|
general protection fault in shmem_mapping
mm
|
2 |
C |
done |
|
17 |
464d |
466d
|
1/29 |
never |
mm/huge_memory: do not drop the original folio during truncate
|
|
WARNING in task_participate_group_stop (2)
prio:low
kernel
|
-1 |
C |
inconclusive |
unreliable |
25 |
11d |
2949d
|
2/29 |
never |
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
|
|
KMSAN: uninit-value in __bch2_alloc_v4_to_text
prio:high
fs
|
7 |
C |
|
|
3 |
338d |
344d
|
2/29 |
never |
bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
|
|
KASAN: null-ptr-deref Write in sys_io_uring_register
mm
|
12 |
C |
done |
|
15 |
532d |
538d
|
1/29 |
never |
xarray-extract-helper-from-__xa_insertcmpxchg-fix
|
|
INFO: task hung in pipe_release (6)
kernfs
|
1 |
syz |
done |
|
19 |
12d |
453d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
WARNING in wiphy_register (5)
wireless
prio:low
|
-1 |
C |
error |
|
6 |
20d |
19d
|
3/29 |
never |
wifi: mac80211_hwsim: reject NAN on multi-radio wiphys
|
|
WARNING in iomap_write_begin
xfs
iomap
|
-1 |
C |
error |
|
6 |
637d |
652d
|
1/29 |
never |
vfs: Fix implicit conversion problem when testing overflow case
|
|
INFO: task hung in bchfs_fpunch (2)
mm
fs
prio:high
|
1 |
C |
done |
|
2 |
292d |
336d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
WARNING in folio_add_new_anon_rmap
mm
|
-1 |
C |
error |
|
14 |
74d |
72d
|
2/29 |
never |
userfaultfd-introduce-struct-mfill_state-fix
|
|
KASAN: slab-out-of-bounds Read in usbtmc_interrupt
usb
|
17 |
C |
|
|
5 |
9d06h |
284d
|
2/29 |
never |
usb: usbtmc: check URB actual_length for interrupt-IN notifications
|
|
UBSAN: array-index-out-of-bounds in bch2_accounting_validate
prio:high
fs
|
15 |
C |
done |
|
23 |
228d |
296d
|
2/29 |
never |
bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
|
|
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu
prio:high
nfs
net
|
17 |
C |
|
|
67 |
5h57m |
35d
|
14/29 |
never |
ea25e3c7915b
sunrpc: prevent out-of-bounds read in __cache_seq_start()
|
|
KASAN: invalid-free in hci_req_sync_complete
bluetooth
|
24 |
syz |
|
|
179 |
691d |
765d
|
1/29 |
never |
Bluetooth: Fix double free in hci_req_sync_complete
|
|
WARNING in vmap_pages_range_noflush (2)
bpf
net
|
-1 |
C |
error |
|
250 |
1373d |
1375d
|
1/29 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
general protection fault in h4_recv
bluetooth
prio:normal
|
2 |
C |
error |
|
4 |
52d |
48d
|
15/29 |
never |
Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
|
|
KASAN: use-after-free Read in jfs_lazycommit
jfs
|
19 |
C |
error |
|
4069 |
11h10m |
1333d
|
0/29 |
never |
From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
|
|
WARNING in bchfs_truncate
fs
|
-1 |
C |
done |
|
366 |
242d |
753d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
INFO: task hung in __closure_sync
fs
prio:high
|
1 |
C |
done |
|
8591 |
226d |
753d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
possible deadlock in __sk_receive_skb
net
prio:high
|
4 |
C |
error |
|
80 |
5d04h |
7d16h
|
25/29 |
never |
dbc81608e3a6
phonet/pep: disable BH around forwarded sk_receive_skb()
|
|
general protection fault in ovl_iterate
overlayfs
prio:high
|
8 |
C |
|
|
19 |
17h13m |
154d
|
2/29 |
never |
ovl: keep err zero after successful ovl_cache_get()
|
|
KMSAN: uninit-value in _find_next_bit
ocfs2
prio:high
|
7 |
C |
|
|
30 |
43d |
431d
|
2/29 |
never |
ocfs2: use kzalloc for quota recovery bitmap allocation
|
|
INFO: task hung in bch2_copygc_stop
kernel
prio:high
|
1 |
C |
done |
|
31386 |
226d |
726d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
INFO: task hung in __bch2_fs_stop
fs
prio:high
|
1 |
C |
done |
|
1589 |
235d |
711d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
kernel BUG in bch2_btree_repair_topology_recurse
prio:high
fs
|
-1 |
C |
done |
|
7 |
239d |
300d
|
2/29 |
never |
bcachefs: btree_check_root_boundaries()
|
|
KASAN: use-after-free Read in ocfs2_search_dirblock
ocfs2
|
19 |
C |
inconclusive |
|
14 |
502d |
649d
|
1/29 |
never |
ocfs2: fix directory entry check in ocfs2_search_dirblock()
|
|
possible deadlock in ocfs2_acquire_dquot
prio:high
ocfs2
|
4 |
C |
|
|
71841 |
162d |
604d
|
2/29 |
never |
ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
|
|
WARNING in asus_remove
input
usb
prio:low
|
-1 |
C |
|
|
159 |
2h10m |
117d
|
2/29 |
never |
HID: asus: Add check for cancelling fn_lock_sync_work
|
|
kernel BUG in bch2_printbuf_exit
fs
prio:high
|
-1 |
C |
error |
|
29 |
310d |
313d
|
2/29 |
never |
bcachefs: convert str_hash.c to CLASS
|
|
INFO: task hung in remove_inode_hugepages
fs
mm
|
1 |
C |
done |
|
52 |
595d |
687d
|
1/29 |
never |
INFO: task hung in remove_inode_hugepages
|
|
UBSAN: array-index-out-of-bounds in decompress_lznt
ntfs3
|
15 |
C |
done |
error |
2 |
621d |
742d
|
2/29 |
never |
ntfs3: fix out-of-bounds read in decompress_lznt
|
|
kernel BUG in mfill_atomic_copy
mm
|
-1 |
C |
error |
|
3 |
1052d |
1048d
|
1/29 |
never |
mm: userfaultfd: check for start + len overflow in validate_range: fix
|
|
kernel BUG in do_bch2_trans_commit_to_journal_replay
fs
prio:normal
|
-1 |
syz |
|
|
22 |
307d |
311d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
WARNING: kmalloc bug in memslot_rmap_alloc
kvm-x86
|
-1 |
C |
unreliable |
|
3 |
1695d |
1724d
|
1/29 |
never |
KVM: replace large kvmalloc allocation with vmalloc
|
|
KASAN: slab-use-after-free Read in move_pages_pte
mm
|
19 |
C |
done |
|
3 |
537d |
535d
|
1/29 |
never |
mm: pgtable: make ptlock be freed by RCU
|
|
WARNING in kvm_read_guest_offset_cached
kvm
|
-1 |
C |
|
|
4 |
19d |
315d
|
2/29 |
never |
KVM: x86: Don't leave APF half-enabled on bad APF data GPA
|
|
kernel BUG in bch2_btree_path_peek_slot
fs
|
-1 |
C |
error |
error |
1546 |
365d |
543d
|
2/29 |
never |
bcachefs: fix assert in bch2_btree_path_traverse_cached()
|
|
kernel BUG in vma_replace_policy
mm
|
-1 |
C |
done |
|
6 |
985d |
994d
|
1/29 |
never |
mm: lock VMAs skipped by a failed queue_pages_range()
|
|
KASAN: use-after-free Read in check_extent_overbig
prio:high
fs
|
19 |
C |
done |
done |
18 |
255d |
537d
|
2/29 |
never |
bcachefs: fix check_extent_overbig() call
|
|
WARNING in folio_memcg
prio:low
mm
|
-1 |
C |
done |
|
3851 |
162d |
646d
|
1/29 |
never |
mm: kmem: fix split_page_memcg()
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
jfs
prio:high
|
1 |
C |
done |
|
4168 |
1d21h |
1075d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
general protection fault in kernel_sock_shutdown (4)
rdma
prio:normal
|
19 |
C |
|
|
102 |
3h13m |
33d
|
23/29 |
never |
0b28000b64f4
RDMA/nldev: Add mutual exclusion in nldev_dellink()
|
|
general protection fault in follow_pfnmap_start
kernel
|
2 |
C |
|
|
38 |
588d |
603d
|
1/29 |
never |
mm: fix null pointer dereference in pfnmap_lockdep_assert
|
|
WARNING in follow_pte
kernel
|
-1 |
C |
|
|
230 |
613d |
692d
|
1/29 |
never |
mm: fix mmap_assert_locked() in follow_pte()
|
|
WARNING in handle_userfault
mm
|
-1 |
C |
error |
|
71 |
1049d |
1057d
|
1/29 |
never |
mm: fix a lockdep issue in vma_assert_write_locked
|
|
KASAN: slab-use-after-free Read in handle_mm_fault
mm
|
19 |
C |
done |
|
107 |
677d |
680d
|
1/29 |
never |
mm: check for VM_DROPPABLE in vma prior to handling mm fault
|
|
KASAN: slab-out-of-bounds Read in shrink_folio_list
mm
|
19 |
C |
|
|
683 |
1052d |
1053d
|
1/29 |
never |
mm: call folio_mapping() inside folio_needs_release()
|
|
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts
squashfs
|
-1 |
C |
error |
|
4 |
60d |
98d
|
2/29 |
never |
Squashfs: check xz dictionary size isn't zero
|
|
WARNING in bch2_prt_printf
fs
|
-1 |
C |
done |
error |
103 |
242d |
746d
|
2/29 |
never |
bcachefs: journal_entry_btree_keys_to_text() is more careful
|
|
kernel BUG in swap_cgroup_record (2)
prio:high
mm
cgroups
|
-1 |
C |
error |
|
227 |
134d |
138d
|
2/29 |
never |
mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
|
|
KASAN: slab-use-after-free Read in mremap
mm
|
19 |
C |
done |
|
122 |
281d |
284d
|
2/29 |
never |
mm/mremap: do not incorrectly reference invalid VMA in VM_WARN_ON_ONCE()
|
|
general protection fault in vma_interval_tree_remove
mm
|
10 |
C |
done |
|
14 |
727d |
1485d
|
1/29 |
never |
mm/mmap: fix advanced maple tree API for mmap_region()
mm/mmap: qvoid dereferencing next on null in BUG_ON()
|
|
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2)
fs
prio:high
|
7 |
syz |
|
|
875 |
240d |
405d
|
2/29 |
never |
bcachefs: Add missing ei_last_dirtied update
|
|
general protection fault in __bch2_err_trace
fs
prio:normal
|
2 |
C |
done |
|
25 |
239d |
294d
|
2/29 |
never |
bcachefs: Delete faulty read_only/nochanges check in fs_open()
|
|
WARNING in vma_merge
mm
|
-1 |
C |
done |
|
18115 |
912d |
1490d
|
1/29 |
never |
mm/mlock: use maple state in apply_mlockall_flags()
|
|
WARNING in bch2_fs_journal_start
fs
prio:high
|
-1 |
C |
done |
|
14 |
340d |
360d
|
2/29 |
never |
bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
|
|
KASAN: slab-use-after-free Write in bch2_get_next_dev
fs
|
22 |
C |
|
|
1331 |
218d |
312d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
BUG: sleeping function called from invalid context in procfs_procmap_ioctl
fs
|
5 |
syz |
done |
|
101 |
327d |
329d
|
2/29 |
never |
mm/maps: move kmalloc() call location in do_procmap_query() out of RCU critical section
|
|
possible deadlock in collapse_file
mm
|
4 |
C |
done |
|
189 |
1178d |
1179d
|
1/29 |
never |
mm/khugepaged: fix vm_lock/i_mmap_rwsem inversion in retract_page_tables
|
|
kernel BUG in collapse_file (3)
mm
|
-1 |
C |
done |
|
14 |
1038d |
1044d
|
1/29 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
KASAN: slab-use-after-free Read in madvise_collapse
mm
|
19 |
C |
error |
|
5 |
1038d |
1039d
|
1/29 |
never |
mm/khugepaged: collapse_pte_mapped_thp() with mmap_read_lock(): fix
|
|
WARNING in page_counter_uncharge (2)
prio:high
cgroups
mm
|
-1 |
C |
error |
|
7 |
25d |
60d
|
2/29 |
never |
mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
|
|
BUG: unable to handle kernel paging request in alloc_huge_page
mm
|
8 |
C |
unreliable |
|
491 |
1747d |
1746d
|
1/29 |
never |
mm/hugetlb: Initialize page to NULL in alloc_buddy_huge_page_with_mpol()
|
|
memory leak in xfrm_policy_construct
prio:normal
net
|
3 |
C |
|
|
8 |
48d |
48d
|
28/29 |
never |
xfrm: fix refcount leak in xfrm_migrate_policy_find
|
|
INFO: task hung in bch2_page_fault
prio:high
ntfs3
exfat
ext4
|
1 |
syz |
done |
|
42 |
280d |
529d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
general protection fault in vma_is_shmem
io-uring
mm
|
2 |
C |
error |
|
28 |
1373d |
1375d
|
1/29 |
never |
mm/gup.c: Fix return value for __gup_longterm_locked()
|
|
general protection fault in bch2_prt_vprintf
fs
|
2 |
C |
error |
inconclusive |
4 |
507d |
544d
|
2/29 |
never |
bcachefs: journal_entry_btree_keys_to_text() is more careful
|
|
WARNING in page_add_anon_rmap
mm
|
-1 |
C |
done |
|
1041 |
981d |
982d
|
1/29 |
never |
mm-rmap-simplify-pageanonexclusive-sanity-checks-when-adding-anon-rmap-fix
|
|
KASAN: slab-use-after-free Read in finish_fault
mm
|
19 |
C |
done |
|
8 |
710d |
712d
|
1/29 |
never |
mm-memory-extend-finish_fault-to-support-large-folio-fix
|
|
KASAN: slab-use-after-free Read in do_sync_mmap_readahead
prio:high
mm
|
19 |
C |
done |
|
3 |
339d |
342d
|
2/29 |
never |
mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
|
|
KMSAN: uninit-value in erspan_build_header (2)
net
|
7 |
C |
|
|
345 |
20h11m |
795d
|
1/29 |
never |
bpf: Don't redirect too small packets
|
|
KASAN: slab-use-after-free Write in bch2_do_discards
prio:high
fs
|
22 |
syz |
|
|
137 |
239d |
309d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
WARNING: suspicious RCU usage in mas_walk (3)
mm
|
4 |
C |
done |
|
12 |
945d |
959d
|
1/29 |
never |
mempolicy: migration attempt to match interleave nodes: fix
|
|
WARNING: ODEBUG bug in i2c_device_remove (2)
i2c
usb
prio:high
|
-1 |
C |
|
|
3 |
22d |
36d
|
2/29 |
never |
media: rtl2832: fix use-after-free in rtl2832_remove()
|
|
possible deadlock in lock_timer_base
trace
bpf
|
4 |
C |
|
|
142 |
496d |
1970d
|
1/29 |
never |
kfence: fix potential deadlock due to wake_up()
|
|
KASAN: use-after-free Read in check_dirent
fs
|
19 |
C |
done |
|
13 |
278d |
459d
|
2/29 |
never |
bcachefs: Fix UAF in check_dirent()
|
|
KASAN: use-after-free Read in bch2_check_dirents
fs
|
19 |
C |
done |
|
769 |
239d |
557d
|
2/29 |
never |
bcachefs: Fix UAF in check_dirent()
|
|
WARNING in do_notify_parent
kernel
prio:low
|
-1 |
C |
error |
|
147881 |
1h02m |
87d
|
21/29 |
never |
09e7827e7857
kernel/fork: validate exit_signal in kernel_clone()
|
|
kernel BUG in __journal_res_get (3)
prio:high
fs
|
-1 |
C |
inconclusive |
|
175 |
219d |
342d
|
2/29 |
never |
bcachefs: Fix __bch2_fs_read_write() error path
|
|
WARNING in bch2_dev_free (2)
fs
prio:low
|
-1 |
C |
done |
|
5 |
308d |
313d
|
2/29 |
never |
bcachefs: Fix __bch2_fs_read_write() error path
|
|
WARNING in ip_rt_bug (3)
net
prio:high
|
-1 |
C |
error |
|
53 |
13h39m |
7d14h
|
25/29 |
never |
7eb72c1e3984
ipv4: icmp: reject broadcast/multicast routes
|
|
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit
net
prio:high
|
19 |
C |
error |
error |
33 |
145d |
553d
|
0/29 |
never |
ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
|
|
INFO: task hung in io_sq_thread_stop
fs
io-uring
|
1 |
C |
done |
|
211 |
1926d |
2086d
|
1/29 |
never |
io_uring: don't sleep schedule in SQPOLL thread if we need to park
|
|
KMSAN: uninit-value in batadv_get_vid (2)
batman
|
7 |
C |
|
|
1196 |
5d12h |
875d
|
1/29 |
never |
bpf: Don't redirect too small packets
|
|
KMSAN: uninit-value in bch2_check_subvols
fs
prio:high
|
7 |
C |
|
|
53 |
240d |
329d
|
2/29 |
never |
bcachefs: Fix missing compat code in check_subvol()
|
|
KASAN: slab-use-after-free Write in gfs2_qd_dealloc (3)
prio:high
gfs2
|
22 |
C |
error |
|
146 |
106d |
364d
|
2/29 |
never |
gfs2: fix use-after-free in gfs2_qd_dealloc
|
|
BUG: sleeping function called from invalid context in lockref_get_not_dead
gfs2
|
5 |
C |
error |
|
13 |
23d |
41d
|
2/29 |
never |
gfs2: fix quota init duplicate scan
|
|
WARNING in get_from_partial_node
kernel
|
-1 |
C |
|
|
133 |
6d13h |
42d
|
23/29 |
never |
5f41161059fd
debugobjects: Do not fill_pool() if pi_blocked_on
|
|
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name
prio:high
fs
|
21 |
C |
error |
|
1496 |
219d |
343d
|
2/29 |
never |
bcachefs: Fix padding zeroout when creating casefolded dirents
|
|
WARNING in dma_resv_add_fence
dri
media
|
-1 |
C |
|
|
7 |
14d |
19d
|
12/29 |
never |
drm/virtio: use uninterruptible resv lock for plane updates
|
|
INFO: task hung in bchfs_fallocate (2)
fs
|
1 |
C |
done |
inconclusive |
6 |
283d |
510d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
KASAN: use-after-free Read in __vma_adjust
mm
|
19 |
C |
done |
|
10 |
1388d |
1445d
|
1/29 |
never |
fs/userfaultfd: fix vma iteration in mas_for_each() loop
|
|
WARNING in drm_prime_destroy_file_private (3)
dri
prio:high
|
-1 |
C |
error |
|
183 |
11d |
14d
|
28/29 |
never |
dc366607c41c
drm: Replace old pointer to new idr
|
|
KASAN: wild-memory-access Read in md5_update
crypto
prio:high
|
17 |
C |
done |
|
8 |
262d |
263d
|
2/29 |
never |
fixup: mm/gup: remove record_subpages()
|
|
KASAN: null-ptr-deref Read in io_sqe_buffer_register
io-uring
|
11 |
C |
done |
|
54 |
261d |
264d
|
2/29 |
never |
fixup: mm/gup: remove record_subpages()
|
|
INFO: task hung in invalidate_inode_pages2_range (3)
prio:high
fs
|
1 |
C |
done |
|
56 |
94d |
453d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in bch2_readahead
fs
|
1 |
C |
done |
|
375 |
255d |
737d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: trying to register non-static key in f2fs_exist_written_data
f2fs
prio:high
|
-1 |
C |
error |
|
152 |
9d02h |
18d
|
2/29 |
never |
f2fs: initialize ino_entry_info before checkpoint load
|
|
kernel BUG in f2fs_abort_atomic_write
f2fs
|
-1 |
syz |
|
|
2 |
1196d |
1241d
|
1/29 |
never |
f2fs: fix to avoid race condition of f2fs_abort_atomic_write()
|
|
BUG: unable to handle kernel NULL pointer dereference in set_page_dirty
f2fs
|
10 |
C |
|
|
317 |
655d |
1370d
|
1/29 |
never |
f2fs: fix missing mapping caused by the mount/umount race
|
|
kernel BUG in free_bprm
fs
mm
|
-1 |
C |
done |
|
445 |
567d |
568d
|
1/29 |
never |
exec: NULL out bprm->argv0 when it is an ERR_PTR
|
|
KASAN: slab-use-after-free Read in pressure_write
cgroups
|
19 |
C |
error |
|
3 |
50d |
48d
|
29/29 |
5d06h |
a5b98009f16d
sched/psi: fix race between file release and pressure write
|
|
WARNING in vma_mark_detached
prio:high
mm
|
-1 |
C |
error |
|
8 |
14d |
36d
|
29/29 |
5d06h |
619eab23e1ce
mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
|
|
kernel BUG in pn_socket_sendmsg
net
|
-1 |
C |
|
|
19 |
27d |
35d
|
29/29 |
5d06h |
5b0c911bcdbd
net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
|
|
memory leak in hub_event (4)
usb
|
3 |
C |
|
|
1 |
32d |
32d
|
29/29 |
5d06h |
7a5f1cd22d47
ALSA: caiaq: fix usb_dev refcount leak on probe failure
|
|
WARNING in sock_map_destroy (3)
bpf
net
|
-1 |
C |
done |
error |
5 |
34d |
54d
|
29/29 |
5d06h |
6451d58a3556
sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}().
