in corrupted (3)
usb
|
-1 |
C |
done |
|
19 |
1012d |
1060d
|
23/29 |
917d |
6f489a966fbe
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
KCSAN: data-race in macsec_handle_frame / macsec_handle_frame (3)
net
|
6 |
|
|
|
2 |
986d |
988d
|
23/29 |
917d |
32d0a49d36a2
macsec: use DEV_STATS_INC()
|
|
general protection fault in gfs2_lookup_simple
gfs2
|
2 |
C |
done |
|
3 |
988d |
985d
|
23/29 |
917d |
111c7d27a1b7
gfs2: Use mapping->gfp_mask for metadata inodes
|
|
KASAN: slab-use-after-free Write in sco_chan_del
bluetooth
|
22 |
C |
done |
|
19 |
933d |
1067d
|
23/29 |
917d |
3344d318337d
Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
|
|
WARNING in usbnet_start_xmit/usb_submit_urb
usb
|
-1 |
C |
done |
|
92 |
1031d |
1613d
|
23/29 |
917d |
5e1627cb43dd
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
|
WARNING in ieee80211_bss_info_change_notify
wireless
|
-1 |
C |
done |
|
7725 |
917d |
2022d
|
23/29 |
917d |
abc76cf552e1
wifi: cfg80211: ocb: don't leave if not joined
|
|
UBSAN: shift-out-of-bounds in dbFree
jfs
|
-1 |
C |
error |
|
3 |
1057d |
1123d
|
23/29 |
917d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
UBSAN: array-index-out-of-bounds in print_bpf_insn
bpf
|
15 |
C |
done |
|
9 |
989d |
990d
|
23/29 |
917d |
e99688eba2e9
bpf: Fix an array-index-out-of-bounds issue in disasm.c
|
|
WARNING in macvlan_device_event
net
|
-1 |
|
|
|
3 |
974d |
975d
|
23/29 |
917d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
general protection fault in ext4_acquire_dquot
ext4
|
8 |
C |
|
|
4 |
1031d |
1070d
|
23/29 |
917d |
6a4e3363792e
quota: Properly disable quotas when add_dquot_ref() fails
|
|
BUG: unable to handle kernel paging request in ext4_calculate_overhead
ext4
|
8 |
C |
done |
|
31 |
963d |
965d
|
23/29 |
917d |
ee5c807137ce
ext4: ext4_get_{dev}_journal return proper error value
|
|
KASAN: slab-use-after-free Read in f2fs_truncate_data_blocks_range
f2fs
|
19 |
C |
error |
|
1 |
1030d |
1026d
|
23/29 |
917d |
a6ec83786ab9
f2fs: fix to do sanity check on direct node in truncate_dnode()
|
|
WARNING in diUnmount
jfs
|
-1 |
C |
error |
|
100 |
944d |
1237d
|
23/29 |
917d |
6e2bda2c192d
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
WARNING in vlan_device_event
net
|
-1 |
|
|
|
1 |
975d |
975d
|
23/29 |
917d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
KMSAN: uninit-value in __netif_receive_skb_core
wireguard
wireless
|
19 |
C |
done |
|
353 |
957d |
2926d
|
23/29 |
917d |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
memory leak in snd_seq_create_port
sound
|
3 |
C |
|
|
1 |
1009d |
1005d
|
23/29 |
917d |
057849ccc3d8
ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
|
|
INFO: rcu detected stall in uinput_write
input
|
1 |
|
|
|
1 |
997d |
997d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
possible deadlock in f2fs_getxattr
f2fs
|
4 |
C |
done |
|
4570 |
934d |
1014d
|
23/29 |
917d |
5c13e2388bf3
f2fs: avoid false alarm of circular locking
|
|
general protection fault in btrfs_finish_ordered_extent
btrfs
|
2 |
C |
done |
|
8 |
1007d |
1008d
|
23/29 |
917d |
7cad645ebf20
btrfs: fix ordered extent split error handling in btrfs_dio_submit_io
|
|
memory leak in _r8712_init_xmit_priv
staging
usb
|
3 |
C |
|
|
1 |
1013d |
1009d
|
23/29 |
917d |
ac83631230f7
staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
|
|
kernel BUG in f2fs_evict_inode
f2fs
|
-1 |
C |
error |
|
135 |
932d |
1212d
|
23/29 |
917d |
a3ab55746612
f2fs: flush inode if atomic file is aborted
|
|
INFO: rcu detected stall in hci_cmd_timeout
bluetooth
|
1 |
|
|
|
1 |
980d |
980d
|
23/29 |
917d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
KASAN: use-after-free Read in qd_unlock (2)
gfs2
|
19 |
C |
error |
done |
5 |
971d |
1200d
|
23/29 |
917d |
f66af88e3321
gfs2: Stop using gfs2_make_fs_ro for withdraw
|
|
WARNING in kvm_arch_vcpu_ioctl_run (5)
kvm-x86
|
-1 |
C |
error |
|
343 |
951d |
1039d
|
23/29 |
917d |
26a0652cb453
KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
|
|
UBSAN: shift-out-of-bounds in extAlloc
jfs
|
-1 |
C |
error |
|
6605 |
938d |
1298d
|
23/29 |
917d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
WARNING in __gup_longterm_locked
mm
|
-1 |
C |
error |
|
90 |
1016d |
1017d
|
23/29 |
917d |
6cd06ab12d1a
gup: make the stack expansion warning a bit more targeted
|
|
KASAN: slab-use-after-free Write in mini_qdisc_pair_swap
net
|
22 |
C |
error |
|
76 |
966d |
1120d
|
23/29 |
931d |
84ad0af0bccd
net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting
c7cfbd115001
net/sched: sch_ingress: Only create under TC_H_INGRESS
|
|
KASAN: slab-out-of-bounds Read in extract_iter_to_sg
crypto
|
17 |
C |
done |
|
13 |
1035d |
1039d
|
23/29 |
931d |
4380499218c6
crypto: Fix af_alg_sendmsg(MSG_SPLICE_PAGES) sglist limit
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
upstream build error (20)
kernel
|
-1 |
|
|
|
498 |
980d |
1019d
|
23/29 |
931d |
0a9567ac5e6a
x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build
|
|
memory leak in htc_connect_service
wireless
|
3 |
C |
|
|
1 |
1066d |
1147d
|
23/29 |
931d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
general protection fault in shash_async_final
crypto
|
2 |
C |
done |
|
13 |
1031d |
1039d
|
23/29 |
931d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
WARNING in blkdev_put (3)
block
|
-1 |
C |
done |
|
377 |
1030d |
1034d
|
23/29 |
931d |
c576c4bf9ecf
reiserfs: fix blkdev_put() warning from release_journal_dev()
|
|
WARNING in iommufd_test_check_pages
iommu
|
-1 |
C |
error |
|
4 |
1031d |
1081d
|
23/29 |
931d |
9883c7f84053
mm/gup: do not return 0 from pin_user_pages_fast() for bad args
|
|
possible deadlock in static_key_slow_inc (3)
cgroups
|
4 |
C |
done |
|
6387 |
995d |
1043d
|
23/29 |
931d |
f0cc749254d1
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
|
|
KCSAN: data-race in drain_all_stock / drain_obj_stock (4)
cgroups
mm
|
6 |
|
|
|
3 |
1075d |
1091d
|
23/29 |
931d |
3b8abb323953
mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
|
|
WARNING in sock_i_ino
net
|
-1 |
C |
error |
|
22 |
1024d |
1028d
|
23/29 |
931d |
25a9c8a4431c
netlink: Add __sock_i_ino() for __netlink_diag_dump().
|
|
INFO: trying to register non-static key in skb_dequeue (2)
rdma
|
-1 |
syz |
error |
|
123 |
1035d |
1079d
|
23/29 |
931d |
2a62b6210ce8
RDMA/rxe: Fix the use-before-initialization error of resp_pkts
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter
net
|
9 |
|
|
|
68 |
933d |
1038d
|
23/29 |
931d |
aa5406950726
netlink: do not hard code device address lenth in fdb dumps
|
|
WARNING: ODEBUG bug in __mod_timer
kernel
|
-1 |
|
|
|
1 |
1091d |
1053d
|
23/29 |
931d |
8b64d420fe24
debugobjects: Recheck debug_objects_enabled before reporting
|
|
kernel BUG in assertfail (2)
btrfs
|
-1 |
C |
done |
done |
162 |
1036d |
1298d
|
23/29 |
931d |
745806fb4554
btrfs: do not ASSERT() on duplicated global roots
|
|
general protection fault in crypto_shash_final
crypto
|
2 |
C |
done |
|
2 |
1042d |
1039d
|
23/29 |
931d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
KCSAN: data-race in __bpf_lru_list_rotate / __htab_lru_percpu_map_update_elem (5)
bpf
|
6 |
|
|
|
13 |
1026d |
1087d
|
23/29 |
931d |
ee9fd0ac3017
bpf: Address KCSAN report on bpf_lru_list
|
|
KMSAN: uninit-value in reiserfs_security_init
fs
|
7 |
|
|
|
4169 |
1012d |
1072d
|
23/29 |
931d |
d031f4e8b493
reiserfs: Initialize sec->length in reiserfs_security_init().
|
|
WARNING in extract_iter_to_sg
crypto
|
-1 |
|
|
|
1 |
1016d |
1016d
|
23/29 |
931d |
3fc40265ae2b
iov_iter: Kill ITER_PIPE
|
|
general protection fault in shash_async_update
crypto
|
2 |
C |
done |
done |
12 |
1031d |
1028d
|
23/29 |
931d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
KASAN: stack-out-of-bounds Read in ip6mr_ioctl
net
|
21 |
C |
done |
|
192 |
1029d |
1035d
|
23/29 |
931d |
3a4f0edbb793
ipv6: fix a typo in ip6mr_sk_ioctl()
|
|
WARNING in btf_type_id_size (2)
bpf
|
-1 |
C |
error |
|
8 |
1027d |
1058d
|
23/29 |
931d |
e6c2f594ed96
bpf: Silence a warning in btf_type_id_size()
|
|
WARNING: bad unlock balance in bpf
bpf
|
4 |
C |
done |
|
12 |
1056d |
1056d
|
23/29 |
931d |
4266f41feaee
bpf: Fix bad unlock balance on freeze_mutex
|
|
general protection fault in shash_ahash_update
crypto
|
2 |
C |
done |
done |
5 |
1032d |
1032d
|
23/29 |
931d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
WARNING in blkdev_get_by_dev
block
|
-1 |
C |
done |
|
45 |
1030d |
1034d
|
23/29 |
931d |
985958b8584c
block: fix wrong mode for blkdev_get_by_dev() from disk_scan_partitions()
|
|
BUG: sleeping function called from invalid context in ext4_update_super
ext4
|
5 |
|
|
|
1 |
1045d |
1041d
|
23/29 |
931d |
f451fd97dd2b
ext4: drop the call to ext4_error() from ext4_get_group_info()
|
|
BUG: sleeping function called from invalid context in __lock_sock_fast
net
|
5 |
|
|
|
2 |
1029d |
1028d
|
23/29 |
931d |
57fc0f1ceaa4
mptcp: ensure listener is unhashed before updating the sk status
|
|
inconsistent lock state in lru_gen_rotate_memcg
mm
|
4 |
C |
|
|
61 |
1021d |
1032d
|
23/29 |
931d |
814bc1de03ea
mm/mglru: make memcg_lru->lock irq safe
|
|
INFO: trying to register non-static key in skb_queue_tail
wireless
|
-1 |
C |
unreliable |
done |
171 |
1022d |
2124d
|
23/29 |
931d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
kernel BUG in ip6gre_header
net
|
-1 |
C |
|
|
5 |
967d |
1037d
|
23/29 |
931d |
9eed321cde22
net: lapbether: only support ethernet devices
|
|
WARNING in unreserve_psock
net
|
-1 |
C |
done |
|
2816 |
1030d |
1038d
|
23/29 |
931d |
9f8d0dc0ec4a
kcm: Fix unnecessary psock unreservation.
|
|
WARNING in btrfs_split_ordered_extent
btrfs
|
-1 |
C |
done |
|
5 |
1039d |
1060d
|
23/29 |
931d |
7833b865953c
btrfs: fix iomap_begin length for nocow writes
|
|
general protection fault in splice_to_socket
fs
|
2 |
C |
done |
|
4 |
1036d |
1039d
|
23/29 |
931d |
ca2d49f77ce4
splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
|
|
KASAN: null-ptr-deref Write in get_block (2)
fs
|
12 |
C |
error |
|
11 |
1026d |
1060d
|
23/29 |
931d |
ea2b62f30589
fs/sysv: Null check to prevent null-ptr-deref bug
|
|
WARNING: refcount bug in fib6_nh_init
net
|
13 |
C |
done |
|
45 |
1030d |
1036d
|
23/29 |
931d |
3515440df461
ipv6: also use netdev_hold() in ip6_route_check_nh()
|
|
WARNING in nilfs_btree_assign
nilfs
|
-1 |
C |
error |
|
799 |
996d |
1299d
|
23/29 |
931d |
679bd7ebdd31
nilfs2: fix buffer corruption due to concurrent device reads
|
|
linux-next test error: WARNING in register_net_sysctl
net
|
-1 |
|
|
|
9 |
1066d |
1066d
|
23/29 |
931d |
e7480a44d7c4
Revert "net: Remove low_thresh in ip defrag"
|
|
general protection fault in shash_async_export
crypto
|
2 |
C |
done |
|
25 |
1033d |
1039d
|
23/29 |
931d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
KMSAN: uninit-value in ath9k_wmi_ctrl_rx
wireless
|
7 |
C |
|
|
45 |
1015d |
1137d
|
23/29 |
931d |
f24292e82708
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
|
|
net-next test error: WARNING in register_net_sysctl
net
|
-1 |
|
|
|
21 |
1065d |
1066d
|
23/29 |
931d |
e7480a44d7c4
Revert "net: Remove low_thresh in ip defrag"
|
|
general protection fault in nilfs_clear_dirty_page
nilfs
|
2 |
C |
done |
|
15 |
1038d |
1272d
|
23/29 |
931d |
782e53d0c144
nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
|
|
INFO: task hung in btrfs_sync_file (2)
btrfs
|
1 |
C |
error |
|
5 |
1054d |
1050d
|
23/29 |
931d |
745806fb4554
btrfs: do not ASSERT() on duplicated global roots
|
|
KASAN: stack-out-of-bounds Read in skb_splice_from_iter
net
|
17 |
C |
done |
|
64 |
1031d |
1039d
|
23/29 |
931d |
5a6f6873606e
ip, ip6: Fix splice to raw and ping sockets
|
|
KCSAN: data-race in do_timer_create / do_timer_create (8)
kernel
|
6 |
|
|
|
9 |
1060d |
1091d
|
23/29 |
931d |
8ce8849dd1e7
posix-timers: Ensure timer ID search-loop limit is valid
|
|
possible deadlock in netlink_set_err
net
|
4 |
|
|
|
1 |
1031d |
1030d
|
23/29 |
931d |
8d61f926d420
netlink: fix potential deadlock in netlink_set_err()
|
|
possible deadlock in pie_timer (2)
net
|
4 |
|
|
|
2 |
1029d |
1029d
|
23/29 |
931d |
11b73313c124
sch_netem: fix issues in netem_change() vs get_dist_table()
|
|
WARNING in bpf_verifier_vlog
bpf
|
-1 |
C |
inconclusive |
|
6 |
1079d |
1315d
|
23/29 |
931d |
cff36398bd4c
bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
|
|
general protection fault in skb_queue_tail (3)
afs
|
19 |
C |
inconclusive |
done |
9 |
1049d |
1282d
|
23/29 |
931d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
KASAN: slab-out-of-bounds Read in taprio_dequeue_from_txq
net
|
17 |
syz |
error |
|
4 |
1045d |
1070d
|
23/29 |
931d |
be3618d96510
net/sched: taprio: fix slab-out-of-bounds Read in taprio_dequeue_from_txq
|
|
possible deadlock in scheduler_tick (2)
ntfs3
|
4 |
C |
|
|
10 |
1046d |
1062d
|
23/29 |
931d |
726ccdba1521
kasan,kmsan: remove __GFP_KSWAPD_RECLAIM usage from kasan/kmsan
|
|
WARNING in scm_recv
net
|
-1 |
C |
done |
|
8 |
1017d |
1021d
|
23/29 |
931d |
603fc57ab70c
af_unix: Skip SCM_PIDFD if scm->pid is NULL.
|
|
general protection fault in cryptd_hash_export
crypto
|
2 |
C |
done |
done |
12 |
1031d |
1039d
|
23/29 |
931d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
KASAN: stack-out-of-bounds Read in ipmr_ioctl
net
|
21 |
C |
done |
|
208 |
1029d |
1035d
|
23/29 |
931d |
634236b34d7a
net: remove sk_is_ipmr() and sk_is_icmpv6() helpers
|
|
general protection fault in crypto_shash_finup
crypto
|
2 |
C |
done |
|
6 |
1032d |
1039d
|
23/29 |
931d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
possible deadlock in quotactl_fd
ext4
|
4 |
C |
error |
done |
141 |
1021d |
1101d
|
23/29 |
973d |
949f95ff39bf
ext4: fix lockdep warning when enabling MMP
|
|
possible deadlock in btrfs_search_slot
btrfs
|
4 |
C |
error |
done |
188 |
981d |
1256d
|
23/29 |
980d |
b740d8061669
btrfs: free btrfs_path before copying root refs to userspace
|
|
WARNING in class_register
usb
|
-1 |
C |
done |
|
10 |
1112d |
1111d
|
23/29 |
980d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
KASAN: use-after-free Write in j1939_sock_pending_del
can
|
22 |
syz |
done |
error |
17 |
2343d |
2354d
|
23/29 |
980d |
fd81ebfe7975
can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
|
|
BUG: soft lockup in addrconf_rs_timer (2)
net
|
1 |
C |
|
|
51 |
1030d |
1051d
|
23/29 |
1017d |
cd2b8113c2e8
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
|
INFO: task hung in sync_inodes_sb (4)
nilfs
|
1 |
C |
done |
inconclusive |
345 |
1018d |
1972d
|
23/29 |
1017d |
92c5d1b860e9
nilfs2: reject devices with insufficient block count
|
|
riscv/fixes boot error: can't ssh into the instance (2)
|
-1 |
|
|
|
109 |
1044d |
1050d
|
23/29 |
1017d |
25abe0db9243
riscv: Fix kfence now that the linear mapping can be backed by PUD/P4D/PGD
|
|
KCSAN: data-race in dev_graft_qdisc / qdisc_lookup_rcu
net
|
6 |
|
|
|
1 |
1056d |
1056d
|
23/29 |
1017d |
d636fc5dd692
net: sched: add rcu annotations around qdisc->qdisc_sleeping
|
|
kernel BUG in nilfs_btnode_create_block
nilfs
|
-1 |
C |
|
|
8 |
1063d |
1270d
|
23/29 |
1017d |
2f012f2baca1
nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
|
|
WARNING in nilfs_segctor_do_construct (2)
nilfs
|
-1 |
C |
error |
|
3 |
1069d |
1067d
|
23/29 |
1017d |
fee5eaecca86
nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
|
|
divide error in damon_set_attrs
damon
|
2 |
|
|
|
2 |
1045d |
1056d
|
23/29 |
1017d |
5ff6e2fff88e
mm/damon/core: fix divide error in damon_nr_accesses_to_accesses_bp()
|
|
general protection fault in vhost_work_queue
net
virt
kvm
|
2 |
|
|
|
1 |
1057d |
1052d
|
23/29 |
1017d |
a284f09effea
vhost: Fix crash during early vhost_transport_send_pkt calls
|
|
KCSAN: data-race in inotify_handle_inode_event / inotify_remove_from_idr
fs
|
6 |
|
|
|
363 |
1074d |
1088d
|
22/29 |
1020d |
c915d8f5918b
inotify: Avoid reporting event with invalid wd
|
|
WARNING in __ext4fs_dirhash
ext4
|
-1 |
C |
done |
|
25 |
1071d |
1072d
|
22/29 |
1020d |
4b3cb1d108bf
ext4: improve error handling from ext4_dirhash()
|
|
KCSAN: data-race in __es_find_extent_range / __es_find_extent_range (6)
ext4
|
6 |
|
|
|
4 |
1098d |
1088d
|
22/29 |
1020d |
492888df0c7b
ext4: fix data races when using cached status extents
|
|
WARNING in ext4_iomap_overwrite_begin
ext4
|
-1 |
|
|
|
1 |
1097d |
1093d
|
22/29 |
1020d |
fa83c34e3e56
ext4: check iomap type only if ext4_iomap_begin() does not fail
|
|
possible deadlock in __mod_timer (2)
mm
|
4 |
|
|
|
1 |
1073d |
1072d
|
22/29 |
1020d |
eb799279fb1f
debugobjects: Don't wake up kswapd from fill_pool()
|
|
KASAN: user-memory-access Write in zram_slot_lock
block
|
21 |
C |
done |
|
3 |
1060d |
1060d
|
22/29 |
1020d |
3eb96946f0be
block: make bio_check_eod work for zero sized devices
|
|
kernel BUG in btrfs_exclop_balance (2)
btrfs
|
-1 |
C |
error |
|
8 |
1046d |
1148d
|
22/29 |
1020d |
ac868bc9d136
btrfs: fix assertion of exclop condition when starting balance
|
|
KMSAN: uninit-value in htree_dirblock_to_tree
ext4
|
7 |
|
|
|
204 |
1068d |
1199d
|
22/29 |
1020d |
4b3cb1d108bf
ext4: improve error handling from ext4_dirhash()
|
|
WARNING: locking bug in ext4_xattr_inode_iget
ext4
|
4 |
C |
error |
|
23 |
1043d |
1074d
|
22/29 |
1020d |
2bc7e7c1a3bc
ext4: disallow ea_inodes with extended attributes
|
|
possible deadlock in ext4_xattr_get
ext4
|
4 |
C |
inconclusive |
|
3 |
1075d |
1348d
|
22/29 |
1020d |
b3e6bcb94590
ext4: add EA_INODE checking to ext4_iget()
|
|
WARNING in dlfb_submit_urb/usb_submit_urb (2)
fbdev
usb
|
-1 |
C |
|
|
2 |
1068d |
1064d
|
22/29 |
1020d |
ed9de4ed3987
fbdev: udlfb: Fix endpoint check
|
|
KASAN: slab-use-after-free Read in hci_conn_del
bluetooth
|
19 |
|
|
|
7 |
1057d |
1080d
|
22/29 |
1020d |
ca1fd42e7dbf
Bluetooth: Fix potential double free caused by hci_conn_unlink
|
|
INFO: task hung in __sync_dirty_buffer
ext4
|
1 |
C |
inconclusive |
error |
832 |
1039d |
1688d
|
22/29 |
1020d |
f4ce24f54d9c
ext4: fix deadlock when converting an inline directory in nojournal mode
|
|
KCSAN: data-race in do_recvmmsg / do_recvmmsg (2)
net
|
6 |
|
|
|
1 |
1100d |
1074d
|
22/29 |
1020d |
e05a5f510f26
net: annotate sk->sk_err write from do_recvmmsg()
|
|
upstream boot error: BUG: unable to handle kernel NULL pointer dereference in load_balance
kernel
|
-1 |
|
|
|
5 |
1072d |
1077d
|
22/29 |
1020d |
2b951b0efbaa
ARM: 9297/1: vfp: avoid unbalanced stack on 'success' return path
|
|
possible deadlock in ext4_multi_mount_protect
ext4
|
4 |
C |
|
|
584 |
1020d |
1105d
|
22/29 |
1020d |
949f95ff39bf
ext4: fix lockdep warning when enabling MMP
|
|
general protection fault in __aria_aesni_avx_gfni_crypt_16way
crypto
|
2 |
C |
|
|
49 |
1058d |
1074d
|
22/29 |
1020d |
6ab39f99927e
crypto: x86/aria - Use 16 byte alignment for GFNI constant vectors
|
|
WARNING: locking bug in ext4_xattr_inode_update_ref
ext4
|
4 |
C |
error |
|
4 |
1064d |
1191d
|
22/29 |
1020d |
b928dfdcb27d
ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
|
|
KCSAN: data-race in tcp_disconnect / tcp_poll (7)
net
|
6 |
|
|
|
2 |
1096d |
1074d
|
22/29 |
1020d |
e14cadfd80d7
tcp: add annotations around sk->sk_shutdown accesses
|
|
possible deadlock in ext4_setattr
ext4
|
4 |
C |
done |
|
7 |
1069d |
1188d
|
22/29 |
1020d |
b3e6bcb94590
ext4: add EA_INODE checking to ext4_iget()
|
|
general protection fault in gfs2_evict_inode (2)
gfs2
|
10 |
C |
error |
done |
134 |
1069d |
1389d
|
22/29 |
1020d |
504a10d9e46b
gfs2: Don't deref jdesc in evict
|
|
WARNING in usbtmc_ioctl/usb_submit_urb (2)
usb
|
-1 |
C |
done |
|
3 |
1081d |
1093d
|
22/29 |
1020d |
94d25e912898
USB: usbtmc: Fix direction for 0-length ioctl control messages
|
|
possible deadlock in do_writepages
fs
mm
|
4 |
|
|
|
15 |
1085d |
1088d
|
22/29 |
1020d |
00d873c17e29
ext4: avoid deadlock in fs reclaim with page writeback
|
|
KASAN: slab-use-after-free Write in nilfs_inode_sub_blocks
nilfs
|
22 |
|
|
|
4 |
1067d |
1071d
|
22/29 |
1020d |
9b5a04ac3ad9
nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
|
|
KASAN: slab-use-after-free Read in nilfs_load_inode_block
nilfs
|
19 |
C |
error |
|
18 |
1022d |
1075d
|
22/29 |
1020d |
9b5a04ac3ad9
nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
|
|
KASAN: slab-out-of-bounds Read in get_max_inline_xattr_value_size
ext4
|
19 |
C |
|
|
21 |
1075d |
1113d
|
22/29 |
1020d |
2220eaf90992
ext4: add bounds checking in get_max_inline_xattr_value_size()
|
|
KASAN: slab-out-of-bounds Read in ext4_group_desc_csum
ext4
|
19 |
C |
error |
|
26 |
1068d |
1169d
|
22/29 |
1020d |
4f04351888a8
ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
|
|
kernel BUG in ext4_get_group_info
ext4
|
-1 |
C |
error |
|
237 |
1068d |
1701d
|
22/29 |
1020d |
5354b2af3406
ext4: allow ext4_get_group_info() to fail
463808f237cf
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
|
|
WARNING in ext4_xattr_block_set (2)
ext4
|
-1 |
C |
error |
|
32 |
1070d |
1135d
|
22/29 |
1020d |
a44be64bbecb
ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
|
|
kernel BUG in nsh_gso_segment
net
|
-1 |
|
|
|
1 |
1086d |
1072d
|
22/29 |
1020d |
c83b49383b59
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
|
|
WARNING in kvfree (2)
ext4
|
-1 |
C |
|
|
47 |
1076d |
1128d
|
22/29 |
1020d |
b87c7cdf2bed
ext4: fix invalid free tracking in ext4_xattr_move_to_block()
|
|
possible deadlock in sco_conn_del
bluetooth
|
4 |
C |
done |
done |
279 |
1066d |
1470d
|
22/29 |
1020d |
a2ac591cb4d8
Bluetooth: Fix UAF in hci_conn_hash_flush again
|
|
general protection fault in __sk_mem_raise_allocated
net
|
2 |
|
|
|
1 |
1065d |
1060d
|
22/29 |
1020d |
ad42a35bdfc6
udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
|
|
KMSAN: uninit-value in xfrm_state_find
net
|
17 |
C |
error |
done |
215 |
1063d |
2862d
|
22/29 |
1020d |
3d776e31c841
xfrm: Reject optional tunnel/BEET mode templates in outbound policies
|
|
kernel BUG in workingset_activation (2)
kernel
|
-1 |
C |
inconclusive |
done |
40 |
1056d |
1248d
|
22/29 |
1020d |
0143d148d1e8
usb: usbfs: Enforce page requirements for mmap
|
|
KMSAN: uninit-value in vlan_dev_hard_start_xmit (2)
net
|
7 |
|
|
|
1 |
1096d |
1095d
|
22/29 |
1020d |
dacab578c7c6
vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
|
|
memory leak in class_create
usb
|
3 |
C |
|
|
9 |
1063d |
1081d
|
22/29 |
1020d |
ddaf098ea779
driver core: class: properly reference count class_dev_iter()
|
|
memory leak in ext4_expand_extra_isize_ea
ext4
|
3 |
C |
|
|
2 |
1074d |
1142d
|
22/29 |
1020d |
b87c7cdf2bed
ext4: fix invalid free tracking in ext4_xattr_move_to_block()
|
|
divide error in tcp_rcv_space_adjust (2)
net
|
2 |
|
|
|
1 |
1111d |
1111d
|
22/29 |
1020d |
4faeee0cf8a5
tcp: deny tcp_disconnect() when threads are waiting
|
|
possible deadlock in ext4_xattr_inode_iget
ext4
|
4 |
C |
done |
|
351 |
1029d |
1187d
|
22/29 |
1020d |
aff3bea95388
ext4: add lockdep annotations for i_data_sem for ea_inode's
|
|
general protection fault in soft_cursor
fbdev
|
11 |
C |
|
|
3 |
1055d |
1055d
|
22/29 |
1020d |
d78bd6cc6827
fbcon: Fix null-ptr-deref in soft_cursor
|
|
KASAN: slab-out-of-bounds Read in xfs_getbmap
xfs
|
17 |
C |
done |
|
5 |
1080d |
1081d
|
22/29 |
1020d |
1bba82fe1afa
xfs: fix negative array access in xfs_getbmap
|
|
KCSAN: data-race in sk_stream_wait_connect / tcp_disconnect (2)
net
|
6 |
|
|
|
1 |
1105d |
1074d
|
22/29 |
1020d |
d0ac89f6f987
net: deal with most data-races in sk_wait_event()
|
|
kernel BUG in btrfs_csum_one_bio
btrfs
|
-1 |
C |
done |
|
4 |
1099d |
1177d
|
22/29 |
1020d |
806570c0bb7b
btrfs: handle memory allocation failure in btrfs_csum_one_bio
|
|
kernel BUG in btrfs_ioctl_add_dev
btrfs
|
-1 |
C |
error |
done |
46 |
1075d |
1151d
|
22/29 |
1020d |
ac868bc9d136
btrfs: fix assertion of exclop condition when starting balance
|
|
general protection fault in erofs_bread (2)
erofs
|
2 |
C |
done |
|
7 |
1055d |
1065d
|
22/29 |
1020d |
0a17567b4a85
erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init
erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init
|
|
possible deadlock in ext4_xattr_set_handle (3)
ext4
|
4 |
C |
|
|
451 |
1020d |
1178d
|
22/29 |
1020d |
b3e6bcb94590
ext4: add EA_INODE checking to ext4_iget()
|
|
KCSAN: data-race in __netlink_dump_start / netlink_recvmsg (5)
net
|
6 |
|
|
|
2 |
1103d |
1074d
|
22/29 |
1020d |
a939d14919b7
netlink: annotate accesses to nlk->cb_running
|
|
KASAN: slab-use-after-free Read in hci_conn_hash_flush
bluetooth
|
22 |
C |
error |
|
3511 |
1046d |
1139d
|
22/29 |
1020d |
a2ac591cb4d8
Bluetooth: Fix UAF in hci_conn_hash_flush again
ca1fd42e7dbf
Bluetooth: Fix potential double free caused by hci_conn_unlink
|
|
kernel BUG in page_table_check_clear
mm
|
-1 |
C |
error |
|
17 |
1045d |
1078d
|
22/29 |
1020d |
44d0fb387b53
mm: page_table_check: Ensure user pages are not slab pages
0143d148d1e8
usb: usbfs: Enforce page requirements for mmap
|
|
memory leak in hwsim_new_radio_nl
wireless
|
3 |
C |
|
|
1 |
1071d |
1070d
|
22/29 |
1020d |
098abbd48ec1
mac80211_hwsim: fix memory leak in hwsim_new_radio_nl
|
|
WARNING in mb_find_extent
ext4
|
-1 |
C |
error |
error |
135 |
1162d |
1203d
|
22/29 |
1020d |
fa08a7b61dff
ext4: fix WARNING in mb_find_extent
|
|
kernel BUG in vmf_insert_pfn_prot
|
-1 |
C |
done |
done |
1933 |
1068d |
1672d
|
22/29 |
1037d |
a5b44c4adb16
drm/fbdev-generic: Always use shadow buffering
|
|
WARNING in __usbnet_read_cmd/usb_submit_urb
usb
|
-1 |
C |
error |
|
5 |
1165d |
1196d
|
22/29 |
1039d |
93fd565919cf
net: USB: Fix wrong-direction WARNING in plusb.c
net: USB: Fix wrong-direction WARNING in plusb.c
|
|
WARNING in iomap_iter
iomap
|
-1 |
C |
inconclusive |
|
141 |
1193d |
1620d
|
22/29 |
1039d |
6acd87d50998
erofs/zmap.c: Fix incorrect offset calculation
c490a0b5a4f3
loop: Check for overflow while configuring loop
|
|
KASAN: slab-out-of-bounds Write in udf_find_entry
udf
|
21 |
C |
error |
|
19 |
1253d |
1284d
|
22/29 |
1039d |
c8af247de385
udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
1c80afa04db3
udf: Implement searching for directory entry using new iteration code
|
|
memory leak in tcf_pedit_init
net
|
3 |
C |
|
|
1 |
1083d |
1083d
|
22/29 |
1043d |
1b483d9f5805
net/sched: act_pedit: free pedit keys on bail from offset check
|
|
INFO: trying to register non-static key in rxe_cleanup_task (2)
rdma
|
-1 |
|
|
|
148 |
1077d |
1143d
|
22/29 |
1043d |
b2b1ddc45745
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
|
|
KMSAN: kernel-infoleak in iommufd_vfio_ioctl
iommu
|
9 |
C |
|
|
15 |
1145d |
1158d
|
22/29 |
1043d |
b3551ead6163
iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
|
|
KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit (12)
net
|
6 |
|
|
|
3 |
1136d |
1135d
|
22/29 |
1043d |
4b397c06cb98
net: tunnels: annotate lockless accesses to dev->needed_headroom
|
|
KASAN: wild-memory-access Write in v9fs_get_acl
v9fs
|
21 |
C |
|
|
7 |
1102d |
1136d
|
22/29 |
1043d |
707823e7f22f
9P FS: Fix wild-memory-access write in v9fs_get_acl
|
|
WARNING: stack going in the wrong direction? at do_syscall_64
kernel
|
-1 |
|
|
|
193 |
1150d |
1156d
|
22/29 |
1043d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
|
WARNING in sisusb_send_bulk_msg/usb_submit_urb
usb
|
-1 |
C |
unreliable |
|
418 |
1094d |
2480d
|
22/29 |
1043d |
df05a9b05e46
USB: sisusbvga: Add endpoint checks
|
|
general protection fault in pause_prepare_data
net
|
2 |
C |
error |
|
34 |
1177d |
1178d
|
22/29 |
1043d |
f5be9caf7bf0
net: ethtool: fix NULL pointer dereference in pause_prepare_data()
|
|
KASAN: slab-use-after-free Read in nilfs_segctor_thread
nilfs
|
19 |
|
|
|
1 |
1122d |
1116d
|
22/29 |
1043d |
6be49d100c22
nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
|
|
WARNING in udf_expand_dir_adinicb
udf
|
-1 |
C |
done |
|
2 |
1166d |
1162d
|
22/29 |
1043d |
df97f64dfa31
udf: Avoid directory type conversion failure due to ENOMEM
|
|
memory leak in vfs_tmpfile_open
overlayfs
|
3 |
C |
|
|
14 |
1180d |
1281d
|
22/29 |
1043d |
baabaa505563
ovl: fix tmpfile leak
|
|
WARNING: stack going in the wrong direction? at finish_task_switch.isra.NUM
kernel
|
-1 |
|
|
|
2 |
1151d |
1153d
|
22/29 |
1043d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
|
WARNING in io_get_cqe_overflow
io-uring
|
-1 |
|
|
|
1 |
1180d |
1179d
|
22/29 |
1043d |
e12d7a46f65a
io_uring/msg_ring: fix missing lock on overflow for IOPOLL
|
|
kernel BUG in find_mergeable_anon_vma
mm
|
-1 |
C |
error |
|
4 |
1139d |
1135d
|
22/29 |
1043d |
3dd443254941
mm: enable maple tree RCU mode by default
|
|
unregister_netdevice: waiting for DEV to become free (7)
|
2 |
C |
inconclusive |
|
20422 |
1043d |
1245d
|
22/29 |
1043d |
266e9b3475ba
RDMA/siw: Remove namespace check from siw_netdev_event()
|
|
possible deadlock in nilfs_evict_inode
nilfs
|
4 |
|
|
|
5 |
1123d |
1141d
|
22/29 |
1043d |
42560f9c92cc
nilfs2: fix sysfs interface lifetime
|
|
UBSAN: shift-out-of-bounds in fbcon_set_font
fbdev
|
-1 |
C |
error |
|
3 |
1173d |
1174d
|
22/29 |
1043d |
2b09d5d36498
fbcon: Check font dimension limits
|
|
KASAN: use-after-free Write in gadgetfs_kill_sb
usb
|
22 |
C |
error |
|
5 |
1186d |
1220d
|
22/29 |
1043d |
d18dcfe9860e
USB: gadgetfs: Fix race between mounting and unmounting
|
|
BUG: unable to handle kernel paging request in __alloc_skb
net
|
8 |
|
|
|
1 |
1234d |
1234d
|
22/29 |
1043d |
031af50045ea
arm64: cmpxchg_double*: hazard against entire exchange variable
|
|
possible deadlock in jbd2_log_wait_commit
ext4
|
4 |
C |
done |
|
429 |
1119d |
1143d
|
22/29 |
1043d |
3c92792da850
ext4: Fix deadlock during directory rename
|
|
possible deadlock in static_key_slow_inc (2)
cgroups
|
4 |
C |
error |
|
32622 |
1043d |
1261d
|
22/29 |
1043d |
57dcd64c7e03
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
|
|
INFO: task hung in rfcomm_process_sessions (2)
bluetooth
|
1 |
C |
error |
done |
14 |
1205d |
1479d
|
22/29 |
1043d |
1d80d57ffcb5
Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
|
|
WARNING: proc registration bug in clusterip_tg_check (3)
netfilter
|
-1 |
C |
done |
inconclusive |
9 |
1182d |
1716d
|
22/29 |
1043d |
9db5d918e2c0
netfilter: ip_tables: remove clusterip target
|
|
KASAN: use-after-free Write in nr_release
hams
|
22 |
C |
done |
error |
1784 |
1057d |
2330d
|
22/29 |
1043d |
611792920925
netrom: Fix use-after-free caused by accept on already connected socket
|
|
KASAN: use-after-free Read in do_csum
net
|
19 |
C |
|
|
72 |
1045d |
1211d
|
22/29 |
1043d |
1ac885574470
inet: control sockets should not use current thread task_frag
|
|
KCSAN: data-race in rxrpc_send_data / rxrpc_set_call_completion
net
afs
|
6 |
|
|
|
2 |
1109d |
1088d
|
22/29 |
1043d |
2b5fdc0f5caa
rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
|
|
WARNING in ext4_update_inline_data
ext4
|
-1 |
C |
error |
|
21 |
1139d |
1203d
|
22/29 |
1043d |
2b96b4a5d944
ext4: fix WARNING in ext4_update_inline_data
|
|
KMSAN: uninit-value in ethnl_set_linkmodes (2)
net
|
7 |
C |
|
|
40 |
1076d |
1382d
|
22/29 |
1043d |
9ad685dbfe7e
ethtool: Fix uninitialized number of lanes
|
|
KCSAN: data-race in __neigh_event_send / neigh_resolve_output (7)
net
|
6 |
|
|
|
43 |
1101d |
1074d
|
22/29 |
1043d |
b071af523579
neighbour: annotate lockless accesses to n->nud_state
|
|
general protection fault in free_percpu (2)
wireless
|
2 |
|
|
|
1 |
1189d |
1189d
|
22/29 |
1043d |
80f8a66dede0
Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
|
|
KASAN: null-ptr-deref Read in ida_free (3)
fs
|
11 |
C |
error |
|
4 |
1118d |
1114d
|
22/29 |
1043d |
cb2239c198ad
fs: drop peer group ids under namespace lock
|
|
possible deadlock in ext4_bmap
ext4
|
4 |
C |
error |
|
78083 |
1043d |
1347d
|
22/29 |
1043d |
62913ae96de7
ext4, jbd2: add an optimized bmap for the journal inode
|
|
WARNING in put_pmu_ctx
perf
|
-1 |
C |
error |
|
66 |
1160d |
1214d
|
22/29 |
1043d |
4f64a6c9f6f1
perf: Fix perf_event_pmu_context serialization
|
|
WARNING in htb_destroy
net
|
-1 |
C |
done |
|
2 |
1161d |
1161d
|
22/29 |
1043d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
KASAN: use-after-free Read in xfs_btree_lookup_get_block
xfs
|
19 |
C |
error |
done |
7 |
1107d |
1204d
|
22/29 |
1043d |
22ed903eee23
xfs: verify buffer contents when we skip log replay
|
|
general protection fault in ethnl_set_plca_cfg
net
|
2 |
C |
done |
|
37 |
1186d |
1187d
|
22/29 |
1043d |
28dbf774bc87
plca.c: fix obvious mistake in checking retval
|
|
KMSAN: uninit-value in nilfs_add_checksums_on_logs
nilfs
|
7 |
|
|
|
1079 |
1044d |
1137d
|
22/29 |
1043d |
7397031622e0
nilfs2: initialize "struct nilfs_binfo_dat"->bi_pad field
ef832747a82d
nilfs2: initialize unused bytes in segment summary blocks
|
|
memory leak in tcindex_set_parms (3)
net
|
3 |
C |
|
|
1 |
1231d |
1227d
|
22/29 |
1043d |
8c710f75256b
net/sched: Retire tcindex classifier
|
|
WARNING in hfsplus_cat_write_inode
hfs
|
-1 |
C |
error |
|
141 |
1071d |
1237d
|
22/29 |
1043d |
81b21c0f0138
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
INFO: rcu detected stall in ext4_file_write_iter (6)
ext4
|
1 |
C |
error |
|
8 |
1100d |
1163d
|
22/29 |
1043d |
d125d1349abe
alarmtimer: Prevent starvation by small intervals and SIG_IGN
|
|
KASAN: null-ptr-deref Write in udf_write_fi
udf
|
21 |
C |
inconclusive |
done |
51 |
1175d |
1298d
|
22/29 |
1043d |
e9109a92d2a9
udf: Convert udf_rename() to new directory iteration code
|
|
WARNING in c_start (2)
kernel
|
-1 |
|
|
|
616173 |
1116d |
1134d
|
22/29 |
1043d |
e7304080e0e5
cpumask: relax sanity checking constraints
|
|
KCSAN: data-race in __neigh_update / neigh_resolve_output
net
|
6 |
|
|
|
1 |
1107d |
1074d
|
22/29 |
1043d |
b071af523579
neighbour: annotate lockless accesses to n->nud_state
|
|
WARNING in hfs_write_inode
hfs
|
-1 |
C |
done |
|
3 |
1200d |
1198d
|
22/29 |
1043d |
cb7a95af78d2
hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
|
|
KASAN: slab-out-of-bounds Read in __xfs_xattr_put_listent
xfs
|
17 |
|
|
|
12 |
1157d |
1161d
|
22/29 |
1043d |
dd07bb8b6baf
xfs: revert commit 8954c44ff477
|
|
INFO: task hung in tcindex_partial_destroy_work
|
1 |
C |
done |
unreliable |
84 |
1890d |
2026d
|
22/29 |
1043d |
8c710f75256b
net/sched: Retire tcindex classifier
|
|
general protection fault in nl802154_trigger_scan
wpan
|
8 |
C |
error |
|
31 |
1121d |
1140d
|
22/29 |
1043d |
02f18662f6c6
ieee802154: Prevent user from crashing the host
|
|
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around
bpf
net
|
10 |
C |
done |
|
29 |
1123d |
1128d
|
22/29 |
1043d |
e5995bc7e2ba
bpf, test_run: fix crashes due to XDP frame overwriting/corruption
|
|
KASAN: null-ptr-deref Read in filemap_fault
mm
udf
|
11 |
C |
done |
|
112 |
1071d |
1084d
|
22/29 |
1043d |
38a55db9877c
filemap: Handle error return from __filemap_get_folio()
|
|
WARNING in udf_free_inode
udf
|
-1 |
C |
error |
|
19 |
1154d |
1288d
|
22/29 |
1043d |
85a37983ec69
udf: Detect system inodes linked into directory hierarchy
|
|
INFO: task hung in do_user_addr_fault (3)
ntfs3
|
1 |
C |
|
|
32 |
1126d |
1201d
|
22/29 |
1043d |
0226635c304c
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
|
|
general protection fault in virtio_transport_purge_skbs
net
|
2 |
C |
done |
|
3 |
1120d |
1120d
|
22/29 |
1043d |
b465518dc27d
vsock/loopback: use only sk_buff_head.lock to protect the packet queue
|
|
WARNING in do_symlinkat
ntfs3
|
-1 |
C |
error |
done |
66 |
1047d |
1212d
|
22/29 |
1043d |
267a36ba30a7
fs/ntfs3: Remove noacsrules
|
|
KASAN: use-after-free Read in ext4_find_extent (2)
ext4
|
19 |
C |
error |
|
2 |
1078d |
1202d
|
22/29 |
1043d |
835659598c67
ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
|
|
general protection fault in nilfs_btree_insert
nilfs
|
2 |
C |
error |
|
2 |
1208d |
1205d
|
22/29 |
1043d |
7633355e5c7f
nilfs2: fix general protection fault in nilfs_btree_insert()
|
|
KASAN: slab-out-of-bounds Write in copy_array (2)
bpf
|
21 |
|
|
|
108 |
1043d |
1072d
|
22/29 |
1043d |
45435d8da71f
bpf: Always use maximal size for copy_array()
|
|
WARNING: stack going in the wrong direction? at __sys_setsockopt
net
|
-1 |
|
|
|
6 |
1150d |
1155d
|
22/29 |
1043d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
|
KMSAN: uninit-value in ondemand_readahead
fs
mm
|
7 |
C |
|
|
221 |
1141d |
1304d
|
22/29 |
1043d |
3e35102666f8
fs/cramfs/inode.c: initialize file_ra_state
|
|
upstream test error: unregister_netdevice: waiting for DEV to become free
net
|
-1 |
|
|
|
204 |
1155d |
1162d
|
22/29 |
1043d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
KMSAN: uninit-value in longest_match
btrfs
|
7 |
|
|
|
4 |
1219d |
1224d
|
22/29 |
1043d |
eadd7deca0ad
btrfs: zlib: zero-initialize zlib workspace
|
|
WARNING in j1939_session_deactivate_activate_next
can
|
-1 |
C |
error |
done |
502 |
1108d |
1514d
|
22/29 |
1043d |
d0553680f94c
can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
|
|
WARNING in net_free
net
|
-1 |
|
|
|
1 |
1097d |
1097d
|
22/29 |
1043d |
9744d2bf1976
smc: Fix use-after-free in tcp_write_timer_handler().
|
|
WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x0 vs. 64x768)
|
-1 |
C |
unreliable |
error |
24 |
1376d |
1375d
|
22/29 |
1043d |
1935f0deb611
drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
|
|
WARNING in cleanup_net (2)
net
|
-1 |
C |
error |
|
72 |
1078d |
1105d
|
22/29 |
1043d |
9744d2bf1976
smc: Fix use-after-free in tcp_write_timer_handler().
|
|
KASAN: use-after-free Read in cfusbl_device_notify
net
|
19 |
C |
done |
|
341 |
1135d |
1282d
|
22/29 |
1043d |
9781e98a9711
net: caif: Fix use-after-free in cfusbl_device_notify()
|
|
KMSAN: uninit-value in kalmia_send_init_packet
usb
|
7 |
C |
|
|
2 |
1172d |
1171d
|
22/29 |
1043d |
c68f345b7c42
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
|
|
general protection fault in taprio_dequeue
net
|
2 |
|
|
|
1 |
1202d |
1202d
|
22/29 |
1043d |
3a415d59c1db
net/sched: sch_taprio: fix possible use-after-free
|
|
WARNING in ip6erspan_tunnel_xmit (2)
net
|
-1 |
C |
unreliable |
|
5 |
1123d |
1123d
|
22/29 |
1043d |
8e50ed774554
erspan: do not use skb_mac_header() in ndo_start_xmit()
|
|
KMSAN: uninit-value in qrtr_tx_resume
net
arm-msm
|
7 |
C |
|
|
8 |
1116d |
1177d
|
22/29 |
1043d |
6417070918de
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
|
|
general protection fault in __d_add
ntfs3
|
10 |
C |
error |
|
16 |
1229d |
1284d
|
22/29 |
1043d |
254e69f284d7
fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
|
|
INFO: task hung in tls_sw_sendpage (3)
net
|
1 |
|
|
|
30 |
1147d |
1144d
|
22/29 |
1043d |
f3221361dc85
net: tls: avoid hanging tasks on the tx_lock
|
|
WARNING in pegasus_open/usb_submit_urb
input
usb
|
-1 |
C |
|
|
7 |
1124d |
2134d
|
22/29 |
1043d |
b3d80fd27a3c
Input: pegasus-notetaker - check pipe type when probing
|
|
WARNING: locking bug in umh_complete
kernel
|
4 |
|
|
|
1 |
1180d |
1176d
|
22/29 |
1043d |
eedeb787ebb5
freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL
|
|
possible deadlock in j1939_sk_errqueue
can
|
4 |
C |
unreliable |
|
227 |
1115d |
1652d
|
22/29 |
1043d |
d1366b283d94
can: j1939: prevent deadlock by moving j1939_sk_errqueue()
|
|
KASAN: use-after-free Read in __update_extent_tree_range
f2fs
|
19 |
C |
done |
|
9 |
1155d |
1202d
|
22/29 |
1043d |
a46bebd502fe
f2fs: synchronize atomic write aborts
|
|
WARNING in nla_get_range_unsigned (2)
net
|
-1 |
C |
done |
|
433 |
1119d |
1154d
|
22/29 |
1043d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
KASAN: slab-out-of-bounds Read in indx_insert_into_buffer
ntfs3
|
17 |
C |
error |
|
2 |
1229d |
1228d
|
22/29 |
1043d |
b8c44949044e
fs/ntfs3: Fix OOB read in indx_insert_into_buffer
|
|
WARNING: kmalloc bug in btrfs_ioctl_send
btrfs
|
-1 |
C |
done |
|
53 |
1164d |
1234d
|
22/29 |
1043d |
33e17b3f5ab7
btrfs: send: limit number of clones and allocated memory size
|
|
WARNING in shark_write_reg/usb_submit_urb
usb
|
-1 |
C |
error |
|
63 |
1092d |
2466d
|
22/29 |
1043d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
BUG: unable to handle kernel paging request in atm_tc_destroy
net
|
8 |
C |
error |
|
3 |
1162d |
1161d
|
22/29 |
1043d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
kernel BUG in ip_frag_next
net
|
-1 |
C |
done |
|
9 |
1177d |
1184d
|
22/29 |
1043d |
f72ff8b81ebc
net: fix kfree_skb_list use of skb_mark_not_on_list
|
|
WARNING in xfs_qm_dqget_cache_insert
xfs
|
-1 |
C |
error |
|
123 |
1069d |
1241d
|
22/29 |
1043d |
4b827b3f305d
xfs: remove WARN when dquot cache insertion fails
|
|
KMSAN: kernel-infoleak in _copy_to_iter (8)
mm
|
21 |
C |
|
|
21180 |
1043d |
1137d
|
22/29 |
1043d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
WARNING in io_cqring_event_overflow
io-uring
|
-1 |
C |
|
|
7 |
1183d |
1190d
|
22/29 |
1043d |
544d163d659d
io_uring: lock overflowing for IOPOLL
|
|
net test error: WARNING: suspicious RCU usage in veth_set_xdp_features
net
|
-1 |
|
|
|
24 |
1128d |
1130d
|
22/29 |
1043d |
5ce76fe1eead
veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
|
|
riscv/fixes boot error: WARNING in __apply_to_page_range (2)
bpf
riscv
|
-1 |
|
|
|
5 |
1151d |
1212d
|
22/29 |
1043d |
96f9d4daf745
riscv: Rework kasan population functions
|
|
linux-next test error: WARNING: suspicious RCU usage in veth_set_xdp_features
net
|
-1 |
|
|
|
12 |
1128d |
1129d
|
22/29 |
1043d |
5ce76fe1eead
veth: rely on rtnl_dereference() instead of on rcu_dereference() in veth_set_xdp_features()
|
|
KCSAN: data-race in netlink_getname / netlink_insert (4)
net
|
6 |
|
|
|
2 |
1178d |
1183d
|
22/29 |
1043d |
c1bb9484e3b0
netlink: annotate data races around nlk->portid
|
|
WARNING: locking bug in inet_autobind
net
|
4 |
C |
done |
error |
103 |
1204d |
2527d
|
22/29 |
1043d |
0b2c59720e65
l2tp: close all race conditions in l2tp_tunnel_register()
|
|
UBSAN: array-index-out-of-bounds in qfq_update_agg (4)
net
|
15 |
|
|
|
1 |
1094d |
1094d
|
22/29 |
1043d |
3037933448f6
net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
|
|
WARNING in rmqueue
erofs
|
-1 |
C |
error |
|
2 |
1112d |
1234d
|
22/29 |
1043d |
cc4efd3dd2ac
erofs: stop parsing non-compact HEAD index if clusterofs is invalid
|
|
KMSAN: kernel-infoleak in nilfs_ioctl_wrap_copy
nilfs
|
9 |
|
|
|
4 |
1110d |
1137d
|
22/29 |
1043d |
003587000276
nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
|
|
KMSAN: uninit-value in raw_sock_get
net
|
7 |
|
|
|
1 |
1103d |
1101d
|
22/29 |
1043d |
0a78cf7264d2
raw: Fix NULL deref in raw_get_next().
|
|
BUG: scheduling while atomic in msleep
net
|
5 |
C |
done |
|
40 |
1176d |
1185d
|
22/29 |
1043d |
ea4fdbaa2f77
net/sched: sch_taprio: do not schedule in taprio_reset()
|
|
WARNING in __dev_queue_xmit (2)
net
|
-1 |
C |
|
|
76 |
1075d |
1147d
|
22/29 |
1043d |
693aa2c0d9b6
ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
|
|
memory leak in ath9k_hif_usb_rx_cb
wireless
|
3 |
C |
|
|
1 |
1219d |
1214d
|
22/29 |
1043d |
0af54343a762
wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
|
|
kernel BUG in icmp_glue_bits
net
|
-1 |
|
|
|
2 |
1049d |
1113d
|
22/29 |
1043d |
7d63b6712538
icmp: guard against too small mtu
|
|
general protection fault in bpf_struct_ops_link_create
bpf
net
|
2 |
C |
done |
|
17 |
1117d |
1119d
|
22/29 |
1043d |
55fbae05476d
bpf: Check IS_ERR for the bpf_map_get() return value
|
|
WARNING: can't access registers at entry_SYSCALL_64_after_hwframe
|
-1 |
C |
|
|
15 |
1150d |
1155d
|
22/29 |
1043d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
|
INFO: task hung in find_inode_fast
ext4
|
1 |
C |
error |
|
28 |
1045d |
1194d
|
22/29 |
1043d |
0f7bfd6f8164
ext4: fix task hung in ext4_xattr_delete_inode
|
|
memory leak in io_submit_sqes (4)
io-uring
|
3 |
C |
|
|
1 |
1194d |
1193d
|
22/29 |
1043d |
febb985c06cb
io_uring/poll: add hash if ready poll request can't complete inline
|
|
WARNING in hfsplus_cat_read_inode
hfs
|
-1 |
C |
error |
|
599 |
1067d |
1232d
|
22/29 |
1043d |
81b21c0f0138
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
KASAN: slab-out-of-bounds Read in udf_get_filelongad
udf
|
17 |
C |
|
|
2 |
1222d |
1221d
|
22/29 |
1043d |
53cafe1d6d8e
udf: Do not bother merging very long extents
|
|
BUG: unable to handle kernel NULL pointer dereference in ni_write_inode
ntfs3
|
10 |
C |
error |
|
596 |
1069d |
1301d
|
22/29 |
1043d |
8dae4f6341e3
fs/ntfs3: Fix NULL dereference in ni_write_inode
db2a3cc6a348
fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode'
|
|
KASAN: use-after-free Read in put_pmu_ctx
perf
|
19 |
C |
|
|
51 |
1198d |
1214d
|
22/29 |
1043d |
a551844e345b
perf: Fix use-after-free in error path
|
|
KASAN: stack-out-of-bounds Read in proc_pid_stack
riscv
|
17 |
|
|
|
3 |
1046d |
1080d
|
22/29 |
1043d |
76950340cf03
riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
|
|
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table
bridge
netfilter
|
17 |
C |
error |
|
4 |
1154d |
1154d
|
22/29 |
1043d |
e58a171d35e3
netfilter: ebtables: fix table blob use-after-free
|
|
WARNING: refcount bug in qrtr_recvmsg (2)
arm-msm
net
|
13 |
C |
error |
|
2 |
1127d |
1121d
|
22/29 |
1043d |
44d807320000
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
|
|
WARNING in remove_proc_entry (5)
scsi
|
-1 |
C |
|
|
158 |
1126d |
1168d
|
22/29 |
1043d |
2172e84ea00b
SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes
|
|
possible deadlock in __jbd2_log_wait_for_space
ext4
|
4 |
C |
error |
|
34993 |
1099d |
1347d
|
22/29 |
1043d |
62913ae96de7
ext4, jbd2: add an optimized bmap for the journal inode
|
|
WARNING in split_huge_page_to_list (2)
mm
|
-1 |
C |
error |
|
2334 |
1068d |
1332d
|
22/29 |
1043d |
4737edbbdd49
mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
|
|
KASAN: slab-use-after-free Read in mas_next_entry
mm
|
19 |
syz |
error |
|
3 |
1105d |
1108d
|
22/29 |
1043d |
f4e9e0e69468
mm/mempolicy: fix use-after-free of VMA iterator
|
|
UBSAN: shift-out-of-bounds in blkstol2
jfs
|
-1 |
C |
error |
|
2 |
1262d |
1262d
|
22/29 |
1043d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
WARNING in sock_map_del_link
bpf
net
|
-1 |
|
|
|
91 |
1099d |
1099d
|
22/29 |
1043d |
8c5c2a4898e3
bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
|
|
WARNING in nilfs_dat_prepare_end
nilfs
|
-1 |
C |
error |
|
288 |
1137d |
1291d
|
22/29 |
1043d |
5124a0a54985
nilfs2: replace WARN_ONs for invalid DAT metadata block requests
|
|
general protection fault in cache_first_page
squashfs
|
10 |
C |
error |
|
4 |
1183d |
1196d
|
22/29 |
1043d |
f65c4bbbd682
Squashfs: fix handling and sanity checking of xattr_ids count
72e544b1b283
squashfs: harden sanity check in squashfs_read_xattr_id_table
|
|
general protection fault in jhash
wireless
|
2 |
C |
done |
done |
15 |
1092d |
1111d
|
22/29 |
1043d |
2bef4d1fb8b3
wifi: mac80211_hwsim: fix potential NULL deref in hwsim_pmsr_report_nl()
|
|
general protection fault in mark_buffer_dirty_inode (2)
udf
|
2 |
C |
|
|
32 |
1076d |
1234d
|
22/29 |
1043d |
e9109a92d2a9
udf: Convert udf_rename() to new directory iteration code
|
|
WARNING in blkdev_put (2)
block
|
-1 |
C |
unreliable |
|
250 |
1119d |
1147d
|
22/29 |
1043d |
428913bce1e6
block: fix wrong mode for blkdev_put() from disk_scan_partitions()
|
|
WARNING: refcount bug in nr_release (4)
hams
|
13 |
C |
|
|
24 |
1158d |
1463d
|
22/29 |
1043d |
409db27e3a2e
netrom: Fix use-after-free of a listening socket.
|
|
KASAN: use-after-free Read in hfsplus_release_folio
hfs
|
19 |
C |
error |
|
23 |
1141d |
1216d
|
22/29 |
1043d |
07db5e247ab5
fs: hfsplus: fix UAF issue in hfsplus_put_super
|
|
net-next boot error: BUG: bad usercopy in qrtr_sendmsg
hardening
mm
|
-1 |
|
|
|
30 |
1162d |
1163d
|
22/29 |
1043d |
0b34d68049b0
net: enable usercopy for skb_small_head_cache
|
|
memory leak in __proc_create
scsi
usb
|
3 |
syz |
|
|
1 |
1136d |
1136d
|
22/29 |
1043d |
be03df3d4bfe
scsi: core: Fix a procfs host directory removal regression
|
|
KASAN: use-after-free Read in ovs_vport_locate
openvswitch
|
19 |
|
|
|
1 |
1218d |
1213d
|
22/29 |
1043d |
95637d91fefd
net: openvswitch: release vport resources on failure
|
|
general protection fault in pn533_out_complete
nfc
|
2 |
C |
error |
|
15 |
1174d |
1188d
|
22/29 |
1043d |
484b7059796e
nfc: pn533: initialize struct pn533_out_arg properly
|
|
general protection fault in __xfs_free_extent
xfs
|
10 |
C |
error |
done |
17 |
1097d |
1215d
|
22/29 |
1043d |
b2ccab3199aa
xfs: pass per-ag references to xfs_free_extent
|
|
WARNING: bad unlock balance in ext4_rename2
ext4
|
4 |
|
|
|
105 |
1119d |
1137d
|
22/29 |
1043d |
70e42feab2e2
ext4: fix possible double unlock when moving a directory
|
|
INFO: task hung in lock_mount
nilfs
|
1 |
C |
error |
error |
1238 |
1093d |
2908d
|
22/29 |
1043d |
a6a491c04888
nilfs2: fix infinite loop in nilfs_mdt_get_block()
|
|
kernel BUG in hpage_collapse_scan_file
mm
|
-1 |
C |
unreliable |
|
3 |
1095d |
1133d
|
22/29 |
1043d |
2ce0bdfebc74
mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
|
|
INFO: task hung in nfnetlink_rcv_msg (3)
netfilter
|
1 |
C |
done |
|
5 |
1224d |
1235d
|
22/29 |
1043d |
5e29dc36bd5e
netfilter: ipset: Rework long task execution when adding/deleting entries
|
|
WARNING in io_sync_cancel
io-uring
|
-1 |
C |
error |
|
3 |
1216d |
1212d
|
22/29 |
1043d |
23fffb2f09ce
io_uring/cancel: re-grab ctx mutex after finishing wait
|
|
WARNING: refcount bug in consume_skb
net
|
13 |
|
|
|
3 |
1162d |
1171d
|
22/29 |
1043d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
KMSAN: uninit-value in xfs_getfsmap_helper
xfs
|
7 |
|
|
|
1 |
1167d |
1161d
|
22/29 |
1043d |
60b730a40c43
xfs: fix uninitialized variable access
|
|
WARNING in io_cqring_overflow_flush
io-uring
|
-1 |
C |
|
|
2 |
1216d |
1212d
|
22/29 |
1043d |
52ea806ad983
io_uring: finish waiting before flushing overflow entries
|
|
KASAN: slab-out-of-bounds Write in copy_verifier_state
bpf
|
21 |
C |
error |
done |
825 |
1197d |
1214d
|
22/29 |
1043d |
45435d8da71f
bpf: Always use maximal size for copy_array()
|
|
INFO: trying to register non-static key in net_free
net
|
-1 |
syz |
error |
|
17982 |
1150d |
1163d
|
22/29 |
1043d |
6e77a5a4af05
net: initialize net->notrefcnt_tracker earlier
|
|
BUG: unable to handle kernel paging request in clear_user_rep_good
iomap
|
8 |
syz |
error |
done |
2 |
1112d |
1168d
|
22/29 |
1043d |
d2c95f9d6802
x86: don't use REP_GOOD or ERMS for user memory clearing
|
|
WARNING: suspicious RCU usage in bond_mii_monitor
net
|
4 |
C |
|
|
13 |
1197d |
1216d
|
22/29 |
1043d |
42c7ded0eeac
bonding: fix lockdep splat in bond_miimon_commit()
|
|
general protection fault in start_transaction
btrfs
|
2 |
C |
error |
|
3 |
1198d |
1211d
|
22/29 |
1043d |
b7adbf9ada35
btrfs: fix race between quota rescan and disable leading to NULL pointer deref
|
|
WARNING in mbind_range
mm
|
-1 |
C |
error |
|
3 |
1193d |
1193d
|
22/29 |
1043d |
17dc622c7b0f
maple_tree: fix mas_prev() and mas_find() state handling
|
|
BUG: stack guard page was hit in inet6_release
bpf
net
|
-1 |
C |
done |
|
4 |
1178d |
1227d
|
22/29 |
1043d |
ddce1e091757
bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
|
|
general protection fault in ext4_fill_super (2)
ext4
|
2 |
|
|
|
1 |
1085d |
1085d
|
22/29 |
1043d |
d5e72c4e3256
ext4: fix lost error code reporting in __ext4_fill_super()
|
|
memory leak in copy_process (5)
kernel
|
3 |
C |
|
|
1 |
1140d |
1136d
|
22/29 |
1043d |
2aab4b969002
af_unix: fix struct pid leaks in OOB support
|
|
possible deadlock in l2tp_tunnel_register (2)
net
|
4 |
C |
|
|
153 |
1137d |
1147d
|
22/29 |
1043d |
0b2c59720e65
l2tp: close all race conditions in l2tp_tunnel_register()
|
|
KASAN: slab-use-after-free Read in tcf_action_destroy
net
|
19 |
C |
error |
|
32 |
1070d |
1145d
|
22/29 |
1043d |
dfd2f0eb2347
net/sched: flower: fix fl_change() error recovery path
|
|
possible deadlock in release_sock
net
|
4 |
C |
done |
|
42 |
1183d |
1185d
|
22/29 |
1043d |
b9fb10d131b8
l2tp: prevent lockdep issue in l2tp_tunnel_register()
|
|
possible deadlock in tty_port_tty_get
serial
|
4 |
C |
|
|
22661 |
1092d |
1294d
|
22/29 |
1043d |
1007843a9190
mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
|
|
WARNING in j1939_xtp_rx_abort_one
|
-1 |
C |
done |
|
379 |
1179d |
1716d
|
22/29 |
1043d |
d0553680f94c
can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
|
|
WARNING: suspicious RCU usage in mas_walk
kernfs
|
4 |
C |
error |
|
234 |
1119d |
1448d
|
22/29 |
1043d |
6db504ce55bd
mm/ksm: fix race with VMA iteration and mm_struct teardown
|
|
memory leak in nfc_genl_se_io
net
nfc
|
3 |
C |
|
|
1 |
1158d |
1154d
|
22/29 |
1043d |
25ff6f8a5a3b
nfc: fix memory leak of se_io context in nfc_genl_se_io
|
|
BUG: bad usercopy in con_font_op
hardening
mm
|
-1 |
C |
done |
|
1 |
1140d |
1140d
|
22/29 |
1043d |
18365ebf23f3
tty: vt: protect KD_FONT_OP_GET_TALL from unbound access
|
|
general protection fault in xpad_probe
usb
|
2 |
C |
done |
|
24 |
1079d |
1101d
|
22/29 |
1043d |
53bea86b5712
Revert "Input: xpad - fix support for some third-party controllers"
|
|
BUG: bad usercopy in put_cmsg
hardening
mm
|
-1 |
C |
|
|
3 |
1158d |
1159d
|
22/29 |
1043d |
2558b8039d05
net: use a bounce buffer for copying skb->mark
|
|
general protection fault in tcindex_set_parms
net
|
2 |
C |
done |
|
2 |
1158d |
1158d
|
22/29 |
1043d |
42018a322bd4
net/sched: tcindex: search key must be 16 bits
|
|
KCSAN: data-race in strscpy / strscpy (3)
ext4
mm
|
6 |
|
|
|
3 |
1107d |
1091d
|
22/29 |
1043d |
cf587db2ee02
kernel: Allow a kernel thread's name to be set in copy_process
|
|
UBSAN: shift-out-of-bounds in dbAllocBits
jfs
|
-1 |
C |
error |
done |
4 |
1151d |
1284d
|
22/29 |
1043d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
kernel BUG in fou_build_udp
net
|
-1 |
C |
|
|
1 |
1078d |
1078d
|
22/29 |
1043d |
c88f8d5cd95f
UPSTREAM: sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
|
|
KASAN: use-after-free Read in io_worker_get
io-uring
|
19 |
C |
done |
done |
5 |
1159d |
1193d
|
22/29 |
1043d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
INFO: task hung in nilfs_segctor_thread
nilfs
|
1 |
C |
error |
|
94 |
1080d |
1254d
|
22/29 |
1043d |
99b9402a36f0
nilfs2: fix underflow in second superblock position calculations
|
|
KASAN: use-after-free Read in do_accept
hams
|
19 |
|
|
|
1 |
1189d |
1184d
|
22/29 |
1043d |
409db27e3a2e
netrom: Fix use-after-free of a listening socket.