|
|
INFO: task hung in lbs_remove_card
usb
libertas
prio:high
|
1 |
C |
|
|
14933 |
7d12h |
286d
|
29/29 |
5d06h |
4a142520d166
wifi: libertas: notify firmware load wait on disconnect
|
|
general protection fault in task_work_cancel
lsm
prio:high
|
2 |
syz |
error |
|
15 |
61d |
81d
|
29/29 |
5d14h |
929553bbb4cd
landlock: Fully release unused TSYNC work entries
|
|
general protection fault in bq_flush_to_queue (2)
net
bpf
|
2 |
C |
error |
error |
6 |
88d |
170d
|
29/29 |
5d21h |
869c63d5975d
bpf: Fix race in cpumap on PREEMPT_RT
7ef83bf1712b
net: move promiscuity handling into netdev_rx_mode_work
|
|
WARNING in hfsplus_bnode_create
hfs
|
-1 |
C |
error |
|
1338 |
43d |
1272d
|
29/29 |
5d21h |
d8a73cc46c84
hfsplus: return error when node already exists in hfs_bnode_create
8ad2c6a36ac4
hfsplus: validate b-tree node 0 bitmap at mount time
|
|
WARNING in msdos_rmdir
exfat
|
-1 |
C |
error |
error |
1 |
120d |
134d
|
29/29 |
5d21h |
8cafcb881364
fat: avoid parent link count underflow in rmdir
|
|
KASAN: slab-use-after-free Read in xfs_buf_rele (4)
xfs
|
19 |
C |
|
|
59 |
43d |
266d
|
29/29 |
6d03h |
497560b9ef42
xfs: switch (back) to a per-buftarg buffer hash
|
|
KASAN: slab-out-of-bounds Read in ext4_ext_correct_indexes
ext4
|
19 |
C |
error |
error |
7 |
76d |
365d
|
29/29 |
6d03h |
2acb5c12ebd8
ext4: validate p_idx bounds in ext4_ext_correct_indexes
|
|
WARNING in nilfs_btree_mark
nilfs
|
-1 |
C |
error |
|
9 |
43d |
69d
|
29/29 |
6d03h |
be3e5d10643d
nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
|
|
general protection fault in blk_update_request
jfs
|
19 |
C |
error |
|
230 |
41d |
571d
|
29/29 |
6d03h |
b15e4310633f
jfs: Set the lbmDone flag at the end of lbmIODone
|
|
possible deadlock in ocfs2_del_inode_from_orphan
ocfs2
|
4 |
C |
inconclusive |
|
7741 |
6d03h |
601d
|
29/29 |
6d03h |
19aa667ace53
ocfs2: fix deadlock when creating quota file
|
|
WARNING in pt_iommu_amdv1_init
iommu
|
-1 |
C |
|
|
16 |
40d |
64d
|
29/29 |
6d03h |
8c4dc1a5025f
iommufd/selftest: Remove MOCK_IOMMUPT_AMDV1 format
|
|
WARNING in nilfs_ioctl_prepare_clean_segments
nilfs
|
-1 |
C |
error |
|
3 |
51d |
71d
|
29/29 |
6d03h |
be3e5d10643d
nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
|
|
KMSAN: uninit-value in hfsplus_strcasecmp (2)
hfs
|
7 |
C |
|
|
3 |
46d |
127d
|
29/29 |
6d03h |
b6b592275aef
hfsplus: fix uninit-value by validating catalog record size
|
|
KASAN: slab-out-of-bounds Read in af_alg_pull_tsgl
crypto
|
19 |
C |
error |
|
3375 |
41d |
53d
|
29/29 |
6d03h |
31d00156e50e
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
|
|
general protection fault in bio_alloc_bioset
block
|
2 |
syz |
error |
|
5 |
65d |
67d
|
29/29 |
6d03h |
67807fbaf127
block: fix bio_alloc_bioset slowpath GFP handling
|
|
INFO: task hung in wg_netns_pre_exit (5)
wireguard
|
1 |
C |
done |
|
397 |
42d |
608d
|
29/29 |
6d03h |
60a25ef8dacb
wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit
|
|
kernel BUG in pfkey_send_migrate
net
|
-1 |
C |
error |
|
3 |
66d |
73d
|
29/29 |
6d03h |
eb2d16a7d599
af_key: validate families in pfkey_send_migrate()
|
|
BUG: corrupted list in dbUpdatePMap
jfs
|
8 |
C |
error |
|
141 |
43d |
202d
|
29/29 |
6d03h |
3c778ec88208
jfs: fix corrupted list in dbUpdatePMap
|
|
INFO: task hung in filename_rmdir
jfs
|
1 |
C |
error |
|
5 |
38d |
88d
|
29/29 |
6d03h |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
BUG: unable to handle kernel NULL pointer dereference in netfs_unbuffered_write
netfs
|
19 |
C |
|
|
494 |
18d |
82d
|
29/29 |
6d03h |
e9075e420a1e
netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry
|
|
kernel BUG in netfs_limit_iter
netfs
|
-1 |
C |
|
|
371 |
59d |
82d
|
29/29 |
6d03h |
67e467a11f62
netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators
|
|
WARNING in wbt_init_enable_default
block
|
-1 |
C |
error |
|
491 |
41d |
153d
|
29/29 |
6d03h |
e9b004ff8306
blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
|
|
INFO: task hung in filename_unlinkat
jfs
|
1 |
C |
error |
|
14 |
68d |
91d
|
29/29 |
6d03h |
5422fe71d26d
ext4: avoid infinite loops caused by residual data
|
|
INFO: task hung in restrict_one_thread_callback
lsm
kernel
|
1 |
C |
|
|
39 |
65d |
95d
|
29/29 |
6d03h |
ff88df67dbf7
landlock: Serialize TSYNC thread restriction
|
|
KASAN: slab-use-after-free Write in le_read_features_complete
bluetooth
|
22 |
C |
error |
|
505 |
64d |
170d
|
29/29 |
6d03h |
035c25007c9e
Bluetooth: hci_sync: Fix UAF in le_read_features_complete
|
|
general protection fault in bond_header_create
net
|
2 |
syz |
|
|
10 |
64d |
74d
|
29/29 |
6d03h |
425000dbf173
team: fix header_ops type confusion with non-Ethernet ports
|
|
KASAN: slab-use-after-free Read in ocfs2_fault
ocfs2
|
19 |
C |
done |
|
363 |
42d |
622d
|
29/29 |
6d03h |
7de554cabf16
ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
|
|
WARNING in u32_change (2)
net
|
-1 |
C |
error |
|
760 |
42d |
83d
|
29/29 |
6d03h |
34bd3c6b0bd3
net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode()
|
|
UBSAN: shift-out-of-bounds in dbSplit (3)
jfs
|
-1 |
C |
|
|
8 |
77d |
391d
|
29/29 |
6d03h |
cce219b203c4
jfs: add dmapctl integrity check to prevent invalid operations
|
|
KASAN: slab-use-after-free Write in usb_anchor_suspend_wakeups (2)
usb
|
22 |
C |
error |
|
27 |
75d |
785d
|
29/29 |
6d03h |
8a768552f7a8
usb: usbtmc: Flush anchored URBs in usbtmc_release
|
|
KASAN: slab-use-after-free Read in v4l2_release (2)
media
|
19 |
C |
error |
error |
6 |
48d |
276d
|
29/29 |
6d03h |
3b7da2b4d0fe
media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
|
|
WARNING in deferred_split_folio
mm
|
-1 |
syz |
error |
|
4 |
57d |
56d
|
29/29 |
6d03h |
3bac01168982
mm: fix deferred split queue races during migration
|
|
general protection fault in usb_gadget_udc_reset (4)
usb
|
2 |
C |
error |
|
16 |
73d |
214d
|
29/29 |
6d03h |
616a63ff495d
USB: dummy-hcd: Fix locking/synchronization error
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
22 |
C |
done |
|
46133 |
20d |
571d
|
29/29 |
6d03h |
752a6c9596dd
Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
|
|
general protection fault in vidtv_psi_desc_assign
media
|
2 |
syz |
|
|
160 |
49d |
148d
|
29/29 |
6d03h |
f8e1fc918a9f
media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
|
|
WARNING in reg_bounds_sanity_check (2)
bpf
|
-1 |
C |
done |
|
20146 |
42d |
263d
|
29/29 |
6d03h |
b254c6d816e5
bpf: Simulate branches to prune based on range violations
|
|
KASAN: slab-use-after-free Read in sock_def_readable (2)
net
|
19 |
C |
|
|
123 |
38d |
79d
|
29/29 |
6d03h |
922814879542
atm: lec: fix use-after-free in sock_def_readable()
|
|
KASAN: slab-use-after-free Read in ext4_ext_remove_space
ext4
|
19 |
C |
error |
|
73 |
64d |
421d
|
29/29 |
6d03h |
3822743dc203
ext4: reject mount if bigalloc with s_first_data_block != 0
|
|
general protection fault in aead_recvmsg
crypto
|
2 |
C |
error |
|
165 |
41d |
53d
|
29/29 |
6d03h |
3d14bd48e3a7
crypto: algif_aead - Fix minimum RX size check for decryption
|
|
WARNING in ieee80211_tdls_oper (3)
wireless
|
-1 |
C |
error |
|
1 |
79d |
78d
|
29/29 |
6d03h |
7d73872d949c
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
|
|
WARNING in _cpu_down
kernel
prio:low
|
-1 |
C |
|
|
37 |
66d |
78d
|
29/29 |
6d03h |
c8c4a2972f83
padata: Put CPU offline callback in ONLINE section to allow failure
|
|
general protection fault in rose_transmit_link (4)
hams
|
21 |
C |
error |
|
2058 |
60d |
131d
|
29/29 |
6d03h |
e1f0a18c9564
net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
|
|
KMSAN: uninit-value in fuse_dentry_revalidate (2)
fuse
prio:high
|
7 |
C |
|
|
261 |
42d |
101d
|
29/29 |
6d03h |
5a6baf204610
fuse: fix uninit-value in fuse_dentry_revalidate()
|
|
WARNING in attr_data_get_block_locked
prio:high
ntfs3
|
-1 |
C |
|
|
12 |
21d |
92d
|
29/29 |
6d03h |
d7ea8495fd30
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
|
|
WARNING in filename_mkdirat
gfs2
prio:high
|
-1 |
C |
|
|
84 |
16d |
99d
|
29/29 |
6d03h |
2ff7cf7e0640
gfs2: Call unlock_new_inode before d_instantiate
|
|
KMSAN: uninit-value in vidtv_ts_null_write_into
media
prio:low
|
7 |
C |
|
|
50 |
42d |
101d
|
29/29 |
6d03h |
5f8e73bde67e
media: vidtv: fix pass-by-value structs causing MSAN warnings
|
|
KASAN: stack-out-of-bounds Read in l2cap_send_cmd
bluetooth
prio:high
|
17 |
C |
|
|
174 |
61d |
74d
|
29/29 |
6d03h |
9d87cb22195b
Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
|
|
inconsistent lock state in igrab
xfs
prio:high
|
4 |
C |
error |
|
521 |
22d |
102d
|
29/29 |
6d03h |
f621324dfb3d
iomap: fix lockdep complaint when reads fail
|
|
BUG: sleeping function called from invalid context in usb_tx_block
usb
libertas
prio:high
|
5 |
C |
|
|
780 |
37d |
91d
|
29/29 |
6d03h |
7c5c2b661bdb
wifi: libertas: don't kill URBs in interrupt context
|
|
KASAN: null-ptr-deref Read in smc_tcp_syn_recv_sock
smc
|
11 |
C |
error |
inconclusive |
24 |
77d |
421d
|
29/29 |
6d03h |
6d5e4538364b
net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
|
|
memory leak in run_add_entry (2)
prio:high
ntfs3
|
3 |
C |
|
|
1 |
53d |
67d
|
29/29 |
6d03h |
87ac077d6ea8
ntfs3: fix memory leak in indx_create_allocate()
|
|
general protection fault in nilfs_mdt_save_to_shadow_map
nilfs
prio:normal
|
2 |
C |
error |
|
87 |
43d |
71d
|
29/29 |
6d03h |
4a4e0328edd9
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
|
|
KMSAN: uninit-value in ntfs_iomap_begin
ntfs3
prio:high
|
7 |
C |
|
|
191 |
43d |
93d
|
29/29 |
6d03h |
e98266e823a1
fs/ntfs3: prevent uninitialized lcn caused by zero len
|
|
KMSAN: uninit-value in bpf_prog_test_run_skb
bpf
prio:high
|
7 |
C |
|
|
4 |
66d |
147d
|
29/29 |
6d03h |
12bec2bd4b76
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
|
|
general protection fault in f2fs_in_warm_node_list
prio:high
f2fs
|
2 |
C |
error |
|
11247 |
35d |
98d
|
29/29 |
6d03h |
2d9c4a4ed4ee
f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
|
|
INFO: task hung in btrfs_invalidate_folio (3)
prio:high
btrfs
|
1 |
C |
error |
|
9 |
55d |
69d
|
29/29 |
6d03h |
b48c980b6a7e
btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
|
|
memory leak in do_cmd_ioctl
comedi
|
3 |
C |
|
|
2 |
79d |
163d
|
29/29 |
6d03h |
29f644f14b89
comedi: runflags cannot determine whether to reclaim chanlist
|
|
WARNING in __folio_mark_dirty (3)
ext4
|
-1 |
C |
error |
|
115 |
44d |
187d
|
29/29 |
6d03h |
9b25f381de6b
ext4: unmap invalidated folios from page tables in mpage_release_unused_pages()
|
|
BUG: unable to handle kernel paging request in dt2815_attach
comedi
|
8 |
C |
|
|
4 |
123d |
123d
|
29/29 |
6d03h |
93853512f565
comedi: dt2815: add hardware detection to prevent crash
|
|
KASAN: use-after-free Read in v4l2_fh_init
usb
media
|
19 |
C |
error |
inconclusive |
7824 |
37d |
2594d
|
29/29 |
6d03h |
a66485a934c7
media: em28xx: fix use-after-free in em28xx_v4l2_open()
|
|
KASAN: global-out-of-bounds Read in ip6gre_header
net
|
17 |
C |
error |
|
3 |
52d |
55d
|
29/29 |
6d03h |
b120e4432f9f
net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
|
|
kernel BUG in ext4_write_inline_data (4)
ext4
|
-1 |
C |
error |
|
13 |
20d |
113d
|
29/29 |
6d03h |
ed9356a30e59
ext4: convert inline data to extents when truncate exceeds inline size
|
|
kernel BUG in resv_map_release (3)
mm
|
-1 |
C |
inconclusive |
error |
35 |
52d |
561d
|
29/29 |
6d03h |
0217c7fb4de4
mm/userfaultfd: fix hugetlb fault mutex hash calculation
|
|
WARNING in io_wq_put_and_exit
io-uring
|
-1 |
syz |
|
|
74 |
10d |
86d
|
29/29 |
6d03h |
41859843f27d
io_uring/tctx: mark io_wq as exiting before error path teardown
|
|
INFO: task hung in rpm_resume (2)
usb
pm
|
1 |
C |
|
|
17 |
100d |
225d
|
29/29 |
6d03h |
069c8f5aebe4
net: usb: aqc111: Do not perform PM inside suspend callback
|
|
KFENCE: invalid free in gid_table_release_one
rdma
|
24 |
C |
error |
|
5478 |
43d |
56d
|
29/29 |
6d03h |
973403ca3553
RDMA/core: Fix memory free for GID table
|
|
memory leak in radix_tree_insert (2)
arm-msm
net
|
3 |
C |
|
|
1 |
120d |
901d
|
29/29 |
6d03h |
2428083101f6
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
|
|
BUG: sleeping function called from invalid context in vhost_get_avail_idx
kvm
net
virt
|
5 |
C |
|
|
1 |
38d |
36d
|
29/29 |
6d03h |
e08a9fac5cf8
vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
|
|
memory leak in vidtv_psi_service_desc_init
media
|
3 |
C |
|
|
13 |
23d |
106d
|
29/29 |
6d03h |
a0e5a598fe9a
media: vidtv: fix nfeeds state corruption on start_streaming failure
|
|
general protection fault in rwsem_mark_wake
mm
prio:high
|
2 |
C |
error |
|
9235 |
68d |
70d
|
29/29 |
6d03h |
68bcd8b6e0b1
locking/rwsem: Fix logic error in rwsem_del_waiter()
|
|
memory leak in fscrypt_setup_filename
fscrypt
f2fs
|
3 |
C |
|
|
1 |
85d |
84d
|
29/29 |
6d03h |
3cf11e6f36c1
f2fs: fix to avoid memory leak in f2fs_rename()
|
|
WARNING in drm_atomic_helper_wait_for_vblanks (5)
dri
|
-1 |
syz |
|
|
464 |
16d |
168d
|
29/29 |
6d03h |
79ae8510b5b8
drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks()
|
|
KMSAN: uninit-value in netif_skb_features (4)
net
|
7 |
C |
|
|
116 |
55d |
232d
|
29/29 |
6d03h |
ddc748a391dd
net: use skb_header_pointer() for TCPv4 GSO frag_off check
|
|
general protection fault in __umount_mnt
fs
|
2 |
C |
error |
|
21 |
57d |
67d
|
29/29 |
6d03h |
ad4999496e73
mount: always duplicate mount
|
|
general protection fault in lmLogSync (2)
jfs
|
22 |
C |
error |
|
8238 |
9d13h |
1335d
|
29/29 |
6d03h |
ca5848ae87d2
jfs: hold LOG_LOCK on umount to avoid null-ptr-deref
|
|
KASAN: slab-use-after-free Write in number
media
|
22 |
C |
|
|
3 |
149d |
145d
|
29/29 |
19d |
a260bd22a355
media: mc: fix potential use-after-free in media_request_alloc()
|
|
general protection fault in fn_enter
serial
|
2 |
C |
error |
|
6 |
118d |
119d
|
29/29 |
20d |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
general protection fault in qt2_read_bulk_callback (2)
usb
|
2 |
C |
error |
|
44 |
118d |
119d
|
29/29 |
20d |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
general protection fault in k_pad
serial
|
2 |
C |
error |
|
20 |
118d |
119d
|
29/29 |
20d |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
general protection fault in to_utf8
serial
|
2 |
C |
error |
|
37 |
118d |
119d
|
29/29 |
20d |
0a15f43b92dd
Revert "tty: tty_port: add workqueue to flip TTY buffer"
|
|
unregister_netdevice: waiting for DEV to become free (8)
net
|
2 |
C |
done |
|
443850 |
20d |
1082d
|
29/29 |
20d |
9af0feae8016
RDMA/core: Fix stale RoCE GIDs during netdev events at registration
fa3c411d21eb
RDMA/core: always drop device refcount in ib_del_sub_device_and_put()
f12b69d8f228
batman-adv: Release references to inactive interfaces
ec69daabe452
bpf: Fix reference count leak in bpf_prog_test_run_xdp()
7fcbe5b2c6a4
can: j1939: implement NETDEV_UNREGISTER notification handler
5d5602236f5d
can: j1939: make j1939_session_activate() fail if device is no longer registered
ac782f4e3bfc
ipv4: Fix reference count leak when using error routes with nexthop objects
1809c82aa073
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
bb4c698633c0
team: avoid NETDEV_CHANGEMTU event when unregistering slave
4efa91a28576
xfrm: always flush state and policy upon NETDEV_UNREGISTER event
|
|
UBSAN: shift-out-of-bounds in minix_statfs
fs
|
-1 |
C |
inconclusive |
error |
75 |
121d |
1626d
|
29/29 |
20d |
8c97a6ddc956
minix: Add required sanity checking to minix_check_superblock()
|
|
BUG: unable to handle kernel paging request in ip_route_output_key_hash_rcu
net
|
17 |
C |
|
|
910 |
83d |
102d
|
29/29 |
20d |
21ec92774d15
net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
|
|
general protection fault in sigd_send
net
|
11 |
C |
error |
|
10 |
111d |
208d
|
29/29 |
20d |
ae88a5d2f29b
net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
|
|
KASAN: slab-out-of-bounds Read in strnchr
bpf
|
17 |
C |
error |
|
14 |
136d |
141d
|
29/29 |
20d |
9df5fad801c5
bpf: Reject BPF_MAP_TYPE_INSN_ARRAY in check_reg_const_str()
|
|
INFO: task hung in ntfs_file_write_iter (2)
ntfs3
|
1 |
C |
error |
|
6 |
69d |
151d
|
29/29 |
20d |
27b75ca4e51e
fs/ntfs3: prevent infinite loops caused by the next valid being the same
|
|
memory leak in napi_skb_cache_get (2)
net
virt
|
3 |
C |
|
|
1 |
134d |
131d
|
29/29 |
20d |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
memory leak in l2tp_tunnel_create
net
|
3 |
C |
|
|
9 |
129d |
133d
|
29/29 |
20d |
4d10edfd1475
l2tp: Fix memleak in l2tp_udp_encap_recv().
|
|
possible deadlock in blkdev_read_iter
block
|
4 |
C |
|
|
11 |
114d |
123d
|
29/29 |
20d |
b5cbacd7f86f
procfs: avoid fetching build ID while holding VMA lock
|
|
kernel BUG in may_open (3)
hfs
|
-1 |
C |
error |
|
11 |
118d |
135d
|
29/29 |
20d |
ed8889ca21b6
hfsplus: pretend special inodes as regular files
|
|
general protection fault in ife_tlv_meta_encode
net
|
2 |
C |
error |
|
6 |
125d |
125d
|
29/29 |
20d |
27880b0b0d35
net/sched: act_ife: avoid possible NULL deref
|
|
WARNING in pvr2_send_request_ex
pvrusb2
usb
|
-1 |
C |
|
|
2 |
163d |
172d
|
29/29 |
20d |
a8333c8262ae
media: pvrusb2: fix URB leak in pvr2_send_request_ex
|
|
WARNING: refcount bug in __add_used_btf
bpf
|
13 |
C |
error |
|
6 |
100d |
112d
|
29/29 |
20d |
ccd2d799ed44
bpf: Fix a potential use-after-free of BTF object
|
|
WARNING in usb_tx_block
usb
libertas
|
-1 |
C |
|
|
15 |
46d |
163d
|
29/29 |
20d |
d66676e6ca96
wifi: libertas: fix WARNING in usb_tx_block
|
|
kernel BUG in f2fs_write_end_io
f2fs
|
-1 |
C |
inconclusive |
|
285 |
22d |
420d
|
29/29 |
20d |
50ac3ecd8e05
f2fs: fix to do sanity check on node footer in {read,write}_end_io
|
|
KASAN: slab-out-of-bounds Read in fib6_add_rt2node
net
|
17 |
C |
|
|
38 |
96d |
104d
|
29/29 |
20d |
8244f959e2c1
ipv6: Fix out-of-bound access in fib6_add_rt2node().
|
|
kernel BUG in fib6_add_rt2node (2)
net
|
-1 |
C |
error |
|
18 |
120d |
140d
|
29/29 |
20d |
bbf4a17ad9ff
ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
|
|
KASAN: use-after-free Read in nf_hook_entry_head
netfilter
|
19 |
syz |
error |
|
62 |
72d |
97d
|
29/29 |
20d |
b7cdc5a97d02
netfilter: nf_tables: Fix for duplicate device in netdev hooks
|
|
WARNING in __mmdrop (2)
kernel
|
-1 |
C |
|
|
7 |
103d |
106d
|
29/29 |
20d |
61dc9f776705
procfs: fix possible double mmput() in do_procmap_query()
|
|
memory leak in prepare_creds (6)
lsm
|
3 |
C |
|
|
2 |
100d |
123d
|
29/29 |
20d |
1cb968a2013f
nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().
|
|
general protection fault in snd_scarlett2_controls_create
sound
|
2 |
C |
|
|
5 |
84d |
80d
|
29/29 |
20d |
df1d8abf36ca
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
|
|
possible deadlock in gup_fast_fallback (2)
mm
|
4 |
C |
|
|
21 |
22d |
110d
|
29/29 |
20d |
b5cbacd7f86f
procfs: avoid fetching build ID while holding VMA lock
|
|
general protection fault in squashfs_copy_data
squashfs
|
2 |
C |
error |
|
4 |
102d |
100d
|
29/29 |
20d |
fdb24a820a58
Squashfs: check metadata block offset is within range
|
|
possible deadlock in __configfs_open_file
fs
|
4 |
C |
|
|
29 |
102d |
521d
|
29/29 |
20d |
14d4ac19d189
scsi: target: Fix recursive locking in __configfs_open_file()
|
|
KASAN: slab-out-of-bounds Write in copy_to_urb (2)
usb
sound
|
21 |
C |
|
|
5 |
136d |
134d
|
29/29 |
20d |
ef5749ef8b30
ALSA: usb-audio: Prevent excessive number of frames
|
|
kernel BUG in ipgre_header (4)
net
|
-1 |
C |
|
|
9 |
130d |
138d
|
29/29 |
20d |
e67c577d8989
ipv4: ip_gre: make ipgre_header() robust
|
|
KMSAN: uninit-value in __inet_bind
net
|
7 |
C |
|
|
410 |
96d |
102d
|
29/29 |
20d |
7b821da55b3f
rds: tcp: fix uninit-value in __inet_bind
|
|
KASAN: use-after-free Read in f2fs_write_end_io (2)
f2fs
|
19 |
C |
|
|
14 |
106d |
156d
|
29/29 |
20d |
ce2739e482bc
f2fs: fix to avoid UAF in f2fs_write_end_io()
|
|
kernel BUG in ocfs2_move_extents
ocfs2
|
-1 |
C |
|
|
163 |
103d |
159d
|
29/29 |
20d |
c62e7e6444cd
ocfs2: add check for free bits before allocation in ocfs2_move_extent()
|
|
WARNING in vcpu_run
kvm-x86
|
-1 |
C |
done |
|
43 |
133d |
578d
|
29/29 |
20d |
ead63640d4e7
KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
|
|
KASAN: use-after-free Read in ocfs2_check_dir_entry
ocfs2
|
19 |
C |
error |
|
6 |
139d |
167d
|
29/29 |
20d |
1524af3685b3
ocfs2: validate inline data i_size during inode read
|
|
WARNING in nft_map_deactivate
netfilter
|
-1 |
C |
error |
|
5 |
85d |
97d
|
29/29 |
20d |
fb7fb4016300
netfilter: nf_tables: clone set on flush only
|
|
memory leak in v4l2_ctrl_handler_init_class (2)
usb
media
|
3 |
C |
|
|
14 |
118d |
183d
|
29/29 |
20d |
b8bf939d77c0
media: radio-keene: fix memory leak in error path
|
|
KMSAN: uninit-value in longest_match_std (2)
ntfs3
|
7 |
C |
|
|
23820 |
98d |
868d
|
29/29 |
20d |
f223ebffa185
fs/ntfs3: Initialize new folios before use
|
|
WARNING in skb_attempt_defer_free
net
|
-1 |
C |
|
|
16 |
117d |
142d
|
29/29 |
20d |
e5c8eda39a9f
udp: call skb_orphan() before skb_attempt_defer_free()
|
|
kernel BUG in ocfs2_remove_refcount_tree
ocfs2
|
-1 |
C |
error |
|
6 |
170d |
170d
|
29/29 |
20d |
688dab01c3bb
ocfs2: validate i_refcount_loc when refcount flag is set
|
|
kernel BUG in hfs_new_inode
hfs
|
-1 |
C |
done |
error |
4 |
144d |
216d
|
29/29 |
20d |
b226804532a8
hfs: Replace BUG_ON with error handling for CNID count checks
|
|
memory leak in __build_skb (4)
net
|
3 |
C |
|
|
1 |
137d |
134d
|
29/29 |
20d |
9a56796ad258
gue: Fix skb memleak with inner IP protocol 0.
|
|
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (4)
fs
|
10 |
C |
done |
|
5746 |
127d |
556d
|
29/29 |
20d |
777a8560fd29
lib/buildid: use __kernel_read() for sleepable context
|
|
KASAN: use-after-free Read in __linkwatch_run_queue
net
|
19 |
syz |
|
|
108 |
112d |
377d
|
29/29 |
20d |
83b67cc9be92
linkwatch: use __dev_put() in callers to prevent UAF
|
|
KASAN: slab-use-after-free Read in nft_array_get_cmp
netfilter
|
19 |
C |
error |
|
5 |
118d |
118d
|
29/29 |
20d |
35f83a75529a
netfilter: nft_set_rbtree: don't gc elements on insert
|
|
memory leak in ntfs_init_fs_context (2)
ntfs3
|
3 |
C |
|
|
350 |
98d |
170d
|
29/29 |
20d |
f7edab0cee03
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
|
|
general protection fault in snd_scarlett2_init
sound
|
2 |
C |
|
|
3 |
84d |
80d
|
29/29 |
20d |
df1d8abf36ca
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
|
|
WARNING in __dma_map_sg_attrs (2)
trace
|
-1 |
C |
|
|
4 |
117d |
117d
|
29/29 |
20d |
daafcc0ef0b3
tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
|
|
KMSAN: uninit-value in __inet6_bind (2)
net
|
7 |
C |
|
|
78 |
97d |
103d
|
29/29 |
20d |
7b821da55b3f
rds: tcp: fix uninit-value in __inet_bind
|
|
BUG: corrupted list in io_poll_remove_entries
media
|
8 |
C |
error |
|
8 |
95d |
106d
|
29/29 |
20d |
bfbc0b5b32a8
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
|
|
memory leak in __shmem_file_setup
fs
|
3 |
C |
|
|
1 |
139d |
135d
|
29/29 |
20d |
605f6586ecf7
mm/vma: do not leak memory when .mmap_prepare swaps the file
|
|
BUG: sleeping function called from invalid context in __bpf_stream_push_str
net
virt
|
5 |
C |
done |
|
88 |
127d |
169d
|
29/29 |
20d |
99a3e3a1cfc9
slab: fix kmalloc_nolock() context check for PREEMPT_RT
|
|
WARNING in ip_rt_bug (2)
net
|
-1 |
C |
done |
error |
612 |
20d |
1322d
|
29/29 |
20d |
81b84de32bb2
xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
|
|
memory leak in skb_clone (3)
bluetooth
batman
|
3 |
C |
|
|
4 |
23d |
139d
|
29/29 |
20d |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
UBSAN: array-index-out-of-bounds in ocfs2_xa_remove_entry
ocfs2
|
15 |
C |
|
|
62 |
109d |
167d
|
29/29 |
20d |
d3cd8de2e17e
ocfs2: adjust ocfs2_xa_remove_entry() to match UBSAN boundary checks
|
|
kernel BUG in bio_chain
gfs2
block
|
-1 |
C |
error |
|
5696 |
127d |
171d
|
29/29 |
20d |
4a94f052e098
gfs2: Initialize bio->bi_opf early
|
|
general protection fault in create_empty_buffers (5)
btrfs
|
2 |
C |
|
|
6 |
137d |
138d
|
29/29 |
20d |
3f29d661e568
btrfs: sync read disk super and set block size
|
|
KASAN: slab-out-of-bounds Read in ext4_search_dir
ext4
|
19 |
C |
|
|
5 |
153d |
237d
|
29/29 |
20d |
08e136ebd193
loop: don't change loop device under exclusive opener in loop_set_status
|
|
memory leak in __kthread_create_on_node
gfs2
|
3 |
C |
|
|
1 |
118d |
116d
|
29/29 |
20d |
da6f5bbc2e79
gfs2: fix memory leaks in gfs2_fill_super error path
|
|
possible deadlock in sch_direct_xmit (5)
net
|
4 |
C |
unreliable |
|
1245 |
20d |
140d
|
29/29 |
20d |
872ac785e768
ipv4: ip_tunnel: spread netdev_lockdep_set_classes()
|
|
INFO: task hung in usb_bulk_msg (2)
usb
|
1 |
C |
|
|
8 |
78d |
108d
|
29/29 |
20d |
7784caa413a8
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
|
|
general protection fault in grab_requested_root
fs
|
2 |
C |
|
|
21 |
91d |
103d
|
29/29 |
20d |
81f16c9778d7
statmount: Fix the null-ptr-deref in do_statmount()
|
|
general protection fault in lec_arp_clear_vccs
net
|
19 |
C |
error |
|
84 |
48d |
252d
|
29/29 |
20d |
101bacb303e8
atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
|
|
general protection fault in btrfs_evict_inode
btrfs
|
2 |
C |
|
|
11 |
185d |
218d
|
29/29 |
20d |
f157dd661339
btrfs: fix NULL dereference on root when tracing inode eviction
|
|
WARNING in tracing_buffers_mmap_close (3)
trace
|
-1 |
C |
|
|
2 |
91d |
90d
|
29/29 |
20d |
e39bb9e02b68
tracing: Fix WARN_ON in tracing_buffers_mmap_close
|
|
BUG: unable to handle kernel paging request in kvm_vgic_destroy
kvmarm
|
8 |
C |
|
|
7 |
75d |
87d
|
29/29 |
20d |
ac6769c8f948
KVM: arm64: Eagerly init vgic dist/redist on vgic creation
|
|
KASAN: slab-use-after-free Read in handle_tx (2)
net
|
19 |
C |
|
|
1086 |
103d |
826d
|
29/29 |
20d |
308e7e4d0a84
serial: caif: fix use-after-free in caif_serial ldisc_close()
|
|
memory leak in __skb_tstamp_tx
bluetooth
|
3 |
C |
|
|
1 |
139d |
139d
|
29/29 |
20d |
21e4271e6509
Bluetooth: purge error queues in socket destructors
|
|
WARNING in folio_remove_rmap_ptes
mm
|
-1 |
C |
|
|
1 |
142d |
155d
|
29/29 |
20d |
61f67c230a5e
mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate (3)
net
|
7 |
C |
|
|
4 |
139d |
139d
|
29/29 |
20d |
81c734dae203
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
|
|
UBSAN: array-index-out-of-bounds in __ocfs2_find_path
ocfs2
|
15 |
C |
inconclusive |
|
12 |
103d |
163d
|
29/29 |
20d |
e0b0f2834c9b
ocfs2: fix oob in __ocfs2_find_path
|
|
KMSAN: uninit-value in pfn_reader_next
iommu
|
7 |
C |
|
|
395 |
115d |
123d
|
29/29 |
20d |
2724138b2f7f
iommufd: Initialize batch->kind in batch_clear()
|
|
WARNING in ntfs_extend_initialized_size (2)
ntfs3
|
-1 |
C |
error |
|
7 |
100d |
100d
|
29/29 |
20d |
10d7c95af043
fs/ntfs3: add delayed-allocation (delalloc) support
|
|
WARNING in kvm_gmem_fault_user_mapping
kvm
|
-1 |
C |
error |
|
3 |
103d |
116d
|
29/29 |
20d |
dd085fe9a8eb
mm: thp: deny THP for files on anonymous inodes
|
|
kernel BUG in ocfs2_write_block
ocfs2
|
-1 |
C |
inconclusive |
|
29 |
141d |
615d
|
29/29 |
20d |
4e9f69c06215
ocfs2: add validate function for slot map blocks
|
|
memory leak in percpu_ref_init
nfs
|
3 |
C |
|
|
1 |
152d |
162d
|
29/29 |
20d |
0b88bfa42e54
NFSD: net ref data still needs to be freed even if net hasn't startup
|
|
WARNING in kvm_apic_accept_events (2)
kvm-x86
|
-1 |
C |
|
|
72 |
108d |
182d
|
29/29 |
20d |
c4a365cd4a4e
KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
|
|
INFO: task hung in nilfs_segctor_thread (6)
nilfs
|
1 |
C |
done |
|
41 |
21d |
161d
|
29/29 |
20d |
ed527ef0c264
nilfs2: Fix potential block overflow that cause system hang
|
|
BUG: unable to handle kernel paging request in sk_skb_reason_drop
hams
|
22 |
C |
|
|
39 |
42d |
131d
|
29/29 |
20d |
ba1096c31528
netrom: fix double-free in nr_route_frame()
|
|
WARNING in fpsimd_restore_current_state
arm
|
-1 |
C |
|
|
27 |
111d |
203d
|
29/29 |
20d |
128a7494a9f1
arm64/fpsimd: ptrace: Fix SVE writes on !SME systems
|
|
possible deadlock in inet6_getname
net
|
4 |
C |
error |
|
122 |
89d |
102d
|
29/29 |
20d |
021fd0f87004
net/rds: fix recursive lock in rds_tcp_conn_slots_available
|
|
KASAN: slab-out-of-bounds Read in xlog_cksum
xfs
|
17 |
C |
error |
|
15 |
132d |
448d
|
29/29 |
20d |
44b9553c3dd0
xfs: validate log record version against superblock log version
|
|
INFO: rcu detected stall in purge_vmap_node
mm
|
1 |
C |
error |
|
2 |
139d |
135d
|
29/29 |
20d |
5747435e0fd4
mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
|
|
WARNING in jfs_rename
jfs
|
-1 |
C |
inconclusive |
|
13 |
151d |
383d
|
29/29 |
20d |
9218dc26fd92
jfs: nlink overflow in jfs_rename
|
|
WARNING in kcm_write_msgs
net
|
-1 |
C |
done |
|
622 |
102d |
2260d
|
29/29 |
20d |
ca220141fa8e
kcm: fix zero-frag skb in frag_list on partial sendmsg error
|
|
KMSAN: uninit-value in fuse_fileattr_get
fuse
|
7 |
C |
|
|
19 |
96d |
110d
|
29/29 |
20d |
cb184dd19154
fs: init flags_valid before calling vfs_fileattr_get
|
|
KASAN: use-after-free Read in z_erofs_transform_plain (2)
erofs
|
19 |
C |
error |
|
5 |
95d |
92d
|
29/29 |
20d |
4a2d046e4b13
erofs: fix interlaced plain identification for encoded extents
|
|
memory leak in llcp_sock_create
net
nfc
|
3 |
C |
|
|
6 |
139d |
122d
|
29/29 |
20d |
165c34fb6068
nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
|
|
memory leak in hfs_init_fs_context
hfs
|
3 |
C |
|
|
2 |
139d |
195d
|
29/29 |
20d |
05ce49a902be
hfs: ensure sb->s_fs_info is always cleaned up
|
|
possible deadlock in ntfs_look_for_free_space
ntfs3
|
4 |
C |
error |
|
4338 |
96d |
565d
|
29/29 |
20d |
08ce2fee1b86
ntfs3: fix circular locking dependency in run_unpack_ex
|
|
general protection fault in rebuild_sched_domains_locked
cgroups
|
2 |
C |
|
|
7 |
84d |
100d
|
29/29 |
20d |
085f067389d1
cgroup/cpuset: fix null-ptr-deref in rebuild_sched_domains_cpuslocked
|
|
INFO: task hung in __rmap_walk_file
mm
|
1 |
C |
error |
|
7 |
138d |
228d
|
29/29 |
20d |
b7880cb166ab
migrate: correct lock ordering for hugetlb file folios
|
|
memory leak in es58x_open
usb
|
3 |
syz |
|
|
1 |
145d |
156d
|
29/29 |
20d |
b1979778e985
can: etas_es58x: allow partial RX URB allocation to succeed
|
|
INFO: task hung in io_wq_put_and_exit (6)
io-uring
|
1 |
C |
error |
|
74 |
123d |
282d
|
29/29 |
20d |
10dc95939817
io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
1f293098a313
io_uring/io-wq: don't trigger hung task for syzbot craziness
|
|
INFO: task hung in ni_readpage_cmpr (3)
ntfs3
|
1 |
C |
done |
|
6 |
147d |
161d
|
29/29 |
20d |
e37a75bb866c
fs/ntfs3: fix deadlock in ni_read_folio_cmpr
|
|
KASAN: slab-use-after-free Read in snd_pcm_stop
sound
|
19 |
C |
error |
|
29 |
27d |
120d
|
29/29 |
20d |
826af7fa62e3
ALSA: aloop: Fix racy access at PCM trigger
|
|
INFO: trying to register non-static key in bcm_can_tx
can
|
-1 |
C |
error |
|
5 |
88d |
98d
|
29/29 |
20d |
c35636e91e39
can: bcm: fix locking for bcm_op runtime updates
|
|
kernel BUG in folio_set_bh (2)
ntfs3
jfs
|
-1 |
C |
|
|
46 |
34d |
134d
|
29/29 |
20d |
ab7ad7abb366
romfs: check sb_set_blocksize() return value
|
|
general protection fault in rds_tcp_accept_one
rds
|
19 |
C |
|
|
1334 |
96d |
106d
|
29/29 |
20d |
6bf45704a92a
net/rds: Fix NULL pointer dereference in rds_tcp_accept_one
|
|
kernel BUG in ext4_swap_extents
ext4
|
-1 |
C |
|
|
6 |
130d |
170d
|
29/29 |
20d |
0ef7ef422730
ext4: add missing down_write_data_sem in mext_move_extent().
|
|
BUG: corrupted list in dev_deactivate_many
net
|
19 |
C |
|
|
22 |
28d |
267d
|
29/29 |
20d |
83b67cc9be92
linkwatch: use __dev_put() in callers to prevent UAF
|
|
general protection fault in bio_seg_gap
block
|
2 |
C |
done |
|
231 |
196d |
194d
|
29/29 |
112d |
fd9ecd005252
block: fix merging data-less bios
|
|
WARNING in mdiobus_get_phy
net
usb
|
-1 |
syz |
|
|
2 |
152d |
162d
|
29/29 |
121d |
a1e077a3f76e
net: usb: asix: validate PHY address before use
|
|
KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor
wireless
|
19 |
C |
|
|
989 |
142d |
192d
|
29/29 |
121d |
cbf0dc37bb4e
wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor()
|
|
WARNING in ieee80211_determine_chan_mode
wireless
|
-1 |
C |
|
|
1 |
166d |
176d
|
29/29 |
121d |
99067b58a408
wifi: mac80211: don't WARN for connections on invalid channels
|
|
WARNING in nfc_dev_down
net
nfc
|
-1 |
C |
error |
|
12 |
148d |
162d
|
29/29 |
121d |
1ab526d97a57
net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
|
|
memory leak in rtl8150_set_multicast
net
usb
|
3 |
syz |
|
|
1 |
166d |
162d
|
29/29 |
121d |
12cab1191d98
net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
|
|
kernel BUG in ip6_pol_route (2)
net
|
-1 |
C |
error |
|
1134 |
147d |
192d
|
29/29 |
121d |
1adaea51c61b
ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
|
|
KMSAN: uninit-value in ib_nl_handle_ip_res_resp
rdma
|
7 |
C |
|
|
8 |
187d |
238d
|
29/29 |
121d |
a7b8e876e0ef
RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
|
|
WARNING in subflow_data_ready (4)
mptcp
|
-1 |
C |
|
|
556 |
142d |
279d
|
29/29 |
121d |
71154bbe4942
mptcp: fallback earlier on simult connection
|
|
WARNING in ieee80211_ocb_rx_no_sta (2)
wireless
|
-1 |
C |
|
|
7 |
169d |
184d
|
29/29 |
121d |
ff4071c60018
wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
|
|
WARNING in gid_table_release_one (3)
rdma
|
-1 |
C |
done |
|
455 |
144d |
378d
|
29/29 |
121d |
57f3cb6c8415
RDMA/cm: Fix leaking the multicast GID table reference
|
|
KASAN: invalid-access Write in do_bad_area
bpf
|
-1 |
C |
|
|
34838 |
148d |
234d
|
29/29 |
121d |
007f5da43b3d
mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN
|
|
kernel BUG in ip6gre_header (6)
net
|
-1 |
C |
|
|
127 |
149d |
166d
|
29/29 |
121d |
db5b4e39c4e6
ip6_gre: make ip6gre_header() robust
|
|
kernel BUG in sctp_getsockopt_peeloff_common
fs
|
-1 |
C |
done |
|
6 |
175d |
177d
|
29/29 |
121d |
afb9917d9b37
Revert "net/socket: convert sock_map_fd() to FD_ADD()"
|
|
kernel BUG in socket
fs
|
-1 |
C |
|
|
145 |
159d |
153d
|
29/29 |
121d |
afb9917d9b37
Revert "net/socket: convert sock_map_fd() to FD_ADD()"
|
|
WARNING in kvm_set_vm_id_reg
kvmarm
|
-1 |
C |
|
|
23 |
189d |
192d
|
29/29 |
125d |
0f559cd91e37
KVM: arm64: Finalize ID registers only once per VM
|
|
possible deadlock in ipv6_sock_mc_close (4)
net
|
4 |
C |
done |
|
7 |
172d |
169d
|
29/29 |
126d |
b98f06f9a5d3
sctp: Fetch inet6_sk() after setting ->pinet6 in sctp_clone_sock().