|
|
general protection fault in drm_crtc_next_vblank_start
dri
|
2 |
C |
done |
|
4 |
1112d |
1109d
|
22/29 |
1043d |
6f1ccbf07453
drm/vblank: Fix for drivers that do not drm_vblank_init()
|
|
KCSAN: data-race in ip_finish_output2 / ip_tunnel_xmit
net
|
6 |
|
|
|
1 |
1173d |
1172d
|
22/29 |
1043d |
4b397c06cb98
net: tunnels: annotate lockless accesses to dev->needed_headroom
|
|
memory leak in nr_create (2)
hams
|
3 |
C |
|
|
11 |
1113d |
1173d
|
22/29 |
1043d |
611792920925
netrom: Fix use-after-free caused by accept on already connected socket
|
|
kernel BUG in rxrpc_put_call
afs
net
|
-1 |
C |
done |
|
9 |
1181d |
1193d
|
22/29 |
1043d |
01644a1f98ff
rxrpc: Fix wrong error return in rxrpc_connect_call()
|
|
kernel BUG in rxrpc_put_peer
net
afs
|
-1 |
C |
|
|
80 |
1184d |
1227d
|
22/29 |
1043d |
9d35d880e0e4
rxrpc: Move client call connection to the I/O thread
03fc55adf876
rxrpc: Only disconnect calls in the I/O thread
|
|
WARNING in nilfs_dat_commit_end
nilfs
|
-1 |
C |
error |
|
267 |
1137d |
1294d
|
22/29 |
1043d |
602ce7b8e134
nilfs2: prevent WARNING in nilfs_dat_commit_end()
|
|
KASAN: slab-use-after-free Read in kvm_tdp_mmu_invalidate_all_roots
kvm-x86
|
19 |
|
|
|
3 |
1090d |
1088d
|
22/29 |
1043d |
edbdb43fc96b
KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
|
|
WARNING: bad unlock balance in l2cap_recv_frame
bluetooth
|
4 |
|
|
|
75 |
1086d |
1097d
|
22/29 |
1043d |
25e97f7b1866
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
|
possible deadlock in freeze_super (2)
gfs2
|
4 |
C |
error |
done |
15 |
1068d |
1284d
|
22/29 |
1043d |
b66f723bb552
gfs2: Improve gfs2_make_fs_rw error handling
|
|
INFO: task hung in write_cache_pages (2)
mm
fs
|
1 |
C |
done |
|
36 |
1071d |
1142d
|
22/29 |
1043d |
fb3592c41a44
migrate_pages: fix deadlock in batched migration
|
|
KMSAN: uninit-value in vfs_write
fs
|
7 |
C |
|
|
3 |
1167d |
1136d
|
22/29 |
1043d |
2b4c99f7d9a5
can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
|
|
WARNING in _copy_from_iter
block
tipc
|
-1 |
C |
error |
|
32057 |
1130d |
1225d
|
22/29 |
1043d |
11a4d6f67cf5
tipc: fix kernel warning when sending SYN message
|
|
UBSAN: shift-out-of-bounds in dbFindCtl
jfs
|
-1 |
C |
inconclusive |
done |
45 |
1143d |
1285d
|
22/29 |
1043d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
INFO: rcu detected stall in devlink_nl_cmd_port_get_dumpit
net
|
1 |
syz |
|
|
7 |
1142d |
1159d
|
22/29 |
1043d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
KASAN: use-after-free Read in io_wq_worker_wake
io-uring
|
19 |
C |
done |
done |
1 |
1160d |
1193d
|
22/29 |
1043d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
UBSAN: array-index-out-of-bounds in __gfs2_iomap_get
gfs2
|
15 |
C |
error |
|
26 |
1088d |
1212d
|
22/29 |
1043d |
cfcdb5bad34f
gfs2: Fix inode height consistency check
|
|
KASAN: slab-use-after-free Read in class_register
usb
|
19 |
C |
done |
|
13 |
1113d |
1111d
|
22/29 |
1043d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
memory leak in ath9k_hif_usb_firmware_cb
wireless
|
3 |
C |
|
|
1591 |
1187d |
1983d
|
22/29 |
1043d |
9b25e3985477
wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
|
|
WARNING in inet_sock_destruct (3)
net
|
-1 |
C |
|
|
87 |
1047d |
1149d
|
22/29 |
1043d |
880ce5f20033
net: avoid skb end_offset change in __skb_unclone_keeptruesize()
|
|
WARNING in devlink_free
net
|
-1 |
|
|
|
10 |
1178d |
1191d
|
22/29 |
1043d |
93e71edfd90c
devlink: keep the instance mutex alive until references are gone
|
|
KMSAN: uninit-value in ipv6_find_tlv
net
|
7 |
C |
|
|
271 |
1084d |
2438d
|
22/29 |
1043d |
ea30388baebc
ipv6: Fix an uninit variable access bug in __ip6_make_skb()
|
|
WARNING in mark_buffer_dirty (4)
bfs
nilfs
|
-1 |
C |
inconclusive |
|
1152 |
1043d |
1382d
|
22/29 |
1043d |
28a65b49eb53
nilfs2: do not write dirty data after degenerating to read-only
|
|
possible deadlock in __nilfs_error (2)
nilfs
|
4 |
|
|
|
1 |
1125d |
1121d
|
22/29 |
1043d |
42560f9c92cc
nilfs2: fix sysfs interface lifetime
|
|
WARNING in fscrypt_destroy_keyring
ext4
fscrypt
|
-1 |
C |
|
|
2 |
1132d |
1130d
|
22/29 |
1043d |
ccb820dc7d22
fscrypt: destroy keyring after security_sb_delete()
|
|
WARNING in default_device_exit_batch (4)
net
|
-1 |
C |
error |
|
954 |
1119d |
1245d
|
22/29 |
1043d |
e667d4690986
bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
|
|
upstream-arm64 build error
|
-1 |
|
|
|
11 |
1151d |
1154d
|
22/29 |
1043d |
d54170812ef1
arm64: fix .idmap.text assertion for large kernels
|
|
WARNING: locking bug in __perf_event_task_sched_in (2)
perf
|
4 |
|
|
|
79 |
1174d |
1192d
|
22/29 |
1043d |
93e71edfd90c
devlink: keep the instance mutex alive until references are gone
|
|
memory leak in regulatory_hint_core
wireless
|
3 |
C |
|
|
2 |
1242d |
1270d
|
22/29 |
1043d |
399ab7fe0fa0
net: sched: fix memory leak in tcindex_set_parms
|
|
WARNING in __udf_add_aext
udf
|
-1 |
C |
error |
|
170 |
1046d |
1284d
|
22/29 |
1043d |
e9109a92d2a9
udf: Convert udf_rename() to new directory iteration code
|
|
BUG: unable to handle kernel NULL pointer dereference in __writepage
udf
|
10 |
C |
done |
|
17 |
1152d |
1216d
|
22/29 |
1043d |
79d3c6dbada4
udf: Convert in-ICB files to use udf_writepages()
|
|
KMSAN: kernel-infoleak in copyout (2)
net
|
17 |
C |
|
|
6723 |
1043d |
2212d
|
22/29 |
1043d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
WARNING in ath6kl_htc_pipe_rx_complete
usb
wireless
|
-1 |
C |
error |
|
2008 |
1082d |
2352d
|
22/29 |
1043d |
75c4a8154cb6
wifi: ath6kl: reduce WARN to dev_dbg() in callback
|
|
WARNING in udf_setsize
udf
|
-1 |
C |
done |
|
24 |
1046d |
1216d
|
22/29 |
1043d |
256fe4162f8b
udf: Do not update file length for failed writes to inline files
|
|
kernel BUG in hfs_bnode_put
hfs
|
-1 |
C |
error |
|
5 |
1174d |
1228d
|
22/29 |
1043d |
a9dc087fd3c4
hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
|
|
KASAN: null-ptr-deref Read in __fl_put
net
|
11 |
C |
error |
|
16 |
1125d |
1144d
|
22/29 |
1043d |
dfd2f0eb2347
net/sched: flower: fix fl_change() error recovery path
|
|
general protection fault in udf_fiiter_write_fi
udf
|
2 |
C |
error |
|
2 |
1190d |
1193d
|
22/29 |
1043d |
f950fd052913
udf: Protect rename against modification of moved directory
|
|
general protection fault in sctp_outq_tail
sctp
|
8 |
C |
error |
|
5 |
1109d |
1121d
|
22/29 |
1043d |
2584024b2355
sctp: check send stream number after wait_for_sndbuf
|
|
WARNING: CPU: NUM PID: NUM at mm/page_alloc.c:LINE get_page_from_freeli
mm
erofs
|
-1 |
C |
error |
|
1 |
1215d |
1211d
|
22/29 |
1043d |
12724ba38992
erofs: fix kvcalloc() misuse with __GFP_NOFAIL
|
|
WARNING in kvm_tdp_mmu_invalidate_all_roots
kvm-x86
|
-1 |
|
|
|
1658 |
1088d |
1091d
|
22/29 |
1043d |
edbdb43fc96b
KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
|
|
WARNING in kvm_arch_vcpu_ioctl_run (4)
kvm-x86
|
-1 |
C |
error |
|
288 |
1043d |
1127d
|
22/29 |
1043d |
0dc902267cb3
KVM: x86: Suppress pending MMIO write exits if emulator detects exception
|
|
WARNING in __mod_timer
keyrings
lsm
|
-1 |
|
|
|
2 |
1110d |
1144d
|
22/29 |
1043d |
63a759694eed
debugobject: Prevent init race with static objects
|
|
general protection fault in hrtimer_active (5)
kernel
|
2 |
C |
error |
|
22 |
1158d |
1162d
|
22/29 |
1043d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
WARNING in __kernel_read (2)
fsverity
|
-1 |
C |
error |
|
318 |
1087d |
2029d
|
22/29 |
1043d |
04839139213c
fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
|
|
INFO: task hung in extent_write_cache_pages
btrfs
|
1 |
C |
error |
|
5 |
1074d |
1183d
|
22/29 |
1043d |
519b7e13b5ae
btrfs: lock the inode in shared mode before starting fiemap
|
|
kernel BUG in inet_sock_destruct
net
|
-1 |
C |
error |
|
3 |
1199d |
1199d
|
22/29 |
1043d |
1ac885574470
inet: control sockets should not use current thread task_frag
|
|
possible deadlock in inet_put_port
net
|
4 |
|
|
|
2 |
1184d |
1184d
|
22/29 |
1043d |
b9fb10d131b8
l2tp: prevent lockdep issue in l2tp_tunnel_register()
|
|
BUG: corrupted list in taprio_destroy
net
|
8 |
C |
done |
|
2 |
1160d |
1160d
|
22/29 |
1043d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
WARNING: suspicious RCU usage in mas_start
kernfs
|
4 |
C |
error |
done |
23 |
1115d |
1147d
|
22/29 |
1043d |
6db504ce55bd
mm/ksm: fix race with VMA iteration and mm_struct teardown
|
|
WARNING in shark_write_val/usb_submit_urb
usb
|
-1 |
C |
error |
done |
51 |
1100d |
2460d
|
22/29 |
1043d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
memory leak in prctl
mm
|
3 |
C |
|
|
1 |
1216d |
1212d
|
22/29 |
1043d |
a1193de562f5
mm: fix vma->anon_name memory leak for anonymous shmem VMAs
|
|
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (6)
net
|
6 |
|
|
|
2 |
1111d |
1109d
|
22/29 |
1043d |
a1865f2e7d10
netlink: annotate lockless accesses to nlk->max_recvmsg_len
|
|
WARNING in print_tainted
ext4
|
-1 |
C |
|
|
162 |
1043d |
1214d
|
22/29 |
1043d |
c6adf659a8ba
can: isotp: check CAN address family in isotp_bind()
4f027cba8216
can: isotp: split tx timer into transmission and timeout
|
|
WARNING in vkms_get_vblank_timestamp
dri
|
-1 |
syz |
error |
|
41 |
1046d |
1106d
|
22/29 |
1043d |
f2c7ca890182
drm/atomic-helper: Don't set deadline for modesets
|
|
KASAN: invalid-free in skb_free_head (2)
net
|
24 |
C |
error |
|
25 |
1084d |
1150d
|
22/29 |
1043d |
880ce5f20033
net: avoid skb end_offset change in __skb_unclone_keeptruesize()
|
|
riscv/fixes test error: BUG: soft lockup in corrupted (2)
net
virt
|
-1 |
|
|
|
4 |
1283d |
1359d
|
22/29 |
1043d |
61fc1ee8be26
riscv: Bump COMMAND_LINE_SIZE value to 1024
|
|
general protection fault in skb_dequeue (3)
wireless
|
2 |
C |
done |
|
6 |
1161d |
1170d
|
22/29 |
1043d |
33b3b041543e
splice: Add a func to do a splice from an O_DIRECT file without ITER_PIPE
|
|
possible deadlock in jbd2_journal_lock_updates
ext4
|
4 |
C |
error |
|
83148 |
1050d |
1347d
|
22/29 |
1043d |
62913ae96de7
ext4, jbd2: add an optimized bmap for the journal inode
|
|
memory leak in __build_skb (3)
wireless
|
3 |
C |
|
|
2 |
1203d |
1201d
|
22/29 |
1043d |
9b25e3985477
wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
|
|
INFO: task hung in freeze_super (3)
gfs2
|
1 |
C |
error |
|
19 |
1064d |
1224d
|
22/29 |
1043d |
b66f723bb552
gfs2: Improve gfs2_make_fs_rw error handling
|
|
KMSAN: uninit-value in qdisc_run
kernel
|
7 |
C |
|
|
2 |
1255d |
1191d
|
22/29 |
1043d |
3a415d59c1db
net/sched: sch_taprio: fix possible use-after-free
|
|
UBSAN: shift-out-of-bounds in ext2_fill_super
ext4
|
-1 |
C |
|
|
2265 |
1043d |
1147d
|
22/29 |
1043d |
62aeb94433fc
ext2: Check block size validity during mount
|
|
KASAN: wild-memory-access Read in io_wq_worker_running
io-uring
|
19 |
C |
|
|
39 |
1189d |
1195d
|
22/29 |
1043d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
KASAN: slab-out-of-bounds Read in hdr_delete_de
ntfs3
|
17 |
C |
error |
|
2 |
1228d |
1227d
|
22/29 |
1043d |
ab84eee4c7ab
fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
|
|
WARNING in inet_csk_destroy_sock (3)
net
|
-1 |
|
|
|
1 |
1057d |
1057d
|
22/29 |
1056d |
e0833d1fedb0
dccp/tcp: Fixup bhash2 bucket when connect() fails.
|
|
WARNING in submit_bio_checks
|
-1 |
C |
done |
unreliable |
1851 |
1486d |
2105d
|
22/29 |
1095d |
57e95e4670d1
block: fix and cleanup bio_check_ro
|
|
general protection fault in dma_fence_array_first
dri
media
|
2 |
C |
done |
|
7 |
1479d |
1479d
|
22/29 |
1100d |
21d139d73f77
dma-buf/sync-file: fix logic error in new fence merge code
|
|
BUG: sleeping function called from invalid context in folio_copy
mm
|
5 |
C |
unreliable |
|
271 |
1728d |
1726d
|
22/29 |
1100d |
715cbfd6c5c5
mm/migrate: Add folio_migrate_copy()
|
|
KASAN: use-after-free Read in hci_cmd_timeout
|
19 |
C |
done |
error |
371 |
1224d |
2536d
|
22/29 |
1100d |
97dfaf073f58
Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
|
|
KASAN: slab-out-of-bounds Read in sk_psock_get
net
|
17 |
C |
done |
error |
9 |
1360d |
1695d
|
22/29 |
1100d |
2a0133723f9e
net: fix refcount bug in sk_psock_get (2)
|
|
KASAN: use-after-free Read in delete_partition (2)
block
|
19 |
C |
done |
|
1 |
1843d |
1843d
|
22/29 |
1100d |
b5cfbd35ecca
block: check disk exist before trying to add partition
|
|
INFO: task hung in port100_probe
usb
nfc
|
1 |
C |
error |
inconclusive |
10 |
1501d |
1759d
|
22/29 |
1100d |
f80cfe2f2658
NFC: port100: fix use-after-free in port100_send_complete
|
|
KASAN: slab-out-of-bounds Read in ntfs_get_ea
ntfs3
|
17 |
C |
error |
done |
9 |
1250d |
1318d
|
22/29 |
1100d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
possible deadlock in nci_start_poll
net
nfc
|
4 |
C |
error |
done |
83 |
1148d |
1249d
|
22/29 |
1101d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
possible deadlock in bpf_trace_printk
bpf
trace
|
4 |
C |
done |
done |
68 |
1152d |
1407d
|
22/29 |
1120d |
05b24ff9b2cf
bpf: Prevent bpf program recursion for raw tracepoint probes
|
|
WARNING in btrfs_run_delayed_refs
btrfs
|
-1 |
C |
error |
done |
15 |
1164d |
1278d
|
22/29 |
1128d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
kernel BUG in pskb_expand_head
net
|
-1 |
C |
done |
|
1600 |
1162d |
1613d
|
22/29 |
1146d |
5f33a09e769a
can: isotp: convert struct tpcon::{idx,len} to unsigned int
7c759040c1dd
can: isotp: fix potential CAN frame reception race in isotp_rcv()
|
|
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast
kvm-x86
|
7 |
C |
|
|
20 |
1355d |
1388d
|
22/29 |
1147d |
8a414f943f8b
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
|
|
kernel BUG in __text_poke
kernel
|
-1 |
C |
|
|
80 |
1347d |
1522d
|
22/29 |
1147d |
1d5f82d9dd47
bpf, x86: fix freeing of not-finalized bpf_prog_pack
d24d2a2b0a81
bpf: bpf_prog_pack: Set proper size before freeing ro_header
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_jit_free
bpf
|
17 |
C |
|
|
68 |
1346d |
1522d
|
22/29 |
1147d |
1d5f82d9dd47
bpf, x86: fix freeing of not-finalized bpf_prog_pack
d24d2a2b0a81
bpf: bpf_prog_pack: Set proper size before freeing ro_header
|
|
WARNING in __dev_queue_xmit
|
-1 |
C |
done |
|
16774 |
1147d |
1361d
|
22/29 |
1147d |
dc633700f00f
net/af_packet: check len when min_header_len equals to 0
b12e924a2f5b
net/ieee802154: don't warn zero-sized raw_sendmsg()
3a4d061c699b
net/ieee802154: reject zero-sized raw_sendmsg()
|
|
INFO: trying to register non-static key in ieee80211_do_stop
wireless
|
-1 |
C |
error |
|
70591 |
1332d |
1372d
|
22/29 |
1147d |
aa40d5a43526
wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
|
|
KASAN: use-after-free Read in mgmt_pending_remove
bluetooth
|
19 |
C |
unreliable |
|
9 |
1318d |
1338d
|
22/29 |
1147d |
3cfbc6ac22d6
Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor()
Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor()
|
|
WARNING in alloc_charge_hpage
mm
|
-1 |
C |
error |
|
112 |
1196d |
1266d
|
22/29 |
1147d |
e031ff96b334
mm: khugepaged: allow page allocation fallback to eligible nodes
dec1d352de5c
mm: replace VM_WARN_ON to pr_warn if the node is offline with __GFP_THISNODE
|
|
possible deadlock in worker_thread
rdma
|
4 |
|
|
|
1 |
1530d |
1526d
|
22/29 |
1147d |
081bdc9fe05b
RDMA/ib_srp: Fix a deadlock
bf23747ee053
loop: revert "make autoclear operation asynchronous"
|
|
KMSAN: uninit-value in ext4_evict_inode
ext4
|
7 |
|
|
|
2734 |
1193d |
1247d
|
22/29 |
1147d |
7ea71af94eaa
ext4: fix uninititialized value in 'ext4_evict_inode'
|
|
WARNING in ipgre_xmit
net
|
-1 |
C |
done |
|
9916 |
1398d |
1414d
|
22/29 |
1147d |
8d21e9963bec
ip_gre: test csum_start instead of transport header
|
|
kernel panic: corrupted stack end in vm_area_alloc
mm
|
2 |
|
|
|
1 |
1382d |
1382d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
kernel panic: corrupted stack end in vlan_ioctl_handler
kernfs
|
2 |
|
|
|
1 |
1403d |
1403d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
inconsistent lock state in fs_reclaim_acquire (3)
kernel
|
4 |
C |
|
|
2 |
1262d |
1268d
|
22/29 |
1147d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
|
net boot error: INFO: task hung in add_early_randomness
crypto
|
-1 |
|
|
|
18 |
1400d |
1406d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
KASAN: use-after-free Read in mas_next_nentry
fs
mm
|
19 |
C |
error |
done |
343 |
1256d |
1450d
|
22/29 |
1147d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
KASAN: use-after-free Read in tty_release
io-uring
serial
|
19 |
C |
done |
|
23 |
1476d |
1486d
|
22/29 |
1147d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
|
linux-next boot error: kernel BUG in putname
fs
|
-1 |
|
|
|
1 |
1339d |
1339d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING: ODEBUG bug in ops_free_list
net
|
-1 |
|
|
|
1 |
1475d |
1475d
|
22/29 |
1147d |
1946014ca3b1
rxrpc: fix a race in rxrpc_exit_net()
|
|
KMSAN: uninit-value in ax88178_reset
usb
|
7 |
C |
|
|
284 |
1455d |
1562d
|
22/29 |
1147d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
general protection fault in br_mst_info_size
bridge
|
2 |
C |
error |
|
26 |
1484d |
1487d
|
22/29 |
1147d |
cde3fc244b3d
net: bridge: mst: prevent NULL deref in br_mst_info_size()
|
|
KASAN: wild-memory-access Read in skb_copy_bits
net
|
17 |
C |
|
|
2 |
1315d |
1316d
|
22/29 |
1147d |
0d24148bd276
inet: ping: fix recent breakage
|
|
general protection fault in list_lru_add
mm
|
8 |
C |
done |
|
1125 |
1196d |
1485d
|
22/29 |
1147d |
ae085d7f9365
mm: kfence: fix missing objcg housekeeping for SLAB
|
|
KCSAN: data-race in __ip_append_data / __ip_append_data
net
|
6 |
|
|
|
1 |
1532d |
1528d
|
22/29 |
1147d |
a1cdec57e03a
net-timestamp: convert sk->sk_tskey to atomic_t
|
|
kernel panic: corrupted stack end in tun_chr_close
fs
|
2 |
|
|
|
1 |
1439d |
1439d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (3)
tipc
|
7 |
C |
|
|
65 |
1244d |
1260d
|
22/29 |
1147d |
1c075b192fe4
tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
|
|
WARNING: kmalloc bug in xdp_umem_create (2)
bpf
net
|
-1 |
C |
done |
|
21 |
1526d |
1592d
|
22/29 |
1147d |
0708a0afe291
mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
|
|
general protection fault in sg_alloc_append_table_from_pages
dri
media
|
11 |
C |
done |
|
477 |
1180d |
1646d
|
22/29 |
1147d |
2b6dd600dd72
udmabuf: validate ubuf->pagecount
|
|
WARNING in c_start
kernel
|
-1 |
|
|
|
75097 |
1278d |
1280d
|
22/29 |
1147d |
80493877d7d0
Revert "cpumask: fix checking valid cpu range".
|
|
KCSAN: data-race in tcp_send_challenge_ack / tcp_send_challenge_ack
net
|
6 |
|
|
|
1 |
1325d |
1325d
|
22/29 |
1147d |
8c70521238b7
tcp: annotate data-race around challenge_timestamp
|
|
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self
bpf
net
|
5 |
C |
done |
|
151 |
1257d |
1279d
|
22/29 |
1147d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
|
INFO: task hung in addrconf_verify_work (6)
|
1 |
C |
done |
|
86 |
1151d |
1388d
|
22/29 |
1147d |
ff1fa2081d17
net: tun: avoid disabling NAPI twice
|
|
KASAN: use-after-free Read in ipvlan_queue_xmit (3)
net
|
19 |
C |
error |
error |
8 |
1351d |
1949d
|
22/29 |
1147d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
WARNING in change_protection
mm
|
-1 |
C |
unreliable |
|
13 |
1289d |
1294d
|
22/29 |
1147d |
515778e2d790
mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
|
|
possible deadlock in dccp_v4_ctl_send_reset
mptcp
|
4 |
C |
done |
|
26 |
1234d |
1246d
|
22/29 |
1147d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in exit_tasks_rcu_finish
kernel
|
-1 |
C |
done |
|
20 |
1401d |
1404d
|
22/29 |
1147d |
0356d4e66214
rcu-tasks: Track blocked RCU Tasks Trace readers
|
|
memory leak in kobject_set_name_vargs (5)
nilfs
|
3 |
C |
|
|
4 |
1291d |
1394d
|
22/29 |
1147d |
d0d51a97063d
nilfs2: fix leak of nilfs_root in case of writer thread creation failure
|
|
BUG: unable to handle kernel NULL pointer dereference in ni_find_attr
ntfs3
|
10 |
C |
done |
done |
81 |
1196d |
1331d
|
22/29 |
1147d |
2681631c2973
fs/ntfs3: Add null pointer check to attr_load_runs_vcn
|
|
possible deadlock in console_unlock (2)
serial
|
4 |
C |
error |
done |
599 |
1164d |
1614d
|
22/29 |
1147d |
09c5ba0aa2fc
printk: add kthread console printers
|
|
KASAN: use-after-free Read in ucma_destroy_private_ctx
rdma
|
19 |
|
|
|
1 |
1570d |
1564d
|
22/29 |
1147d |
36e8169ec973
RDMA/ucma: Protect mc during concurrent multicast leaves
|
|
general protection fault in llc_build_and_send_xid_pkt
net
|
2 |
C |
done |
|
2 |
1484d |
1484d
|
22/29 |
1147d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
KASAN: use-after-free Read in unregister_shrinker (2)
mm
|
19 |
C |
error |
|
3799 |
1259d |
1303d
|
22/29 |
1147d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
linux-next boot error: general protection fault in driver_bound
kernel
|
-1 |
|
|
|
1 |
1339d |
1339d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KMSAN: uninit-value in mpol_rebind_mm (2)
mm
|
7 |
C |
|
|
11 |
1401d |
1525d
|
22/29 |
1147d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
possible deadlock in snd_timer_interrupt (2)
sound
|
4 |
C |
error |
|
29 |
1346d |
1607d
|
22/29 |
1147d |
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
possible deadlock in display_open
usb
|
4 |
C |
inconclusive |
|
48888 |
1415d |
2442d
|
22/29 |
1147d |
db264d4c66c0
media: imon: reorganize serialization
|
|
kernel BUG in __clear_extent_bit
btrfs
|
-1 |
C |
error |
|
5 |
1223d |
1238d
|
22/29 |
1147d |
5a75034e71ef
btrfs: do not panic if we can't allocate a prealloc extent state
|
|
KASAN: use-after-free Read in reqsk_queue_unlink
net
|
19 |
|
|
|
4 |
1234d |
1284d
|
22/29 |
1147d |
740ea3c4a0b2
tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
|
|
kernel BUG in dev_args_match_device
btrfs
|
-1 |
|
|
|
1 |
1261d |
1261d
|
22/29 |
1147d |
0fca385d6ebc
btrfs: fix match incorrectly in dev_args_match_device
|
|
KASAN: use-after-free Read in pty_close
serial
io-uring
fuse
|
19 |
C |
done |
|
4 |
1352d |
1379d
|
22/29 |
1147d |
7a121ced6e64
io_uring: don't miss setting REQ_F_DOUBLE_POLL
|
|
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (2)
media
|
21 |
C |
inconclusive |
done |
14 |
1172d |
1684d
|
22/29 |
1147d |
94a7ad928346
media: vivid: fix compose size exceed boundary
|
|
general protection fault in pm_qos_update_target
pm
|
2 |
syz |
inconclusive |
done |
1 |
1487d |
1795d
|
22/29 |
1147d |
3c3201f8c7bb
ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
|
|
KMSAN: uninit-value in asix_mdio_read (3)
usb
|
7 |
C |
|
|
1582 |
1430d |
1495d
|
22/29 |
1147d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
WARNING: refcount bug in tcp_release_cb
net
|
13 |
|
|
|
2 |
1222d |
1232d
|
22/29 |
1147d |
0a182f8d6074
bpf, sockmap: fix race in sock_map_free()
|
|
INFO: rcu detected stall in sys_lsetxattr
fs
|
1 |
C |
done |
|
2 |
1459d |
1458d
|
22/29 |
1147d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
|
WARNING in ext4_da_release_space
ext4
|
-1 |
C |
error |
|
9 |
1159d |
1282d
|
22/29 |
1147d |
1b8f787ef547
ext4: fix warning in 'ext4_da_release_space'
|
|
BUG: unable to handle kernel NULL pointer dereference in ntfs_sparse_cluster
ntfs3
|
10 |
C |
error |
done |
11 |
1213d |
1215d
|
22/29 |
1147d |
c380b52f6c57
fs/ntfs3: Change new sparse cluster processing
|
|
WARNING in cpuset_attach
cgroups
|
-1 |
C |
error |
|
20922 |
1330d |
1331d
|
22/29 |
1147d |
43626dade36f
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
|
|
net boot error: WARNING in genl_register_family
net
|
-1 |
|
|
|
3 |
1266d |
1266d
|
22/29 |
1147d |
e4ba4554209f
net: openvswitch: add missing .resv_start_op
|
|
WARNING in __skb_flow_dissect (4)
net
|
-1 |
C |
error |
|
6 |
1258d |
1267d
|
22/29 |
1147d |
9f225444467b
ppp: associate skb with a device at tx
|
|
WARNING in inet_csk_get_port
net
|
-1 |
C |
done |
|
1166 |
1196d |
1424d
|
22/29 |
1147d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
upstream boot error: general protection fault in __proc_create
fs
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
panic: runtime error: floating point error
kernel
|
2 |
|
|
|
2 |
1159d |
1438d
|
22/29 |
1147d |
59f5ede3bc0f
x86/fpu: Prevent FPU state corruption
|
|
inconsistent lock state in kmem_cache_alloc_trace (2)
kernel
|
4 |
|
|
|
2 |
1276d |
1277d
|
22/29 |
1147d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
|
memory leak in __insert_pending
ext4
|
3 |
C |
|
|
1 |
1264d |
1260d
|
22/29 |
1147d |
1da18e38cb97
ext4: fix reserved cluster accounting in __es_remove_extent()
|
|
memory leak in crypto_create_tfm_node
ext4
crypto
|
3 |
C |
|
|
3 |
1277d |
1283d
|
22/29 |
1147d |
ccd30a476f8e
fscrypt: fix keyring memory leak on mount failure
|
|
WARNING in vcpu_enter_guest (2)
kvm-x86
|
-1 |
C |
|
|
42 |
1260d |
1269d
|
22/29 |
1147d |
dea0d5a2fde6
KVM: x86: Exempt pending triple fault from event injection sanity check
|
|
KASAN: use-after-free Read in drm_gem_object_release_handle
|
19 |
C |
done |
|
362 |
1228d |
1612d
|
22/29 |
1147d |
24013314be6e
drm/shmem-helper: Remove errant put in error path
|
|
KMSAN: uninit-value in btrfs_clean_tree_block (2)
btrfs
nilfs
|
7 |
|
|
|
15960 |
1147d |
1608d
|
22/29 |
1147d |
cbddcc4fa344
btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer
|
|
KASAN: use-after-free Read in do_shrink_slab (2)
mm
|
19 |
|
|
|
105 |
1273d |
1297d
|
22/29 |
1147d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
WARNING in ext2_fill_super
ext4
|
-1 |
C |
|
|
2 |
1333d |
1329d
|
22/29 |
1147d |
d766f2d1e3e3
ext2: Add sanity checks for group and filesystem size
e7c7fbb9a857
ext2: Use kvmalloc() for group descriptor array
|
|
KASAN: use-after-free Read in btrfs_scan_one_device (2)
btrfs
|
19 |
C |
|
|
2 |
1509d |
1505d
|
22/29 |
1147d |
79c9234ba596
btrfs: don't access possibly stale fs_info data in device_list_add
|
|
KASAN: use-after-free Read in free_netdev (3)
net
|
19 |
C |
inconclusive |
|
130 |
1239d |
1395d
|
22/29 |
1147d |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
WARNING in bpf_skb_load_helper_16_no_cache
bpf
|
-1 |
C |
done |
|
6 |
1354d |
1384d
|
22/29 |
1147d |
0326195f523a
bpf: Make sure mac_header was set before using it
|
|
general protection fault in release_udmabuf
dri
media
|
8 |
C |
inconclusive |
|
31 |
1286d |
1337d
|
22/29 |
1147d |
d9c04a1b7a15
udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
|
|
KASAN: slab-out-of-bounds Read in cttimeout_net_exit
netfilter
|
17 |
C |
|
|
1444 |
1392d |
1430d
|
22/29 |
1147d |
aeed55a08d0b
netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit
394e771684f7
netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
|
|
WARNING in snd_usbmidi_output_open
sound
usb
|
-1 |
C |
done |
|
37 |
1245d |
1252d
|
22/29 |
1147d |
ad72c3c3f6eb
ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
|
|
WARNING in send_packet/usb_submit_urb
usb
|
-1 |
C |
inconclusive |
|
847 |
1215d |
1382d
|
22/29 |
1147d |
813ceef062b5
media: imon: fix a race condition in send_packet()
|
|
KASAN: slab-out-of-bounds Read in io_uring_show_fdinfo
io-uring
|
19 |
C |
done |
|
5 |
1279d |
1284d
|
22/29 |
1147d |
00927931cb63
io_uring: fix fdinfo sqe offsets calculation
|
|
KCSAN: data-race in dev_activate / qdisc_lookup_rcu
net
|
6 |
|
|
|
1 |
1525d |
1525d
|
22/29 |
1147d |
5891cd5ec46c
net_sched: add __rcu annotation to netdev->qdisc
|
|
KASAN: slab-out-of-bounds Read in thrustmaster_probe
usb
input
|
17 |
C |
unreliable |
|
92 |
1492d |
1516d
|
22/29 |
1147d |
fc3ef2e3297b
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
|
|
INFO: rcu detected stall in sys_setxattr (2)
fs
|
1 |
C |
done |
|
3 |
1458d |
1458d
|
22/29 |
1147d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
|
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff
kvm-x86
|
8 |
C |
error |
|
7736 |
1239d |
1261d
|
22/29 |
1147d |
1cfaac2400c7
x86/kasan: Populate shadow for shared chunk of the CPU entry area
|
|
WARNING in skb_try_coalesce
net
|
-1 |
C |
error |
|
1521 |
1419d |
1873d
|
22/29 |
1147d |
763087dab975
net: add skb_set_end_offset() helper
|
|
INFO: task hung in misc_open (4)
usb
|
1 |
C |
error |
inconclusive |
144 |
1175d |
1888d
|
22/29 |
1147d |
8386c414e27c
PM: hibernate: defer device probing when resuming from hibernation
|
|
kernel panic: corrupted stack end in netdev_run_todo
net
|
2 |
|
|
|
1 |
1391d |
1391d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
general protection fault in sock_reserve_memory
net
|
2 |
C |
done |
|
2 |
1523d |
1523d
|
22/29 |
1147d |
25206111512d
crypto: af_alg - get rid of alg_memory_allocated
|
|
general protection fault in __dentry_path (2)
fs
|
8 |
C |
error |
|
174 |
1452d |
1462d
|
22/29 |
1147d |
5c697c367a66
KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
|
|
WARNING in tcp_enter_loss (3)
net
|
-1 |
C |
inconclusive |
|
7 |
1264d |
1561d
|
22/29 |
1147d |
0c175da7b037
tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
|
|
divide error in dbNextAG
jfs
|
2 |
syz |
error |
|
2 |
1493d |
1489d
|
22/29 |
1147d |
2cc7cc01c15f
jfs: fix divide error in dbNextAG
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in dequeue_task_fair
acpi
|
-1 |
|
|
|
1 |
1326d |
1326d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in tls_sk_proto_close (3)
net
|
2 |
C |
done |
|
276 |
1396d |
1795d
|
22/29 |
1147d |
69135c572d1f
net/tls: fix tls_sk_proto_close executed repeatedly
|
|
KCSAN: data-race in lru_add_fn / skb_append_pagefrags
mm
|
6 |
|
|
|
1 |
1272d |
1268d
|
22/29 |
1147d |
228ebc41dfab
net: do not sense pfmemalloc status in skb_append_pagefrags()
|
|
possible deadlock in hugetlb_fault
mm
|
4 |
|
|
|
2 |
1251d |
1259d
|
22/29 |
1147d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
KASAN: use-after-free Read in nilfs_mdt_destroy
nilfs
|
19 |
C |
error |
|
20 |
1288d |
1303d
|
22/29 |
1147d |
2e488f13755f
fs: fix UAF/GPF bug in nilfs_mdt_destroy
|
|
KASAN: slab-out-of-bounds Read in hfs_cat_keycmp
hfs
|
17 |
C |
error |
done |
2 |
1151d |
1216d
|
22/29 |
1147d |
c53ed55cb275
hfs: Fix OOB Write in hfs_asc2mac
|
|
possible deadlock in l2tp_tunnel_register
net
|
4 |
C |
error |
|
9492 |
1147d |
1246d
|
22/29 |
1147d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
general protection fault in em_cmp_match
net
|
10 |
C |
|
|
4 |
1222d |
1219d
|
22/29 |
1147d |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
kernel BUG in __filemap_get_folio
mm
|
-1 |
C |
done |
|
814 |
1286d |
1457d
|
22/29 |
1147d |
63b1898fffcd
XArray: Disallow sibling entries of nodes
|
|
kernel BUG in commit_creds
lsm
io-uring
|
-1 |
C |
done |
|
5 |
1458d |
1463d
|
22/29 |
1147d |
701521403cfb
io_uring: abort file assignment prior to assigning creds
|
|
WARNING in mntput_no_expire (3)
fs
|
-1 |
C |
inconclusive |
|
29 |
1197d |
1613d
|
22/29 |
1147d |
a91714312eb1
percpu_ref_init(): clean ->percpu_count_ref on failure
|
|
WARNING in nilfs_segctor_do_construct
nilfs
|
-1 |
C |
|
|
5 |
1173d |
1297d
|
22/29 |
1147d |
723ac751208f
nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
|
|
KASAN: slab-out-of-bounds Read in vxlan_vnifilter_dump_dev
|
19 |
C |
done |
|
30 |
1477d |
1478d
|
22/29 |
1147d |
9d570741aec1
vxlan: do not feed vxlan_vnifilter_dump_dev with non vxlan devices
|
|
general protection fault in ip6_rcv_core
net
|
8 |
C |
done |
|
275 |
1237d |
1464d
|
22/29 |
1147d |
0339d25a2807
ipv6: fix NULL deref in ip6_rcv_core()
|
|
BUG: unable to handle kernel paging request in ovl_set_acl
overlayfs
|
8 |
C |
error |
|
4 |
1260d |
1261d
|
22/29 |
1147d |
5b52aebef895
ovl: call posix_acl_release() after error checking
|
|
KASAN: use-after-free Read in z_erofs_transform_plain
erofs
|
19 |
C |
done |
|
4 |
1151d |
1228d
|
22/29 |
1147d |
c505feba4c0d
erofs: validate the extent length for uncompressed pclusters
|
|
KMSAN: uninit-value in mpol_rebind_task (2)
mm
|
7 |
C |
|
|
7 |
1403d |
1563d
|
22/29 |
1147d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
KASAN: use-after-free Read in nh_netdev_event
net
|
19 |
|
|
|
3 |
1248d |
1324d
|
22/29 |
1147d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
KASAN: use-after-free Read in rxrpc_lookup_local
afs
net
|
22 |
C |
|
|
3997 |
1197d |
1227d
|
22/29 |
1147d |
8fbcc83334a7
rxrpc: Fix I/O thread startup getting skipped
eaa02390adb0
rxrpc: Fix NULL deref in rxrpc_unuse_local()
|
|
WARNING in kernfs_active
kernfs
|
-1 |
C |
error |
|
150 |
1161d |
1284d
|
22/29 |
1147d |
1edfe4ea16ca
kernfs: Fix spurious lockdep warning in kernfs_find_and_get_node_by_id()
|
|
kernel BUG in warn_crc32c_csum_combine
net
exfat
|
-1 |
C |
error |
|
17 |
1261d |
1271d
|
22/29 |
1147d |
7f57f8165cb6
af_key: Fix send_acquire race with pfkey_register
|
|
kernel panic: corrupted stack end in nf_tables_getset
net
|
2 |
|
|
|
1 |
1256d |
1256d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
net-next test error: WARNING in devl_port_unregister
net
|
-1 |
|
|
|
52 |
1253d |
1255d
|
22/29 |
1147d |
1fb22ed67195
devlink: Fix warning when unregistering a port
|
|
KMSAN: kernel-infoleak in v4l2_compat_put_array_args
media
|
17 |
|
|
|
8 |
1245d |
1549d
|
22/29 |
1147d |
4e768c8e34e6
media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args()
|
|
kernel panic: stack is corrupted in ksys_write
fs
|
2 |
|
|
|
1 |
1320d |
1316d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: use-after-free Read in dev_uevent
kernel
|
19 |
syz |
|
|
54 |
1155d |
2127d
|
22/29 |
1147d |
16b1941eac2b
usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
|
|
WARNING in u32_change
net
|
-1 |
C |
|
|
28 |
1202d |
1299d
|
22/29 |
1147d |
7cba18332e36
net: sched: cls_u32: Avoid memcpy() false-positive warning
|
|
general protection fault in metadata_dst_free
net
|
2 |
C |
|
|
348 |
1278d |
1317d
|
22/29 |
1147d |
c52add61c27e
macsec: don't free NULL metadata_dst
|
|
memory leak in watch_queue_set_size
kernel
|
3 |
C |
|
|
1 |
1489d |
1482d
|
22/29 |
1147d |
b490207017ba
watch_queue: Free the page array when watch_queue is dismantled
|
|
memory leak in virtual_ncidev_write
net
nfc
|
3 |
C |
|
|
1 |
1246d |
1246d
|
22/29 |
1147d |
53270fb0fd77
NFC: nci: fix memory leak in nci_rx_data_packet()
|
|
memory leak in __vsock_create
net
virt
io-uring
|
3 |
C |
|
|
1 |
1471d |
1467d
|
22/29 |
1147d |
7e97cfed9929
vsock: Fix memory leak in vsock_connect()
|
|
kernel panic: corrupted stack end in inet6_sendmsg
netfilter
|
2 |
|
|
|
1 |
1295d |
1295d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING: locking bug in hugetlb_no_page
mm
|
4 |
C |
|
|
1 |
1251d |
1251d
|
22/29 |
1147d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume
fs
mm
|
17 |
C |
done |
done |
1 |
1326d |
1326d
|
22/29 |
1147d |
9f0933ac026f
fscache: fix OOB Read in __fscache_acquire_volume
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in __handle_mm_fault
mm
|
-1 |
|
|
|
1 |
1340d |
1340d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in blk_mq_update_nr_hw_queues
block
|
2 |
C |
error |
|
16 |
1244d |
1257d
|
22/29 |
1147d |
90b0296ece4b
block: fix crash in 'blk_mq_elv_switch_none'
|
|
KCSAN: data-race in netlink_recvmsg / netlink_recvmsg (5)
net
|
6 |
|
|
|
12 |
1189d |
1442d
|
22/29 |
1147d |
d5076fe4049c
netlink: do not reset transport header in netlink_recvmsg()
|
|
general protection fault in __inet_hash_connect
net
|
10 |
|
|
|
5 |
1255d |
1401d
|
22/29 |
1147d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
kernel panic: corrupted stack end in tc_ctl_action
net
|
2 |
|
|
|
2 |
1279d |
1333d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING in skb_checksum_help
net
|
-1 |
|
|
|
15 |
1152d |
1325d
|
22/29 |
1147d |
0d24148bd276
inet: ping: fix recent breakage
|
|
WARNING in skb_tunnel_check_pmtu
net
|
-1 |
C |
done |
|
8 |
1389d |
1395d
|
22/29 |
1147d |
853a76148802
tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
|
|
general protection fault in nilfs_palloc_commit_free_entry
nilfs
|
2 |
C |
error |
|
2 |
1263d |
1271d
|
22/29 |
1147d |
f0a0ccda18d6
nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
|
|
BUG: sleeping function called from invalid context in smc_pnet_apply_ib
rdma
|
5 |
C |
inconclusive |
|
92 |
1511d |
1519d
|
22/29 |
1147d |
7ff57e98fb78
net/smc: Use a mutex for locking "struct smc_pnettable"
|
|
KASAN: use-after-free Read in nf_hook_entries_grow
netfilter
|
19 |
C |
done |
done |
5 |
1538d |
1578d
|
22/29 |
1147d |
6069da443bf6
netfilter: nf_tables: unregister flowtable hooks on netns exit
|
|
BUG: unable to handle kernel NULL pointer dereference in lock_page
nilfs
|
10 |
C |
error |
|
4 |
1257d |
1266d
|
22/29 |
1147d |
512c5ca01a36
nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
|
|
WARNING: lock held when returning to user space in ieee80211_change_mac
wireless
|
4 |
|
|
|
1 |
1297d |
1293d
|
22/29 |
1147d |
ceb3d688f922
wifi: mac80211: unlock on error in ieee80211_can_powered_addr_change()
|
|
KASAN: use-after-free Read in do_sync_mmap_readahead
mm
fs
|
19 |
|
|
|
1 |
1426d |
1422d
|
22/29 |
1147d |
dcfa24ba6899
filemap: Cache the value of vm_flags
|
|
KMSAN: kernel-infoleak in vcs_read (2)
serial
|
18 |
C |
|
|
1556 |
1170d |
2325d
|
22/29 |
1147d |
af77c56aa353
tty: vt: initialize unicode screen buffer
|
|
usb-testing boot error: general protection fault in rcu_core
fs
mm
|
-1 |
|
|
|
23 |
1321d |
1340d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
memory leak in ipv6_renew_options
net
|
3 |
C |
|
|
1 |
1373d |
1369d
|
22/29 |
1147d |
e27326009a3d
net: ping6: Fix memleak in ipv6_renew_options().
|
|
KMSAN: uninit-value in pagecache_write
ext4
|
7 |
|
|
|
5 |
1273d |
1256d
|
22/29 |
1147d |
956510c0c743
fs: ext4: initialize fsdata in pagecache_write()
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (2)
fbdev
|
21 |
C |
done |
|
701 |
1321d |
1609d
|
22/29 |
1147d |
566f9c9f8933
vt: Clear selection before changing the font
|
|
UBSAN: shift-out-of-bounds in ntfs_fill_super
ntfs3
|
-1 |
C |
done |
|
3643 |
1147d |
1456d
|
22/29 |
1147d |
a3b774342fa7
fs/ntfs3: validate BOOT sectors_per_clusters
|
|
possible deadlock in kcm_ioctl
net
|
4 |
C |
error |
|
20 |
1333d |
1334d
|
22/29 |
1147d |
8fc29ff3910f
kcm: fix strp_init() order and cleanup
|
|
KMSAN: uninit-value in can_send
can
|
7 |
C |
|
|
630 |
1242d |
1260d
|
22/29 |
1147d |
3eb3d283e857
can: j1939: j1939_send_one(): fix missing CAN header initialization
|
|
KASAN: invalid-access Read in copy_page
arm
|
17 |
|
|
|
302 |
1284d |
1350d
|
22/29 |
1147d |
a8e5e5146ad0
arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored
|
|
memory leak in __tcp_send_ack
net
|
3 |
C |
|
|
10 |
1285d |
1816d
|
22/29 |
1147d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
INFO: task hung in hub_port_init (2)
usb
|
1 |
C |
error |
|
486 |
1150d |
1613d
|
22/29 |
1147d |
26fbe9772b8c
USB: core: Fix hang in usb_kill_urb by adding memory barriers
|
|
usb-testing boot error: WARNING in anon_vma_clone
mm
|
-1 |
|
|
|
1 |
1340d |
1340d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KMSAN: uninit-value in __tipc_nl_bearer_enable
tipc
|
7 |
C |
|
|
1288 |
1148d |
2676d
|
22/29 |
1147d |
7f36f798f89b
tipc: check attribute length for bearer name
|
|
kernel BUG in __skb_gso_segment
net
|
-1 |
C |
done |
|
11 |
1414d |
1413d
|
22/29 |
1147d |
e9d3f80935b6
net/af_packet: make sure to pull mac header
|
|
inconsistent lock state in kmem_cache_alloc
io-uring
|
4 |
C |
|
|
4 |
1291d |
1298d
|
22/29 |
1147d |
b000145e9907
io_uring/rw: defer fsnotify calls to task context
|
|
general protection fault in rlb_clear_slave
net
|
2 |
|
|
|
1 |
1390d |
1390d
|
22/29 |
1147d |
ab84db251c04
net: bonding: fix possible NULL deref in rlb code
|
|
WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
1 |
1321d |
1316d
|
22/29 |
1147d |
f74ca25d6d66
Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()
|
|
inconsistent lock state in padata_do_serial (2)
crypto
|
4 |
|
|
|
1 |
1310d |
1306d
|
22/29 |
1147d |
34c3a47d20ae
padata: Always leave BHs disabled when running ->parallel()
|
|
WARNING in vmx_queue_exception (2)
kvm-x86
|
-1 |
C |
|
|
5 |
1446d |
1445d
|
22/29 |
1147d |
053d2290c030
KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
|
|
usb-testing boot error: INFO: task hung in add_early_randomness
crypto
|
-1 |
|
|
|
7 |
1403d |
1409d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
BUG: unable to handle kernel NULL pointer dereference in gsmld_receive_buf
serial
|
10 |
C |
error |
|
324 |
1321d |
1347d
|
22/29 |
1147d |
f16c6d2e58a4
tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
|
|
KASAN: null-ptr-deref Write in io_file_get_normal
io-uring
fs
|
12 |
C |
done |
|
107 |
1392d |
1477d
|
22/29 |
1147d |
d5361233e9ab
io_uring: drop the old style inflight file tracking
|
|
general protection fault in i2c_setup_smbus_alert
acpi
usb
|
2 |
C |
done |
|
20 |
1514d |
1532d
|
22/29 |
1147d |
8302532f47bb
i2c: smbus: Check for parent device before dereference
|
|
KASAN: use-after-free Write in sco_sock_timeout
bluetooth
|
22 |
C |
done |
|
272 |
1422d |
1694d
|
22/29 |
1147d |
7aa1e7d15f8a
Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
|
|
general protection fault in tcp_create_openreq_child
net
|
2 |
C |
unreliable |
|
83 |
1452d |
1454d
|
22/29 |
1147d |
ba5a4fdd63ae
tcp: make sure treq->af_specific is initialized
|
|
INFO: trying to register non-static key in rxe_cleanup_task
rdma
|
-1 |
syz |
|
|
299 |
1148d |
1424d
|
22/29 |
1147d |
fd5382c5805c
RDMA/rxe: Fix error unwind in rxe_create_qp()
|
|
WARNING in netif_rx
can
|
-1 |
|
|
|
2 |
1513d |
1513d
|
22/29 |
1147d |
167053f8dd0e
net: Correct wrong BH disable in hard-interrupt.
|
|
KASAN: out-of-bounds Read in ntfs_set_ea
ntfs3
|
17 |
C |
error |
done |
4 |
1213d |
1216d
|
22/29 |
1147d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
UBSAN: array-index-out-of-bounds in nfnetlink_unbind
netfilter
|
17 |
C |
done |
|
6621 |
1413d |
1430d
|
22/29 |
1147d |
ffd219efd9ee
netfilter: nfnetlink: fix warn in nfnetlink_unbind
|
|
INFO: trying to register non-static key in nilfs_bmap_lookup_at_level
nilfs
|
-1 |
C |
error |
|
124 |
1256d |
1295d
|
22/29 |
1147d |
21a87d88c225
nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
|
|
general protection fault in ovl_dentry_upper
overlayfs
|
2 |
C |
error |
|
2 |
1243d |
1239d
|
22/29 |
1147d |
672e4268b286
ovl: fix use inode directly in rcu-walk mode
|
|
net-next test error: WARNING in __napi_schedule
wireguard
|
-1 |
|
|
|
110 |
1487d |
1490d
|
22/29 |
1147d |
351bdbb6419c
net: Revert the softirq will run annotation in ____napi_schedule().
|
|
BUG: unable to handle kernel paging request in get_desc
kernel
|
8 |
syz |
error |
|
8 |
1247d |
1259d
|
22/29 |
1147d |
97650148a15e
x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
|
|
general protection fault in ath9k_hif_usb_rx_cb (2)
wireless
|
2 |
C |
error |
|
1678 |
1345d |
2099d
|
22/29 |
1147d |
0ac4827f78c7
ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
|
|
upstream test error: WARNING in __queue_work
kernel
|
-1 |
|
|
|
1 |
1330d |
1326d
|
22/29 |
1147d |
deee93d13d38
Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works
|
|
UBSAN: shift-out-of-bounds in dbAllocAG
jfs
|
-1 |
C |
error |
|
10 |
1264d |
1296d
|
22/29 |
1147d |
898f70669568
fs: jfs: fix shift-out-of-bounds in dbAllocAG
|
|
kernel panic: corrupted stack end in tun_chr_ioctl
kernfs
|
2 |
|
|
|
1 |
1394d |
1394d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KCSAN: data-race in veth_xmit / veth_xmit
net
|
6 |
|
|
|
1 |
1533d |
1528d
|
22/29 |
1147d |
68468d8c4cd4
veth: fix races around rq->rx_notify_masked
|
|
KASAN: vmalloc-out-of-bounds Write in ringbuf_map_alloc
bpf
|
21 |
C |
done |
|
541 |
1532d |
1535d
|
22/29 |
1147d |
b293dcc473d2
bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
|
|
kernel BUG in mld_newpack
net
|
-1 |
|
|
|
1 |
1279d |
1279d
|
22/29 |
1147d |
d89d7ff01235
ipv6: ensure sane device mtu in tunnels
|
|
BUG: sleeping function called from invalid context in break_ksm
mm
|
5 |
C |
|
|
9 |
1274d |
1274d
|
22/29 |
1147d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
|
KMSAN: uninit-value in ipvlan_queue_xmit
net
|
7 |
C |
|
|
2 |
1325d |
1908d
|
22/29 |
1147d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
possible deadlock in btrfs_commit_transaction
btrfs
|
4 |
C |
error |
done |
6 |
1237d |
1248d
|
22/29 |
1147d |
b740d8061669
btrfs: free btrfs_path before copying root refs to userspace
|
|
net-next boot error: INFO: task hung in add_early_randomness
crypto
|
-1 |
|
|
|
23 |
1400d |
1406d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
UBSAN: shift-out-of-bounds in __access_remote_vm
ntfs3
|
-1 |
C |
done |
|
3 |
1336d |
1332d
|
22/29 |
1147d |
caad9dd8792a
fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
|
|
WARNING in kcov_mmap
mm
|
-1 |
|
|
|
14 |
1424d |
1479d
|
22/29 |
1147d |
ecc04463d1a3
kcov: don't generate a warning on vm_insert_page()'s failure
|
|
WARNING: suspicious RCU usage in ipmr_rtm_dumplink
net
|
4 |
|
|
|
11 |
1388d |
1392d
|
22/29 |
1147d |
0fcae3c8b1b3
ipmr: fix a lockdep splat in ipmr_rtm_dumplink()
|
|
possible deadlock in nci_set_local_general_bytes
net
nfc
|
4 |
C |
|
|
32 |
1198d |
1249d
|
22/29 |
1147d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
KASAN: slab-out-of-bounds Read in run_unpack
ntfs3
|
19 |
C |
|
|
97 |
1194d |
1302d
|
22/29 |
1147d |
887bfc546097
fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
|
|
upstream boot error: BUG: corrupted list in copy_process
mm
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek
sound
usb
|
19 |
syz |
error |
|
48 |
1349d |
1459d
|
22/29 |
1147d |
0665886ad139
ALSA: usb-audio: Clear MIDI port active flag after draining
|
|
BUG: MAX_LOCK_DEPTH too low! (3)
smc
|
-1 |
C |
done |
|
18 |
1519d |
1528d
|
22/29 |
1147d |
1de9770d121e
net/smc: Avoid overwriting the copies of clcsock callback functions
|
|
UBSAN: shift-out-of-bounds in hid_report_raw_event (2)
input
usb
|
-1 |
C |
error |
|
1 |
1252d |
1248d
|
22/29 |
1147d |
ec61b4191858
HID: core: fix shift-out-of-bounds in hid_report_raw_event
|
|
KASAN: use-after-free Read in port100_send_complete
nfc
usb
|
19 |
C |
|
|
1 |
1504d |
1500d
|
22/29 |
1147d |
f80cfe2f2658
NFC: port100: fix use-after-free in port100_send_complete
|
|
KMSAN: uninit-value in iforce_init_device (2)
input
|
7 |
|
|
|
3 |
1283d |
1256d
|
22/29 |
1147d |
b8ebf250997c
Input: iforce - invert valid length check when fetching device IDs
|
|
KASAN: use-after-free Read in usb_udc_uevent
usb
|
19 |
syz |
error |
|
30 |
1358d |
2144d
|
22/29 |
1147d |
2191c00855b0
USB: gadget: Fix use-after-free Read in usb_udc_uevent()
|
|
bpf-next boot error: WARNING in bpf_prog_pack_free
bpf
|
-1 |
|
|
|
12 |
1486d |
1487d
|
22/29 |
1147d |
96805674e562
bpf: Fix bpf_prog_pack for multi-node setup
|
|
general protection fault in skb_clone (5)
net
|
10 |
C |
done |
|
7 |
1263d |
1280d
|
22/29 |
1147d |
d8b57135fd9f
net: hsr: avoid possible NULL deref in skb_clone()
|
|
KCSAN: data-race in fib6_info_hw_flags_set / fib6_purge_rt
net
|
6 |
|
|
|
1 |
1552d |
1550d
|
22/29 |
1147d |
d95d6320ba7a
ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
|
|
KASAN: use-after-free Read in macsec_get_iflink
net
|
19 |
|
|
|
1 |
1424d |
1420d
|
22/29 |
1147d |
196a888ca657
macsec: fix UAF bug for real_dev
|
|
KASAN: slab-out-of-bounds Write in dbgfs_rm_context_write
damon
|
21 |
C |
error |
|
6 |
1258d |
1264d
|
22/29 |
1147d |
1de09a7281ed
mm/damon/dbgfs: check if rm_contexts input is for a real context
|
|
KMSAN: kernel-infoleak in _copy_to_iter (7)
net
|
21 |
C |
|
|
138977 |
1147d |
1499d
|
22/29 |
1147d |
633593a80898
sctp: fix kernel-infoleak for SCTP sockets
|
|
KASAN: use-after-free Write in inet_put_port
net
|
22 |
|
|
|
1 |
1404d |
1400d
|
22/29 |
1147d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
upstream boot error: general protection fault in ieee80211_register_hw
wireless
|
-1 |
|
|
|
1 |
1340d |
1340d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in bio_poll
block
|
19 |
C |
done |
|
6 |
1438d |
1438d
|
22/29 |
1147d |
9650b453a3d4
block: ignore RWF_HIPRI hint for sync dio
|
|
WARNING in tcp_disconnect
net
|
-1 |
|
|
|
2 |
1275d |
1279d
|
22/29 |
1147d |
72e560cb8c6f
tcp: cdg: allow tcp_cdg_release() to be called multiple times
|
|
possible deadlock in virtual_nci_close
nfc
net
|
4 |
C |
done |
|
939 |
1148d |
1250d
|
22/29 |
1147d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
WARNING in tcp_mtup_probe_success
net
|
-1 |
|
|
|
3 |
1415d |
1421d
|
22/29 |
1147d |
11825765291a
tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in insert_header
fs
|
-1 |
|
|
|
1 |
1325d |
1325d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: slab-out-of-bounds Read in mi_find_attr
ntfs3
|
17 |
C |
done |
done |
1 |
1219d |
1215d
|
22/29 |
1147d |
4f1dc7d9756e
fs/ntfs3: Validate attribute name offset
|
|
KASAN: use-after-free Read in do_garbage_collect
f2fs
|
19 |
C |
inconclusive |
|
2 |
1250d |
1250d
|
22/29 |
1147d |
d3b7b4afd6b2
f2fs: fix to do sanity check on i_extra_isize in is_alive()
|
|
BUG: sleeping function called from invalid context in smc_pnet_add
net
|
5 |
C |
done |
|
45 |
1529d |
1530d
|
22/29 |
1147d |
94fdd7c02a56
net/smc: use GFP_ATOMIC allocation in smc_pnet_add_eth()
|
|
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp
net
bpf
|
21 |
C |
done |
|
18 |
1523d |
1540d
|
22/29 |
1147d |
a6763080856f
bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
|
|
usb-testing boot error: general protection fault in __handle_irq_event_percpu
kernel
|
-1 |
|
|
|
1 |
1326d |
1326d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: slab-out-of-bounds Read in smc_fback_error_report
smc
|
19 |
C |
error |
|
72 |
1450d |
1526d
|
22/29 |
1147d |
0558226cebee
net/smc: Fix slab-out-of-bounds issue in fallback
|
|
memory leak in iovec_from_user
fs
io-uring
|
3 |
C |
|
|
1 |
1465d |
1461d
|
22/29 |
1147d |
323b190ba2de
io_uring: free iovec if file assignment fails
|
|
BUG: unable to handle kernel paging request in mi_enum_attr
ntfs3
|
19 |
C |
error |
done |
18 |
1197d |
1323d
|
22/29 |
1147d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
WARNING: refcount bug in nldev_newlink
rdma
|
13 |
C |
|
|
33 |
1220d |
1226d
|
22/29 |
1147d |
e42f9c2e6aad
RDMA: Add missed netdev_put() for the netdevice_tracker
|
|
KASAN: slab-out-of-bounds Read in __hfs_brec_find
hfs
|
17 |
C |
|
|
5 |
1221d |
1235d
|
22/29 |
1147d |
8d824e69d9f3
hfs: fix OOB Read in __hfs_brec_find
|
|
WARNING in bpf_check (3)
|
-1 |
C |
done |
done |
1736 |
1292d |
2226d
|
22/29 |
1147d |
34dd3bad1a6f
bpf: Relax the requirement to use preallocated hash maps in tracing progs.
|
|
KASAN: use-after-free Read in raw_notifier_call_chain
kernel
|
19 |
|
|
|
68 |
1234d |
1472d
|
22/29 |
1147d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
KCSAN: data-race in packet_setsockopt / packet_setsockopt
net
|
6 |
|
|
|
1 |
1554d |
1542d
|
22/29 |
1147d |
e42e70ad6ae2
af_packet: fix data-race in packet_setsockopt / packet_setsockopt
|
|
memory leak in usb_set_configuration (3)
usb
|
3 |
C |
|
|
2 |
1385d |
1412d
|
22/29 |
1147d |
945a9a8e448b
media: pvrusb2: fix memory leak in pvr_probe
|
|
KASAN: use-after-free Read in ar5523_cmd_tx_cb
usb
wireless
|
19 |
C |
inconclusive |
|
372 |
1243d |
1298d
|
22/29 |
1147d |
b6702a942a06
wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
|
|
kernel panic: corrupted stack end in shmem_fault
cgroups
mm
|
2 |
|
|
|
5 |
1154d |
1285d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
possible deadlock in strp_work
net
|
4 |
C |
error |
|
4 |
1333d |
1334d
|
22/29 |
1147d |
8fc29ff3910f
kcm: fix strp_init() order and cleanup
|
|
KASAN: use-after-free Read in __fib6_clean_all
net
|
19 |
|
|
|
30 |
1237d |
1490d
|
22/29 |
1147d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
KCSAN: data-race in do_epoll_wait / do_epoll_wait
fs
|
6 |
|
|
|
83 |
1423d |
1632d
|
22/29 |
1147d |
d679ae94fdd5
list: fix a data-race around ep->rdllist
|
|
KMSAN: uninit-value in asix_mdio_write_nopm
net
usb
|
7 |
|
|
|
2 |
1472d |
1493d
|
22/29 |
1147d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
WARNING in dlfb_submit_urb/usb_submit_urb
usb
fbdev
|
-1 |
C |
done |
|
481 |
1220d |
2481d
|
22/29 |
1147d |
aaf7dbe07385
video: fbdev: udlfb: properly check endpoint type
|
|
KCSAN: data-race in kcm_rcv_strparser / kcm_rfree (7)
net
|
6 |
|
|
|
1 |
1276d |
1276d
|
22/29 |
1147d |
0c745b5141a4
kcm: annotate data-races around kcm->rx_wait
|
|
linux-next test error: WARNING in set_peer
wireguard
|
-1 |
|
|
|
39 |
1304d |
1311d
|
22/29 |
1147d |
26c013108c12
wireguard: netlink: avoid variable-sized memcpy on sockaddr
|
|
BUG: sleeping function called from invalid context in blk_mq_release
block
|
5 |
|
|
|
1 |
1477d |
1477d
|
22/29 |
1147d |
d578c770c852
block: avoid calling blkg_free() in atomic context
|
|
WARNING in devl_port_unregister
net
|
-1 |
C |
|
|
1690 |
1150d |
1253d
|
22/29 |
1147d |
1fb22ed67195
devlink: Fix warning when unregistering a port
|
|
WARNING: suspicious RCU usage in corrupted (2)
net
|
4 |
C |
unreliable |
|
7 |
1391d |
1403d
|
22/29 |
1147d |
4e43e64d0f13
ipv6: fix lockdep splat in in6_dump_addrs()
|
|
possible deadlock in __btrfs_release_delayed_node
btrfs
|
4 |
|
|
|
1 |
1245d |
1245d
|
22/29 |
1147d |
796787c978ef
btrfs: do not modify log tree while holding a leaf from fs tree locked
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in enqueue_task_fair
mm
|
-1 |
|
|
|
1 |
1325d |
1325d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
kernel BUG in vhost_get_vq_desc
virt
kvm
net
|
-1 |
C |
inconclusive |
|
19 |
1511d |
1524d
|
22/29 |
1147d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
kernel panic: corrupted stack end in hub_event
kernfs
|
2 |
|
|
|
93 |
1155d |
1500d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: use-after-free Read in snd_rawmidi_transmit
sound
usb
|
19 |
C |
done |
done |
7 |
1415d |
1449d
|
22/29 |
1147d |
0125de38122f
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
|
|
kernel panic: corrupted stack end in dput (2)
ext4
|
2 |
|
|
|
1 |
1246d |
1246d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING in skb_warn_bad_offload (3)
net
|
-1 |
C |
done |
|
115 |
1148d |
1285d
|
22/29 |
1147d |
87445f369cca
ipv6: ping: fix wrong checksum for large frames
|
|
WARNING in arp_ioctl
net
|
-1 |
C |
error |
done |
17 |
1220d |
1289d
|
22/29 |
1147d |
b5f0de6df6dc
net: dev: Convert sa_data to flexible array in struct sockaddr
|
|
kernel panic: corrupted stack end in tcp_setsockopt
netfilter
|
2 |
|
|
|
3 |
1252d |
1401d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
general protection fault in __pm_runtime_resume (2)
pm
|
2 |
C |
error |
|
7 |
1486d |
1495d
|
22/29 |
1147d |
32cb08e95869
Bluetooth: hci_uart: add missing NULL check in h5_enqueue
|
|
KMSAN: kernel-usb-infoleak in hif_usb_send
wireless
|
9 |
C |
|
|
18149 |
1455d |
2074d
|
22/29 |
1147d |
d1e0df1c57bd
ath9k_htc: fix uninit value bugs
|
|
WARNING in ipvlan_queue_xmit
net
|
-1 |
C |
inconclusive |
|
4 |
1325d |
1326d
|
22/29 |
1147d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
kernel panic: corrupted stack end in loop_workfn
ext4
|
2 |
|
|
|
1 |
1455d |
1455d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: use-after-free Read in notifier_call_chain
kernel
|
19 |
C |
error |
|
157 |
1239d |
1245d
|
22/29 |
1147d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
WARNING in wnd_init
ntfs3
|
-1 |
C |
done |
|
23 |
1213d |
1295d
|
22/29 |
1147d |
0d0f659bf713
fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()
019d22eb0eb7
fs/ntfs3: Validate attribute data and valid sizes
|
|
upstream build error (18)
kernel
|
-1 |
|
|
|
20 |
1149d |
1420d
|
22/29 |
1147d |
e68b823ab0ba
arm64/hugetlb: Fix building errors in huge_ptep_clear_flush()
|
|
usb-testing boot error: general protection fault in __register_sysctl_table (2)
fs
|
-1 |
|
|
|
1 |
1325d |
1325d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Read in si470x_int_in_callback (2)
usb
media
|
19 |
C |
error |
|
7303 |
1215d |
2372d
|
22/29 |
1147d |
7d21e0b1b41b
media: si470x: Fix use-after-free in si470x_int_in_callback()
|
|
BUG: unable to handle kernel NULL pointer dereference in f2fs_stop_discard_thread
f2fs
|
12 |
C |
done |
|
23 |
1216d |
1281d
|
22/29 |
1147d |
91586ce0d39a
f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
|
|
WARNING in __perf_event_overflow
perf
|
-1 |
C |
done |
|
9 |
1236d |
1261d
|
22/29 |
1147d |
bb88f9695460
perf: Improve missing SIGTRAP checking
|
|
WARNING: still has locks held in tls_rx_reader_lock
net
|
4 |
C |
done |
|
4 |
1365d |
1366d
|
22/29 |
1147d |
dde06aaa89b7
tls: rx: release the sock lock on locking timeout
|
|
KASAN: use-after-free Read in setup_rw_floppy
block
|
19 |
|
|
|
3 |
1518d |
1534d
|
22/29 |
1147d |
233087ca0636
floppy: disable FDRAWCMD by default
|
|
memory leak in gs_usb_probe
can
usb
|
3 |
C |
|
|
1 |
1483d |
1479d
|
22/29 |
1147d |
50d34a0d151d
can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration
|
|
memory leak in airspy_probe
media
usb
|
3 |
C |
|
|
1 |
1349d |
1345d
|
22/29 |
1147d |
23bc5eb55f8c
media: airspy: fix memory leak in airspy probe
|
|
general protection fault in hugetlbfs_parse_param
mm
|
2 |
C |
|
|
5 |
1263d |
1274d
|
22/29 |
1147d |
26215b7ee923
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
|
|
possible deadlock in __snd_pcm_lib_xfer
sound
|
4 |
C |
unreliable |
|
3 |
1480d |
1479d
|
22/29 |
1147d |
bc55cfd5718c
ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
|
|
WARNING: suspicious RCU usage in in6_dump_addrs
net
|
4 |
C |
unreliable |
|
613 |
1359d |
1403d
|
22/29 |
1147d |
4e43e64d0f13
ipv6: fix lockdep splat in in6_dump_addrs()
|
|
upstream boot error: INFO: task hung in hwrng_register
crypto
|
-1 |
|
|
|
23 |
1405d |
1412d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
kernel panic: corrupted stack end in inet_rtm_newaddr
net
|
2 |
|
|
|
23 |
1150d |
1487d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
KASAN: use-after-free Read in __oom_reap_task_mm
mm
|
19 |
|
|
|
1 |
1528d |
1522d
|
22/29 |
1147d |
f798a1d4f94d
mm: fix use-after-free bug when mm->mmap is reused after being freed
|
|
inconsistent lock state in smc_fback_state_change
smc
|
4 |
C |
error |
|
7 |
1239d |
1245d
|
22/29 |
1147d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
memory leak in blk_iolatency_init (2)
block
cgroups
|
3 |
C |
|
|
131 |
1289d |
1496d
|
22/29 |
1147d |
daaca3522a8e
block: release rq qos structures for queue without disk
|
|
linux-next test error: WARNING in devl_port_unregister
net
|
-1 |
|
|
|
23 |
1253d |
1256d
|
22/29 |
1147d |
1fb22ed67195
devlink: Fix warning when unregistering a port
|
|
KMSAN: uninit-value in idmouse_open
usb
|
7 |
C |
|
|
5 |
1310d |
1305d
|
22/29 |
1147d |
bce2b0539933
usb: idmouse: fix an uninit-value in idmouse_open
|
|
KASAN: use-after-free Read in tcp_retransmit_timer (5)
net
|
19 |
C |
unreliable |
|
16000 |
1231d |
2243d
|
22/29 |
1147d |
3a58f13a881e
net: rds: acquire refcount on TCP sockets
|
|
WARNING in inet_csk_destroy_sock (2)
io-uring
net
|
-1 |
C |
done |
|
8 |
1196d |
1283d
|
22/29 |
1147d |
e0833d1fedb0
dccp/tcp: Fixup bhash2 bucket when connect() fails.
|
|
WARNING in ovl_fh_to_dentry
overlayfs
|
-1 |
C |
|
|
169 |
1221d |
1301d
|
22/29 |
1147d |
cf8aa9bf97ca
ovl: Use "buf" flexible array for memcpy() destination
|
|
WARNING in notify_change (2)
fuse
|
-1 |
C |
unreliable |
|
2 |
1241d |
1241d
|
22/29 |
1147d |
44361e8cf9dd
fuse: lock inode unconditionally in fuse_fallocate()
|
|
KASAN: null-ptr-deref Read in ida_free (2)
usb
|
11 |
C |
done |
|
3 |
1391d |
1392d
|
22/29 |
1147d |
90bc2af24638
USB: gadget: Fix double-free bug in raw_gadget driver
|
|
KASAN: use-after-free Read in nf_confirm
netfilter
|
19 |
C |
done |
|
605 |
1414d |
1430d
|
22/29 |
1147d |
56b14ecec97f
netfilter: conntrack: re-fetch conntrack after insertion
|
|
WARNING in __vunmap
net
|
-1 |
C |
error |
error |
154 |
1296d |
2616d
|
22/29 |
1147d |
8a04d2fc700f
xfrm: Update ipcomp_scratches with NULL when freed
|
|
memory leak in xas_nomem
mm
|
3 |
C |
|
|
1 |
1424d |
1420d
|
22/29 |
1147d |
69a37a8ba1b4
mm/huge_memory: Fix xarray node memory leak
|
|
WARNING in io_req_complete_failed
io-uring
|
-1 |
C |
error |
|
2 |
1239d |
1235d
|
22/29 |
1147d |
c06c6c5d2767
io_uring: always lock in io_apoll_task_func
|
|
memory leak in napi_get_frags
net
|
3 |
C |
|
|
11 |
1896d |
1917d
|
22/29 |
1147d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
kernel panic: corrupted stack end in mld_dad_work
mm
|
2 |
|
|
|
1 |
1319d |
1319d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
memory leak in netlink_policy_dump_add_policy
net
|
3 |
C |
|
|
1 |
1347d |
1343d
|
22/29 |
1147d |
249801360db3
net: genl: fix error path memory leak in policy dumping
|
|
KCSAN: data-race in fib6_clean_node / inet6_csk_route_socket
net
|
6 |
|
|
|
1 |
1547d |
1547d
|
22/29 |
1147d |
aafc2e3285c2
ipv6: annotate accesses to fn->fn_sernum
|
|
KCSAN: data-race in lru_add_fn / tcp_build_frag
mm
|
6 |
|
|
|
4 |
1317d |
1326d
|
22/29 |
1147d |
84ce071e38a6
net: introduce __skb_fill_page_desc_noacc
|
|
KASAN: use-after-free Read in nf_tables_trans_destroy_work
netfilter
|
19 |
C |
done |
|
6 |
1277d |
1284d
|
22/29 |
1147d |
d4bc8271db21
netfilter: nf_tables: netlink notifier might race to release objects
26b5934ff419
netfilter: nf_tables: release flow rule object from commit path
|
|
linux-next boot error: WARNING in kfence_protect
kasan
mm
|
-1 |
|
|
|
12 |
1245d |
1246d
|
22/29 |
1147d |
3e844d842d49
x86/mm: Ensure forced page table splitting
|
|
KASAN: use-after-free Read in jbd2_journal_wait_updates
ext4
|
19 |
C |
error |
|
143 |
1484d |
1528d
|
22/29 |
1147d |
cc16eecae687
jbd2: fix use-after-free of transaction_t race
|
|
BUG: unable to handle kernel paging request in inet_unhash
net
|
8 |
|
|
|
3 |
1243d |
1324d
|
22/29 |
1147d |
d1e96cc4fbe0
mptcp: fix tracking issue in mptcp_subflow_create_socket()
|
|
bpf boot error: INFO: task hung in add_early_randomness
crypto
|
-1 |
|
|
|
13 |
1398d |
1406d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
KASAN: vmalloc-out-of-bounds Read in __text_poke
kernel
|
17 |
|
|
|
5 |
1450d |
1522d
|
22/29 |
1147d |
d24d2a2b0a81
bpf: bpf_prog_pack: Set proper size before freeing ro_header
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in follow_page_mask
mm
|
-1 |
|
|
|
1 |
1322d |
1318d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in llc_ui_connect
net
|
2 |
C |
done |
|
17 |
1480d |
1484d
|
22/29 |
1147d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
memory leak in ndisc_send_rs
net
|
3 |
C |
|
|
2 |
1644d |
1691d
|
22/29 |
1147d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
WARNING in find_vma
mm
|
-1 |
C |
done |
|
2616 |
1324d |
1347d
|
22/29 |
1147d |
d6f35446d076
binder_alloc: Add missing mmap_lock calls when using the VMA
44e602b4e52f
binder_alloc: add missing mmap_lock calls when using the VMA
|
|
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable
kvm-x86
|
8 |
C |
error |
|
28 |
1335d |
1339d
|
22/29 |
1147d |
4ba4f4194274
KVM: Properly unwind VM creation if creating debugfs fails
|
|
WARNING in __brelse
udf
|
-1 |
C |
inconclusive |
|
22 |
1154d |
1296d
|
22/29 |
1147d |
c791730f2554
udf: Avoid double brelse() in udf_rename()
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
C |
done |
|
4 |
1355d |
1407d
|
22/29 |
1147d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
WARNING in erofs_iget
erofs
mm
|
-1 |
C |
|
|
6 |
1268d |
1318d
|
22/29 |
1147d |
1dd73601a1cb
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
|
|
KCSAN: data-race in bond_3ad_initiate_agg_selection / bond_3ad_state_machine_handler (2)
net
|
6 |
|
|
|
1 |
1522d |
1522d
|
22/29 |
1147d |
9ceaf6f76b20
bonding: fix data-races around agg_select_timer
|
|
INFO: task hung in hci_dev_close_sync
bluetooth
|
1 |
C |
unreliable |
|
2366 |
1288d |
1444d
|
22/29 |
1147d |
e36bea6e78ab
Bluetooth: core: Fix deadlock on hci_power_on_sync.