|
|
WARNING in iopt_map_pages (3)
iommu
|
-1 |
C |
|
|
4 |
164d |
170d
|
29/29 |
126d |
e6a973af1113
iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
|
|
memory leak in btrfs_read_chunk_tree
btrfs
|
3 |
C |
|
|
1 |
173d |
170d
|
29/29 |
126d |
b57f2ddd2873
btrfs: fix memory leak of fs_devices in degraded seed device path
|
|
memory leak in debugfs_change_name
fs
|
3 |
C |
|
|
1 |
173d |
170d
|
29/29 |
126d |
d412ff9e26eb
debugfs: Fix memleak in debugfs_change_name().
|
|
KASAN: invalid-free in inet_sock_destruct
net
|
24 |
C |
inconclusive |
|
10 |
159d |
169d
|
29/29 |
126d |
d7ff61e6f3ef
sctp: Clear inet_opt in sctp_v6_copy_ip_options().
|
|
KMSAN: uninit-value in skb_clone
batman
|
7 |
C |
|
|
3 |
184d |
182d
|
29/29 |
126d |
188e0fa5a679
net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
|
|
WARNING in minix_unlink
fs
|
-1 |
C |
inconclusive |
done |
458 |
169d |
550d
|
29/29 |
126d |
009a2ba40303
Fix a drop_nlink warning in minix_rename
|
|
kernel BUG in btrfs_qgroup_inherit
btrfs
|
-1 |
C |
|
|
4 |
165d |
170d
|
29/29 |
126d |
428e1b114c1a
Revert "btrfs: add ASSERTs on prealloc in qgroup functions"
|
|
KASAN: slab-use-after-free Write in defer_free
bpf
|
22 |
C |
|
|
238 |
157d |
170d
|
29/29 |
126d |
53ca00a19d34
mm/slub: reset KASAN tag in defer_free() before accessing freed memory
|
|
memory leak in getname_flags
fs
|
3 |
C |
|
|
1 |
154d |
153d
|
29/29 |
126d |
b14fad555302
io_uring: fix filename leak in __io_openat_prep()
|
|
memory leak in qgroup_reserve_data
btrfs
|
3 |
C |
|
|
1 |
169d |
167d
|
29/29 |
126d |
37343524f000
btrfs: fix changeset leak on mmap write after failure to reserve metadata
|
|
memory leak in prepare_creds (5)
lsm
|
3 |
C |
|
|
60 |
127d |
201d
|
29/29 |
126d |
df8d829bba3a
nfsd: fix memory leak in nfsd_create_serv error paths
|
|
WARNING in blkdev_common_ioctl
mm
|
-1 |
C |
|
|
5 |
169d |
166d
|
29/29 |
126d |
a58383fa45c7
block: add allocation size check in blkdev_pr_read_keys()
|
|
memory leak in nr_sendmsg
hams
|
3 |
C |
|
|
1 |
183d |
179d
|
29/29 |
126d |
613d12dd794e
netrom: Fix memory leak in nr_sendmsg()
|
|
KASAN: slab-use-after-free Read in driver_remove_file
fs
|
19 |
C |
error |
done |
296 |
172d |
301d
|
29/29 |
127d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
INFO: trying to register non-static key in ntfs_setattr
ntfs3
|
-1 |
C |
done |
done |
8 |
178d |
225d
|
29/29 |
139d |
be99c62ac7e7
ntfs3: init run lock for extend inode
|
|
KASAN: slab-out-of-bounds Write in __bpf_get_stackid
bpf
|
21 |
C |
error |
|
170 |
207d |
302d
|
29/29 |
139d |
23f852daa4ba
bpf: Fix stackmap overflow check in __bpf_get_stackid()
|
|
INFO: task hung in comedi_open
comedi
|
1 |
C |
|
|
24 |
156d |
295d
|
29/29 |
139d |
f24c6e3a39fa
comedi: multiq3: sanitize config options in multiq3_attach()
|
|
WARNING in get_next_unlocked_entry
erofs
|
-1 |
C |
|
|
8 |
176d |
191d
|
29/29 |
139d |
ebe4f3f6eb0c
erofs: correct FSDAX detection
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
7 |
C |
|
|
37 |
204d |
556d
|
29/29 |
139d |
5c5f1f64681c
Bluetooth: hci_event: validate skb length for unknown CC opcode
|
|
WARNING in memory_failure
mm
|
-1 |
C |
|
|
4 |
223d |
245d
|
29/29 |
139d |
77008e1b2ef7
mm/huge_memory: do not change split_huge_page*() target order silently
|
|
INFO: trying to register non-static key in ntfs_set_size
ntfs3
|
-1 |
C |
done |
|
235 |
163d |
253d
|
29/29 |
139d |
be99c62ac7e7
ntfs3: init run lock for extend inode
|
|
kernel BUG in folio_set_bh
ntfs3
|
-1 |
C |
done |
|
202 |
140d |
328d
|
29/29 |
139d |
d1693a7d5a38
ntfs: set dummy blocksize to read boot_block when mounting
|
|
KASAN: slab-out-of-bounds Write in copy_to_urb
usb
sound
|
21 |
C |
|
|
33 |
143d |
202d
|
29/29 |
139d |
05a1fc5efdd8
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
|
|
memory leak in do_timer_create
kernel
|
3 |
C |
|
|
1 |
196d |
195d
|
29/29 |
139d |
e0fd4d42e27f
posix-timers: Plug potential memory leak in do_timer_create()
|
|
general protection fault in fd_install
fs
|
2 |
C |
|
|
64 |
172d |
174d
|
29/29 |
139d |
8cf01d0c4372
mqueue: correct the type of ro to int
|
|
WARNING in __rt_mutex_slowlock_locked (2)
exfat
|
-1 |
C |
done |
|
9 |
176d |
201d
|
29/29 |
139d |
866cba367541
exfat: validate the cluster bitmap bits of directory
|
|
WARNING in f2fs_rename2 (2)
f2fs
|
-1 |
C |
|
|
5 |
212d |
225d
|
29/29 |
139d |
d33f89b34aa3
f2fs: invalidate dentry cache on failed whiteout creation
|
|
INFO: task hung in io_uring_del_tctx_node (5)
io-uring
|
1 |
C |
done |
|
19 |
154d |
211d
|
29/29 |
139d |
101e596e7404
io_uring/fdinfo: cap SQ iteration at max SQ entries
|
|
WARNING in __blk_add_trace
trace
block
|
-1 |
C |
done |
|
94 |
210d |
214d
|
29/29 |
139d |
4a0940bdcac2
blktrace: use debug print to report dropped events
|
|
WARNING in minix_rmdir
fs
|
-1 |
C |
inconclusive |
|
92 |
190d |
503d
|
29/29 |
139d |
d3e0e8661ceb
Fix a drop_nlink warning in minix_rmdir
|
|
WARNING in nsproxy_ns_active_get
fs
|
-1 |
C |
|
|
377 |
196d |
202d
|
29/29 |
139d |
cefd55bd2159
nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
|
|
kernel BUG in hfsplus_bnode_put
hfs
|
-1 |
C |
error |
|
180 |
178d |
1225d
|
29/29 |
139d |
152af1142878
hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
|
|
KASAN: global-out-of-bounds Read in bit_putcs (3)
fbdev
|
17 |
C |
|
|
58 |
212d |
664d
|
29/29 |
139d |
18c4ef4e765a
fbdev: bitblit: bound-check glyph index in bit_putcs*
|
|
WARNING in em_nbyte_match
net
|
-1 |
C |
done |
|
7 |
171d |
186d
|
29/29 |
139d |
4fe5a00ec707
net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
|
|
WARNING: refcount bug in __vma_enter_locked
mm
|
13 |
C |
done |
|
27 |
175d |
183d
|
29/29 |
139d |
faf3c923523e
mm: fix vma_start_write_killable() signal handling
|
|
KASAN: slab-use-after-free Write in kvm_gmem_release
kvm
|
22 |
C |
done |
|
12 |
165d |
215d
|
29/29 |
139d |
ae431059e75d
KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying
|
|
kernel BUG in may_open (2)
fs
|
-1 |
C |
done |
|
17716 |
140d |
322d
|
29/29 |
139d |
34ab4c75588c
bfs: Reconstruct file type when loading from disk
7f9d34b0a7cb
cramfs: Verify inode mode when loading from disk
005d4b0d33f6
hfsplus: Verify inode mode when loading from disk
0a9e74051313
isofs: Verify inode mode when loading from disk
7a5aa54fba2b
jfs: Verify inode mode when loading from disk
73861970938a
minixfs: Verify inode mode when loading from disk
4aead50caf67
nilfs2: reject invalid file types when reading inodes
4e8011ffec79
ntfs3: pretend $Extend records as regular files
bc107a619f02
squashfs: verify inode mode when loading from disk
|
|
memory leak in io_submit_sqes (5)
io-uring
|
3 |
syz |
|
|
3 |
176d |
176d
|
29/29 |
139d |
84230ad2d2af
io_uring/poll: correctly handle io_poll_add() return value on update
|
|
KMSAN: kernel-infoleak in hugetlbfs_read_iter
fs
mm
|
9 |
C |
|
|
7 |
198d |
197d
|
29/29 |
139d |
de8798965fd0
mm/memfd: fix information leak in hugetlb folios
|
|
WARNING in drm_wait_one_vblank (2)
dri
|
-1 |
C |
error |
|
3650 |
140d |
664d
|
29/29 |
139d |
f050da08a4ed
drm/vblank: Increase timeout in drm_wait_one_vblank()
|
|
divide error in __tcp_select_window (4)
net
|
2 |
C |
done |
|
14 |
180d |
182d
|
29/29 |
139d |
f07f4ea53e22
mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
|
|
memory leak in map_create
bpf
|
3 |
C |
|
|
1 |
195d |
191d
|
29/29 |
139d |
688b745401ab
bpf: Fix exclusive map memory leak
|
|
WARNING in xfrm_state_fini (4)
net
|
-1 |
C |
done |
|
89278 |
174d |
226d
|
29/29 |
139d |
10deb6986484
xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
|
|
possible deadlock in dqget
ocfs2
ext4
|
4 |
C |
error |
|
100357 |
149d |
603d
|
29/29 |
139d |
524c3853831c
jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
|
|
KMSAN: uninit-value in bcmp (3)
ntfs3
|
19 |
C |
error |
|
625 |
173d |
653d
|
29/29 |
139d |
a8a3ca23bbd9
fs/ntfs3: Initialize allocated memory before use
|
|
WARNING in f2fs_delete_entry (2)
f2fs
|
-1 |
C |
|
|
4 |
228d |
239d
|
29/29 |
139d |
f37981edcd06
f2fs: Add sanity checks before unlinking and loading inodes
|
|
KMSAN: uninit-value in ntfs_read_bh
ntfs3
|
7 |
C |
|
|
202 |
179d |
632d
|
29/29 |
139d |
73e6b9dacf72
ntfs3: fix uninit memory after failed mi_read in mi_format_new
|
|
memory leak in smb3_fs_context_fullpath
cifs
|
3 |
C |
|
|
1 |
197d |
195d
|
29/29 |
139d |
7e4d9120cfa4
cifs: fix memory leak in smb3_fs_context_parse_param error path
|
|
memory leak in __blkdev_issue_zero_pages
block
udf
|
3 |
syz |
|
|
1 |
177d |
173d
|
29/29 |
139d |
f7e3f852a42d
block: fix memory leak in __blkdev_issue_zero_pages
|
|
INFO: task hung in io_uring_alloc_task_context (6)
io-uring
|
1 |
syz |
|
|
5 |
176d |
206d
|
29/29 |
139d |
101e596e7404
io_uring/fdinfo: cap SQ iteration at max SQ entries
|
|
general protection fault in ocfs2_prepare_dir_for_insert (2)
ocfs2
|
8 |
C |
error |
|
20 |
172d |
351d
|
29/29 |
139d |
aa5b6a72ccd9
ocfs2: add directory size check to ocfs2_find_dir_space_id()
|
|
KMSAN: uninit-value in ntfs_read_hdr (3)
ntfs3
|
7 |
C |
|
|
6 |
144d |
251d
|
29/29 |
139d |
a8a3ca23bbd9
fs/ntfs3: Initialize allocated memory before use
9948dcb2f7b5
ntfs3: Fix uninit buffer allocated by __getname()
|
|
KASAN: use-after-free Read in ocfs2_dir_foreach_blk
ocfs2
|
19 |
C |
error |
|
115 |
166d |
606d
|
29/29 |
139d |
390ac56cf0f6
ocfs2: add boundary check to ocfs2_check_dir_entry()
|
|
WARNING in indx_insert_into_buffer (3)
ntfs3
|
-1 |
C |
done |
|
11 |
215d |
233d
|
29/29 |
139d |
c3856bb499ea
ntfs3: avoid memcpy size warning
|
|
general protection fault in iomap_dio_bio_end_io
ext4
iomap
|
2 |
C |
error |
|
16 |
181d |
184d
|
29/29 |
139d |
7fd8720dff2d
iomap: allocate s_dio_done_wq for async reads as well
|
|
KASAN: use-after-free Read in ocfs2_claim_suballoc_bits
ocfs2
|
19 |
C |
inconclusive |
|
326 |
169d |
643d
|
29/29 |
139d |
e1c70505ee81
ocfs2: add extra consistency checks for chain allocator dinodes
|
|
WARNING in raw_ioctl
usb
mm
|
-1 |
C |
|
|
664 |
170d |
214d
|
29/29 |
139d |
a5160af78be7
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
|
|
kernel BUG in ipgre_header (3)
net
|
-1 |
C |
|
|
99 |
140d |
218d
|
29/29 |
139d |
0ae9cfc454ea
team: Move team device type change at the end of team_port_add
|
|
WARNING in shmem_unlink (2)
overlayfs
|
-1 |
C |
done |
|
3 |
180d |
180d
|
29/29 |
139d |
e9c70084a64e
ovl: fail ovl_lock_rename_workdir() if either target is unhashed
|
|
WARNING in driver_unregister (2)
kernel
|
-1 |
C |
error |
|
3214 |
170d |
326d
|
29/29 |
139d |
72262330f7b3
comedi: c6xdigio: Fix invalid PNP driver unregistration
|
|
kernel BUG in ocfs2_truncate_file
ocfs2
|
-1 |
C |
|
|
179 |
167d |
611d
|
29/29 |
139d |
58b6fcd2ab34
ocfs2: mark inode bad upon validation failure during read
|
|
general protection fault in fsnotify_destroy_group
fs
|
2 |
C |
error |
|
2 |
182d |
180d
|
29/29 |
139d |
7129098f4f7b
fanotify: convert fanotify_init() to FD_PREPARE()
|
|
KASAN: slab-use-after-free Write in recv_work (3)
nbd
|
22 |
C |
|
|
6 |
177d |
205d
|
29/29 |
139d |
9517b82d8d42
nbd: defer config put in recv_work
|
|
KASAN: slab-use-after-free Read in mgmt_pending_remove
bluetooth
|
19 |
syz |
|
|
2 |
195d |
192d
|
29/29 |
139d |
89bb613511cc
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
|
|
KMSAN: uninit-value in sctp_inq_pop (3)
sctp
|
7 |
C |
|
|
9 |
218d |
218d
|
29/29 |
139d |
51e5ad549c43
net: sctp: fix KMSAN uninit-value in sctp_inq_pop
|
|
UBSAN: array-index-out-of-bounds in ocfs2_block_group_fill
ocfs2
|
15 |
C |
done |
|
6 |
223d |
224d
|
29/29 |
139d |
e1c70505ee81
ocfs2: add extra consistency checks for chain allocator dinodes
|
|
WARNING in nsproxy_ns_active_put
fs
|
-1 |
C |
done |
|
38 |
196d |
202d
|
29/29 |
139d |
cefd55bd2159
nsproxy: fix free_nsproxy() and simplify create_new_namespaces()
|
|
possible deadlock in padata_do_serial
crypto
|
4 |
C |
|
|
40877 |
169d |
332d
|
29/29 |
139d |
af3852cda347
padata: remove __padata_list_init()
|
|
kernel BUG in ext4_write_inline_data (3)
ext4
|
-1 |
C |
error |
|
8 |
146d |
255d
|
29/29 |
139d |
892e1cf17555
ext4: refresh inline data size before write operations
|
|
general protection fault in gfs2_log_is_empty
gfs2
|
19 |
C |
done |
|
92 |
215d |
224d
|
29/29 |
139d |
9c4a3de6cd5b
gfs2: Asynchronous withdraw
|
|
WARNING in ntfs_put_super
ntfs3
|
-1 |
C |
done |
|
40466 |
189d |
210d
|
29/29 |
139d |
aee4d5a521e9
ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private
|
|
WARNING in minix_rename
fs
|
-1 |
syz |
error |
|
7 |
250d |
336d
|
29/29 |
139d |
009a2ba40303
Fix a drop_nlink warning in minix_rename
|
|
BUG: corrupted list in sctp_destroy_sock
sctp
|
8 |
C |
done |
|
10 |
197d |
201d
|
29/29 |
139d |
73edb26b06ea
sctp: Don't inherit do_auto_asconf in sctp_clone_sock().
|
|
KASAN: slab-use-after-free Read in btusb_disconnect
usb
bluetooth
|
19 |
C |
|
|
5 |
241d |
327d
|
29/29 |
139d |
23d22f2f7176
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
|
|
kernel BUG in __ocfs2_move_extent
ocfs2
|
-1 |
C |
|
|
16 |
218d |
232d
|
29/29 |
139d |
8a7d58845fae
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
|
|
divide error in iova_bitmap_alloc
iommu
|
2 |
C |
|
|
1 |
217d |
231d
|
29/29 |
139d |
cb30dfa75d55
iommufd: Don't overflow during division for dirty tracking
|
|
KASAN: vmalloc-out-of-bounds Read in run_irq_workd
kernel
|
17 |
C |
error |
|
225 |
207d |
269d
|
29/29 |
139d |
4e9077638301
bpf: Sync pending IRQ work before freeing ring buffer
|
|
WARNING in bpf_bprintf_prepare (3)
bpf
|
-1 |
C |
done |
|
6 |
194d |
218d
|
29/29 |
139d |
c1da3df7191f
bpf: Prevent nesting overflow in bpf_try_get_buffers
|
|
KASAN: global-out-of-bounds Read in io_uring_show_fdinfo
io-uring
|
17 |
C |
done |
|
7 |
205d |
208d
|
29/29 |
139d |
8cd5a59e4d51
io_uring/fdinfo: validate opcode before checking if it's an 128b one
|
|
KMSAN: uninit-value in em_canid_match
can
net
|
7 |
C |
|
|
7 |
181d |
182d
|
29/29 |
139d |
0c922106d7a5
net/sched: em_canid: fix uninit-value in em_canid_match
|
|
WARNING in tracing_start_tr
trace
|
-1 |
C |
|
|
20 |
171d |
405d
|
29/29 |
139d |
02e7769e38c8
tracing: Fix enabling of tracing on file release
|
|
kernel BUG in ocfs2_commit_truncate
ocfs2
|
-1 |
C |
inconclusive |
|
8 |
186d |
528d
|
29/29 |
139d |
a2b1c419ff72
ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (4)
net
|
18 |
C |
|
|
1050 |
140d |
732d
|
29/29 |
139d |
62b656e43eae
net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
ce50039be49e
net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
|
|
KASAN: use-after-free Read in ocfs2_dx_dir_lookup_rec
ocfs2
|
19 |
C |
|
|
14 |
184d |
241d
|
29/29 |
139d |
1b34743c31fe
ocfs2: add extra consistency check to ocfs2_dx_dir_lookup_rec()
|
|
kernel BUG in ocfs2_remove_btree_range (2)
ocfs2
|
-1 |
C |
|
|
5 |
175d |
181d
|
29/29 |
139d |
4ac577ae741e
ocfs2: check tl_used after reading it from trancate log inode
|
|
WARNING in ocfs2_unlink
ocfs2
|
-1 |
C |
inconclusive |
|
139 |
165d |
497d
|
29/29 |
139d |
7efb45f9685f
ocfs2: invalidate inode if i_mode is zero after block read
|
|
memory leak in iovec_from_user (2)
io-uring
|
3 |
C |
|
|
1 |
200d |
197d
|
29/29 |
139d |
d3c9c213c0b8
io_uring/rw: ensure allocated iovec gets cleared for early failure
|
|
WARNING in destroy_super_work
fs
|
-1 |
syz |
done |
|
107 |
196d |
201d
|
29/29 |
139d |
f8d5a8970d2f
ns: handle setns(pidfd, ...) cleanly
|
|
memory leak in ocfs2_new_path_from_path
ocfs2
|
3 |
C |
|
|
5 |
165d |
200d
|
29/29 |
139d |
2214ec4bf89d
ocfs2: fix memory leak in ocfs2_merge_rec_left()
|
|
memory leak in smb3_fs_context_parse_param
cifs
|
3 |
C |
|
|
1 |
201d |
201d
|
29/29 |
139d |
e8c73eb7db0a
cifs: client: fix memory leak in smb3_fs_context_parse_param
|
|
general protection fault in pcl818_ai_cancel
comedi
|
2 |
C |
error |
|
14192 |
170d |
326d
|
29/29 |
139d |
a51f025b5038
comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
|
|
general protection fault in mntput
fs
|
2 |
C |
error |
|
17 |
175d |
180d
|
29/29 |
139d |
05885f41658c
namespace: convert fsmount() to FD_PREPARE()
|
|
WARNING: ODEBUG bug in gfs2_fill_super
gfs2
|
-1 |
C |
done |
|
24 |
215d |
218d
|
29/29 |
139d |
9c4a3de6cd5b
gfs2: Asynchronous withdraw
|
|
KMSAN: uninit-value in attr_set_size
ntfs3
|
7 |
C |
|
|
3 |
219d |
233d
|
29/29 |
139d |
5f33da04e6ce
fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list
|
|
WARNING: ODEBUG bug in nilfs_detach_log_writer (2)
nilfs
|
-1 |
C |
|
|
4 |
214d |
211d
|
29/29 |
139d |
9a6b60cb147d
nilfs2: avoid having an active sc_timer before freeing sci
|
|
kernel BUG in ocfs2_claim_suballoc_bits
ocfs2
|
-1 |
C |
inconclusive |
|
1706 |
163d |
643d
|
29/29 |
139d |
039bef30e320
ocfs2: fix kernel BUG in ocfs2_find_victim_chain
|
|
KASAN: use-after-free Read in ocfs2_listxattr
ocfs2
|
19 |
C |
|
|
5 |
185d |
197d
|
29/29 |
139d |
2a4f33430e96
ocfs2: validate inline xattr size and entry count in ocfs2_xattr_ibody_list
|
|
divide error in ocfs2_block_group_fill (3)
ocfs2
|
2 |
C |
|
|
3 |
213d |
220d
|
29/29 |
139d |
93ce0ff117b0
ocfs2: validate cl_bpc in allocator inodes to prevent divide-by-zero
|
|
memory leak in ni_add_subrecord
ntfs3
|
3 |
C |
|
|
1 |
185d |
197d
|
29/29 |
139d |
ccc4e86d1c24
fs/ntfs3: Prevent memory leaks in add sub record
|
|
WARNING in tracing_buffers_mmap_close (2)
trace
|
-1 |
C |
|
|
4 |
159d |
196d
|
29/29 |
139d |
b042fdf18e89
tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
|
|
BUG: sleeping function called from invalid context in hook_sb_delete
fs
|
5 |
C |
done |
|
11887 |
157d |
245d
|
29/29 |
139d |
56325e8c68c0
landlock: fix splats from iput() after it started calling might_sleep()
|
|
WARNING in dax_iomap_rw
fs
|
-1 |
C |
|
|
5 |
223d |
237d
|
29/29 |
176d |
154d1e7ad9e5
dax: skip read lock assertion for read-only filesystems
|
|
INFO: task hung in v9fs_evict_inode
v9fs
|
1 |
C |
error |
done |
2597 |
221d |
538d
|
29/29 |
181d |
netfs: fix reference leak
|
|
kernel BUG in kvm_s2_put_page
kvmarm
|
-1 |
C |
|
|
88 |
209d |
249d
|
29/29 |
186d |
fc670ad5966f
Revert "KVM: arm64: Reschedule as needed when destroying the stage-2 page-tables"
|
|
WARNING in hugetlb_vma_assert_locked
mm
|
-1 |
C |
|
|
8 |
244d |
246d
|
29/29 |
188d |
cec944dd329f
hugetlbfs: move lock assertions after early returns in huge_pmd_unshare()
dd83609b8898
hugetlbfs: skip VMAs without shareable locks in hugetlb_vmdelete_list
|
|
WARNING in invalidate_bh_lru
fs
|
-1 |
C |
done |
done |
5172 |
424d |
1252d
|
29/29 |
189d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in hdm_disconnect
usb
|
19 |
C |
error |
|
18706 |
209d |
666d
|
29/29 |
190d |
4b1270902609
most: usb: Fix use-after-free in hdm_disconnect
|
|
WARNING in xfs_init_fs_context
mm
|
-1 |
syz |
|
|
21 |
227d |
331d
|
29/29 |
190d |
0f41997b1b2b
xfs: don't use __GFP_NOFAIL in xfs_init_fs_context
|
|
BUG: sleeping function called from invalid context in sock_map_delete_elem
net
bpf
|
5 |
C |
error |
|
58 |
220d |
272d
|
29/29 |
190d |
7c33e97a6ef5
bpf: Do not disable preemption in bpf_test_run().
|
|
VFS: Busy inodes after unmount (use-after-free) (3)
fs
|
2 |
C |
error |
|
85 |
208d |
238d
|
29/29 |
190d |
56094ad3eaa2
vfs: Don't leak disconnected dentries on umount
|
|
kernel BUG in qlist_free_all (2)
fs
|
-1 |
C |
done |
|
5 |
223d |
254d
|
29/29 |
190d |
25718fdcbdd2
net: gro_cells: Use nested-BH locking for gro_cell
|
|
KASAN: slab-out-of-bounds Read in __cpa_addr
kernel
|
17 |
C |
done |
|
601 |
219d |
233d
|
29/29 |
190d |
f25785f9b088
x86/mm: Fix overflow in __cpa_addr()
|
|
kernel BUG in ext4_es_cache_extent (3)
ext4
|
-1 |
C |
|
|
4 |
251d |
265d
|
29/29 |
190d |
1d3ad183943b
ext4: detect invalid INLINE_DATA + EXTENTS flag combination
|
|
kernel BUG in populate_free_space_tree (2)
btrfs
|
-1 |
syz |
error |
|
3 |
239d |
238d
|
29/29 |
190d |
a5a51bf4e9b7
btrfs: do not assert we found block group item when creating free space tree
|
|
WARNING in cgroup_freeze
cgroups
|
-1 |
C |
done |
|
847 |
217d |
237d
|
29/29 |
190d |
93a4b36ef3cf
cgroup: Fix seqcount lockdep assertion in cgroup freezer
|
|
KASAN: stack-out-of-bounds Read in cp2112_xfer
input
|
17 |
C |
error |
|
8 |
224d |
253d
|
29/29 |
190d |
362f21536966
HID: cp2112: Add parameter validation to data length
|
|
possible deadlock in vsock_linger
virt
net
|
4 |
C |
|
|
7 |
219d |
218d
|
29/29 |
190d |
f7c877e75352
vsock: fix lock inversion in vsock_assign_transport()
|
|
kernel BUG in scrub_stripe_get_kaddr
btrfs
|
-1 |
C |
error |
|
293 |
222d |
239d
|
29/29 |
190d |
42d3a055d946
btrfs: do not use folio_test_partial_kmap() in ASSERT()s
|
|
KMSAN: uninit-value in poly1305_blocks
crypto
|
7 |
C |
|
|
10 |
218d |
218d
|
29/29 |
190d |
1af424b15401
lib/crypto: poly1305: Restore dependency of arch code on !KMSAN
|
|
WARNING in nsfs_fh_to_dentry
nfs
|
-1 |
C |
|
|
77 |
210d |
249d
|
29/29 |
190d |
15623c860c93
nsfs: handle inode number mismatches gracefully in file handles
|
|
kernel BUG in ocfs2_refcount_cal_cow_clusters
ocfs2
|
-1 |
C |
|
|
8 |
217d |
235d
|
29/29 |
190d |
78a63493f8e3
ocfs2: clear extent cache after moving/defragmenting extents
|
|
BUG: sleeping function called from invalid context in __set_page_owner
net
virt
|
5 |
C |
done |
|
79 |
216d |
229d
|
29/29 |
190d |
c83aab85e181
mm: don't spin in add_stack_record when gfp flags don't allow
|
|
general protection fault in __smc_diag_dump (4)
smc
|
2 |
C |
done |
|
6 |
216d |
251d
|
29/29 |
190d |
f584239a9ed2
net/smc: fix general protection fault in __smc_diag_dump
|
|
KASAN: stack-out-of-bounds Read in exfat_nls_to_utf16
exfat
|
17 |
C |
done |
|
36 |
214d |
233d
|
29/29 |
190d |
2d8636119b92
exfat: fix out-of-bounds in exfat_nls_to_ucs2()
|
|
kernel BUG in dnotify_free_mark
ntfs3
|
-1 |
C |
error |
done |
22993 |
288d |
1306d
|
29/29 |
191d |
55ad333de0f8
fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
|
|
WARNING in media_create_pad_link (2)
usb
media
|
-1 |
C |
error |
done |
11 |
231d |
434d
|
29/29 |
193d |
0e2ee70291e6
media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
|
|
INFO: rcu detected stall in watchdog
bpf
|
1 |
C |
error |
done |
14 |
255d |
1377d
|
29/29 |
193d |
eecd203ada43
media: imon: make send_packet() more robust
|
|
INFO: rcu detected stall in dummy_timer (4)
usb
|
1 |
C |
inconclusive |
done |
25 |
256d |
1418d
|
29/29 |
193d |
eecd203ada43
media: imon: make send_packet() more robust
|
|
INFO: task hung in bch2_direct_write (2)
fs
|
1 |
C |
unreliable |
done |
15 |
275d |
284d
|
29/29 |
196d |
f2c61db29f27
Remove bcachefs core code
|
|
general protection fault in hfs_find_init
hfs
|
10 |
C |
done |
done |
1024 |
299d |
2978d
|
29/29 |
204d |
736a0516a162
hfs: fix general protection fault in hfs_find_init()
|
|
general protection fault in unpin_user_pages_dirty_lock
mm
|
2 |
C |
|
|
4 |
261d |
261d
|
29/29 |
208d |
e3c05b6e370c
mm/gup: remove record_subpages()
|
|
WARNING in ext4_init_orphan_info
ext4
mm
|
-1 |
C |
done |
|
5 |
236d |
260d
|
29/29 |
209d |
0a6ce20c1564
ext4: verify orphan file size is not too big
|
|
KASAN: slab-use-after-free Read in io_waitid_wait
io-uring
|
19 |
C |
|
|
3 |
233d |
231d
|
29/29 |
209d |
2f8229d53d98
io_uring/waitid: always prune wait queue entry in io_waitid_wait()
|
|
general protection fault in vc_deallocate
serial
|
2 |
C |
done |
|
475 |
251d |
260d
|
29/29 |
209d |
fc702e7df456
vt: move vc_saved_screen to within tty allocated judgment
|
|
KASAN: slab-use-after-free Write in iommufd_eventq_fops_release
iommu
|
22 |
C |
|
|
5 |
255d |
253d
|
29/29 |
209d |
4e034bf045b1
iommufd: Fix race during abort for file descriptors
|
|
possible deadlock in __snd_pcm_lib_xfer (2)
sound
|
4 |
C |
done |
|
9 |
248d |
270d
|
29/29 |
209d |
9fc4a3da9a02
ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
|
|
KASAN: use-after-free Read in ocfs2_get_system_file_inode
ocfs2
|
19 |
C |
done |
|
5 |
276d |
275d
|
29/29 |
209d |
fe7a283b3916
ocfs2: add suballoc slot check in ocfs2_validate_inode_block()
|
|
WARNING in write_raw_marker_to_buffer
trace
|
-1 |
C |
|
|
29 |
227d |
228d
|
29/29 |
209d |
bda745ee8fbb
tracing: Fix tracing_mark_raw_write() to use buf and not ubuf
54b91e54b113
tracing: Stop fortify-string from warning in tracing_mark_raw_write()
|
|
KMSAN: uninit-value in hfs_find_set_zero_bits
hfs
|
7 |
C |
|
|
4210 |
240d |
1177d
|
29/29 |
209d |
2048ec5b98db
hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
|
|
general protection fault in bcsp_recv
bluetooth
|
8 |
C |
error |
|
1003 |
218d |
465d
|
29/29 |
209d |
ca94b2b036c2
Bluetooth: bcsp: receive data only if registered
|
|
INFO: task hung in __bread_gfp (7)
udf
jfs
|
1 |
C |
done |
|
6 |
244d |
249d
|
29/29 |
209d |
ab073abf6d97
block: fix EOD return for device with nr_sectors == 0
|
|
WARNING in rtl8150_start_xmit/usb_submit_urb
net
usb
|
-1 |
C |
|
|
5 |
250d |
270d
|
29/29 |
209d |
958baf5eaee3
net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
|
|
KASAN: slab-use-after-free Read in media_devnode_unregister
usb
media
|
19 |
C |
|
|
2055 |
257d |
259d
|
29/29 |
209d |
8cfc8cec1b4d
media: mc: Clear minor number before put device
|
|
general protection fault in snd_usbmidi_do_output
usb
sound
|
2 |
C |
error |
|
8 |
239d |
246d
|
29/29 |
209d |
9f2c0ac1423d
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
|
|
KASAN: slab-out-of-bounds Write in fuse_dev_do_write
fuse
|
21 |
C |
|
|
6 |
272d |
277d
|
29/29 |
209d |
9d81ba6d49a7
fuse: Block access to folio overlimit
|
|
WARNING in __rt_mutex_slowlock_locked
exfat
ext4
|
-1 |
C |
done |
|
10 |
220d |
278d
|
29/29 |
209d |
79c1587b6cda
exfat: validate cluster allocation bits of the allocation bitmap
|
|
general protection fault in print_reg_state
bpf
|
2 |
C |
done |
|
4 |
240d |
246d
|
29/29 |
209d |
34904582b502
bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
|
|
WARNING in ext4_xattr_inode_update_ref
ext4
|
-1 |
C |
error |
|
1291 |
209d |
258d
|
29/29 |
209d |
57295e835408
ext4: guard against EA inode refcount underflow in xattr update
|
|
WARNING: bad unlock balance in copy_process
mm
|
4 |
C |
|
|
304 |
235d |
361d
|
29/29 |
209d |
4ec3c15462b9
futex: Use correct exit on failure from futex_hash_allocate_default()
|
|
INFO: task hung in v9fs_file_fsync
fs
mm
|
1 |
C |
done |
|
14 |
242d |
282d
|
29/29 |
209d |
e8fe3f07a357
9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
|
|
KMSAN: uninit-value in __hfsplus_ext_cache_extent
hfs
|
7 |
C |
|
|
2471 |
240d |
881d
|
29/29 |
209d |
4840ceadef42
hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
|
|
WARNING in ah6_output
net
|
-1 |
C |
error |
|
8 |
246d |
367d
|
29/29 |
209d |
2327a3d6f65c
net: ipv6: fix field-spanning memcpy warning in AH output
|
|
WARNING in convert_ctx_accesses (2)
bpf
|
-1 |
C |
|
|
16 |
240d |
256d
|
29/29 |
209d |
6fabca2fc94d
bpf: Explicitly check accesses to bpf_sock_addr
|
|
WARNING in maybe_exit_scc
bpf
|
-1 |
C |
done |
|
59 |
238d |
253d
|
29/29 |
209d |
a3c73d629ea1
bpf: dont report verifier bug for missing bpf_scc_visit on speculative path
|
|
KMSAN: uninit-value in squashfs_get_parent
squashfs
|
7 |
C |
|
|
2 |
251d |
250d
|
29/29 |
209d |
74058c0a9fc8
Squashfs: fix uninit-value in squashfs_get_parent
|
|
general protection fault in btrfs_root_node
btrfs
|
8 |
C |
done |
|
670 |
233d |
630d
|
29/29 |
209d |
ed4e6b5d644c
btrfs: ref-verify: handle damaged extent root tree
|
|
general protection fault in ocfs2_evict_inode (2)
ocfs2
|
2 |
C |
error |
|
68 |
273d |
280d
|
29/29 |
209d |
f46e8ef8bb7b
ocfs2: prevent release journal inode after journal shutdown
|
|
KASAN: global-out-of-bounds Read in z_erofs_decompress_queue
erofs
|
17 |
C |
done |
|
6 |
277d |
277d
|
29/29 |
209d |
131897c65e2b
erofs: fix invalid algorithm for encoded extents
|
|
WARNING in ovl_copy_up_file (2)
squashfs
|
-1 |
C |
error |
|
12 |
243d |
243d
|
29/29 |
209d |
9f1c14c1de1b
Squashfs: reject negative file sizes in squashfs_read_inode()
|
|
WARNING in max_vclocks_store
mm
net
|
-1 |
C |
|
|
3 |
270d |
505d
|
29/29 |
209d |
e9f35294e18d
ptp: Add a upper bound on max_vclocks
|
|
KMSAN: uninit-value in hfsplus_delete_cat
hfs
|
7 |
C |
|
|
4901 |
239d |
1269d
|
29/29 |
209d |
9b3d15a75891
hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
|
|
INFO: task hung in ocfs2_page_mkwrite (2)
ocfs2
|
1 |
C |
error |
|
4 |
279d |
278d
|
29/29 |
209d |
04100f775c2e
ocfs2: fix recursive semaphore deadlock in fiemap call
|
|
possible deadlock in snd_pcm_drop
sound
|
4 |
C |
error |
|
4 |
241d |
239d
|
29/29 |
209d |
9fc4a3da9a02
ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
|
|
KMSAN: uninit-value in nci_dev_up (2)
nfc
net
|
7 |
C |
|
|
34 |
236d |
292d
|
29/29 |
209d |
9c328f54741b
net: nfc: nci: Add parameter validation for packet data
|
|
kernel BUG in netfs_perform_write
netfs
|
-1 |
C |
error |
|
17 |
246d |
264d
|
29/29 |
209d |
66d938e89e94
netfs: Prevent duplicate unlocking
|
|
WARNING in __linkwatch_sync_dev (2)
net
|
-1 |
C |
done |
|
952 |
222d |
349d
|
29/29 |
209d |
23a6037ce76c
bonding: Remove support for use_carrier
|
|
BUG: sleeping function called from invalid context in dummy_dequeue
usb
|
5 |
C |
error |
|
6278 |
254d |
275d
|
29/29 |
209d |
8d63c83d8eb9
USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
|
|
kernel BUG in clear_inode (4)
f2fs
|
-1 |
C |
done |
|
6 |
228d |
259d
|
29/29 |
209d |
9251a9e6e871
f2fs: fix to truncate first page in error path of f2fs_truncate()
|
|
general protection fault in blk_mq_free_tags_callback
block
|
2 |
C |
|
|
3 |
246d |
246d
|
29/29 |
209d |
670bfe683850
blk-mq: fix null-ptr-deref in blk_mq_free_tags() from error path
|
|
WARNING in nfsd_file_cache_init
mm
|
-1 |
C |
error |
|
4 |
233d |
232d
|
29/29 |
209d |
f7dfa0f31b13
slub: Don't call lockdep_unregister_key() for immature kmem_cache.