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (2)
kernel
|
9 |
C |
|
|
2 |
1296d |
1296d
|
22/29 |
1147d |
e5b0d06d9b10
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
|
|
general protection fault in llc_ui_sendmsg
net
|
2 |
C |
done |
|
365 |
1480d |
1484d
|
22/29 |
1147d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
WARNING in nf_tables_exit_net
netfilter
|
-1 |
C |
error |
|
3 |
1265d |
1265d
|
22/29 |
1147d |
03c1f1ef1584
netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
|
|
upstream boot error: general protection fault in __get_vm_area_node
mm
|
-1 |
|
|
|
1 |
1339d |
1339d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
possible deadlock in console_lock_spinning_enable (2)
serial
|
4 |
C |
inconclusive |
done |
117 |
1428d |
1614d
|
22/29 |
1147d |
09c5ba0aa2fc
printk: add kthread console printers
|
|
WARNING in scsi_alloc_sgtables
scsi
fuse
|
-1 |
C |
|
|
93 |
1387d |
1733d
|
22/29 |
1147d |
d9a434fa0c12
scsi: core: Fix warning in scsi_alloc_sgtables()
|
|
UBSAN: shift-out-of-bounds in nilfs_load_super_block
nilfs
|
-1 |
C |
error |
|
3 |
1259d |
1269d
|
22/29 |
1147d |
610a2a3d7d8b
nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
|
|
INFO: task hung in blk_freeze_queue (3)
arm
|
1 |
C |
|
|
8 |
1244d |
1324d
|
22/29 |
1147d |
1de7c3cf48fc
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
|
|
UBSAN: shift-out-of-bounds in init_sb (3)
gfs2
|
-1 |
C |
|
|
40 |
1276d |
1342d
|
22/29 |
1147d |
670f8ce56dd0
gfs2: Check sb_bsize_shift after reading superblock
|
|
memory leak in keyctl_watch_key
keyrings
lsm
|
3 |
C |
|
|
1 |
1492d |
1488d
|
22/29 |
1147d |
3d8dcf278b1e
watch_queue: Actually free the watch
|
|
memory leak in fbcon_set_font (2)
fbdev
|
3 |
C |
|
|
1 |
1229d |
1228d
|
22/29 |
1147d |
3c3bfb8586f8
fbdev: fbcon: release buffer when fbcon_do_set_font() failed
|
|
KASAN: use-after-free Read in inet_twsk_kill
net
|
19 |
|
|
|
86 |
1539d |
1542d
|
22/29 |
1147d |
fbb8295248e1
tcp: allocate tcp_death_row outside of struct netns_ipv4
|
|
INFO: task hung in scsi_remove_host
scsi
usb
|
1 |
C |
done |
|
328 |
1298d |
1334d
|
22/29 |
1147d |
2b36209ca818
scsi: core: Revert "Call blk_mq_free_tag_set() earlier"
d94b2d00f7bf
scsi: core: Revert "Make sure that hosts outlive targets"
f782201ebc2b
scsi: core: Revert "Make sure that targets outlive devices"
70e8d057bef5
scsi: core: Revert "Simplify LLD module reference counting"
|
|
KASAN: slab-out-of-bounds Read in packet_recvmsg
net
|
21 |
C |
inconclusive |
|
12 |
1496d |
1897d
|
22/29 |
1147d |
c700525fcc06
net/packet: fix slab-out-of-bounds access in packet_recvmsg()
|
|
WARNING in binder_alloc_vma_close
kernel
|
-1 |
C |
done |
|
18 |
1299d |
1389d
|
22/29 |
1147d |
b0cab80ecd54
android: binder: fix lockdep check on clearing vma
|
|
general protection fault in ext4_fill_super
exfat
ext4
|
12 |
C |
done |
|
5 |
1335d |
1550d
|
22/29 |
1147d |
7c268d4ce2d3
ext4: fix potential NULL pointer dereference in ext4_fill_super()
|
|
INFO: task hung in vhost_work_dev_flush
virt
kvm
net
|
1 |
C |
error |
|
2 |
1527d |
1518d
|
22/29 |
1147d |
e2ae38cf3d91
vhost: fix hung thread due to erroneous iotlb entries
|
|
stack segment fault in skb_clone
net
|
2 |
C |
unreliable |
inconclusive |
3 |
1402d |
1587d
|
22/29 |
1147d |
d8b57135fd9f
net: hsr: avoid possible NULL deref in skb_clone()
|
|
WARNING: suspicious RCU usage in bond_ethtool_get_ts_info
net
|
4 |
C |
done |
|
6 |
1433d |
1435d
|
22/29 |
1147d |
9b80ccda233f
bonding: fix missed rcu protection
|
|
WARNING in nsim_map_alloc_elem
mm
|
-1 |
C |
error |
|
7 |
1342d |
1362d
|
22/29 |
1147d |
d0b80a9edb1a
netdevsim: Avoid allocation warnings triggered from user space
|
|
KASAN: use-after-free Read in nilfs_segctor_sync
nilfs
|
19 |
C |
error |
|
3 |
1253d |
1263d
|
22/29 |
1147d |
8cccf05fe857
nilfs2: fix use-after-free bug of ns_writer on remount
|
|
KASAN: slab-out-of-bounds Write in watch_queue_set_filter
kernel
|
21 |
C |
inconclusive |
|
7 |
1488d |
1491d
|
22/29 |
1147d |
c993ee0f9f81
watch_queue: Fix filter limit check
|
|
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init
pvrusb2
usb
|
15 |
C |
inconclusive |
|
4 |
1431d |
1463d
|
22/29 |
1147d |
471bec68457a
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
|
|
upstream boot error: BUG: unable to handle kernel paging request in copy_thread
kernel
|
-1 |
|
|
|
1 |
1339d |
1339d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING in ext4_expand_extra_isize_ea
ext4
|
-1 |
C |
error |
done |
3 |
1221d |
1233d
|
22/29 |
1147d |
cc12a6f25e07
ext4: allocate extended attribute value in vmalloc area
|
|
general protection fault in do_check_common
bpf
|
2 |
C |
done |
|
5 |
1380d |
1383d
|
22/29 |
1147d |
d1a6edecc1fd
bpf: Check attach_func_proto more carefully in check_return_code
|
|
usb-testing boot error: BUG: unable to handle kernel paging request in copy_namespaces
kernel
|
-1 |
|
|
|
1 |
1324d |
1324d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in rlb_req_update_slave_clients
net
|
2 |
C |
inconclusive |
|
3 |
1411d |
1411d
|
22/29 |
1147d |
ab84db251c04
net: bonding: fix possible NULL deref in rlb code
|
|
WARNING in usbtmc_ioctl/usb_submit_urb
usb
|
-1 |
C |
inconclusive |
|
8 |
1160d |
1505d
|
22/29 |
1147d |
e9b667a82cdc
usb: usbtmc: Fix bug in pipe direction for control transfers
|
|
BUG: unable to handle kernel paging request in evict
exfat
|
19 |
C |
error |
done |
23 |
1255d |
1300d
|
22/29 |
1147d |
4e3c51f4e805
fs: do not update freeing inode i_io_list
|
|
BUG: unable to handle kernel paging request in truncate_inode_partial_folio
fs
mm
|
8 |
C |
error |
|
4 |
1348d |
1388d
|
22/29 |
1147d |
84ac013046cc
secretmem: fix unhandled fault in truncate
|
|
WARNING in hugetlb_wp
mm
|
-1 |
C |
error |
|
3 |
1259d |
1265d
|
22/29 |
1147d |
f347454d0341
mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
|
|
inconsistent lock state in l2tp_tunnel_register
net
|
4 |
|
|
|
5599 |
1233d |
1246d
|
22/29 |
1147d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
KASAN: invalid-free in tcp_disconnect
net
|
24 |
C |
unreliable |
|
74 |
1276d |
1290d
|
22/29 |
1147d |
72e560cb8c6f
tcp: cdg: allow tcp_cdg_release() to be called multiple times
|
|
riscv/fixes boot error: INFO: task hung in add_early_randomness
crypto
|
-1 |
|
|
|
8 |
1349d |
1400d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
WARNING in wireless_send_event
wireless
|
-1 |
C |
|
|
210 |
1263d |
1301d
|
22/29 |
1147d |
e3e6e1d16a4c
wifi: wext: use flex array destination for memcpy()
|
|
WARNING in register_shrinker_prepared
f2fs
mm
|
-1 |
C |
error |
|
64 |
1408d |
1410d
|
22/29 |
1147d |
5035ebc644ae
mm: shrinkers: introduce debugfs interface for memory shrinkers
|
|
WARNING in __split_huge_page_tail
arch
mm
io-uring
|
-1 |
C |
error |
|
155 |
1196d |
1268d
|
22/29 |
1147d |
5aae9265ee1a
mm: prep_compound_tail() clear page->private
|
|
WARNING in __folio_mark_dirty
gfs2
|
-1 |
C |
error |
|
1791 |
1147d |
1631d
|
22/29 |
1147d |
e897be17a441
nilfs2: fix lockdep warnings in page operations for btree nodes
|
|
BUG: sleeping function called from invalid context in static_key_slow_inc
|
5 |
C |
done |
|
82 |
1234d |
1246d
|
22/29 |
1147d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
KCSAN: data-race in ip6_dst_gc / ip6_dst_gc (3)
net
|
6 |
|
|
|
2 |
1463d |
1465d
|
22/29 |
1147d |
9cb7c013420f
ipv6: make ip6_rt_gc_expire an atomic_t
|
|
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2)
|
19 |
C |
done |
|
48810 |
1344d |
1977d
|
22/29 |
1147d |
0ac4827f78c7
ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
|
|
kernel BUG in ntfs_read_inode_mount
fs
|
-1 |
|
|
|
1 |
1551d |
1550d
|
22/29 |
1147d |
714fbf2647b1
ntfs: add sanity check on allocation size
|
|
kernel BUG in btrfs_drop_extents
btrfs
|
-1 |
C |
|
|
4 |
1223d |
1238d
|
22/29 |
1147d |
162d053e15fe
btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
|
|
BUG: sleeping function called from invalid context in binder_ioctl
kernel
|
5 |
C |
done |
|
30 |
1424d |
1430d
|
22/29 |
1147d |
aed86f8add0e
binder: fix atomic sleep when get extended error
|
|
KASAN: use-after-free Read in madvise_update_vma
|
19 |
C |
done |
|
38 |
1511d |
1529d
|
22/29 |
1147d |
942341dcc574
mm: fix use-after-free when anon vma name is used after vma is freed
|
|
WARNING in mcba_usb_probe/usb_submit_urb
usb
can
|
-1 |
C |
error |
|
537 |
1477d |
2472d
|
22/29 |
1147d |
136bed0bfd3b
can: mcba_usb: properly check endpoint type
|
|
KASAN: use-after-free Read in register_shrinker_prepared (2)
mm
|
19 |
C |
done |
|
1145 |
1259d |
1297d
|
22/29 |
1147d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
possible deadlock in rds_tcp_reset_callbacks
rds
|
4 |
C |
error |
|
1458 |
1256d |
1334d
|
22/29 |
1147d |
a91b750fd662
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
|
|
BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission
lsm
mm
|
10 |
C |
|
|
1 |
1254d |
1250d
|
22/29 |
1147d |
578b565b240a
9p/fd: Fix write overflow in p9_read_work
|
|
possible deadlock in nci_close_device
net
nfc
|
4 |
|
|
|
2 |
1227d |
1241d
|
22/29 |
1147d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
memory leak in nft_chain_parse_hook
netfilter
|
3 |
C |
|
|
1 |
1329d |
1326d
|
22/29 |
1147d |
77972a36ecc4
netfilter: nf_tables: clean up hook list when offload flags check fails
|
|
memory leak in sctp_sched_prio_set
sctp
|
3 |
C |
|
|
2 |
1240d |
1245d
|
22/29 |
1147d |
9ed7bfc79542
sctp: fix memory leak in sctp_stream_outq_migrate()
|
|
BUG: sleeping function called from invalid context in sk_psock_stop
|
5 |
C |
done |
|
232 |
1348d |
1406d
|
22/29 |
1147d |
697fb80a5364
bpf: Fix sockmap calling sleepable function in teardown path
|
|
KCSAN: data-race in dropmon_net_event / trace_napi_poll_hit
net
|
6 |
|
|
|
1 |
1543d |
1526d
|
22/29 |
1147d |
dcd54265c8bc
drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
|
|
linux-next boot error: BUG: unable to handle kernel paging request in copy_namespaces
kernel
|
-1 |
|
|
|
1 |
1339d |
1339d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
upstream boot error: general protection fault in enqueue_entity
block
|
-1 |
|
|
|
1 |
1339d |
1339d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in btrfs_stop_all_workers
btrfs
|
2 |
C |
done |
|
554 |
1445d |
1450d
|
22/29 |
1147d |
385de0ef387d
btrfs: use a normal workqueue for rmw_workers
|
|
BUG: corrupted list in hci_conn_add_sysfs
bluetooth
|
19 |
C |
error |
done |
9 |
1302d |
1301d
|
22/29 |
1147d |
448a496f7606
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
|
|
kernel BUG in __set_page_owner_handle
gfs2
|
-1 |
C |
|
|
37 |
1277d |
1440d
|
22/29 |
1147d |
cd8c1fd8cdd1
mm/page_owner: use strscpy() instead of strlcpy()
|
|
kernel BUG in netem_enqueue
net
|
-1 |
|
|
|
9 |
1218d |
1443d
|
22/29 |
1147d |
eeee4b77dc52
net: add more debug info in skb_checksum_help()
|
|
KASAN: slab-out-of-bounds Write in hfs_asc2mac
hfs
|
21 |
C |
error |
|
161 |
1220d |
1238d
|
22/29 |
1147d |
c53ed55cb275
hfs: Fix OOB Write in hfs_asc2mac
|
|
WARNING in __dma_map_sg_attrs
|
-1 |
C |
inconclusive |
|
65 |
1347d |
1597d
|
22/29 |
1147d |
9e9fa6a9198b
udmabuf: Set the DMA mask for the udmabuf device (v2)
|
|
WARNING: ODEBUG bug in __cancel_work
bluetooth
|
-1 |
C |
inconclusive |
|
1 |
1341d |
1337d
|
22/29 |
1147d |
2d2cb3066f2c
Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
|
|
kernel panic: corrupted stack end in ext4_file_mmap
ext4
|
2 |
|
|
|
2 |
1152d |
1297d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
INFO: trying to register non-static key in gsmld_write
serial
|
-1 |
C |
error |
|
803 |
1318d |
1347d
|
22/29 |
1147d |
4bb1a53be85f
tty: n_gsm: initialize more members at gsm_alloc_mux()
|
|
linux-next boot error: WARNING in kthread_should_stop
crypto
|
-1 |
|
|
|
6 |
1255d |
1255d
|
22/29 |
1147d |
db516da95ce4
hw_random: use add_hwgenerator_randomness() for early entropy
|
|
KMSAN: uninit-value in ath9k_htc_rx_msg
wireless
|
7 |
C |
|
|
17731 |
1157d |
2076d
|
22/29 |
1147d |
b383e8abed41
wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
|
|
memory leak in vlan_dev_set_egress_priority (2)
net
|
3 |
C |
|
|
1 |
1378d |
1378d
|
22/29 |
1147d |
72a0b329114b
vlan: fix memory leak in vlan_newlink()
|
|
WARNING in ieee80211_link_info_change_notify
wireless
|
-1 |
C |
inconclusive |
|
1376 |
1147d |
1390d
|
22/29 |
1147d |
591e73ee3f73
wifi: mac80211: properly skip link info driver update
|
|
general protection fault in ieee80211_subif_start_xmit (2)
wireless
|
2 |
C |
error |
|
5 |
1264d |
1271d
|
22/29 |
1147d |
780854186946
wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit()
|
|
kernel BUG in ext4_mb_use_inode_pa
ext4
|
-1 |
C |
error |
done |
2 |
1291d |
1290d
|
22/29 |
1147d |
4bb26f2885ac
ext4: avoid crash when inline data creation follows DIO write
|
|
kernel BUG in hugepage_add_anon_rmap
mm
|
-1 |
|
|
|
2 |
1511d |
1507d
|
22/29 |
1147d |
4eecb8b9163d
mm/migrate: Convert remove_migration_ptes() to folios
|
|
INFO: task hung in __writeback_inodes_sb_nr (5)
ext4
|
1 |
C |
done |
|
48 |
1154d |
1524d
|
22/29 |
1147d |
7d9b1b578d67
ip6mr: fix use-after-free in ip6mr_sk_done()
|
|
kernel BUG in mcopy_continue
mm
|
-1 |
|
|
|
4 |
1406d |
1403d
|
22/29 |
1147d |
73f37dbcfe17
mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages
|
|
memory leak in z_erofs_do_read_page
erofs
|
3 |
C |
|
|
1 |
1232d |
1232d
|
22/29 |
1147d |
c42c0ffe8117
erofs: Fix pcluster memleak when its block address is zero
|
|
possible deadlock in fscrypt_initialize
fscrypt
|
4 |
|
|
|
10 |
1147d |
1457d
|
22/29 |
1147d |
4c0d5778385c
ext4: don't set up encryption key during jbd2 transaction
|
|
linux-next boot error: general protection fault in rcu_core
kernel
|
-1 |
|
|
|
1 |
1340d |
1340d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
upstream boot error: WARNING in genl_register_family
net
|
-1 |
|
|
|
468 |
1260d |
1267d
|
22/29 |
1147d |
e4ba4554209f
net: openvswitch: add missing .resv_start_op
|
|
upstream boot error: WARNING in copy_process
mm
|
-1 |
|
|
|
5 |
1339d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Write in io_sendrecv_fail
io-uring
|
22 |
C |
|
|
75 |
1278d |
1301d
|
22/29 |
1147d |
a75155faef4e
io_uring/net: fix UAF in io_sendrecv_fail()
|
|
general protection fault in reweight_entity
kernel
|
2 |
C |
error |
done |
10 |
1523d |
1577d
|
22/29 |
1147d |
13765de8148f
sched/fair: Fix fault in reweight_entity
|
|
KASAN: use-after-free Read in __nf_register_net_hook
netfilter
|
19 |
C |
error |
|
5 |
1509d |
1509d
|
22/29 |
1147d |
56763f12b0f0
netfilter: fix use-after-free in __nf_register_net_hook()
|
|
WARNING in bpf_test_finish
bpf
net
|
-1 |
C |
done |
|
3 |
1509d |
1509d
|
22/29 |
1147d |
530e214c5b5a
bpf, test_run: Fix overflow in XDP frags bpf_test_finish
|
|
general protection fault in gfs2_dump_glock
gfs2
|
17 |
C |
|
|
25 |
1149d |
1550d
|
22/29 |
1147d |
428f651cb80b
gfs2: assign rgrp glock before compute_bitstructs
|
|
upstream test error: WARNING: ODEBUG bug in mgmt_index_removed
bluetooth
|
-1 |
|
|
|
551 |
1344d |
1351d
|
22/29 |
1147d |
3f2893d3c142
Bluetooth: don't try to cancel uninitialized works at mgmt_index_removed()
|
|
BUG: corrupted list in p9_fd_cancel (2)
v9fs
fuse
|
8 |
C |
error |
|
8 |
1246d |
1271d
|
22/29 |
1147d |
11c10956515b
9p/fd: fix issue of list_del corruption in p9_fd_cancel()
|
|
KASAN: use-after-free Read in ntfs_attr_find
ntfs3
|
19 |
C |
done |
|
74 |
1164d |
1330d
|
22/29 |
1147d |
36a4d82dddbb
ntfs: fix out-of-bounds read in ntfs_attr_find()
|
|
upstream boot error: BUG: unable to handle kernel paging request in sched_change_group
cgroups
|
-1 |
|
|
|
1 |
1342d |
1342d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: use-after-free Write in enqueue_timer
net
|
22 |
|
|
|
1 |
1248d |
1248d
|
22/29 |
1147d |
ab0377803daf
mrp: introduce active flags to prevent UAF when applicant uninit
|
|
KMSAN: uninit-value in ___bpf_prog_run (3)
bpf
|
7 |
C |
|
|
5 |
1461d |
1463d
|
22/29 |
1147d |
99c07327ae11
netlink: reset network and mac headers in netlink_dump()
|
|
kernel BUG in __page_mapcount
kernel
|
-1 |
C |
error |
|
45 |
1547d |
1782d
|
22/29 |
1147d |
24d7275ce279
fs/proc: task_mmu.c: don't read mapcount for migration entry
|
|
general protection fault in check_helper_call
bpf
|
2 |
C |
done |
|
4 |
1366d |
1371d
|
22/29 |
1147d |
d1a6edecc1fd
bpf: Check attach_func_proto more carefully in check_return_code
|
|
memory leak in do_replace
bridge
netfilter
|
3 |
C |
|
|
1 |
1309d |
1305d
|
22/29 |
1147d |
62ce44c4fff9
netfilter: ebtables: fix memory leak when blob is malformed
|
|
KASAN: null-ptr-deref Write in kcm_tx_work (3)
net
|
12 |
C |
inconclusive |
inconclusive |
7 |
1294d |
1395d
|
22/29 |
1147d |
ec7eede369fe
kcm: avoid potential race in kcm_tx_work
|
|
general protection fault in ax25_send_frame (2)
hams
|
10 |
|
|
|
13 |
1258d |
1245d
|
22/29 |
1147d |
e97c089d7a49
rose: Fix NULL pointer dereference in rose_send_frame()
|
|
general protection fault in xas_create_range
mm
|
2 |
|
|
|
1 |
1491d |
1487d
|
22/29 |
1147d |
3e3c658055c0
XArray: Fix xas_create_range() when multi-order entry present
|
|
KASAN: use-after-free Read in nilfs_segctor_confirm
nilfs
|
19 |
C |
inconclusive |
|
19 |
1275d |
1293d
|
22/29 |
1147d |
d325dc6eb763
nilfs2: fix use-after-free bug of struct nilfs_root
|
|
KASAN: invalid-free in free_prealloced_shrinker
mm
|
24 |
C |
done |
|
3 |
1367d |
1366d
|
22/29 |
1147d |
14773bfa70e6
mm: shrinkers: fix double kfree on shrinker name
|
|
kernel panic: corrupted stack end in lo_ioctl
mm
fs
|
2 |
|
|
|
4 |
1153d |
1275d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
kernel panic: corrupted stack end in vfs_fallocate
ext4
|
2 |
|
|
|
1 |
1273d |
1269d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
kernel panic: corrupted stack end in rtnl_newlink
kernfs
net
|
2 |
|
|
|
3489 |
1147d |
1494d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING: refcount bug in sk_psock_get (2)
net
|
13 |
C |
done |
|
4 |
1372d |
1413d
|
22/29 |
1147d |
2a0133723f9e
net: fix refcount bug in sk_psock_get (2)
|
|
linux-next test error: WARNING in __napi_schedule
wireguard
|
-1 |
|
|
|
15 |
1490d |
1489d
|
22/29 |
1147d |
351bdbb6419c
net: Revert the softirq will run annotation in ____napi_schedule().
|
|
WARNING in free_loaded_vmcs (3)
kvm-x86
|
-1 |
C |
inconclusive |
|
2 |
1543d |
1543d
|
22/29 |
1147d |
f7e570780efc
KVM: x86: Forcibly leave nested virt when SMM state is toggled
|
|
upstream boot error: general protection fault in copy_signal
mm
|
-1 |
|
|
|
1 |
1340d |
1340d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in submit_bio_checks
block
btrfs
|
2 |
C |
done |
|
1258 |
1514d |
1536d
|
22/29 |
1147d |
78e3437450be
block: call bio_associate_blkg from bio_reset
|
|
WARNING in nci_send_cmd
net
nfc
|
-1 |
C |
|
|
13 |
1234d |
1247d
|
22/29 |
1147d |
0ad6bded175e
nfc/nci: fix race with opening and closing
|
|
WARNING in ext2_get_group_desc
ext4
|
-1 |
|
|
|
1 |
1369d |
1365d
|
22/29 |
1147d |
fa78f3369372
ext2: Add more validity checks for inode counts
|
|
kernel BUG in binder_alloc_deferred_release
kernel
|
-1 |
C |
done |
|
4 |
1395d |
1397d
|
22/29 |
1147d |
a43cfc87caaf
android: binder: stop saving a pointer to the VMA
|
|
WARNING in nfnetlink_unbind
netfilter
|
-1 |
C |
done |
|
235 |
1413d |
1430d
|
22/29 |
1147d |
ffd219efd9ee
netfilter: nfnetlink: fix warn in nfnetlink_unbind
|
|
general protection fault in legacy_parse_param
fs
|
21 |
C |
done |
|
20 |
1487d |
1748d
|
22/29 |
1147d |
ecff30575b5a
LSM: general protection fault in legacy_parse_param
|
|
KCSAN: data-race in kcm_rfree / unreserve_rx_kcm (3)
net
|
6 |
|
|
|
4 |
1272d |
1277d
|
22/29 |
1147d |
15e4dabda11b
kcm: annotate data-races around kcm->rx_psock
|
|
INFO: trying to register non-static key in f2fs_handle_error
f2fs
|
-1 |
C |
|
|
523 |
1197d |
1258d
|
22/29 |
1147d |
cc249e4cba9a
f2fs: fix to avoid accessing uninitialized spinlock
92b4cf5b4895
f2fs: initialize locks earlier in f2fs_fill_super()
|
|
general protection fault in btf_decl_tag_resolve
bpf
|
2 |
C |
done |
|
6 |
1533d |
1534d
|
22/29 |
1147d |
d7e7b42f4f95
bpf: Fix a btf decl_tag bug when tagging a function
|
|
possible deadlock in p9_req_put
|
4 |
C |
done |
|
2815 |
1257d |
1347d
|
22/29 |
1147d |
52f1c45dde91
9p: trans_fd/p9_conn_cancel: drop client lock earlier
|
|
KASAN: use-after-free Write in null_skcipher_crypt
crypto
|
22 |
C |
done |
|
3 |
1505d |
1703d
|
22/29 |
1147d |
ebe48d368e97
esp: Fix possible buffer overflow in ESP transformation
|
|
WARNING in nci_add_new_protocol
net
nfc
|
-1 |
|
|
|
1 |
1240d |
1236d
|
22/29 |
1147d |
e329e71013c9
NFC: nci: Bounds check struct nfc_target arrays
|
|
memory leak in mld_newpack
net
|
3 |
C |
|
|
2 |
1308d |
1726d
|
22/29 |
1147d |
a43206156263
usbnet: Fix memory leak in usbnet_disconnect()
|
|
KASAN: use-after-free Read in io_rsrc_node_ref_zero
fs
|
19 |
C |
done |
|
3 |
1515d |
1515d
|
22/29 |
1147d |
80912cef18f1
io_uring: disallow modification of rsrc_data during quiesce
|
|
kernel panic: corrupted stack end in cleanup_net
wireguard
|
2 |
|
|
|
2 |
1205d |
1424d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING in netif_napi_add_weight
net
|
-1 |
C |
inconclusive |
done |
45 |
1386d |
1399d
|
22/29 |
1147d |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
WARNING in isotp_tx_timer_handler (2)
can
|
-1 |
C |
|
|
1416 |
1173d |
1496d
|
22/29 |
1147d |
3ea566422cbd
can: isotp: sanitize CAN ID checks in isotp_bind()
d73497081710
can: isotp: stop timeout monitoring when no first frame was sent
|
|
WARNING in ext4_xattr_block_set
ext4
|
-1 |
C |
error |
|
57 |
1153d |
1259d
|
22/29 |
1147d |
fae381a3d79b
ext4: init quota for 'old.inode' in 'ext4_rename'
|
|
general protection fault in shm_close
kernel
|
2 |
C |
done |
|
48 |
1248d |
1250d
|
22/29 |
1147d |
b6305049f306
ipc/shm: call underlying open/close vm_ops
|
|
linux-next boot error: WARNING: suspicious RCU usage in cpuacct_charge
cgroups
|
-1 |
|
|
|
21 |
1493d |
1504d
|
22/29 |
1147d |
f2aa197e4794
cgroup: Fix suspicious rcu_dereference_check() usage warning
|
|
KASAN: use-after-free Read in udl_get_urb_timeout
dri
usb
|
19 |
C |
done |
|
142 |
1303d |
1333d
|
22/29 |
1147d |
ed9605a66b62
Revert "drm/udl: Kill pending URBs at suspend and disconnect"
|
|
WARNING in kvm_arch_vcpu_ioctl_run (3)
kvm-x86
|
-1 |
C |
done |
error |
16157 |
1148d |
2941d
|
22/29 |
1147d |
ec6e4d863258
KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (2)
kvm
|
-1 |
C |
done |
|
14 |
1474d |
1487d
|
22/29 |
1147d |
01e67e04c281
mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
|
|
memory leak in dvb_usb_device_init
media
usb
|
3 |
syz |
|
|
1 |
1253d |
1423d
|
22/29 |
1147d |
94d90fb06b94
media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
|
|
BUG: using smp_processor_id() in preemptible code in tun_chr_write_iter
net
|
4 |
C |
done |
|
1834 |
1486d |
1496d
|
22/29 |
1147d |
fc93db153b01
net: disable preemption in dev_core_stats_XXX_inc() helpers
|
|
upstream boot error: BUG: corrupted list in find_and_remove_object
mm
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING in cpuset_write_resmask
cgroups
|
-1 |
C |
done |
done |
127 |
1503d |
1569d
|
22/29 |
1147d |
d068eebbd482
cgroup/cpuset: Make child cpusets restrict parents on v1 hierarchy
|
|
WARNING in f2fs_is_valid_blkaddr
f2fs
|
-1 |
C |
done |
|
2562 |
1415d |
2033d
|
22/29 |
1147d |
dc2f78e2d4cc
f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
|
|
general protection fault in binder_alloc_new_buf
kernel
|
12 |
C |
error |
|
315 |
1303d |
1334d
|
22/29 |
1147d |
1da52815d5f1
binder: fix alloc->vma_vm_mm null-ptr dereference
|
|
BUG: using smp_processor_id() in preemptible code in netdev_core_stats_alloc
net
|
4 |
C |
error |
|
2210 |
1486d |
1496d
|
22/29 |
1147d |
fc93db153b01
net: disable preemption in dev_core_stats_XXX_inc() helpers
|
|
KASAN: use-after-free Read in remove_wait_queue (3)
kernfs
|
19 |
C |
inconclusive |
|
123 |
1186d |
1612d
|
22/29 |
1147d |
a06247c6804f
psi: Fix uaf issue when psi trigger is destroyed while being polled
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold (2)
sctp
|
22 |
C |
inconclusive |
|
7 |
1299d |
1298d
|
22/29 |
1147d |
022152aaebe1
sctp: handle the error returned from sctp_auth_asoc_init_active_key
|
|
WARNING in ovs_dp_reset_user_features
openvswitch
|
-1 |
C |
done |
|
3 |
1266d |
1282d
|
22/29 |
1147d |
fd954cc1919e
openvswitch: switch from WARN to pr_warn
|
|
kernel BUG in ext4_ind_remove_space
ext4
|
-1 |
C |
error |
done |
10 |
1472d |
1523d
|
22/29 |
1147d |
2da376228a24
ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
|
|
linux-next boot error: WARNING: refcount bug in dvb_register_device
media
|
-1 |
|
|
|
42 |
1227d |
1235d
|
22/29 |
1147d |
3a664569b71b
media: dvbdev: fix refcnt bug
|
|
kernel BUG in f2fs_init_xattr_caches
f2fs
|
-1 |
C |
|
|
24 |
1302d |
1326d
|
22/29 |
1147d |
7e9c323c52b3
mm/slub: fix to return errno if kmalloc() fails
|
|
KASAN: use-after-free Read in hugetlb_fault
mm
|
22 |
C |
|
|
383 |
1176d |
1271d
|
22/29 |
1147d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
BUG: missing reserved tailroom
bpf
net
|
-1 |
C |
done |
|
2 |
1498d |
1498d
|
22/29 |
1147d |
b6f1f780b393
bpf, test_run: Fix packet size check for live packet mode
|
|
upstream boot error: stack segment fault in kvmalloc_node
wireless
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in smc_pnet_add (2)
smc
|
2 |
C |
inconclusive |
|
590 |
1462d |
1478d
|
22/29 |
1147d |
d22f4f977236
net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
|
|
WARNING in ntfs_fill_super
ntfs3
|
-1 |
C |
error |
|
20 |
1227d |
1292d
|
22/29 |
1147d |
59bfd7a483da
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
|
|
WARNING: refcount bug in free_netdevs
rdma
|
13 |
|
|
|
3 |
1221d |
1224d
|
22/29 |
1147d |
e42f9c2e6aad
RDMA: Add missed netdev_put() for the netdevice_tracker
|
|
possible deadlock in ___neigh_create
net
|
4 |
C |
error |
|
24 |
1533d |
1536d
|
22/29 |
1147d |
4a81f6da9cb2
net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
|
|
BUG: unable to handle kernel paging request in kernfs_put_active
kernfs
nilfs
|
8 |
C |
|
|
2 |
1308d |
1308d
|
22/29 |
1147d |
2e488f13755f
fs: fix UAF/GPF bug in nilfs_mdt_destroy
|
|
KASAN: slab-out-of-bounds Read in ntfs_trim_fs
ntfs3
|
19 |
C |
done |
|
204 |
1199d |
1297d
|
22/29 |
1147d |
557d19675a47
fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs
|
|
BUG: unable to handle kernel paging request in percpu_counter_add_batch
mm
|
8 |
|
|
|
140 |
1171d |
1274d
|
22/29 |
1147d |
64b4c411a6c7
ipc/msg.c: fix percpu_counter use after free
|
|
WARNING in pskb_expand_head
|
-1 |
C |
done |
done |
222 |
1261d |
1908d
|
22/29 |
1147d |
dbae2b062824
net: skb: introduce and use a single page frag cache
|
|
KASAN: use-after-free Read in __tcf_qdisc_find
net
|
19 |
|
|
|
1 |
1320d |
1320d
|
22/29 |
1147d |
ebda44da44f6
net: sched: fix race condition in qdisc_graft()
|
|
KCSAN: data-race in __ip4_datagram_connect / raw_bind (2)
net
|
6 |
|
|
|
1 |
1542d |
1542d
|
22/29 |
1147d |
153a0d187e76
ipv4: raw: lock the socket in raw_bind()
|
|
general protection fault in llc_build_and_send_ui_pkt
net
|
2 |
C |
done |
|
26 |
1481d |
1484d
|
22/29 |
1147d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
net-next test error: WARNING: suspicious RCU usage in hsr_node_get_first
net
|
-1 |
|
|
|
189 |
1517d |
1526d
|
22/29 |
1147d |
e7f27420681f
net: hsr: fix suspicious RCU usage warning in hsr_node_get_first()
|
|
KFENCE: memory corruption in p9_req_put
v9fs
|
20 |
|
|
|
2 |
1244d |
1247d
|
22/29 |
1147d |
26273ade77f5
9p: set req refcount to zero to avoid uninitialized usage
|
|
general protection fault in llc_alloc_frame
net
|
2 |
|
|
|
1 |
1482d |
1482d
|
22/29 |
1147d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
memory leak in kvm_vcpu_ioctl_set_cpuid2
kvm-x86
|
3 |
C |
|
|
1 |
1545d |
1541d
|
22/29 |
1147d |
811f95ff9527
KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
|
|
BUG: unable to handle kernel paging request in can_rcv_filter
can
|
8 |
C |
|
|
5 |
1230d |
1227d
|
22/29 |
1147d |
0acc442309a0
can: af_can: fix NULL pointer dereference in can_rcv_filter
|
|
general protection fault in ntfs_update_mftmirr
ntfs3
|
10 |
C |
error |
|
6680 |
1332d |
1456d
|
22/29 |
1147d |
321460ca3b55
fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
|
|
WARNING in tls_strp_done
net
|
-1 |
C |
error |
|
22 |
1336d |
1341d
|
22/29 |
1147d |
849f16bbfb68
tls: rx: react to strparser initialization errors
|
|
linux-next test error: general protection fault in xfrm_policy_lookup_bytype
net
|
-1 |
|
|
|
15 |
1240d |
1242d
|
22/29 |
1147d |
b97df039a68b
xfrm: Fix oops in __xfrm_state_delete()
|
|
WARNING in __set_page_dirty
nilfs
|
-1 |
C |
error |
|
9 |
1506d |
1731d
|
22/29 |
1147d |
e897be17a441
nilfs2: fix lockdep warnings in page operations for btree nodes
|
|
KASAN: use-after-free Read in __post_watch_notification
kernel
|
19 |
C |
inconclusive |
|
1 |
1361d |
1359d
|
22/29 |
1147d |
e64ab2dbd882
watch_queue: Fix missing locking in add_watch_to_object()
|
|
WARNING: locking bug in hfa384x_usbctlx_completion_task
staging
usb
|
4 |
C |
|
|
2 |
1394d |
1390d
|
22/29 |
1147d |
ee6c6e734247
staging/wlan-ng: get the correct struct hfa384x in work callback
|
|
BUG: unable to handle kernel NULL pointer dereference in __rxe_do_task
rdma
|
10 |
syz |
|
|
120 |
1274d |
1342d
|
22/29 |
1147d |
a625ca30eff8
RDMA/rxe: Fix "kernel NULL pointer dereference" error
|
|
KASAN: slab-out-of-bounds Write in __build_skb_around
net
bpf
|
21 |
C |
error |
|
2536 |
1220d |
1235d
|
22/29 |
1147d |
ce098da1497c
skbuff: Introduce slab_build_skb()
|
|
general protection fault in end_page_writeback
mm
nilfs
|
2 |
C |
error |
done |
2 |
1246d |
1277d
|
22/29 |
1147d |
512c5ca01a36
nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
|
|
KASAN: use-after-free Read in add_wait_queue
fs
io-uring
|
19 |
C |
done |
done |
13 |
1480d |
1486d
|
22/29 |
1147d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
|
WARNING in sk_stream_kill_queues (8)
net
|
-1 |
C |
unreliable |
|
4268 |
1151d |
1387d
|
22/29 |
1147d |
e9c6e7976026
tcp: fix sock skb accounting in tcp_read_skb()
|
|
KMSAN: uninit-value in r871xu_drv_init
usb
|
7 |
C |
|
|
7342 |
1395d |
2506d
|
22/29 |
1147d |
0458e5428e5e
staging: rtl8712: fix uninit-value in r871xu_drv_init()
d1b57669732d
staging: rtl8712: fix uninit-value in usb_read8() and friends
|
|
KCSAN: data-race in register_netdevice / type_show (2)
x25
|
6 |
|
|
|
2 |
1398d |
1401d
|
22/29 |
1147d |
cc26c2661fef
net: fix data-race in dev_isalive()
|
|
WARNING in fuse_write_file_get
fuse
|
-1 |
C |
done |
|
85 |
1334d |
1462d
|
22/29 |
1147d |
035ff33cf4db
fuse: write inode in fuse_release()
|
|
general protection fault in rose_send_frame (2)
hams
|
2 |
|
|
|
7 |
1261d |
1285d
|
22/29 |
1147d |
e97c089d7a49
rose: Fix NULL pointer dereference in rose_send_frame()
|
|
WARNING in mroute_clean_tables
net
|
-1 |
C |
|
|
10 |
1506d |
1526d
|
22/29 |
1147d |
5611a00697c8
ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
|
|
general protection fault in pse_prepare_data
net
|
10 |
C |
inconclusive |
|
6 |
1197d |
1275d
|
22/29 |
1147d |
46cdedf2a0fa
ethtool: pse-pd: fix null-deref on genl_info in dump
|
|
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll
fs
io-uring
|
10 |
C |
done |
|
3 |
1431d |
1430d
|
22/29 |
1147d |
aa184e8671f0
io_uring: don't attempt to IOPOLL for MSG_RING requests
|
|
WARNING in btf_type_id_size
bpf
|
-1 |
C |
done |
|
10 |
1207d |
1278d
|
22/29 |
1147d |
ea68376c8bed
bpf: prevent decl_tag from being referenced in func_proto
|
|
KMSAN: uninit-value in bcmp
net
|
19 |
C |
error |
done |
907 |
1183d |
2504d
|
22/29 |
1147d |
4f1dc7d9756e
fs/ntfs3: Validate attribute name offset
|
|
KASAN: use-after-free Read in move_expired_inodes (2)
exfat
|
19 |
C |
done |
|
4 |
1243d |
1283d
|
22/29 |
1147d |
4e3c51f4e805
fs: do not update freeing inode i_io_list
|
|
UBSAN: shift-out-of-bounds in tcf_pedit_init
net
|
-1 |
C |
done |
|
59 |
1427d |
1435d
|
22/29 |
1147d |
4d42d54a7d6a
net/sched: act_pedit: sanitize shift argument before usage
|
|
KASAN: use-after-free Read in ip6_fragment (2)
net
|
19 |
|
|
|
1 |
1240d |
1235d
|
22/29 |
1147d |
803e84867de5
ipv6: avoid use-after-free in ip6_fragment()
|
|
general protection fault in llc_build_and_send_test_pkt
net
|
2 |
C |
done |
|
25 |
1479d |
1484d
|
22/29 |
1147d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence
sound
|
12 |
C |
unreliable |
|
8 |
1324d |
1469d
|
22/29 |
1147d |
2f7a26abb824
ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
|
|
BUG: corrupted list in rdma_listen (2)
rdma
|
19 |
C |
inconclusive |
|
5 |
1528d |
1594d
|
22/29 |
1147d |
22e9f71072fa
RDMA/cma: Do not change route.addr.src_addr outside state checks
|
|
linux-next boot error: INFO: task hung in add_early_randomness (2)
crypto
|
-1 |
|
|
|
14 |
1408d |
1414d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
WARNING in vhost_dev_cleanup (2)
net
virt
kvm
|
-1 |
|
|
|
79 |
1511d |
1520d
|
22/29 |
1147d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
possible deadlock in snd_hrtimer_callback (2)
fs
|
4 |
C |
inconclusive |
|
582 |
1352d |
1618d
|
22/29 |
1147d |
96b097091c66
ALSA: pcm: Use deferred fasync helper
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
KASAN: use-after-free Read in __kernfs_remove
|
19 |
C |
done |
|
3985 |
1286d |
1330d
|
22/29 |
1147d |
4abc99652812
kernfs: fix use-after-free in __kernfs_remove
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (3)
fbdev
|
8 |
C |
unreliable |
|
11 |
1333d |
1375d
|
22/29 |
1147d |
a5a923038d70
fbdev: fbcon: Properly revert changes when vc_resize() failed
|
|
BUG: unable to handle kernel NULL pointer dereference in em_u32_match
net
|
10 |
C |
|
|
2 |
1202d |
1259d
|
22/29 |
1147d |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
WARNING: ODEBUG bug in htab_map_alloc
bpf
|
-1 |
C |
|
|
6456 |
1290d |
1315d
|
22/29 |
1147d |
cf7de6a53600
bpf: add missing percpu_counter_destroy() in htab_map_alloc()
|
|
memory leak in ntfs_init_fs_context
ntfs3
|
3 |
C |
|
|
169 |
1211d |
1332d
|
22/29 |
1147d |
51e76a232f8c
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
|
|
inconsistent lock state in p9_req_put
v9fs
|
4 |
|
|
|
181 |
1289d |
1340d
|
22/29 |
1147d |
296ab4a81384
net/9p: use a dedicated spinlock for trans_fd
|
|
KCSAN: data-race in sit_tunnel_xmit / sit_tunnel_xmit
net
|
6 |
|
|
|
702 |
1220d |
2318d
|
22/29 |
1147d |
cb34b7cf17ec
ipv6/sit: use DEV_STATS_INC() to avoid data-races
|
|
KASAN: use-after-free Read in tipc_named_reinit (2)
tipc
|
19 |
|
|
|
1 |
1448d |
1444d
|
22/29 |
1147d |
911600bf5a5e
tipc: fix use-after-free Read in tipc_named_reinit
|
|
kernel BUG in ext4_es_cache_extent
ext4
|
-1 |
C |
inconclusive |
|
6 |
1171d |
1530d
|
22/29 |
1147d |
c878bea3c9d7
ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
|
|
WARNING in ip6erspan_tunnel_xmit
net
|
-1 |
|
|
|
23 |
1154d |
1399d
|
22/29 |
1147d |
301bd140ed0b
erspan: do not assume transport header is always set
|
|
BUG: sleeping function called from invalid context in vm_area_dup
mm
|
5 |
C |
|
|
3 |
1274d |
1274d
|
22/29 |
1147d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
|
BUG: sleeping function called from invalid context in kernfs_walk_and_get_ns
kernfs
|
5 |
C |
error |
|
196 |
1276d |
1282d
|
22/29 |
1147d |
46307fd6e27a
cgroup: Reorganize css_set_lock and kernfs path processing
|
|
WARNING: refcount bug in rds_tcp_tune
rds
|
13 |
|
|
|
166 |
1435d |
1444d
|
22/29 |
1147d |
6997fbd7a3da
net: rds: use maybe_get_net() when acquiring refcount on TCP sockets
|
|
KASAN: use-after-free Read in hugetlb_handle_userfault
mm
|
19 |
C |
|
|
4 |
1292d |
1316d
|
22/29 |
1147d |
958f32ce832b
mm: hugetlb: fix UAF in hugetlb_handle_userfault
|
|
WARNING in iomap_read_inline_data
gfs2
iomap
|
-1 |
C |
|
|
3 |
1216d |
1234d
|
22/29 |
1147d |
70376c7ff312
gfs2: Always check inode size of inline inodes
|
|
general protection fault in skb_unlink
net
|
2 |
C |
done |
error |
8 |
1316d |
2877d
|
22/29 |
1147d |
5121197ecc5d
kcm: close race conditions on sk_receive_queue
|
|
memory leak in kvm_set_memslot
kvm
|
3 |
C |
|
|
1 |
1431d |
1431d
|
22/29 |
1147d |
c87661f855c3
KVM: Free new dirty bitmap if creating a new memslot fails
|
|
upstream boot error: WARNING in wiphy_register
wireless
|
-1 |
|
|
|
1 |
1340d |
1340d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING in sk_destruct
net
|
-1 |
C |
done |
|
454 |
1423d |
1550d
|
22/29 |
1147d |
ebdc1a030962
tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
|
|
BUG: unable to handle kernel paging request in eventfd_ctx_put
fs
|
8 |
C |
done |
|
7 |
1272d |
1300d
|
22/29 |
1147d |
7353633814f6
KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
|
|
KASAN: use-after-free Read in task_work_run (2)
kernel
|
19 |
C |
unreliable |
|
18 |
1226d |
1318d
|
22/29 |
1147d |
517e6a301f34
perf: Fix perf_pending_task() UaF
|
|
KASAN: slab-out-of-bounds Read in ipvlan_queue_xmit
net
|
17 |
C |
error |
error |
8 |
1510d |
1987d
|
22/29 |
1147d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
memory leak in do_seccomp (2)
kernel
|
3 |
C |
|
|
4 |
1330d |
1879d
|
22/29 |
1147d |
a1140cb215fa
seccomp: Move copy_seccomp() to no failure path.
|
|
WARNING in wdev_chandef
wireless
|
-1 |
|
|
|
12 |
1349d |
1391d
|
22/29 |
1147d |
206bbcf76121
wifi: nl80211: hold wdev mutex for tid config
|
|
KASAN: use-after-free Read in __io_remove_buffers
io-uring
|
19 |
C |
done |
|
2 |
1350d |
1346d
|
22/29 |
1147d |
ec8516f3b7c4
io_uring: fix free of unallocated buffer list
|
|
kernel panic: corrupted stack end in packet_sendmsg
net
|
2 |
|
|
|
1 |
1318d |
1318d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
general protection fault in virtio_gpu_array_put_free
dri
virt
|
2 |
|
|
|
4 |
1557d |
1594d
|
22/29 |
1147d |
6b79f96f4a23
drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
|
|
BUG: bad usercopy in bpf_prog_get_info_by_fd
hardening
mm
|
-1 |
|
|
|
1 |
1419d |
1419d
|
22/29 |
1147d |
10f3b29c65bb
bpf, arm64: Clear prog->jited_len along prog->jited
|
|
WARNING in tcp_ack (3)
net
|
-1 |
|
|
|
16 |
1414d |
1472d
|
22/29 |
1147d |
40570375356c
tcp: add accessors to read/set tp->snd_cwnd
|
|
WARNING in cfg80211_ch_switch_notify
wireless
|
-1 |
C |
done |
|
744 |
1348d |
1391d
|
22/29 |
1147d |
77e7b6ba78ed
wifi: cfg80211: handle IBSS in channel switch
|
|
WARNING in napi_complete_done
net
|
-1 |
C |
error |
|
104 |
1255d |
1259d
|
22/29 |
1147d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
KCSAN: data-race in inet6_recvmsg / ipv6_setsockopt
net
|
6 |
|
|
|
1 |
1531d |
1528d
|
22/29 |
1147d |
086d49058cd8
ipv6: annotate some data-races around sk->sk_prot
|
|
INFO: task hung in add_early_randomness (2)
usb
crypto
|
1 |
C |
done |
|
182 |
1195d |
1413d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
WARNING: kmalloc bug in bpf
bpf
|
-1 |
C |
done |
done |
562 |
1485d |
1602d
|
22/29 |
1147d |
0708a0afe291
mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
|
|
possible deadlock in f2fs_write_checkpoint
f2fs
|
4 |
C |
done |
|
2208 |
1507d |
1553d
|
22/29 |
1147d |
c7f91bd41029
f2fs: Restore rwsem lockdep support
|
|
KASAN: use-after-free Read in xfs_qm_dqfree_one
xfs
|
19 |
syz |
|
|
7 |
1219d |
1228d
|
22/29 |
1147d |
52f31ed22821
xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING
|
|
KMSAN: uninit-value in tomoyo_path_chown
fs
|
7 |
C |
|
|
13763 |
1304d |
1305d
|
22/29 |
1147d |
f52d74b190f8
open: always initialize ownership fields
|
|
KMSAN: uninit-value in asix_check_host_enable
usb
|
7 |
C |
|
|
109 |
1455d |
1513d
|
22/29 |
1147d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
WARNING in bpf_skb_load_helper_32
bpf
|
-1 |
C |
done |
|
9 |
1348d |
1379d
|
22/29 |
1147d |
0326195f523a
bpf: Make sure mac_header was set before using it
|
|
KASAN: use-after-free Read in ip6mr_sk_done
net
|
19 |
C |
done |
|
10988 |
1262d |
1531d
|
22/29 |
1147d |
7d9b1b578d67
ip6mr: fix use-after-free in ip6mr_sk_done()
|
|
WARNING in jfs_symlink
jfs
|
-1 |
C |
|
|
12 |
1268d |
1279d
|
22/29 |
1147d |
ebe060369f8d
jfs: Fix fortify moan in symlink
|
|
possible deadlock in btrfs_search_slot_get_root
btrfs
|
4 |
C |
|
|
5 |
1237d |
1257d
|
22/29 |
1147d |
b740d8061669
btrfs: free btrfs_path before copying root refs to userspace
|
|
WARNING in component_del
dri
|
-1 |
C |
done |
|
6 |
1528d |
1550d
|
22/29 |
1147d |
c853685d11c0
usb: core: Unregister device on component_add() failure
|
|
WARNING: refcount bug in smc_pnet_add
smc
|
13 |
C |
done |
|
98 |
1517d |
1531d
|
22/29 |
1147d |
28f922213886
net/smc: fix ref_tracker issue in smc_pnet_add()
|
|
KASAN: use-after-free Write in mini_qdisc_pair_swap (2)
net
|
22 |
|
|
|
24 |
1156d |
1536d
|
22/29 |
1147d |
04c2a47ffb13
net: sched: fix use-after-free in tc_new_tfilter()
|
|
KASAN: use-after-free Read in hdr_find_e
ntfs3
|
19 |
C |
done |
done |
66 |
1155d |
1297d
|
22/29 |
1147d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
possible deadlock in blkdev_put (3)
block
exfat
|
4 |
C |
|
|
870 |
1424d |
1496d
|
22/29 |
1147d |
d292dc80686a
loop: don't destroy lo->workqueue in __loop_clr_fd
|
|
KASAN: use-after-free Read in filp_close
io-uring
fs
|
19 |
C |
done |
|
17 |
1189d |
1417d
|
22/29 |
1147d |
40a1926022d1
fix the breakage in close_fd_get_file() calling conventions change
|
|
KMSAN: uninit-value in tcp_recvmsg
net
|
7 |
C |
|
|
25918 |
1269d |
1394d
|
22/29 |
1147d |
1228b34c8d0e
net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
|
|
memory leak in smc_sysctl_net_init
smc
|
3 |
C |
|
|
8 |
1479d |
1483d
|
22/29 |
1147d |
5ae6acf1d00b
net/smc: fix a memory leak in smc_sysctl_net_exit()
|
|
upstream boot error: BUG: unable to handle kernel paging request in blk_mq_get_tag
block
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
general protection fault in binder_alloc_print_pages
kernel
|
12 |
C |
error |
|
157 |
1303d |
1334d
|
22/29 |
1147d |
1da52815d5f1
binder: fix alloc->vma_vm_mm null-ptr dereference
|
|
WARNING: refcount bug in put_gid_ndev
rdma
|
13 |
|
|
|
3 |
1224d |
1224d
|
22/29 |
1147d |
e42f9c2e6aad
RDMA: Add missed netdev_put() for the netdevice_tracker
|
|
KASAN: null-ptr-deref Read in __free_pages
kernel
|
11 |
C |
inconclusive |
|
21 |
1226d |
1488d
|
22/29 |
1147d |
a635415a064e
watch_queue: Fix NULL dereference in error cleanup
|
|
upstream boot error: INFO: task hung in add_early_randomness
crypto
|
-1 |
|
|
|
125 |
1405d |
1412d
|
22/29 |
1147d |
228432551bd8
virtio-rng: make device ready before making request
|
|
KASAN: use-after-free Read in net_tx_action
kernel
|
19 |
C |
inconclusive |
|
3 |
1282d |
1327d
|
22/29 |
1147d |
ebda44da44f6
net: sched: fix race condition in qdisc_graft()
|
|
usb-testing boot error: kernel BUG in putname
fs
|
-1 |
|
|
|
1 |
1325d |
1325d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
kernel panic: stack is corrupted in __kmalloc
integrity
lsm
sctp
|
2 |
|
|
|
4 |
1152d |
1406d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING in blk_mq_release
block
|
-1 |
C |
error |
|
11 |
1328d |
1346d
|
22/29 |
1147d |
aa0c680c3aa9
block: Do not call blk_put_queue() if gendisk allocation fails
|
|
WARNING in hif_usb_send/usb_submit_urb
wireless
|
-1 |
C |
unreliable |
done |
374 |
1228d |
2019d
|
22/29 |
1147d |
16ef02bad239
wifi: ath9k: verify the expected usb_endpoints are present
|
|
BUG: Bad page map (5)
mm
|
19 |
C |
|
|
35 |
1188d |
1446d
|
22/29 |
1147d |
4d24de9425f7
mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock
|
|
KASAN: use-after-free Read in mas_next_entry
fs
mm
|
19 |
C |
error |
|
16 |
1258d |
1271d
|
22/29 |
1147d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
linux-next boot error: general protection fault in add_mtd_device
mtd
|
-1 |
|
|
|
117 |
1353d |
1386d
|
22/29 |
1147d |
7ec4cdb32173
mtd: core: check partition before dereference
|
|
memory leak in hidraw_report_event
input
usb
|
3 |
C |
|
|
1 |
1423d |
1422d
|
22/29 |
1147d |
a5623a203cff
HID: hidraw: fix memory leak in hidraw_release()
|
|
upstream boot error: WARNING in alloc_workqueue
net
rdma
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
usb-testing boot error: WARNING in __netif_set_xps_queue
virt
net
|
-1 |
|
|
|
57 |
1265d |
1277d
|
22/29 |
1147d |
fc8695eb11f0
Revert "net: fix cpu_max_bits_warn() usage in netif_attrmask_next{,_and}"
|
|
KASAN: use-after-free Read in inet_bind2_bucket_find
net
io-uring
|
19 |
C |
done |
|
13 |
1402d |
1409d
|
22/29 |
1147d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
INFO: task hung in p9_fd_close
v9fs
|
1 |
C |
error |
error |
484 |
1257d |
2421d
|
22/29 |
1147d |
ef575281b21e
9p/trans_fd: always use O_NONBLOCK read/write
|
|
KASAN: use-after-free Read in post_one_notification
kernel
|
19 |
C |
inconclusive |
|
19 |
1287d |
1487d
|
22/29 |
1147d |
353f7988dd84
watchqueue: make sure to serialize 'wqueue->defunct' properly
|
|
memory leak in smc_create (2)
smc
|
3 |
C |
|
|
2 |
1484d |
1480d
|
22/29 |
1147d |
1a74e9932374
net/smc: Fix sock leak when release after smc_shutdown()
|
|
general protection fault in kernel_accept (5)
tipc
|
2 |
|
|
|
1 |
1301d |
1297d
|
22/29 |
1147d |
82cb4e4612c6
tipc: fix a null-ptr-deref in tipc_topsrv_accept
|
|
WARNING in bpf_bprintf_prepare (2)
bpf
|
-1 |
C |
|
|
2 |
1281d |
1320d
|
22/29 |
1147d |
05b24ff9b2cf
bpf: Prevent bpf program recursion for raw tracepoint probes
|
|
KASAN: use-after-free Read in driver_register
usb
|
19 |
C |
|
|
131 |
1390d |
1441d
|
22/29 |
1147d |
5f0b5f4d50fa
usb: gadget: fix race when gadget driver register via ioctl
|
|
possible deadlock in __inet_inherit_port
net
|
4 |
C |
done |
|
85 |
1185d |
1246d
|
22/29 |
1147d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING: suspicious RCU usage in nft_do_chain
netfilter
|
4 |
|
|
|
1 |
1509d |
1509d
|
22/29 |
1147d |
17a8f31bba7b
netfilter: egress: silence egress hook lockdep splats
|
|
WARNING: kobject bug in erofs_unregister_sysfs
erofs
|
-1 |
C |
done |
|
5 |
1488d |
1490d
|
22/29 |
1147d |
a942da24abc5
fs: erofs: add sanity check for kobject in erofs_unregister_sysfs
|
|
KASAN: use-after-free Read in blk_mq_sched_free_rqs
block
|
19 |
C |
error |
|
8 |
1395d |
1444d
|
22/29 |
1147d |
50e34d78815e
block: disable the elevator int del_gendisk
|
|
WARNING in cleanup_net
net
|
-1 |
|
|
|
613 |
1147d |
1269d
|
22/29 |
1147d |
d1e96cc4fbe0
mptcp: fix tracking issue in mptcp_subflow_create_socket()
|
|
general protection fault in ip6_tnl_xmit
net
|
2 |
|
|
|
1 |
1528d |
1528d
|
22/29 |
1147d |
3a5f238f2b36
ip6_tunnel: fix possible NULL deref in ip6_tnl_xmit
|
|
KASAN: use-after-free Read in __snd_rawmidi_transmit_ack
sound
|
19 |
|
|
|
1 |
1426d |
1422d
|
22/29 |
1147d |
0125de38122f
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
|
|
WARNING in driver_unregister
input
usb
|
-1 |
C |
|
|
1 |
1424d |
1420d
|
22/29 |
1147d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
possible deadlock in sk_common_release
net
|
4 |
|
|
|
5 |
1234d |
1246d
|
22/29 |
1147d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
KASAN: use-after-free Read in ieee80211_scan_rx (3)
wireless
|
19 |
|
|
|
10 |
1344d |
1451d
|
22/29 |
1147d |
60deb9f10eec
wifi: mac80211: Fix UAF in ieee80211_scan_rx()
|
|
KASAN: use-after-free Read in LZ4_decompress_safe_partial
erofs
|
19 |
C |
done |
|
13 |
1475d |
1630d
|
22/29 |
1147d |
eafc0a02391b
lz4: fix LZ4_decompress_safe_partial read out of bound
|
|
KASAN: null-ptr-deref Write in kill_f2fs_super
f2fs
|
12 |
C |
error |
|
49 |
1260d |
1281d
|
22/29 |
1147d |
91586ce0d39a
f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
|
|
memory leak in setup_mq_sysctls
kernel
|
3 |
C |
|
|
2 |
1225d |
1396d
|
22/29 |
1147d |
db7cfc380900
ipc: Free mq_sysctls if ipc namespace creation failed
|
|
UBSAN: array-index-out-of-bounds in io_submit_sqes
fs
|
15 |
|
|
|
4 |
1416d |
1416d
|
22/29 |
1147d |
fcde59feb1af
io_uring: add io_op_defs 'def' pointer in req init and issue
|
|
kernel panic: stack is corrupted in sys_clock_nanosleep
kernel
|
2 |
|
|
|
2 |
1325d |
1407d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
kernel panic: corrupted stack end in inet6_ioctl
net
|
2 |
|
|
|
1 |
1239d |
1238d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
memory leak in vhci_write
bluetooth
|
3 |
C |
|
|
1 |
1339d |
1335d
|
22/29 |
1147d |
7c9524d92964
Bluetooth: L2CAP: Fix memory leak in vhci_write
|
|
WARNING in btrfs_commit_transaction
btrfs
|
-1 |
C |
inconclusive |
done |
3 |
1167d |
1261d
|
22/29 |
1147d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
general protection fault in kvm_arch_vcpu_ioctl
kvm-x86
|
2 |
C |
inconclusive |
|
365 |
1347d |
1385d
|
22/29 |
1147d |
f83894b24c2a
KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
|
|
kernel panic: corrupted stack end in loop_control_ioctl
fs
|
2 |
|
|
|
2 |
1269d |
1354d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
INFO: task hung in ath6kl_usb_power_off
wireless
|
1 |
|
|
|
7454 |
1344d |
2110d
|
22/29 |
1147d |
62ebaf2f9261
ath6kl: avoid flush_scheduled_work() usage
|
|
possible deadlock in nilfs_count_free_blocks
nilfs
|
4 |
C |
|
|
60 |
1265d |
1277d
|
22/29 |
1147d |
8ac932a4921a
nilfs2: fix deadlock in nilfs_count_free_blocks()
|
|
kernel BUG at fs/ext4/inline.c:LINE!