|
|
general protection fault in f2fs_check_opt_consistency
f2fs
|
2 |
C |
done |
|
5 |
236d |
284d
|
29/29 |
209d |
930a9a6ee8e7
f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency()
|
|
WARNING: locking bug in vgic_put_irq
kvmarm
|
4 |
C |
|
|
7 |
267d |
274d
|
29/29 |
209d |
d54594accf73
KVM: arm64: vgic-v3: Erase LPIs from xarray outside of raw spinlocks
|
|
WARNING in ni_rename
ntfs3
|
-1 |
C |
error |
|
233 |
212d |
332d
|
29/29 |
209d |
0dc7117da8f9
fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
|
|
KASAN: slab-use-after-free Write in __xfrm_state_delete
net
|
22 |
C |
done |
|
4863 |
219d |
302d
|
29/29 |
209d |
cd8ae32e4e46
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
|
|
general protection fault in try_to_wake_up (3)
kernel
|
2 |
syz |
|
|
23 |
247d |
266d
|
29/29 |
209d |
b549113738e8
futex: Prevent use-after-free during requeue-PI
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (5)
fbdev
|
21 |
C |
|
|
1075 |
209d |
260d
|
29/29 |
209d |
3637d34b35b2
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
|
|
KASAN: slab-out-of-bounds Read in hfsplus_bmap_alloc
hfs
|
17 |
C |
|
|
1 |
300d |
456d
|
29/29 |
209d |
738d5a51864e
hfs: validate record offset in hfsplus_bmap_alloc
|
|
general protection fault in exfat_utf16_to_nls
exfat
|
2 |
C |
done |
|
11 |
244d |
244d
|
29/29 |
209d |
29c063658d53
exfat: combine iocharset and utf8 option setup
|
|
INFO: task hung in erofs_bread
erofs
|
1 |
C |
|
|
4 |
253d |
253d
|
29/29 |
209d |
334c0e493c2a
erofs: avoid reading more for fragment maps
|
|
WARNING in sysfs_emit_at
fs
|
-1 |
C |
|
|
2 |
263d |
259d
|
29/29 |
209d |
9dfec4a51df9
USB: core: remove the move buf action
|
|
KASAN: use-after-free Read in udf_update_tag
udf
|
19 |
C |
|
|
27 |
242d |
644d
|
29/29 |
209d |
3bd5e45c2ce3
fs: udf: fix OOB read in lengthAllocDescs handling
|
|
WARNING: possible circular locking dependency detected (5)
|
-1 |
C |
|
|
1 |
253d |
253d
|
29/29 |
209d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
possible deadlock in serial8250_handle_irq
hams
|
4 |
C |
|
|
180 |
239d |
1040d
|
29/29 |
209d |
38b04ed7072e
6pack: drop redundant locking and refcounting
|
|
INFO: trying to register non-static key in skb_dequeue (4)
audit
|
-1 |
C |
done |
|
20 |
264d |
265d
|
29/29 |
209d |
2aef21a6a603
audit: init ab->skb_list earlier in audit_buffer_alloc()
|
|
possible deadlock in inet_shutdown
net
|
4 |
C |
done |
|
11 |
255d |
263d
|
29/29 |
209d |
9f7c02e03157
nbd: restrict sockets to TCP and UDP
|
|
WARNING in inet_sock_destruct (5)
net
|
-1 |
C |
error |
|
8 |
222d |
259d
|
29/29 |
209d |
a3967baad4d5
tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
|
|
WARNING in kvm_arch_vcpu_ioctl_run (6)
kvm-x86
|
-1 |
C |
|
|
117 |
233d |
313d
|
29/29 |
209d |
e750f8539128
KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
|
|
KASAN: slab-use-after-free Read in napi_gro_frags (2)
net
|
19 |
C |
done |
|
3 |
260d |
252d
|
29/29 |
209d |
1091860a16a8
net: tun: Update napi->skb after XDP process
|
|
WARNING in do_misc_fixups
bpf
|
-1 |
C |
|
|
7604 |
258d |
296d
|
29/29 |
209d |
e4414b01c1cd
bpf: Check the helper function is valid in get_helper_proto
|
|
possible deadlock in smc_diag_dump_proto
smc
|
4 |
C |
error |
|
113 |
264d |
266d
|
29/29 |
209d |
5d6b58c932ec
net: lockless sock_i_ino()
|
|
general protection fault in find_match (6)
net
|
17 |
C |
|
|
102 |
246d |
252d
|
29/29 |
209d |
390b3a300d78
nexthop: Forbid FDB status change while nexthop is in a group
|
|
KMSAN: kernel-infoleak in rng_recvmsg
crypto
|
9 |
C |
|
|
50 |
236d |
292d
|
29/29 |
209d |
9aa7e045f4af
crypto: jitter - Mark intermediary memory as clean
|
|
WARNING in ext4_xattr_block_set (3)
ext4
|
-1 |
C |
error |
|
73 |
221d |
252d
|
29/29 |
209d |
44d2a72f4d64
ext4: validate ea_ino and size in check_xattrs
|
|
WARNING in est_timer
net
|
-1 |
C |
error |
|
497 |
264d |
273d
|
29/29 |
209d |
9f74c0ea9b26
net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y
|
|
KMSAN: uninit-value in lan78xx_reset
net
usb
|
7 |
C |
|
|
14 |
230d |
264d
|
29/29 |
209d |
49bdb63ff644
net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eeprom
|
|
WARNING in tracing_buffers_mmap_close
trace
|
-1 |
C |
|
|
1378 |
229d |
527d
|
29/29 |
209d |
de4cbd704731
ring buffer: Propagate __rb_map_vma return value to caller
|
|
KASAN: slab-use-after-free Read in cmp_bss
wireless
|
19 |
C |
|
|
13 |
266d |
288d
|
29/29 |
209d |
26e84445f02c
wifi: cfg80211: fix use-after-free in cmp_bss()
|
|
possible deadlock in __netdev_update_features
net
|
4 |
C |
done |
|
227 |
211d |
359d
|
29/29 |
209d |
0f82c3ba66c6
macsec: sync features on RTM_NEWLINK
|
|
possible deadlock in task_fork_fair
bpf
trace
|
4 |
C |
done |
done |
9106 |
548d |
962d
|
29/29 |
223d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
UBSAN: shift-out-of-bounds in aio_iiro_16_attach
comedi
|
-1 |
C |
|
|
56 |
311d |
323d
|
29/29 |
223d |
66acb1586737
comedi: aio_iiro_16: Fix bit shift out of bounds
|
|
general protection fault in iter_file_splice_write
fs
|
2 |
C |
done |
done |
2812 |
280d |
737d
|
29/29 |
223d |
netfs: Fix unbuffered write error handling
|
|
WARNING in try_to_migrate_one (3)
mm
|
-1 |
C |
done |
done |
6 |
267d |
290d
|
29/29 |
223d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
WARNING in kvm_apic_accept_events
kvm-x86
|
-1 |
C |
error |
done |
27 |
258d |
355d
|
29/29 |
223d |
0fe3e8d804fd
KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
|
|
WARNING in nf_reject_fill_skb_dst
netfilter
|
-1 |
C |
done |
|
214 |
266d |
279d
|
29/29 |
226d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
WARNING in nf_send_reset6
netfilter
|
-1 |
C |
|
|
9 |
270d |
278d
|
29/29 |
226d |
netfilter: nf_reject: don't leak dst refcount for loopback packets
|
|
KMSAN: uninit-value in sctp_inq_pop (2)
sctp
|
7 |
C |
|
|
4089 |
286d |
1600d
|
29/29 |
230d |
fd60d8a08619
sctp: linearize cloned gso packets in sctp_rcv
|
|
KMSAN: kernel-infoleak in do_insn_ioctl
comedi
|
18 |
C |
|
|
164 |
276d |
313d
|
29/29 |
230d |
3cd212e895ca
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
|
|
general protection fault in rose_rt_ioctl
hams
|
2 |
C |
|
|
64 |
272d |
272d
|
29/29 |
230d |
1cc8a5b534e5
net: rose: fix a typo in rose_clear_routes()
|
|
UBSAN: shift-out-of-bounds in pcl726_attach
comedi
|
-1 |
C |
|
|
318 |
277d |
325d
|
29/29 |
230d |
96cb948408b3
comedi: pcl726: Prevent invalid irq number
|
|
KASAN: slab-out-of-bounds Read in mcp2221_raw_event
input
usb
|
19 |
C |
|
|
1144 |
230d |
536d
|
29/29 |
230d |
b56cc41a3ae7
hid: fix I2C read buffer overflow in raw_event() for mcp2221
|
|
possible deadlock in bch2_symlink
exfat
|
4 |
C |
error |
|
1135 |
266d |
605d
|
29/29 |
230d |
5f1c8965e748
ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
|
|
general protection fault in atmtcp_c_send
atm
|
2 |
C |
done |
|
7 |
273d |
279d
|
29/29 |
230d |
ec79003c5f9d
atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
|
|
BUG: unable to handle kernel paging request in move_pages
mm
|
8 |
C |
|
|
4 |
299d |
313d
|
29/29 |
230d |
aba6faec0103
userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
|
|
UBSAN: shift-out-of-bounds in ax88772_bind
usb
|
-1 |
C |
done |
|
19 |
278d |
284d
|
29/29 |
230d |
24ef2f53c07f
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
|
|
WARNING in xfrm_state_fini (3)
net
|
-1 |
C |
done |
|
122008 |
230d |
302d
|
29/29 |
230d |
42e42562c9cf
xfrm: flush all states in xfrm_state_fini
|
|
WARNING: ODEBUG bug in __sk_destruct (3)
net
|
-1 |
C |
error |
|
12 |
276d |
291d
|
29/29 |
230d |
52565a935213
net: kcm: Fix race condition in kcm_unattach()
|
|
WARNING in shmem_unlink
overlayfs
|
-1 |
syz |
inconclusive |
|
12 |
246d |
284d
|
29/29 |
230d |
e8bd877fb76b
ovl: fix possible double unlink
|
|
WARNING in css_rstat_exit
cgroups
|
-1 |
syz |
|
|
39 |
278d |
347d
|
29/29 |
230d |
eea51c6e3f66
cgroup: avoid null de-ref in css_rstat_exit()
|
|
WARNING in __ww_mutex_wound
dri
|
-1 |
C |
|
|
16832 |
269d |
301d
|
29/29 |
230d |
21924af67d69
locking: Fix __clear_task_blocked_on() warning from __ww_mutex_wound() path
|
|
KMSAN: uninit-value in sctp_assoc_bh_rcv
sctp
|
7 |
C |
|
|
258 |
286d |
417d
|
29/29 |
230d |
fd60d8a08619
sctp: linearize cloned gso packets in sctp_rcv
|
|
BUG: unable to handle kernel paging request in nsim_queue_free
net
|
8 |
syz |
|
|
49 |
266d |
299d
|
29/29 |
230d |
b2cafefaf047
netdevsim: Fix wild pointer access in nsim_queue_free().
|
|
KMSAN: uninit-value in hsr_get_node (3)
net
|
7 |
C |
|
|
30 |
279d |
769d
|
29/29 |
230d |
7af76e9d18a9
net, hsr: reject HSR frame if skb can't hold tag
|
|
WARNING in move_page_tables
mm
|
-1 |
C |
|
|
3 |
287d |
287d
|
29/29 |
230d |
772e5b4a5e83
mm/mremap: fix WARN with uffd that has remap events disabled
|
|
WARNING in nft_socket_init (2)
netfilter
|
-1 |
C |
done |
|
6 |
288d |
305d
|
29/29 |
230d |
1dee968d22ea
netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
|
|
WARNING in follow_page_pte
input
usb
mm
|
-1 |
C |
done |
|
6 |
294d |
294d
|
29/29 |
230d |
cf1b80dc31a1
mm: pass page directly instead of using folio_page
|
|
WARNING in virtio_transport_send_pkt_info
net
virt
kvm
|
-1 |
C |
|
|
145 |
270d |
288d
|
29/29 |
230d |
7fb1291257ea
vsock/virtio: Fix message iterator handling on transmit path
|
|
KMSAN: uninit-value in __sctp_v6_cmp_addr (2)
sctp
|
7 |
C |
|
|
9 |
274d |
273d
|
29/29 |
230d |
2e8750469242
sctp: initialize more fields in sctp_v6_from_sk()
|
|
KMSAN: kernel-infoleak in do_insnlist_ioctl
comedi
|
18 |
C |
|
|
10 |
278d |
309d
|
29/29 |
230d |
3cd212e895ca
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
|
|
WARNING in rxe_skb_tx_dtor
rdma
|
-1 |
C |
|
|
11 |
277d |
390d
|
29/29 |
230d |
3c3e9a9f2972
RDMA/rxe: Flush delayed SKBs while releasing RXE resources
|
|
WARNING in path_noexec
mm
fs
|
-1 |
C |
done |
|
14318 |
238d |
323d
|
29/29 |
238d |
secretmem: use SB_I_NOEXEC
|
|
kernel BUG in f2fs_sync_node_pages
f2fs
|
-1 |
C |
done |
|
4275 |
264d |
345d
|
29/29 |
243d |
6dea74e454c2
f2fs: Fix __write_node_folio() conversion
|
|
WARNING: suspicious RCU usage in corrupted (3)
net
|
4 |
C |
done |
done |
1 |
304d |
366d
|
29/29 |
251d |
7f12c3385048
net, bpf: Fix RCU usage in task_cls_state() for BPF programs
|
|
WARNING in flush_delayed_work
usb
|
-1 |
C |
|
|
704 |
329d |
333d
|
29/29 |
253d |
9bd9c8026341
usb: hub: Fix flushing of delayed work used for post resume purposes
|
|
kernel BUG in bch2_journal_keys_peek_max
fs
|
-1 |
C |
done |
|
45 |
331d |
468d
|
29/29 |
254d |
425da82c63e3
bcachefs: btree_iter: fix updates, journal overlay
|
|
WARNING in osif_xfer/usb_submit_urb
usb
|
-1 |
C |
error |
done |
18 |
339d |
387d
|
29/29 |
258d |
56ad91c1aa9c
i2c: robotfuzz-osif: disable zero-length read messages
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (3)
kernel
|
9 |
C |
|
|
20 |
313d |
341d
|
29/29 |
259d |
8282013b5605
vmci: Prevent the dispatching of uninitialized payloads
vmci: Prevent the dispatching of uninitialized payloads
|
|
WARNING in move_to_new_folio (2)
gfs2
mm
|
-1 |
C |
error |
|
398 |
302d |
322d
|
29/29 |
260d |
5c8f12cf1e64
gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
|
|
WARNING in __vmap_pages_range_noflush
io-uring
|
-1 |
C |
done |
|
14 |
292d |
292d
|
29/29 |
264d |
33503c083fda
io_uring/memmap: cast nr_pages to size_t before shifting
|
|
WARNING in bpf_check (4)
bpf
|
-1 |
C |
done |
|
5241 |
264d |
370d
|
29/29 |
264d |
e09299225d5b
bpf: Reject narrower access to pointer ctx fields
|
|
WARNING in ip6_mr_output
net
|
-1 |
C |
done |
|
143 |
329d |
333d
|
29/29 |
264d |
af232e7615e4
ipv6: guard ip6_mr_output() with rcu
|
|
KASAN: use-after-free Read in bch2_btree_node_read_done
fs
|
19 |
C |
done |
|
64 |
338d |
547d
|
29/29 |
264d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
WARNING in _ieee80211_sta_cur_vht_bw
wireless
|
-1 |
C |
|
|
52 |
321d |
335d
|
29/29 |
264d |
58fcb1b4287c
wifi: mac80211: reject VHT opmode for unsupported channel widths
|
|
KASAN: slab-use-after-free Read in rose_get_neigh
hams
|
19 |
C |
error |
|
1449 |
323d |
715d
|
29/29 |
264d |
34a500caf48c
rose: fix dangling neighbour pointers in rose_rt_device_down()
|
|
KASAN: slab-out-of-bounds Read in mon_copy_to_buff
usb
|
17 |
C |
|
|
7 |
316d |
323d
|
29/29 |
264d |
0d0777ccaa2d
HID: core: ensure __hid_request reserves the report ID as the first byte
|
|
KASAN: slab-use-after-free Read in do_check
bpf
|
19 |
C |
|
|
15 |
348d |
349d
|
29/29 |
264d |
3d71b8b9abae
bpf: Fix state use-after-free on push_stack() err
|
|
WARNING in ieee80211_tdls_oper
wireless
|
-1 |
C |
|
|
6 |
355d |
379d
|
29/29 |
264d |
16ecdab5446f
wifi: mac80211: reject TDLS operations when station is not associated
|
|
WARNING in ipv6_gso_segment
net
|
-1 |
C |
|
|
8 |
300d |
300d
|
29/29 |
264d |
d45cf1e7d718
ipv6: reject malicious packets in ipv6_gso_segment()
|
|
kernel BUG in try_to_unmap_one (2)
mm
|
-1 |
C |
|
|
7 |
331d |
356d
|
29/29 |
264d |
9f1e8cd0b7c4
mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list
|
|
kernel BUG in bch2_btree_path_level_init (3)
fs
|
-1 |
C |
done |
|
489 |
264d |
521d
|
29/29 |
264d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
WARNING in perf_pending_task
perf
|
-1 |
C |
|
|
35773 |
312d |
336d
|
29/29 |
264d |
3da6bb419750
perf/core: Fix WARN in perf_sigtrap()
|
|
possible deadlock in team_del_slave (3)
net
|
4 |
C |
error |
|
386707 |
276d |
760d
|
29/29 |
264d |
bfb4fb77f9a8
team: replace team lock with rtnl lock
|
|
general protection fault in __smc_diag_dump (3)
smc
|
2 |
C |
error |
|
102 |
272d |
565d
|
29/29 |
264d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
UBSAN: shift-out-of-bounds in das16m1_attach
comedi
|
-1 |
C |
|
|
92 |
310d |
326d
|
29/29 |
264d |
ed93c6f68a3b
comedi: das16m1: Fix bit shift out of bounds
|
|
WARNING in hashtab_init
selinux
|
-1 |
C |
|
|
992 |
301d |
342d
|
29/29 |
264d |
9ab71d9204c3
selinux: add __GFP_NOWARN to hashtab_init() allocations
|
|
kernel BUG in __bch2_bkey_compat
fs
|
-1 |
C |
done |
done |
5 |
347d |
347d
|
29/29 |
264d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
INFO: task hung in generic_file_write_iter (3)
exfat
|
1 |
C |
error |
|
4 |
268d |
307d
|
29/29 |
264d |
fb0e9db99eef
fat: fix too many log in fat_chain_add()
|
|
WARNING in bdev_getblk
udf
|
-1 |
C |
done |
|
146 |
266d |
324d
|
29/29 |
264d |
7e49538288e5
loop: Avoid updating block size under exclusive owner
|
|
kernel BUG in bch2_trans_update_by_path
fs
|
-1 |
C |
done |
|
857 |
266d |
341d
|
29/29 |
264d |
c72d628469b8
bcachefs: Fix btree for nonexistent tree depth
|
|
BUG: unable to handle kernel paging request in __bch2_bkey_unpack_key
fs
|
8 |
C |
|
|
75 |
341d |
364d
|
29/29 |
264d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
WARNING in udf_process_sequence
udf
|
-1 |
C |
error |
|
1 |
320d |
319d
|
29/29 |
264d |
1a11201668e8
udf: Verify partition map count
|
|
WARNING in btrfs_rebuild_free_space_tree
btrfs
|
-1 |
C |
|
|
1 |
356d |
352d
|
29/29 |
264d |
1e6ed33cabba
btrfs: fix failure to rebuild free space tree using multiple transactions
|
|
WARNING in reg_bounds_sanity_check
bpf
|
-1 |
C |
done |
|
6525 |
264d |
329d
|
29/29 |
264d |
6279846b9b25
bpf: Forget ranges when refining tnum after JSET
|
|
general protection fault in clip_push
ext4
net
|
8 |
C |
|
|
5 |
333d |
340d
|
29/29 |
264d |
b993ea46b3b6
atm: clip: prevent NULL deref in clip_push()
|
|
general protection fault in qfq_qlen_notify
net
|
2 |
C |
|
|
18 |
320d |
327d
|
29/29 |
264d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
KASAN: slab-use-after-free Read in disk_add_events
fuse
block
|
19 |
C |
|
|
4 |
301d |
301d
|
29/29 |
264d |
1df1fc845d22
md: fix create on open mddev lifetime regression
|
|
WARNING in ip_mr_output
netfilter
|
-1 |
C |
error |
|
74 |
331d |
333d
|
29/29 |
264d |
beead7eea896
net: ipv4: guard ip_mr_output() with rcu
|
|
kernel BUG in clear_inode (3)
jfs
|
-1 |
C |
error |
|
637 |
267d |
348d
|
29/29 |
264d |
2d91b3765cd0
jfs: truncate good inode pages when hard link is 0
|
|
general protection fault in drr_qlen_notify
net
|
10 |
C |
done |
|
101 |
318d |
327d
|
29/29 |
264d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
general protection fault in qdisc_tree_reduce_backlog
net
|
8 |
C |
done |
|
255 |
314d |
327d
|
29/29 |
264d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
WARNING: refcount bug in process_scheduled_works
fuse
|
13 |
C |
done |
|
277 |
291d |
301d
|
29/29 |
264d |
1df1fc845d22
md: fix create on open mddev lifetime regression
|
|
kernel panic: trans should be locked, unlocked by bch2_btree_update_start
fs
|
2 |
C |
error |
error |
361 |
346d |
537d
|
29/29 |
264d |
5c4acbc8ce90
bcachefs: Don't unlock the trans if ret doesn't match BCH_ERR_operation_blocked
|
|
WARNING in usbnet_status_start
usb
|
-1 |
C |
|
|
349 |
310d |
322d
|
29/29 |
264d |
4c4ca3c46167
usb: net: sierra: check for no status endpoint
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (4)
bluetooth
|
12 |
C |
|
|
8 |
324d |
323d
|
29/29 |
264d |
a0075accbf0d
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
|
|
BUG: unable to handle kernel paging request in ocfs2_unlock_and_free_folios
ocfs2
|
8 |
C |
|
|
141 |
289d |
345d
|
29/29 |
264d |
2ae826799932
ocfs2: reset folio to NULL when get folio fails
|
|
general protection fault in hfsc_qlen_notify
net
|
10 |
C |
|
|
161 |
313d |
328d
|
29/29 |
264d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
KMSAN: uninit-value in pptp_xmit (3)
net
|
7 |
C |
|
|
49 |
294d |
302d
|
29/29 |
264d |
de9c4861fb42
pptp: ensure minimal skb length in pptp_xmit()
|
|
KASAN: use-after-free Read in crypto_poly1305_update
bcachefs
|
19 |
C |
done |
done |
20 |
345d |
464d
|
29/29 |
264d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
KASAN: slab-out-of-bounds Read in ntfs_utf16_to_nls
ntfs3
|
17 |
C |
error |
|
5 |
352d |
356d
|
29/29 |
264d |
e841ecb13933
fs/ntfs3: Add sanity check for file name
|
|
general protection fault in htb_qlen_notify
net
|
10 |
C |
done |
|
166 |
318d |
328d
|
29/29 |
264d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
KASAN: slab-use-after-free Write in recv_work (2)
nbd
|
22 |
C |
|
|
16 |
283d |
379d
|
29/29 |
264d |
aa9552438ebf
nbd: fix uaf in nbd_genl_connect() error path
|
|
WARNING in do_check
bpf
|
-1 |
C |
error |
|
51 |
276d |
348d
|
29/29 |
264d |
3157f7e29996
bpf: handle jset (if a & b ...) as a jump in CFG computation
|
|
KASAN: slab-out-of-bounds Read in poly1305_update_arch
bcachefs
|
19 |
C |
done |
done |
29 |
360d |
750d
|
29/29 |
264d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
kernel BUG in bch2_bkey_cmp_packed (2)
fs
|
-1 |
C |
|
|
7 |
348d |
359d
|
29/29 |
264d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
kernel BUG in bch2_reconstruct_snapshots
fs
|
-1 |
C |
done |
done |
7 |
372d |
464d
|
29/29 |
264d |
b2e2bed11980
bcachefs: Add missing key type checks to check_snapshot_exists()
|
|
UBSAN: array-index-out-of-bounds in dbAllocAG
jfs
|
15 |
C |
|
|
1 |
388d |
398d
|
29/29 |
264d |
c214006856ff
jfs: upper bound check of tree index in dbAllocAG
|
|
KASAN: slab-use-after-free Read in neon_poly1305_update
bcachefs
|
19 |
C |
|
|
5 |
672d |
740d
|
29/29 |
264d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
possible deadlock in __ocfs2_flush_truncate_log
ocfs2
|
4 |
C |
inconclusive |
|
3410 |
288d |
437d
|
29/29 |
264d |
08eabe4b9e98
ocfs2: avoid potential ABBA deadlock by reordering tl_inode lock
|
|
UBSAN: shift-out-of-bounds in gfs2_dir_read (2)
gfs2
|
-1 |
C |
|
|
13 |
313d |
316d
|
29/29 |
264d |
557c024ca725
gfs2: Validate i_depth for exhash directories
|
|
kernel BUG in sanity_check_pinned_pages
mm
|
-1 |
C |
|
|
3 |
339d |
357d
|
29/29 |
264d |
5afb4bf9fc62
io_uring/rsrc: fix folio unpinning
|
|
BUG: unable to handle kernel NULL pointer dereference in bch2_btree_update_start
fs
|
10 |
C |
|
|
6 |
335d |
347d
|
29/29 |
264d |
56be92c63f02
bcachefs: Fix pool->alloc NULL pointer dereference
|
|
WARNING in check_helper_call
bpf
|
-1 |
C |
done |
|
7 |
287d |
329d
|
29/29 |
264d |
65fdafd6765f
bpf: Avoid warning on multiple referenced args in call
|
|
KASAN: use-after-free Read in bch2_checksum
fs
|
19 |
C |
error |
done |
8 |
368d |
380d
|
29/29 |
264d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
kernel BUG in bch2_btree_node_iter_init (2)
fs
|
-1 |
C |
done |
|
3 |
321d |
321d
|
29/29 |
264d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
possible deadlock in upgrade_mmap_lock_carefully (2)
ntfs3
mm
|
4 |
C |
error |
|
6 |
335d |
352d
|
29/29 |
264d |
a49f0abd8959
Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
|
|
KASAN: slab-out-of-bounds Read in pause_parse_request
net
|
17 |
C |
done |
|
217 |
329d |
334d
|
29/29 |
264d |
99e3eb454cc4
net: ethtool: avoid OOB accesses in PAUSE_SET
|
|
WARNING in kvfree_call_rcu
net
lsm
|
-1 |
C |
|
|
2 |
323d |
322d
|
29/29 |
264d |
60ada4fe644e
smc: Fix various oops due to inet_sock type confusion.
|
|
WARNING in format_decode (3)
bpf
trace
|
-1 |
C |
done |
|
2248 |
310d |
917d
|
29/29 |
264d |
f8242745871f
bpf: Reject %p% format string in bprintf-like helpers
|
|
KASAN: slab-out-of-bounds Read in nfacct_mt_checkentry
netfilter
|
17 |
C |
done |
|
7 |
315d |
313d
|
29/29 |
264d |
bf58e667af7d
netfilter: xt_nfacct: don't assume acct name is null-terminated
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (4)
fbdev
|
21 |
C |
|
|
3869 |
264d |
644d
|
29/29 |
264d |
af0db3c1f898
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
|
|
kernel BUG in __hfsplus_setxattr
hfs
|
-1 |
C |
error |
|
18903 |
288d |
1278d
|
29/29 |
264d |
c7c6363ca186
hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
|
|
WARNING in record_func_key
bpf
|
-1 |
C |
|
|
90 |
327d |
329d
|
29/29 |
264d |
032547272eb0
bpf: Avoid warning on unexpected map for tail call
|
|
WARNING in hfsplus_free_extents
hfs
|
-1 |
C |
error |
|
402 |
308d |
1269d
|
29/29 |
264d |
fcb96956c921
hfsplus: remove mutex_lock check in hfsplus_free_extents
|
|
KMSAN: uninit-value in nf_flow_offload_inet_hook (2)
netfilter
|
7 |
C |
|
|
13 |
321d |
323d
|
29/29 |
264d |
18cdb3d982da
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
|
|
KASAN: slab-use-after-free Read in bch2_str_hash_repair_key
fs
|
19 |
C |
done |
|
226 |
331d |
350d
|
29/29 |
264d |
9b54efe66c9b
bcachefs: Fix alloc_req use after free
|
|
kernel BUG in __bch2_bkey_unpack_key
fs
|
-1 |
C |
|
|
43 |
343d |
364d
|
29/29 |
264d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
UBSAN: shift-out-of-bounds in __bch2_btree_node_hash_insert
fs
|
-1 |
C |
done |
|
434 |
326d |
510d
|
29/29 |
264d |
96de8f852031
bcachefs: mark invalid_btree_id autofix
|
|
KASAN: slab-out-of-bounds Read in ocfs2_dx_dir_lookup_rec
ocfs2
|
19 |
C |
|
|
76 |
264d |
545d
|
29/29 |
264d |
44acc46d182f
ocfs2: avoid NULL pointer dereference in dx_dir_lookup_rec()
|
|
kernel BUG in folio_unlock (3)
f2fs
netfs
|
-1 |
C |
done |
|
2837 |
349d |
460d
|
29/29 |
264d |
6dea74e454c2
f2fs: Fix __write_node_folio() conversion
|
|
KASAN: slab-use-after-free Read in io_poll_remove_entries
comedi
|
19 |
C |
|
|
12 |
302d |
311d
|
29/29 |
264d |
35b6fc51c666
comedi: fix race between polling and detaching
|
|
possible deadlock in rpc_close_pipes
net
nfs
|
4 |
C |
|
|
904 |
326d |
328d
|
29/29 |
264d |
2a8061ee5e41
better lockdep annotations for simple_recursive_removal()
|
|
WARNING: suspicious RCU usage in task_cls_state
net
|
4 |
C |
done |
|
175 |
278d |
366d
|
29/29 |
264d |
7f12c3385048
net, bpf: Fix RCU usage in task_cls_state() for BPF programs
|
|
BUG: assuming non migratable context at ./include/linux/filter.h:LINE
netfilter
|
-1 |
C |
done |
|
1189 |
276d |
313d
|
29/29 |
264d |
17ce3e5949bc
bpf: Disable migration in nf_hook_run_bpf().
|
|
WARNING in remove_proc_entry (8)
net
nfs
|
-1 |
syz |
|
|
76 |
298d |
348d
|
29/29 |
264d |
e8d6f3ab5946
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
|
|
KASAN: slab-use-after-free Read in bch2_bucket_alloc_trans
fs
|
19 |
C |
error |
|
550 |
331d |
349d
|
29/29 |
264d |
9b54efe66c9b
bcachefs: Fix alloc_req use after free
|
|
UBSAN: shift-out-of-bounds in __bch2_bkey_unpack_key
fs
|
-1 |
C |
done |
|
54 |
347d |
363d
|
29/29 |
264d |
03208bd06a61
bcachefs: don't return fsck_fix for unfixable node errors in __btree_err
|
|
KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
afs
|
17 |
C |
|
|
659 |
305d |
525d
|
29/29 |
264d |
9aa64182952d
afs: Fix check for NULL terminator
|
|
possible deadlock in team_device_event (3)
net
|
4 |
C |
error |
|
38569 |
276d |
747d
|
29/29 |
264d |
bfb4fb77f9a8
team: replace team lock with rtnl lock
|
|
UBSAN: shift-out-of-bounds in s32ton (2)
input
usb
|
-1 |
C |
|
|
4 |
309d |
316d
|
29/29 |
264d |
a6b87bfc2ab5
HID: core: Harden s32ton() against conversion to 0 bits
|
|
general protection fault in pick_link (2)
ntfs3
|
2 |
C |
error |
|
7 |
329d |
344d
|
29/29 |
264d |
d99208b91933
fs/ntfs3: cancle set bad inode after removing name fails
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
17 |
C |
|
|
1512 |
300d |
421d
|
29/29 |
264d |
7af4d7b53502
Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
|
|
VFS: Busy inodes after unmount (use-after-free) (2)
btrfs
|
2 |
C |
error |
|
277 |
269d |
381d
|
29/29 |
264d |
d0118d7d20bb
ocfs2: update d_splice_alias() return code checking
|
|
KASAN: slab-use-after-free Read in tcp_prune_ofo_queue
net
|
19 |
C |
done |
|
356 |
314d |
315d
|
29/29 |
264d |
7eeabfb23738
tcp: fix UaF in tcp_prune_ofo_queue()
|
|
WARNING: kernel/bpf/verifier.c:LINE at do_check, CPU: syz.NUM.NUM/NUM
bpf
|
-1 |
syz |
done |
|
5 |
344d |
336d
|
29/29 |
264d |
dadb59104c64
bpf: Fix aux usage after do_check_insn()
|
|
UBSAN: shift-out-of-bounds in pcl812_attach
comedi
|
-1 |
C |
|
|
288 |
310d |
326d
|
29/29 |
264d |
b14b076ce593
comedi: pcl812: Fix bit shift out of bounds
|
|
kernel BUG in __btree_trans_update_by_path
fs
|
-1 |
C |
done |
|
20 |
323d |
328d
|
29/29 |
264d |
c72d628469b8
bcachefs: Fix btree for nonexistent tree depth
|
|
BUG: unable to handle kernel paging request in afs_put_vlserverlist
afs
|
8 |
C |
|
|
3 |
320d |
409d
|
29/29 |
264d |
8b3c655fa240
afs: Set vllist to NULL if addr parsing fails
|
|
kernel BUG in ext4_update_inline_data
ext4
|
-1 |
C |
|
|
15 |
302d |
323d
|
29/29 |
264d |
099b847ccc6c
ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
|
|
kernel BUG in populate_free_space_tree
btrfs
|
-1 |
C |
|
|
4 |
356d |
355d
|
29/29 |
264d |
1961d20f6fa8
btrfs: fix assertion when building free space tree
|
|
WARNING in inet_sock_destruct (4)
net
|
-1 |
C |
done |
|
6683 |
266d |
1068d
|
29/29 |
264d |
d3a5f2871adc
tcp: Correct signedness in skb remaining space calculation
|
|
WARNING: proc registration bug in atm_dev_register
net
|
-1 |
C |
error |
|
5 |
335d |
342d
|
29/29 |
264d |
a433791aeaea
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
|
|
kernel BUG in alloc_hugetlb_folio_reserve
mm
|
-1 |
C |
done |
|
98 |
318d |
507d
|
29/29 |
264d |
c39b87456411
mm/hugetlb: don't crash when allocating a folio if there are no resv
|
|
kernel BUG in __bkey_unpack_pos (2)
fs
|
-1 |
C |
done |
|
24 |
320d |
517d
|
29/29 |
264d |
9fe8ec866442
bcachefs: Don't build aux search tree when still repairing node
|
|
KASAN: slab-use-after-free Read in __free_filter
trace
|
19 |
C |
|
|
4 |
337d |
337d
|
29/29 |
264d |
6921d1e07cb5
tracing: Fix filter logic error
|
|
WARNING in convert_ctx_accesses
bpf
|
-1 |
C |
done |
|
80 |
278d |
300d
|
29/29 |
264d |
ead3d7b2b6af
bpf: Check flow_dissector ctx accesses are aligned
|
|
WARNING in comedi_unlocked_ioctl
comedi
mm
|
-1 |
C |
|
|
262 |
310d |
327d
|
29/29 |
264d |
08ae4b20f5e8
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
|
|
WARNING in iopt_map_pages (2)
iommu
|
-1 |
C |
|
|
4 |
323d |
336d
|
29/29 |
264d |
b42497e3c0e7
iommufd: Prevent ALIGN() overflow
|
|
KASAN: use-after-free Read in poly1305_update
fs
|
19 |
C |
done |
|
8 |
332d |
347d
|
29/29 |
264d |
d89a34b14df5
bcachefs: Move bset size check before csum check
|
|
BUG: unable to handle kernel NULL pointer dereference in mempool_alloc_noprof (2)
fs
|
10 |
C |
done |
|
8 |
343d |
360d
|
29/29 |
264d |
56be92c63f02
bcachefs: Fix pool->alloc NULL pointer dereference
|
|
KASAN: null-ptr-deref Write in rcuref_put (4)
net
|
12 |
C |
done |
|
7 |
294d |
412d
|
29/29 |
264d |
ae633388cae3
pptp: fix pptp_xmit() error path
|
|
KASAN: slab-use-after-free Read in bch2_copygc
fs
|
19 |
C |
done |
|
25 |
265d |
322d
|
29/29 |
264d |
c02b943f7d12
bcachefs: Fix reference to invalid bucket in copygc
|
|
kernel BUG in jfs_truncate_nolock
jfs
|
-1 |
C |
error |
|
5 |
344d |
358d
|
29/29 |
264d |
2d04df811642
jfs: Regular file corruption check
|
|
WARNING in pend_sync_exception
kvmarm
|
-1 |
C |
|
|
100 |
315d |
318d
|
29/29 |
276d |
efa1368ba9f4
KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
|
|
WARNING in pend_serror_exception
kvmarm
|
-1 |
C |
|
|
49 |
315d |
318d
|
29/29 |
276d |
efa1368ba9f4
KVM: arm64: Commit exceptions from KVM_SET_VCPU_EVENTS immediately
|
|
possible deadlock in trans_set_locked
fs
|
4 |
C |
|
|
113 |
343d |
543d
|
29/29 |
291d |
ff1dd05f8233
bcachefs: bch2_trans_relock() is trylock for lockdep
|
|
BUG: Bad rss-counter state (5)
mm
|
-1 |
C |
done |
|
2365 |
318d |
744d
|
29/29 |
292d |
43e027e41423
mm: memory: extend finish_fault() to support large folio
|
|
KASAN: wild-memory-access Read in get_futex_key
kernel
|
17 |
C |
|
|
34 |
338d |
364d
|
29/29 |
293d |
8337204c5889
futex: Handle invalid node numbers supplied by user
|
|
WARNING in ath6kl_bmi_get_target_info (2)
usb
wireless
|
-1 |
C |
error |
|
10349 |
326d |
664d
|
29/29 |
293d |
e7417421d893
wifi: ath6kl: remove WARN on bad firmware input
|
|
WARNING in rhashtable_init_noprof
fs
|
-1 |
C |
done |
|
131 |
348d |
366d
|
29/29 |
293d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
WARNING in vma_modify
mm
|
-1 |
C |
done |
|
21 |
346d |
354d
|
29/29 |
293d |
0cf4b1687a18
mm/vma: reset VMA iterator on commit_merge() OOM failure
|
|
WARNING in bio_alloc_bioset
bcachefs
|
-1 |
C |
done |
|
22792 |
340d |
410d
|
29/29 |
293d |
f946ce0be45e
bcachefs: Make sure opts.read_only gets propagated back to VFS
|
|
INFO: task hung in __bch2_fsck_err
kernel
|
1 |
syz |
|
|
2 |
432d |
428d
|
29/29 |
293d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
19 |
C |
error |
|
44 |
361d |
633d
|
29/29 |
293d |
6fe26f694c82
Bluetooth: MGMT: Protect mgmt_pending list with its own lock
|
|
KMSAN: uninit-value in atmtcp_c_send
atm
|
7 |
C |
|
|
6 |
312d |
348d
|
29/29 |
293d |
2f370ae1fb63
atm: atmtcp: Free invalid length skb in atmtcp_c_send().
|
|
WARNING in sta_info_insert_rcu (4)
wireless
|
-1 |
C |
|
|
27 |
342d |
554d
|
29/29 |
293d |
d1b1a5eb27c4
wifi: mac80211: drop invalid source address OCB frames
|
|
possible deadlock in blk_mq_freeze_queue_nomemsave
block
|
4 |
C |
done |
|
7798 |
346d |
421d
|
29/29 |
293d |
4bb08cf974c5
loop: move lo_set_size() out of queue freeze
|
|
possible deadlock in rtnl_newlink
net
|
4 |
C |
|
|
11 |
349d |
363d
|
29/29 |
293d |
b4a8085ceefb
e1000: Move cancel_work_sync to avoid deadlock
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3)
bluetooth
|
19 |
C |
|
|
5 |
354d |
378d
|
29/29 |
293d |
e6ed54e86aae
Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
|
|
UBSAN: array-index-out-of-bounds in cfg80211_inform_bss_frame_data
wireless
|
15 |
C |
done |
|
4 |
349d |
348d
|
29/29 |
293d |
a85b8544d463
wifi: remove zero-length arrays
|
|
WARNING in iomap_iter (5)
erofs
iomap
|
-1 |
C |
done |
|
6 |
347d |
347d
|
29/29 |
293d |
7869738b6908
erofs: refuse crafted out-of-file-range encoded extents
|
|
WARNING in __ieee80211_beacon_get
wireless
|
-1 |
C |
done |
|
143787 |
330d |
2060d
|
29/29 |
293d |
d19bac3d4edc
wifi: mac80211: don't WARN for late channel/color switch
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_members_v1_to_text
fs
|
17 |
C |
done |
|
6 |
350d |
350d
|
29/29 |
293d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
possible deadlock in loop_set_status
block
|
4 |
C |
done |
|
20143 |
341d |
549d
|
29/29 |
293d |
4bb08cf974c5
loop: move lo_set_size() out of queue freeze
|
|
KASAN: slab-use-after-free Read in hci_sock_get_channel
bluetooth
|
19 |
syz |
|
|
1 |
371d |
367d
|
29/29 |
293d |
6fe26f694c82
Bluetooth: MGMT: Protect mgmt_pending list with its own lock
|
|
possible deadlock in __bch2_fsck_err (2)
fs
|
4 |
C |
|
|
4 |
378d |
379d
|
29/29 |
293d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
possible deadlock in console_flush_all (3)
kernel
|
4 |
C |
error |
|
52145 |
293d |
682d
|
29/29 |
293d |
0acb385ec19c
bcachefs: Fix possible console lock involved deadlock
|
|
KASAN: slab-use-after-free Read in lane_ioctl
net
|
19 |
syz |
|
|
7 |
341d |
342d
|
29/29 |
293d |
d13a3824bfd2
net: atm: add lec_mutex
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_members_v2_to_text
fs
|
17 |
C |
done |
|
34 |
349d |
366d
|
29/29 |
293d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
WARNING in __init_work (2)
fs
|
-1 |
C |
|
|
5971 |
340d |
349d
|
29/29 |
293d |
757601ef8533
bcachefs: Don't put rhashtable on stack
|
|
WARNING: ODEBUG bug in io_sq_offload_create
io-uring
|
-1 |
C |
|
|
8 |
343d |
344d
|
29/29 |
293d |
f2320f1dd6f6
io_uring/sqpoll: don't put task_struct on tctx setup failure
|
|
WARNING in io_register_clone_buffers
io-uring
|
-1 |
C |
|
|
4 |
350d |
346d
|
29/29 |
293d |
1d27f11bf02b
io_uring/rsrc: validate buffer count with offset for cloning
|
|
divide error in bch2_sb_members_v2_to_text
fs
|
2 |
C |
done |
|
3 |
350d |
350d
|
29/29 |
293d |
205da7c02673
bcachefs: Don't trust sb->nr_devices in members_to_text()
|
|
UBSAN: array-index-out-of-bounds in bch2_sb_downgrade_update
fs
|
15 |
C |
|
|
539 |
341d |
393d
|
29/29 |
293d |
082c74411491
bcachefs: Fix downgrade_table_extra()
|
|
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc
bluetooth
|
17 |
C |
|
|
4 |
378d |
388d
|
29/29 |
299d |
03f1700b9b4d
Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
|
|
WARNING in bch2_printbuf_make_room
fs
|
-1 |
C |
error |
|
2 |
352d |
743d
|
29/29 |
302d |
dc5bfdf8eaed
bcachefs: fix the memory leak in exception case
|
|
possible deadlock in deactivate_super (2)
ocfs2
|
4 |
C |
inconclusive |
done |
8072 |
381d |
478d
|
29/29 |
307d |
fcaf3b2683b0
ocfs2: stop quota recovery before disabling quotas
|
|
BUG: unable to handle kernel paging request in bch2_dirent_to_text
fs
|
8 |
C |
done |
error |
3 |
368d |
678d
|
29/29 |
309d |
f39055220f6f
bcachefs: Add missing validation for superblock section clean
|
|
kernel BUG in zero_user_segments
ntfs3
|
-1 |
C |
inconclusive |
inconclusive |
19179 |
544d |
649d
|
29/29 |
313d |
045fff619312
fs/ntfs3: Equivalent transition from page to folio
|
|
INFO: task hung in uevent_show (2)
kernel
|
1 |
C |
inconclusive |
|
8325 |
325d |
563d
|
29/29 |
313d |
dc1771f71854
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
|
|
kernel BUG in vfs_get_tree (2)
fs
|
-1 |
C |
done |
|
22 |
356d |
353d
|
29/29 |
314d |
9c6185609947
bcachefs: Call bch2_fs_start before getting vfs superblock
|
|
WARNING in __folio_mark_dirty (2)
gfs2
|
-1 |
C |
error |
|
790989 |
327d |
1183d
|
29/29 |
314d |
ae9f3bd8259a
gfs2: replace sd_aspace with sd_inode
|
|
KASAN: use-after-free Read in sysv_new_inode (2)
fs
|
19 |
C |
inconclusive |
error |
21224 |
415d |
748d
|
29/29 |
315d |
448fa70158f9
sysv: Remove the filesystem
|
|
WARNING in get_pat_info
kernel
|
-1 |
C |
done |
done |
36 |
361d |
626d
|
29/29 |
322d |
f8e97613fed2
mm: convert VM_PFNMAP tracking to pfnmap_track() + pfnmap_untrack()
|
|
BUG: corrupted list in ring_buffer_subbuf_order_set
trace
|
8 |
C |
|
|
1 |
359d |
355d
|
29/29 |
323d |
40ee2afafc1d
ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
|
|
KMSAN: uninit-value in mii_nway_restart (2)
usb
|
7 |
C |
|
|
224 |
355d |
463d
|
29/29 |
323d |
9ad0452c0277
net: ch9200: fix uninitialised access during mii_nway_restart
|
|
WARNING in bpf_map_lookup_percpu_elem
bpf
|
-1 |
C |
done |
|
2116 |
373d |
757d
|
29/29 |
323d |
d4965578267e
bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
|
|
WARNING: refcount bug in tipc_crypto_xmit
tipc
|
13 |
C |
done |
|
4968 |
355d |
366d
|
29/29 |
323d |
f29ccaa07cf3
net: tipc: fix refcount warning in tipc_aead_encrypt
|
|
general protection fault in jbd2_journal_dirty_metadata
ext4
|
2 |
syz |
|
|
9 |
390d |
395d
|
29/29 |
323d |
af98b0157adf
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
|
|
KASAN: slab-out-of-bounds Read in iov_iter_revert
netfs
|
17 |
C |
|
|
30 |
358d |
380d
|
29/29 |
323d |
4481f7f2b3df
netfs: Fix oops in write-retry from mis-resetting the subreq iterator
|
|
possible deadlock in __nilfs_error (3)
nilfs
|
4 |
C |
error |
|
947 |
377d |
392d
|
29/29 |
323d |
fb881cd76045
nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
|
|
BUG: unable to handle kernel NULL pointer dereference in lo_rw_aio
block
|
10 |
C |
|
|
10 |
389d |
397d
|
29/29 |
323d |
f5c84eff634b
loop: Add sanity check for read/write_iter
|
|
BUG: unable to handle kernel NULL pointer dereference in io_buffer_select
io-uring
|
10 |
C |
|
|
102 |
375d |
381d
|
29/29 |
323d |
f446c6311e86
io_uring/memmap: don't use page_address() on a highmem page
|
|
BUG: sleeping function called from invalid context in team_change_rx_flags
net
|
5 |
C |
done |
|
71 |
324d |
371d
|
29/29 |
323d |
d8d85ef0a631
af_packet: move notifier's packet_dev_mc out of rcu critical section
|
|
divide error in mac80211_hwsim_set_tsf
wireless
|
2 |
syz |
|
|
1 |
413d |
409d
|
29/29 |
323d |
c575f5374be7
wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
|
|
KMSAN: uninit-value in cxusb_i2c_xfer
media
|
7 |
C |
|
|
556 |
365d |
417d
|
29/29 |
323d |
73fb3b92da84
media: cxusb: no longer judge rbuf when the write fails
|
|
kernel BUG in ext4_write_inline_data (2)
ext4
|
-1 |
C |
error |
|
46 |
338d |
552d
|
29/29 |
323d |
227cb4ca5a65
ext4: inline: fix len overflow in ext4_prepare_inline_data
|
|
BUG: unable to handle kernel NULL pointer dereference in do_pagemap_scan
fs
|
10 |
C |
inconclusive |
done |
45 |
381d |
884d
|
29/29 |
323d |
65c66047259f
proc: fix the issue of proc_mem_open returning NULL
|
|
kernel BUG in may_open
fs
|
-1 |
C |
error |
|
137019 |
323d |
419d
|
29/29 |
323d |
cfd86ef7e8e7
anon_inode: use a proper mode internally
|
|
WARNING in get_bpf_raw_tp_regs
bpf
trace
|
-1 |
C |
|
|
2 |
377d |
380d
|
29/29 |
323d |
3880cdbed1c4
bpf: Fix WARN() in get_bpf_raw_tp_regs
|
|
BUG: unable to handle kernel NULL pointer dereference in generic_file_read_iter
ntfs3
|
10 |
C |
done |
|
10 |
367d |
411d
|
29/29 |
323d |
8b26c8c376b2
fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr
|
|
KASAN: slab-use-after-free Write in binder_remove_device
kernel
|
22 |
C |
done |
|
7 |
366d |
367d
|
29/29 |
323d |
9857af0fcff3
binder: fix yet another UAF in binder_devices
|
|
INFO: task hung in freeze_super (6)
f2fs
|
1 |
C |
done |
|
3 |
374d |
371d
|
29/29 |
323d |
c836d3b8d94e
f2fs: fix to skip f2fs_balance_fs() if checkpoint is disabled
|
|
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (3)
media
|
21 |
C |
|
|
271 |
325d |
679d
|
29/29 |
323d |
f83ac8d30c43
media: vivid: Change the siize of the composing
|
|
KASAN: use-after-free Write in __crypto_shash_import
crypto
|
22 |
C |
done |
|
40 |
364d |
366d
|
29/29 |
323d |
0a84874c7e7d
crypto: shash - Fix buffer overrun in import function
|
|
UBSAN: array-index-out-of-bounds in add_missing_indices
jfs
|
15 |
C |
|
|
187 |
351d |
546d
|
29/29 |
323d |
5dff41a86377
jfs: fix array-index-out-of-bounds read in add_missing_indices
|
|
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence (2)
sound
|
8 |
C |
|
|
4 |
374d |
388d
|
29/29 |
323d |
93a81ca06577
ALSA: pcm: Fix race of buffer access at PCM OSS layer
|
|
general protection fault in dev_set_group
net
|
2 |
C |
error |
|
3 |
356d |
357d
|
29/29 |
323d |
feafc73f3e6a
net: prevent a NULL deref in rtnl_create_link()
|
|
WARNING in __bpf_prog_ret0_warn
bpf
|
-1 |
C |
|
|
9 |
364d |
388d
|
29/29 |
323d |
86bc9c742426
bpf: Avoid __bpf_prog_ret0_warn when jit fails
|
|
UBSAN: array-index-out-of-bounds in ieee80211_request_ibss_scan
wireless
|
15 |
C |
error |
|
29652 |
323d |
393d
|
29/29 |
323d |
82bbe02b2500
wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
|
|
possible deadlock in nilfs_get_block
nilfs
|
4 |
syz |
|
|
30 |
381d |
391d
|
29/29 |
323d |
fb881cd76045
nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
|
|
general protection fault in lookup_or_create_module_kobject
bluetooth
usb
|
2 |
C |
|
|
266 |
382d |
387d
|
29/29 |
323d |
a6aeb739974e
module: ensure that kobject_put() is safe for module type kobjects
|
|
BUG: sleeping function called from invalid context in pcpu_alloc_noprof
net
|
5 |
C |
done |
|
4 |
374d |
388d
|
29/29 |
323d |
8e5f1bb81274
ipv6: Narrow down RCU critical section in inet6_rtm_newroute().