ext4
|
-1 |
C |
done |
done |
76 |
1187d |
2010d
|
22/29 |
1147d |
5c099c4fdc43
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
|
|
INFO: trying to register non-static key in hci_uart_flush (2)
bluetooth
|
-1 |
syz |
error |
error |
37 |
1275d |
2417d
|
22/29 |
1147d |
3124d320c22f
Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
|
|
possible deadlock in snd_timer_notify (2)
fs
|
4 |
|
|
|
151 |
1352d |
1616d
|
22/29 |
1147d |
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
WARNING: still has locks held in io_ring_submit_lock
fs
io-uring
|
4 |
C |
done |
|
3 |
1432d |
1432d
|
22/29 |
1147d |
e7637a492b9f
io_uring: fix locking state for empty buffer group
|
|
INFO: rcu detected stall in mld_ifc_work
net
|
1 |
C |
inconclusive |
|
1 |
1523d |
1523d
|
22/29 |
1147d |
5740d0689096
net: sched: limit TC_ACT_REPEAT loops
|
|
WARNING in aiptek_open/usb_submit_urb
usb
input
|
-1 |
C |
error |
|
2380 |
1483d |
2505d
|
22/29 |
1147d |
5600f6986628
Input: aiptek - properly check endpoint type
|
|
WARNING: refcount bug in u32_destroy_key
net
|
13 |
|
|
|
1 |
1465d |
1465d
|
22/29 |
1147d |
3db09e762dc7
net/sched: cls_u32: fix netns refcount changes in u32_change()
|
|
KASAN: use-after-free Read in ip_mc_sf_allow
net
|
19 |
|
|
|
1 |
1449d |
1449d
|
22/29 |
1147d |
dba5bdd57bea
net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
|
|
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2)
sound
|
-1 |
C |
done |
|
2 |
1496d |
1492d
|
22/29 |
1147d |
efb6402c3c4a
ALSA: oss: Fix PCM OSS buffer allocation overflow
|
|
WARNING in __queue_work (3)
kernel
|
-1 |
syz |
error |
|
953 |
1248d |
2082d
|
22/29 |
1147d |
877afadad2dc
Bluetooth: When HCI work queue is drained, only queue chained work
|
|
general protection fault in fq_codel_enqueue (3)
net
|
2 |
C |
inconclusive |
|
5 |
1385d |
1630d
|
22/29 |
1147d |
fd1894224407
bpf: Don't redirect packets with invalid pkt_len
|
|
KCSAN: data-race in fib_alias_hw_flags_set / fib_alias_hw_flags_set
net
|
6 |
|
|
|
1 |
1525d |
1522d
|
22/29 |
1147d |
9fcf986cc4bc
ipv4: fix data races in fib_alias_hw_flags_set
|
|
KASAN: invalid-free in io_clean_op
io-uring
|
24 |
C |
|
|
13 |
1282d |
1299d
|
22/29 |
1147d |
4c17a496a7a0
io_uring/net: fix cleanup double free free_iov init
|
|
WARNING in check_map_prog_compatibility
bpf
|
-1 |
C |
inconclusive |
done |
128 |
1299d |
1462d
|
22/29 |
1147d |
34dd3bad1a6f
bpf: Relax the requirement to use preallocated hash maps in tracing progs.
|
|
INFO: trying to register non-static key in __fib6_clean_all (2)
net
|
-1 |
|
|
|
3 |
1284d |
1308d
|
22/29 |
1147d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
upstream boot error: BUG: unable to handle kernel paging request in tomoyo_encode
tomoyo
|
-1 |
|
|
|
1 |
1339d |
1339d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
WARNING: bad unlock balance in rxrpc_do_sendmsg
afs
net
|
4 |
C |
inconclusive |
|
14 |
1352d |
1557d
|
22/29 |
1147d |
b0f571ecd794
rxrpc: Fix locking in rxrpc's sendmsg
|
|
memory leak in tun_chr_open
net
|
3 |
C |
|
|
1 |
1316d |
1316d
|
22/29 |
1147d |
1118b2049d77
net: tun: Fix memory leaks of napi_get_frags
|
|
possible deadlock in snd_pcm_period_elapsed (3)
sound
|
4 |
C |
inconclusive |
|
23 |
1344d |
1570d
|
22/29 |
1147d |
96b097091c66
ALSA: pcm: Use deferred fasync helper
|
|
upstream boot error: general protection fault in blk_mq_alloc_and_init_hctx
block
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
memory leak in blk_mq_init_tags
block
usb
|
3 |
C |
|
|
2 |
1474d |
1481d
|
22/29 |
1147d |
03252259e18e
scsi: sd: Clean up gendisk if device_add_disk() failed
|
|
general protection fault in udpv6_sendmsg
net
|
2 |
C |
error |
|
69 |
1243d |
1253d
|
22/29 |
1147d |
6423ac2eb31e
rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket
|
|
general protection fault in erofs_bread
erofs
|
2 |
C |
error |
|
3 |
1264d |
1273d
|
22/29 |
1147d |
e5126de138ca
erofs: fix general protection fault when reading fragment
|
|
kernel panic: corrupted stack end in handle_mm_fault
riscv
|
2 |
|
|
|
1 |
1408d |
1408d
|
22/29 |
1147d |
b81d591386c3
riscv: Increase stack size under KASAN
|
|
WARNING in ieee80211_ibss_csa_beacon
wireless
|
-1 |
C |
error |
|
4997 |
1147d |
2016d
|
22/29 |
1147d |
15bc8966b6d3
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
|
|
INFO: task hung in synchronize_rcu (3)
|
1 |
C |
done |
done |
374 |
1156d |
2094d
|
22/29 |
1147d |
2d08935682ac
KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io()
|
|
possible deadlock in start_this_handle (3)
ext4
|
4 |
|
|
|
8 |
1184d |
1372d
|
22/29 |
1147d |
68aaee147e59
mm: memcontrol: fix potential oom_lock recursion deadlock
|
|
WARNING in static_key_slow_try_dec (3)
kernel
|
-1 |
C |
|
|
26 |
1158d |
1318d
|
22/29 |
1147d |
921ebde3c0d2
netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
|
|
upstream boot error: BUG: unable to handle kernel paging request in __init_work
pm
|
-1 |
|
|
|
1 |
1341d |
1341d
|
22/29 |
1147d |
9993a4f989c7
virtio: Revert "virtio: find_vqs() add arg sizes"
|
|
KASAN: slab-out-of-bounds Read in decrypt_internal
net
|
17 |
C |
inconclusive |
done |
4 |
1470d |
1560d
|
22/29 |
1147d |
9381fe8c849c
net/tls: fix slab-out-of-bounds bug in decrypt_internal
|
|
INFO: task hung in __input_unregister_device (4)
usb
input
|
1 |
C |
done |
|
924 |
1319d |
1384d
|
22/29 |
1147d |
98e01215708b
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
|
|
possible deadlock in __f2fs_ioctl
f2fs
|
4 |
|
|
|
17 |
1192d |
1224d
|
22/29 |
1191d |
ca8b201f2854
f2fs: fix to avoid potential deadlock
|
|
general protection fault in __ext4_journal_get_write_access
fuse
ext4
|
2 |
C |
done |
done |
7 |
1983d |
2032d
|
22/29 |
1248d |
384d87ef2c95
block: Do not discard buffers under a mounted filesystem
|
|
WARNING in sco_sock_sendmsg
mm
|
-1 |
C |
inconclusive |
|
2 |
1688d |
1688d
|
22/29 |
1281d |
0771cbb3b97d
Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
|
|
WARNING in ipvlan_unregister_nf_hook
net
|
-1 |
C |
done |
done |
4151 |
1596d |
2232d
|
22/29 |
1304d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
WARNING: ODEBUG bug in bt_host_release
bluetooth
|
-1 |
syz |
done |
done |
7 |
1829d |
2083d
|
22/29 |
1304d |
e2cb6b891ad2
bluetooth: eliminate the potential race condition when removing the HCI controller
|
|
WARNING: suspicious RCU usage (5)
|
-1 |
C |
done |
|
1 |
1403d |
1399d
|
20/29 |
1392d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
general protection fault in sock_close
net
|
2 |
syz |
done |
unreliable |
2 |
2057d |
2054d
|
20/29 |
1422d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING in dev_change_net_namespace
net
|
-1 |
syz |
done |
done |
8 |
1607d |
2256d
|
20/29 |
1428d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
general protection fault in hci_inquiry_result_with_rssi_evt
bluetooth
|
2 |
C |
done |
|
17 |
1560d |
1585d
|
20/29 |
1428d |
72279d17df54
Bluetooth: hci_event: Rework hci_inquiry_result_with_rssi_evt
|
|
general protection fault in __loop_clr_fd
block
|
2 |
C |
done |
|
5702 |
2204d |
2232d
|
20/29 |
1428d |
87579e9b7d8d
loop: use worker per cgroup instead of kworker
|
|
WARNING in rtnl_dellink
net
|
-1 |
C |
done |
done |
94 |
1555d |
2066d
|
20/29 |
1434d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
INFO: task hung in linkwatch_event (2)
net
|
1 |
C |
done |
done |
1033 |
1453d |
2178d
|
20/29 |
1434d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (2)
fbdev
|
21 |
C |
inconclusive |
done |
26 |
1568d |
1976d
|
20/29 |
1434d |
0499f419b76f
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
|
|
WARNING in drm_gem_shmem_vm_open
|
-1 |
syz |
done |
done |
38 |
1566d |
1701d
|
20/29 |
1434d |
0499f419b76f
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
|
|
INFO: task hung in usb_get_descriptor
|
1 |
C |
done |
done |
4149 |
1496d |
2018d
|
20/29 |
1434d |
363eaa3a450a
usbip: synchronize event handler with sysfs code paths
|
|
general protection fault in ieee80211_chanctx_num_assigned
wireless
|
2 |
C |
inconclusive |
done |
15 |
1584d |
2018d
|
20/29 |
1434d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
general protection fault in xfrm_user_rcv_msg_compat
net
|
2 |
C |
unreliable |
done |
1543 |
1715d |
1927d
|
20/29 |
1434d |
4e9505064f58
net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
|
|
KASAN: slab-out-of-bounds Read in add_adv_patterns_monitor
bluetooth
|
17 |
C |
error |
done |
5 |
1883d |
1904d
|
20/29 |
1435d |
b4a221ea8a1f
Bluetooth: advmon offload MSFT add rssi support
|
|
KASAN: use-after-free Read in ext4_xattr_set_entry (4)
ext4
|
22 |
C |
error |
done |
21 |
1515d |
1902d
|
20/29 |
1480d |
6e47a3cc68fc
ext4: get rid of super block and sbi from handle_mount_ops()
|
|
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3)
wireless
usb
|
17 |
C |
unreliable |
done |
7 |
1523d |
1927d
|
20/29 |
1492d |
6ce708f54cc8
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
|
|
KASAN: slab-out-of-bounds Write in betop_probe
input
usb
|
21 |
C |
unreliable |
|
9 |
1701d |
2257d
|
20/29 |
1492d |
689e453a9b9c
HID: betop: fix slab-out-of-bounds Write in betop_probe
HID: betop: fix slab-out-of-bounds Write in betop_probe
|
|
possible deadlock in scheduler_tick
kvm-x86
|
4 |
C |
error |
|
99 |
1837d |
1849d
|
20/29 |
1492d |
a83829f56c7c
KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken
8228c77d8b56
KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
|
|
WARNING in mptcp_sendmsg_frag
mptcp
|
-1 |
C |
inconclusive |
|
6 |
1668d |
1674d
|
20/29 |
1492d |
efe686ffce01
mptcp: ensure tx skbs always have the MPTCP ext
mptcp: ensure tx skbs always have the MPTCP ext
|
|
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2)
media
usb
|
7 |
C |
|
|
34 |
1760d |
1976d
|
20/29 |
1492d |
c5453769f77c
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
899a61a3305d
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
|
|
possible deadlock in cgroup_rstat_updated
cgroups
|
4 |
|
|
|
1 |
1652d |
1648d
|
20/29 |
1492d |
3c08b0931eed
blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu
blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu
|
|
BUG: sleeping function called from invalid context in __might_resched
serial
|
5 |
C |
inconclusive |
|
9 |
1615d |
1618d
|
20/29 |
1500d |
1ee33b1ca2b8
tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
|
|
WARNING in cgroup_finalize_control
|
-1 |
syz |
done |
done |
9 |
1638d |
2166d
|
20/29 |
1500d |
7ee285395b21
cgroup: Make rebind_subsystems() disable v2 controllers all at once
|
|
KASAN: use-after-free Read in snd_mixer_oss_get_volume1
sound
|
19 |
C |
inconclusive |
|
1 |
1643d |
1639d
|
20/29 |
1500d |
411cef6adfb3
ALSA: mixer: oss: Fix racy access to slots
|
|
memory leak in blk_iolatency_init
block
cgroups
|
3 |
C |
|
|
833 |
1500d |
1676d
|
20/29 |
1500d |
6f5ddde41069
blkcg: fix memory leak in blk_iolatency_init
|
|
possible deadlock in ktime_get_coarse_ts64
kernel
|
4 |
|
|
|
1 |
1625d |
1624d
|
20/29 |
1500d |
5e0bc3082e2e
bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
|
|
memory leak in __mdiobus_register
usb
|
3 |
C |
|
|
1 |
1668d |
1664d
|
20/29 |
1500d |
ab609f25d198
net: mdiobus: Fix memory leak in __mdiobus_register
ca6e11c337da
phy: mdio: fix memory leak
|
|
WARNING in dst_release (3)
net
|
-1 |
|
|
|
3 |
1503d |
1584d
|
20/29 |
1500d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
WARNING in ref_tracker_dir_exit
|
-1 |
C |
done |
|
16271 |
1556d |
1585d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
WARNING in ovl_create_real
overlayfs
|
-1 |
C |
unreliable |
|
164 |
1621d |
1689d
|
20/29 |
1500d |
1f5573cfe7a7
ovl: fix warning in ovl_create_real()
|
|
KCSAN: data-race in call_rcu / rcu_gp_kthread
fs
|
6 |
|
|
|
1 |
1739d |
1739d
|
20/29 |
1500d |
2431774f04d1
rcu: Mark accesses to rcu_state.n_force_qs
|
|
WARNING: kmalloc bug in hash_ip_create
netfilter
|
-1 |
C |
done |
|
641 |
1658d |
1686d
|
20/29 |
1500d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
KCSAN: data-race in __neigh_event_send / ip_finish_output2 (3)
net
|
6 |
|
|
|
1 |
1637d |
1634d
|
20/29 |
1500d |
d18785e21386
net: annotate data-race in neigh_output()
|
|
general protection fault in unregister_vlan_dev
net
|
2 |
|
|
|
1 |
1598d |
1598d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
possible deadlock in __loop_clr_fd (3)
block
|
4 |
|
|
|
2972 |
1555d |
1618d
|
20/29 |
1500d |
6050fa4c84cc
loop: don't hold lo_mutex during __loop_clr_fd()
|
|
WARNING in __i2c_transfer (2)
i2c
|
-1 |
C |
done |
|
337 |
1564d |
1613d
|
20/29 |
1500d |
bb436283e25a
i2c: validate user data in compat ioctl
|
|
KCSAN: data-race in flush_tlb_batched_pending / try_to_unmap_one
mm
|
6 |
|
|
|
2 |
1555d |
1610d
|
20/29 |
1500d |
5ee2fa2f0636
mm/rmap: fix potential batched TLB flush race
|
|
WARNING in sta_info_insert_rcu
|
-1 |
C |
done |
done |
2533 |
1593d |
2030d
|
20/29 |
1500d |
a6555f844549
mac80211: Drop frames from invalid MAC address in ad-hoc mode
|
|
KASAN: use-after-free Read in __crypto_xor
crypto
|
19 |
C |
done |
|
9 |
1655d |
1687d
|
20/29 |
1500d |
68b6dea802ce
crypto: pcrypt - Delay write to padata->info
da353fac65fe
net/tls: Fix flipped sign in tls_err_abort() calls
|
|
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control
media
usb
|
7 |
C |
|
|
186 |
1610d |
1951d
|
20/29 |
1500d |
afae4ef7d5ad
media: dvb-usb: fix ununit-value in az6027_rc_query
|
|
KMSAN: kernel-infoleak in move_addr_to_user (6)
tipc
|
9 |
C |
|
|
4 |
1540d |
1578d
|
20/29 |
1500d |
d6d86830705f
net ticp:fix a kernel-infoleak in __tipc_sendmsg()
|
|
memory leak in bsg_register_queue
usb
|
3 |
C |
|
|
1 |
1683d |
1679d
|
20/29 |
1500d |
1a0db7744e45
scsi: bsg: Fix device unregistration
|
|
KASAN: use-after-free Read in nft_table_lookup (2)
netfilter
|
19 |
syz |
done |
|
1 |
1680d |
1676d
|
20/29 |
1500d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
memory leak in reg_copy_regd
wireless
|
3 |
C |
|
|
1 |
1733d |
1729d
|
20/29 |
1500d |
e53e9828a8d2
cfg80211: always free wiphy specific regdomain
|
|
divide error in usbnet_start_xmit
usb
|
2 |
C |
|
|
760 |
1624d |
1641d
|
20/29 |
1500d |
397430b50a36
usbnet: sanity check for maxpacket
|
|
KASAN: null-ptr-deref Write in dst_release (3)
net
|
21 |
|
|
|
2 |
1582d |
1582d
|
20/29 |
1500d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
KASAN: use-after-free Read in srcu_invoke_callbacks
block
|
19 |
syz |
error |
|
4 |
1544d |
1556d
|
20/29 |
1500d |
850fd2abbe02
block: cleanup q->srcu
|
|
KCSAN: data-race in bond_alb_init_slave / bond_alb_monitor
net
|
6 |
|
|
|
1 |
1598d |
1598d
|
20/29 |
1500d |
dac8e00fb640
bonding: make tx_rebalance_counter an atomic
|
|
KMSAN: kernel-infoleak in _copy_to_iter (6)
net
|
9 |
C |
|
|
748 |
1500d |
1589d
|
20/29 |
1500d |
71ddeac8cd1d
inet_diag: fix kernel-infoleak for UDP sockets
|
|
KMSAN: kernel-infoleak in ucma_init_qp_attr
rdma
|
9 |
|
|
|
1 |
1573d |
1563d
|
20/29 |
1500d |
b35a0f4dd544
RDMA/core: Don't infoleak GRH fields
|
|
WARNING: ODEBUG bug in qdisc_create
net
|
-1 |
C |
done |
|
6 |
1668d |
1696d
|
20/29 |
1500d |
a56d447f196f
net/sched: sch_taprio: properly cancel timer from taprio_destroy()
|
|
WARNING: suspicious RCU usage in xfrm_set_default
net
|
4 |
C |
done |
|
20 |
1663d |
1668d
|
20/29 |
1500d |
93ec1320b017
xfrm: fix rcu lock in xfrm_notify_userpolicy()
|
|
WARNING: refcount bug in rx_queue_release
net
|
13 |
|
|
|
12 |
1602d |
1616d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
KASAN: slab-out-of-bounds Write in usb_hcd_poll_rh_status (2)
usb
|
21 |
C |
inconclusive |
|
116 |
1563d |
2046d
|
20/29 |
1500d |
1d7d4c07932e
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
|
|
general protection fault in io_uring_register
fs
io-uring
|
2 |
syz |
done |
|
1 |
1680d |
1676d
|
20/29 |
1500d |
41d3a6bd1d37
io_uring: pin SQPOLL data before unlocking ring lock
|
|
kmsan boot error: KMSAN: uninit-value in tcp_child_process
net
|
-1 |
|
|
|
48 |
1585d |
1596d
|
20/29 |
1500d |
03cfda4fa6ea
tcp: fix another uninit-value (sk_rx_queue_mapping)
|
|
bpf-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
110 |
1567d |
1585d
|
20/29 |
1500d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
kmsan boot error: KMSAN: uninit-value in tcp_conn_request
net
|
-1 |
|
|
|
27 |
1598d |
1598d
|
20/29 |
1500d |
a37a0ee4d25c
net: avoid uninit-value from tcp_conn_request
|
|
bpf-next boot error: KASAN: global-out-of-bounds Read in task_iter_init
bpf
|
-1 |
|
|
|
42 |
1616d |
1620d
|
20/29 |
1500d |
9e2ad638ae36
bpf: Extend BTF_ID_LIST_GLOBAL with parameter for number of IDs
|
|
KCSAN: data-race in netlink_insert / netlink_sendmsg (4)
net
|
6 |
|
|
|
88 |
1652d |
1733d
|
20/29 |
1500d |
7707a4d01a64
netlink: annotate data races around nlk->bound
|
|
INFO: trying to register non-static key in mxl111sf_ctrl_msg
usb
media
|
-1 |
C |
|
|
73 |
2455d |
2559d
|
20/29 |
1500d |
44870a9e7a3c
media: mxl111sf: change mutex_init() location
|
|
KMSAN: uninit-value in __mpol_equal (3)
mm
|
7 |
|
|
|
13 |
1638d |
1662d
|
20/29 |
1500d |
6d2aec9e123b
mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()
|
|
KASAN: use-after-free Write in io_queue_worker_create
fs
io-uring
|
22 |
C |
unreliable |
|
132 |
1583d |
1592d
|
20/29 |
1500d |
71a85387546e
io-wq: check for wq exit after adding new worker task_work
e47498afeca9
io-wq: remove spurious bit clear on task_work addition
|
|
BUG: sleeping function called from invalid context in ref_tracker_alloc
net
|
5 |
|
|
|
1 |
1583d |
1583d
|
20/29 |
1500d |
8b40a9d53d4f
ipv6: use GFP_ATOMIC in rt6_probe()
|
|
general protection fault in gro_cells_destroy (2)
net
|
2 |
|
|
|
2 |
1553d |
1570d
|
20/29 |
1500d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
KASAN: null-ptr-deref Write in sock_setsockopt
net
|
12 |
C |
|
|
45 |
1517d |
1625d
|
20/29 |
1500d |
d00c8ee31729
net: fix possible NULL deref in sock_reserve_memory
|
|
possible deadlock in io_flush_timeouts
fs
|
4 |
|
|
|
5 |
1601d |
1602d
|
20/29 |
1500d |
6af3f48bf615
io_uring: fix link traversal locking
|
|
general protection fault in rcu_segcblist_enqueue
kvm-x86
|
2 |
C |
done |
done |
368 |
1683d |
1747d
|
20/29 |
1500d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
WARNING in atp_close (3)
input
|
-1 |
C |
|
|
125 |
1564d |
1657d
|
20/29 |
1500d |
9f3ccdc3f6ef
Input: appletouch - initialize work before device registration
|
|
WARNING: refcount bug in ip6gre_exit_batch_net
net
|
13 |
|
|
|
2 |
1611d |
1613d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
KASAN: use-after-free Read in netlbl_catmap_walk
lsm
net
|
19 |
C |
inconclusive |
|
1 |
1695d |
1695d
|
20/29 |
1500d |
0817534ff9ea
smackfs: Fix use-after-free in netlbl_catmap_walk()
|
|
WARNING in page_counter_cancel (3)
mm
cgroups
|
-1 |
C |
done |
|
22 |
1557d |
1607d
|
20/29 |
1500d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
KCSAN: data-race in __nf_conntrack_alloc / __nf_conntrack_find_get (3)
netfilter
|
6 |
|
|
|
2 |
1591d |
1591d
|
20/29 |
1500d |
802a7dc5cf1b
netfilter: conntrack: annotate data-races around ct->timeout
|
|
KMSAN: uninit-value in ppp_send_frame
ppp
|
7 |
C |
|
|
5 |
1543d |
1564d
|
20/29 |
1500d |
44073187990d
ppp: ensure minimum packet size in ppp_write()
|
|
KASAN: out-of-bounds Write in virtio_gpu_cmd_set_scanout
dri
virt
|
21 |
|
|
|
1 |
1625d |
1625d
|
20/29 |
1500d |
5bd4f20de8ac
virtio-gpu: fix possible memory allocation failure
|
|
general protection fault in bpf_skb_cgroup_id
net
bpf
|
2 |
C |
inconclusive |
|
107 |
1656d |
1672d
|
20/29 |
1500d |
435b08ec0094
bpf, test, cgroup: Use sk_{alloc,free} for test cases
|
|
general protection fault in inet_csk_accept
net
|
2 |
C |
done |
|
8 |
1589d |
1588d
|
20/29 |
1500d |
b0cdc5dbcf2b
mptcp: never allow the PM to close a listener subflow
|
|
KCSAN: data-race in sbitmap_queue_clear / sbitmap_queue_clear (3)
block
|
6 |
|
|
|
5 |
1628d |
1634d
|
20/29 |
1500d |
9f8b93a7df4d
sbitmap: silence data race warning
|
|
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy (2)
wireless
|
12 |
C |
unreliable |
|
38 |
1564d |
1829d
|
20/29 |
1500d |
8b5cb7e41d9d
mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
|
|
KASAN: use-after-free Read in tcp_v4_early_demux
net
|
19 |
|
|
|
1 |
1582d |
1582d
|
20/29 |
1500d |
8f905c0e7354
inet: fully convert sk->sk_rx_dst to RCU rules
|
|
WARNING: kmalloc bug in snd_pcm_plugin_alloc
sound
|
-1 |
|
|
|
4 |
1520d |
1603d
|
20/29 |
1500d |
9d2479c96087
ALSA: pcm: oss: Fix negative period/buffer sizes
8839c8c0f77a
ALSA: pcm: oss: Limit the period size to 16MB
|
|
general protection fault in set_task_ioprio
block
|
2 |
C |
done |
|
19 |
1576d |
1578d
|
20/29 |
1500d |
a957b61254a7
block: fix error in handling dead task for ioprio setting
|
|
INFO: task hung in disconnect_work
wireless
|
1 |
C |
inconclusive |
done |
3 |
1610d |
1885d
|
20/29 |
1500d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
INFO: trying to register non-static key in ath9k_htc_rxep
wireless
|
-1 |
C |
unreliable |
|
9896 |
1554d |
2128d
|
20/29 |
1500d |
b0ec7e55fce6
ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
|
|
WARNING in nested_vmx_vmexit
kvm-x86
|
-1 |
C |
done |
|
101 |
1576d |
1593d
|
20/29 |
1500d |
a80dfc025924
KVM: VMX: Always clear vmx->fail on emulation_required
|
|
WARNING in __get_free_pages
mm
|
-1 |
|
|
|
21 |
1556d |
1615d
|
20/29 |
1500d |
545a32498c53
floppy: Add max size check for user space request
|
|
KASAN: invalid-free in security_tun_dev_free_security
selinux
|
24 |
syz |
error |
error |
346 |
1575d |
1917d
|
20/29 |
1500d |
158b515f703e
tun: avoid double free in tun_free_netdev
|
|
KCSAN: data-race in unix_inflight / wait_for_unix_gc (3)
net
|
6 |
|
|
|
1 |
1567d |
1553d
|
20/29 |
1500d |
9d6d7f1cb67c
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
|
|
INFO: task hung in io_uring_del_tctx_node
io-uring
fs
|
1 |
C |
unreliable |
|
37 |
1502d |
1666d
|
20/29 |
1500d |
8bab4c09f24e
io_uring: allow conditional reschedule for intensive iterators
|
|
KASAN: use-after-free Read in __isofs_iget
isofs
|
19 |
C |
inconclusive |
|
2 |
1648d |
1644d
|
20/29 |
1500d |
e96a1866b405
isofs: Fix out of bound access for corrupted isofs image
|
|
linux-next boot error: general protection fault in blk_mq_free_request
block
|
-1 |
|
|
|
6 |
1640d |
1640d
|
20/29 |
1500d |
e0d78afeb8d1
block: fix too broad elevator check in blk_mq_free_request()
|
|
WARNING: ODEBUG bug in really_probe
kernel
|
-1 |
|
|
|
1 |
1570d |
1564d
|
20/29 |
1500d |
33812fc7c8d7
HID: magicmouse: Fix an error handling path in magicmouse_probe()
|
|
INFO: trying to register non-static key in l2cap_sock_teardown_cb
bluetooth
|
-1 |
C |
done |
done |
88 |
1628d |
1931d
|
20/29 |
1500d |
1bff51ea59a9
Bluetooth: fix use-after-free error in lock_sock_nested()
|
|
KASAN: use-after-free Read in cipso_v4_doi_add
lsm
net
|
19 |
|
|
|
1 |
1644d |
1640d
|
20/29 |
1500d |
0934ad42bb2c
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
|
|
KASAN: invalid-free in packet_set_ring
net
|
24 |
C |
inconclusive |
|
4 |
1586d |
1586d
|
20/29 |
1500d |
ec6af094ea28
net/packet: rx_owner_map depends on pg_vec
|
|
KASAN: use-after-free Read in disk_release_events
block
fuse
exfat
|
19 |
syz |
inconclusive |
|
1 |
1588d |
1584d
|
20/29 |
1500d |
99d8690aae4b
block: fix error unwinding in device_add_disk
|
|
WARNING: ODEBUG bug in corrupted (2)
usb
input
|
-1 |
C |
error |
|
2 |
1570d |
1781d
|
20/29 |
1500d |
33812fc7c8d7
HID: magicmouse: Fix an error handling path in magicmouse_probe()
|
|
KASAN: use-after-free Read in rtl8712_dl_fw
usb
staging
|
19 |
C |
|
|
6961 |
1616d |
1640d
|
20/29 |
1500d |
c052cc1a069c
staging: rtl8712: fix use-after-free in rtl8712_dl_fw
|
|
general protection fault in cgroup_sk_free
cgroups
|
2 |
C |
error |
|
2727 |
1658d |
1672d
|
20/29 |
1500d |
78cc316e9583
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
|
|
general protection fault in bpf_skb_ancestor_cgroup_id
net
bpf
|
2 |
C |
unreliable |
|
232 |
1656d |
1672d
|
20/29 |
1500d |
435b08ec0094
bpf, test, cgroup: Use sk_{alloc,free} for test cases
|
|
WARNING in loop_add
|
-1 |
C |
done |
error |
64 |
1615d |
2429d
|
20/29 |
1500d |
278167fd2f8f
block: add __must_check for *add_disk*() callers
|
|
kernel BUG in kvm_read_guest_offset_cached
kvm
|
-1 |
|
|
|
11 |
1599d |
1606d
|
20/29 |
1500d |
8503fea6761d
KVM: VMX: do not use uninitialized gfn_to_hva_cache
|
|
linux-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1583d |
1584d
|
20/29 |
1500d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
INFO: rcu detected stall in fq_pie_timer
net
|
1 |
C |
error |
|
35 |
1541d |
1758d
|
20/29 |
1500d |
61c2402665f1
net/sched: fq_pie: prevent dismantle issue
|
|
INFO: rcu detected stall in sys_recvmmsg
mptcp
|
1 |
C |
done |
|
52 |
1536d |
1668d
|
20/29 |
1500d |
612f71d7328c
mptcp: fix possible stall on recvmsg()
|
|
general protection fault in nldev_stat_set_doit (2)
rdma
|
2 |
|
|
|
12 |
1606d |
1614d
|
20/29 |
1500d |
d821f7c13ca0
RDMA/nldev: Check stat attribute before accessing it
|
|
WARNING in vmx_queue_exception
kvm-x86
|
-1 |
|
|
|
8 |
1511d |
1573d
|
20/29 |
1500d |
fc4fad79fc3d
KVM: VMX: Reject KVM_RUN if emulation is required with pending exception
|
|
WARNING: refcount bug in netdev_run_todo
net
|
13 |
|
|
|
5 |
1602d |
1612d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
KASAN: use-after-free Write in io_submit_one
fs
|
22 |
C |
done |
|
11 |
1587d |
1625d
|
20/29 |
1500d |
75feae73a280
block: fix single bio async DIO error handling
|
|
general protection fault in free_percpu
net
|
2 |
syz |
unreliable |
done |
80 |
1568d |
1835d
|
20/29 |
1500d |
158b515f703e
tun: avoid double free in tun_free_netdev
|
|
WARNING: kmalloc bug in hash_net_create
netfilter
|
-1 |
C |
done |
|
283 |
1659d |
1686d
|
20/29 |
1500d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
possible deadlock in snd_mixer_oss_ioctl1
sound
|
4 |
C |
done |
|
149 |
1632d |
1636d
|
20/29 |
1500d |
3ab799201845
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start
kvm
|
-1 |
C |
done |
|
19 |
1509d |
1570d
|
20/29 |
1500d |
d6aba4c8e20d
hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
|
|
KCSAN: data-race in call_rcu / rcu_gp_fqs_loop
fs
|
6 |
|
|
|
1 |
1636d |
1634d
|
20/29 |
1500d |
2431774f04d1
rcu: Mark accesses to rcu_state.n_force_qs
|
|
inconsistent lock state in io_poll_remove_all
fs
|
4 |
|
|
|
63 |
1600d |
1602d
|
20/29 |
1500d |
6af3f48bf615
io_uring: fix link traversal locking
|
|
WARNING: lock held when returning to user space in tcp_setsockopt (2)
net
|
4 |
C |
done |
done |
6 |
1573d |
1579d
|
20/29 |
1500d |
b29fcfb54cd7
mptcp: full disconnect implementation
|
|
general protection fault in sctp_rcv
sctp
|
2 |
|
|
|
2 |
1666d |
1669d
|
20/29 |
1500d |
f7e745f8e944
sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
|
|
possible deadlock in dquot_commit
ext4
|
4 |
C |
unreliable |
|
41 |
1591d |
1891d
|
20/29 |
1500d |
4013d47a5307
ext4: make sure to reset inode lockdep class when quota enabling fails
|
|
WARNING in tcf_chain0_head_change_cb_del (3)
net
|
-1 |
C |
inconclusive |
|
107 |
1584d |
1719d
|
20/29 |
1500d |
ab443c539167
sch_cake: do not call cake_destroy() from cake_init()
|
|
WARNING in inc_nlink (2)
fs
|
-1 |
C |
inconclusive |
done |
21 |
1500d |
1837d
|
20/29 |
1500d |
97f044f690ba
fuse: don't increment nlink in link()
|
|
WARNING in rtl92cu_hw_init
wireless
|
-1 |
|
|
|
1 |
1600d |
1596d
|
20/29 |
1500d |
8b144dedb928
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
|
|
possible deadlock in io_worker_cancel_cb
io-uring
fs
|
4 |
C |
done |
|
9 |
1581d |
1585d
|
20/29 |
1500d |
d800c65c2d4e
io-wq: drop wqe lock before creating new worker
|
|
WARNING: ODEBUG bug in batadv_v_ogm_free
batman
|
-1 |
C |
done |
done |
6 |
1634d |
1652d
|
20/29 |
1500d |
6f68cd634856
net: batman-adv: fix error handling
|
|
general protection fault in sock_release (2)
net
|
2 |
|
|
|
1 |
1588d |
1588d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
WARNING in ieee80211_parse_tx_radiotap
wireless
|
-1 |
|
|
|
2 |
1676d |
1675d
|
20/29 |
1500d |
13cb6d826e0a
mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
|
|
WARNING in nbd_dev_add (2)
block
|
-1 |
|
|
|
4 |
1617d |
1614d
|
20/29 |
1500d |
278167fd2f8f
block: add __must_check for *add_disk*() callers
|
|
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3)
usb
|
9 |
C |
|
|
256 |
1518d |
1562d
|
20/29 |
1500d |
d668769eb9c5
net: mcs7830: handle usb read errors properly
|
|
KMSAN: uninit-value in ppp_async_push (2)
ppp
|
7 |
C |
|
|
323 |
1519d |
1591d
|
20/29 |
1500d |
44073187990d
ppp: ensure minimum packet size in ppp_write()
|
|
BUG: unable to handle kernel paging request in dev_fetch_sw_netstats
net
|
8 |
|
|
|
1 |
1580d |
1580d
|
20/29 |
1500d |
158b515f703e
tun: avoid double free in tun_free_netdev
|
|
WARNING in free_netdev
net
|
-1 |
|
|
|
4080 |
1514d |
1556d
|
20/29 |
1500d |
fcfb894d5952
net: bridge: fix net device refcount tracking issue in error path
|
|
WARNING: suspicious RCU usage in __dev_queue_xmit
batman
|
4 |
C |
done |
|
635 |
1556d |
1557d
|
20/29 |
1500d |
6316136ec6e3
netfilter: egress: avoid a lockdep splat
|
|
WARNING in nsim_dev_reload_destroy
net
|
-1 |
C |
done |
|
2895 |
1631d |
1636d
|
20/29 |
1500d |
fb9d19c2d844
Revert "devlink: Remove not-executed trap group notifications"
|
|
KASAN: use-after-free Read in blk_mq_sched_tags_teardown
block
usb
|
19 |
C |
done |
|
6 |
1637d |
1635d
|
20/29 |
1500d |
8bdf7b3fe1f4
blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
|
|
net-next test error: WARNING: refcount bug in ref_tracker_free
mptcp
|
-1 |
|
|
|
12 |
1584d |
1584d
|
20/29 |
1500d |
1d2f3d3c6268
mptcp: adjust to use netns refcount tracker
|
|
KASAN: null-ptr-deref Write in l2cap_chan_put
bluetooth
|
21 |
syz |
done |
done |
7 |
1632d |
2077d
|
20/29 |
1500d |
1bff51ea59a9
Bluetooth: fix use-after-free error in lock_sock_nested()
|
|
INFO: trying to register non-static key in ath9k_wmi_event_tasklet
wireless
usb
|
-1 |
C |
unreliable |
|
7 |
1590d |
1767d
|
20/29 |
1500d |
8b3046abc99e
ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
|
|
KASAN: use-after-free Read in free_netdev (2)
net
|
19 |
C |
done |
done |
1715 |
1598d |
2232d
|
20/29 |
1500d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
INFO: task hung in set_current_rng
crypto
usb
|
1 |
C |
unreliable |
done |
1 |
1627d |
1745d
|
20/29 |
1500d |
2bb31abdbe55
hwrng: virtio - don't wait on cleanup
|
|
general protection fault in fuse_test_super
fuse
|
19 |
C |
error |
|
32 |
1507d |
1674d
|
20/29 |
1500d |
80019f113832
fuse: always initialize sb->s_fs_info
|
|
memory leak in mgmt_cmd_complete
bluetooth
|
3 |
C |
|
|
3 |
1696d |
1795d
|
20/29 |
1500d |
709fca500067
Bluetooth: hci_sock: purge socket queues in the destruct() callback
|
|
WARNING: refcount bug in linkwatch_do_dev
net
|
13 |
|
|
|
74 |
1594d |
1620d
|
20/29 |
1500d |
123e495ecc25
net: linkwatch: be more careful about dev->linkwatch_dev_tracker
|
|
general protection fault in tls_init
net
|
2 |
|
|
|
1 |
1600d |
1594d
|
20/29 |
1500d |
404cd9a22150
mptcp: remove tcp ulp setsockopt support
|
|
KMSAN: uninit-value in ieee80211_sta_tx_notify (2)
wireless
|
7 |
|
|
|
283 |
1518d |
1608d
|
20/29 |
1500d |
d5e568c3a4ec
mac80211: track only QoS data frames for admission control
|
|
kernel BUG at net/core/dev.c:LINE! (4)
|
-1 |
C |
done |
done |
432 |
1583d |
1971d
|
20/29 |
1500d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
WARNING: refcount bug in sys_memfd_secret
mm
|
13 |
C |
done |
done |
4217 |
1634d |
1637d
|
20/29 |
1500d |
87066fdd2e30
Revert "mm/secretmem: use refcount_t instead of atomic_t"
|
|
WARNING: refcount bug in in_dev_finish_destroy (2)
net
|
13 |
|
|
|
42 |
1602d |
1616d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
KMSAN: uninit-value in ax88772a_hw_reset
usb
|
7 |
C |
|
|
94 |
1518d |
1606d
|
20/29 |
1500d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
general protection fault in smc_pnet_add
smc
|
2 |
|
|
|
578 |
1500d |
1556d
|
20/29 |
1500d |
7b9b1d449a7c
net/smc: fix possible NULL deref in smc_pnet_add_eth()
|
|
WARNING in __put_net
net
|
-1 |
|
|
|
5215 |
1543d |
1556d
|
20/29 |
1500d |
cb963a19d99f
net: sched: do not allocate a tracker in tcf_exts_init()
|
|
WARNING: kmalloc bug in nf_tables_newset
netfilter
|
-1 |
C |
done |
|
95 |
1658d |
1686d
|
20/29 |
1500d |
45928afe94a0
netfilter: nf_tables: Fix oversized kvmalloc() calls
|
|
WARNING in kvm_mmu_uninit_tdp_mmu
kvm-x86
|
-1 |
|
|
|
3 |
1535d |
1618d
|
20/29 |
1500d |
3a0f64de479c
KVM: x86/mmu: Don't advance iterator after restart due to yielding
|
|
KCSAN: data-race in skb_queue_tail / unix_dgram_poll (4)
net
|
6 |
|
|
|
2 |
1677d |
1683d
|
20/29 |
1500d |
04f08eb44b50
net/af_unix: fix a data-race in unix_dgram_poll
|
|
WARNING in static_key_slow_try_dec (2)
kernel
|
-1 |
C |
unreliable |
|
5417 |
1639d |
1707d
|
20/29 |
1500d |
f7d8a19f9a05
Revert "KVM: x86: Open code necessary bits of kvm_lapic_set_base() at vCPU RESET"
|
|
UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
net
|
-1 |
C |
unreliable |
|
5660 |
1659d |
1956d
|
20/29 |
1500d |
b193e15ac69d
net: prevent user from passing illegal stab size
|
|
WARNING in emulate_vsyscall
kernel
|
-1 |
C |
done |
done |
3890 |
1663d |
1844d
|
20/29 |
1500d |
d4ffd5df9d18
x86/fault: Fix wrong signal when vsyscall fails with pkey
|
|
WARNING: kmalloc bug in hash_mac_create
netfilter
|
-1 |
C |
done |
|
11 |
1679d |
1684d
|
20/29 |
1500d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
KASAN: use-after-free Read in nft_set_destroy
netfilter
|
19 |
|
|
|
1 |
1585d |
1585d
|
20/29 |
1500d |
0f7d9b31ce7a
netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
|
|
BUG: unable to handle kernel paging request in __blk_mq_alloc_requests
io-uring
block
|
19 |
C |
unreliable |
|
107 |
1619d |
1627d
|
20/29 |
1500d |
a22c00be90de
block: assign correct tag before doing prefetch of request
|
|
WARNING in ieee80211_vif_release_channel (2)
wireless
|
-1 |
C |
done |
|
5 |
1575d |
1578d
|
20/29 |
1500d |
87a270625a89
mac80211: fix locking in ieee80211_start_ap error path
|
|
KASAN: use-after-free Read in unmap_page_range (2)
mm
|
19 |
C |
unreliable |
|
4 |
1610d |
1628d
|
20/29 |
1500d |
337546e83fc7
mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
|
|
general protection fault in dev_get_by_index_rcu (2)
bpf
net
|
2 |
C |
error |
|
18 |
1560d |
1560d
|
20/29 |
1500d |
382778edc826
xdp: check prog type before updating BPF link
|
|
possible deadlock in fuse_reverse_inval_entry
fuse
|
4 |
C |
error |
|
1 |
1682d |
1708d
|
20/29 |
1500d |
bda9a71980e0
fuse: annotate lock in fuse_reverse_inval_entry()
|
|
BUG: sleeping function called from invalid context in copy_huge_page
mm
|
5 |
|
|
|
1 |
1651d |
1647d
|
20/29 |
1500d |
a4aeaa06d45e
mm: khugepaged: skip huge page collapse for special files
|
|
INFO: rcu detected stall in snd_seq_write (2)
sound
|
1 |
syz |
done |
|
21 |
1616d |
1628d
|
20/29 |
1500d |
6fadb494a638
ALSA: seq: Set upper limit of processed events
|
|
possible deadlock in md_open
raid
|
4 |
C |
unreliable |
|
2844 |
1663d |
1696d
|
20/29 |
1500d |
7df835a32a8b
md: fix a lock order reversal in md_alloc
|
|
INFO: task hung in io_uring_try_cancel_requests
fs
io-uring
|
1 |
C |
error |
|
41 |
1589d |
1631d
|
20/29 |
1500d |
f75d118349be
io_uring: harder fdinfo sq/cq ring iterating
|
|
WARNING in io_try_cancel_userdata (2)
fs
|
-1 |
|
|
|
1 |
1607d |
1603d
|
20/29 |
1500d |
617a89484deb
io_uring: fail cancellation for EXITING tasks
|
|
possible deadlock in blkdev_put (2)
exfat
block
|
4 |
C |
done |
|
502 |
1500d |
1601d
|
20/29 |
1500d |
322c4293ecc5
loop: make autoclear operation asynchronous
|
|
INFO: rcu detected stall in dummy_timer (3)
usb
|
1 |
C |
error |
|
132 |
1514d |
2102d
|
20/29 |
1500d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
WARNING in page_counter_uncharge
cgroups
mm
|
-1 |
C |
done |
done |
2 |
1569d |
1569d
|
20/29 |
1500d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
KMSAN: uninit-value in asix_mdio_read (2)
usb
|
7 |
C |
|
|
1075 |
1500d |
1580d
|
20/29 |
1500d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
WARNING in __dev_set_promiscuity
net
|
-1 |
C |
done |
|
11 |
1662d |
1665d
|
20/29 |
1500d |
a5b8fd657881
net: dev_addr_list: handle first address in __hw_addr_add_ex
|
|
WARNING in signalfd_cleanup
fs
io-uring
|
-1 |
C |
done |
|
201 |
1547d |
1562d
|
20/29 |
1500d |
791f3465c4af
io_uring: fix UAF due to missing POLLFREE handling
|
|
inconsistent lock state in kmem_cache_alloc_trace
kernel
|
4 |
|
|
|
36 |
1583d |
1585d
|
20/29 |
1500d |
8b40a9d53d4f
ipv6: use GFP_ATOMIC in rt6_probe()
|
|
INFO: task can't die in blk_mq_freeze_queue_wait
block
|
1 |
|
|
|
221 |
1605d |
1614d
|
20/29 |
1500d |
95febeb61bf8
block: fix missing queue put in error path
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
net
usb
|
5 |
C |
done |
|
28 |
1576d |
1590d
|
20/29 |
1500d |
744451c162a5
Bluetooth: hci_sync: Push sync command cancellation to workqueue
|
|
general protection fault in percpu_ref_put
cgroups
|
2 |
C |
done |
|
412 |
1659d |
1669d
|
20/29 |
1500d |
78cc316e9583
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
|
|
UBSAN: array-index-out-of-bounds in llc_sap_add_socket
net
|
15 |
|
|
|
1 |
1625d |
1625d
|
20/29 |
1500d |
8ac9dfd58b13
llc: fix out-of-bound array index in llc_sk_dev_hash()
|
|
KMSAN: uninit-value in fat_subdirs
exfat
|
7 |
|
|
|
1 |
1577d |
1560d
|
20/29 |
1500d |
3ee859e384d4
block: Fix wrong offset in bio_truncate()
|
|
WARNING: refcount bug in j1939_netdev_start (2)
can
|
13 |
syz |
error |
error |
51 |
1639d |
2285d
|
20/29 |
1500d |
d9d52a3ebd28
can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
|
|
net-next test error: WARNING in devlink_nl_region_notify
net
|
-1 |
|
|
|
24 |
1660d |
1658d
|
20/29 |
1500d |
ef91abfb20c7
devlink: Add missed notifications iterators
|
|
INFO: rcu detected stall in newstat
fs
usb
|
1 |
C |
unreliable |
done |
4 |
1594d |
1717d
|
20/29 |
1500d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
KCSAN: data-race in fib_create_info / free_fib_info
net
|
6 |
|
|
|
1 |
1573d |
1553d
|
20/29 |
1500d |
0a6e6b3c7db6
ipv4: update fib_info_cnt under spinlock protection
|
|
BUG: spinlock bad magic in synchronize_srcu
kvm-x86
|
4 |
C |
done |
done |
3254 |
1662d |
2032d
|
20/29 |
1500d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
INFO: task hung in do_proc_bulk
usb
|
1 |
syz |
inconclusive |
|
8 |
1627d |
1692d
|
20/29 |
1500d |
ae8709b296d8
USB: core: Make do_proc_control() and do_proc_bulk() killable
|
|
BUG: sleeping function called from invalid context in tipc_crypto_start
net
|
5 |
C |
done |
done |
6 |
1578d |
1584d
|
20/29 |
1500d |
f845fe5819ef
Revert "tipc: use consistent GFP flags"
|
|
INFO: task can't die in __bio_queue_enter
block
|
1 |
|
|
|
185 |
1606d |
1613d
|
20/29 |
1500d |
10f7335e3627
blk-mq: don't grab ->q_usage_counter in blk_mq_sched_bio_merge
|
|
general protection fault in ref_tracker_alloc
net
|
2 |
C |
done |
|
679 |
1556d |
1585d
|
20/29 |
1500d |
0976b888a150
ethtool: fix null-ptr-deref on ref tracker
|
|
WARNING: suspicious RCU usage in ref_tracker_alloc
net
|
4 |
|
|
|
17 |
1583d |
1585d
|
20/29 |
1500d |
8b40a9d53d4f
ipv6: use GFP_ATOMIC in rt6_probe()
|
|
INFO: task hung in io_uring_cancel_generic (2)
io-uring
fs
|
1 |
C |
done |
|
97 |
1584d |
1611d
|
20/29 |
1500d |
78a780602075
io_uring: ensure task_work gets run as part of cancelations
|
|
WARNING in perf_pending_event
perf
|
-1 |
C |
error |
|
3 |
1624d |
1619d
|
20/29 |
1500d |
73743c3b0922
perf: Ignore sigtrap for tracepoints destined for other tasks
|
|
INFO: rcu detected stall in io_wqe_worker (2)
fs
io-uring
|
1 |
C |
done |
|
2 |
1632d |
1632d
|
20/29 |
1500d |
c5e0321e43de
Revert "devlink: Remove not-executed trap policer notifications"
|
|
WARNING: kmalloc bug in bpf_check
bpf
|
-1 |
C |
done |
|
34 |
1673d |
1686d
|
20/29 |
1500d |
0e6491b55970
bpf: Add oversize check before call kvcalloc()
|
|
INFO: task can't die in nf_ct_iterate_cleanup (2)
netfilter
|
1 |
|
|
|
1 |
1673d |
1673d
|
20/29 |
1500d |
e9edc188fc76
netfilter: conntrack: serialize hash resizes and cleanups
|
|
general protection fault in cgroup_file_write
cgroups
|
2 |
|
|
|
15 |
1569d |
1623d
|
20/29 |
1500d |
e57457641613
cgroup: Use open-time cgroup namespace for process migration perm checks
|
|
WARNING in hrtimer_forward
kernel
|
-1 |
C |
done |
done |
217 |
1545d |
2029d
|
20/29 |
1500d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
|
KMSAN: uninit-value in kvm_cpuid
kvm-x86
|
7 |
C |
|
|
22 |
1634d |
1658d
|
20/29 |
1500d |
e8a747d0884e
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
|
|
kernel panic: smack: Failed to initialize cipso DOI.
lsm
|
2 |
C |
done |
error |
128 |
1627d |
2208d
|
20/29 |
1500d |
f91488ee15bd
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
|
|
KMSAN: uninit-value in p9pdu_readf
v9fs
|
7 |
|
|
|
14 |
1535d |
1649d
|
20/29 |
1500d |
27eb4c3144f7
9p/net: fix missing error check in p9_check_errors
|
|
UBSAN: shift-out-of-bounds in qfq_init_qdisc
net
|
-1 |
|
|
|
1 |
1566d |
1566d
|
20/29 |
1500d |
7d18a07897d0
sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
|
|
KMSAN: uninit-value in pneigh_fill_info
net
|
7 |
C |
|
|
14 |
1587d |
1592d
|
20/29 |
1500d |
e195e9b5dee6
net, neigh: clear whole pneigh_entry at alloc time
|
|
KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit (5)
net
|
6 |
|
|
|
1 |
1607d |
1605d
|
20/29 |
1500d |
7a10d8c810cf
net: annotate data-races on txq->xmit_lock_owner
|
|
WARNING in z_erofs_lz4_decompress
erofs
|
-1 |
C |
|
|
2 |
1634d |
1636d
|
20/29 |
1500d |
a0961f351d82
erofs: don't trigger WARN() when decompression fails
|
|
KASAN: use-after-free Read in sixpack_close
hams
|
19 |
C |
done |
|
879 |
1609d |
1614d
|
20/29 |
1500d |
81b1d548d00b
hamradio: remove needs_free_netdev to avoid UAF
|
|
KMSAN: uninit-value in from_kuid
kernel
|
7 |
|
|
|
10 |
1524d |
1601d
|
20/29 |
1500d |
3cb6ee991496
9p: only copy valid iattrs in 9P2000.L setattr implementation
|
|
WARNING in chnl_net_uninit (2)
net
|
-1 |
|
|
|
1 |
1677d |
1677d
|
20/29 |
1500d |
550ac9c1aaaa
net-caif: avoid user-triggerable WARN_ON(1)
|
|
INFO: rcu detected stall in ieee80211_tasklet_handler
wireless
|
1 |
C |
error |
done |
74 |
1664d |
1944d
|
20/29 |
1500d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
|
UBSAN: shift-out-of-bounds in nl802154_new_interface
wpan
|
-1 |
C |
inconclusive |
done |
879 |
1602d |
1879d
|
20/29 |
1500d |
451dc48c806a
net: ieee802154: handle iftypes as u32
|
|
WARNING in batadv_v_ogm_free
batman
|
-1 |
|
|
|
1 |
1638d |
1638d
|
20/29 |
1500d |
6f68cd634856
net: batman-adv: fix error handling
|
|
possible deadlock in wake_up_all_idle_cpus
perf
|
4 |
C |
done |
|
14 |
1637d |
1644d
|
20/29 |
1500d |
96611c26dc35
sched: Improve wake_up_all_idle_cpus() take #2
|
|
KMSAN: uninit-value in snd_rawmidi_ioctl
sound
|
7 |
C |
|
|
1506 |
1518d |
1580d
|
20/29 |
1500d |
39a8fc4971a0
ALSA: rawmidi - fix the uninitalized user_pversion
|
|
KASAN: slab-out-of-bounds Read in hci_le_meta_evt (2)
bluetooth
|
17 |
C |
inconclusive |
|
2 |
1628d |
1628d
|
20/29 |
1500d |
3a56ef719f0b
Bluetooth: stop proccessing malicious adv data
|
|
general protection fault in nfc_alloc_send_skb
net
nfc
|
2 |
C |
done |
|
2 |
1568d |
1562d
|
20/29 |
1500d |
dded08927ca3
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
|
|
BUG: corrupted list in em28xx_init_extension
usb
media
|
8 |
C |
error |
|
18 |
1731d |
2275d
|
20/29 |
1500d |
2c98b8a3458d
media: em28xx: add missing em28xx_close_extension
|
|
possible deadlock in mptcp_close
mptcp
|
4 |
C |
done |
|
931 |
1658d |
1669d
|
20/29 |
1500d |
49054556289e
net: introduce and use lock_sock_fast_nested()
|
|
INFO: rcu detected stall in syscall_exit_to_user_mode
cgroups
mm
|
1 |
|
|
|
78 |
1512d |
1692d
|
20/29 |
1500d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
|
BUG: unable to handle kernel NULL pointer dereference in fifo_set_limit
net
|
10 |
C |
error |
|
1 |
1659d |
1659d
|
20/29 |
1500d |
560ee196fe9e
net_sched: fix NULL deref in fifo_set_limit()
|
|
possible deadlock in smc_switch_to_fallback
smc
|
4 |
|
|
|
43575 |
1589d |
1609d
|
20/29 |
1500d |
7a61432dc813
net/smc: Avoid warning of possible recursive locking
|
|
general protection fault in ieee80211_assign_vif_chanctx
wireless
|
2 |
C |
inconclusive |
|
4 |
1638d |
1896d
|
20/29 |
1500d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
WARNING in rtnl_stats_get
net
|
-1 |
C |
unreliable |
|
31 |
1627d |
1816d
|
20/29 |
1500d |
0854a0513321
net: bridge: fix under estimation in br_get_linkxstats_size()
|
|
KASAN: use-after-free Read in rxe_queue_cleanup
rdma
|
19 |
|
|
|
65 |
1582d |
1609d
|
20/29 |
1500d |
84b01721e804
RDMA: Fix use-after-free in rxe_queue_cleanup
|
|
kernel BUG at net/phonet/socket.c:LINE!
net
|
-1 |
C |
inconclusive |
|
168 |
1577d |
2197d
|
20/29 |
1500d |
75a2f3152009
phonet/pep: refuse to enable an unbound pipe
|
|
possible deadlock in io_poll_double_wake (3)
io-uring
fs
|
4 |
C |
error |
done |
703 |
1555d |
1829d
|
20/29 |
1500d |
aa43477b0402
io_uring: poll rework
|
|
KASAN: use-after-free Read in nf_tables_dump_sets
netfilter
|
19 |
syz |
done |
done |
1 |
1682d |
1711d
|
20/29 |
1500d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
KASAN: use-after-free Read in __lock_sock
sctp
|
19 |
syz |
done |
error |
26 |
1892d |
2707d
|
20/29 |
1500d |
5ec7d18d1813
sctp: use call_rcu to free endpoint
|
|
KCSAN: data-race in __inet_hash_connect / inet_getname
net
|
6 |
|
|
|
1 |
1659d |
1633d
|
20/29 |
1500d |
9dfc685e0262
inet: remove races in inet{6}_getname()
|
|
UBSAN: array-index-out-of-bounds in ktime_mono_to_any
kernel
|
15 |
|
|
|
4 |
1619d |
1620d
|
20/29 |
1500d |
6dc25401cba4
net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
|
|
KMSAN: uninit-value in fib_get_nhs
net
|
7 |
C |
|
|
14 |
1518d |
1589d
|
20/29 |
1500d |
7a3429bace0e
ipv4: Check attribute length for RTA_GATEWAY in multipath route
|
|
WARNING in sk_stream_kill_queues (7)
net
|
-1 |
C |
|
|
6689 |
1501d |
1619d
|
20/29 |
1500d |
c4777efa751d
net: add and use skb_unclone_keeptruesize() helper
|
|
WARNING in batadv_nc_mesh_free
batman
|
-1 |
C |
inconclusive |
|
1 |
1638d |
1638d
|
20/29 |
1500d |
6f68cd634856
net: batman-adv: fix error handling
|
|
KASAN: use-after-free Read in vlan_dev_real_dev (2)
net
|
19 |
C |
error |
|
7 |
1637d |
1648d
|
20/29 |
1500d |
563bcbae3ba2
net: vlan: fix a UAF in vlan_dev_real_dev()
|
|
WARNING in cache_grow_begin
net
|
-1 |
|
|
|
2 |
1547d |
1547d
|
20/29 |
1500d |
c12837d1bb31
ref_tracker: use __GFP_NOFAIL more carefully
|
|
KASAN: null-ptr-deref Write in __pm_runtime_resume
pm
|
12 |
C |
done |
|
108 |
1514d |
1692d
|
20/29 |
1500d |
2fc7acb69fa3
Bluetooth: hci_uart: fix GPF in h5_recv
|
|
UBSAN: shift-out-of-bounds in xfrm_get_default
net
|
-1 |
C |
done |
|
104 |
1651d |
1690d
|
20/29 |
1500d |
3c10ffddc61f
net: xfrm: fix shift-out-of-bounds in xfrm_get_default
|
|
WARNING in new_slab
mm
|
-1 |
C |
inconclusive |
|
2 |
1547d |
1578d
|
20/29 |
1500d |
c12837d1bb31
ref_tracker: use __GFP_NOFAIL more carefully
|
|
INFO: task hung in hwrng_register
crypto
usb
|
1 |
syz |
unreliable |
done |
1 |
1647d |
1703d
|
20/29 |
1500d |
2bb31abdbe55
hwrng: virtio - don't wait on cleanup
|
|
WARNING in ref_tracker_free
net
|
-1 |
C |
done |
|
14831 |
1557d |
1585d
|
20/29 |
1500d |
123e495ecc25
net: linkwatch: be more careful about dev->linkwatch_dev_tracker
|
|
WARNING in bpf_warn_invalid_xdp_action
|
-1 |
C |
done |
done |
8941 |
1556d |
2276d
|
20/29 |
1500d |
2cbad989033b
bpf: Do not WARN in bpf_warn_invalid_xdp_action()
|
|
INFO: rcu detected stall in br_multicast_query_expired
kernel
|
1 |
C |
inconclusive |
|
2 |
1577d |
1577d
|
20/29 |
1500d |
f83a112bd91a
net: bridge: mcast: add and enforce startup query interval minimum
|
|
unregister_netdevice: waiting for DEV to become free (6)
|
2 |
C |
error |
|
13128 |
1500d |
1619d
|
20/29 |
1500d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
KMSAN: uninit-value in udf_evict_inode (2)
udf
|
7 |
|
|
|
13 |
1532d |
1585d
|
20/29 |
1500d |
f05f2429eec6
udf: Fix error handling in udf_new_inode()
|
|
KMSAN: uninit-value in _ieee802_11_parse_elems_crc
wireless
|
7 |
|
|
|
1 |
1595d |
1588d
|
20/29 |
1500d |
768c0b19b506
mac80211: validate extended element ID is present
|
|
WARNING in trc_read_check_handler
kernel
|
-1 |
C |
unreliable |
done |
40 |
1627d |
1715d
|
20/29 |
1500d |
96017bf90397
rcu-tasks: Simplify trc_read_check_handler() atomic operations
|
|
WARNING: held lock freed in spi_unregister_controller
spi
usb
|
4 |
C |
inconclusive |
|
251 |
1600d |
1640d
|
20/29 |
1500d |
6c53b45c71b4
spi: fix use-after-free of the add_lock mutex
|
|
kernel BUG in find_lock_entries
mm
|
-1 |
C |
done |
|
10 |
1548d |
1711d
|
20/29 |
1500d |
d417b49fff3e
mm/filemap.c: remove bogus VM_BUG_ON
|
|
inconsistent lock state in netlink_broadcast_filtered
net
|
4 |
|
|
|
1 |
1633d |
1633d
|
20/29 |
1500d |
f941eadd8d6d
bpf: Avoid races in __bpf_prog_run() for 32bit arches
|
|
WARNING in __nf_unregister_net_hook (4)
netfilter
|
-1 |
C |
error |
|
66 |
1502d |
1832d
|
20/29 |
1500d |
68a3765c659f
netfilter: nf_tables: skip netdev events generated on netns removal
|
|
WARNING in gnet_stats_add_basic
net
|
-1 |
C |
done |
|
14 |
1640d |
1641d
|
20/29 |
1500d |
e22db7bd552f
net: sched: Allow statistics reads from softirq.
|
|
WARNING in isotp_tx_timer_handler
can
|
-1 |
C |
error |
|
1553 |
1500d |
1943d
|
20/29 |
1500d |
9acf636215a6
can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
|
|
general protection fault in hrtimer_active (3)
kernel
|
2 |
syz |
done |
error |
34 |
1535d |
1840d
|
20/29 |
1500d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
INFO: task hung in io_wqe_worker
fs
io-uring
|
1 |
C |
unreliable |
|
3 |
1642d |
1638d
|
20/29 |
1500d |
1d5f5ea7cb7d
io-wq: remove worker to owner tw dependency
|
|
BUG: corrupted list in netif_napi_add
net
|
8 |
syz |
unreliable |
done |
17 |
1615d |
1646d
|
20/29 |
1500d |
0315a075f134
net: fix premature exit from NAPI state polling in napi_disable()
|
|
WARNING in fuse_evict_inode
fuse
|
-1 |
C |
done |
|
43 |
1637d |
1642d
|
20/29 |
1500d |
5c791fe1e2a4
fuse: make sure reclaim doesn't write the inode
|
|
KASAN: use-after-free Read in bdev_free_inode
block
|
19 |
syz |
error |
|
7 |
1650d |
1670d
|
20/29 |
1500d |
06cc978d3ff2
block: genhd: fix double kfree() in __alloc_disk_node()
|
|
general protection fault in scsi_queue_rq
fuse
scsi
|
2 |
C |
done |
done |
4000 |
1617d |
2012d
|
20/29 |
1500d |
20aaef52eb08
scsi: scsi_ioctl: Validate command size
|
|
INFO: task can't die in __cond_resched
net
|
1 |
C |
error |
|
66 |
1615d |
1669d
|
20/29 |
1500d |
e9edc188fc76
netfilter: conntrack: serialize hash resizes and cleanups
|
|
BUG: unable to handle kernel NULL pointer dereference in bpf
|
10 |
C |
done |
|
753 |
1557d |
1629d
|
20/29 |
1500d |
ad10c381d133
bpf: Add missing map_delete_elem method to bloom filter map
|
|
general protection fault in ref_tracker_free
net
|
19 |
|
|
|
21 |
1559d |
1583d
|
20/29 |
1500d |
123e495ecc25
net: linkwatch: be more careful about dev->linkwatch_dev_tracker
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_prog_put
bpf
|
17 |
C |
done |
|
2 |
1580d |
1578d
|
20/29 |
1500d |
218d747a4142
bpf, sockmap: Fix double bpf_prog_put on error case in map_link
|
|
general protection fault in nf_tables_dump_tables
netfilter
|
2 |
syz |
done |
done |
4 |
1665d |
1665d
|
20/29 |
1500d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
BUG: unable to handle kernel NULL pointer dereference in unix_shutdown
net
|
10 |
C |
unreliable |
|
413 |
1696d |
1699d
|
20/29 |
1543d |
d359902d5c35
af_unix: Fix NULL pointer bug in unix_shutdown
|
|
kernel BUG at mm/vmalloc.c:LINE! (2)
mm
|
-1 |
C |
done |
done |
6605 |
1695d |
2106d
|
20/29 |
1543d |
537cf4e3cc2f
xsk: Fix umem cleanup bug at socket destruct
|
|
memory leak in __pskb_copy_fclone
wpan
|
3 |
C |
|
|
21 |
1737d |
1879d
|
20/29 |
1560d |
1090340f7ee5
net: Fix memory leak in ieee802154_raw_deliver
|
|
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb
usb
|
-1 |
C |
|
|
50 |
1740d |
1788d
|
20/29 |
1618d |
76f22c93b209
media: rtl28xxu: fix zero-length control request
media: rtl28xxu: fix zero-length control request
|
|
WARNING in hso_free_net_device
usb
|
-1 |
C |
error |
|
528 |
1736d |
2417d
|
20/29 |
1618d |
788e67f18d79
usb: hso: fix error handling code of hso_create_net_device
usb: hso: fix error handling code of hso_create_net_device
|
|
KASAN: null-ptr-deref Read in filp_close (2)
fs
|
19 |
C |
|
|
3 |
1738d |
1847d
|
20/29 |
1618d |
3b0462726e7e
cgroup: verify that source is a string
9b5b872215fe
file: fix close_range() for unshare+cloexec
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (2)
bluetooth
|
5 |
C |
done |
error |
19391 |
1709d |
2245d
|
20/29 |
1618d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
KASAN: use-after-free Write in dec_rlimit_ucounts
kernel
|
22 |
C |
|
|
4 |
1701d |
1734d
|
20/29 |
1618d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
bbb6d0f3e1fe
ucounts: Increase ucounts reference counter before the security hook
|
|
KMSAN: kernel-infoleak in compat_drm_wait_vblank
dri
|
9 |
|
|
|
37 |
1835d |
1879d
|
20/29 |
1619d |
de066e116306
drm/compat: Clear bounce structures
drm/compat: Clear bounce structures
|
|
KASAN: use-after-free Read in cipso_v4_genopt
lsm
net
|
19 |
C |
inconclusive |
|
5 |
1870d |
1871d
|
20/29 |
1619d |
ad5d07f4a9cd
cipso,calipso: resolve a number of problems with the DOI refcounts
1165affd4848
net: mac802154: Fix general protection fault
|
|
net-next build error (4)
kernel
|
-1 |
|
|
|
4 |
1686d |
1687d
|
20/29 |
1619d |
ea7b4244b365
x86/setup: Explicitly include acpi.h
|
|
memory leak in kobject_set_name_vargs (4)
kernel
|
3 |
C |
|
|
171 |
1686d |
1973d
|
20/29 |
1619d |
8fd0c1b0647a
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
|
|
WARNING in io_sq_thread_park
fs
|
-1 |
|
|
|
1 |
1851d |
1850d
|
20/29 |
1619d |
a185f1db59f1
io_uring: do ctx sqd ejection in a clear context
|
|
WARNING in destroy_conntrack
netfilter
|
-1 |
C |
done |
|
1 |
1713d |
1711d
|
20/29 |
1619d |
e3245a7b7b34
netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
|
|
upstream boot error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
233 |
1854d |
1868d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
general protection fault in hwsim_del_edge_nl
wpan
|
2 |
C |
done |
|
3 |
1764d |
1764d
|
20/29 |
1619d |
0303b30375df
ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
|
|
KMSAN: uninit-value in number (3)
media
|
7 |
C |
|
|
8575 |
1619d |
1862d
|
20/29 |
1619d |
eaaea4681984
media: gspca/sq905.c: fix uninitialized variable
|
|
WARNING: suspicious RCU usage in kernfs_fop_read_iter
kernfs
|
4 |
|
|
|
1 |
1841d |
1841d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING in idr_get_next
arm-msm
net
|
-1 |
C |
error |
done |
21 |
1809d |
2054d
|
20/29 |
1619d |
3cbf7530a163
qrtr: Convert qrtr_ports from IDR to XArray
|
|
KASAN: null-ptr-deref Read in phy_disconnect
net
usb
|
11 |
C |
|
|
255 |
1685d |
1689d
|
20/29 |
1619d |
1406e8cb4b05
net: usb: asix: do not call phy_disconnect() for ax88178
|
|
WARNING in ex_handler_fprestore
kernel
|
-1 |
C |
done |
|
5 |
1781d |
1788d
|
20/29 |
1619d |
484cea4f362e
x86/fpu: Prevent state corruption in __fpu__restore_sig()
|
|
KMSAN: uninit-value in hsr_fill_frame_info
net
|
7 |
C |
|
|
249 |
1736d |
2033d
|
20/29 |
1619d |
2e9f60932a2c
net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
|
|
possible deadlock in snd_timer_interrupt
sound
|
4 |
C |
done |
|
41 |
1626d |
1726d
|
20/29 |
1619d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING: refcount bug in ip6_tnl_dev_uninit
net
|
13 |
C |
done |
|
16 |
1841d |
1846d
|
20/29 |
1619d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
WARNING in bpf_bprintf_prepare
bpf
|
-1 |
C |
unreliable |
|
96 |
1764d |
1802d
|
20/29 |
1619d |
e2d5b2bb769f
bpf: Fix nested bpf_bprintf_prepare with more per-cpu buffers
|
|
KASAN: use-after-free Read in snd_seq_timer_interrupt (2)
sound
|
19 |
C |
inconclusive |
|
2 |
1776d |
1774d
|
20/29 |
1619d |
83e197a8414c
ALSA: seq: Fix race of snd_seq_timer_open()
|
|
bpf-next build error (3)
kernel
|
-1 |
|
|
|
10 |
1675d |
1845d
|
20/29 |
1619d |
7e32a09fdcb3
bpf: tcp: Remove comma which is causing build error
|
|
WARNING: suspicious RCU usage in tomoyo_encode2
rcu
|
4 |
|
|
|
1 |
1804d |
1804d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: use-after-free Read in sctp_do_8_2_transport_strike
sctp
|
19 |
|
|
|
1 |
1823d |
1822d
|
20/29 |
1619d |
35b4f24415c8
sctp: do asoc update earlier in sctp_sf_do_dupcook_a
|
|
KASAN: use-after-free Read in gfs2_glock_shrink_scan
gfs2
|
19 |
|
|
|
1 |
1798d |
1794d
|
20/29 |
1619d |
1ab19c5de4c5
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
|
|
possible deadlock in hfs_find_init
hfs
|
4 |
C |
done |
error |
1 |
1925d |
2916d
|
20/29 |
1619d |
b3b2177a2d79
hfs: add lock nesting notation to hfs_find_init
|
|
KASAN: slab-out-of-bounds Read in add_del_if
bridge
|
17 |
C |
unreliable |
|
970 |
1710d |
1686d
|
20/29 |
1619d |
9384eacd80f3
net: core: don't call SIOCBRADD/DELIF for non-bridge devices
|
|
memory leak in zr364xx_start_readpipe
media
usb
|
3 |
C |
|
|
2 |
1768d |
1795d
|
20/29 |
1619d |
0a045eac8d04
media: zr364xx: fix memory leak in zr364xx_start_readpipe
|
|
KASAN: use-after-free Write in alloc_ucounts
exfat
|
22 |
syz |
|
|
7 |
1717d |
1734d
|
20/29 |
1619d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
|
UBSAN: shift-out-of-bounds in ___bpf_prog_run
bpf
|
-1 |
C |
unreliable |
|
38 |
1752d |
1863d
|
20/29 |
1619d |
28131e9d9333
bpf: Fix up register-based shifts in interpreter to silence KUBSAN
|
|
KASAN: slab-out-of-bounds Read in fq_pie_qdisc_enqueue
net
|
17 |
|
|
|
1 |
1758d |
1758d
|
20/29 |
1619d |
e70f7a11876a
net/sched: fq_pie: fix OOB access in the traffic path
|
|
KMSAN: uninit-value in video_usercopy (2)
media
|
7 |
|
|
|
13058 |
1665d |
1857d
|
20/29 |
1619d |
c344f07aa1b4
media: v4l2-core: ignore native time32 ioctls on 64-bit
|
|
WARNING: suspicious RCU usage in do_ipv6_setsockopt
net
|
4 |
|
|
|
1 |
1844d |
1844d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
memory leak in garp_request_join
net
|
3 |
C |
|
|
414 |
1748d |
2271d
|
20/29 |
1619d |
42ca63f98084
net/802/garp: fix memleak in garp_request_join()
|
|
memory leak in pcan_usb_fd_init
usb
can
|
3 |
C |
|
|
19 |
1883d |
1952d
|
20/29 |
1619d |
a0b96b4a6274
drivers: net: fix memory leak in peak_usb_create_dev
|
|
unregister_netdevice: waiting for DEV to become free (5)
|
2 |
C |
done |
|
40035 |
1619d |
1864d
|
20/29 |
1619d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
possible deadlock in snd_timer_notify
fs
|
4 |
|
|
|
119 |
1620d |
1727d
|
20/29 |
1619d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING in dtv5100_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
51 |
1740d |
1786d
|
20/29 |
1619d |
8c8b9a9be2af
media: dtv5100: fix control-request directions
|
|
memory leak in io_sqe_buffers_register
fs
|
3 |
C |
|
|
2 |
1812d |
1812d
|
20/29 |
1619d |
bb6659cc0ad3
io_uring: Fix memory leak in io_sqe_buffers_register()
|
|
BUG: using smp_processor_id() in preemptible code in clock_was_set
kernel
|
4 |
C |
done |
|
231 |
1707d |
1708d
|
20/29 |
1619d |
9482fd71dbb8
hrtimer: Use raw_cpu_ptr() in clock_was_set()
|
|
possible deadlock in __queue_work
serial
|
4 |
|
|
|
2 |
1757d |
1815d
|
20/29 |
1619d |
3f804f6d201c
KVM: x86: Prevent deadlock against tk_core.seq
|
|
KMSAN: uninit-value in virtio_net_hdr_to_skb
net
|
7 |
C |
|
|
325 |
1736d |
1795d
|
20/29 |
1619d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
memory leak in kvm_dev_ioctl
kvm
|
3 |
C |
|
|
37 |
1736d |
1748d
|
20/29 |
1619d |
004d62eb4e57
kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
|
|
WARNING in blk_rq_append_bio
block
usb
|
-1 |
C |
done |
|
6 |
1830d |
1795d
|
20/29 |
1619d |
cbb749cf377a
block: remove an incorrect check from blk_rq_append_bio
|
|
WARNING: suspicious RCU usage in validate_mm
mm
|
4 |
|
|
|
1 |
1774d |
1774d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
INFO: task hung in ext4_put_super
ext4
|
1 |
C |
inconclusive |
done |
1 |
1766d |
1795d
|
20/29 |
1619d |
618f003199c6
ext4: fix memory leak in ext4_fill_super
|
|
WARNING in io_link_timeout_fn
fs
io-uring
|
-1 |
C |
done |
|
2 |
1800d |
1800d
|
20/29 |
1619d |
447c19f3b507
io_uring: fix ltout double free on completion race
|
|
kernel BUG in put_ucounts
kernel
|
-1 |
|
|
|
3 |
1645d |
1731d
|
20/29 |
1619d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
|
KASAN: slab-out-of-bounds Write in ext4_write_inline_data_end
ext4
|
21 |
C |
done |
|
1 |
1702d |
1701d
|
20/29 |
1619d |
a54c4613dac1
ext4: fix race writing to an inline_data file while its xattrs are changing
|
|
KASAN: use-after-free Write in put_ucounts
kernel
|
22 |
|
|
|
3 |
1732d |
1734d
|
20/29 |
1619d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
|
general protection fault in nl802154_del_llsec_devkey
wpan
|
8 |
C |
inconclusive |
|
229 |
1832d |
1884d
|
20/29 |
1619d |
27c746869e1a
net: ieee802154: fix nl802154 del llsec devkey
|
|
WARNING in exception_type
kvm-x86
|
-1 |
C |
error |
|
1 |
1691d |
1690d
|
20/29 |
1619d |
e7177339d7b5
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
|
|
WARNING in e2i_init/usb_submit_urb
usb
|
-1 |
|
|
|
4 |
1759d |
1788d
|
20/29 |
1619d |
41e81022a04a
Input: usbtouchscreen - fix control-request directions
|
|
WARNING in ethnl_default_doit
net
|
-1 |
|
|
|
202 |
1762d |
1770d
|
20/29 |
1619d |
e175aef90269
ethtool: strset: fix message length calculation
|
|
memory leak in hwsim_add_one
wpan
|
3 |
C |
|
|
1 |
1776d |
1774d
|
20/29 |
1619d |
28a5501c3383
ieee802154: hwsim: Fix memory leak in hwsim_add_one
|
|
WARNING in taprio_change
|
-1 |
C |
done |
|
746 |
1804d |
2040d
|
20/29 |
1619d |
ed8157f1ebf1
net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
|
|
KASAN: out-of-bounds Read in leaf_paste_entries
fs
|
17 |
C |
inconclusive |
|
8 |
1650d |
1881d
|
20/29 |
1619d |
13d257503c09
reiserfs: check directory items on read from disk
|
|
upstream boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0)
fs
|
-1 |
|
|
|
235 |
1740d |
1748d
|
20/29 |
1619d |
c43ddbf97f46
scsi: virtio_scsi: Do not overwrite SCSI status
|
|
KASAN: use-after-free Write in qdisc_class_hash_insert (2)
net
|
22 |
|
|
|
1 |
1762d |
1762d
|
20/29 |
1619d |
0cd58e5c53ba
pkt_sched: sch_qfq: fix qfq_change_class() error path
|
|
WARNING: suspicious RCU usage in count (2)
fs
mm
|
4 |
|
|
|
1 |
1791d |
1791d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KCSAN: data-race in igmp_ifc_event / igmp_ifc_timer_expire
net
|
6 |
|
|
|
1 |
1712d |
1711d
|
20/29 |
1619d |
4a2b285e7e10
net: igmp: fix data-race in igmp_ifc_timer_expire()
|
|
kernel BUG in llc_sap_action_send_xid_c
net
|
-1 |
C |
error |
|
61 |
1619d |
1833d
|
20/29 |
1619d |
c7c9d2102c9c
net: llc: fix skb_over_panic
|
|
BUG: unable to handle kernel NULL pointer dereference in htb_select_queue
net
|
10 |
syz |
done |
|
8 |
1849d |
1864d
|
20/29 |
1619d |
fb3a3e37de33
sch_htb: Fix offload cleanup in htb_destroy on htb_init failure
93bde210c434
sch_htb: Fix select_queue for non-offload mode
|
|
usb-testing boot error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
3 |
1862d |
1864d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
WARNING in netlbl_cipsov4_add
|
-1 |
C |
inconclusive |
|
4433 |
1682d |
1881d
|
20/29 |
1619d |
8ca34a13f7f9
net: cipso: fix warnings in netlbl_cipsov4_add_std
|
|
general protection fault in io_commit_cqring (2)
io-uring
fs
|
12 |
C |
done |
|
82 |
1831d |
1844d
|
20/29 |
1619d |
51520426f4bc
io_uring: handle setup-failed ctx in kill_timeouts
|
|
KCSAN: data-race in packet_do_bind / packet_sendmsg (3)
net
|
6 |
|
|
|
1 |
1778d |
1774d
|
20/29 |
1619d |
c7d2ef5dd4b0
net/packet: annotate accesses to po->bind
|
|
WARNING: suspicious RCU usage in do_recvmmsg
net
|
4 |
|
|
|
8 |
1771d |
1797d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
memory leak in __ieee80211_beacon_get
wireless
|
3 |
syz |
|
|
14 |
1773d |
1894d
|
20/29 |
1619d |
bd18de517923
mac80211_hwsim: drop pending frames on stop
|
|
KASAN: use-after-free Write in sk_psock_stop
bpf
net
|
22 |
syz |
done |
|
74 |
1817d |
1837d
|
20/29 |
1619d |
aadb2bb83ff7
sock_map: Fix a potential use-after-free in sock_map_close()
|
|
INFO: task hung in io_sq_thread_park (2)
fs
io-uring
|
1 |
syz |
done |
|
2 |
1741d |
1737d
|
20/29 |
1619d |
46fee9ab02cb
io_uring: remove double poll entry on arm failure
|
|
KCSAN: data-race in unix_dgram_sendmsg / unix_release_sock
net
|
6 |
|
|
|
1 |
1768d |
1767d
|
20/29 |
1619d |
a494bd642d91
net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
|
|
INFO: rcu detected stall in wg_packet_tx_worker (3)
net
|
1 |
C |
inconclusive |
|
5 |
1704d |
1687d
|
20/29 |
1619d |
c7c5e6ff533f
fq_codel: reject silly quantum parameters
|
|
KCSAN: data-race in inet_dgram_connect / udp_lib_get_port (5)
net
|
6 |
|
|
|
6 |
1784d |
1771d
|
20/29 |
1619d |
dcd01eeac144
inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
|
|
WARNING: refcount bug in vti6_dev_uninit
net
|
13 |
C |
|
|
26 |
1842d |
1846d
|
20/29 |
1619d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
KCSAN: data-race in __io_uring_cancel / io_uring_try_cancel_requests
fs
|
6 |
|
|
|
3 |
1784d |
1786d
|
20/29 |
1619d |
b16ef427adf3
io_uring: fix data race to avoid potential NULL-deref
|
|
memory leak in smsc75xx_bind
usb
|
3 |
syz |
|
|
2 |
1787d |
1788d
|
20/29 |
1619d |
46a8b29c6306
net: usb: fix memory leak in smsc75xx_bind
|
|
memory leak in mcba_usb_probe
usb
|
3 |
C |
|
|
34 |
1765d |
1942d
|
20/29 |
1619d |
91c02557174b
can: mcba_usb: fix memory leak in mcba_usb
|
|
KMSAN: kernel-infoleak in i2cdev_read
i2c
|
9 |
C |
|
|
592 |
1736d |
1861d
|
20/29 |
1619d |
86ff25ed6cd8
i2c: dev: zero out array used for i2c reads from userspace
|
|
WARNING: suspicious RCU usage in get_counters (2)
netfilter
|
4 |
|
|
|
1 |
1754d |
1754d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
general protection fault in unix_dgram_connect
net
|
2 |
C |
done |
|
2 |
1693d |
1693d
|
20/29 |
1619d |
dc56ad7028c5
af_unix: fix potential NULL deref in unix_dgram_connect()
|
|
WARNING in __percpu_ref_exit (2)
fs
|
-1 |
C |
error |
done |
31 |
1619d |
1858d
|
20/29 |
1619d |
a298232ee6b9
io_uring: fix link timeout refs
|
|
WARNING in cfg80211_connect
|
-1 |
C |
done |
|
2320 |
1832d |
2023d
|
20/29 |
1619d |
1b5ab825d9ac
cfg80211: remove WARN_ON() in cfg80211_sme_connect
|
|
WARNING: suspicious RCU usage in gc_worker
netfilter
|
4 |
|
|
|
3 |
1773d |
1799d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
BUG: unable to handle kernel paging request in vga16fb_fillrect
fbdev
|
8 |
C |
inconclusive |
|
14 |
1621d |
1737d
|
20/29 |
1619d |
8c28051cdcbe
fbmem: don't allow too huge resolutions
|
|
BUG: unable to handle kernel paging request in csum_partial (3)
kernel
|
8 |
C |
done |
|
1 |
1706d |
1736d
|
20/29 |
1619d |
9cf448c200ba
ip6_gre: add validation for csum_start
1d011c4803c7
ip_gre: add validation for csum_start
|
|
WARNING in hid_submit_ctrl/usb_submit_urb
input
usb
|
-1 |
C |
done |
|
38 |
1684d |
1733d
|
20/29 |
1619d |
0a824efdb724
HID: usbhid: Fix warning caused by 0-length input reports
|
|
WARNING in ext4_xattr_set_entry
ext4
|
-1 |
C |
unreliable |
|
7 |
1868d |
1951d
|
20/29 |
1619d |
6b22489911b7
ext4: do not try to set xattr into ea_inode if value is empty
|
|
WARNING: suspicious RCU usage in wg_ratelimiter_gc_entries
wireguard
|
4 |
|
|
|
5 |
1769d |
1844d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
net build error (3)
kernel
|
-1 |
|
|
|
29 |
1682d |
1687d
|
20/29 |
1619d |
ea7b4244b365
x86/setup: Explicitly include acpi.h
|
|
memory leak in nfcmrvl_nci_register_dev
usb
|
3 |
C |
|
|
9 |
1885d |
1930d
|
20/29 |
1619d |
e0652f8bb44d
NFC: nci: fix memory leak in nci_allocate_device
|
|
WARNING in kvm_wait
kvm
|
-1 |
C |
error |
|
119882 |
1847d |
1865d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
general protection fault in ieee802154_llsec_parse_key_id
wpan
|
11 |
C |
inconclusive |
|
92 |
1779d |
1879d
|
20/29 |
1619d |
6f7f657f2440
net: ieee802154: nl-mac: fix check on panid
|
|
WARNING: suspicious RCU usage in rmap_walk_file
mm
|
4 |
|
|
|
1 |
1799d |
1799d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
memory leak in xfrm_user_rcv_msg
net
|
3 |
C |
|
|
1 |
1763d |
1759d
|
20/29 |
1619d |
7c1a80e80cde
net: xfrm: fix memory leak in xfrm_user_rcv_msg
|
|
KMSAN: uninit-value in INET_ECN_decapsulate (2)
net
|
7 |
|
|
|
2 |
1773d |
1843d
|
20/29 |
1619d |
6628ddfec758
net: geneve: check skb is large enough for IPv4/IPv6 header
|
|
memory leak in bpf (2)
bpf
|
3 |
C |
|
|
3 |
1773d |
1842d
|
20/29 |
1619d |
ccff81e1d028
bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
|
|
WARNING: refcount bug in rxe_qp_do_cleanup
rdma
|
13 |
|
|
|
1 |
1804d |
1802d
|
20/29 |
1619d |
67f29896fdc8
RDMA/rxe: Clear all QP fields if creation failed
|
|
KCSAN: data-race in sock_alloc_send_pskb / unix_release_sock (5)
net
|
6 |
|
|
|
47 |
1620d |
1771d
|
20/29 |
1619d |
f13ef10059cc
net: annotate data race in sock_error()
|
|
possible deadlock in __fs_reclaim_acquire
mm
|
4 |
syz |
unreliable |
|
672 |
1736d |
1747d
|
20/29 |
1619d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
general protection fault in btf_type_id_size
bpf
|
2 |
C |
unreliable |
|
6 |
1869d |
1866d
|
20/29 |
1619d |
350a5c4dd245
bpf: Dont allow vmlinux BTF to be used in map_create and prog_load.
|
|
WARNING: suspicious RCU usage in __get_free_pages
mm
|
4 |
|
|
|
1 |
1808d |
1808d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
memory leak in tty_init_dev
serial
|
3 |
C |
|
|
9 |
1778d |
2422d
|
20/29 |
1619d |
58af3d3d54e8
net: caif: fix memory leak in ldisc_open
|
|
INFO: task hung in __io_uring_cancel
fs
io-uring
|
1 |
C |
done |
|
5 |
1757d |
1823d
|
20/29 |
1619d |
28090c133869
io_uring: fix work_exit sqpoll cancellations
|
|
divide error in __tcp_select_window (2)
net
|
2 |
C |
done |
|
4 |
1833d |
1834d
|
20/29 |
1619d |
a7150e382267
Revert "tcp: Reset tcp connections in SYN-SENT state"
|
|
KASAN: out-of-bounds Read in i801_isr
i2c
|
21 |
|
|
|
16 |
1761d |
1801d
|
20/29 |
1619d |
e4d8716c3dce
i2c: i801: Don't generate an interrupt on bus reset
|
|
riscv/fixes boot error: WARNING in vkms_vblank_simulate
dri
|
-1 |
|
|
|
13 |
1819d |
1843d
|
20/29 |
1619d |
b4142fc4d52d
drm/vkms: fix misuse of WARN_ON
|
|
WARNING: suspicious RCU usage in __ext4_mark_inode_dirty
kernel
|
4 |
|
|
|
1 |
1777d |
1776d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KCSAN: data-race in start_this_handle / start_this_handle
ext4
|
6 |
|
|
|
54 |
1861d |
1862d
|
20/29 |
1619d |
3b1833e92bab
ext4: annotate data race in start_this_handle()
|
|
WARNING: suspicious RCU usage in shrink_page_list
mm
|
4 |
|
|
|
1 |
1802d |
1802d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: use-after-free Read in tipc_recvmsg
tipc
|
19 |
C |
done |
|
2198 |
1725d |
1733d
|
20/29 |
1619d |
cc19862ffe45
tipc: fix an use-after-free issue in tipc_recvmsg
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (2)
fs
|
4 |
|
|
|
120 |
1620d |
1727d
|
20/29 |
1619d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
general protection fault in br_switchdev_fdb_notify
bridge
|
2 |
C |
error |
|
82 |
1714d |
1719d
|
20/29 |
1619d |
0541a6293298
net: bridge: validate the NUD_PERMANENT bit when adding an extern_learn FDB entry
|
|
memory leak in create_io_worker
io-uring
fs
|
3 |
C |
|
|
5 |
1642d |
1681d
|
20/29 |
1619d |
66e70be72288
io-wq: fix memory leak in create_io_worker()
|
|
INFO: trying to register non-static key in l2cap_chan_del
bluetooth
|
-1 |
syz |
inconclusive |
|
73 |
1862d |
2080d
|
20/29 |
1619d |
3af70b39fa2d
Bluetooth: check for zapped sk before connecting
|
|
KMSAN: uninit-value in ip_rcv_core
net
|
7 |
C |
|
|
141 |
1735d |
2769d
|
20/29 |
1619d |
6628ddfec758
net: geneve: check skb is large enough for IPv4/IPv6 header
|
|
memory leak in hdcs_probe_1020
usb
media
|
3 |
C |
|
|
1 |
1846d |
1842d
|
20/29 |
1619d |
4f4e6644cd87
media: gscpa/stv06xx: fix memory leak
|
|
WARNING in ieee802154_get_llsec_params
wpan
|
-1 |
C |
done |
|
36 |
1832d |
1878d
|
20/29 |
1619d |
1534efc7bbc1
net: ieee802154: stop dump llsec params for monitors
|
|
WARNING in slave_kobj_release
net
|
-1 |
C |
done |
|
3 |
1796d |
1885d
|
20/29 |
1619d |
35d96e631860
bonding: init notify_work earlier to avoid uninitialized use
|
|
WARNING in io_wqe_enqueue
io-uring
fs
|
-1 |
C |
done |
|
13 |
1777d |
1777d
|
20/29 |
1619d |
e6ab8991c5d0
io_uring: fix false WARN_ONCE
|
|
KASAN: use-after-free Write in get_ucounts
kernel
|
22 |
syz |
unreliable |
done |
7 |
1716d |
1743d
|
20/29 |
1619d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
|
usb-testing boot error: kernel panic: VFS: Unable to mount root fs on unknown-block(0,0)
fs
|
-1 |
|
|
|
27 |
1739d |
1744d
|
20/29 |
1619d |
c43ddbf97f46
scsi: virtio_scsi: Do not overwrite SCSI status
|
|
divide error in nft_limit_init
netfilter
|
2 |
C |
done |
|
4 |
1832d |
1833d
|
20/29 |
1619d |
b895bdf5d643
netfilter: nft_limit: avoid possible divide error in nft_limit_init
|
|
WARNING: suspicious RCU usage in exit_mmap
mm
|
4 |
|
|
|
1 |
1798d |
1798d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
BUG: unable to handle kernel paging request in cap_capable
lsm
|
8 |
C |
unreliable |
|
4 |
1716d |
1716d
|
20/29 |
1619d |
9384eacd80f3
net: core: don't call SIOCBRADD/DELIF for non-bridge devices
|
|
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user
netfilter
|
21 |
C |
error |
error |
1 |
2069d |
2068d
|
20/29 |
1619d |
b29c457a6511
netfilter: x_tables: fix compat match/target pad out-of-bound write
|
|
linux-next boot error: KASAN: use-after-free Read in page_to_skb
net
virt
|
-1 |
|
|
|
7 |
1821d |
1823d
|
20/29 |
1619d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
KASAN: use-after-free Read in eth_header_parse_protocol
net
|
19 |
C |
done |
|
1453 |
1817d |
1863d
|
20/29 |
1619d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
possible deadlock in snd_pcm_period_elapsed (2)
fs
|
4 |
|
|
|
52 |
1620d |
1727d
|
20/29 |
1619d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
KMSAN: uninit-value in pegasus_probe
usb
|
7 |
C |
|
|
258 |
1717d |
2387d
|
20/29 |
1619d |
af35fc37354c
net: pegasus: fix uninit-value in get_interrupt_interval
|
|
general protection fault in magicmouse_remove
usb
input
|
2 |
C |
|
|
47 |
1769d |
1795d
|
20/29 |
1619d |
4b4f6cecca44
HID: magicmouse: fix NULL-deref on disconnect
|
|
KASAN: use-after-free Read in nbd_genl_connect (2)
nbd
|
19 |
C |
unreliable |
|
6 |
1695d |
1695d
|
20/29 |
1619d |
7ee656c3ac3d
nbd: remove nbd->destroy_complete
|
|
KCSAN: data-race in udp_lib_setsockopt / udpv6_sendmsg
net
|
6 |
|
|
|
1 |
1753d |
1752d
|
20/29 |
1619d |
18a419bad63b
udp: annotate data races around unix_sk(sk)->gso_size
|
|
KASAN: use-after-free Read in ntfs_iget (2)
ntfs3
|
19 |
C |
inconclusive |
|
2 |
1777d |
1774d
|
20/29 |
1619d |
d98e4d95411b
ntfs: fix validity check for file name attribute
|
|
UBSAN: shift-out-of-bounds in ext4_mb_init
ext4
|
-1 |
C |
done |
|
5 |
1889d |
1900d
|
20/29 |
1619d |
f91436d55a27
fs/ext4: fix integer overflow in s_log_groups_per_flex
|
|
memory leak in __send_signal
kernel
|
3 |
syz |
|
|
3 |
1761d |
1775d
|
20/29 |
1619d |
399f8dd9a866
signal: Prevent sigqueue caching after task got released
|
|
WARNING: suspicious RCU usage in nf_ct_iterate_cleanup (2)
net
|
4 |
|
|
|
4 |
1748d |
1807d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING in ieee80211_free_ack_frame
wireless
|
-1 |
syz |
done |
|
117 |
1623d |
2017d
|
20/29 |
1619d |
bd18de517923
mac80211_hwsim: drop pending frames on stop
|
|
BUG: unable to handle kernel access to user memory in schedule_tail
kernel
|
-1 |
|
|
|
21843 |
1840d |
1863d
|
20/29 |
1619d |
285a76bb2cf5
riscv: evaluate put_user() arg before enabling user access
|
|
WARNING in batadv_iv_send_outstanding_bat_ogm_packet
batman
|
-1 |
C |
done |
|
12568 |
1751d |
2377d
|
20/29 |
1619d |
9f460ae31c44
batman-adv: Avoid WARN_ON timing related checks
|
|
WARNING in io_poll_double_wake
fs
io-uring
|
-1 |
C |
done |
done |
1124 |
1720d |
1822d
|
20/29 |
1619d |
a890d01e4ee0
io_uring: fix poll requests leaking second poll entries
|
|
KMSAN: kernel-infoleak in move_addr_to_user (5)
tipc
|
9 |
|
|
|
3 |
1720d |
1861d
|
20/29 |
1619d |
50535249f624
net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
|
|
WARNING: suspicious RCU usage in console_conditional_schedule
serial
|
4 |
|
|
|
1 |
1797d |
1797d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: refcount bug in ip6gre_tunnel_uninit
net
|
13 |
C |
error |
|
10 |
1843d |
1846d
|
20/29 |
1619d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
memory leak in dvb_create_media_graph
usb
media
|
3 |
C |
|
|
26 |
1824d |
1982d
|
20/29 |
1619d |
bf9a40ae8d72
media: dvbdev: Fix memory leak in dvb_media_device_free()
|
|
WARNING in vkms_vblank_simulate (2)
dri
|
-1 |
C |
error |
|
77748 |
1619d |
1993d
|
20/29 |
1619d |
b4142fc4d52d
drm/vkms: fix misuse of WARN_ON
|
|
memory leak in hdcs_probe_1x00
media
usb
|
3 |
C |
|
|
1 |
1875d |
1875d
|
20/29 |
1619d |
4f4e6644cd87
media: gscpa/stv06xx: fix memory leak
|
|
WARNING in osif_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
45 |
1744d |
1788d
|
20/29 |
1619d |
4ca070ef0dd8
i2c: robotfuzz-osif: fix control-request directions
|
|
KCSAN: data-race in inet_send_prepare / udp_lib_get_port (3)
net
|
6 |
|
|
|
4 |
1771d |
1774d
|
20/29 |
1619d |
dcd01eeac144
inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
|
|
general protection fault in cdev_del (2)
fs
|
11 |
C |
error |
|
45 |
1752d |
2030d
|
20/29 |
1619d |
8a12f8836145
net: hso: fix null-ptr-deref during tty device unregistration
0a360e8b65d6
tty: n_gsm: check error while registering tty devices
|
|
WARNING: suspicious RCU usage in shmem_alloc_page
mm
|
4 |
|
|
|
1 |
1812d |
1812d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
general protection fault in nl802154_del_llsec_dev
wpan
|
8 |
C |
inconclusive |
|
166 |
1832d |
1883d
|
20/29 |
1619d |
3d1eac2f4558
net: ieee802154: fix nl802154 del llsec dev
|
|
KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
net
|
17 |
|
|
|
2 |
1796d |
1816d
|
20/29 |
1619d |
821bbf79fe46
ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
|
|
WARNING: ODEBUG bug in __sk_destruct (2)
can
|
-1 |
C |
done |
done |
62 |
1628d |
1826d
|
20/29 |
1619d |
14a4696bc311
can: isotp: isotp_release(): omit unintended hrtimer restart on socket release
|
|
INFO: task hung in io_wq_put_and_exit
io-uring
fs
|
1 |
C |
unreliable |
|
628 |
1620d |
1681d
|
20/29 |
1619d |
3b33e3f4a6c0
io-wq: fix silly logic error in io_task_work_match()
|
|
upstream build error (16)
mm
|
-1 |
|
|
|
243 |
1627d |
1749d
|
20/29 |
1619d |
498cc50b3fa9
clk: hisilicon: hi3559a: Drop __init markings everywhere
|
|
KASAN: use-after-free Read in bcm_rx_handler
can
|
19 |
syz |
done |
|
2 |
1770d |
1800d
|
20/29 |
1619d |
d5f9023fa61e
can: bcm: delay release of struct bcm_op after synchronize_rcu()
|
|
possible deadlock in do_fcntl
usb
fs
|
4 |
C |
done |
|
245 |
1695d |
2026d
|
20/29 |
1619d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING in qt2_attach/usb_submit_urb
usb
|
-1 |
C |
|
|
171 |
1768d |
1788d
|
20/29 |
1619d |
eb8dbe80326c
USB: serial: quatech2: fix control-request directions
|
|
BUG: sleeping function called from invalid context in stack_depot_save
mm
|
5 |
C |
unreliable |
|
8490 |
1718d |
1747d
|
20/29 |
1619d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
memory leak in hub_event (2)
usb
|
3 |
C |
|
|
2 |
1856d |
1858d
|
20/29 |
1619d |
dcb4b8ad6a44
misc/uss720: fix memory leak in uss720_probe
|
|
WARNING: suspicious RCU usage in vfree
netfilter
|
4 |
|
|
|
1 |
1793d |
1793d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
memory leak in usb_set_configuration (2)
usb
|
3 |
C |
|
|
2 |
1713d |
1821d
|
20/29 |
1619d |
be8656e62e9e
media: cpia2: fix memory leak in cpia2_usb_probe
|
|
WARNING in usb_new_device/usb_submit_urb
usb
|
-1 |
C |
|
|
2 |
1783d |
1779d
|
20/29 |
1619d |
60dfe484cef4
USB: core: Avoid WARNings for 0-length descriptor requests
|
|
WARNING in rtl8152_probe
usb
|
-1 |
C |
|
|
23 |
1777d |
1800d
|
20/29 |
1619d |
1a44fb38cc65
r8152: check the informaton of the device
|
|
inconsistent lock state in sco_sock_timeout
bluetooth
|
4 |
C |
done |
|
16 |
1724d |
2068d
|
20/29 |
1619d |
ba316be1b6a0
Bluetooth: schedule SCO timeouts with delayed_work
|
|
WARNING in ieee80211_get_sband
wireless
|
-1 |
C |
done |
|
7 |
1787d |
2012d
|
20/29 |
1619d |
0ee4d55534f8
mac80211: remove warning in ieee80211_get_sband()
|
|
KASAN: use-after-free Write in j1939_can_recv
can
|
22 |
|
|
|
2 |
1848d |
1881d
|
20/29 |
1619d |
22c696fed25c
can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done
|
|
general protection fault in hci_release_dev
bluetooth
|
2 |
C |
done |
|
41 |
1698d |
1718d
|
20/29 |
1619d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
WARNING in do_proc_control/usb_submit_urb
usb
|
-1 |
C |
error |
|
456 |
1727d |
1741d
|
20/29 |
1619d |
b0863f192732
USB: core: Fix incorrect pipe calculation in do_proc_control()
|
|
memory leak in skb_clone
wpan
|
3 |
C |
|
|
2 |
1727d |
1832d
|
20/29 |
1619d |
1090340f7ee5
net: Fix memory leak in ieee802154_raw_deliver
|
|
general protection fault in gadget_setup
usb
|
2 |
|
|
|
1 |
1845d |
1829d
|
20/29 |
1619d |
4a5d797a9f9c
usb: gadget: dummy_hcd: fix gpf in gadget_setup
|
|
general protection fault in try_grab_compound_head
io-uring
mm
|
7 |
C |
done |
|
5 |
1720d |
1748d
|
20/29 |
1619d |
d08af0a59684
mm/hugetlb: fix refs calculation from unaligned @vaddr
|
|
BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc
net
arm-msm
|
4 |
C |
done |
done |
544 |
1805d |
2142d
|
20/29 |
1619d |
3cbf7530a163
qrtr: Convert qrtr_ports from IDR to XArray
|
|
general protection fault in reiserfs_security_init
reiserfs
|
2 |
C |
done |
|
26311 |
1841d |
2033d
|
20/29 |
1619d |
5e46d1b78a03
reiserfs: update reiserfs_xattrs_initialized() condition
|
|
KASAN: slab-out-of-bounds Read in do_wait_for_common
staging
usb
|
19 |
C |
error |
|
5 |
1713d |
1732d
|
20/29 |
1619d |
e9e6aa51b273
staging: rtl8712: error handling refactoring
|
|
BUG: sleeping function called from invalid context in __alloc_skb
netfilter
|
5 |
C |
done |
|
33 |
1666d |
1808d
|
20/29 |
1619d |
7072a355ba19
netfilter: nfnetlink: add a missing rcu_read_unlock()
|
|
WARNING: suspicious RCU usage in kernel_execve
fs
mm
|
4 |
|
|
|
1 |
1755d |
1755d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in do_nanosleep
kernel
|
4 |
|
|
|
1 |
1805d |
1805d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: refcount bug in __io_queue_sqe
fs
|
13 |
|
|
|
1 |
1821d |
1811d
|
20/29 |
1619d |
a298232ee6b9
io_uring: fix link timeout refs
|
|
bpf-next test error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
1 |
1857d |
1857d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
WARNING in do_proc_bulk
mm
|
-1 |
C |
inconclusive |
|
3 |
1809d |
1810d
|
20/29 |
1619d |
4f2629ea67e7
USB: usbfs: Don't WARN about excessively large memory allocations
|
|
BUG: unable to handle kernel paging request in corrupted (3)
|
8 |
C |
done |
|
45 |
1627d |
1795d
|
20/29 |
1619d |
7a274727702c
io_uring: don't modify req->poll for rw
|
|
BUG: unable to handle kernel NULL pointer dereference in kiocb_done
fs
io-uring
|
10 |
C |
unreliable |
done |
3 |
1686d |
1686d
|
20/29 |
1619d |
b8ce1b9d25cc
io_uring: don't submit half-prepared drain request
|
|
general protection fault in smc_tx_sendmsg
smc
|
2 |
C |
done |
|
6369 |
1753d |
1761d
|
20/29 |
1619d |
17081633e22d
net/smc: Ensure correct state of the socket in send path
|
|
KCSAN: data-race in __se_sys_perf_event_open / find_get_context
perf
|
6 |
|
|
|
7 |
1774d |
1785d
|
20/29 |
1619d |
6c605f837115
perf: Fix data race between pin_count increment/decrement
|
|
WARNING: suspicious RCU usage in kernfs_iop_getattr
kernfs
|
4 |
|
|
|
1 |
1813d |
1809d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in dup_mmap
mm
|
4 |
|
|
|
1 |
1785d |
1785d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
UBSAN: array-index-out-of-bounds in ima_inode_setxattr
lsm
integrity
|
15 |
C |
unreliable |
|
6 |
1699d |
1701d
|
20/29 |
1619d |
cb181da16196
IMA: reject unknown hash algorithms in ima_get_hash_algo
|
|
possible deadlock in io_uring_register
fs
|
4 |
|
|
|
16 |
1678d |
1681d
|
20/29 |
1619d |
009ad9f0c6ee
io_uring: drop ctx->uring_lock before acquiring sqd->lock
|
|
KCSAN: data-race in packet_do_bind / packet_getname (5)
net
|
6 |
|
|
|
4 |
1766d |
1766d
|
20/29 |
1619d |
e032f7c9c7ce
net/packet: annotate accesses to po->ifindex
|
|
memory leak in em28xx_dvb_init
media
usb
|
3 |
C |
|
|
1 |
1857d |
1857d
|
20/29 |
1619d |
0ae10a7dc899
media: em28xx: fix memory leak
|
|
memory leak in qrtr_create
arm-msm
net
|
3 |
C |
|
|
3 |
1722d |
1893d
|
20/29 |
1619d |
52f3456a96c0
net: qrtr: fix memory leaks
|
|
memory leak in virtio_transport_send_pkt_info
virt
kvm
net
|
3 |
C |
|
|
2 |
1830d |
1893d
|
20/29 |
1619d |
8432b8114957
vsock/virtio: free queued packets when closing socket
|
|
possible deadlock in loop_probe
|
4 |
C |
done |
|
20656 |
1740d |
1765d
|
20/29 |
1619d |
962bf783ef65
mtd: break circular locks in register_mtd_blktrans
|
|
possible deadlock in ieee80211_tx_frags
net
|
4 |
|
|
|
1 |
1819d |
1812d
|
20/29 |
1619d |
1d482e666b8e
netlink: disable IRQs for netlink_lock_table()
|
|
linux-next test error: KASAN: null-ptr-deref Read in fuse_conn_put
fuse
|
-1 |
|
|
|
18 |
1683d |
1683d
|
20/29 |
1619d |
660585b56e63
fuse: wait for writepages in syncfs
|
|
possible deadlock in __loop_clr_fd (2)
block
ext4
|
4 |
C |
unreliable |
|
6977 |
1619d |
1744d
|
20/29 |
1619d |
1c500ad70638
loop: reduce the loop_ctl_mutex scope
|
|
memory leak in __usbhid_submit_report
input
usb
|
3 |
C |
|
|
129 |
1689d |
1982d
|
20/29 |
1619d |
f7744fa16b96
HID: usbhid: free raw_report buffers in usbhid_stop
|
|
WARNING in io_try_cancel_userdata
fs
io-uring
|
-1 |
syz |
unreliable |
|
4 |
1693d |
1697d
|
20/29 |
1619d |
dadebc350da2
io_uring: fix io_try_cancel_userdata race for iowq
|
|
WARNING in x86_emulate_instruction
kvm-x86
|
-1 |
C |
done |
|
4 |
1794d |
1791d
|
20/29 |
1619d |
da6393cdd8aa
KVM: X86: Fix warning caused by stale emulation context
|
|
KCSAN: data-race in __inet_hash_connect / inet_send_prepare (4)
net
|
6 |
|
|
|
7 |
1768d |
1771d
|
20/29 |
1619d |
dcd01eeac144
inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
|
|
UBSAN: shift-out-of-bounds in choke_change (2)
net
|
-1 |
C |
done |
|
7 |
1833d |
1849d
|
20/29 |
1619d |
3a87571f0ffc
sch_red: fix off-by-one checks in red_check_params()
|
|
KMSAN: kernel-infoleak in copy_page_to_iter (2)
fs
mm
|
9 |
C |
|
|
2099 |
1714d |
2772d
|
20/29 |
1619d |
ce3aba43599f
ext4: fix kernel infoleak via ext4_extent_header
|
|
UBSAN: shift-out-of-bounds in snd_timer_user_ccallback
sound
|
-1 |
|
|
|
1 |
1784d |
1780d
|
20/29 |
1619d |
9c1fe96bded9
ALSA: timer: Fix master timer notification
|
|
BUG: scheduling while atomic: syz-executor/ADDR
kernel
|
-1 |
C |
done |
|
5 |
1694d |
1751d
|
20/29 |
1619d |
72ff2bf04db2
crypto: aesni - xts_crypt() return if walk.nbytes is 0
|
|
UBSAN: shift-out-of-bounds in xprt_calc_majortimeo
net
nfs
|
-1 |
C |
unreliable |
|
149 |
1819d |
1948d
|
20/29 |
1619d |
c09f11ef3595
NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
|
|
INFO: rcu detected stall in tx
net
|
1 |
C |
error |
unreliable |
3 |
1685d |
1823d
|
20/29 |
1619d |
30fad76ce4e9
USB: usbtmc: Fix RCU stall warning
|
|
KASAN: use-after-free Read in r871xu_dev_remove
usb
staging
|
19 |
C |
unreliable |
|
152 |
1712d |
1739d
|
20/29 |
1619d |
e9e6aa51b273
staging: rtl8712: error handling refactoring
|
|
KASAN: use-after-free Read in io_worker_handle_work
fs
|
19 |
|
|
|
2 |
1763d |
1793d
|
20/29 |
1619d |
3743c1723bfc
io-wq: Fix UAF when wakeup wqe in hash waitqueue
|
|
WARNING: suspicious RCU usage in proc_alloc_inode
fs
|
4 |
|
|
|
1 |
1761d |
1761d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
net test error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
1 |
1861d |
1861d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
KMSAN: kernel-infoleak in fb_cmap_to_user
fbdev
|
9 |
C |
|
|
439 |
1735d |
1886d
|
20/29 |
1619d |
19ab233989d0
fbdev: zero-fill colormap in fbcmap.c
|
|
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info
sound
usb
|
17 |
C |
|
|
10 |
1797d |
1802d
|
20/29 |
1619d |
e84749a78dc8
ALSA: usb-audio: Validate MS endpoint descriptors
|
|
WARNING: lock held when returning to user space in sock_setsockopt
net
|
4 |
|
|
|
1 |
1746d |
1746d
|
20/29 |
1619d |
271dbc318432
sock: unlock on error in sock_setsockopt()
|
|
WARNING in mntput_no_expire (2)
fs
|
-1 |
C |
done |
|
68 |
1626d |
1841d
|
20/29 |
1619d |
7d01ef7585c0
Make sure nd->path.mnt and nd->path.dentry are always valid pointers
|
|
WARNING: suspicious RCU usage in __fput
fs
|
4 |
|
|
|
1 |
1787d |
1787d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING in ieee802154_del_seclevel
wpan
|
-1 |
C |
done |
|
7 |
1843d |
1879d
|
20/29 |
1619d |
9dde130937e9
net: ieee802154: forbid monitor for del llsec seclevel
|
|
memory leak in snd_ctl_led_register
usb
|
3 |
C |
|
|
1 |
1805d |
1795d
|
20/29 |
1619d |
3ae72f6ab9c1
ALSA: control led: fix memory leak in snd_ctl_led_register
|
|
KMSAN: kernel-usb-infoleak in hid_submit_ctrl
input
usb
|
9 |
C |
|
|
839 |
1793d |
2401d
|
20/29 |
1619d |
6be388f4a35d
HID: usbhid: fix info leak in hid_submit_ctrl
|
|
linux-next build error (12)
|
-1 |
|
|
|
63 |
1745d |
1844d
|
20/29 |
1619d |
7aae231ac93b
bpf: tcp: Limit calling some tcp cc functions to CONFIG_DYNAMIC_FTRACE
|
|
BUG: unable to handle kernel paging request in diFree
jfs
|
8 |
C |
done |
|
13 |
1755d |
2026d
|
20/29 |
1619d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
WARNING: suspicious RCU usage in inet_twsk_purge
net
|
4 |
|
|
|
10 |
1742d |
1844d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
net-next test error: WARNING in __nf_unregister_net_hook
netfilter
|
-1 |
|
|
|
42 |
1805d |
1815d
|
20/29 |
1619d |
43016d02cf6e
netfilter: arptables: use pernet ops struct during unregister
|
|
KMSAN: uninit-value in asix_mdio_read
usb
|
7 |
C |
|
|
915 |
1720d |
2383d
|
20/29 |
1619d |
a786e3195d6a
net: asix: fix uninit value bugs
|
|
WARNING: suspicious RCU usage in populate_vma_page_range
mm
|
4 |
|
|
|
1 |
1782d |
1782d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
general protection fault in kcm_sendmsg
net
|
19 |
C |
done |
|
7957 |
1753d |
1774d
|
20/29 |
1619d |
a47c397bb29f
revert "net: kcm: fix memory leak in kcm_sendmsg"
|
|
WARNING in sk_stream_kill_queues (6)
net
|
-1 |
C |
|
|
11376 |
1619d |
1833d
|
20/29 |
1619d |
144748eb0c44
bpf, sockmap: Fix incorrect fwd_alloc accounting
|
|
linux-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
virt
net
|
-1 |
|
|
|
5 |
1821d |
1823d
|
20/29 |
1619d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
WARNING: suspicious RCU usage in schedule_debug
mm
|
4 |
|
|
|
1 |
1811d |
1811d
|
20/29 |
1619d |
7072a355ba19
netfilter: nfnetlink: add a missing rcu_read_unlock()
|
|
BUG: MAX_LOCKDEP_CHAINS too low! (2)
net
|
-1 |
C |
error |
|
84838 |
1619d |
2095d
|
20/29 |
1619d |
5dc33592e955
lockdep: Allow tuning tracing capacity constants.
|
|
WARNING in input_register_device
input
usb
|
-1 |
C |
error |
done |
11 |
1836d |
1987d
|
20/29 |
1619d |
b4104180a2ef
kobject_uevent: remove warning in init_uevent_argv()
|
|
KASAN: use-after-free Read in disk_part_iter_next (2)
block
|
19 |
C |
done |
|
327 |
1841d |
1859d
|
20/29 |
1619d |
e82fc7855749
block: don't create too many partitions
|
|
memory leak in cfserl_create
net
|
3 |
C |
|
|
13 |
2338d |
2507d
|
20/29 |
1619d |
b53558a950a8
net: caif: fix memory leak in caif_device_notify
|
|
memory leak in cinergyt2_fe_attach
usb
media
|
3 |
C |
|
|
3 |
1923d |
1981d
|
20/29 |
1619d |
9ad1efee086e
media: dvd_usb: memory leak in cinergyt2_fe_attach
|
|
UBSAN: shift-out-of-bounds in red_adaptative_timer (2)
net
|
-1 |
|
|
|
28 |
1848d |
1864d
|
20/29 |
1619d |
e323d865b361
net: sched: validate stab values
|
|
upstream test error: WARNING in corrupted
netfilter
|
-1 |
|
|
|
1 |
1805d |
1805d
|
20/29 |
1619d |
43016d02cf6e
netfilter: arptables: use pernet ops struct during unregister
|
|
memory leak in radix_tree_insert
arm-msm
net
|
3 |
C |
|
|
1 |
1843d |
1843d
|
20/29 |
1619d |
8a03dd925786
net: qrtr: Fix memory leak on qrtr_tx_wait failure
|
|
KASAN: use-after-free Read in nfc_llcp_put_ssap
net
nfc
|
19 |
syz |
done |
|
4 |
1804d |
1811d
|
20/29 |
1619d |
c61760e6940d
net/nfc: fix use-after-free llcp_sock_bind/connect
|
|
BUG: unable to handle kernel paging request in vga16fb_imageblit (2)
fbdev
|
8 |
C |
done |
|
27 |
1801d |
2169d
|
20/29 |
1619d |
ffb324e6f874
tty: vt: always invoke vc->vc_sw->con_resize callback
|
|
WARNING: suspicious RCU usage in kernfs_iop_get_link
kernfs
|
4 |
|
|
|
1 |
1774d |
1770d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: suspicious RCU usage in tcp_bpf_update_proto
bpf
net
|
4 |
C |
done |
|
539 |
1817d |
1837d
|
20/29 |
1619d |
51e0158a5432
skmsg: Pass psock pointer to ->psock_update_sk_prot()
|
|
UBSAN: array-index-out-of-bounds in udf_statfs
udf
|
15 |
C |
error |
error |
3 |
1726d |
1812d
|
20/29 |
1619d |
781d2a9a2fc7
udf: Check LVID earlier
|
|
linux-next boot error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
9 |
1853d |
1864d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
WARNING: suspicious RCU usage in bpf_get_current_cgroup_id
bpf
|
4 |
C |
done |
|
764 |
1689d |
1727d
|
20/29 |
1619d |
2d3a1e3615c5
bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
|
|
general protection fault in __io_file_supports_nowait
fs
io-uring
|
2 |
C |
done |
done |
13 |
1683d |
1689d
|
20/29 |
1619d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
possible deadlock in pipe_lock (5)
overlayfs
|
4 |
C |
done |
|
5 |
1727d |
1727d
|
20/29 |
1619d |
9b91b6b019fd
ovl: fix deadlock in splice write
|
|
upstream test error: WARNING in kvm_wait
kvm
|
-1 |
|
|
|
2 |
1860d |
1861d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
upstream boot error: KASAN: invalid-access Read in tomoyo_memory_ok
tomoyo
|
-1 |
|
|
|
3 |
1850d |
1863d
|
20/29 |
1619d |
cf10bd4c4aff
kasan: fix per-page tags for non-page_alloc pages
|
|
INFO: task hung in usb_remote_wakeup (2)
usb
|
1 |
syz |
inconclusive |
done |
9 |
1700d |
1899d
|
20/29 |
1619d |
363eaa3a450a
usbip: synchronize event handler with sysfs code paths
|
|
WARNING: suspicious RCU usage in bond_ipsec_add_sa (2)
|
4 |
C |
done |
|
540 |
1746d |
2033d
|
20/29 |
1619d |
b648eba4c69e
bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
|
|
KCSAN: data-race in __ip4_datagram_connect / skb_set_owner_w (2)
net
|
6 |
|
|
|
1 |
1784d |
1771d
|
20/29 |
1619d |
b71eaed8c04f
inet: annotate date races around sk->sk_txhash
|
|
WARNING: suspicious RCU usage in __copy_msghdr_from_user
net
|
4 |
|
|
|
1 |
1784d |
1784d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: use-after-free Read in bdev_evict_inode
fs
|
19 |
C |
unreliable |
|
1305 |
1703d |
1706d
|
20/29 |
1619d |
889c05cc5834
block: ensure the bdi is freed after inode_detach_wb
|
|
WARNING in pvr2_i2c_core_done
usb
fs
|
-1 |
C |
error |
|
5780 |
1740d |
2395d
|
20/29 |
1619d |
f8194e5e63fd
media: pvrusb2: fix warning in pvr2_i2c_core_done
|
|
BUG: sleeping function called from invalid context in __fdget_pos
kernel
|
5 |
|
|
|
4 |
1691d |
1753d
|
20/29 |
1619d |
821720b9f34e
crypto: x86/aes-ni - add missing error checks in XTS code
|
|
linux-next test error: unregister_netdevice: waiting for DEV to become free
|
-1 |
|
|
|
2 |
1842d |
1842d
|
20/29 |
1619d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
upstream test error: BUG: sleeping function called from invalid context in stack_depot_save
mm
|
-1 |
|
|
|
4 |
1738d |
1750d
|
20/29 |
1619d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
general protection fault in nl802154_add_llsec_key
wpan
|
8 |
C |
inconclusive |
|
340 |
1832d |
1886d
|
20/29 |
1619d |
20d5fe2d7103
net: ieee802154: fix nl802154 add llsec key
|
|
INFO: task hung in io_uring_cancel_generic
io-uring
fs
|
1 |
C |
unreliable |
|
151 |
1619d |
1740d
|
20/29 |
1619d |
1b48773f9fd0
io_uring: fix io_drain_req()
|
|
BUG: MAX_STACK_TRACE_ENTRIES too low! (3)
net
|
-1 |
|
|
|
2 |
1821d |
1822d
|
20/29 |
1619d |
5dc33592e955
lockdep: Allow tuning tracing capacity constants.
|
|
divide error in fill_meta_index
squashfs
|
2 |
C |
inconclusive |
|
1 |
1808d |
1807d
|
20/29 |
1619d |
d6e621de1fce
squashfs: fix divide error in calculate_skip()
|
|
memory leak in copy_process (2)
kernel
|
3 |
C |
|
|
2 |
1859d |
1859d
|
20/29 |
1619d |
f60a85cad677
bpf: Fix umd memory leak in copy_process()
|
|
WARNING in handle_mm_fault
kernel
|
-1 |
|
|
|
5 |
1858d |
1862d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
WARNING in __i2c_transfer
i2c
|
-1 |
C |
done |
|
2847 |
1619d |
1861d
|
20/29 |
1619d |
71581562ee36
i2c: bail out early when RDWR parameters are wrong
|
|
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post (2)
|
17 |
C |
done |
|
41 |
1721d |
2085d
|
20/29 |
1619d |
ad9d24c9429e
net: qrtr: fix OOB Read in qrtr_endpoint_post
|
|
BUG: sleeping function called from invalid context in __ipv6_dev_mc_dec
net
|
5 |
C |
done |
|
21 |
1752d |
1809d
|
20/29 |
1619d |
a100243d95a6
rtnetlink: avoid RCU read lock when holding RTNL
|
|
INFO: task hung in del_gendisk
block
|
1 |
C |
done |
|
5 |
1707d |
1740d
|
20/29 |
1619d |
68c9417b193d
nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
|
|
INFO: trying to register non-static key in skb_dequeue
bluetooth
|
-1 |
C |
error |
|
28951 |
1804d |
2085d
|
20/29 |
1619d |
be8597239379
Bluetooth: initialize skb_queue_head at l2cap_chan_create()
|
|
net-next test error: unregister_netdevice: waiting for DEV to become free
|
-1 |
|
|
|
18 |
1842d |
1843d
|
20/29 |
1619d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
WARNING: suspicious RCU usage in getname_flags
fs
|
4 |
|
|
|
2 |
1747d |
1838d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: refcount bug in in_dev_finish_destroy
net
|
13 |
C |
unreliable |
|
463 |
1619d |
1846d
|
20/29 |
1619d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
KASAN: use-after-free Read in j1939_xtp_rx_dat_one (2)
can
|
19 |
|
|
|
3 |
1732d |
1795d
|
20/29 |
1619d |
2030043e616c
can: j1939: fix Use-after-Free, hold skb ref while in use
|
|
WARNING: suspicious RCU usage in vm_mmap_pgoff
mm
|
4 |
|
|
|
1 |
1784d |
1784d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: use-after-free Read in __d_alloc (2)
fs
|
19 |
C |
unreliable |
|
6774 |
1661d |
1704d
|
20/29 |
1619d |
0766ec82e5fb
namei: Fix use after free in kern_path_locked
|
|
WARNING: suspicious RCU usage in get_timespec64
kernel
|
4 |
|
|
|
3 |
1789d |
1838d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KMSAN: uninit-value in validate_beacon_head
wireless
|
7 |
C |
|
|
284 |
1738d |
1965d
|
20/29 |
1619d |
9a6847ba1747
nl80211: fix beacon head validation
|
|
WARNING in macvlan_process_broadcast
net
|
-1 |
|
|
|
32053 |
1619d |
1864d
|
20/29 |
1619d |
dd4fa1dae9f4
macvlan: macvlan_count_rx() needs to be aware of preemption
|
|
WARNING: suspicious RCU usage in vxlan_xmit
net
|
4 |
C |
error |
|
1 |
1760d |
1760d
|
20/29 |
1619d |
85e8b032d6eb
vxlan: add missing rcu_read_lock() in neigh_reduce()
|
|
general protection fault in udmabuf_create
dri
media
|
2 |
C |
done |
|
2 |
1713d |
1710d
|
20/29 |
1619d |
b9770b0b6eac
udmabuf: fix general protection fault in udmabuf_create
|
|
memory leak in new_inode
ext4
|
3 |
C |
|
|
5 |
1665d |
1973d
|
20/29 |
1619d |
a8867f4e3809
ext4: fix memory leak in ext4_mb_init_backend on error path.
|
|
linux-next boot error: WARNING: refcount bug in fib_create_info
net
|
-1 |
|
|
|
3 |
1718d |
1718d
|
20/29 |
1619d |
28814cd18cd7
ipv4: Fix refcount warning for new fib_info
|
|
WARNING: zero-size vmalloc in dvb_dmx_init
media
usb
|
-1 |
C |
|
|
62 |
1741d |
1805d
|
20/29 |
1619d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
memory leak in ext4_multi_mount_protect
ext4
|
3 |
C |
|
|
12 |
1762d |
1939d
|
20/29 |
1619d |
618f003199c6
ext4: fix memory leak in ext4_fill_super
|
|
WARNING in tracepoint_add_func
trace
bpf
|
-1 |
C |
done |
|
20635 |
1734d |
2118d
|
20/29 |
1619d |
9913d5745bd7
tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
|
|
UBSAN: shift-out-of-bounds in nft_hash_estimate
netfilter
|
-1 |
C |
done |
|
3 |
1807d |
1807d
|
20/29 |
1619d |
a54754ec9891
netfilter: nftables: avoid overflows in nft_hash_buckets()
|
|
BUG: sleeping function called from invalid context in munlock_vma_pages_range
mm
|
5 |
|
|
|
1 |
1740d |
1736d
|
20/29 |
1619d |
023e1a8dd502
mm/rmap: fix new bug: premature return from page_mlock_one()
|
|
KASAN: use-after-free Read in blk_mq_exit_sched
usb
block
|
19 |
C |
done |
|
9 |
1758d |
1772d
|
20/29 |
1619d |
f0c1c4d2864e
blk-mq: fix use-after-free in blk_mq_exit_sched
|
|
divide error in do_journal_end (2)
erofs
|
2 |
C |
inconclusive |
|
2 |
1801d |
1800d
|
20/29 |
1619d |
a149127be52f
reiserfs: add check for invalid 1st journal block
|
|
BUG: MAX_LOCKDEP_ENTRIES too low!
|
-1 |
C |
done |
|
179076 |
1804d |
2495d
|
20/29 |
1619d |
5dc33592e955
lockdep: Allow tuning tracing capacity constants.
|
|
BUG: corrupted list in kobject_add_internal (3)
bluetooth
|
8 |
C |
inconclusive |
|
3 |
1654d |
1759d
|
20/29 |
1619d |
92fe24a7db75
Bluetooth: skip invalid hci_sync_conn_complete_evt
|
|
WARNING in nbd_dev_add
block
|
-1 |
C |
inconclusive |
|
131 |
1620d |
1879d
|
20/29 |
1619d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
possible deadlock in del_gendisk
|
4 |
C |
done |
|
158215 |
1682d |
1829d
|
20/29 |
1619d |
990e78116d38
block: loop: fix deadlock between open and remove
|
|
possible deadlock in br_ioctl_call
net
|
4 |
C |
unreliable |
|
4161 |
1709d |
1719d
|
20/29 |
1619d |
893b19587534
net: bridge: fix ioctl locking
|
|
WARNING in __vmalloc_node_range
media
usb
|
-1 |
C |
|
|
7 |
1805d |
1806d
|
20/29 |
1619d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
WARNING: ODEBUG bug in ext4_fill_super (3)
ext4
|
-1 |
C |
done |
|
392 |
1621d |
1859d
|
20/29 |
1619d |
0ce160c5bdb6
ext4: fix timer use-after-free on failed mount
|
|
linux-next test error: WARNING in __nf_unregister_net_hook
netfilter
|
-1 |
|
|
|
21 |
1809d |
1811d
|
20/29 |
1619d |
43016d02cf6e
netfilter: arptables: use pernet ops struct during unregister
|
|
BUG: sleeping function called from invalid context in _copy_to_iter
net
|
5 |
C |
done |
|
60 |
1704d |
1712d
|
20/29 |
1619d |
876c14ad014d
af_unix: fix holding spinlock in oob handling
|
|
possible deadlock in f_getown
fs
|
4 |
C |
done |
done |
164 |
1697d |
2026d
|
20/29 |
1619d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
UBSAN: array-index-out-of-bounds in taprio_change
net
|
15 |
|
|
|
2 |
1702d |
1710d
|
20/29 |
1619d |
efe487fce306
fix array-index-out-of-bounds in taprio_change
|
|
memory leak in rds_send_probe
|
3 |
C |
done |
|
27 |
1917d |
2459d
|
20/29 |
1619d |
49bfcbfd989a
net: rds: fix memory leak in rds_recvmsg
|
|
general protection fault in blk_mq_run_hw_queues
block
|
11 |
C |
unreliable |
|
305 |
1699d |
1746d
|
20/29 |
1619d |
16ad3db3b24c
nbd: fix order of cleaning up the queue and freeing the tagset
|
|
INFO: task hung in fuse_launder_page
fuse
|
1 |
C |
unreliable |
|
1 |
1711d |
1707d
|
20/29 |
1619d |
76224355db75
fuse: truncate pagecache on atomic_o_trunc
|
|
INFO: task hung in register_netdevice_notifier (2)
can
wireless
|
1 |
syz |
done |
|
10555 |
1762d |
2367d
|
20/29 |
1619d |
8d0caedb7596
can: bcm/raw/isotp: use per module netdevice notifier
|
|
general protection fault in hwsim_set_edge_lqi
wpan
|
2 |
C |
done |
|
4 |
1708d |
1761d
|
20/29 |
1619d |
0303b30375df
ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
|
|
KCSAN: data-race in expire_timers / try_to_del_timer_sync
mm
|
6 |
|
|
|
1029 |
1712d |
2117d
|
20/29 |
1619d |
bb7262b29547
timers: Move clearing of base::timer_running under base:: Lock
|
|
WARNING: suspicious RCU usage in kernfs_find_and_get_ns
block
|
4 |
|
|
|
1 |
1766d |
1766d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: still has locks held in io_sq_thread
|
4 |
C |
done |
|
8689 |
1831d |
1844d
|
20/29 |
1619d |
82734c5b1b24
io_uring: drop sqd lock before handling signals for SQPOLL
|
|
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu
netfilter
|
22 |
C |
done |
|
3 |
1713d |
1713d
|
20/29 |
1619d |
e3245a7b7b34
netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
|
|
memory leak in tcindex_set_parms
net
|
3 |
C |
|
|
94 |
1778d |
2263d
|
20/29 |
1619d |
f5051bcece50
net: sched: fix memory leak in tcindex_partial_destroy_work
|
|
general protection fault in sock_from_file
net
io-uring
|
2 |
C |
inconclusive |
|
78 |
1683d |
1690d
|
20/29 |
1619d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
memory leak in h4_recv_buf
|
3 |
C |
done |
|
21 |
1728d |
2488d
|
20/29 |
1619d |
bb2853a6a421
tty: Fix data race between tiocsti() and flush_to_ldisc()
|
|
KCSAN: data-race in __skb_try_recv_datagram / sock_setsockopt
net
|
6 |
|
|
|
1 |
1753d |
1753d
|
20/29 |
1619d |
0dbffbb5335a
net: annotate data race around sk_ll_usec
|
|
WARNING in sta_info_alloc
|
-1 |
C |
done |
done |
145 |
1765d |
2018d
|
20/29 |
1619d |
0ee4d55534f8
mac80211: remove warning in ieee80211_get_sband()
|
|
possible deadlock in snd_hrtimer_callback
fs
|
4 |
C |
done |
|
571 |
1620d |
1727d
|
20/29 |
1619d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
general protection fault in gfn_to_rmap (2)
kvm-x86
|
2 |
C |
done |
|
1 |
1774d |
1773d
|
20/29 |
1619d |
78fcb2c91adf
KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
|
|
UBSAN: shift-out-of-bounds in profile_init
kernel
|
-1 |
C |
unreliable |
|
23 |
1687d |
1737d
|
20/29 |
1619d |
2d186afd04d6
profiling: fix shift-out-of-bounds bugs
|
|
KASAN: use-after-free Read in hci_send_acl
bluetooth
|
19 |
C |
done |
|
2 |
1872d |
2083d
|
20/29 |
1619d |
5c4c8c954409
Bluetooth: verify AMP hci_chan before amp_destroy
|
|
WARNING: ODEBUG bug in cancel_delayed_work
|
-1 |
C |
done |
|
3384 |
1635d |
2086d
|
20/29 |
1619d |
3a9d54b1947e
Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
|
|
KFENCE: use-after-free in kmem_cache_destroy
f2fs
|
-1 |
|
|
|
1 |
1811d |
1809d
|
20/29 |
1619d |
cad83c968c2e
f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
|
|
bpf build error (3)
kernel
|
-1 |
|
|
|
15 |
1675d |
1687d
|
20/29 |
1619d |
ea7b4244b365
x86/setup: Explicitly include acpi.h
|
|
memory leak in usb_urb_init
media
usb
|
3 |
C |
|
|
1 |
1932d |
1928d
|
20/29 |
1619d |
b7cd0da982e3
media: dvb-usb: fix memory leak in dvb_usb_adapter_init
|
|
general protection fault in crypto_destroy_tfm
crypto
|
2 |
syz |
unreliable |
|
57 |
1833d |
1874d
|
20/29 |
1619d |
83681f2bebb3
crypto: api - check for ERR pointers in crypto_destroy_tfm()
|
|
possible deadlock in console_lock_spinning_enable
|
4 |
C |
done |
|
1693 |
1619d |
2492d
|
20/29 |
1619d |
c0070e1e6027
ttyprintk: Add TTY hangup callback.
|
|
memory leak in ip_vs_add_service
lvs
|
3 |
C |
|
|
1 |
1792d |
1788d
|
20/29 |
1619d |
56e4ee82e850
ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
|
|
possible deadlock in io_sq_thread_finish
fs
|
4 |
C |
unreliable |
done |
4 |
1864d |
1866d
|
20/29 |
1619d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor
fbdev
|
10 |
C |
done |
|
21 |
1845d |
1977d
|
20/29 |
1619d |
01faae5193d6
drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
|
|
memory leak in nr_create
hams
|
3 |
C |
|
|
250 |
1730d |
2516d
|
20/29 |
1619d |
517a16b1a88b
netrom: Decrease sock refcount when sock timers expire
|
|
general protection fault in ieee802154_llsec_parse_dev_addr
wpan
|
2 |
C |
inconclusive |
|
80 |
1746d |
1876d
|
20/29 |
1619d |
88c17855ac42
net: ieee802154: forbid monitor for set llsec params
|
|
WARNING in smk_set_cipso (2)
lsm
|
-1 |
C |
inconclusive |
|
24 |
1753d |
1830d
|
20/29 |
1619d |
49ec114a6e62
smackfs: restrict bytes count in smk_set_cipso()
|
|
memory leak in atusb_probe
usb
wpan
|
3 |
C |
|
|
71 |
1835d |
1980d
|
20/29 |
1619d |
6b9fbe169551
drivers: net: fix memory leak in atusb_probe
|
|
WARNING: ODEBUG bug in net_dm_cmd_trace
net
|
-1 |
syz |
unreliable |
|
2 |
1870d |
1866d
|
20/29 |
1619d |
9398e9c0b1d4
drop_monitor: Perform cleanup upon probe registration failure
|
|
WARNING: suspicious RCU usage in __alloc_file
fs
|
4 |
|
|
|
1 |
1806d |
1806d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
general protection fault in nft_set_elem_expr_alloc
netfilter
|
2 |
C |
done |
|
3 |
1782d |
1779d
|
20/29 |
1619d |
ad9f151e560b
netfilter: nf_tables: initialize set before expression setup
|
|
net-next boot error: WARNING: refcount bug in fib_create_info
net
|
-1 |
|
|
|
39 |
1718d |
1717d
|
20/29 |
1619d |
28814cd18cd7
ipv4: Fix refcount warning for new fib_info
|
|
general protection fault in do_blk_trace_setup
block
trace
|
2 |
C |
done |
|
25 |
1694d |
1696d
|
20/29 |
1619d |
1d1cf156dc17
sg: pass the device name to blk_trace_setup
|
|
UBSAN: shift-out-of-bounds in gred_enqueue
net
|
-1 |
|
|
|
1 |
1857d |
1857d
|
20/29 |
1619d |
e323d865b361
net: sched: validate stab values
|
|
WARNING in xfrm_alloc_compat (2)
net
|
-1 |
C |
done |
|
47 |
1834d |
1844d
|
20/29 |
1619d |
ef19e111337f
xfrm/compat: Cleanup WARN()s that can be user-triggered
|
|
possible deadlock in bd_register_pending_holders
block
|
4 |
|
|
|
3 |
1625d |
1679d
|
20/29 |
1619d |
dfbb3409b27f
block: genhd: don't call blkdev_show() with major_names_lock held
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold
sctp
|
22 |
C |
done |
|
4 |
1731d |
1739d
|
20/29 |
1619d |
58acd1009226
sctp: update active_key for asoc when old key is being replaced
|
|
KMSAN: uninit-value in tipc_nl_node_set_key
tipc
|
7 |
|
|
|
1 |
1859d |
1859d
|
20/29 |
1619d |
0217ed2848e8
tipc: better validate user input in tipc_nl_retrieve_key()
|
|
UBSAN: shift-out-of-bounds in load_balance
kernel
|
-1 |
syz |
|
|
2167 |
1804d |
1908d
|
20/29 |
1619d |
39a2a6eb5c9b
sched/fair: Fix shift-out-of-bounds in load_balance()
|
|
WARNING in io_rsrc_node_switch
io-uring
fs
|
-1 |
C |
done |
|
174 |
1804d |
1813d
|
20/29 |
1619d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
KASAN: use-after-free Read in firmware_fallback_sysfs
kernel
|
19 |
C |
error |
|
16514 |
1701d |
1900d
|
20/29 |
1619d |
75d95e2e39b2
firmware_loader: fix use-after-free in firmware_fallback_sysfs
|
|
WARNING in tcindex_alloc_perfect_hash
mm
|
-1 |
C |
inconclusive |
|
349 |
1748d |
1923d
|
20/29 |
1619d |
3f2db250099f
net: sched: fix warning in tcindex_alloc_perfect_hash
|
|
KMSAN: uninit-value in caif_seqpkt_sendmsg
net
|
7 |
C |
|
|
2365 |
1665d |
2082d
|
20/29 |
1619d |
991e634360f2
net: fix uninit-value in caif_seqpkt_sendmsg
|
|
KASAN: invalid-free in ieee80211_ibss_leave
wireless
|
24 |
C |
inconclusive |
|
1 |
1863d |
1891d
|
20/29 |
1619d |
3bd801b14e0c
mac80211: fix double free in ibss_leave
|
|
WARNING in io_wq_submit_work (2)
io-uring
fs
|
-1 |
C |
done |
done |
52 |
1678d |
1681d
|
20/29 |
1619d |
713b9825a4c4
io-wq: fix cancellation on create-worker failure
|
|
memory leak in prepare_creds (2)
lsm
|
3 |
C |
|
|
2 |
1757d |
1852d
|
20/29 |
1619d |
f60a85cad677
bpf: Fix umd memory leak in copy_process()
|
|
WARNING: suspicious RCU usage in __clear_user
netfilter
|
4 |
|
|
|
1 |
1787d |
1787d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: null-ptr-deref Write in io_uring_cancel_sqpoll
fs
|
12 |
|
|
|
170 |
1620d |
1875d
|
20/29 |
1619d |
6d042ffb598e
io_uring: Check current->io_uring in io_uring_cancel_sqpoll
|
|
WARNING in cfg80211_inform_single_bss_frame_data
wireless
|
-1 |
C |
done |
|
1 |
1808d |
1900d
|
20/29 |
1619d |
e298aa358f0c
mac80211: fix skb length check in ieee80211_scan_rx()
|
|
memory leak in mrp_request_join
net
|
3 |
C |
|
|
215 |
1759d |
2277d
|
20/29 |
1619d |
996af62167d0
net/802/mrp: fix memleak in mrp_request_join()
|
|
INFO: task hung in unregister_netdevice_notifier (3)
can
|
1 |
syz |
error |
error |
184 |
2431d |
2615d
|
20/29 |
1619d |
8d0caedb7596
can: bcm/raw/isotp: use per module netdevice notifier
|
|
KASAN: slab-out-of-bounds Write in decode_data
hams
|
21 |
C |
done |
error |
7 |
2169d |
2324d
|
20/29 |
1619d |
19d1532a1876
net: 6pack: fix slab-out-of-bounds in decode_data
|
|
net-next boot error: KASAN: slab-out-of-bounds Read in page_to_skb
net
virt
|
-1 |
|
|
|
15 |
1822d |
1825d
|
20/29 |
1619d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
general protection fault in bond_ipsec_add_sa (2)
net
|
2 |
|
|
|
1 |
1746d |
1746d
|
20/29 |
1619d |
105cd17a8660
bonding: fix null dereference in bond_ipsec_add_sa()
|
|
memory leak in tcp_cdg_init
net
|
3 |
syz |
|
|
6 |
1783d |
1923d
|
20/29 |
1619d |
be5d1b61a2ad
tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
|
|
WARNING: suspicious RCU usage in get_signal
kernel
|
4 |
|
|
|
1 |
1810d |
1806d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
KASAN: use-after-free Read in drm_getunique
dri
|
19 |
syz |
inconclusive |
|
2 |
1780d |
1779d
|
20/29 |
1619d |
b436acd1cf7f
drm: Fix use-after-free read in drm_getunique()
|
|
WARNING in hsr_forward_skb
|
-1 |
C |
done |
done |
1310 |
1833d |
2661d
|
20/29 |
1619d |
9d6803921a16
net: hsr: Reset MAC header for Tx path
|
|
WARNING: refcount bug in sk_psock_get
net
|
13 |
C |
done |
|
8 |
1806d |
1833d
|
20/29 |
1619d |
8621436671f3
smc: disallow TCP_ULP in smc_setsockopt()
|
|
WARNING in close_fs_devices (3)
btrfs
|
-1 |
C |
done |
|
98 |
1721d |
1965d
|
20/29 |
1619d |
b2a616676839
btrfs: fix rw device counting in __btrfs_free_extra_devids
|
|
KASAN: use-after-free Read in check_all_holdout_tasks_trace
mm
|
19 |
syz |
done |
|
4 |
1721d |
1791d
|
20/29 |
1619d |
1d10bf55d85d
rcu-tasks: Don't delete holdouts within trc_inspect_reader()
|
|
kernel BUG in assertfail
btrfs
|
-1 |
|
|
|
1 |
1787d |
1781d
|
20/29 |
1619d |
aefd7f706556
btrfs: promote debugging asserts to full-fledged checks in validate_super
|
|
net-next boot error: KASAN: use-after-free Read in page_to_skb
net
virt
|
-1 |
|
|
|
11 |
1822d |
1825d
|
20/29 |
1619d |
af39c8f72301
virtio-net: fix use-after-free in page_to_skb()
|
|
BUG: unable to handle kernel paging request in nl802154_del_llsec_key
wpan
|
8 |
C |
inconclusive |
|
235 |
1832d |
1883d
|
20/29 |
1619d |
37feaaf5ceb2
net: ieee802154: fix nl802154 del llsec key
|
|
WARNING: refcount bug in ipip6_tunnel_uninit
net
|
13 |
C |
done |
|
199 |
1841d |
1846d
|
20/29 |
1619d |
6289a98f0817
sit: proper dev_{hold|put} in ndo_[un]init methods
|
|
WARNING: suspicious RCU usage in tomoyo_update_domain
tomoyo
|
4 |
|
|
|
1 |
1760d |
1760d
|
20/29 |
1619d |
3066820034b5
rcu: Reject RCU_LOCKDEP_WARN() false positives
|
|
WARNING: refcount bug in register_netdevice
net
|
13 |
C |
unreliable |
|
97 |
1840d |
1846d
|
20/29 |
1619d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
possible deadlock in sctp_addr_wq_timeout_handler
sctp
|
4 |
C |
done |
|
8 |
1811d |
1812d
|
20/29 |
1619d |
01bfe5e8e428
Revert "net/sctp: fix race condition in sctp_destroy_sock"
|
|
INFO: task hung in hci_req_sync
bluetooth
|
1 |
C |
inconclusive |
|
1 |
1712d |
1708d
|
20/29 |
1619d |
f41a4b2b5eb7
Bluetooth: add timeout sanity check to hci_inquiry
|
|
WARNING: refcount bug in ip6erspan_tunnel_uninit
net
|
13 |
C |
error |
|
11 |
1843d |
1846d
|
20/29 |
1619d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
UBSAN: shift-out-of-bounds in xfrm_set_default
net
|
-1 |
C |
unreliable |
|
79 |
1714d |
1724d
|
20/29 |
1619d |
5d8dbb7fb82b
net: xfrm: fix shift-out-of-bounce
|
|
possible deadlock in cfg80211_netdev_notifier_call (2)
wireless
|
4 |
|
|
|
2 |
1791d |
1802d
|
20/29 |
1619d |
d5befb224edb
mac80211: fix deadlock in AP/VLAN handling
|
|
WARNING in fuse_get_tree
fuse
|
-1 |
C |
unreliable |
|
22 |
1714d |
1721d
|
20/29 |
1619d |
5d5b74aa9c76
fuse: allow sharing existing sb
|
|
INFO: task hung in hub_port_init
|
1 |
C |
done |
|
15888 |
1619d |
2018d
|
20/29 |
1619d |
258c81b341c8
usbip: give back URBs for unsent unlink requests during cleanup
|
|
general protection fault in wb_timer_fn
block
exfat
|
2 |
C |
done |
|
60 |
1696d |
1706d
|
20/29 |
1619d |
d152c682f03c
block: add an explicit ->disk backpointer to the request_queue
|
|
memory leak in con_do_clear_unimap
serial
|
3 |
C |
|
|
13 |
1820d |
1879d
|
20/29 |
1619d |
211b4d42b70f
tty: fix memory leak in vc_deallocate
|
|
KMSAN: kernel-infoleak in _copy_to_iter (5)
net
|
9 |
C |
|
|
23883 |
1728d |
2164d
|
20/29 |
1619d |
08c27f3322fe
batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
|
|
WARNING: locking bug in l2tp_xmit_skb
net
|
4 |
|
|
|
1 |
1808d |
1808d
|
20/29 |
1619d |
69e16d01d1de
net: fix a concurrency bug in l2tp_tunnel_register()
|
|
KMSAN: uninit-value in __dev_mc_add
net
|
7 |
C |
|
|
213 |
2563d |
2759d
|
20/29 |
1619d |
cca8ea3b05c9
net: tun: set tun->dev->addr_len during TUNSETLINK processing
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit
fbdev
|
21 |
C |
|
|
104 |
1633d |
1926d
|
20/29 |
1619d |
3b0c40612471
tty: Fix out-of-bound vmalloc access in imageblit
|
|
WARNING in init_timer_key
wireless
|
-1 |
C |
done |
|
2 |
1789d |
1896d
|
20/29 |
1619d |
a64b6a25dd9f
cfg80211: call cfg80211_leave_ocb when switching away from OCB
|
|
KASAN: stack-out-of-bounds Read in iov_iter_revert
fs
io-uring
|
17 |
C |
error |
|
14 |
1691d |
1708d
|
20/29 |
1619d |
89c2b3b74918
io_uring: reexpand under-reexpanded iters
|
|
WARNING in futex_requeue
kernel
|
-1 |
syz |
|
|
4 |
1684d |
1688d
|
20/29 |
1619d |
4f07ec0d76f2
futex: Prevent inconsistent state and exit race
|
|
WARNING in internal_create_group
fs
|
-1 |
C |
inconclusive |
|
20 |
1683d |
1737d
|
20/29 |
1619d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
UBSAN: shift-out-of-bounds in vhci_hub_control (2)
usb
|
-1 |
C |
unreliable |
|
5 |
1840d |
1849d
|
20/29 |
1619d |
1cc5ed25bdad
usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
|
|
WARNING in __static_key_slow_dec
kernel
|
-1 |
C |
unreliable |
|
19 |
1682d |
1686d
|
20/29 |
1619d |
6d5f1ef83868
bonding: Fix negative jump label count on nested bonding
|
|
memory leak in kcm_sendmsg
net
|
3 |
C |
|
|
2 |
2114d |
2254d
|
20/29 |
1619d |
c47cc304990a
net: kcm: fix memory leak in kcm_sendmsg
|
|
kernel BUG in remove_inode_hugepages
fs
mm
|
-1 |
C |
unreliable |
|
3 |
1704d |
1704d
|
20/29 |
1619d |
c7b1850dfb41
hugetlb: don't pass page cache pages to restore_reserve_on_error
|
|
WARNING in io_wq_put
fs
io-uring
|
-1 |
C |
unreliable |
|
3 |
1853d |
1864d
|
20/29 |
1619d |
f5d2d23bf0d9
io-wq: fix race around pending work on teardown
|
|
memory leak in v4l2_ctrl_handler_init_class
usb
media
|
3 |
C |
|
|
12 |
1823d |
1876d
|
20/29 |
1619d |
9c39be40c015
media: drivers/media/usb: fix memory leak in zr364xx_probe
|
|
KMSAN: uninit-value in ax88179_get_mac_addr
usb
|
7 |
C |
|
|
149 |
1737d |
2001d
|
20/29 |
1619d |
bd78980be1a6
net: usb: ax88179_178a: initialize local variables before use
|
|
WARNING in io_uring_setup (2)
fs
io-uring
|
-1 |
C |
done |
|
40 |
1804d |
1813d
|
20/29 |
1619d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
general protection fault in drm_atomic_set_crtc_for_connector
dri
|
2 |
C |
unreliable |
|
586 |
1976d |
1973d
|
20/29 |
1644d |
0003b687ee6d
drm: fix oops in drm_atomic_set_crtc_for_connector
|
|
UBSAN: shift-out-of-bounds in qdisc_get_rtab
net
|
-1 |
C |
unreliable |
done |
521 |
1912d |
1956d
|
20/29 |
1766d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
KASAN: out-of-bounds Read in kfence_guarded_free
kasan
mm
|
17 |
C |
error |
|
20 |
1929d |
1940d
|
20/29 |
1770d |
2b8305260fb3
kfence, kasan: make KFENCE compatible with KASAN
|
|
INFO: task can't die in d_alloc_parallel
fs
|
1 |
|
|
|
2 |
1928d |
1944d
|
20/29 |
1781d |
0ce20dd84089
mm: add Kernel Electric-Fence infrastructure
|
|
KASAN: global-out-of-bounds Read in netlink_policy_dump_add_policy (2)
kernel
|
17 |
C |
done |
|
2 |
1893d |
1893d
|
20/29 |
1786d |
33b347503f01
vdpa: Define vdpa mgmt device, ops and a netlink interface
|
|
KASAN: use-after-free Read in __cpuhp_state_remove_instance
kernel
|
19 |
C |
unreliable |
done |
2726 |
1854d |
1875d
|
20/29 |
1823d |
470ec4ed8c91
io-wq: fix double put of 'wq' in error path
|
|
KASAN: use-after-free Read in idr_for_each (2)
io-uring
fs
|
19 |
C |
error |
done |
86 |
1857d |
2019d
|
20/29 |
1823d |
61cf93700fe6
io_uring: Convert personality_idr to XArray
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2
trace
bpf
|
17 |
C |
done |
done |
5 |
1875d |
2033d
|
20/29 |
1829d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
general protection fault in drm_client_buffer_vunmap
usb
dri
|
2 |
C |
unreliable |
done |
247 |
1862d |
1963d
|
20/29 |
1829d |
874a52f9b693
drm/fb-helper: only unmap if buffer not null
|
|
BUG: unable to handle kernel paging request in bpf_trace_run2
trace
bpf
|
8 |
C |
done |
done |
10 |
1872d |
2033d
|
20/29 |
1829d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
INFO: rcu detected stall in smp_call_function
perf
|
1 |
C |
|
|
107 |
1832d |
2087d
|
20/29 |
1829d |
c583bcb8f5ed
rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
1b7af295541d
sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled
|
|
INFO: task hung in io_uring_cancel_task_requests
fs
io-uring
|
1 |
C |
|
|
305 |
1857d |
1892d
|
20/29 |
1833d |
34343786ecc5
io_uring: unpark SQPOLL thread for cancelation
|
|
general protection fault in usb_audio_probe
sound
usb
|
2 |
C |
done |
|
360 |
1863d |
1865d
|
20/29 |
1833d |
30dea07180de
ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
|
|
UBSAN: shift-out-of-bounds in erofs_fc_fill_super
erofs
|
-1 |
C |
unreliable |
|
11 |
1883d |
1913d
|
20/29 |
1833d |
bde545295b71
erofs: fix shift-out-of-bounds of blkszbits
|
|
net-next build error (3)
|
-1 |
|
|
|
7 |
1897d |
1894d
|
20/29 |
1833d |
9c97921a51a0
net: fix building errors on powerpc when CONFIG_RETPOLINE is not set
|
|
KASAN: use-after-free Read in tctx_task_work
fs
|
19 |
|
|
|
2 |
1876d |
1873d
|
20/29 |
1833d |
2c32395d8111
io_uring: fix __tctx_task_work() ctx race
|
|
INFO: task hung in addrconf_verify_work (4)
|
1 |
C |
done |
|
132 |
1881d |
1969d
|
20/29 |
1833d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
possible deadlock in cfg80211_netdev_notifier_call
wireless
|
4 |
syz |
done |
|
13 |
1834d |
1900d
|
20/29 |
1833d |
40c575d1ec71
cfg80211: fix netdev registration deadlock
|
|
memory leak in qrtr_tun_open
arm-msm
net
|
3 |
C |
|
|
4 |
1924d |
1969d
|
20/29 |
1833d |
fc0494ead639
net: qrtr: Fix memory leak in qrtr_tun_open
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_printdata
usb
media
|
-1 |
C |
error |
|
331 |
1879d |
1947d
|
20/29 |
1833d |
9dec0f48a75e
media: mceusb: sanity check for prescaler value
|
|
KMSAN: uninit-value in bpf_iter_prog_supported
bpf
|
7 |
|
|
|
4479 |
1833d |
1894d
|
20/29 |
1833d |
17d8beda277a
bpf: Fix an unitialized value in bpf_iter
|
|
KASAN: invalid-free in io_req_caches_free
fs
|
24 |
|
|
|
5 |
1876d |
1879d
|
20/29 |
1833d |
8e5c66c485a8
io_uring: clear request count when freeing caches
|
|
memory leak in v2_read_file_info
ext4
|
3 |
C |
|
|
71 |
1882d |
1941d
|
20/29 |
1833d |
a4db1072e1a3
quota: Fix memory leak when handling corrupted quota file
|
|
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy
net
|
11 |
C |
|
|
115 |
1836d |
2026d
|
20/29 |
1833d |
396d7f23adf9
net: sched: fix police ext initialization
|
|
general protection fault in j1939_netdev_notify (2)
can
|
2 |
C |
done |
|
19 |
1885d |
1943d
|
20/29 |
1833d |
4e096a18867a
net: introduce CAN specific pointer in the struct net_device
|
|
INFO: task hung in tcf_action_init_1
net
|
1 |
C |
done |
|
30 |
1892d |
2026d
|
20/29 |
1833d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
general protection fault in kobject_cleanup
gpio
usb
|
2 |
C |
unreliable |
|
72 |
1863d |
1876d
|
20/29 |
1833d |
a6112998ee45
gpio: fix NULL-deref-on-deregistration regression
|
|
KASAN: slab-out-of-bounds Read in skb_segment
net
|
17 |
C |
error |
|
311 |
1911d |
1915d
|
20/29 |
1833d |
00b229f762b0
net: fix GSO for SG-enabled devices
|
|
upstream test error: INFO: trying to register non-static key in nsim_get_stats64
net
|
-1 |
|
|
|
381 |
1864d |
1906d
|
20/29 |
1833d |
863a42b289c2
netdevsim: init u64 stats for 32bit hardware
|
|
UBSAN: shift-out-of-bounds in snto32
input
usb
|
-1 |
C |
error |
|
58 |
1877d |
1950d
|
20/29 |
1833d |
a0312af1f94d
HID: core: detect and skip invalid inputs to snto32()
|
|
UBSAN: shift-out-of-bounds in exfat_fill_super
exfat
|
-1 |
C |
error |
|
3 |
1890d |
1907d
|
20/29 |
1833d |
78c276f5495a
exfat: fix shift-out-of-bounds in exfat_fill_super()
|
|
INFO: task hung in io_sq_thread_park
fs
io-uring
|
1 |
C |
unreliable |
|
263 |
1868d |
1873d
|
20/29 |
1833d |
3ebba796fa25
io_uring: ensure that SQPOLL thread is started for exit
|
|
KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (4)
tomoyo
|
6 |
|
|
|
12 |
1889d |
1956d
|
20/29 |
1833d |
5797e861e402
tomoyo: ignore data race while checking quota
|
|
INFO: task hung in walk_component (2)
fuse
|
1 |
|
|
|
31 |
1861d |
1861d
|
20/29 |
1833d |
775c5033a0d1
fuse: fix live lock in fuse_iget()
|
|
KCSAN: data-race in bpf_lru_pop_free / bpf_lru_push_free
bpf
|
6 |
|
|
|
237 |
1881d |
2068d
|
20/29 |
1833d |
6df8fb83301d
bpf_lru_list: Read double-checked variable once without lock
|
|
KASAN: use-after-free Read in ntfs_iget
ntfs3
|
19 |
C |
error |
error |
1 |
1970d |
1966d
|
20/29 |
1833d |
4dfe6bd94959
ntfs: check for valid standard information attribute
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
C |
done |
|
33 |
1869d |
1875d
|
20/29 |
1833d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
WARNING in memdup_user_nul
lsm
|
-1 |
C |
inconclusive |
|
2 |
1918d |
1918d
|
20/29 |
1833d |
7ef4c19d245f
smackfs: restrict bytes count in smackfs write functions
|
|
memory leak in io_submit_sqes (2)
fs
io-uring
|
3 |
C |
|
|
1 |
1871d |
1870d
|
20/29 |
1833d |
f01272541d2c
io-wq: ensure all pending work is canceled on exit
|
|
INFO: task can't die in connmark_exit_net
net
|
1 |
syz |
error |
|
1 |
1955d |
1951d
|
20/29 |
1833d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
memory leak in dlfb_usb_probe
usb
fbdev
|
3 |
C |
|
|
3 |
1947d |
1949d
|
20/29 |
1833d |
5c0e4110f751
udlfb: Fix memory leak in dlfb_usb_probe
|
|
INFO: task can't die in iget5_locked
fuse
|
1 |
|
|
|
7 |
1877d |
1901d
|
20/29 |
1833d |
775c5033a0d1
fuse: fix live lock in fuse_iget()
|
|
UBSAN: shift-out-of-bounds in std_validate
media
|
-1 |
C |
unreliable |
|
2 |
1913d |
1913d
|
20/29 |
1833d |
048c96e28674
media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate
|
|
memory leak in zr364xx_probe
usb
media
|
3 |
C |
|
|
6 |
1887d |
1940d
|
20/29 |
1833d |
ea354b6ddd6f
media: zr364xx: fix memory leaks in probe()
|
|
linux-next test error: possible deadlock in cfg80211_netdev_notifier_call
wireless
|
-1 |
|
|
|
6 |
1905d |
1905d
|
20/29 |
1833d |
38ec7c6b6bd6
virt_wifi: fix deadlock on RTNL
|
|
KASAN: use-after-free Read in usb_audio_disconnect
sound
usb
|
19 |
C |
done |
|
15 |
1863d |
1864d
|
20/29 |
1833d |
c5aa956eaeb0
ALSA: usb-audio: fix use after free in usb_audio_disconnect
|
|
WARNING in pstore_kill_sb
arm
|
-1 |
|
|
|
1 |
1892d |
1888d
|
20/29 |
1833d |
9c7d83ae6ba6
pstore: Fix warning in pstore_kill_sb()
|
|
UBSAN: shift-out-of-bounds in chkSuper
jfs
|
-1 |
C |
unreliable |
|
28 |
1881d |
1947d
|
20/29 |
1833d |
3bef198f1b17
JFS: more checks for invalid superblock
|
|
KCSAN: data-race in __bpf_lru_list_rotate / bpf_lru_push_free (2)
bpf
|
6 |
|
|
|
32 |
1887d |
1956d
|
20/29 |
1833d |
6df8fb83301d
bpf_lru_list: Read double-checked variable once without lock
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run3
bpf
trace
|
17 |
C |
done |
|
6 |
1889d |
1991d
|
20/29 |
1833d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_recv
media
usb
|
-1 |
C |
|
|
13 |
1880d |
1944d
|
20/29 |
1833d |
1b43bad31fb0
media: mceusb: Fix potential out-of-bounds shift
|
|
memory leak in video_usercopy
media
|
3 |
C |
|
|
19 |
1881d |
1944d
|
20/29 |
1833d |
fb18802a338b
media: v4l: ioctl: Fix memory leak in video_usercopy
|
|
BUG: sleeping function called from invalid context in rxe_alloc_nl
rdma
|
5 |
C |
done |
|
475 |
1899d |
1913d
|
20/29 |
1833d |
c4369575b2bc
RDMA/rxe: Fix bug in rxe_alloc()
|
|
WARNING in __alloc_skb
arm-msm
net
|
-1 |
C |
error |
|
24 |
1864d |
1876d
|
20/29 |
1833d |
093b036aa94e
net/qrtr: fix __netdev_alloc_skb call
|
|
WARNING in iov_iter_revert (2)
serial
|
-1 |
C |
done |
|
9 |
1884d |
1885d
|
20/29 |
1833d |
3342ff2698e9
tty: protect tty_write from odd low-level tty disciplines
|
|
WARNING in cfg80211_change_iface
wireless
|
-1 |
C |
inconclusive |
|
4 |
1899d |
1904d
|
20/29 |
1833d |
bae173563cbf
wext: call cfg80211_change_iface() with wiphy lock held
|
|
general protection fault in tomoyo_socket_sendmsg_permission
usb
|
8 |
|
|
|
17 |
1890d |
1980d
|
20/29 |
1833d |
9380afd6df70
usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
718ad9693e36
usbip: fix vhci_hcd attach_store() races leading to gpf
46613c9dfa96
usbip: fix vudc usbip_sockfd_store races leading to gpf
|
|
memory leak in edge_startup
usb
|
3 |
C |
|
|
1 |
1876d |
1872d
|
20/29 |
1833d |
cfdc67acc785
USB: serial: io_edgeport: fix memory leak in edge_startup
|
|
unexpected kernel reboot (3)
input
usb
|
-1 |
C |
error |
error |
21132 |
1833d |
2834d
|
20/29 |
1833d |
c8e2fe13d1d1
x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
|
|
WARNING in qp_broker_alloc
kernel
|
-1 |
C |
inconclusive |
|
24 |
1878d |
1914d
|
20/29 |
1833d |
2fd10bcf0310
drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
|
|
WARNING in sk_stream_kill_queues (5)
net
|
-1 |
C |
done |
|
4684 |
1833d |
1963d
|
20/29 |
1833d |
097b9146c0e2
net: fix up truesize of cloned skb in skb_prepare_for_shift()
|
|
BUG: unable to handle kernel paging request in bpf_trace_run3
bpf
trace
|
8 |
C |
done |
|
40 |
1880d |
2002d
|
20/29 |
1833d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
KASAN: null-ptr-deref Write in event_handler
usb
|
12 |
C |
done |
|
2869 |
1872d |
2019d
|
20/29 |
1833d |
9380afd6df70
usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
718ad9693e36
usbip: fix vhci_hcd attach_store() races leading to gpf
46613c9dfa96
usbip: fix vudc usbip_sockfd_store races leading to gpf
|
|
KASAN: use-after-free Read in nbd_genl_connect
nbd
|
19 |
C |
inconclusive |
|
16 |
1864d |
1879d
|
20/29 |
1833d |
c9a2f90f4d6b
nbd: handle device refs for DESTROY_ON_DISCONNECT properly
|
|
WARNING in cfg80211_dev_rename
wireless
|
-1 |
C |
inconclusive |
|
22 |
1898d |
1904d
|
20/29 |
1833d |
0391a45c8007
nl80211: call cfg80211_dev_rename() under RTNL
|
|
general protection fault in gfs2_withdraw
gfs2
|
8 |
C |
done |
|
81 |
1881d |
2029d
|
20/29 |
1833d |
d5bf630f355d
gfs2: bypass signal_our_withdraw if no journal
|
|
KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data
bluetooth
|
12 |
C |
done |
|
185 |
1884d |
2085d
|
20/29 |
1833d |
e8bd76ede155
Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
|
|
possible deadlock in io_poll_double_wake (2)
io-uring
fs
|
4 |
C |
error |
error |
431 |
1833d |
2026d
|
20/29 |
1833d |
1c3b3e6527e5
io_uring: ignore double poll add on the same waitqueue head
|
|
WARNING in _cfg80211_unregister_wdev
wireless
|
-1 |
C |
inconclusive |
|
48 |
1898d |
1904d
|
20/29 |
1833d |
776a39b8196d
cfg80211: call cfg80211_destroy_ifaces() with wiphy lock held
|
|
INFO: task can't die in io_sq_thread_finish
ext4
|
1 |
syz |
|
|
137 |
1844d |
1876d
|
20/29 |
1833d |
eb85890b29e4
io_uring: ensure SQPOLL startup is triggered before error shutdown
|
|
WARNING in dst_release
net
|
-1 |
syz |
done |
|
2 |
1885d |
1884d
|
20/29 |
1833d |
e0be4931f3fe
mptcp: reset last_snd on subflow close
|
|
BUG: sleeping function called from invalid context in mm_access
mm
|
5 |
C |
done |
|
684 |
1917d |
1920d
|
20/29 |
1833d |
38e891849003
kbuild: lto: fix module versioning
|
|
KASAN: use-after-free Read in skb_segment
net
|
19 |
C |
error |
|
55 |
1911d |
1915d
|
20/29 |
1833d |
00b229f762b0
net: fix GSO for SG-enabled devices
|
|
inconsistent lock state in io_dismantle_req
fs
io-uring
|
4 |
C |
|
|
2 |
1900d |
1900d
|
20/29 |
1833d |
9ae1f8dd372e
io_uring: fix inconsistent lock state
|
|
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page
kvm-x86
|
8 |
syz |
error |
|
2 |
2596d |
2607d
|
20/29 |
1854d |
47c42e6b4192
KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
|
|
kernel BUG in memory_bm_free
pm
|
-1 |
|
|
|
72 |
1898d |
1898d
|
20/29 |
1858d |
91cb2c8b072e
arm64: Do not pass tagged addresses to __is_lm_address()
|
|
KASAN: slab-out-of-bounds Read in squashfs_get_id
squashfs
|
17 |
C |
error |
done |
77 |
1893d |
2029d
|
20/29 |
1862d |
e812cbbbbbb1
squashfs: avoid out of bounds writes in decompressors
|
|
UBSAN: shift-out-of-bounds in tcf_police_init
net
|
-1 |
C |
unreliable |
|
8 |
1913d |
1949d
|
20/29 |
1862d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
UBSAN: shift-out-of-bounds in est_timer
net
|
-1 |
C |
unreliable |
|
73 |
1872d |
1946d
|
20/29 |
1862d |
dd5e073381f2
net_sched: gen_estimator: support large ewma log
|
|
memory leak in xskq_create
bpf
net
|
3 |
C |
|
|
7 |
1929d |
1950d
|
19/29 |
1864d |
8bee68338408
xsk: Fix memory leak for failed bind
|
|
BUG: sleeping function called from invalid context in corrupted
wireless
|
5 |
syz |
done |
|
18 |
1960d |
1984d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
WARNING in md_ioctl
raid
|
-1 |
C |
done |
error |
684 |
1948d |
2909d
|
19/29 |
1864d |
c731b84b51bf
md: fix a warning caused by a race between concurrent md_ioctl()s
|
|
BUG: unable to handle kernel paging request in htab_map_alloc (2)
bpf
|
8 |
C |
unreliable |
|
8 |
1950d |
1959d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
general protection fault in io_sqe_files_unregister
fs
|
2 |
|
|
|
2 |
1925d |
1923d
|
19/29 |
1864d |
3e2224c5867f
io_uring: Fix return value from alloc_fixed_file_ref_node
|
|
UBSAN: shift-out-of-bounds in __detect_linklayer
net
|
-1 |
C |
unreliable |
done |
31 |
1912d |
1918d
|
19/29 |
1864d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
BUG: receive list entry not found for dev vxcan1, id 003, mask C00007FF
can
|
-1 |
C |
unreliable |
|
2 |
1968d |
1968d
|
19/29 |
1864d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
UBSAN: shift-out-of-bounds in tcindex_set_parms
net
|
-1 |
C |
unreliable |
done |
45 |
1912d |
1947d
|
19/29 |
1864d |
bcd0cf19ef82
net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
|
|
kernel BUG at mm/page-writeback.c:LINE!
fs
mm
|
-1 |
|
|
|
1 |
1933d |
1929d
|
19/29 |
1864d |
c2407cf7d22d
mm: make wait_on_page_writeback() wait for multiple pending writebacks
|
|
WARNING in io_uring_flush
fs
io-uring
|
-1 |
C |
unreliable |
|
10 |
1908d |
1917d
|
19/29 |
1864d |
4325cb498cb7
io_uring: fix uring_flush in exit_files() warning
|
|
general protection fault in rose_send_frame
|
2 |
C |
done |
done |
664 |
1974d |
2653d
|
19/29 |
1864d |
3b3fd068c56e
rose: Fix Null pointer dereference in rose_send_frame()
|
|
general protection fault in taprio_dequeue_soft
net
|
2 |
C |
done |
|
2 |
1948d |
1948d
|
19/29 |
1864d |
44d4775ca518
net/sched: sch_taprio: reset child qdiscs before freeing them
|
|
BUG: unable to handle kernel paging request in bpf_lru_populate
bpf
|
8 |
C |
done |
|
12 |
1950d |
1956d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
bpf test error: BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
-1 |
|
|
|
6 |
1973d |
1979d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
KASAN: slab-out-of-bounds Read in hci_le_meta_evt
bluetooth
|
17 |
C |
error |
error |
45 |
1961d |
2082d
|
19/29 |
1864d |
f7e0e8b2f1b0
Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
|
|
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy
wireless
|
12 |
|
|
|
11 |
1883d |
1960d
|
19/29 |
1864d |
905b2032fa42
mac80211: mesh: fix mesh_pathtbl_init() error path
|
|
KASAN: use-after-free Read in disk_part_iter_next
block
|
19 |
C |
unreliable |
|
243 |
1864d |
1952d
|
19/29 |
1864d |
aebf5db91705
block: fix use-after-free in disk_part_iter_next
|
|
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2)
|
-1 |
C |
done |
|
640 |
1928d |
2045d
|
19/29 |
1864d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
kernel BUG at net/core/dev.c:NUM!
net
|
-1 |
C |
done |
|
35 |
1918d |
1919d
|
19/29 |
1864d |
47e4bb147a96
net: sit: unregister_netdevice on newlink's error path
|
|
KASAN: use-after-free Read in search_by_entry_key
fs
|
19 |
C |
done |
|
3 |
2012d |
2016d
|
19/29 |
1864d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
KCSAN: data-race in snd_rawmidi_transmit / snd_rawmidi_write
sound
|
6 |
|
|
|
232 |
1897d |
2073d
|
19/29 |
1864d |
88a06d6fd6b3
ALSA: rawmidi: Access runtime->avail always in spinlock
|
|
UBSAN: shift-out-of-bounds in f2fs_fill_super
f2fs
|
-1 |
C |
|
|
4 |
1955d |
1954d
|
19/29 |
1864d |
e584bbe82122
f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
|
|
KASAN: global-out-of-bounds Read in smc_nl_get_sys_info
smc
|
17 |
C |
error |
|
27 |
1916d |
1943d
|
19/29 |
1864d |
25fe2c9c4cd2
smc: fix out of bound access in smc_nl_get_sys_info()
|
|
KASAN: use-after-free Read in btrfs_scan_one_device
btrfs
|
19 |
C |
error |
|
70 |
1968d |
2034d
|
19/29 |
1864d |
0697d9a61099
btrfs: don't access possibly stale fs_info data for printing duplicate device
|
|
memory leak in prepare_creds
lsm
|
3 |
C |
|
|
10 |
1884d |
2058d
|
19/29 |
1864d |
f26c08b444df
io_uring: fix file leak on error path of io ctx creation
|
|
WARNING in percpu_ref_kill_and_confirm (2)
fs
|
-1 |
C |
done |
|
71 |
1939d |
1947d
|
19/29 |
1864d |
9faadcc8abe4
io_uring: fix double io_uring free
|
|
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anywa
bfs
|
-1 |
C |
unreliable |
|
1 |
1960d |
1956d
|
19/29 |
1864d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
general protection fault in ieee80211_subif_start_xmit
wireless
|
2 |
C |
unreliable |
|
29 |
1903d |
1970d
|
19/29 |
1864d |
054c9939b480
mac80211: pause TX while changing interface type
|
|
WARNING in rds_rdma_extra_size
mm
|
-1 |
C |
done |
|
165 |
1899d |
1923d
|
19/29 |
1864d |
a11148e6fcce
net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
|
|
KASAN: use-after-free Read in decode_session6
net
|
19 |
C |
done |
|
152 |
1910d |
2117d
|
19/29 |
1864d |
0356010d825e
sctp: bring inet(6)_skb_parm back to sctp_input_cb
|
|
WARNING: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
|
-1 |
|
|
|
2 |
1977d |
1972d
|
19/29 |
1864d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
divide error in __tcp_select_window
net
|
2 |
C |
done |
|
1119 |
1967d |
1972d
|
19/29 |
1864d |
fd8976790a6c
mptcp: be careful on MPTCP-level ack.
|
|
WARNING: suspicious RCU usage in kernfs_iop_permission
kernfs
|
4 |
C |
done |
|
1 |
1900d |
1900d
|
19/29 |
1864d |
b854cc659dcb
ovl: avoid deadlock on directory ioctl
|
|
KMSAN: uninit-value in INET_ECN_decapsulate
net
|
7 |
|
|
|
3 |
1931d |
1963d
|
19/29 |
1864d |
4179b00c04d1
geneve: pull IP header before ECN decapsulation
|
|
WARNING in io_ring_ctx_wait_and_kill
fs
|
-1 |
C |
done |
|
9 |
1918d |
1919d
|
19/29 |
1864d |
06585c497b55
io_uring: do sqo disable on install_fd error
|
|
WARNING in mc1NUM_get_time
rtc
|
-1 |
|
|
|
13 |
1895d |
1896d
|
19/29 |
1864d |
ebb22a059436
rtc: mc146818: Dont test for bit 0-5 in Register D
|
|
INFO: task hung in lock_sock_nested (4)
mptcp
|
1 |
C |
done |
|
6 |
1915d |
1962d
|
19/29 |
1864d |
05e3ecea4a63
mptcp: avoid potential infinite loop in mptcp_recvmsg()
|
|
UBSAN: shift-out-of-bounds in choke_enqueue
net
|
-1 |
C |
inconclusive |
|
3853 |
1864d |
1956d
|
19/29 |
1864d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
WARNING: suspicious RCU usage in get_wiphy_regdom
wireless
|
4 |
C |
done |
|
5031 |
1915d |
1947d
|
19/29 |
1864d |
51d62f2f2c50
cfg80211: Save the regulatory domain with a lock
|
|
WARNING: suspicious RCU usage in tcp_disconnect
net
|
4 |
C |
done |
|
25 |
1918d |
1919d
|
19/29 |
1864d |
13a9499e8333
mptcp: fix locking in mptcp_disconnect()
|
|
WARNING in spi_register_controller
usb
spi
|
-1 |
C |
|
|
1848 |
1947d |
2561d
|
19/29 |
1864d |
9c60cc797cf7
media: msi2500: assign SPI bus number dynamically
|
|
KMSAN: uninit-value in __nla_validate_parse (2)
net
|
7 |
C |
|
|
2 |
1925d |
1921d
|
19/29 |
1864d |
c96adff95619
cls_flower: call nla_ok() before nla_next()
|
|
INFO: task hung in __io_uring_files_cancel
io-uring
fs
|
1 |
C |
done |
|
30 |
1905d |
1972d
|
19/29 |
1864d |
bee749b187ac
io_uring: fix files cancellation
|
|
general protection fault in xsk_recvmsg
bpf
net
|
2 |
C |
done |
unreliable |
1800 |
1948d |
1918d
|
19/29 |
1864d |
3546b9b8eced
xsk: Validate socket state in xsk_recvmsg, prior touching socket members
|
|
KASAN: use-after-free Write in rtl_fw_do_work (2)
wireless
|
22 |
|
|
|
4 |
1948d |
1954d
|
19/29 |
1864d |
4dfde294b979
rtlwifi: rise completion at the last step of firmware callback
|
|
UBSAN: shift-out-of-bounds in sfq_init
net
|
-1 |
C |
unreliable |
|
8 |
1927d |
1941d
|
19/29 |
1864d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
memory leak in h5_rx_pkt_start
bluetooth
|
3 |
C |
|
|
5 |
2061d |
2404d
|
19/29 |
1864d |
70f259a3f427
Bluetooth: hci_h5: close serdev device and free hu in h5_close
855af2d74c87
Bluetooth: hci_h5: fix memory leak in h5_close
|
|
kernel BUG at lib/string.c:LINE! (6)
netfilter
|
-1 |
C |
done |
|
2 |
1945d |
1941d
|
19/29 |
1864d |
6cb56218ad9e
netfilter: xt_RATEEST: reject non-null terminated string from userspace
|
|
kernel BUG at include/linux/highmem.h:LINE!
mm
|
-1 |
C |
error |
|
32 |
1967d |
1972d
|
19/29 |
1864d |
0060ef3b4e6d
mm: support THPs in zero_user_segments
|
|
UBSAN: shift-out-of-bounds in dummy_hub_control
usb
|
-1 |
C |
done |
|
5 |
1940d |
1938d
|
19/29 |
1864d |
c318840fb2a4
USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
|
|
KASAN: use-after-free Read in reiserfs_fill_super
fs
|
19 |
C |
error |
done |
2 |
1958d |
1956d
|
19/29 |
1864d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
KASAN: vmalloc-out-of-bounds Write in pcpu_freelist_populate
bpf
|
21 |
|
|
|
6 |
1952d |
1956d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
BUG: unable to handle kernel NULL pointer dereference in kcsan_setup_watchpoint
kasan
|
10 |
|
|
|
128 |
1994d |
2003d
|
19/29 |
1864d |
55a2346c7ac4
kcsan: Never set up watchpoints on NULL pointers
|
|
BUG: unable to handle kernel paging request in percpu_ref_exit
fs
|
8 |
C |
done |
|
3 |
1925d |
1923d
|
19/29 |
1864d |
3e2224c5867f
io_uring: Fix return value from alloc_fixed_file_ref_node
|
|
KMSAN: uninit-value in gre_parse_header
net
|
7 |
C |
|
|
9283 |
1891d |
2489d
|
19/29 |
1864d |
085c7c4e1c0e
erspan: fix version 1 check in gre_parse_header()
|
|
UBSAN: shift-out-of-bounds in red_adaptative_timer
net
|
-1 |
C |
unreliable |
|
260 |
1864d |
1956d
|
19/29 |
1864d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KASAN: slab-out-of-bounds Write in xfrm_attr_cpy32
net
|
21 |
C |
done |
|
106 |
1953d |
2001d
|
19/29 |
1864d |
d1949d045fd6
xfrm/compat: memset(0) 64-bit padding at right place
|
|
WARNING in squashfs_read_table
mm
squashfs
|
-1 |
C |
inconclusive |
|
50 |
1894d |
1923d
|
19/29 |
1864d |
506220d2ba21
squashfs: add more sanity checks in xattr id lookup
|
|
BUG: receive list entry not found for dev vcan0, id 002, mask C00007FF
can
|
-1 |
C |
unreliable |
|
5 |
1968d |
1968d
|
19/29 |
1864d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
UBSAN: shift-out-of-bounds in parse_audio_format_i
usb
sound
|
-1 |
C |
error |
|
19 |
1949d |
1954d
|
19/29 |
1864d |
175b8d89fe29
ALSA: pcm: oss: Fix potential out-of-bounds shift
43d5ca88dfcd
ALSA: usb-audio: Fix potential out-of-bounds shift
|
|
INFO: task can't die in io_sq_thread_stop
fs
|
1 |
|
|
|
1 |
1982d |
1978d
|
19/29 |
1864d |
65b2b213484a
io_uring: check kthread stopped flag when sq thread is unparked
|
|
UBSAN: array-index-out-of-bounds in dquot_resume
ext4
|
15 |
C |
done |
|
1 |
1958d |
1956d
|
19/29 |
1864d |
e51d68e76d60
fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode()
|
|
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
bfs
|
-1 |
C |
done |
|
11 |
1958d |
2026d
|
19/29 |
1864d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
KASAN: use-after-free Read in htab_map_alloc
bpf
|
19 |
C |
done |
|
38 |
1991d |
1994d
|
19/29 |
1864d |
8aaeed81fcb9
bpf: Fix error path in htab_map_alloc()
|
|
general protection fault in io_disable_sqo_submit
fs
io-uring
|
2 |
C |
done |
|
124 |
1915d |
1919d
|
19/29 |
1864d |
b4411616c26f
io_uring: fix null-deref in io_disable_sqo_submit
|
|
BUG: unable to handle kernel paging request in htab_free_elems
bpf
|
8 |
|
|
|
1 |
1957d |
1957d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
KASAN: null-ptr-deref Write in bdi_put
|
12 |
C |
done |
done |
601 |
1920d |
1954d
|
19/29 |
1864d |
2d2f6f1b4799
block: pre-initialize struct block_device in bdev_alloc_inode
|
|
general protection fault in rose_transmit_clear_request
kernel
|
2 |
C |
done |
|
5 |
1992d |
2458d
|
19/29 |
1864d |
3b3fd068c56e
rose: Fix Null pointer dereference in rose_send_frame()
|
|
kernel BUG at net/core/skbuff.c:LINE! (3)
|
-1 |
C |
done |
|
4399 |
1879d |
2996d
|
19/29 |
1864d |
afbc293add64
af_key: relax availability checks for skb size calculation
|
|
UBSAN: shift-out-of-bounds in __red_change
net
|
-1 |
C |
unreliable |
|
24 |
1867d |
1955d
|
19/29 |
1864d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KASAN: vmalloc-out-of-bounds Write in htab_map_alloc
bpf
|
21 |
|
|
|
6 |
1951d |
1960d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
KASAN: use-after-free Read in rxrpc_get_skb
afs
net
|
19 |
|
|
|
1 |
1911d |
1907d
|
19/29 |
1864d |
7b5eab57cac4
rxrpc: Fix clearance of Tx/Rx ring when releasing a call
|
|
WARNING in io_uring_cancel_task_requests
io-uring
fs
|
-1 |
syz |
done |
|
69 |
1900d |
1904d
|
19/29 |
1864d |
70b2c60d3797
io_uring: fix sqo ownership false positive warning
|
|
upstream test error: BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
-1 |
|
|
|
53 |
1974d |
1983d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
kernel BUG at fs/notify/dnotify/dnotify.c:LINE! (2)
fuse
|
-1 |
C |
inconclusive |
|
2 |
1965d |
1970d
|
19/29 |
1864d |
5d069dbe8aaf
fuse: fix bad inode
|
|
BUG: receive list entry not found for dev vcan0, id 001, mask C00007FF
can
|
-1 |
C |
unreliable |
|
5 |
1971d |
1970d
|
19/29 |
1864d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
inconsistent lock state in io_file_data_ref_zero
fs
|
4 |
C |
done |
|
7152 |
1946d |
1970d
|
19/29 |
1864d |
ac0648a56c1f
io_uring: use bottom half safe lock for fixed file data
|
|
unregister_netdevice: waiting for DEV to become free (4)
|
2 |
C |
done |
|
50394 |
1864d |
2066d
|
19/29 |
1864d |
5399d52233c4
rxrpc: Fix deadlock around release of dst cached on udp tunnel
|
|
WARNING in bpf_prog_test_run_raw_tp
mm
|
-1 |
C |
done |
|
36 |
1912d |
1923d
|
19/29 |
1864d |
7ac6ad051150
bpf: Reject too big ctx_size_in for raw_tp test run
|
|
UBSAN: shift-out-of-bounds in gred_change
net
|
-1 |
C |
unreliable |
|
5 |
1877d |
1932d
|
19/29 |
1864d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
BUG: corrupted list in io_file_get
fs
io-uring
|
8 |
C |
done |
|
3 |
1904d |
1904d
|
19/29 |
1864d |
f609cbb8911e
io_uring: fix list corruption for splice file_get
|
|
linux-next test error: BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
-1 |
|
|
|
3 |
1984d |
1988d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
WARNING in io_wq_submit_work
fs
|
-1 |
|
|
|
4 |
1911d |
1915d
|
19/29 |
1864d |
ca70f00bed6c
io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
|
|
UBSAN: shift-out-of-bounds in option_probe
usb
|
-1 |
C |
error |
|
22 |
1953d |
1954d
|
19/29 |
1864d |
a251963f76fa
USB: serial: option: add interface-number sanity check to flag handling
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl
kernel
|
9 |
C |
|
|
22 |
1892d |
1976d
|
19/29 |
1864d |
31dcb6c30a26
misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
|
|
general protection fault in jffs2_parse_param
jffs2
|
2 |
C |
error |
done |
1632 |
1945d |
2033d
|
19/29 |
1864d |
a61df3c413e4
jffs2: Fix NULL pointer dereference in rp_size fs option parsing
|
|
KMSAN: uninit-value in number (2)
can
|
7 |
C |
|
|
168 |
1864d |
2243d
|
19/29 |
1864d |
c8c958a58fc6
can: af_can: prevent potential access of uninitialized member in can_rcv()
9aa9379d8f86
can: af_can: prevent potential access of uninitialized member in canfd_rcv()
|
|
net test error: BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
-1 |
|
|
|
4 |
1981d |
1988d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
possible deadlock in send_sigio (2)
fs
|
4 |
C |
done |
done |
40 |
1933d |
2045d
|
19/29 |
1864d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
kernel BUG at fs/reiserfs/prints.c:LINE!
fs
|
-1 |
C |
done |
done |
5 |
1954d |
2033d
|
19/29 |
1864d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
KASAN: vmalloc-out-of-bounds Write in lzo_uncompress
squashfs
|
21 |
C |
done |
|
8 |
1894d |
1919d
|
19/29 |
1864d |
e812cbbbbbb1
squashfs: avoid out of bounds writes in decompressors
|
|
KASAN: slab-out-of-bounds Read in smc_nl_handle_smcr_dev
smc
|
17 |
|
|
|
1 |
1946d |
1942d
|
19/29 |
1864d |
995433b795ce
net/smc: fix access to parent of an ib device
|
|
BUG: unable to handle kernel paging request in pcpu_freelist_populate
bpf
|
8 |
C |
unreliable |
|
42 |
1949d |
1960d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
UBSAN: array-index-out-of-bounds in alg_bind
crypto
|
15 |
C |
error |
|
700 |
1949d |
2008d
|
19/29 |
1864d |
92eb6c3060eb
crypto: af_alg - avoid undefined behavior accessing salg_name
|
|
net-next test error: BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
-1 |
|
|
|
12 |
1974d |
1983d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
general protection fault in gfs2_ri_update
gfs2
|
2 |
|
|
|
1 |
1977d |
1973d
|
19/29 |
1864d |
778721510e84
gfs2: check for empty rgrp tree in gfs2_ri_update
|
|
memory leak in rxrpc_lookup_local
net
afs
|
3 |
C |
|
|
1415 |
1903d |
2368d
|
19/29 |
1864d |
b8323f7288ab
rxrpc: Fix memory leak in rxrpc_lookup_local
|
|
WARNING: suspicious RCU usage in wiphy_apply_custom_regulatory
wireless
|
4 |
C |
done |
|
28 |
1947d |
1944d
|
19/29 |
1864d |
51d62f2f2c50
cfg80211: Save the regulatory domain with a lock
|
|
memory leak in generic_parse_monolithic
fs
|
3 |
C |
|
|
11 |
1954d |
1980d
|
19/29 |
1864d |
4cb682964706
afs: Fix memory leak when mounting with multiple source parameters
|
|
WARNING in mptcp_reset_timer
mptcp
|
-1 |
C |
unreliable |
|
1307 |
1881d |
1975d
|
19/29 |
1864d |
b680a214ec28
mptcp: update rtx timeout only if required.
|
|
KASAN: slab-out-of-bounds Write in record_print_text
fs
|
21 |
C |
done |
unreliable |
17 |
1904d |
1907d
|
19/29 |
1864d |
08d60e599954
printk: fix string termination for record_print_text()
|
|
WARNING in xfrm_alloc_compat
net
|
-1 |
C |
done |
|
130 |
1876d |
1998d
|
19/29 |
1864d |
dbd7ae5154d5
xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
|
|
UBSAN: shift-out-of-bounds in red_enqueue
net
|
-1 |
C |
unreliable |
|
4906 |
1864d |
1956d
|
19/29 |
1864d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KMSAN: kernel-infoleak in move_addr_to_user (4)
net
|
9 |
C |
|
|
59 |
1870d |
1922d
|
19/29 |
1864d |
b42b3a2744b3
can: isotp: isotp_getname(): fix kernel information leak
|
|
general protection fault in ext4_commit_super
ext4
|
2 |
C |
done |
|
4 |
1942d |
1941d
|
19/29 |
1864d |
c92dc856848f
ext4: defer saving error info from atomic context
|
|
UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn
trace
|
15 |
C |
done |
|
604 |
1957d |
2034d
|
19/29 |
1864d |
12cb908a11b2
x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes
84da009f06e6
x86/sev-es: Use new for_each_insn_prefix() macro to loop over prefixes bytes
4e9a5ae8df5b
x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
|
|
BUG: unable to handle kernel NULL pointer dereference in call_rcu
kernel
|
10 |
C |
done |
|
85 |
1934d |
1937d
|
19/29 |
1864d |
13384f6125ad
kasan: fix null pointer dereference in kasan_record_aux_stack
|
|
KASAN: vmalloc-out-of-bounds Read in htab_free_elems
bpf
|
17 |
C |
unreliable |
|
7 |
1957d |
1958d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
BUG: receive list entry not found for dev vxcan1, id 002, mask C00007FF
can
|
-1 |
C |
unreliable |
|
3 |
1968d |
1970d
|
19/29 |
1864d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
WARNING in rhashtable_free_and_destroy
wireless
|
-1 |
C |
error |
|
3 |
1960d |
2052d
|
19/29 |
1864d |
905b2032fa42
mac80211: mesh: fix mesh_pathtbl_init() error path
|
|
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow
fs
|
10 |
C |
inconclusive |
done |
3 |
1886d |
2026d
|
19/29 |
1864d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
5 |
C |
done |
|
39248 |
1958d |
1990d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
UBSAN: shift-out-of-bounds in strset_parse_request
net
|
-1 |
C |
done |
|
16 |
1927d |
1950d
|
19/29 |
1864d |
efb796f5571f
ethtool: fix string set id check
|
|
KASAN: slab-out-of-bounds Read in btrfs_scan_one_device
btrfs
|
17 |
C |
done |
done |
1 |
1987d |
1983d
|
19/29 |
1864d |
0697d9a61099
btrfs: don't access possibly stale fs_info data for printing duplicate device
|
|
WARNING in qrtr_tun_write_iter
mm
|
-1 |
C |
error |
|
57 |
1891d |
1922d
|
19/29 |
1864d |
2a80c1581237
net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
|
|
memory leak in hub_event
usb
|
3 |
C |
|
|
7 |
1884d |
1973d
|
19/29 |
1864d |
e469d0b09a19
media: gspca: Fix memory leak in probe
|
|
KASAN: invalid-access Read in kmem_cache_destroy
f2fs
|
17 |
|
|
|
2 |
1901d |
1905d
|
19/29 |
1864d |
757fed1d0898
Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
|
|
possible deadlock in send_sigurg (2)
fs
|
4 |
C |
done |
|
25 |
1951d |
2001d
|
19/29 |
1864d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
possible deadlock in ovl_dir_real_file
overlayfs
|
4 |
|
|
|
1 |
1900d |
1900d
|
19/29 |
1864d |
b854cc659dcb
ovl: avoid deadlock on directory ioctl
|
|
WARNING in yurex_write/usb_submit_urb
usb
|
-1 |
C |
error |
|
78 |
1922d |
1951d
|
19/29 |
1864d |
372c93131998
USB: yurex: fix control-URB timeout handling
|
|
kernel BUG at fs/ext4/inode.c:LINE!
ext4
|
-1 |
C |
done |
|
9 |
1933d |
2059d
|
19/29 |
1864d |
073861ed77b6
mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
|
|
KCSAN: data-race in snd_rawmidi_poll / snd_rawmidi_proceed
sound
|
6 |
|
|
|
378 |
1948d |
2074d
|
19/29 |
1864d |
88a06d6fd6b3
ALSA: rawmidi: Access runtime->avail always in spinlock
|
|
UBSAN: shift-out-of-bounds in cbq_dequeue
net
|
-1 |
C |
unreliable |
|
27 |
1912d |
1956d
|
19/29 |
1864d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
bpf-next test error: BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
-1 |
|
|
|
13 |
1959d |
1979d
|
19/29 |
1864d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
KASAN: use-after-free Write in __sco_sock_close
bluetooth
|
22 |
C |
done |
done |
10 |
1985d |
2083d
|
19/29 |
1864d |
6dfccd13db2f
Bluetooth: Fix null pointer dereference in hci_event_packet()
|
|
BUG: unable to handle kernel paging request in dqput
ext4
|
8 |
C |
done |
|
7 |
1958d |
2028d
|
19/29 |
1864d |
11c514a99bb9
quota: Sanity-check quota file headers on load
|
|
KMSAN: uninit-value in snd_seq_oss_synth_make_info (2)
sound
|
7 |
|
|
|
1 |
1922d |
1917d
|
19/29 |
1864d |
217bfbb8b0bf
ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
|
|
UBSAN: shift-out-of-bounds in intel_pmu_refresh
kvm-x86
|
-1 |
C |
unreliable |
|
1237 |
1904d |
1954d
|
19/29 |
1864d |
e61ab2a320c3
KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
|
|
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info
sound
usb
|
-1 |
C |
error |
|
9 |
1921d |
1941d
|
19/29 |
1864d |
c06ccf3ebb75
ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
|
|
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked
sound
|
-1 |
C |
unreliable |
|
225 |
1940d |
1954d
|
19/29 |
1864d |
11cb881bf075
ALSA: pcm: oss: Fix a few more UBSAN fixes
|
|
UBSAN: shift-out-of-bounds in ext4_fill_super
ext4
|
-1 |
C |
unreliable |
|
88 |
1939d |
1954d
|
19/29 |
1864d |
c9200760da8a
ext4: check for invalid block size early when mounting a file system
|
|
INFO: rcu detected stall in tipc_release
tipc
|
1 |
C |
done |
done |
4 |
1974d |
2110d
|
19/29 |
1864d |
cc00bcaa5899
netfilter: x_tables: Switch synchronization to RCU
|
|
UBSAN: shift-out-of-bounds in vhci_hub_control
usb
|
-1 |
C |
unreliable |
|
4 |
1904d |
1940d
|
19/29 |
1864d |
718bf42b119d
usb: usbip: vhci_hcd: protect shift size
|
|
WARNING: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
|
-1 |
|
|
|
2 |
1970d |
1966d
|
19/29 |
1864d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
general protection fault in tower_disconnect
usb
|
2 |
C |
|
|
53 |
1947d |
1955d
|
19/29 |
1864d |
b175d273d4e4
USB: legotower: fix logical error in recent commit
|
|
kernel BUG at drivers/dma-buf/dma-buf.c:LINE!
dri
media
|
-1 |
syz |
error |
done |
11 |
1981d |
2231d
|
19/29 |
1864d |
e722a295cf49
staging: ion: remove from the tree
|
|
WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
|
-1 |
|
|
|
4 |
1977d |
2026d
|
19/29 |
1864d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue (3)
sound
|
6 |
|
|
|
111 |
1949d |
2094d
|
19/29 |
1864d |
4ebd47037027
ALSA: seq: Use bool for snd_seq_queue internal flags
|
|
KMSAN: uninit-value in x25_bind
x25
|
7 |
|
|
|
2 |
1925d |
1947d
|
19/29 |
1864d |
6ee50c8e262a
net/x25: prevent a couple of overflows
|
|
memory leak in wacom_probe
input
usb
|
3 |
C |
|
|
26 |
1927d |
1981d
|
19/29 |
1864d |
37309f47e2f5
HID: wacom: Fix memory leakage caused by kfifo_alloc
|
|
KASAN: use-after-free Read in service_outstanding_interrupt
usb
|
19 |
C |
|
|
28 |
1923d |
2078d
|
19/29 |
1864d |
5e5ff0b4b6bc
USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
|
|
general protection fault in call_commit_handler
|
2 |
C |
done |
|
428 |
1920d |
2001d
|
19/29 |
1864d |
5122565188ba
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
|
|
BUG: unable to handle kernel paging request in smc_nl_handle_smcr_dev
smc
|
8 |
C |
|
|
16 |
1933d |
1955d
|
19/29 |
1864d |
995433b795ce
net/smc: fix access to parent of an ib device
|
|
KASAN: vmalloc-out-of-bounds Write in bpf_lru_populate
bpf
|
21 |
C |
unreliable |
|
19 |
1950d |
1960d
|
19/29 |
1864d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
memory leak in copy_process
kernel
|
3 |
C |
|
|
23 |
1881d |
1978d
|
19/29 |
1864d |
450677dcb0cc
mm/madvise: fix memory leak from process_madvise
|
|
UBSAN: shift-out-of-bounds in kvm_vcpu_after_set_cpuid
kvm-x86
|
-1 |
|
|
|
2 |
1947d |
1941d
|
19/29 |
1864d |
2f80d502d627
KVM: x86: fix shift out of bounds reported by UBSAN
|
|
KASAN: stack-out-of-bounds Write in bitmap_from_arr32
net
|
21 |
C |
done |
|
2 |
1967d |
1963d
|
19/29 |
1864d |
a770bf515613
ethtool: fix stack overflow in ethnl_parse_bitset()
|
|
WARNING: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
|
-1 |
|
|
|
3 |
1962d |
2030d
|
19/29 |
1864d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
possible deadlock in hugetlb_cow
mm
|
4 |
C |
unreliable |
|
341 |
1934d |
1957d
|
19/29 |
1864d |
e7dd91c456a8
mm/hugetlb: fix deadlock in hugetlb_cow error path
|
|
KASAN: null-ptr-deref Write in start_transaction
btrfs
|
12 |
C |
done |
done |
1 |
1956d |
1983d
|
19/29 |
1864d |
ecfdc08b8cc6
btrfs: remove dio iomap DSYNC workaround
|
|
possible deadlock in proc_pid_syscall (2)
fs
|
4 |
|
|
|
2 |
2048d |
2057d
|
19/29 |
1864d |
f7cfd871ae0c
exec: Transform exec_update_mutex into a rw_semaphore
78af4dc949da
perf: Break deadlock involving exec_update_mutex
|
|
KASAN: slab-out-of-bounds Read in squashfs_export_iget
squashfs
|
17 |
C |
done |
error |
3 |
1935d |
1953d
|
19/29 |
1864d |
eabac19e40c0
squashfs: add more sanity checks in inode lookup
|
|
WARNING in io_disable_sqo_submit
fs
|
-1 |
C |
done |
|
9 |
1909d |
1917d
|
19/29 |
1864d |
6b393a1ff174
io_uring: fix false positive sqo warning on flush
|
|
KASAN: null-ptr-deref Read in filp_close
fs
|
11 |
C |
done |
|
9 |
1944d |
1946d
|
19/29 |
1864d |
fec8a6a69103
close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
6abc20f8f879
selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
|
|
possible deadlock in _destroy_id
rdma
|
4 |
C |
unreliable |
|
28 |
1967d |
1975d
|
19/29 |
1864d |
dd37d2f59eb8
RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
|
|
UBSAN: array-index-out-of-bounds in ieee80211_del_key (2)
wireless
|
15 |
C |
error |
|
3 |
1954d |
1963d
|
19/29 |
1864d |
2d9463083ce9
nl80211: validate key indexes for cfg80211_registered_device
|
|
KASAN: use-after-free Read in rxrpc_send_data_packet
net
afs
|
19 |
|
|
|
1 |
1906d |
1900d
|
19/29 |
1864d |
7b5eab57cac4
rxrpc: Fix clearance of Tx/Rx ring when releasing a call
|
|
general protection fault in hci_event_packet
bluetooth
|
2 |
C |
done |
|
25 |
2030d |
2083d
|
19/29 |
1864d |
6dfccd13db2f
Bluetooth: Fix null pointer dereference in hci_event_packet()
|
|
KASAN: use-after-free Read in dump_schedule
net
|
19 |
C |
done |
done |
7 |
1940d |
2051d
|
19/29 |
1864d |
cc00bcaa5899
netfilter: x_tables: Switch synchronization to RCU
|
|
KASAN: invalid-free in p9_client_create (2)
v9fs
|
24 |
C |
done |
|
3 |
1905d |
1905d
|
19/29 |
1864d |
757fed1d0898
Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
|
|
possible deadlock in io_timeout_fn (2)
fs
|
4 |
|
|
|
4 |
1925d |
1932d
|
19/29 |
1864d |
4aa84f2ffa81
io_uring: dont kill fasync under completion_lock
|
|
WARNING: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
|
-1 |
|
|
|
3 |
1977d |
1972d
|
19/29 |
1864d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
general protection fault in wext_handle_ioctl
wireless
|
2 |
C |
inconclusive |
|
9 |
1907d |
1996d
|
19/29 |
1864d |
5122565188ba
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
|
|
INFO: rcu detected stall in sys_exit_group (6)
mm
|
1 |
C |
|
|
4 |
2024d |
2030d
|
19/29 |
1864d |
c583bcb8f5ed
rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
|
|
WARNING in cm109_input_ev/usb_submit_urb
input
usb
|
-1 |
C |
unreliable |
|
8 |
1952d |
1973d
|
19/29 |
1864d |
82e060904732
Input: cm109 - do not stomp on control URB
|
|
UBSAN: shift-out-of-bounds in hash_mac_create
netfilter
|
-1 |
C |
unreliable |
|
29 |
1930d |
1950d
|
19/29 |
1864d |
5c8193f568ae
netfilter: ipset: fix shift-out-of-bounds in htable_bits()
|
|
upstream build error (11)
|
-1 |
|
|
|
25 |
1920d |
1996d
|
15/29 |
1920d |
f78f63da916e
mm/process_vm_access: Add missing #include <linux/compat.h>
|
|
possible deadlock in process_measurement (2)
integrity
lsm
|
4 |
C |
done |
done |
56 |
1960d |
2327d
|
15/29 |
1927d |
15a8d68e9dc2
mm/hugetlb: a page from buddy is not on any list
|
|
INFO: rcu detected stall in sys_open (2)
crypto
|
1 |
C |
done |
done |
42 |
1983d |
2334d
|
15/29 |
1940d |
1d0e850a49a5
afs: Fix cell removal
|
|
BUG: unable to handle kernel paging request in cfb_imageblit
fbdev
|
8 |
C |
done |
done |
30 |
1975d |
2018d
|
15/29 |
1940d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
KASAN: use-after-free Read in eth_type_trans
net
|
19 |
C |
done |
error |
3 |
2164d |
2306d
|
15/29 |
1940d |
96aa1b22bd6b
tun: correct header offsets in napi frags mode
|
|
BUG: MAX_LOCKDEP_KEYS too low!
net
|
-1 |
C |
done |
error |
3496 |
2119d |
2364d
|
15/29 |
1954d |
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
|
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low!
|
-1 |
C |
done |
error |
25236 |
2158d |
2598d
|
15/29 |
1954d |
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
|
INFO: rcu detected stall in __se_sys_mount
afs
|
1 |
C |
done |
done |
2 |
1986d |
2110d
|
15/29 |
1955d |
1d0e850a49a5
afs: Fix cell removal
|
|
BUG: sleeping function called from invalid context in ext4_superblock_csum_set
ext4
|
5 |
|
|
|
2 |
1986d |
1992d
|
15/29 |
1958d |
d196e229a80c
Revert "ext4: fix superblock checksum calculation race"
|
|
KASAN: null-ptr-deref Write in kthread_use_mm
io-uring
fs
|
12 |
C |
done |
|
2 |
1991d |
1991d
|
15/29 |
1973d |
4b70cf9dea4c
io_uring: ensure consistent view of original task ->mm from SQPOLL
|
|
WARNING in close_fs_devices (2)
btrfs
|
-1 |
C |
|
|
23 |
1975d |
2036d
|
15/29 |
1973d |
cf89af146b7e
btrfs: dev-replace: fail mount if we don't have replace item with target device
|
|
memory leak in gadget_setup
usb
|
3 |
C |
|
|
49 |
1984d |
2001d
|
15/29 |
1973d |
129aa9734559
usb: raw-gadget: fix memory leak in gadget_setup
|
|
memory leak in gadget_bind
usb
|
3 |
C |
|
|
62 |
1984d |
2001d
|
15/29 |
1973d |
129aa9734559
usb: raw-gadget: fix memory leak in gadget_setup
|
|
general protection fault in io_uring_show_cred
fs
|
2 |
C |
done |
|
4 |
1988d |
1988d
|
15/29 |
1973d |
6b47ab81c9a9
io_uring: use correct pointer for io_uring_show_cred()
|
|
KASAN: use-after-free Write in io_submit_sqes
fs
io-uring
|
22 |
C |
error |
|
2 |
1991d |
1990d
|
15/29 |
1973d |
cb8a8ae31074
io_uring: drop req/tctx io_identity separately
|
|
KASAN: use-after-free Read in __proc_create
afs
|
19 |
|
|
|
1 |
2028d |
2026d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
INFO: rcu detected stall in process_one_work (3)
kernel
|
1 |
C |
done |
done |
1 |
2017d |
2059d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
INFO: task can't die in corrupted
fs
|
1 |
C |
done |
|
4 |
1991d |
2017d
|
15/29 |
1977d |
86f33603f8c5
f2fs: handle errors of f2fs_get_meta_page_nofail
|
|
BUG: corrupted list in kobject_add_internal
bluetooth
|
8 |
C |
done |
done |
9 |
2015d |
2078d
|
15/29 |
1977d |
a46b7ed4d52d
Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
|
|
WARNING in dma_map_page_attrs
iommu
|
-1 |
C |
unreliable |
|
304 |
1986d |
2003d
|
15/29 |
1977d |
683a9c7ed817
RDMA: Fix software RDMA drivers for dma mapping error
|
|
WARNING in unlock_new_inode
fs
|
-1 |
C |
done |
|
76 |
2014d |
2919d
|
15/29 |
1977d |
8859bf2b1278
reiserfs: only call unlock_new_inode() if I_NEW
|
|
memory leak in ieee80211_check_fast_xmit
wireless
|
3 |
C |
|
|
983 |
1987d |
2030d
|
15/29 |
1977d |
dcd479e10a05
mac80211: always wind down STA state
|
|
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_resize
openvswitch
|
4 |
C |
error |
|
1 |
1996d |
1996d
|
15/29 |
1977d |
fea07a487c6d
net: openvswitch: silence suspicious RCU usage warning
|
|
general protection fault in xsk_release
bpf
net
|
2 |
C |
done |
|
2 |
2029d |
2029d
|
15/29 |
1977d |
1fd17c8cd0aa
xsk: Fix possible crash in socket_release when out-of-memory
|
|
memory leak in reiserfs_parse_options
fs
|
3 |
C |
|
|
4 |
2041d |
2237d
|
15/29 |
1977d |
e9d4709fcc26
reiserfs: Fix memory leak in reiserfs_parse_options()
|
|
KMSAN: kernel-infoleak in scsi_cmd_ioctl
block
|
9 |
|
|
|
131 |
1981d |
2054d
|
15/29 |
1977d |
6d53a9fe5a19
block/scsi-ioctl: Fix kernel-infoleak in scsi_put_cdrom_generic_arg()
|
|
WARNING in binder_transaction_buffer_release (2)
kernel
|
-1 |
C |
done |
done |
442 |
2110d |
2150d
|
15/29 |
1977d |
e8b8ae7ce32e
binder: Remove bogus warning on failed same-process transaction
|
|
BUG: using __this_cpu_read() in preemptible code in trace_hardirqs_on
|
4 |
C |
done |
|
502745 |
1979d |
2011d
|
15/29 |
1977d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
INFO: task hung in wdm_flush
usb
|
1 |
C |
|
|
38294 |
2054d |
2439d
|
15/29 |
1977d |
37d2a36394d9
USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
|
|
INFO: trying to register non-static key in uhid_char_release
|
-1 |
C |
done |
done |
26 |
2054d |
2232d
|
15/29 |
1977d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
WARNING in ieee80211_s1g_channel_width
wireless
|
-1 |
C |
done |
|
3 |
2019d |
2019d
|
15/29 |
1977d |
c1cd35c60601
cfg80211: only allow S1G channels on S1G band
|
|
KMSAN: uninit-value in ieee80211_skb_resize
wireless
|
7 |
C |
|
|
5 |
2006d |
2030d
|
15/29 |
1977d |
14f46c1e5108
mac80211: fix use of skb payload instead of header
|
|
KASAN: global-out-of-bounds Read in precalculate_color
media
|
17 |
C |
done |
done |
170 |
2038d |
2331d
|
15/29 |
1977d |
e3158a5e7e66
media: vivid: Fix global-out-of-bounds read in precalculate_color()
|
|
general protection fault in percpu_ref_exit
fs
|
2 |
C |
done |
|
3 |
2012d |
2016d
|
15/29 |
1977d |
7ea6bf2e6c40
percpu_ref: don't refer to ref->data if it isn't allocated
|
|
KASAN: use-after-free Write in tcindex_change
net
|
22 |
C |
done |
done |
4 |
2220d |
2221d
|
15/29 |
1977d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
general protection fault in gfs2_rgrp_dump
gfs2
|
2 |
|
|
|
1 |
2018d |
2018d
|
15/29 |
1977d |
0e539ca1bbbe
gfs2: Fix NULL pointer dereference in gfs2_rgrp_dump
|
|
WARNING: refcount bug in do_enable_set
bluetooth
|
13 |
C |
inconclusive |
done |
8 |
2079d |
2189d
|
15/29 |
1977d |
b83764f9220a
Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
|
|
possible deadlock in cleanup_net
net
|
4 |
C |
done |
|
281 |
2046d |
2054d
|
15/29 |
1977d |
d966ddcc3821
tipc: fix a deadlock when flushing scheduled work
|
|
general protection fault in utf8_casefold
f2fs
|
2 |
C |
done |
|
1 |
2016d |
2016d
|
15/29 |
1977d |
f6322f3f1212
f2fs: reject CASEFOLD inode flag without casefold feature
|
|
KASAN: use-after-free Read in sctp_auth_free
sctp
|
19 |
C |
done |
|
4 |
2015d |
2017d
|
15/29 |
1977d |
d42ee76ecb6c
net-backports: sctp: fix sctp_auth_init_hmacs() error path
|
|
kernel panic: Fatal exception (3)
|
2 |
C |
done |
|
2 |
2011d |
2010d
|
15/29 |
1977d |
eadd1befdd77
netem: fix zero division in tabledist
|
|
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
wireless
|
19 |
C |
|
|
2849 |
1977d |
2212d
|
15/29 |
1977d |
03fb92a432ea
ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
|
|
memory leak in udf_process_sequence
udf
|
3 |
C |
|
|
4 |
2029d |
2033d
|
15/29 |
1977d |
a7be300de800
udf: Fix memory leak when mounting
|
|
general protection fault in unlink_file_vma
mm
|
2 |
C |
done |
|
1 |
2050d |
2046d
|
15/29 |
1977d |
bc4fe4cdd602
mm: mmap: Fix general protection fault in unlink_file_vma()
|
|
KASAN: use-after-free Read in fscache_alloc_cookie
fs
|
19 |
syz |
done |
|
1 |
2029d |
2029d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: unknown-crash Read in do_exit
kernel
|
17 |
C |
inconclusive |
done |
2 |
2035d |
2040d
|
15/29 |
1977d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
WARNING in handle_exception_nmi
kvm-x86
|
-1 |
C |
error |
done |
2653 |
2018d |
2023d
|
15/29 |
1977d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
KASAN: use-after-free Read in tipc_named_reinit
tipc
|
19 |
|
|
|
6 |
2082d |
2136d
|
15/29 |
1977d |
fdeba99b1e58
tipc: fix use-after-free in tipc_bcast_get_mode
|
|
kernel BUG at fs/f2fs/segment.h:LINE!
f2fs
|
-1 |
|
|
|
9 |
2023d |
2034d
|
15/29 |
1977d |
6a257471fa42
f2fs: fix to check segment boundary during SIT page readahead
|
|
KMSAN: uninit-value in ip_tunnel_xmit (2)
net
|
7 |
C |
|
|
11778 |
1981d |
2806d
|
15/29 |
1977d |
fdafed459998
ip_gre: set dev->hard_header_len and dev->needed_headroom properly
|
|
WARNING: refcount bug in p9_req_put
v9fs
|
13 |
syz |
inconclusive |
done |
6 |
2156d |
2709d
|
15/29 |
1977d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
INFO: rcu detected stall in ip_list_rcv
net
|
1 |
C |
error |
done |
3 |
2025d |
2051d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
UBSAN: array-index-out-of-bounds in precalculate_color
media
|
15 |
C |
|
|
153 |
2012d |
2037d
|
15/29 |
1977d |
e3158a5e7e66
media: vivid: Fix global-out-of-bounds read in precalculate_color()
|
|
KMSAN: uninit-value in can_receive (2)
can
|
7 |
C |
|
|
2060 |
1981d |
2076d
|
15/29 |
1977d |
e009f95b1543
can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
|
|
WARNING in syscall_exit_to_user_mode
kernel
|
-1 |
C |
done |
done |
1 |
2015d |
2043d
|
15/29 |
1977d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
general protection fault in tcf_generic_walker
net
|
2 |
syz |
|
|
9 |
2024d |
2026d
|
15/29 |
1977d |
580e4273d7a8
net_sched: check error pointer in tcf_dump_walker()
|
|
WARNING in print_bfs_bug
|
-1 |
C |
done |
|
14759 |
2009d |
2361d
|
15/29 |
1977d |
6d1823ccc480
lockdep: Optimize the memory usage of circular queue
|
|
KASAN: use-after-free Read in io_wqe_worker
fs
io-uring
|
19 |
C |
error |
|
2 |
2027d |
2028d
|
15/29 |
1977d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
INFO: task hung in io_uring_setup
|
1 |
C |
done |
|
51 |
2046d |
2051d
|
15/29 |
1977d |
7e84e1c7566a
io_uring: allow disabling rings during the creation
|
|
KMSAN: uninit-value in unix_find_other
net
|
7 |
C |
|
|
57 |
2022d |
2838d
|
15/29 |
1977d |
7ca1db21ef8e
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
|
|
KASAN: use-after-free Read in delete_partition
block
|
19 |
C |
done |
done |
3 |
2053d |
2050d
|
15/29 |
1977d |
08fc1ab6d748
block: fix locking in bdev_del_partition
|
|
WARNING in get_signal
kernel
|
-1 |
C |
done |
|
2 |
2020d |
2022d
|
15/29 |
1977d |
7b3c36fc4c23
ptrace: fix task_join_group_stop() for the case when current is traced
|
|
KASAN: use-after-free Write in refcount_warn_saturate
bluetooth
|
22 |
C |
inconclusive |
done |
2 |
2081d |
2239d
|
15/29 |
1977d |
b83764f9220a
Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
|
|
INFO: task hung in addrconf_verify_work (3)
|
1 |
C |
done |
|
75 |
1990d |
2025d
|
15/29 |
1977d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
kernel panic: stack is corrupted in get_kernel_gp_address
kernel
|
2 |
syz |
done |
done |
1 |
2011d |
2043d
|
15/29 |
1977d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
WARNING: ODEBUG bug in exit_to_user_mode_prepare
|
-1 |
C |
done |
done |
27 |
2051d |
2057d
|
15/29 |
1977d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KMSAN: uninit-value in batadv_hard_if_event (2)
batman
usb
|
7 |
C |
|
|
162 |
1993d |
2076d
|
15/29 |
1977d |
f45a4248ea4c
net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
|
|
INFO: task hung in ctrl_getfamily
net
|
1 |
syz |
done |
done |
22 |
2070d |
2683d
|
15/29 |
1977d |
47733f9daf4f
tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
|
|
WARNING: suspicious RCU usage in io_init_identity
fs
|
4 |
|
|
|
1536 |
2003d |
2008d
|
15/29 |
1977d |
1e6fa5216a0e
io_uring: COW io_identity on mismatch
|
|
KASAN: out-of-bounds Read in __switch_to (2)
kernel
|
17 |
syz |
done |
done |
1 |
2025d |
2021d
|
15/29 |
1977d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
WARNING: suspicious RCU usage in qrtr_ns_worker
arm-msm
net
|
4 |
C |
done |
|
1 |
2058d |
2121d
|
15/29 |
1977d |
a7809ff90ce6
net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
|
|
inconsistent lock state in xa_destroy
io-uring
fs
|
4 |
C |
|
|
755 |
2015d |
2016d
|
15/29 |
1977d |
ca6484cd308a
io_uring: no need to call xa_destroy() on empty xarray
|
|
KASAN: use-after-free Write in afs_manage_cell
afs
|
22 |
C |
done |
done |
20 |
2009d |
2078d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave
|
4 |
C |
done |
|
997 |
2008d |
2045d
|
15/29 |
1977d |
6564d0ad67ef
ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock
|
|
INFO: task hung in io_uring_flush
io-uring
fs
|
1 |
C |
done |
done |
11 |
2068d |
2075d
|
15/29 |
1977d |
b7ddce3cbf01
io_uring: fix cancel of deferred reqs with ->files
|
|
memory leak in kobject_set_name_vargs (3)
nilfs
|
3 |
C |
|
|
19 |
1978d |
2033d
|
15/29 |
1977d |
cb8d53d2c973
ext4: fix leaking sysfs kobject after failed mount
|
|
WARNING in percpu_ref_exit (2)
|
-1 |
C |
done |
done |
272 |
2013d |
2308d
|
15/29 |
1977d |
c1e2148f8ecb
io_uring: free fixed_file_data after RCU grace period
|
|
KASAN: slab-out-of-bounds Write in gfs2_fill_super
gfs2
|
21 |
C |
done |
|
1 |
2025d |
2024d
|
15/29 |
1977d |
0ddc5154b24c
gfs2: add validation checks for size of superblock
|
|
WARNING in rxrpc_recvmsg
afs
net
|
-1 |
C |
error |
done |
5 |
2112d |
2113d
|
15/29 |
1977d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
general protection fault in open_xa_dir
fs
|
2 |
C |
done |
|
3 |
2012d |
2024d
|
15/29 |
1977d |
c2bb80b8bdd0
reiserfs: Fix oops during mount
|
|
KASAN: use-after-free Read in tcf_action_init
net
|
19 |
C |
done |
|
1 |
2029d |
2026d
|
15/29 |
1977d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
KMSAN: uninit-value in search_by_key
fs
|
7 |
|
|
|
1549 |
1982d |
2033d
|
15/29 |
1977d |
4443390e08d3
reiserfs: Initialize inode keys properly
|
|
INFO: task hung in ubi_detach_mtd_dev
mtd
|
1 |
syz |
error |
error |
4 |
2157d |
2243d
|
15/29 |
1977d |
d005f8c6588e
ubi: check kthread_should_stop() after the setting of task state
|
|
bpf-next test error: BUG: program execution failed: executor 0: exit status 67
|
-1 |
|
|
|
12 |
2009d |
2009d
|
15/29 |
1977d |
d25e2e9388ed
netfilter: restore NF_INET_NUMHOOKS
|
|
KMSAN: uninit-value in f2fs_lookup
f2fs
|
7 |
|
|
|
17 |
1989d |
2029d
|
15/29 |
1977d |
6d7ab88a98c1
f2fs: fix uninit-value in f2fs_lookup
|
|
INFO: rcu detected stall in exit_group
mm
|
1 |
C |
done |
done |
1 |
2014d |
2044d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: slab-out-of-bounds Read in ntfs_attr_find
ntfs3
|
17 |
C |
done |
|
9 |
2010d |
2936d
|
15/29 |
1977d |
4f8c94022f0b
ntfs: add check for mft record size in superblock
|
|
KASAN: slab-out-of-bounds Read in strset_parse_request
net
|
17 |
C |
error |
|
141 |
2016d |
2016d
|
15/29 |
1977d |
db972e532518
ethtool: strset: allow ETHTOOL_A_STRSET_COUNTS_ONLY attr
|
|
WARNING in arch_install_hw_breakpoint
kernel
|
-1 |
C |
inconclusive |
done |
8 |
2464d |
2580d
|
15/29 |
1977d |
e898e69d6b94
x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
|
|
KASAN: stack-out-of-bounds Read in xfrm_selector_match (2)
net
|
17 |
|
|
|
1 |
2035d |
2033d
|
15/29 |
1977d |
e94ee171349d
xfrm: Use correct address family in xfrm_state_find
|
|
KASAN: use-after-free Read in tipc_mcast_xmit (2)
tipc
|
19 |
C |
done |
|
37 |
2008d |
2022d
|
15/29 |
1977d |
ed42989eab57
tipc: fix the skb_unshare() in tipc_buf_append()
|
|
KASAN: use-after-free Read in tipc_bcast_get_mode
tipc
|
19 |
|
|
|
1 |
2082d |
2082d
|
15/29 |
1977d |
fdeba99b1e58
tipc: fix use-after-free in tipc_bcast_get_mode
|
|
INFO: task hung in flush_to_ldisc
serial
|
1 |
C |
inconclusive |
done |
15 |
2253d |
2323d
|
15/29 |
1977d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
KASAN: use-after-free Write in io_wq_worker_running
io-uring
fs
|
22 |
C |
error |
|
14 |
2020d |
2047d
|
15/29 |
1977d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
KASAN: slab-out-of-bounds Read in soft_cursor
fbdev
|
17 |
C |
done |
|
218 |
2016d |
2325d
|
15/29 |
1977d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
BUG: unable to handle kernel paging request in tcf_action_dump_terse
net
|
8 |
C |
done |
|
15 |
2020d |
2026d
|
15/29 |
1977d |
580e4273d7a8
net_sched: check error pointer in tcf_dump_walker()
|
|
INFO: rcu detected stall in sys_mount (5)
afs
|
1 |
C |
done |
done |
10 |
2024d |
2045d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
general protection fault in qp_release_pages
kernel
|
2 |
C |
done |
|
2 |
2013d |
2012d
|
15/29 |
1977d |
90ca6333fd65
VMCI: check return value of get_user_pages_fast() for errors
|
|
INFO: task hung in lock_sock_nested (3)
net
|
1 |
C |
done |
|
5 |
2021d |
2022d
|
15/29 |
1977d |
d9fb8c507d42
mptcp: fix infinite loop on recvmsg()/worker() race.
|
|
KMSAN: uninit-value in __fget_light (2)
fs
|
7 |
C |
|
|
18 |
1994d |
2003d
|
15/29 |
1977d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
WARNING in ati_remote_sendpacket/usb_submit_urb
usb
media
|
-1 |
C |
|
|
22 |
2148d |
2459d
|
15/29 |
1977d |
a8be80053ea7
media: ati_remote: sanity check for both endpoints
|
|
KASAN: stack-out-of-bounds Read in csd_lock_record
kernel
|
17 |
C |
|
|
226 |
2108d |
2113d
|
15/29 |
1977d |
35feb60474bf
kernel/smp: Provide CSD lock timeout diagnostics
|
|
KASAN: use-after-free Read in afs_deactivate_cell (2)
afs
|
19 |
C |
done |
|
11 |
2015d |
2033d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
possible deadlock in mnt_want_write
fs
|
4 |
C |
done |
done |
662 |
2016d |
2824d
|
15/29 |
1977d |
146d62e5a586
ovl: detect overlapping layers
|
|
general protection fault in ieee80211_key_free
wireless
|
2 |
C |
done |
|
3 |
2012d |
2017d
|
15/29 |
1977d |
3dc289f8f139
net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
|
|
general protection fault in __do_sys_io_uring_register
fs
|
2 |
|
|
|
80 |
2004d |
2010d
|
15/29 |
1977d |
55cbc2564ab2
io_uring: fix error path cleanup in io_sqe_files_register()
|
|
KASAN: use-after-free Write in vcs_read
serial
|
22 |
C |
done |
|
11 |
2059d |
2064d
|
15/29 |
1977d |
52c3c3a59234
Revert "vc_screen: extract vcs_read_buf_header"
|
|
WARNING in irqentry_exit
kernel
|
-1 |
C |
error |
done |
2080 |
2012d |
2079d
|
15/29 |
1977d |
4d004099a668
lockdep: Fix lockdep recursion
|
|
INFO: rcu detected stall in sys_newlstat
afs
|
1 |
C |
error |
done |
1 |
2031d |
2030d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
kernel BUG at net/rxrpc/conn_object.c:LINE!
net
afs
|
-1 |
C |
done |
|
855 |
1979d |
2044d
|
15/29 |
1977d |
546a42410bf7
rxrpc: Fix conn bundle leak in net-namespace exit
|
|
possible deadlock in dev_uc_sync
net
|
4 |
C |
done |
|
3 |
2012d |
2110d
|
15/29 |
1977d |
0e8b8d6a2d85
net: core: use list_del_init() instead of list_del() in netdev_run_todo()
|
|
WARNING in wp_page_copy
mm
|
-1 |
syz |
done |
done |
9 |
2250d |
2327d
|
15/29 |
1977d |
c3e5ea6ee574
mm: avoid data corruption on CoW fault into PFN-mapped VMA
|
|
general protection fault in vmk80xx_write_packet
usb
staging
|
2 |
C |
|
|
82 |
2017d |
2473d
|
15/29 |
1977d |
e1f13c879a7c
staging: comedi: check validity of wMaxPacketSize of usb endpoints found
|
|
general protection fault in rt6_fill_node
net
|
2 |
C |
done |
done |
3 |
2062d |
2059d
|
15/29 |
1977d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
KASAN: use-after-free Read in afs_manage_cell
afs
|
19 |
|
|
|
5 |
2019d |
2033d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
KMSAN: uninit-value in do_ip_vs_set_ctl
lvs
|
7 |
C |
|
|
365 |
1982d |
2771d
|
15/29 |
1977d |
c5a8a8498eed
ipvs: Fix uninit-value in do_ip_vs_set_ctl()
|
|
memory leak in __team_options_register
net
|
3 |
C |
|
|
1 |
2047d |
2047d
|
15/29 |
1977d |
9a9e77495958
net: team: fix memory leak in __team_options_register
|
|
general protection fault in nexthop_is_blackhole
net
|
2 |
C |
done |
done |
1 |
2062d |
2059d
|
15/29 |
1977d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
KASAN: use-after-free Read in ucma_close (2)
rdma
|
19 |
syz |
done |
|
1 |
2044d |
2044d
|
15/29 |
1977d |
f5449e74802c
RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
|
|
UBSAN: array-index-out-of-bounds in ieee80211_del_key
wireless
|
15 |
C |
done |
|
685 |
1986d |
2030d
|
15/29 |
1977d |
3dc289f8f139
net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
|
|
INFO: task hung in htable_put
|
1 |
C |
done |
done |
29 |
2250d |
2303d
|
15/29 |
1977d |
99b79c3900d4
netfilter: xt_hashlimit: unregister proc file before releasing mutex
|
|
KASAN: use-after-free Write in xp_put_pool
bpf
net
|
22 |
C |
done |
|
50 |
2030d |
2052d
|
15/29 |
1977d |
83cf5c68d663
xsk: Fix use-after-free in failed shared_umem bind
|
|
KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (2)
wpan
|
19 |
C |
error |
done |
5 |
2111d |
2111d
|
15/29 |
1977d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
kernel panic: System is deadlocked on memory
mm
|
2 |
C |
done |
|
43 |
2103d |
2101d
|
15/29 |
1977d |
9066e5cfb73c
mm, oom: make the calculation of oom badness more accurate
|
|
general protection fault in strncasecmp
afs
|
2 |
C |
done |
|
1 |
2032d |
2030d
|
15/29 |
1977d |
92e3cc91d8f5
afs: Fix rapid cell addition/removal by not using RCU on cells tree
|
|
KASAN: slab-out-of-bounds Read in f2fs_build_segment_manager
f2fs
|
17 |
C |
error |
|
2 |
2029d |
2029d
|
15/29 |
1977d |
3a22e9ac7158
f2fs: fix to do sanity check on segment/section count
|
|
KMSAN: uninit-value in udf_get_pblock_spar15
udf
|
7 |
|
|
|
1 |
2033d |
2030d
|
15/29 |
1977d |
44ac6b829c4e
udf: Limit sparing table size
|
|
WARNING: refcount bug in l2cap_chan_put
|
13 |
C |
inconclusive |
done |
13 |
2079d |
2243d
|
15/29 |
1977d |
b83764f9220a
Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
|
|
KASAN: use-after-free Write in afs_deactivate_cell
afs
|
22 |
|
|
|
4 |
2010d |
2030d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
WARNING: proc registration bug in afs_manage_cell
afs
|
-1 |
C |
done |
|
1 |
2030d |
2026d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
INFO: trying to register non-static key in exfat_cache_inval_inode
exfat
|
-1 |
C |
done |
|
4 |
2020d |
2026d
|
15/29 |
1977d |
8ff006e57ad3
exfat: fix use of uninitialized spinlock on error path
|
|
WARNING in nla_get_range_unsigned
net
|
-1 |
C |
done |
|
63 |
2052d |
2054d
|
15/29 |
1977d |
c30a3c957c88
netlink: policy: correct validation type check
|
|
KASAN: use-after-free Read in bit_putcs
fbdev
|
19 |
C |
|
|
12 |
2024d |
2244d
|
15/29 |
1977d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
BUG: using smp_processor_id() in preemptible code in tipc_crypto_xmit
tipc
|
4 |
C |
done |
done |
468 |
2049d |
2120d
|
15/29 |
1977d |
bb8872a1e6bc
tipc: fix using smp_processor_id() in preemptible
|
|
general protection fault in xsk_is_setup_for_bpf_map
net
bpf
|
2 |
C |
error |
|
294 |
2030d |
2052d
|
15/29 |
1977d |
968be23ceaca
xsk: Fix possible segfault at xskmap entry insertion
|
|
KMSAN: uninit-value in udf_evict_inode
udf
|
7 |
|
|
|
159 |
1982d |
2029d
|
15/29 |
1977d |
044e2e26f214
udf: Avoid accessing uninitialized data on failed inode read
|
|
inconsistent lock state in io_uring_add_task_file
fs
|
4 |
|
|
|
1 |
2016d |
2015d
|
15/29 |
1977d |
ce765372bc44
io_uring: Fix use of XArray in __io_uring_files_cancel
|
|
memory leak in read_adv_mon_features
bluetooth
|
3 |
C |
|
|
2 |
2047d |
2070d
|
15/29 |
1977d |
cafd472a10ff
Bluetooth: Fix memory leak in read_adv_mon_features()
|
|
INFO: trying to register non-static key in del_timer_sync (2)
wireless
usb
|
-1 |
C |
|
|
1206 |
2509d |
2561d
|
15/29 |
1977d |
621a3a8b1c0e
mwifiex: don't call del_timer_sync() on uninitialized timer
|
|
inconsistent lock state in icmp_send
net
|
4 |
syz |
done |
done |
1 |
2185d |
2682d
|
15/29 |
1977d |
1378817486d6
tipc: block BH before using dst_cache
|
|
INFO: task can't die in rtnetlink_rcv_msg
net
|
1 |
|
|
|
5 |
2017d |
2026d
|
15/29 |
1977d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
BUG: unable to handle kernel paging request in pvclock_gtod_notify
kvm-x86
|
8 |
C |
done |
done |
8 |
2023d |
2042d
|
15/29 |
1977d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
INFO: trying to register non-static key in uhid_dev_destroy
input
|
-1 |
C |
unreliable |
done |
40 |
2059d |
2232d
|
15/29 |
1977d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
WARNING in bpf_raw_tp_link_fill_link_info
bpf
|
-1 |
C |
error |
|
56 |
2030d |
2044d
|
15/29 |
1977d |
b474959d5afd
bpf: Fix a buffer out-of-bound access when filling raw_tp link_info
|
|
KMSAN: uninit-value in qtree_entry_unused
fs
|
7 |
|
|
|
396 |
1982d |
2033d
|
15/29 |
1977d |
3d3dc274ce73
quota: clear padding in v2r1_mem2diskdqb()
|
|
KASAN: use-after-free Write in rxrpc_put_bundle
afs
net
|
22 |
C |
done |
|
229 |
2015d |
2038d
|
15/29 |
1977d |
f3af4ad1e08a
rxrpc: Fix bundle counting for exclusive connections
|
|
KASAN: use-after-free Read in tcf_action_destroy
net
|
19 |
C |
done |
|
8 |
2019d |
2034d
|
15/29 |
1977d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
memory leak in xdp_umem_create
bpf
net
|
3 |
C |
|
|
17 |
1981d |
2001d
|
15/29 |
1977d |
e5e1a4bc916d
xsk: Fix possible memory leak at socket close
|
|
general protection fault in xsk_diag_dump (2)
bpf
net
|
2 |
C |
|
|
354 |
2034d |
2052d
|
15/29 |
1977d |
53ea2076d851
xsk: Fix possible segfault in xsk umem diagnostics
|
|
INFO: rcu detected stall in security_file_open (3)
afs
|
1 |
C |
done |
done |
2 |
2025d |
2024d
|
15/29 |
1977d |
1d0e850a49a5
afs: Fix cell removal
|
|
general protection fault in tcf_action_destroy (2)
net
|
2 |
C |
done |
done |
29 |
2015d |
2228d
|
15/29 |
1977d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: global-out-of-bounds Read in fbcon_get_font
fbdev
|
17 |
C |
inconclusive |
inconclusive |
41 |
2022d |
2319d
|
15/29 |
1977d |
5af08640795b
fbcon: Fix global-out-of-bounds read in fbcon_get_font()
|
|
WARNING: suspicious RCU usage in ctrl_cmd_new_lookup
net
arm-msm
|
4 |
C |
done |
done |
10 |
2032d |
2121d
|
15/29 |
1977d |
a7809ff90ce6
net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
|
|
general protection fault in io_poll_double_wake (2)
fs
io-uring
|
2 |
C |
error |
|
2 |
2027d |
2026d
|
15/29 |
2003d |
8706e04ed7d6
io_uring: always delete double poll wait entry on match
|
|
possible deadlock in io_write
fs
|
4 |
|
|
|
2 |
2024d |
2026d
|
15/29 |
2003d |
fad8e0de4426
io_uring: fix potential ABBA deadlock in ->show_fdinfo()
|
|
kernel BUG at lib/string.c:LINE! (5)
btrfs
|
-1 |
C |
done |
|
558 |
2031d |
2039d
|
15/29 |
2009d |
35be8851d172
btrfs: fix overflow when copying corrupt csums for a message
|
|
general protection fault in madvise_cold_or_pageout_pte_range
mm
|
2 |
C |
done |
|
3 |
2030d |
2040d
|
15/29 |
2011d |
ce2684254bd4
mm: validate pmd after splitting
|
|
KASAN: global-out-of-bounds Read in fbcon_resize
fbdev
|
17 |
C |
error |
|
673 |
2033d |
2065d
|
15/29 |
2015d |
ec0972adecb3
fbcon: Fix user font detection test at fbcon_resize().
|
|
WARNING: suspicious RCU usage in fib6_del (2)
net
|
4 |
|
|
|
1 |
2047d |
2047d
|
15/29 |
2015d |
843d926b003e
ipv6: avoid lockdep issue in fib6_del()
|
|
KASAN: use-after-free Read in ieee8NUM_tx
wpan
|
19 |
|
|
|
1 |
2048d |
2048d
|
15/29 |
2015d |
0ff4628f4c6c
mac802154: tx: fix use-after-free
|
|
general protection fault in wg_index_hashtable_replace
wireguard
|
2 |
|
|
|
2 |
2036d |
2047d
|
15/29 |
2015d |
9179ba31367b
wireguard: noise: take lock when removing handshake entry from table
|
|
memory leak in do_seccomp
kernel
|
3 |
C |
|
|
6 |
2047d |
2074d
|
15/29 |
2015d |
a566a9012acd
seccomp: don't leak memory when filter install races
|
|
inconsistent lock state in padata_do_parallel
crypto
|
4 |
|
|
|
9 |
2033d |
2053d
|
15/29 |
2015d |
1b0df11fde0f
padata: fix possible padata_works_lock deadlock
|
|
KASAN: use-after-free Write in skb_queue_tail
arm-msm
net
|
22 |
|
|
|
1 |
2046d |
2046d
|
15/29 |
2015d |
3ca1a42a52ca
net: qrtr: check skb_put_padto() return value
|
|
possible deadlock in peernet2id_alloc
net
|
4 |
|
|
|
12 |
2045d |
2217d
|
15/29 |
2015d |
e1f469cd5866
Revert "netns: don't disable BHs when locking "nsid_lock""
|
|
KMSAN: uninit-value in __inet_diag_dump
net
|
7 |
C |
|
|
37 |
2016d |
2033d
|
15/29 |
2015d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
memory leak in do_eventfd
fs
|
3 |
C |
|
|
2 |
2061d |
2157d
|
15/29 |
2015d |
f65886606c2d
KVM: fix memory leak in kvm_io_bus_unregister_dev()
|
|
KASAN: slab-out-of-bounds Read in read_descriptors (2)
usb
|
17 |
|
|
|
1 |
2064d |
2060d
|
15/29 |
2015d |
a18cd6c9b6bc
usb: core: fix slab-out-of-bounds Read in read_descriptors
|
|
INFO: rcu detected stall in cleanup_net (4)
kernel
|
1 |
C |
done |
|
5 |
2049d |
2045d
|
15/29 |
2015d |
b5b73b26b3ca
taprio: Fix allowing too small intervals
|
|
KASAN: slab-out-of-bounds Read in fbcon_scrolldelta
fbdev
|
17 |
|
|
|
1 |
2041d |
2040d
|
15/29 |
2015d |
50145474f6ef
fbcon: remove soft scrollback code
|
|
INFO: task hung in tcf_ife_init
net
|
1 |
C |
done |
|
4 |
2047d |
2051d
|
15/29 |
2015d |
cc8e58f8325c
act_ife: load meta modules before tcf_idr_check_alloc()
|
|
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb
usb
staging
|
17 |
C |
|
|
8 |
2055d |
2086d
|
15/29 |
2015d |
fea22e159d51
staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
|
|
KMSAN: uninit-value in inet_diag_cmd_exact
net
|
7 |
C |
|
|
31 |
2016d |
2027d
|
15/29 |
2015d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
KASAN: global-out-of-bounds Read in vga16fb_imageblit
|
17 |
C |
done |
|
1071 |
2041d |
2326d
|
15/29 |
2015d |
bd018a6a75ce
video: fbdev: fix OOB read in vga_8planes_imageblit()
|
|
memory leak in tipc_group_create_member
tipc
|
3 |
C |
|
|
32 |
2042d |
2450d
|
15/29 |
2015d |
bb3a420d47ab
tipc: Fix memory leak in tipc_group_create_member()
|
|
general protection fault in free_netdev
net
|
2 |
C |
error |
done |
3605 |
2090d |
2125d
|
15/29 |
2023d |
46ef5b89ec0e
ip6_gre: fix null-ptr-deref in ip6gre_init_net()
|
|
KASAN: use-after-free Write in page_counter_uncharge
cgroups
mm
|
22 |
|
|
|
2 |
2062d |
2067d
|
15/29 |
2023d |
f1796544a0ca
memcg: fix use-after-free in uncharge_batch
|
|
KASAN: use-after-free Write in page_counter_cancel
cgroups
mm
|
22 |
|
|
|
1 |
2071d |
2067d
|
15/29 |
2023d |
f1796544a0ca
memcg: fix use-after-free in uncharge_batch
|
|
KASAN: use-after-free Read in do_madvise
io-uring
mm
|
19 |
syz |
error |
|
4 |
2062d |
2064d
|
15/29 |
2023d |
7867fd7cc44e
mm: madvise: fix vma user-after-free
|
|
KMSAN: kernel-infoleak in move_addr_to_user (3)
net
|
9 |
C |
|
|
79 |
2038d |
2072d
|
15/29 |
2026d |
38ba8b9241f5
can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
|
|
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage
input
usb
|
21 |
C |
|
|
279 |
2057d |
2400d
|
15/29 |
2030d |
25a097f52046
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
|
|
WARNING: refcount bug in red_destroy
net
|
13 |
C |
done |
|
1 |
2060d |
2059d
|
15/29 |
2030d |
5438dd45831e
net_sched: fix error path in red_init()
|
|
WARNING in slab_pre_alloc_hook
usb
|
-1 |
C |
|
|
210 |
2054d |
2075d
|
15/29 |
2030d |
f176ede3a3bd
USB: yurex: Fix bad gfp argument
|
|
WARNING: refcount bug in smc_release (3)
smc
|
13 |
|
|
|
1 |
2057d |
2046d
|
15/29 |
2030d |
5fb8642a17aa
net/smc: fix sock refcounting in case of termination
|
|
INFO: rcu detected stall in ext4_file_write_iter
|
1 |
C |
inconclusive |
done |
93 |
2074d |
2606d
|
15/29 |
2030d |
7e24969022cb
block: allow for_each_bvec to support zero len bvec
|
|
WARNING: refcount bug in qdisc_put (2)
net
|
13 |
C |
done |
|
7 |
2060d |
2059d
|
15/29 |
2030d |
5438dd45831e
net_sched: fix error path in red_init()
|
|
BUG: corrupted list in mousedev_release
input
|
8 |
syz |
done |
|
5 |
2053d |
2055d
|
15/29 |
2030d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in snd_pcm_oss_release
sound
|
19 |
|
|
|
1 |
2058d |
2058d
|
15/29 |
2030d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
possible deadlock in __lock_task_sighand
io-uring
|
4 |
C |
done |
|
12 |
2054d |
2056d
|
15/29 |
2030d |
fd7d6de22414
io_uring: don't recurse on tsk->sighand->siglock with signalfd
|
|
WARNING in snd_pcm_plugin_build_mulaw
sound
|
-1 |
C |
done |
|
4 |
2056d |
2053d
|
15/29 |
2030d |
949a1ebe8cea
ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
|
|
general protection fault in snd_ctl_release
sound
|
2 |
syz |
done |
|
4 |
2052d |
2052d
|
15/29 |
2030d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KMSAN: uninit-value in batadv_tt_hash_find
batman
|
7 |
|
|
|
11 |
2045d |
2102d
|
15/29 |
2030d |
303216e76dca
batman-adv: Avoid uninitialized chaddr when handling DHCP
|
|
KASAN: global-out-of-bounds Read in bit_putcs
fbdev
|
17 |
C |
done |
|
262 |
2031d |
2324d
|
15/29 |
2030d |
39b3cffb8cf3
fbcon: prevent user font height or width change from causing potential out-of-bounds access
bc5269ca7650
vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
|
|
KASAN: use-after-free Read in fbcon_cursor
fbdev
|
19 |
syz |
done |
error |
10 |
2070d |
2314d
|
15/29 |
2030d |
f8d1653daec0
vt: defer kfree() of vc_screenbuf in vc_do_resize()
|
|
KASAN: use-after-free Read in rc_dev_uevent
media
|
19 |
|
|
|
1 |
2078d |
2078d
|
15/29 |
2030d |
4f0835d6677d
media: rc: uevent sysfs file races with rc_unregister_device()
|
|
upstream boot error: KASAN: global-out-of-bounds Read in internal_create_group
fs
|
-1 |
|
|
|
273 |
2061d |
2073d
|
15/29 |
2030d |
62c789270c0b
libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group
|
|
KMSAN: uninit-value in video_usercopy
media
|
7 |
C |
|
|
28 |
2095d |
2094d
|
15/29 |
2030d |
4ffb879ea648
media: media/v4l2-core: Fix kernel-infoleak in video_put_user()
|
|
INFO: task hung in nbd_ioctl (2)
nbd
|
1 |
|
|
|
37 |
2057d |
2110d
|
15/29 |
2030d |
2a63866c8b51
tipc: fix shutdown() of connectionless socket
|
|
WARNING in restore_regulatory_settings
|
-1 |
C |
done |
|
10414 |
2048d |
2292d
|
15/29 |
2030d |
47caf685a685
cfg80211: regulatory: reject invalid hints
|
|
INFO: task hung in pipe_release (2)
ext4
|
1 |
syz |
done |
|
3 |
2052d |
2083d
|
15/29 |
2030d |
7e24969022cb
block: allow for_each_bvec to support zero len bvec
|
|
KMSAN: kernel-infoleak in raw_ioctl
usb
|
9 |
C |
|
|
22 |
2052d |
2076d
|
15/29 |
2030d |
a092b7233f0e
net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
|
|
KASAN: use-after-free Read in bdev_del_partition
block
|
19 |
C |
done |
|
1 |
2054d |
2054d
|
15/29 |
2030d |
08fc1ab6d748
block: fix locking in bdev_del_partition
|
|
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned
fbdev
|
21 |
C |
|
|
475 |
2090d |
2324d
|
15/29 |
2033d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
BUG: unable to handle kernel paging request in vmx_vcpu_run
kvm-x86
|
8 |
C |
error |
error |
194 |
2813d |
2927d
|
15/29 |
2034d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
possible deadlock in __io_queue_deferred
fs
io-uring
|
4 |
C |
error |
|
1 |
2076d |
2075d
|
15/29 |
2038d |
7271ef3a93a8
io_uring: fix recursive completion locking on oveflow flush
|
|
kernel BUG at mm/hugetlb.c:LINE!
|
-1 |
C |
done |
error |
10 |
2089d |
2202d
|
15/29 |
2038d |
15568299b7d9
hugetlbfs: prevent filesystem stacking of hugetlbfs
|
|
WARNING in r871xu_dev_remove
usb
staging
|
-1 |
C |
|
|
47375 |
2077d |
2429d
|
15/29 |
2038d |
b4383c971bc5
staging: rtl8712: handle firmware load failure
|
|
WARNING in ptrace_stop
|
-1 |
C |
done |
|
1413 |
2089d |
2093d
|
15/29 |
2038d |
d136122f5845
sched: Fix race against ptrace_freeze_trace()
|
|
general protection fault in do_con_write
|
2 |
C |
done |
|
10703 |
2090d |
2325d
|
15/29 |
2038d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
general protection fault in __btf_resolve_helper_id
bpf
|
2 |
C |
|
|
17 |
2102d |
2111d
|
15/29 |
2038d |
5b801dfb7feb
bpf: Fix NULL pointer dereference in __btf_resolve_helper_id()
|
|
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs
sound
|
19 |
|
|
|
2 |
2106d |
2120d
|
15/29 |
2038d |
68359a1ad844
ALSA: line6: Sync the pending work cancel at disconnection
|
|
INFO: task hung in ovs_exit_net
openvswitch
|
1 |
|
|
|
65 |
2090d |
2093d
|
15/29 |
2038d |
a65878d6f00b
net: openvswitch: fixes potential deadlock in dp cleanup code
|
|
memory leak in erase_aeb (2)
mtd
|
3 |
syz |
|
|
25 |
2097d |
2166d
|
15/29 |
2038d |
3b185255bb2f
ubi: fastmap: Don't produce the initial next anchor PEB when fastmap is disabled
|
|
KASAN: use-after-free Write in __linkwatch_run_queue
net
|
22 |
C |
error |
|
24 |
2093d |
2094d
|
15/29 |
2038d |
c75d1d5248c0
bonding: check return value of register_netdevice() in bond_newlink()
|
|
WARNING in fat12_ent_blocknr
exfat
|
-1 |
|
|
|
2 |
2082d |
2106d
|
15/29 |
2038d |
a090a5a7d73f
fat: fix fat_ra_init() for data clusters == 0
|
|
general protection fault in x86_fsgsbase_read_task
kernel
|
2 |
C |
done |
|
2 |
2072d |
2072d
|
15/29 |
2038d |
8ab49526b53d
x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
|
|
WARNING in __kernel_read
fs
|
-1 |
C |
done |
|
60 |
2045d |
2103d
|
15/29 |
2038d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
WARNING in inc_nlink
|
-1 |
C |
done |
|
26 |
2104d |
2207d
|
15/29 |
2038d |
facb03dddec0
fs/minix: don't allow getting deleted inodes
|
|
KASAN: use-after-free Read in delete_and_unsubscribe_port (2)
sound
|
19 |
syz |
done |
|
4 |
2082d |
2107d
|
15/29 |
2038d |
80982c7e834e
ALSA: seq: oss: Serialize ioctls
|
|
KASAN: use-after-free Write in addr_resolve
rdma
|
22 |
|
|
|
1 |
2139d |
2136d
|
15/29 |
2038d |
f6a9d47ae685
RDMA/cma: Execute rdma_cm destruction from a handler properly
|
|
general protection fault in cdev_del
usb
fs
|
2 |
C |
|
|
315 |
2047d |
2515d
|
15/29 |
2038d |
e911e99a0770
usb: hso: check for return value in hso_serial_common_create()
|
|
general protection fault in afs_dynroot_depopulate
afs
|
2 |
|
|
|
1 |
2066d |
2064d
|
15/29 |
2038d |
5e0b17b026eb
afs: Fix NULL deref in afs_dynroot_depopulate()
|
|
KASAN: use-after-free Read in sock_def_write_space (2)
arm-msm
net
|
19 |
C |
error |
|
29 |
2038d |
2095d
|
15/29 |
2038d |
af9f691f0f5b
qrtr: orphan socket in qrtr_release()
|
|
kernel BUG at mm/khugepaged.c:LINE!
mm
|
-1 |
C |
done |
|
30 |
2065d |
2076d
|
15/29 |
2038d |
f3f99d63a815
khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
|
|
possible deadlock in shmem_fallocate (4)
mm
|
4 |
C |
done |
|
81 |
2088d |
2303d
|
15/29 |
2038d |
3e338d3c95c7
staging: android: ashmem: Fix lockdep warning for write operation
|
|
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter
io-uring
fs
|
10 |
C |
done |
|
24 |
2063d |
2075d
|
15/29 |
2038d |
2dd2111d0d38
io_uring: Fix NULL pointer dereference in loop_rw_iter()
|
|
kernel BUG at net/rxrpc/recvmsg.c:LINE!
afs
net
|
-1 |
C |
error |
|
10 |
2084d |
2113d
|
15/29 |
2038d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
KASAN: use-after-free Read in addr_handler (2)
rdma
|
19 |
|
|
|
2 |
2093d |
2136d
|
15/29 |
2038d |
f6a9d47ae685
RDMA/cma: Execute rdma_cm destruction from a handler properly
|
|
KASAN: use-after-free Read in io_async_task_func
io-uring
fs
|
19 |
syz |
error |
|
1 |
2075d |
2074d
|
15/29 |
2038d |
6d816e088c35
io_uring: hold 'ctx' reference around task_work queue + execute
|
|
WARNING in idr_alloc
arm-msm
net
|
-1 |
C |
done |
|
65 |
2047d |
2121d
|
15/29 |
2038d |
8dfddfb79653
net: qrtr: fix usage of idr in port assignment to socket
|
|
WARNING in drop_nlink
fs
|
-1 |
C |
done |
error |
1 |
2185d |
2181d
|
15/29 |
2038d |
facb03dddec0
fs/minix: don't allow getting deleted inodes
|
|
KASAN: slab-out-of-bounds Read in vc_do_resize
serial
|
17 |
C |
done |
|
55 |
2075d |
2310d
|
15/29 |
2038d |
d88ca7e1a27e
fbmem: pull fbcon_update_vcs() out of fb_set_var()
|
|
general protection fault in fib_dump_info (2)
net
|
2 |
C |
done |
|
16 |
2062d |
2064d
|
15/29 |
2038d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
KASAN: slab-out-of-bounds Read in vsscanf (2)
lsm
|
17 |
C |
error |
|
5 |
2080d |
2094d
|
15/29 |
2038d |
a6bd4f6d9b07
Smack: fix another vsscanf out of bounds
|
|
KMSAN: uninit-value in netlink_policy_dump_start
net
|
7 |
C |
|
|
31 |
2043d |
2046d
|
15/29 |
2038d |
d1fb55592909
netlink: fix state reallocation in policy export
|
|
possible deadlock in uprobe_clear_state (2)
perf
trace
|
4 |
|
|
|
1 |
2105d |
2101d
|
15/29 |
2038d |
f867c771f988
binder: Don't use mmput() from shrinker function.
|
|
KASAN: null-ptr-deref Write in media_request_close
media
|
12 |
C |
done |
|
17 |
2080d |
2129d
|
15/29 |
2038d |
e30cc79cc80f
media: media-request: Fix crash if memory allocation fails
|
|
KASAN: use-after-free Read in devlink_health_reporter_destroy
net
|
19 |
C |
error |
|
1188 |
2102d |
2103d
|
15/29 |
2038d |
5d037b4d3df7
devlink: Fix use-after-free when destroying health reporters
|
|
kernel BUG at net/core/dev.c:LINE! (3)
net
|
-1 |
C |
done |
|
979 |
2052d |
2196d
|
15/29 |
2038d |
832707021666
bonding: fix a potential double-unregister
|
|
KASAN: use-after-free Read in ceph_mdsc_destroy
ceph
fs
|
19 |
|
|
|
4 |
2078d |
2093d
|
15/29 |
2038d |
a7caa88f8b72
ceph: fix use-after-free for fsc->mdsc
|
|
KASAN: use-after-free Read in path_init (2)
fs
|
19 |
C |
done |
|
29 |
2072d |
2074d
|
15/29 |
2038d |
24fb33d40d60
fix breakage in do_rmdir()
|
|
WARNING in __kernel_write
fs
|
-1 |
C |
done |
|
522 |
2087d |
2107d
|
15/29 |
2038d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
KMSAN: uninit-value in get_block
fs
|
7 |
C |
|
|
13 |
2154d |
2157d
|
15/29 |
2038d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_size
openvswitch
|
4 |
C |
done |
|
4093 |
2079d |
2081d
|
15/29 |
2038d |
fea07a487c6d
net: openvswitch: silence suspicious RCU usage warning
|
|
WARNING in submit_rx_urb/usb_submit_urb
usb
staging
|
-1 |
C |
|
|
397 |
2089d |
2514d
|
15/29 |
2038d |
faaff9765664
staging: wlan-ng: properly check endpoint types
|
|
WARNING in ib_unregister_device_queued
rdma
|
-1 |
|
|
|
2 |
2170d |
2181d
|
15/29 |
2038d |
0cb42c026583
RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued()
|
|
KASAN: use-after-free Read in get_block
|
19 |
C |
done |
|
23 |
2104d |
2181d
|
15/29 |
2038d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
WARNING in idtentry_exit_cond_rcu
kernel
|
-1 |
syz |
|
|
6 |
2112d |
2108d
|
15/29 |
2038d |
bce9b042ec73
x86/traps: Disable interrupts in exc_aligment_check()
|
|
INFO: task hung in ovs_dp_masks_rebalance
openvswitch
|
1 |
|
|
|
771 |
2051d |
2094d
|
15/29 |
2038d |
a65878d6f00b
net: openvswitch: fixes potential deadlock in dp cleanup code
|
|
memory leak in nf_tables_addchain
netfilter
|
3 |
C |
|
|
1 |
2076d |
2074d
|
15/29 |
2038d |
59136aa3b264
netfilter: nf_tables: free chain context when BINDING flag is missing
|
|
KASAN: null-ptr-deref Write in get_block
fs
|
12 |
C |
done |
|
101 |
2104d |
2217d
|
15/29 |
2038d |
da27e0a0e5f6
fs/minix: check return value of sb_getblk()
|
|
WARNING: suspicious RCU usage in tipc_l2_send_msg
tipc
|
4 |
syz |
done |
|
60 |
2062d |
2120d
|
15/29 |
2038d |
f6db90964162
tipc: call rcu_read_lock() in tipc_aead_encrypt_done()
|
|
WARNING in compat_do_ebt_get_ctl
bridge
netfilter
|
-1 |
C |
done |
|
15 |
2068d |
2079d
|
15/29 |
2038d |
5c04da55c754
netfilter: ebtables: reject bogus getopt len value
|
|
memory leak in io_submit_sqes
fs
io-uring
|
3 |
C |
|
|
2 |
2055d |
2074d
|
15/29 |
2038d |
a36da65c4656
io_uring: fail poll arm on queue proc failure
|
|
WARNING in __nf_unregister_net_hook (2)
netfilter
|
-1 |
C |
done |
|
9 |
2104d |
2102d
|
15/29 |
2038d |
1e9451cbda45
netfilter: nf_tables: fix nat hook table deletion
|
|
KCSAN: data-race in page_counter_try_charge / page_counter_try_charge (2)
mm
cgroups
|
6 |
|
|
|
148 |
2073d |
2317d
|
15/29 |
2038d |
6e4bd50f3888
mm/page_counter: fix various data races at memsw
|
|
KASAN: use-after-free Read in j1939_tp_txtimer
can
|
19 |
C |
done |
error |
5 |
2104d |
2303d
|
15/29 |
2038d |
cd3b3636c99f
can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
|
|
KASAN: use-after-free Write in get_block
fs
|
22 |
C |
inconclusive |
inconclusive |
12 |
2120d |
2170d
|
15/29 |
2038d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
KASAN: use-after-free Read in l2cap_chan_close
|
19 |
C |
done |
|
37 |
2079d |
2260d
|
15/29 |
2038d |
f9c70bdc279b
Bluetooth: add a mutex lock to avoid UAF in do_enale_set
|
|
KASAN: use-after-free Read in ax88172a_unbind
usb
|
19 |
C |
done |
|
2723 |
2089d |
2330d
|
15/29 |
2038d |
c28d9a285668
ax88172a: fix ax88172a_unbind() failures
|
|
linux-next boot error: WARNING in mem_cgroup_css_alloc
kernel
|
-1 |
|
|
|
6 |
2072d |
2072d
|
15/29 |
2038d |
9f457179244a
mm: memcontrol: fix warning when allocating the root cgroup
|
|
KCSAN: data-race in vm_area_dup / vma_interval_tree_remove (2)
mm
|
6 |
|
|
|
70 |
2132d |
2246d
|
15/29 |
2038d |
cda099b37d71
fork: Annotate a data race in vm_area_dup()
|
|
general protection fault in vsock_poll
net
virt
|
2 |
syz |
done |
|
15 |
2082d |
2095d
|
15/29 |
2038d |
1980c0584483
vsock: fix potential null pointer dereference in vsock_poll()
|
|
BUG: corrupted list in p9_read_work (2)
v9fs
|
8 |
syz |
done |
error |
38 |
2340d |
2701d
|
15/29 |
2038d |
74d6a5d56629
9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
|
|
general protection fault in io_poll_double_wake
io-uring
fs
|
2 |
C |
done |
|
8 |
2042d |
2070d
|
15/29 |
2038d |
d4e7cd36a90e
io_uring: sanitize double poll handling
|
|
KMSAN: uninit-value in geneve_xmit
net
|
7 |
C |
|
|
163 |
2041d |
2094d
|
15/29 |
2038d |
32818c075c54
geneve: fix an uninitialized value in geneve_changelink()
|
|
general protection fault in syscall_return_slowpath
kernel
|
2 |
syz |
inconclusive |
done |
1 |
2144d |
2230d
|
15/29 |
2038d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
KMSAN: uninit-value in ax25_connect
hams
|
7 |
C |
|
|
15 |
2046d |
2179d
|
15/29 |
2038d |
2f2a7ffad5c6
AX.25: Fix out-of-bounds read in ax25_connect()
|
|
general protection fault in j1939_netdev_start
can
|
2 |
C |
done |
|
8 |
2090d |
2242d
|
15/29 |
2038d |
af804b782635
can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated
|
|
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt
bluetooth
|
17 |
C |
|
|
16 |
2081d |
2109d
|
15/29 |
2038d |
51c19bf3d5cf
Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
|
|
KASAN: wild-memory-access Read in rawv6_setsockopt
net
|
17 |
|
|
|
2 |
2079d |
2079d
|
15/29 |
2038d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
KASAN: out-of-bounds Read in pebs_update_state
perf
|
17 |
syz |
inconclusive |
done |
1 |
2115d |
2163d
|
15/29 |
2038d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
WARNING in submit_audio_out_urb/usb_submit_urb
sound
usb
|
-1 |
syz |
|
|
2 |
2107d |
2107d
|
15/29 |
2038d |
6e8a914ad619
ALSA: line6: Perform sanity check for each URB creation
|
|
KASAN: use-after-free Read in lockref_get
fs
|
19 |
|
|
|
7 |
2142d |
2241d
|
15/29 |
2038d |
bad8e64fb19d
blktrace: fix debugfs use after free
|
|
KASAN: use-after-free Read in io_uring_setup (2)
fs
|
19 |
|
|
|
1 |
2086d |
2086d
|
15/29 |
2038d |
d1719f70d0a5
io_uring: don't touch 'ctx' after installing file descriptor
|
|
KASAN: use-after-free Read in __xfrm6_tunnel_spi_lookup
net
|
19 |
C |
error |
|
12 |
2096d |
2101d
|
15/29 |
2038d |
8b404f46dd6a
xfrm: interface: not xfrmi_ipv6/ipip_handler twice
|
|
general protection fault in khugepaged
mm
|
2 |
C |
done |
|
3 |
2095d |
2107d
|
15/29 |
2038d |
594cced14ad3
khugepaged: fix null-pointer dereference due to race
|
|
KASAN: invalid-free in snd_seq_port_disconnect
sound
|
24 |
syz |
done |
|
9 |
2082d |
2086d
|
15/29 |
2038d |
80982c7e834e
ALSA: seq: oss: Serialize ioctls
|
|
KASAN: slab-out-of-bounds Write in sctp_setsockopt
sctp
|
21 |
C |
error |
|
590 |
2089d |
2094d
|
15/29 |
2038d |
dfd3d5266dc1
sctp: fix slab-out-of-bounds in SCTP_DELAYED_SACK processing
|
|
possible deadlock in io_timeout_fn
io-uring
fs
|
4 |
C |
done |
|
4 |
2072d |
2075d
|
15/29 |
2038d |
51a4cc112c7a
io_uring: defer file table grabbing request cleanup for locked requests
|
|
KMSAN: uninit-value in ucma_connect
rdma
|
7 |
C |
|
|
138 |
2043d |
2094d
|
15/29 |
2038d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
|
WARNING in snd_usbmidi_submit_urb/usb_submit_urb
usb
sound
|
-1 |
C |
done |
|
42 |
2121d |
2145d
|
15/29 |
2038d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
WARNING in snd_info_get_line
sound
|
-1 |
C |
done |
|
36 |
2094d |
2099d
|
15/29 |
2038d |
60379ba08532
ALSA: info: Drop WARN_ON() from buffer NULL sanity check
|
|
WARNING: suspicious RCU usage in ovs_flow_tbl_destroy
openvswitch
|
4 |
C |
done |
|
658 |
2079d |
2081d
|
15/29 |
2038d |
fea07a487c6d
net: openvswitch: silence suspicious RCU usage warning
|
|
INFO: task hung in __do_sys_reboot
kernel
|
1 |
|
|
|
1554 |
2054d |
2110d
|
15/29 |
2038d |
b292b50b0efc
driver core: Fix probe_count imbalance in really_probe()
|
|
INFO: trying to register non-static key in red_destroy
net
|
-1 |
C |
error |
|
318 |
2089d |
2111d
|
15/29 |
2038d |
608b4adab178
net_sched: initialize timer earlier in red_init()
|
|
general protection fault in go7007_usb_probe
usb
media
|
2 |
C |
|
|
2103 |
2077d |
2186d
|
15/29 |
2038d |
137641287eb4
go7007: add sanity checking for endpoints
|
|
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt
bluetooth
|
17 |
C |
error |
|
9 |
2083d |
2103d
|
15/29 |
2038d |
629b49c848ee
Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
|
|
KMSAN: uninit-value in __tipc_nl_compat_dumpit (3)
tipc
|
7 |
C |
|
|
6181 |
2038d |
2103d
|
15/29 |
2038d |
47733f9daf4f
tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
|
|
KASAN: wild-memory-access Read in ip_setsockopt
net
|
17 |
C |
|
|
2 |
2072d |
2072d
|
15/29 |
2038d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
WARNING: suspicious RCU usage in bond_ipsec_add_sa
net
|
4 |
|
|
|
214 |
2039d |
2110d
|
15/29 |
2038d |
f548a476268d
bonding: don't need RTNL for ipsec helpers
|
|
KASAN: wild-memory-access Read in sctp_setsockopt
sctp
|
17 |
C |
|
|
2 |
2072d |
2072d
|
15/29 |
2038d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
KMSAN: uninit-value in xa_load
rdma
|
7 |
C |
|
|
208 |
2039d |
2094d
|
15/29 |
2038d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
|
WARNING in vkms_vblank_simulate
|
-1 |
C |
done |
|
12903 |
2044d |
2621d
|
15/29 |
2038d |
51f644b40b4b
drm/atomic-helper: reset vblank on crtc reset
|
|
WARNING in snd_usbmidi_input_start/usb_submit_urb
usb
sound
|
-1 |
C |
done |
|
231 |
2098d |
2141d
|
15/29 |
2038d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
KASAN: use-after-free Read in smk_write_relabel_self
lsm
|
19 |
C |
done |
|
2 |
2142d |
2138d
|
15/29 |
2038d |
beb4ee6770a8
Smack: fix use-after-free in smk_write_relabel_self()
|
|
possible deadlock in pipe_lock (3)
overlayfs
|
4 |
C |
inconclusive |
done |
4 |
2266d |
2303d
|
15/29 |
2067d |
1a980b8cbf00
ovl: add splice file read write helper
|
|
possible deadlock in dev_mc_unsync
net
|
4 |
C |
error |
done |
78 |
2105d |
2120d
|
15/29 |
2067d |
be74294ffa24
net: get rid of lockdep_set_class_and_subclass()
|
|
possible deadlock in lock_trace (3)
fs
|
4 |
syz |
inconclusive |
done |
69 |
2205d |
2340d
|
15/29 |
2067d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
|
possible deadlock in do_io_accounting (3)
fs
|
4 |
C |
inconclusive |
done |
39 |
2212d |
2303d
|
15/29 |
2067d |
76518d379885
proc: io_accounting: Use new infrastructure to fix deadlocks in execve
|
|
possible deadlock in proc_pid_personality
fs
|
4 |
syz |
inconclusive |
done |
3 |
2222d |
2232d
|
15/29 |
2067d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
|
WARNING: bad unlock balance in rcu_lock_release
fs
|
4 |
C |
inconclusive |
done |
1433 |
2208d |
2489d
|
15/29 |
2067d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
|
WARNING in hsr_addr_subst_dest
|
-1 |
C |
done |
done |
8639 |
2204d |
2661d
|
15/29 |
2067d |
4b793acdca00
hsr: use netdev_err() instead of WARN_ONCE()
|
|
WARNING: locking bug in try_to_grab_pending
net
|
4 |
syz |
error |
done |
1 |
2156d |
2619d
|
15/29 |
2067d |
1378817486d6
tipc: block BH before using dst_cache
|
|
KASAN: stack-out-of-bounds Read in update_stack_state
kernel
|
17 |
C |
unreliable |
done |
388 |
2281d |
2976d
|
15/29 |
2067d |
4ee7c60de83a
init, tracing: Add initcall trace events
|
|
WARNING: bad unlock balance in rcu_core
fs
|
4 |
C |
inconclusive |
done |
3578 |
2204d |
2559d
|
15/29 |
2067d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
|
general protection fault in qrtr_endpoint_post
net
arm-msm
|
2 |
C |
done |
done |
54 |
2105d |
2122d
|
15/29 |
2074d |
8ff41cc21714
net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
|
|
invalid opcode in __phys_addr (2)
netfilter
|
2 |
|
|
|
1 |
2117d |
2117d
|
15/29 |
2081d |
c4e8fa9074ad
netfilter: ipset: call ip_set_free() instead of kfree()
|
|
PANIC: double fault in fixup_bad_iret
kernel
|
2 |
C |
error |
|
11753 |
2108d |
2148d
|
15/29 |
2085d |
5144f8a8dfd7
compiler_types.h: Add __no_sanitize_{address,undefined} to noinstr
|
|
general protection fault in __apic_accept_irq (2)
kvm-x86
|
2 |
C |
done |
|
9 |
2121d |
2117d
|
15/29 |
2085d |
9d3c447c72fb
KVM: X86: Fix async pf caused null-ptr-deref
|
|
KCSAN: data-race in copy_process / release_task
kernel
|
6 |
|
|
|
154 |
2114d |
2242d
|
15/29 |
2085d |
c17d1a3a8ee4
fork: annotate data race in copy_process()
|
|
KASAN: use-after-free Read in dmabuffs_dname
media
dri
|
19 |
|
|
|
1 |
2236d |
2231d
|
15/29 |
2085d |
4ab59c3c638c
dma-buf: Move dma_buf_release() from fops to dentry_ops
|
|
WARNING in enqueue_task_dl
kernel
|
-1 |
C |
done |
|
13 |
2129d |
2706d
|
15/29 |
2085d |
740797ce3a12
sched/core: Fix PI boosting between RT and DEADLINE tasks
|
|
KCSAN: data-race in copy_process / copy_process (2)
mm
|
6 |
|
|
|
294 |
2114d |
2292d
|
15/29 |
2085d |
c17d1a3a8ee4
fork: annotate data race in copy_process()
|
|
PANIC: double fault in check_preemption_disabled
kernel
|
2 |
C |
|
|
2181 |
2116d |
2121d
|
15/29 |
2085d |
c7aadc09321d
x86/entry: Increase entry_stack size to a full page
|
|
memory leak in nbd_add_socket
nbd
|
3 |
C |
|
|
1 |
2207d |
2207d
|
15/29 |
2085d |
579dd91ab3a5
nbd: Fix memory leak in nbd_add_socket
|
|
WARNING in xfrm_policy_insert
net
|
-1 |
C |
inconclusive |
done |
6 |
2130d |
2983d
|
15/29 |
2088d |
ed17b8d377ea
xfrm: fix a warning in xfrm_policy_insert_list
|
|
BUG: unable to handle kernel paging request in netif_receive_generic_xdp
|
8 |
C |
done |
done |
160 |
2143d |
2279d
|
15/29 |
2089d |
96aa1b22bd6b
tun: correct header offsets in napi frags mode
|
|
WARNING in iomap_apply
iomap
|
-1 |
C |
done |
|
25 |
2156d |
2196d
|
15/29 |
2096d |
175efa81feb8
ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
|
|
KASAN: use-after-free Read in sock_def_write_space
arm-msm
net
|
19 |
C |
done |
|
67 |
2097d |
2462d
|
15/29 |
2096d |
a9b111016235
llc: make sure applications use ARPHRD_ETHER
|
|
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post
arm-msm
net
|
17 |
C |
|
|
8 |
2119d |
2119d
|
15/29 |
2096d |
8ff41cc21714
net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
|
|
memory leak in qdisc_create_dflt
net
|
3 |
C |
|
|
1 |
2115d |
2111d
|
15/29 |
2096d |
306381aec7c2
net_sched: fix a memory leak in atm_tc_init()
|
|
KASAN: vmalloc-out-of-bounds Read in netdev_name_node_lookup_rcu
wireguard
|
17 |
|
|
|
1 |
2117d |
2117d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
WARNING in hsr_dev_finalize
net
|
-1 |
C |
error |
|
1546 |
2104d |
2120d
|
15/29 |
2096d |
ccfc9df1352b
hsr: fix interface leak in error path of hsr_dev_finalize()
|
|
kernel BUG at net/l2tp/l2tp_core.c:LINE!
net
|
-1 |
C |
|
|
10 |
2121d |
2117d
|
15/29 |
2096d |
c9a368f1c0fb
bpf: net: Avoid incorrect bpf_sk_reuseport_detach call
|
|
KASAN: vmalloc-out-of-bounds Read in tipc_nl_publ_dump
tipc
|
17 |
C |
|
|
22 |
2102d |
2120d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in netdev_name_node_lookup_rcu
wireguard
|
19 |
C |
error |
|
17 |
2106d |
2117d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in nl8NUM_dump_wpan_phy (2)
wpan
|
19 |
C |
|
|
18 |
2106d |
2120d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
possible deadlock in dev_uc_sync_multiple (2)
net
|
4 |
|
|
|
26 |
2107d |
2117d
|
15/29 |
2096d |
be74294ffa24
net: get rid of lockdep_set_class_and_subclass()
|
|
KASAN: vmalloc-out-of-bounds Read in __nla_validate_parse
tipc
|
17 |
|
|
|
7 |
2103d |
2119d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_nl_publ_dump (2)
tipc
|
19 |
C |
|
|
14 |
2106d |
2117d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_nl_node_dump_monitor_peer (2)
tipc
|
19 |
C |
|
|
54 |
2104d |
2120d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_udp_nl_dump_remoteip (2)
tipc
|
19 |
C |
|
|
9 |
2105d |
2124d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in devlink_get_from_attrs
net
|
19 |
C |
|
|
25 |
2104d |
2117d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
WARNING in warn_bad_map
mptcp
|
-1 |
|
|
|
1 |
2128d |
2124d
|
15/29 |
2096d |
9c29e3615274
mptcp: fix DSS map generation on fin retransmission
|
|
KASAN: vmalloc-out-of-bounds Read in nl8NUM_dump_wpan_phy
wpan
|
17 |
C |
|
|
145 |
2102d |
2123d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: vmalloc-out-of-bounds Read in __cfg8NUM_wpan_dev_from_attrs
wpan
|
17 |
|
|
|
4 |
2105d |
2119d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_nl_node_dump_link
tipc
|
19 |
C |
error |
|
10 |
2110d |
2120d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in dev_get_by_name
wireguard
|
19 |
C |
|
|
4 |
2111d |
2117d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: vmalloc-out-of-bounds Read in tipc_nl_node_dump_monitor_peer
tipc
|
17 |
C |
error |
|
9 |
2105d |
2123d
|
15/29 |
2096d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
BUG: unable to handle kernel NULL pointer dereference in tomoyo_domain_quota_is_ok (2)
tomoyo
|
10 |
|
|
|
7 |
2120d |
2135d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
general protection fault in unpin_user_pages
mm
|
2 |
C |
done |
|
13 |
2157d |
2157d
|
15/29 |
2099d |
f78cdbd75a57
rds: fix crash in rds_info_getsockopt()
|
|
KASAN: use-after-free Write in bpf_link_put
bpf
|
22 |
|
|
|
2 |
2175d |
2177d
|
15/29 |
2099d |
138c67677ff5
bpf: Fix use-after-free of bpf_link when priming half-fails
|
|
KASAN: use-after-free Write in fsnotify_detach_connector_from_object
fs
|
22 |
C |
done |
|
4 |
2130d |
2134d
|
15/29 |
2099d |
ef1548adada5
proc: Use new_inode not new_inode_pseudo
|
|
KASAN: use-after-free Read in ip_icmp_error
net
|
19 |
C |
done |
|
14 |
2150d |
2151d
|
15/29 |
2099d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
BUG: unable to handle kernel NULL pointer dereference in schedule_timeout
usb
|
10 |
|
|
|
1 |
2120d |
2120d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: use-after-free Write in ath9k_htc_rx_msg
wireless
|
22 |
C |
|
|
93 |
2135d |
2212d
|
15/29 |
2099d |
e4ff08a4d727
ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
|
|
BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor
|
4 |
C |
done |
|
22297 |
2145d |
2483d
|
15/29 |
2099d |
1378817486d6
tipc: block BH before using dst_cache
|
|
KASAN: slab-out-of-bounds Read in vsscanf
lsm
|
17 |
C |
done |
|
61 |
2109d |
2212d
|
15/29 |
2099d |
84e99e58e8d1
Smack: slab-out-of-bounds in vsscanf
|
|
KASAN: slab-out-of-bounds Read in ip_icmp_error
net
|
17 |
C |
done |
|
13 |
2150d |
2151d
|
15/29 |
2099d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
WARNING: proc registration bug in snmp6_register_dev
net
|
-1 |
C |
done |
|
14 |
2126d |
2192d
|
15/29 |
2099d |
de0083c7ed7d
hsr: avoid to create proc file after unregister
|
|
KASAN: null-ptr-deref Write in choke_reset
|
12 |
C |
done |
|
1441 |
2155d |
2188d
|
15/29 |
2099d |
8738c85c72b3
sch_choke: avoid potential panic in choke_reset()
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id
usb
sound
|
21 |
C |
done |
|
39 |
2118d |
2123d
|
15/29 |
2099d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
BUG: unable to handle kernel NULL pointer dereference in number
fs
|
10 |
|
|
|
1 |
2129d |
2125d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt
sound
usb
|
21 |
C |
done |
|
5 |
2121d |
2123d
|
15/29 |
2099d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
KASAN: use-after-free Read in vkms_dumb_create
dri
|
19 |
syz |
done |
|
2 |
2184d |
2180d
|
15/29 |
2099d |
0ea2ea42b31a
drm/vkms: Hold gem object while still in-use
|
|
BUG: unable to handle kernel NULL pointer dereference in check_preemption_disabled (3)
ext4
|
10 |
|
|
|
3 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: use-after-free Read in inet_diag_bc_sk
net
|
19 |
C |
done |
|
30 |
2174d |
2176d
|
15/29 |
2099d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
memory leak in ctnetlink_del_conntrack
netfilter
|
3 |
C |
|
|
1 |
2139d |
2137d
|
15/29 |
2099d |
6c2d2176a85e
netfilter: ctnetlink: memleak in filter initialization error path
|
|
INFO: rcu detected stall in inet_sendmsg (2)
perf
|
1 |
|
|
|
13 |
2100d |
2184d
|
15/29 |
2099d |
df4953e4e997
sch_sfq: validate silly quantum values
|
|
linux-next boot error: WARNING: suspicious RCU usage in ipmr_get_table
net
|
-1 |
|
|
|
60 |
2171d |
2179d
|
15/29 |
2099d |
7013908c2db2
ipmr: Add lockdep expression to ipmr_for_each_table macro
|
|
BUG: unable to handle kernel NULL pointer dereference in dev_ifconf
net
|
10 |
|
|
|
1 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: using smp_processor_id() in preemptible [ADDR] code: /NUM
net
|
4 |
|
|
|
1 |
2156d |
2156d
|
15/29 |
2099d |
1378817486d6
tipc: block BH before using dst_cache
|
|
BUG: MAX_LOCKDEP_CHAINS too low!
kernel
|
-1 |
C |
done |
|
17240 |
2099d |
2757d
|
15/29 |
2099d |
e7511f560f54
bonding: remove useless stats_lock_key
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
|
INFO: task hung in locks_remove_posix
fs
input
usb
|
1 |
syz |
|
|
2231 |
2134d |
2157d
|
15/29 |
2099d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
|
WARNING: refcount bug in crypto_mod_get
crypto
|
13 |
C |
done |
|
2 |
2165d |
2176d
|
15/29 |
2099d |
6603523bf5e4
crypto: api - Fix use-after-free and race in crypto_spawn_alg
|
|
BUG: unable to handle kernel NULL pointer dereference in mpihelp_addmul_1
crypto
|
10 |
|
|
|
1 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (3)
net
|
21 |
|
|
|
1 |
2149d |
2149d
|
15/29 |
2099d |
d9a81a225277
l2tp: add sk_family checks to l2tp_validate_socket
|
|
linux-next test error: BUG: using smp_processor_id() in preemptible [ADDR] code: syz-fuzzer/6792
ext4
|
-1 |
|
|
|
1 |
2144d |
2144d
|
15/29 |
2099d |
811985365378
ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
|
|
KCSAN: data-race in __fat_write_inode / fat12_ent_get
exfat
|
6 |
|
|
|
2 |
2211d |
2204d
|
15/29 |
2099d |
b1b65750b8db
fat: don't allow to mount if the FAT length == 0
|
|
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
wireless
|
21 |
C |
|
|
57 |
2135d |
2208d
|
15/29 |
2099d |
19d6c375d671
ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
|
|
KASAN: slab-out-of-bounds Read in ovl_check_fb_len
overlayfs
|
17 |
syz |
done |
|
3 |
2156d |
2155d
|
15/29 |
2099d |
522f6e6cba68
ovl: fix out of bounds access warning in ovl_check_fb_len()
|
|
KASAN: use-after-free Read in usblp_bulk_read
usb
|
19 |
|
|
|
7 |
2108d |
2186d
|
15/29 |
2099d |
296a193b0612
usblp: poison URBs upon disconnect
|
|
BUG: unable to handle kernel NULL pointer dereference in alloc_pages_vma
mm
|
10 |
|
|
|
1 |
2129d |
2125d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
linux-next boot error: general protection fault in tomoyo_get_local_path
fs
|
-1 |
|
|
|
18 |
2156d |
2162d
|
15/29 |
2099d |
9d78edeaec75
proc: proc_pid_ns takes super_block as an argument
|
|
KASAN: use-after-free Read in htc_connect_service
wireless
|
19 |
C |
|
|
41041 |
2134d |
2212d
|
15/29 |
2099d |
ced21a4c726b
ath9k: Fix use-after-free Read in htc_connect_service
|
|
KMSAN: uninit-value in tbf_enqueue
net
|
7 |
|
|
|
21 |
2099d |
2186d
|
15/29 |
2099d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
general protection fault in ima_free_template_entry
lsm
integrity
|
2 |
C |
done |
|
3 |
2122d |
2142d
|
15/29 |
2099d |
42413b49804b
ima: Directly free *entry in ima_alloc_init_template() if digests is NULL
|
|
WARNING in kvm_inject_emulated_page_fault
kvm-x86
|
-1 |
C |
done |
|
20 |
2123d |
2142d
|
15/29 |
2099d |
7a35e515a705
KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
|
|
general protection fault in kobject_get (2)
kernel
|
2 |
|
|
|
2 |
2128d |
2157d
|
15/29 |
2099d |
11a0ae4c4bff
RDMA: Allow ib_client's to fail when add() is called
|
|
general protection fault in fq_codel_enqueue
net
|
2 |
C |
done |
|
25 |
2104d |
2188d
|
15/29 |
2099d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
BUG: unable to handle kernel NULL pointer dereference in create_empty_buffers
ext4
|
10 |
|
|
|
1 |
2141d |
2137d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
memory leak in crypto_create_tfm
crypto
|
3 |
C |
|
|
14 |
2127d |
2143d
|
15/29 |
2099d |
819966c06b75
crypto: drbg - always try to free Jitter RNG instance
|
|
WARNING in memtype_reserve
|
-1 |
C |
done |
|
600 |
2160d |
2168d
|
15/29 |
2099d |
a0e710a7def4
USB: usbfs: fix mmap dma mismatch
|
|
general protection fault in put_cmsg
net
|
2 |
C |
done |
|
3 |
2164d |
2165d
|
15/29 |
2099d |
1b2f08df0a88
ipv6: set msg_control_is_user in do_ipv6_getsockopt
|
|
WARNING in usbhid_raw_request/usb_submit_urb (3)
usb
|
-1 |
syz |
|
|
18 |
2178d |
2284d
|
15/29 |
2099d |
ac854131d984
USB: core: Fix misleading driver bug report
|
|
memory leak in nf_tables_parse_netdev_hooks (3)
netfilter
|
3 |
C |
|
|
1 |
2139d |
2137d
|
15/29 |
2099d |
3003055f5066
netfilter: nf_tables: hook list memleak in flowtable deletion
|
|
general protection fault in proc_kill_sb
fs
|
2 |
|
|
|
8 |
2124d |
2136d
|
15/29 |
2099d |
058f2e4da79b
proc: s_fs_info may be NULL when proc_kill_sb is called
|
|
INFO: trying to register non-static key in io_cqring_ev_posted (3)
fs
|
-1 |
C |
done |
|
3 |
2158d |
2160d
|
15/29 |
2099d |
583863ed9181
io_uring: initialize ctx->sqo_wait earlier
|
|
BUG: unable to handle kernel paging request in do_xdp_generic
|
8 |
C |
done |
done |
7444 |
2173d |
2279d
|
15/29 |
2099d |
96aa1b22bd6b
tun: correct header offsets in napi frags mode
|
|
KASAN: slab-out-of-bounds Read in inet_diag_bc_sk
net
|
17 |
C |
done |
|
45 |
2174d |
2176d
|
15/29 |
2099d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
BUG: stack guard page was hit in deref_stack_reg
kernel
|
-1 |
|
|
|
2 |
2164d |
2224d
|
15/29 |
2099d |
dd912306ff00
net: fix a potential recursive NETDEV_FEAT_CHANGE
|
|
INFO: task syz-executor can't die for more than 143 seconds. (2)
|
-1 |
C |
done |
|
2512 |
2100d |
2367d
|
15/29 |
2099d |
566d136289dc
pipe: Fix pipe_full() test in opipe_prep().
|
|
BUG: unable to handle kernel NULL pointer dereference in debug_smp_processor_id (2)
net
|
10 |
|
|
|
3 |
2121d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
net-next test error: KASAN: use-after-free Write in afs_wake_up_async_call
afs
|
-1 |
|
|
|
60 |
2121d |
2129d
|
15/29 |
2099d |
0041cd5a5044
rxrpc: Fix notification call on completion of discarded calls
|
|
BUG: unable to handle kernel NULL pointer dereference in net_rx_queue_update_kobjects
net
|
10 |
|
|
|
1 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
general protection fault in erspan_validate
net
|
2 |
C |
done |
|
520 |
2165d |
2172d
|
15/29 |
2099d |
51fa960d3b51
erspan: Check IFLA_GRE_ERSPAN_VER is set.
|
|
bpf test error: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks
ext4
|
-1 |
|
|
|
48 |
2128d |
2131d
|
15/29 |
2099d |
811985365378
ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE! (5)
serial
|
-1 |
C |
done |
|
241 |
2103d |
2176d
|
15/29 |
2099d |
57d38f26d81e
vt: fix unicode console freeing with a common interface
|
|
WARNING: refcount bug in crypto_destroy_tfm
crypto
|
13 |
C |
done |
|
4 |
2178d |
2201d
|
15/29 |
2099d |
6603523bf5e4
crypto: api - Fix use-after-free and race in crypto_spawn_alg
|
|
general protection fault in inet_unhash
net
|
2 |
C |
done |
|
40 |
2120d |
2149d
|
15/29 |
2099d |
02c71b144c81
l2tp: do not use inet_hash()/inet_unhash()
|
|
BUG: unable to handle kernel NULL pointer dereference in direct_page_fault
kvm-x86
|
10 |
|
|
|
1 |
2129d |
2125d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
linux-next boot error: WARNING: suspicious RCU usage in bpq_device_event
net
|
-1 |
|
|
|
6 |
2162d |
2163d
|
15/29 |
2099d |
95f59bf88bb7
drivers: net: hamradio: Fix suspicious RCU usage warning in bpqether.c
|
|
BUG: unable to handle kernel NULL pointer dereference in try_async_pf
kvm-x86
|
10 |
|
|
|
1 |
2129d |
2125d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in unlock_page
fs
mm
|
10 |
|
|
|
1 |
2131d |
2131d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: use-after-free Read in rpc_net_ns
net
nfs
|
19 |
syz |
done |
|
10 |
2164d |
2170d
|
15/29 |
2099d |
31e9a7f35352
SUNRPC: fix use-after-free in rpc_free_client_work()
|
|
WARNING in tipc_msg_append
tipc
|
-1 |
C |
done |
|
107 |
2126d |
2140d
|
15/29 |
2099d |
c9aa81faf191
tipc: fix kernel WARNING in tipc_msg_append()
|
|
BUG: unable to handle kernel NULL pointer dereference in __es_insert_extent
ext4
|
10 |
|
|
|
1 |
2132d |
2132d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
bpf-next test error: BUG: using smp_processor_id() in preemptible code in ext4_mb_new_blocks
ext4
|
-1 |
|
|
|
90 |
2129d |
2136d
|
15/29 |
2099d |
811985365378
ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
|
|
general protection fault in cfg80211_dev_rename
wireless
|
2 |
|
|
|
1 |
2169d |
2164d
|
15/29 |
2099d |
0bbab5f03015
cfg80211: fix debugfs rename crash
|
|
KASAN: slab-out-of-bounds Read in garmin_read_process
usb
|
17 |
C |
|
|
1 |
2217d |
2217d
|
15/29 |
2099d |
e9b3c610a05c
USB: serial: garmin_gps: add sanity checking for data length
|
|
net-next test error: BUG: using smp_processor_id() in preemptible code in corrupted
|
-1 |
|
|
|
4 |
2132d |
2134d
|
15/29 |
2099d |
811985365378
ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
|
|
KASAN: use-after-free Read in usbhid_close (3)
input
usb
|
19 |
C |
|
|
6 |
2173d |
2200d
|
15/29 |
2099d |
0ed08faded1d
HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in kvm_vm_ioctl
kvm
|
10 |
|
|
|
1 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
general protection fault in skb_clone (3)
net
|
2 |
|
|
|
44 |
2149d |
2152d
|
15/29 |
2099d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2)
kvm-x86
|
-1 |
C |
done |
|
46328 |
2120d |
2151d
|
15/29 |
2099d |
7d2e8748af62
KVM: x86: Initialize tdp_level during vCPU creation
|
|
KMSAN: uninit-value in do_tcp_getsockopt
net
|
7 |
|
|
|
5 |
2112d |
2163d
|
15/29 |
2099d |
e776af608f69
net-backports: tcp: fix error recovery in tcp_zerocopy_receive()
|
|
linux-next test error: WARNING: suspicious RCU usage in ipmr_device_event
net
|
-1 |
|
|
|
24 |
2181d |
2186d
|
15/29 |
2099d |
a14fbcd4f157
ipmr: Fix RCU list debugging warning
|
|
net test error: KASAN: null-ptr-deref Write in x25_disconnect
x25
|
-1 |
|
|
|
12 |
2179d |
2179d
|
15/29 |
2099d |
8999dc89497a
net/x25: Fix null-ptr-deref in x25_disconnect
|
|
BUG: unable to handle kernel NULL pointer dereference in kvm_vcpu_gfn_to_memslot
kvm
|
10 |
|
|
|
1 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
memory leak in genl_rcv_msg
net
|
3 |
C |
|
|
116 |
2135d |
2324d
|
15/29 |
2099d |
c36f05559104
genetlink: fix memory leaks in genl_family_rcv_msg_dumpit()
|
|
KMSAN: uninit-value in __dev_get_by_name
hams
|
7 |
C |
|
|
2 |
2161d |
2161d
|
15/29 |
2099d |
687775cec056
ax25: fix setsockopt(SO_BINDTODEVICE)
|
|
general protection fault in start_creating
fs
|
2 |
C |
done |
|
106 |
2121d |
2150d
|
15/29 |
2099d |
d56f5136b010
KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
|
|
BUG: unable to handle kernel NULL pointer dereference in udc_bind_to_driver
usb
|
10 |
|
|
|
1 |
2127d |
2127d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_node_cpus (2)
fs
mm
|
6 |
|
|
|
9 |
2167d |
2334d
|
15/29 |
2099d |
314eeb43e5f2
rcu: Add *_ONCE() and data_race() to rcu_node ->exp_tasks plus locking
|
|
bpf test error: KASAN: null-ptr-deref Write in x25_disconnect
x25
|
-1 |
|
|
|
78 |
2166d |
2179d
|
15/29 |
2099d |
8999dc89497a
net/x25: Fix null-ptr-deref in x25_disconnect
|
|
KASAN: slab-out-of-bounds Read in fl6_update_dst
net
|
17 |
C |
done |
|
43 |
2120d |
2166d
|
15/29 |
2099d |
bb986a50421a
seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds
|
|
general protection fault in __tipc_sendstream
tipc
|
2 |
C |
done |
|
444 |
2120d |
2150d
|
15/29 |
2099d |
4c21daae3dbc
tipc: Fix NULL pointer dereference in __tipc_sendstream()
5e9eeccc58f3
tipc: fix NULL pointer dereference in streaming
|
|
net test error: BUG: using smp_processor_id() in preemptible code in corrupted
|
-1 |
|
|
|
3 |
2130d |
2132d
|
15/29 |
2099d |
811985365378
ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
|
|
KASAN: use-after-free Read in ath9k_wmi_ctrl_rx
wireless
|
19 |
C |
|
|
1 |
2212d |
2211d
|
15/29 |
2099d |
abeaa85054ff
ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
|
|
upstream test error: BUG: using smp_processor_id() in preemptible code in ext4_map_blocks
ext4
|
-1 |
|
|
|
1 |
2133d |
2133d
|
15/29 |
2099d |
811985365378
ext4: mballoc: Use this_cpu_read instead of this_cpu_ptr
|
|
general protection fault in sock_hash_free
bpf
net
|
2 |
|
|
|
1 |
2144d |
2144d
|
15/29 |
2099d |
75e68e5bf2c7
bpf, sockhash: Synchronize delete from bucket list on map free
|
|
KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen
net
|
17 |
C |
done |
|
4 |
2169d |
2188d
|
15/29 |
2099d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
BUG: unable to handle kernel NULL pointer dereference in local_bh_disable
netfilter
|
10 |
|
|
|
1 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2)
ext4
|
10 |
C |
done |
|
3 |
2196d |
2193d
|
15/29 |
2099d |
829b37b8cddb
ext4: avoid race conditions when remounting with options that change dax
|
|
BUG: stack guard page was hit in update_stack_state
kernel
|
-1 |
|
|
|
5 |
2249d |
2263d
|
15/29 |
2099d |
dd912306ff00
net: fix a potential recursive NETDEV_FEAT_CHANGE
|
|
WARNING: locking bug in dev_mc_seq_show
net
|
4 |
C |
done |
|
3 |
2140d |
2151d
|
15/29 |
2099d |
845e0ebb4408
net: change addr_list_lock back to static key
|
|
general protection fault in inet_diag_bc_sk
net
|
2 |
|
|
|
12 |
2174d |
2176d
|
15/29 |
2099d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
general protection fault in selinux_socket_recvmsg
selinux
|
2 |
C |
done |
|
4 |
2154d |
2154d
|
15/29 |
2099d |
0a82e230c688
mptcp: avoid NULL-ptr derefence on fallback
|
|
KMSAN: uninit-value in skbprio_enqueue
net
|
7 |
syz |
|
|
11 |
2113d |
2177d
|
15/29 |
2099d |
2761121af87d
net_sched: sch_skbprio: add message validation to skbprio_change()
|
|
general protection fault in ath9k_hif_usb_rx_cb
wireless
|
2 |
C |
|
|
913 |
2099d |
2212d
|
15/29 |
2099d |
2bbcaaee1fcb
ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
|
|
BUG: soft lockup in wg_packet_tx_worker
kvm
|
1 |
|
|
|
1 |
2171d |
2171d
|
15/29 |
2099d |
df4953e4e997
sch_sfq: validate silly quantum values
|
|
INFO: rcu detected stall in wg_packet_tx_worker
net
|
1 |
C |
done |
|
24 |
2128d |
2181d
|
15/29 |
2099d |
df4953e4e997
sch_sfq: validate silly quantum values
|
|
linux-next test error: KASAN: use-after-free Write in afs_wake_up_async_call
afs
|
-1 |
|
|
|
111 |
2125d |
2133d
|
15/29 |
2099d |
0041cd5a5044
rxrpc: Fix notification call on completion of discarded calls
|
|
BUG: unable to handle kernel NULL pointer dereference in smp_call_function_many_cond (2)
bpf
|
10 |
|
|
|
1 |
2123d |
2123d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
KASAN: slab-out-of-bounds Read in br_mrp_parse
bridge
|
17 |
C |
done |
|
5 |
2156d |
2157d
|
15/29 |
2099d |
617504c67e01
bridge: mrp: Fix out-of-bounds read in br_mrp_parse
|
|
BUG: unable to handle kernel NULL pointer dereference in __ext4_journal_start_sb
ext4
|
10 |
|
|
|
1 |
2129d |
2129d
|
15/29 |
2099d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
INFO: task hung in blkdev_issue_flush (2)
block
|
1 |
C |
done |
error |
3 |
2321d |
2480d
|
15/29 |
2116d |
2b5c8f0063e4
nbd: replace kill_bdev() with __invalidate_device() again
|
|
KASAN: use-after-free Read in blkdev_direct_IO
fs
|
19 |
C |
done |
error |
8 |
2444d |
2449d
|
15/29 |
2116d |
0eb6ddfb865c
block: Fix __blkdev_direct_IO() for bio fragments
|
|
KASAN: use-after-free Read in blkdev_bio_end_io
fs
|
19 |
C |
done |
error |
13 |
2434d |
2446d
|
15/29 |
2116d |
7b6620d7db56
block: remove REQ_NOWAIT_INLINE
|
|
KCSAN: data-race in tcp_add_backlog / tcp_try_rmem_schedule
net
|
6 |
|
|
|
3 |
2378d |
2382d
|
15/29 |
2116d |
ebb3b78db7bf
tcp: annotate sk->sk_rcvbuf lockless reads
|
|
memory leak in bio_clone_fast
block
|
3 |
C |
|
|
1 |
2438d |
2438d
|
15/29 |
2116d |
7b6620d7db56
block: remove REQ_NOWAIT_INLINE
|
|
WARNING: refcount bug in blk_mq_free_request (2)
block
|
13 |
C |
done |
error |
5 |
2446d |
2446d
|
15/29 |
2116d |
de6346ecbc8f
nbd: protect cmd->status with cmd->lock
|
|
memory leak in bio_copy_user_iov
|
3 |
C |
done |
|
34 |
2309d |
2494d
|
15/29 |
2116d |
3b7995a98ad7
block: fix memleak when __blk_rq_map_user_iov() is failed
|
|
WARNING in sk_stream_kill_queues (4)
net
|
-1 |
C |
done |
done |
6 |
2238d |
2242d
|
15/29 |
2116d |
b6f6118901d1
ipv6: restrict IPV6_ADDRFORM operation
|
|
WARNING: bad unlock balance in get_user_pages_unlocked
mm
|
4 |
|
|
|
1 |
2204d |
2199d
|
15/29 |
2118d |
c7b6a566b985
mm/gup: Mark lock taken only after a successful retake
|
|
WARNING in __mmdrop
mm
|
-1 |
syz |
done |
|
14 |
2454d |
2464d
|
15/29 |
2118d |
3d2c7d370475
Revert "vhost: access vq metadata through kernel virtual address"
|
|
WARNING in wa_nep_create/usb_submit_urb
usb
staging
|
-1 |
C |
|
|
114 |
2188d |
2472d
|
15/29 |
2118d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
upstream boot error: KASAN: slab-out-of-bounds Write in virtio_gpu_object_create
dri
virt
|
-1 |
|
|
|
6 |
2193d |
2201d
|
15/29 |
2118d |
b513b0d4563a
drm/virtio: fix OOB in virtio_gpu_object_create
|
|
WARNING in kfree (2)
net
|
-1 |
syz |
done |
done |
1 |
2229d |
2228d
|
15/29 |
2118d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
WARNING in hwarc_neep_init/usb_submit_urb
staging
usb
|
-1 |
C |
|
|
1 |
2222d |
2222d
|
15/29 |
2118d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
BUG: corrupted list in __uwb_rc_neh_rm
staging
usb
|
8 |
C |
|
|
9 |
2194d |
2229d
|
15/29 |
2118d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
KASAN: null-ptr-deref Write in blk_mq_map_swqueue
block
|
12 |
C |
done |
|
3 |
2212d |
2212d
|
15/29 |
2121d |
d0930bb8f46b
blk-mq: Fix a recently introduced regression in blk_mq_realloc_hw_ctxs()
|
|
KASAN: use-after-free Read in chaoskey_disconnect
crypto
usb
|
19 |
C |
|
|
44 |
2332d |
2360d
|
15/29 |
2128d |
93ddb1f56ae1
USB: chaoskey: fix use-after-free on release
|
|
KMSAN: uninit-value in etf_enqueue_timesortedlist
net
|
7 |
|
|
|
3 |
2169d |
2176d
|
15/29 |
2128d |
a1211bf9a777
sched: etf: do not assume all sockets are full blown
|
|
KMSAN: uninit-value in audit_log_vformat (2)
audit
|
7 |
C |
|
|
104 |
2168d |
2187d
|
15/29 |
2128d |
763dafc520ad
audit: check the length of userspace generated audit records
|
|
general protection fault in macvlan_device_event
net
|
2 |
|
|
|
86 |
2177d |
2191d
|
15/29 |
2128d |
4dee15b4fd0d
macvlan: fix null dereference in macvlan_device_event()
|
|
WARNING in __vm_enough_memory (2)
mm
|
-1 |
syz |
done |
|
6 |
2189d |
2192d
|
15/29 |
2128d |
dadbd85f2afc
mm: Fix MREMAP_DONTUNMAP accounting on VMA merge
|
|
WARNING in hwsim_new_radio_nl
wireless
|
-1 |
C |
done |
|
3 |
2194d |
2197d
|
15/29 |
2128d |
7ea862048317
mac80211_hwsim: Use kstrndup() in place of kasprintf()
|
|
KASAN: invalid-free in nf_tables_newset
netfilter
|
24 |
C |
done |
|
21 |
2191d |
2206d
|
15/29 |
2128d |
7fb6f78df700
netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
|
|
WARNING: bad unlock balance in mptcp_poll
mptcp
|
4 |
C |
done |
|
10 |
2193d |
2196d
|
15/29 |
2128d |
e154659ba39a
mptcp: fix double-unlock in mptcp_poll
|
|
KASAN: use-after-free Read in dput (2)
fs
|
19 |
syz |
done |
|
4 |
2192d |
2192d
|
15/29 |
2128d |
4fa3b1c41737
proc: Handle umounts cleanly
|
|
possible deadlock in user_shm_lock
mm
|
4 |
|
|
|
12 |
2156d |
2194d
|
15/29 |
2128d |
ea0dfeb4209b
shmem: fix possible deadlocks on shmlock_user_lock
|
|
possible deadlock in shmem_mfill_atomic_pte
mm
|
4 |
C |
done |
|
82 |
2156d |
2207d
|
15/29 |
2128d |
94b7cc01da5a
mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
|
|
KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init
kvm
|
17 |
C |
done |
|
1537 |
2155d |
2200d
|
15/29 |
2128d |
b6467ab142b7
KVM: Check validity of resolved slot when searching memslots
|
|
WARNING in set_precision (2)
wireless
|
-1 |
C |
done |
|
117 |
2190d |
2288d
|
15/29 |
2128d |
7ea862048317
mac80211_hwsim: Use kstrndup() in place of kasprintf()
|
|
INFO: rcu detected stall in io_uring_release
fs
|
1 |
syz |
|
|
15 |
2148d |
2189d
|
15/29 |
2128d |
3fd44c86711f
io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
|
|
KASAN: use-after-free Read in report_sock_error
net
|
19 |
|
|
|
2 |
2182d |
2186d
|
15/29 |
2128d |
a1211bf9a777
sched: etf: do not assume all sockets are full blown
|
|
linux-next test error: WARNING: suspicious RCU usage in ovs_ct_exit
openvswitch
|
-1 |
|
|
|
132 |
2187d |
2224d
|
15/29 |
2128d |
27de77cec985
net: openvswitch: ovs_ct_exit to be done under ovs_lock
|
|
WARNING in nf_nat_unregister_fn
netfilter
|
-1 |
|
|
|
1 |
2191d |
2190d
|
15/29 |
2128d |
b4faef1739dd
netfilter: nat: fix error handling upon registering inet hook
|
|
possible deadlock in shmem_uncharge
mm
|
4 |
C |
done |
|
101 |
2157d |
2195d
|
15/29 |
2128d |
ea0dfeb4209b
shmem: fix possible deadlocks on shmlock_user_lock
|
|
possible deadlock in ext4_evict_inode
ext4
|
4 |
syz |
error |
error |
38 |
2740d |
2779d
|
15/29 |
2155d |
e5bfad3d7acc
smack: use GFP_NOFS while holding inode_smack::smk_lock
|
|
general protection fault in kobject_get
kernel
|
2 |
|
|
|
4 |
2170d |
2236d
|
15/29 |
2167d |
5bdfa854013c
RDMA/mad: Do not crash if the rdma device does not have a umad interface
|
|
KASAN: use-after-free Write in tcindex_set_parms
net
|
22 |
C |
done |
|
13 |
2208d |
2228d
|
15/29 |
2167d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
WARNING: kobject bug in add_one_compat_dev
kernel
|
-1 |
|
|
|
2 |
2238d |
2240d
|
15/29 |
2167d |
f2f2b3bbf0d9
RDMA/core: Fix missing error check on dev_set_name()
|
|
possible deadlock in io_submit_one (3)
fs
|
4 |
syz |
done |
|
45 |
2197d |
2204d
|
15/29 |
2167d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
INFO: task hung in io_queue_file_removal
fs
|
1 |
C |
done |
|
16 |
2210d |
2217d
|
15/29 |
2167d |
4afdb733b160
io-uring: drop completion when removing file
|
|
KASAN: slab-out-of-bounds Write in tcindex_set_parms
|
21 |
C |
done |
|
10 |
2209d |
2230d
|
15/29 |
2167d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Read in tcindex_dump
net
|
19 |
syz |
|
|
1 |
2230d |
2228d
|
15/29 |
2167d |
b1be2e8cd290
net_sched: hold rtnl lock in tcindex_partial_destroy_work()
|
|
KMSAN: uninit-value in simple_attr_read
fs
|
7 |
C |
|
|
6 |
2170d |
2240d
|
15/29 |
2167d |
a65cab7d7f05
libfs: fix infoleak in simple_attr_read()
|
|
general protection fault in macsec_upd_offload
net
|
2 |
C |
done |
|
5 |
2206d |
2205d
|
15/29 |
2167d |
aa81700cf232
macsec: fix NULL dereference in macsec_upd_offload()
|
|
general protection fault in hfsc_unbind_tcf
net
|
2 |
|
|
|
1 |
2219d |
2215d
|
15/29 |
2167d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
memory leak in erase_aeb
mtd
|
3 |
C |
|
|
109 |
2168d |
2321d
|
15/29 |
2167d |
c16f39d14a7e
ubi: fastmap: Free unused fastmap anchor peb during detach
|
|
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff
kvm-x86
|
10 |
C |
done |
|
6404 |
2211d |
2216d
|
15/29 |
2167d |
428b8f1d9f92
KVM: VMX: don't allow memory operands for inline asm that modifies SP
|
|
possible deadlock in send_sigurg
fs
|
4 |
C |
done |
|
65 |
2191d |
2204d
|
15/29 |
2167d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
WARNING: bad unlock balance in ucma_event_handler
|
4 |
C |
done |
|
143 |
2200d |
2864d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING in geneve_exit_batch_net (2)
net
|
-1 |
C |
done |
|
9 |
2215d |
2238d
|
15/29 |
2167d |
0fda7600c2e1
geneve: move debug check after netdev unregister
|
|
general protection fault in fbcon_switch
fbdev
|
2 |
|
|
|
1 |
2212d |
2211d
|
15/29 |
2167d |
b139f8b00db4
fbcon: fix null-ptr-deref in fbcon_switch
|
|
KASAN: invalid-free in tcf_exts_destroy
net
|
24 |
C |
done |
|
1 |
2230d |
2230d
|
15/29 |
2167d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Read in __hrtimer_run_queues
kernel
|
19 |
C |
done |
|
299 |
2200d |
2207d
|
15/29 |
2167d |
73d20564e0dc
hrtimer: Don't dereference the hrtimer pointer after the callback
|
|
WARNING: bad unlock balance in ucma_destroy_id
|
4 |
syz |
done |
|
44 |
2234d |
2788d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING: bad unlock balance in __get_user_pages_remote
mm
|
4 |
C |
done |
|
15 |
2200d |
2200d
|
15/29 |
2167d |
c7b6a566b985
mm/gup: Mark lock taken only after a successful retake
|
|
INFO: trying to register non-static key in __io_uring_register
fs
|
-1 |
C |
done |
|
39 |
2199d |
2200d
|
15/29 |
2167d |
f7fe9346869a
io_uring: initialize fixed_file_data lock
|
|
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user
selinux
|
17 |
C |
done |
|
1 |
2209d |
2208d
|
15/29 |
2167d |
a1a7e3a36e01
xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
|
|
KASAN: stack-out-of-bounds Write in mpol_to_str
mm
|
21 |
C |
done |
|
23 |
2209d |
2213d
|
15/29 |
2167d |
aa9f7d5172fa
mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
|
|
general protection fault in do_tcp_getsockopt (2)
net
|
2 |
C |
done |
|
1 |
2220d |
2220d
|
15/29 |
2167d |
6cd6cbf593bf
net-backports: tcp: repair: fix TCP_QUEUE_SEQ implementation
|
|
KASAN: use-after-free Read in addr_handler
rdma
|
19 |
syz |
done |
|
12 |
2199d |
2681d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
INFO: trying to register non-static key in io_cqring_ev_posted (2)
fs
|
-1 |
C |
done |
|
42 |
2170d |
2207d
|
15/29 |
2167d |
10bea96dcc13
io_uring: add missing finish_wait() in io_sq_thread()
|
|
KASAN: use-after-free Read in cma_cancel_operation
rdma
|
19 |
C |
done |
|
617 |
2255d |
2936d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
BUG: unable to handle kernel paging request in kernel_get_mempolicy
mm
|
8 |
C |
done |
|
1 |
2204d |
2201d
|
15/29 |
2167d |
ba841078cd05
mm/mempolicy: Allow lookup_node() to handle fatal signal
|
|
WARNING: ODEBUG bug in rfcomm_dev_ioctl
bluetooth
|
-1 |
|
|
|
1 |
2232d |
2231d
|
15/29 |
2167d |
71811cac8532
Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
|
|
KASAN: slab-out-of-bounds Read in cgroup_file_notify
cgroups
|
17 |
C |
done |
|
1 |
2232d |
2228d
|
15/29 |
2167d |
726b7bbeafd4
hugetlb_cgroup: fix illegal access to memory
|
|
WARNING: refcount bug in __tcf_action_put
net
|
13 |
syz |
|
|
1 |
2229d |
2228d
|
15/29 |
2167d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Read in rdma_listen (2)
rdma
|
19 |
C |
done |
|
354 |
2205d |
2574d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING: kobject bug in ib_register_device
kernel
|
-1 |
C |
done |
|
14 |
2205d |
2243d
|
15/29 |
2167d |
7aefa6237cfe
RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET
|
|
general protection fault in ethnl_parse_header
net
|
2 |
C |
done |
|
9 |
2214d |
2219d
|
15/29 |
2167d |
55b474c41e58
netlink: check for null extack in cookie helpers
|
|
WARNING in vcpu_enter_guest
kvm-x86
|
-1 |
syz |
done |
|
19 |
2217d |
2330d
|
15/29 |
2167d |
d33294541889
KVM: x86: remove bogus user-triggerable WARN_ON
|
|
general protection fault in hsr_addr_is_self (2)
net
|
2 |
|
|
|
1 |
2219d |
2218d
|
15/29 |
2167d |
3a303cfdd28d
hsr: fix general protection fault in hsr_addr_is_self()
|
|
linux-next test error: KASAN: use-after-free Read in l2cap_sock_release
bluetooth
|
-1 |
|
|
|
12 |
2262d |
2264d
|
15/29 |
2167d |
2a154903cec2
Bluetooth: prefetch channel before killing sock
|
|
possible deadlock in send_sigio
fs
|
4 |
C |
done |
|
7 |
2195d |
2203d
|
15/29 |
2167d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
WARNING: ODEBUG bug in __init_work
net
|
-1 |
syz |
done |
|
1 |
2216d |
2215d
|
15/29 |
2167d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING in call_rcu
net
|
-1 |
C |
done |
|
8 |
2221d |
2228d
|
15/29 |
2167d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING: ODEBUG bug in prism2sta_disconnect_usb
staging
|
-1 |
|
|
|
1 |
2216d |
2215d
|
15/29 |
2167d |
a1f165a6b738
staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
|
|
WARNING: ODEBUG bug in tcf_queue_work
net
|
-1 |
C |
done |
|
30 |
2233d |
2233d
|
15/29 |
2167d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING in __blk_mq_delay_run_hw_queue
block
|
-1 |
C |
done |
error |
6 |
2280d |
2385d
|
15/29 |
2167d |
6e66b4939241
blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
|
|
general protection fault in qdisc_hash_add
net
|
2 |
C |
done |
|
47 |
2226d |
2226d
|
15/29 |
2167d |
7c4046b1c53b
Revert "net: sched: make newly activated qdiscs visible"
|
|
WARNING: refcount bug in tcindex_data_put
net
|
13 |
C |
done |
|
27 |
2204d |
2205d
|
15/29 |
2167d |
a8eab6d35e22
net_sched: fix a missing refcnt in tcindex_init()
|
|
KASAN: use-after-free Read in route4_get
net
|
19 |
C |
|
|
8 |
2196d |
2225d
|
15/29 |
2167d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
KASAN: use-after-free Read in __list_del_entry_valid (4)
rdma
|
19 |
C |
done |
|
16 |
2256d |
2944d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
general protection fault in erspan_netlink_parms
net
|
2 |
C |
done |
|
5 |
2222d |
2223d
|
15/29 |
2167d |
32ca98feab8c
net: ip_gre: Accept IFLA_INFO_DATA-less configuration
|
|
WARNING in kernfs_create_dir_ns
kernfs
|
-1 |
C |
done |
done |
3 |
2222d |
2483d
|
15/29 |
2167d |
810507fe6fd5
locking/lockdep: Reuse freed chain_hlocks entries
|
|
WARNING in af_alg_make_sg
crypto
|
-1 |
C |
done |
|
13 |
2199d |
2199d
|
15/29 |
2167d |
ae46d2aa6a7f
mm/gup: Let __get_user_pages_locked() return -EINTR for fatal signal
|
|
general protection fault in rdma_listen (2)
rdma
|
2 |
syz |
done |
|
104 |
2206d |
2717d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING in kernfs_new_node
kernfs
|
-1 |
C |
done |
done |
2 |
2222d |
2446d
|
15/29 |
2167d |
810507fe6fd5
locking/lockdep: Reuse freed chain_hlocks entries
|
|
possible deadlock in cma_netdev_callback
rdma
|
4 |
C |
done |
|
1399 |
2200d |
2241d
|
15/29 |
2167d |
33fb27fd5446
RDMA/siw: Fix passive connection establishment
|
|
WARNING: refcount bug in sctp_wfree
sctp
|
13 |
C |
done |
|
20 |
2208d |
2229d
|
15/29 |
2167d |
5c3e82fe1596
sctp: fix refcount bug in sctp_wfree
|
|
WARNING in ext4_write_inode
ext4
|
-1 |
|
|
|
13 |
2234d |
2241d
|
15/29 |
2167d |
10a98cb16d80
xfs: clear PF_MEMALLOC before exiting xfsaild thread
|
|
BUG: corrupted list in rdma_listen
rdma
|
8 |
C |
|
|
202 |
2340d |
2919d
|
15/29 |
2167d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
possible deadlock in free_ioctx_users (2)
|
4 |
C |
done |
|
44 |
2197d |
2204d
|
15/29 |
2167d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
WARNING: ODEBUG bug in route4_change
|
-1 |
C |
done |
|
68 |
2204d |
2228d
|
15/29 |
2167d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
KASAN: use-after-free Read in tty_open
serial
|
19 |
C |
done |
done |
8 |
2214d |
2326d
|
15/29 |
2167d |
ca4463bf8438
vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
|
|
KASAN: slab-out-of-bounds Read in edge_interrupt_callback
usb
|
17 |
C |
|
|
1 |
2216d |
2215d
|
15/29 |
2167d |
57aa9f294b09
USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
|
|
KMSAN: uninit-value in tcf_exts_change
net
|
7 |
C |
|
|
5 |
2218d |
2228d
|
15/29 |
2167d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
BUG: sleeping function called from invalid context in kmem_cache_alloc_node_trace
net
|
5 |
C |
done |
|
364 |
2229d |
2231d
|
15/29 |
2167d |
138470a9b2cc
net/sched: act_ct: fix lockdep splat in tcf_ct_flow_table_get
|
|
KASAN: use-after-free Write in release_tty
|
22 |
C |
done |
|
591 |
2204d |
2326d
|
15/29 |
2167d |
ca4463bf8438
vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
|
|
WARNING: ODEBUG bug in tcindex_destroy_work (3)
net
|
-1 |
syz |
done |
|
13 |
2206d |
2242d
|
15/29 |
2167d |
304e024216a8
net_sched: add a temporary refcnt for struct tcindex_data
|
|
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback
staging
usb
|
17 |
C |
|
|
1 |
2218d |
2218d
|
15/29 |
2167d |
1165dd73e811
staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
|
|
KMSAN: uninit-value in macsec_handle_frame
net
|
7 |
|
|
|
1 |
2217d |
2217d
|
15/29 |
2167d |
b06d072ccc4b
macsec: restrict to ethernet devices
|
|
WARNING: refcount bug in igmp_start_timer
net
|
13 |
syz |
done |
done |
19 |
2432d |
2798d
|
15/29 |
2190d |
323ebb61e32b
net: use listified RX for handling GRO_NORMAL skbs
|
|
possible deadlock in sch_direct_xmit
net
|
4 |
C |
done |
done |
1548 |
2333d |
3012d
|
15/29 |
2190d |
323ebb61e32b
net: use listified RX for handling GRO_NORMAL skbs
|
|
KASAN: use-after-free Read in alloc_netdev_mqs
net
|
19 |
|
|
|
1 |
2254d |
2254d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in __iptunnel_pull_header
net
|
7 |
C |
|
|
12 |
2223d |
2232d
|
15/29 |
2192d |
17c25cafd4d3
gre: fix uninit-value in __iptunnel_pull_header
|
|
KASAN: use-after-free Read in inet_gifconf
net
|
19 |
|
|
|
24 |
2246d |
2252d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
INFO: task hung in hashlimit_mt_check_common
|
1 |
C |
done |
|
20 |
2248d |
2288d
|
15/29 |
2192d |
8d0015a7ab76
netfilter: xt_hashlimit: limit the max size of hashtable
c4a3922d2d20
netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put()
|
|
divide error in wg_packet_encrypt_worker
wireguard
|
2 |
C |
done |
|
12 |
2246d |
2253d
|
15/29 |
2192d |
175f1ca9a9ed
wireguard: send: account for mtu=0 devices
|
|
WARNING in idr_destroy
dri
|
-1 |
C |
done |
|
5 |
2220d |
2235d
|
15/29 |
2192d |
b216a8e7908c
drm/lease: fix WARNING in idr_destroy
|
|
BUG: soft lockup in sys_exit_group
usb
|
1 |
C |
|
|
6 |
2217d |
2240d
|
15/29 |
2192d |
d683469b3c93
ALSA: line6: Fix endless MIDI read loop
|
|
KASAN: use-after-free Read in ipv6_get_ifaddr
net
|
19 |
|
|
|
1 |
2250d |
2250d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: use-after-free Read in inet_lookup_ifaddr_rcu
net
|
19 |
|
|
|
2 |
2246d |
2248d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: use-after-free Write in hiddev_disconnect
input
usb
|
22 |
|
|
|
20 |
2220d |
2284d
|
15/29 |
2192d |
5c02c447eaed
HID: hiddev: Fix race in in hiddev_disconnect()
|
|
KMSAN: use-after-free in netdev_state_change
net
|
18 |
|
|
|
2 |
2236d |
2236d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: uninit-value in audit_receive
audit
|
7 |
C |
|
|
4 |
2243d |
2243d
|
15/29 |
2192d |
756125289285
audit: always check the netlink payload length in audit_receive_msg()
|
|
WARNING: lock held when returning to user space in ovl_write_iter
overlayfs
|
4 |
C |
done |
|
6 |
2222d |
2237d
|
15/29 |
2192d |
c853680453ac
ovl: fix lockdep warning for async write
|
|
general protection fault in vt_ioctl
serial
|
2 |
|
|
|
1 |
2257d |
2257d
|
15/29 |
2192d |
6cd1ed50efd8
net-backports: vt: vt_ioctl: fix race in VT_RESIZEX
|
|
KASAN: use-after-free Read in percpu_ref_switch_to_atomic_rcu
block
|
19 |
|
|
|
5 |
2238d |
2260d
|
15/29 |
2192d |
c1e2148f8ecb
io_uring: free fixed_file_data after RCU grace period
|
|
KASAN: use-after-free Read in rtnl_fill_ifinfo (2)
net
|
19 |
|
|
|
2 |
2251d |
2252d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
INFO: task hung in hashlimit_net_exit
netfilter
|
1 |
syz |
done |
|
53 |
2246d |
2254d
|
15/29 |
2192d |
8d0015a7ab76
netfilter: xt_hashlimit: limit the max size of hashtable
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE! (4)
audit
|
-1 |
C |
|
|
18 |
2211d |
2246d
|
15/29 |
2192d |
2ad3e17ebf94
audit: fix error handling in audit_data_to_entry()
|
|
KMSAN: uninit-value in slhc_compress
net
|
7 |
C |
|
|
3 |
2235d |
2234d
|
15/29 |
2192d |
110a40dfb708
slip: make slhc_compress() more robust against malicious packets
|
|
WARNING: proc registration bug in hashlimit_mt_check_common
netfilter
|
-1 |
C |
done |
|
320 |
2232d |
2257d
|
15/29 |
2192d |
99b79c3900d4
netfilter: xt_hashlimit: unregister proc file before releasing mutex
|
|
linux-next test error: WARNING in snd_pcm_plug_alloc
sound
|
-1 |
|
|
|
3 |
2226d |
2226d
|
15/29 |
2192d |
5461e0530c22
ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks
|
|
WARNING: ODEBUG bug in smc_ib_remove_dev
smc
|
-1 |
|
|
|
52 |
2222d |
2236d
|
15/29 |
2192d |
ece0d7bd7461
net/smc: cancel event worker during device removal
|
|
memory leak in dma_buf_ioctl
|
3 |
C |
done |
|
129 |
2242d |
2458d
|
15/29 |
2192d |
d1f37226431f
dma-buf: free dmabuf->name in dma_buf_release()
|
|
KASAN: use-after-free Read in netdev_state_change
net
|
19 |
|
|
|
2 |
2251d |
2252d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue
sound
|
6 |
|
|
|
97 |
2193d |
2291d
|
15/29 |
2192d |
bb51e669fa49
ALSA: seq: Avoid concurrent access to queue flags
|
|
INFO: trying to register non-static key in xa_destroy
rdma
|
-1 |
C |
done |
|
46 |
2215d |
2243d
|
15/29 |
2192d |
12e5eef0f4d8
RDMA/siw: Fix failure handling during device creation
|
|
BUG: unable to handle kernel NULL pointer dereference in inet_release
net
|
10 |
syz |
|
|
3 |
2241d |
2242d
|
15/29 |
2192d |
b6f6118901d1
ipv6: restrict IPV6_ADDRFORM operation
|
|
INFO: rcu detected stall in ip_set_uadd
netfilter
|
1 |
C |
done |
|
11 |
2237d |
2274d
|
15/29 |
2192d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
general protection fault in batadv_iv_ogm_schedule
batman
|
2 |
|
|
|
2 |
2246d |
2259d
|
15/29 |
2192d |
8e8ce08198de
batman-adv: Don't schedule OGM for disabled interface
|
|
INFO: task hung in paste_selection
serial
|
1 |
C |
inconclusive |
done |
8 |
2258d |
2323d
|
15/29 |
2192d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
BUG: unable to handle kernel paging request in ethnl_update_bitset32
net
|
8 |
C |
|
|
168 |
2232d |
2243d
|
15/29 |
2192d |
e34f1753eebc
ethtool: limit bitset size
|
|
KASAN: use-after-free Read in ipv6_chk_addr_and_flags
net
|
19 |
|
|
|
1 |
2251d |
2251d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in find_match
net
|
18 |
C |
|
|
52 |
2222d |
2251d
|
15/29 |
2192d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: use-after-free Read in vgem_gem_dumb_create
dri
|
19 |
C |
done |
|
15 |
2255d |
2267d
|
15/29 |
2192d |
4b848f20eda5
drm/vgem: Close use-after-free race in vgem_gem_create
|
|
KMSAN: uninit-value in bpf_skb_load_helper_32_no_cache
bpf
net
|
7 |
|
|
|
2 |
2262d |
2260d
|
15/29 |
2192d |
457fed775c97
net/smc: fix leak of kernel memory to user space
|
|
memory leak in nf_tables_parse_netdev_hooks (2)
netfilter
|
3 |
C |
|
|
2 |
2231d |
2236d
|
15/29 |
2192d |
2d285f26ecd0
netfilter: nf_tables: free flowtable hooks on hook register error
|
|
KMSAN: uninit-value in bond_alb_xmit
net
|
7 |
syz |
|
|
3 |
2233d |
2234d
|
15/29 |
2192d |
b7469e83d2ad
bonding/alb: make sure arp header is pulled before accessing it
|
|
divide error in encrypt_packet
wireguard
|
2 |
C |
done |
|
89 |
2245d |
2254d
|
15/29 |
2192d |
175f1ca9a9ed
wireguard: send: account for mtu=0 devices
|
|
general protection fault in smc_ib_remove_dev
smc
|
2 |
C |
done |
|
98 |
2232d |
2243d
|
15/29 |
2192d |
a2f2ef4a54c0
net/smc: check for valid ib_client_data
|
|
possible deadlock in htab_lru_map_delete_node
bpf
|
4 |
C |
done |
|
264 |
2245d |
2250d
|
15/29 |
2192d |
b9aff38de2cb
bpf: Fix a potential deadlock with bpf_map_do_batch
|
|
KMSAN: use-after-free in inet_gifconf
net
|
18 |
|
|
|
10 |
2222d |
2246d
|
15/29 |
2192d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: use-after-free in ip6_dst_destroy
net
|
18 |
C |
|
|
2 |
2225d |
2237d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: use-after-free Read in raw_notifier
can
|
19 |
|
|
|
3 |
2251d |
2252d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
memory leak in fasync_helper
fs
|
3 |
C |
|
|
14 |
2261d |
2321d
|
15/29 |
2192d |
67f562e3e147
net/smc: transfer fasync_list in case of fallback
|
|
possible deadlock in tty_unthrottle
serial
|
4 |
|
|
|
3 |
2216d |
2240d
|
15/29 |
2192d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
possible deadlock in inet_csk_accept
net
|
4 |
C |
done |
|
992 |
2226d |
2228d
|
15/29 |
2192d |
06669ea346e4
net: memcg: fix lockdep splat in inet_csk_accept()
|
|
KASAN: slab-out-of-bounds Read in ethnl_update_bitset32
net
|
17 |
syz |
|
|
2 |
2238d |
2243d
|
15/29 |
2192d |
e34f1753eebc
ethtool: limit bitset size
|
|
KMSAN: uninit-value in audit_log_vformat
audit
|
7 |
C |
|
|
220 |
2192d |
2243d
|
15/29 |
2192d |
756125289285
audit: always check the netlink payload length in audit_receive_msg()
|
|
KASAN: use-after-free Read in dev_get_by_index_rcu
net
|
19 |
|
|
|
1 |
2247d |
2247d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
INFO: rcu detected stall in hash_ip4_gc
kernel
|
1 |
C |
done |
|
1 |
2273d |
2272d
|
15/29 |
2192d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
KCSAN: data-race in queue_access_lock / snd_seq_check_queue
sound
|
6 |
|
|
|
58 |
2232d |
2274d
|
15/29 |
2192d |
bb51e669fa49
ALSA: seq: Avoid concurrent access to queue flags
|
|
KMSAN: kernel-infoleak in tty_compat_ioctl
serial
|
9 |
C |
|
|
162 |
2214d |
2243d
|
15/29 |
2192d |
17329563a97d
tty: fix compat TIOCGSERIAL leaking uninitialized memory
|
|
BUG: sleeping function called from invalid context in __kmalloc
ceph
fs
|
5 |
C |
done |
|
5 |
2253d |
2260d
|
15/29 |
2192d |
b27a939e8376
ceph: canonicalize server path in place
|
|
INFO: rcu detected stall in ip_set_udel
netfilter
|
1 |
C |
done |
|
12 |
2251d |
2274d
|
15/29 |
2192d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
general protection fault in ip_set_comment_free
netfilter
|
2 |
C |
done |
|
19 |
2235d |
2272d
|
15/29 |
2192d |
8af1c6fbd923
netfilter: ipset: Fix forceadd evaluation path
|
|
possible deadlock in bond_get_stats (3)
net
|
4 |
syz |
done |
|
2 |
2246d |
2246d
|
15/29 |
2192d |
b3e80d44f5b1
bonding: fix lockdep warning in bond_get_stats()
|
|
general protection fault in batadv_iv_ogm_schedule_buff
batman
|
2 |
|
|
|
24 |
2229d |
2251d
|
15/29 |
2192d |
8e8ce08198de
batman-adv: Don't schedule OGM for disabled interface
|
|
KMSAN: use-after-free in veth_xmit
net
|
18 |
|
|
|
8 |
2222d |
2238d
|
15/29 |
2192d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KMSAN: uninit-value in kstrdup
net
|
7 |
C |
|
|
8 |
2228d |
2255d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
possible deadlock in sidtab_sid2str_put
selinux
|
4 |
C |
done |
|
1382 |
2254d |
2270d
|
15/29 |
2192d |
39a706fbcf26
selinux: fix sidtab string cache locking
|
|
KCSAN: data-race in __snd_rawmidi_transmit_ack / snd_rawmidi_write
sound
|
6 |
|
|
|
168 |
2193d |
2319d
|
15/29 |
2192d |
dfa9a5efe8b9
ALSA: rawmidi: Avoid bit fields for state flags
|
|
KASAN: use-after-free Read in vsscanf
can
|
19 |
|
|
|
2 |
2248d |
2251d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: use-after-free Read in n_tty_receive_buf_common
|
19 |
C |
done |
|
68 |
2247d |
2323d
|
15/29 |
2192d |
07e6124a1a46
vt: selection, close sel_buffer race
|
|
KASAN: use-after-free Read in ethnl_update_bitset32
net
|
19 |
C |
done |
|
6 |
2236d |
2243d
|
15/29 |
2192d |
e34f1753eebc
ethtool: limit bitset size
|
|
KASAN: use-after-free Read in fib_nexthop_info
net
|
19 |
|
|
|
1 |
2251d |
2251d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
general protection fault in nf_flow_table_offload_setup
|
2 |
C |
done |
done |
835 |
2246d |
2279d
|
15/29 |
2192d |
a7da92c2c8a1
netfilter: flowtable: skip offload setup if disabled
|
|
memory leak in nfs_fs_context_parse_monolithic
nfs
|
3 |
C |
|
|
18 |
2226d |
2253d
|
15/29 |
2192d |
75a9b9176157
NFS: Fix leak of ctx->nfs_server.hostname
|
|
KASAN: slab-out-of-bounds Read in inet_gifconf
net
|
17 |
|
|
|
2 |
2252d |
2252d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KASAN: use-after-free Read in find_match
|
19 |
C |
done |
|
142 |
2245d |
2252d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: uninit-value in fat_evict_inode
exfat
|
7 |
C |
|
|
256 |
2222d |
2246d
|
15/29 |
2192d |
bc87302a093f
fat: fix uninit-memory access for partial initialized inode
|
|
KASAN: use-after-free Read in br_dev_xmit
bridge
|
19 |
|
|
|
1 |
2242d |
2242d
|
15/29 |
2192d |
823d81b0fa2c
net: bridge: fix stale eth hdr pointer in br_dev_xmit
|
|
KASAN: use-after-free Read in ip6_dst_destroy
net
|
19 |
C |
done |
|
1 |
2252d |
2252d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
WARNING: bad unlock balance in ovl_llseek
overlayfs
|
4 |
C |
done |
|
4 |
2224d |
2237d
|
15/29 |
2192d |
531d3040bc5c
ovl: fix lock in ovl_llseek()
|
|
KASAN: use-after-free Read in l3mdev_master_ifindex_rcu
net
|
19 |
C |
done |
done |
13 |
2248d |
2254d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: slab-out-of-bounds Read in resample_shrink
sound
|
17 |
C |
done |
|
5 |
2214d |
2232d
|
15/29 |
2192d |
f2ecf903ef06
ALSA: pcm: oss: Avoid plugin buffer overflow
|
|
general protection fault in nldev_stat_set_doit
rdma
|
2 |
C |
done |
|
8 |
2226d |
2243d
|
15/29 |
2192d |
78f34a16c286
RDMA/nldev: Fix crash when set a QP to a new counter but QPN is missing
|
|
kernel panic: stack is corrupted in vhost_net_ioctl
kvm
net
virt
|
2 |
C |
done |
|
2 |
2252d |
2339d
|
15/29 |
2192d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
KASAN: use-after-free Read in __neigh_notify
net
|
19 |
|
|
|
2 |
2251d |
2251d
|
15/29 |
2192d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr
lsm
net
|
10 |
C |
done |
|
8 |
2232d |
2242d
|
15/29 |
2192d |
dc24f8b4ecd3
mptcp: add dummy icsk_sync_mss()
|
|
INFO: task hung in lock_sock_nested (2)
net
virt
kvm
|
1 |
C |
done |
|
418 |
2232d |
2245d
|
15/29 |
2192d |
3f74957fcbea
vsock: fix potential deadlock in transport->release()
|
|
KMSAN: use-after-free in l3mdev_master_ifindex_rcu
net
|
18 |
C |
|
|
5 |
2222d |
2246d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
unregister_netdevice: waiting for DEV to become free (3)
|
2 |
C |
|
|
1864 |
2192d |
2254d
|
15/29 |
2192d |
e34f1753eebc
ethtool: limit bitset size
|
|
KMSAN: use-after-free in dev_alloc_name_ns
net
|
18 |
|
|
|
3 |
2222d |
2236d
|
15/29 |
2192d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KCSAN: data-race in snd_seq_prioq_cell_out / snd_seq_timer_interrupt
sound
|
6 |
|
|
|
118 |
2193d |
2287d
|
15/29 |
2192d |
dc7497795e01
ALSA: seq: Fix concurrent access to queue current tick/time
|
|
KASAN: use-after-free Read in mld_in_v1_mode
net
|
19 |
C |
done |
|
3 |
2251d |
2254d
|
15/29 |
2192d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
possible deadlock in bpf_lru_push_free
bpf
|
4 |
C |
done |
|
609 |
2245d |
2251d
|
15/29 |
2192d |
b9aff38de2cb
bpf: Fix a potential deadlock with bpf_map_do_batch
|
|
WARNING in switch_fpu_return
kernel
|
-1 |
syz |
done |
done |
11 |
2263d |
2297d
|
15/29 |
2213d |
2620fe268e80
KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest"
|
|
KMSAN: use-after-free in rdma_listen
rdma
|
18 |
C |
|
|
26 |
2233d |
2379d
|
15/29 |
2213d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
|
KMSAN: uninit-value in rdma_listen
rdma
|
7 |
C |
|
|
28 |
2390d |
2755d
|
15/29 |
2213d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_add
netfilter
|
17 |
syz |
done |
done |
7 |
2268d |
2280d
|
15/29 |
2213d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
general protection fault in __nf_tables_chain_type_lookup
netfilter
|
2 |
|
|
|
1 |
2278d |
2277d
|
15/29 |
2219d |
826035498ec1
netfilter: nf_tables: add __nft_chain_type_get()
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup
netfilter
|
17 |
C |
done |
done |
8 |
2263d |
2279d
|
15/29 |
2221d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup
netfilter
|
17 |
C |
done |
done |
10 |
2271d |
2279d
|
15/29 |
2221d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
BUG: corrupted list in __nf_tables_abort
|
8 |
C |
done |
done |
29 |
2273d |
2280d
|
15/29 |
2221d |
eb014de4fd41
netfilter: nf_tables: autoload modules from the abort path
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy
netfilter
|
17 |
C |
done |
done |
2 |
2274d |
2274d
|
15/29 |
2221d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_gc
|
17 |
C |
done |
done |
70 |
2262d |
2278d
|
15/29 |
2221d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
BUG: unable to handle kernel paging request in ion_heap_sglist_zero
staging
|
8 |
|
|
|
1 |
2327d |
2327d
|
15/29 |
2221d |
d98c9e83b5e7
kasan: fix crashes on access to memory mapped by vm_map_ram()
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup
netfilter
|
17 |
C |
unreliable |
done |
15 |
2263d |
2278d
|
15/29 |
2221d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_destroy
netfilter
|
17 |
C |
done |
done |
2 |
2275d |
2275d
|
15/29 |
2221d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
general protection fault in gcmaes_crypt_by_sg (2)
crypto
|
2 |
C |
error |
done |
28 |
2278d |
2325d
|
15/29 |
2227d |
db885e66d268
net/tls: fix async operation
|
|
possible deadlock in wg_noise_handshake_create_initiation
wireguard
|
4 |
C |
done |
|
11 |
2260d |
2264d
|
15/29 |
2227d |
ec31c2676a10
wireguard: noise: reject peers with low order public keys
|
|
KASAN: use-after-free Read in slcan_open
can
|
19 |
C |
done |
|
2 |
2328d |
2327d
|
15/29 |
2227d |
9ebd796e2400
can: slcan: Fix use-after-free Read in slcan_open
|
|
kernel BUG at fs/btrfs/volumes.c:LINE!
btrfs
|
-1 |
|
|
|
130 |
2332d |
2871d
|
15/29 |
2227d |
321f69f86a0f
btrfs: reset device back to allocation state when removing
|
|
BUG: unable to handle kernel paging request in slhc_free
net
|
8 |
C |
done |
done |
177 |
2548d |
2666d
|
15/29 |
2227d |
baf76f0c58ae
slip: make slhc_free() silently accept an error pointer
|
|
WARNING in _chaoskey_fill/usb_submit_urb
usb
|
-1 |
C |
|
|
15 |
2344d |
2397d
|
15/29 |
2227d |
92aa5986f4f7
USB: chaoskey: fix error case of a timeout
|
|
KASAN: slab-out-of-bounds Read in iov_iter_alignment
iomap
|
17 |
C |
error |
error |
79 |
2327d |
2324d
|
15/29 |
2227d |
e0ff126ee7ad
pipe: Fix bogus dereference in iov_iter_alignment()
|
|
possible deadlock in wg_set_device
|
4 |
C |
done |
|
33 |
2259d |
2264d
|
15/29 |
2227d |
ec31c2676a10
wireguard: noise: reject peers with low order public keys
|
|
WARNING: ODEBUG bug in io_sqe_files_unregister
fs
|
-1 |
C |
done |
|
964 |
2261d |
2308d
|
15/29 |
2227d |
2faf852d1be8
io_uring: cleanup fixed file data table references
|
|
WARNING in flexcop_usb_probe/usb_submit_urb
usb
media
|
-1 |
C |
|
|
4 |
2393d |
2430d
|
15/29 |
2227d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
linux-next build error (7)
kernel
|
-1 |
|
|
|
7 |
2272d |
2276d
|
15/29 |
2227d |
ac6119e7f25b
efi/x86: Disable instrumentation in the EFI runtime handling code
|
|
BUG: unable to handle kernel paging request in xfs_sb_read_verify
xfs
|
8 |
|
|
|
69 |
2310d |
2329d
|
15/29 |
2232d |
d98c9e83b5e7
kasan: fix crashes on access to memory mapped by vm_map_ram()
|
|
BUG: unable to handle kernel paging request in ion_heap_clear_pages
staging
|
8 |
C |
|
|
4378 |
2310d |
2329d
|
15/29 |
2232d |
d98c9e83b5e7
kasan: fix crashes on access to memory mapped by vm_map_ram()
|
|
KASAN: use-after-free Read in bitmap_ip_ext_cleanup
netfilter
|
19 |
C |
done |
done |
2 |
2279d |
2279d
|
15/29 |
2245d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup
netfilter
|
19 |
C |
done |
done |
2 |
2278d |
2279d
|
15/29 |
2245d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Write in bitmap_ip_del
netfilter
|
21 |
C |
done |
done |
7 |
2276d |
2278d
|
15/29 |
2245d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_ip_destroy
netfilter
|
19 |
C |
done |
done |
1 |
2279d |
2279d
|
15/29 |
2248d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
upstream boot error: KASAN: slab-out-of-bounds Write in hpet_alloc
kernel
|
-1 |
|
|
|
33 |
2267d |
2268d
|
15/29 |
2249d |
98c49f1746ac
char: hpet: Fix out-of-bounds read bug
|
|
KMSAN: uninit-value in setup_udp_tunnel_sock
net
|
7 |
C |
|
|
1 |
2277d |
2277d
|
15/29 |
2249d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
WARNING in nft_request_module
netfilter
|
-1 |
C |
done |
|
7 |
2282d |
2283d
|
15/29 |
2249d |
9332d27d7918
netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
|
|
memory leak in reiserfs_fill_super
fs
|
3 |
C |
|
|
20 |
2268d |
2318d
|
15/29 |
2249d |
5474ca7da6f3
reiserfs: Fix memory leak of journal device string
|
|
WARNING: lock held when returning to user space in tun_get_user (2)
net
|
4 |
|
|
|
7 |
2265d |
2276d
|
15/29 |
2249d |
1efba987c486
net-backports: tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
|
|
memory leak in kobject_set_name_vargs (2)
|
3 |
C |
done |
|
47 |
2274d |
2459d
|
15/29 |
2249d |
cb626bf566eb
net-sysfs: Fix reference count leak
|
|
KCSAN: data-race in __rcu_read_unlock / sync_rcu_exp_select_cpus
fs
mm
|
6 |
|
|
|
7 |
2261d |
2355d
|
15/29 |
2249d |
c51f83c315c3
rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_gc
|
17 |
C |
done |
|
197 |
2263d |
2280d
|
15/29 |
2249d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KMSAN: uninit-value in can_receive
can
|
7 |
C |
|
|
14 |
2252d |
2341d
|
15/29 |
2249d |
e7153bf70c34
can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs
|
|
memory leak in _sctp_make_chunk
sctp
|
3 |
C |
|
|
1 |
2313d |
2313d
|
15/29 |
2249d |
be7a77292077
sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
|
|
WARNING in devlink_port_type_warn
net
|
-1 |
|
|
|
2340 |
2280d |
2351d
|
15/29 |
2249d |
4c582234ab39
devlink: Wait longer before warning about unset port type
|
|
BUG: unable to handle kernel NULL pointer dereference in x25_connect
x25
|
10 |
|
|
|
1 |
2323d |
2322d
|
15/29 |
2249d |
e21dba7a4df4
net/x25: fix nonblocking connect
|
|
KASAN: user-memory-access Write in video_usercopy
media
|
21 |
|
|
|
3 |
2289d |
2290d
|
15/29 |
2249d |
1dc8b65c944e
media: v4l2-core: only zero-out ioctl-read buffers
|
|
BUG: unable to handle kernel NULL pointer dereference in cfg80211_wext_siwrts
wireless
|
10 |
|
|
|
3 |
2279d |
2288d
|
15/29 |
2249d |
24953de0a5e3
cfg80211: check for set_wiphy_params
|
|
KASAN: null-ptr-deref Write in x25_connect
x25
|
12 |
|
|
|
1 |
2328d |
2323d
|
15/29 |
2249d |
e21dba7a4df4
net/x25: fix nonblocking connect
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_list
netfilter
|
17 |
C |
|
|
85 |
2264d |
2280d
|
15/29 |
2249d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
kernel BUG at fs/namei.c:LINE!
fs
|
-1 |
|
|
|
3593 |
2284d |
2284d
|
15/29 |
2249d |
c64cd6e34ea3
reimplement path_mountpoint() with less magic
|
|
KASAN: use-after-free Read in bitmap_port_ext_cleanup
netfilter
|
19 |
C |
done |
|
11 |
2279d |
2288d
|
15/29 |
2249d |
c120959387ef
netfilter: fix a use-after-free in mtype_destroy()
|
|
KMSAN: uninit-value in sd_init (2)
media
usb
|
7 |
C |
|
|
94 |
2355d |
2351d
|
15/29 |
2249d |
de89d0864f66
media: gspca: zero usb_buf
|
|
KMSAN: uninit-value in __request_module (3)
kernel
|
7 |
C |
|
|
58 |
2250d |
2278d
|
15/29 |
2249d |
36d79af7fb59
net-backports: net_sched: use validated TCA_KIND attribute in tc_new_tfilter()
|
|
KMSAN: uninit-value in rsvp_change
net
|
7 |
C |
|
|
4 |
2269d |
2270d
|
15/29 |
2249d |
cb3c0e6bdf64
cls_rsvp: fix rsvp_policy
|
|
BUG: unable to handle kernel paging request in rhashtable_replace_fast
net
|
8 |
|
|
|
2 |
2275d |
2282d
|
15/29 |
2249d |
41cdc741048b
netdevsim: fix nsim_fib6_rt_create() error path
|
|
KASAN: use-after-free Read in __nf_tables_abort
netfilter
|
19 |
C |
done |
|
3 |
2276d |
2278d
|
15/29 |
2249d |
eb014de4fd41
netfilter: nf_tables: autoload modules from the abort path
|
|
KASAN: use-after-free Read in rsi_rx_done_handler
wireless
|
19 |
|
|
|
8 |
2288d |
2417d
|
15/29 |
2249d |
e93cd35101b6
rsi: fix use-after-free on failed probe and unbind
|
|
general protection fault in hsr_addr_is_self
net
|
2 |
|
|
|
3 |
2251d |
2266d
|
15/29 |
2249d |
2b5b8251bc9f
net: hsr: fix possible NULL deref in hsr_handle_frame()
|
|
WARNING: suspicious RCU usage in find_set_and_id
netfilter
|
4 |
syz |
done |
|
6 |
2274d |
2277d
|
15/29 |
2249d |
5038517119d5
netfilter: ipset: fix suspicious RCU usage in find_set_and_id
|
|
BUG: corrupted list in nft_obj_del
netfilter
|
8 |
C |
done |
|
7 |
2280d |
2283d
|
15/29 |
2249d |
335178d5429c
netfilter: nf_tables: fix flowtable list del corruption
|
|
BUG: corrupted list in nf_tables_commit
netfilter
|
8 |
C |
done |
|
8 |
2283d |
2283d
|
15/29 |
2249d |
335178d5429c
netfilter: nf_tables: fix flowtable list del corruption
|
|
kernel panic: stack is corrupted in __lock_acquire (4)
kernel
|
2 |
syz |
error |
error |
75 |
2345d |
2502d
|
15/29 |
2249d |
4da6a196f93b
bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
|
|
INFO: rcu detected stall in addrconf_rs_timer (3)
net
|
1 |
C |
inconclusive |
done |
81 |
2310d |
2306d
|
15/29 |
2249d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_list
|
17 |
C |
done |
|
108 |
2265d |
2280d
|
15/29 |
2249d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
BUG: corrupted list in __dentry_kill (2)
fs
|
8 |
C |
done |
|
4945 |
2317d |
2317d
|
15/29 |
2249d |
a3d1e7eb5abe
simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
|
|
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (2)
net
|
21 |
C |
done |
|
8 |
2276d |
2278d
|
15/29 |
2249d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
BUG: sleeping function called from invalid context in lock_sock_nested
net
bpf
|
5 |
C |
|
|
1232 |
2249d |
2324d
|
15/29 |
2249d |
37f96694cf73
crypto: af_alg - Use bh_lock_sock in sk_destruct
|
|
general protection fault in dccp_timeout_nlattr_to_obj
netfilter
|
2 |
C |
done |
|
7 |
2289d |
2292d
|
15/29 |
2249d |
1d9a7acd3d1e
netfilter: conntrack: dccp, sctp: handle null timeout argument
|
|
memory leak in vlan_dev_set_egress_priority
net
|
3 |
C |
|
|
1 |
2292d |
2292d
|
15/29 |
2249d |
9bbd917e0bec
vlan: fix memory leak in vlan_dev_set_egress_priority
|
|
general protection fault in nft_parse_register
netfilter
|
2 |
|
|
|
1 |
2281d |
2280d
|
15/29 |
2249d |
7eaecf7963c1
netfilter: nft_osf: add missing check for DREG attribute
|
|
WARNING in sk_psock_drop
net
bpf
|
-1 |
|
|
|
157 |
2272d |
2281d
|
15/29 |
2249d |
58c8db929db1
net, sk_msg: Don't check if sock is locked when tearing down psock
|
|
KCSAN: data-race in __rcu_read_unlock / rcu_report_exp_cpu_mult
mm
cgroups
|
6 |
|
|
|
21 |
2265d |
2324d
|
15/29 |
2249d |
c51f83c315c3
rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
|
|
KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor (3)
tomoyo
|
6 |
|
|
|
142 |
2254d |
2306d
|
15/29 |
2249d |
a8772fad0172
tomoyo: Use atomic_t for statistics counter
|
|
KMSAN: uninit-value in macvlan_broadcast
net
|
7 |
C |
|
|
2 |
2292d |
2292d
|
15/29 |
2249d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
general protection fault in xt_rateest_tg_checkentry
netfilter
|
2 |
C |
done |
|
12 |
2292d |
2303d
|
15/29 |
2249d |
1b789577f655
netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
|
|
general protection fault in hash_netiface6_uadt
netfilter
|
2 |
|
|
|
1 |
2288d |
2288d
|
15/29 |
2249d |
22dad713b8a5
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
|
|
WARNING in tcp_ack
net
|
-1 |
C |
done |
|
3 |
2290d |
2290d
|
15/29 |
2249d |
90d72256addf
gtp: fix bad unlock balance in gtp_encap_enable_socket
|
|
memory leak in em_nbyte_change
net
|
3 |
C |
|
|
1 |
2274d |
2274d
|
15/29 |
2249d |
55cd9f67f1e4
net_sched: ematch: reject invalid TCF_EM_SIMPLE
|
|
KCSAN: data-race in __skb_try_recv_from_queue / unix_dgram_sendmsg
net
|
6 |
|
|
|
61 |
2265d |
2283d
|
15/29 |
2249d |
86b18aaa2b5b
skbuff: fix a data race in skb_queue_len()
|
|
KMSAN: uninit-value in digitv_rc_query
media
usb
|
7 |
C |
|
|
4 |
2368d |
2351d
|
15/29 |
2249d |
eecc70d22ae5
media: digitv: don't continue if remote control state can't be read
569bc8d6a6a5
media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
|
|
general protection fault in xt_rateest_put
netfilter
|
2 |
C |
done |
|
97 |
2280d |
2287d
|