|
|
BUG: unable to handle kernel NULL pointer dereference in io_ring_buffers_peek
io-uring
|
10 |
C |
|
|
68 |
376d |
381d
|
29/29 |
323d |
f446c6311e86
io_uring/memmap: don't use page_address() on a highmem page
|
|
KCSAN: data-race in process_one_work / process_one_work
kernel
|
6 |
syz |
|
|
231 |
998d |
901d
|
29/29 |
323d |
70e1683ca3a6
workqueue: Fix race condition in wq->stats incrementation
|
|
general protection fault in native_tss_update_io_bitmap
kernel
|
2 |
C |
error |
|
7 |
371d |
455d
|
29/29 |
323d |
8b68e978718f
x86/iopl: Cure TIF_IO_BITMAP inconsistencies
|
|
INFO: task hung in f2fs_grab_cache_page
f2fs
|
1 |
C |
|
|
1 |
433d |
429d
|
29/29 |
323d |
061cf3a84bde
f2fs: fix to do sanity check on ino and xnid
|
|
UBSAN: shift-out-of-bounds in __kfifo_alloc
input
usb
|
-1 |
C |
|
|
33349 |
354d |
422d
|
29/29 |
323d |
6bf8ab7774a2
HID: wacom: fix shift OOB in kfifo allocation for zero pktlen
|
|
UBSAN: shift-out-of-bounds in dbAllocAG (2)
jfs
|
-1 |
C |
done |
|
5 |
395d |
445d
|
29/29 |
323d |
37bfb464ddca
jfs: validate AG parameters in dbMount() to prevent crashes
|
|
WARNING in move_to_new_folio
mm
|
-1 |
C |
done |
|
1366 |
323d |
409d
|
29/29 |
323d |
906d7ce3b59d
jfs: implement migrate_folio for jfs_metapage_aops
|
|
WARNING in ipv6_addr_prefix
net
|
-1 |
C |
error |
|
3056 |
341d |
390d
|
29/29 |
323d |
586ceac9acb7
ipv6: Restore fib6_config validation for SIOCADDRT.
|
|
WARNING in udp_tunnel_update_gro_rcv
net
|
-1 |
C |
error |
|
108 |
405d |
434d
|
29/29 |
323d |
c26c192c3d48
udp: properly deal with xfrm encap and ADDRFORM
|
|
UBSAN: array-index-out-of-bounds in usbhid_parse
usb
|
15 |
C |
error |
|
89 |
357d |
953d
|
29/29 |
323d |
fe7f7ac8e0c7
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
|
|
KASAN: null-ptr-deref Read in gfs2_drop_inode
gfs2
|
11 |
C |
done |
|
1050 |
357d |
365d
|
29/29 |
323d |
9126d2754c5e
gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add
|
|
KASAN: slab-use-after-free Read in vidtv_mux_init
media
|
19 |
syz |
|
|
5 |
397d |
442d
|
29/29 |
323d |
1d5f88f05348
media: vidtv: Terminating the subsequent process of initialization failure
|
|
WARNING: ODEBUG bug in snd_rawmidi_free
sound
usb
|
-1 |
C |
error |
|
1 |
388d |
384d
|
29/29 |
323d |
0718a78f6a9f
ALSA: usb-audio: Kill timer properly at removal
|
|
KMSAN: uninit-value in usbnet_probe (3)
usb
|
7 |
C |
|
|
159 |
365d |
381d
|
29/29 |
323d |
405b0d610745
net: usb: aqc111: fix error handling of usbnet read calls
|
|
WARNING in nla_get_range_unsigned (3)
net
|
-1 |
C |
done |
|
22 |
379d |
384d
|
29/29 |
323d |
a96876057b9e
netlink: fix policy dump for int with validation callback
|
|
kernel BUG in dec_valid_block_count
f2fs
|
-1 |
C |
|
|
13 |
365d |
414d
|
29/29 |
323d |
05872a167c2c
f2fs: fix to do sanity check on sbi->total_valid_block_count
|
|
UBSAN: shift-out-of-bounds in squashfs_bio_read
squashfs
|
-1 |
C |
|
|
9 |
361d |
417d
|
29/29 |
323d |
734aa85390ea
Squashfs: check return result of sb_min_blocksize
|
|
possible deadlock in smc_switch_to_fallback (2)
smc
|
4 |
C |
error |
done |
27435 |
393d |
701d
|
29/29 |
326d |
752e2217d789
smc: Fix lockdep false-positive for IPPROTO_SMC.
|
|
WARNING in inode_set_cached_link
ext4
|
-1 |
C |
done |
unreliable |
78396 |
415d |
474d
|
29/29 |
326d |
5f920d5d6083
ext4: verify fast symlink length
|
|
WARNING: locking bug in __set_page_owner
mm
|
4 |
C |
error |
inconclusive |
179425 |
478d |
569d
|
29/29 |
326d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
KASAN: use-after-free Write in ext4_insert_dentry
ext4
|
22 |
C |
done |
|
117 |
411d |
578d
|
28/29 |
344d |
94824ac9a8aa
ext4: fix off-by-one error in do_split
|
|
possible deadlock in trie_delete_elem
bpf
|
4 |
C |
done |
done |
21444 |
423d |
798d
|
28/29 |
344d |
47979314c0fe
bpf: Convert lpm_trie.c to rqspinlock
|
|
WARNING in bch2_dev_free
fs
|
-1 |
C |
done |
|
258 |
351d |
413d
|
28/29 |
347d |
d62922ba3cfc
bcachefs: Prevent granting write refs when filesystem is read-only
|
|
general protection fault in d_splice_alias
udf
|
2 |
C |
done |
done |
15 |
477d |
477d
|
28/29 |
347d |
902e09c8acde
fix braino in "9p: fix ->rename_sem exclusion"
|
|
general protection fault in __d_unalias
udf
nilfs
|
8 |
C |
done |
|
835 |
468d |
477d
|
28/29 |
347d |
902e09c8acde
fix braino in "9p: fix ->rename_sem exclusion"
|
|
KMSAN: uninit-value in bch2_extent_crc_append (2)
fs
|
7 |
C |
|
|
4 |
433d |
444d
|
28/29 |
348d |
53cf2a3daa4c
bcachefs: Fix kmsan warnings in bch2_extent_crc_pack()
|
|
general protection fault in lock_vma_under_rcu
mm
|
2 |
syz |
done |
|
3 |
456d |
456d
|
28/29 |
349d |
f35ab95ca0af
mm: replace vm_lock and detached flag with a reference count
|
|
KMSAN: uninit-value in bch2_trans_start_alloc_update
fs
|
7 |
C |
|
|
1051 |
425d |
547d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_iter_init (2)
fs
|
7 |
C |
|
|
309 |
425d |
556d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_inode_v3_validate
fs
|
7 |
C |
|
|
5866 |
425d |
554d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_get
fs
|
7 |
C |
|
|
18 |
435d |
542d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_node_check_topology
fs
|
7 |
C |
|
|
19 |
451d |
562d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_dev_freespace_init
fs
|
7 |
C |
|
|
432 |
425d |
538d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_checksum_update (2)
fs
|
19 |
C |
done |
|
7 |
432d |
528d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bucket_alloc_early
fs
|
7 |
C |
|
|
219 |
428d |
566d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_btree_ptr_v2_validate
fs
|
7 |
C |
|
|
55 |
425d |
476d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_xattr_validate
fs
|
7 |
C |
|
|
22 |
448d |
530d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_alloc_v4_validate (2)
fs
|
7 |
C |
|
|
514 |
428d |
556d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in __bch2_bkey_cmp_left_packed
fs
|
7 |
syz |
|
|
2 |
491d |
518d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in rw_aux_tree_set (2)
fs
|
7 |
C |
|
|
2356 |
426d |
550d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
general protection fault in sys_mremap
mm
|
2 |
C |
|
|
35 |
417d |
420d
|
28/29 |
349d |
36eed5400805
mm/mremap: do not set vrm->vma NULL immediately prior to checking it
|
|
KMSAN: uninit-value in bch2_bkey_val_validate
fs
|
7 |
C |
|
|
17 |
431d |
543d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bkey_ptrs_validate
fs
|
7 |
C |
|
|
15 |
430d |
542d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bucket_alloc_trans
fs
|
7 |
C |
|
|
15 |
402d |
534d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined (2)
fs
|
7 |
C |
|
|
309 |
426d |
545d
|
28/29 |
349d |
9c3a2c9b471a
bcachefs: Disable asm memcpys when kmsan enabled
|
|
kernel BUG in bch2_fs_initialize
fs
|
-1 |
syz |
done |
|
1004 |
405d |
410d
|
28/29 |
350d |
806776ad9c20
bcachefs: Add missing error handling
|
|
possible deadlock in __bpf_ringbuf_reserve
bpf
|
4 |
C |
error |
|
2490 |
400d |
805d
|
28/29 |
350d |
a650d38915c1
bpf: Convert ringbuf map to rqspinlock
|
|
WARNING in dev_xdp_install
bpf
|
-1 |
C |
|
|
245 |
418d |
424d
|
28/29 |
350d |
d996e412b2df
bpf: add missing ops lock around dev_xdp_attach_link
|
|
WARNING: locking bug in kernfs_path_from_node
kernfs
|
4 |
C |
done |
|
1037 |
480d |
571d
|
28/29 |
350d |
741c10b096bc
kernfs: Use RCU to access kernfs_node::name.
|
|
WARNING in __free_event
perf
|
-1 |
C |
done |
|
73 |
400d |
418d
|
28/29 |
350d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
0ba3a4ab76fd
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
|
|
KMSAN: uninit-value in isofs_readdir
isofs
|
7 |
C |
|
|
2 |
475d |
472d
|
28/29 |
350d |
81a82e8f3388
isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
|
|
KMSAN: uninit-value in __request_module (6)
modules
|
7 |
C |
|
|
4 |
467d |
468d
|
28/29 |
350d |
5bef3ac184b5
team: better TEAM_OPTION_TYPE_STRING validation
|
|
WARNING in release_mtd_partition
mtd
|
-1 |
C |
|
|
8 |
360d |
480d
|
28/29 |
350d |
6697dae1e2da
mtd: capture device name setting failure when adding mtd
|
|
KASAN: slab-out-of-bounds Read in isofs_fh_to_parent
isofs
|
17 |
C |
|
|
3 |
422d |
418d
|
28/29 |
350d |
0405d4b63d08
isofs: Prevent the use of too small fid
|
|
possible deadlock in lapbeth_device_event
x25
|
4 |
C |
error |
|
121826 |
419d |
444d
|
28/29 |
350d |
7220e8f4d4ee
net: lapbether: use netdev_lockdep_set_classes() helper
|
|
KMSAN: uninit-value in ___bpf_prog_run (4)
bpf
|
7 |
C |
|
|
322 |
468d |
882d
|
28/29 |
350d |
4c2d14c40a68
ppp: Fix KMSAN uninit-value warning with bpf
|
|
possible deadlock in get_partial_node (2)
kernel
|
4 |
C |
done |
done |
4 |
442d |
464d
|
28/29 |
350d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
WARNING in usbnet_start_xmit/usb_submit_urb (2)
usb
|
-1 |
C |
error |
|
10 |
462d |
800d
|
28/29 |
350d |
1cf9631d836b
usbnet: gl620a: fix endpoint checking in genelink_bind()
|
|
general protection fault in ir_raw_event_store_with_filter
usb
media
|
22 |
C |
error |
|
879 |
471d |
2267d
|
28/29 |
350d |
f656cfbc7a29
media: streamzap: fix race between device disconnection and urb callback
|
|
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key (2)
hfs
|
21 |
C |
inconclusive |
|
2056 |
435d |
600d
|
28/29 |
350d |
bb5e07cb9277
hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
|
|
WARNING in tls_strp_msg_load
net
|
-1 |
C |
done |
|
4 |
432d |
424d
|
28/29 |
350d |
5071a1e606b3
net: tls: explicitly disallow disconnect
|
|
KASAN: slab-use-after-free Read in key_put
lsm
keyrings
|
19 |
C |
done |
|
9 |
457d |
554d
|
28/29 |
350d |
75845c6c1a64
keys: Fix UAF in key_put()
|
|
kernel BUG in qlist_free_all
net
fs
|
-1 |
C |
done |
done |
12 |
402d |
550d
|
28/29 |
350d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
WARNING in __linkwatch_sync_dev
net
|
-1 |
C |
done |
|
1038 |
350d |
414d
|
28/29 |
350d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
f7a11cba0ed7
bonding: hold ops lock around get_link
|
|
WARNING in free_ruleset
lsm
|
-1 |
C |
|
|
76 |
397d |
423d
|
28/29 |
350d |
fe81536af397
landlock: Remove incorrect warning
|
|
WARNING: refcount bug in io_send_zc_cleanup (2)
io-uring
|
13 |
C |
done |
|
6 |
431d |
431d
|
28/29 |
350d |
67c007d6c12d
io_uring/net: fix sendzc double notif flush
|
|
WARNING in f2fs_unlink
f2fs
|
-1 |
C |
done |
|
215 |
425d |
550d
|
28/29 |
350d |
81edb983b3f5
f2fs: add check for deleted inode
|
|
WARNING in bch2_bkey_pick_read_device
fs
|
-1 |
C |
error |
|
89 |
421d |
424d
|
28/29 |
350d |
3c72d3eea97b
bcachefs: Fix WARN() in bch2_bkey_pick_read_device()
|
|
WARNING: suspicious RCU usage in kernfs_node_dentry
kernfs
|
4 |
C |
done |
|
476 |
454d |
463d
|
28/29 |
350d |
6ef5b6fae304
kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
|
|
INFO: trying to register non-static key in cfg80211_dev_free
wireless
|
-1 |
C |
|
|
304 |
415d |
435d
|
28/29 |
350d |
fc88dee89d7b
wifi: cfg80211: init wiphy_work before allocating rfkill fails
|
|
KMSAN: uninit-value in validate_set (2)
openvswitch
|
7 |
C |
|
|
6 |
414d |
410d
|
28/29 |
350d |
65d91192aa66
net: openvswitch: fix nested key length validation in the set() action
|
|
WARNING in cleanup_net (4)
net
|
-1 |
C |
error |
|
309 |
441d |
460d
|
28/29 |
350d |
5c70eb5c593d
net: better track kernel sockets lifetime
|
|
general protection fault in bioset_exit (2)
bcachefs
|
10 |
C |
done |
done |
23 |
439d |
478d
|
28/29 |
350d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
INFO: task hung in io_wq_put_and_exit (4)
io-uring
|
1 |
C |
unreliable |
|
86 |
355d |
584d
|
28/29 |
350d |
cf960726eb65
io_uring/kbuf: reject zero sized provided buffers
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2)
bluetooth
|
19 |
C |
done |
|
132 |
355d |
740d
|
28/29 |
350d |
5df5dafc171b
Bluetooth: hci_uart: Fix another race during initialization
|
|
WARNING in net_free (4)
net
|
-1 |
syz |
|
|
4 |
477d |
548d
|
28/29 |
350d |
5c70eb5c593d
net: better track kernel sockets lifetime
|
|
WARNING in ntfs_extend_initialized_size
ntfs3
|
-1 |
C |
inconclusive |
inconclusive |
4 |
554d |
598d
|
28/29 |
350d |
ff3559264458
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
|
|
general protection fault in ethnl_default_dumpit
net
|
2 |
C |
error |
|
321 |
445d |
446d
|
28/29 |
350d |
f36a9285828c
net: ethtool: use correct device pointer in ethnl_default_dump_one()
|
|
WARNING: bad unlock balance in do_setlink
net
|
4 |
C |
done |
|
401 |
408d |
415d
|
28/29 |
350d |
445e99bdf68d
rtnetlink: Fix bad unlock balance in do_setlink().
|
|
UBSAN: array-index-out-of-bounds in bpf_prog_select_runtime
bpf
|
15 |
C |
done |
|
1160 |
422d |
803d
|
28/29 |
350d |
6ebc5030e0c5
bpf: Fix array bounds error with may_goto
|
|
KASAN: slab-use-after-free Read in bchfs_read
fs
|
19 |
C |
done |
|
34 |
409d |
417d
|
28/29 |
350d |
34b47e3d73a2
bcachefs: Fix UAF in bchfs_read()
|
|
general protection fault in rtnl_create_link
net
|
8 |
C |
done |
|
49 |
398d |
408d
|
28/29 |
350d |
4798cfa2097f
net: don't try to ops lock uninitialized devs
|
|
general protection fault in kernel_sock_shutdown (3)
net
|
2 |
syz |
|
|
5 |
423d |
422d
|
28/29 |
350d |
10206302af85
sctp: add mutual exclusion in proc_sctp_do_udp_port()
|
|
KASAN: slab-out-of-bounds Read in atomic_ptr_type_ok
bpf
|
17 |
C |
done |
|
4 |
443d |
439d
|
28/29 |
350d |
9aa8fe29f624
Merge branch 'bpf-fix-oob-read-and-add-tests-for-load-acquire-store-release'
c03bb2fa327e
bpf: Fix out-of-bounds read in check_atomic_load/store()
|
|
kernel BUG in bch2_run_recovery_pass (2)
fs
|
-1 |
C |
|
|
70 |
418d |
487d
|
28/29 |
350d |
962322475bb5
bcachefs: Handle backpointers with unknown data types
|
|
general protection fault in relocate_file_extent_cluster
btrfs
|
2 |
C |
|
|
24 |
400d |
416d
|
28/29 |
350d |
50fecb8cf069
btrfs: fix invalid inode pointer after failure to create reloc inode
|
|
WARNING in restore_regulatory_settings (3)
wireless
|
-1 |
C |
inconclusive |
error |
2 |
512d |
596d
|
28/29 |
350d |
59b348be7597
wifi: cfg80211: regulatory: improve invalid hints checking
|
|
KMSAN: uninit-value in __alloc_frozen_pages_noprof
mm
|
7 |
C |
|
|
6 |
446d |
459d
|
28/29 |
350d |
8fe9ed44dc29
mm/page_alloc: fix uninitialized variable
|
|
WARNING in cxacru_cm/usb_submit_urb (2)
usb
|
-1 |
C |
|
|
8 |
464d |
474d
|
28/29 |
350d |
c90aad369899
usb: atm: cxacru: fix a flaw in existing endpoint checks
|
|
BUG: sleeping function called from invalid context in bch2_printbuf_make_room (2)
fs
|
5 |
C |
error |
|
59 |
418d |
420d
|
28/29 |
350d |
b2ffadcc7f8f
bcachefs: Fix scheduling while atomic from logging changes
|
|
KMSAN: uninit-value in diFree
jfs
|
7 |
C |
|
|
2 |
461d |
461d
|
28/29 |
350d |
9629d7d66c62
jfs: Fix uninit-value access of imap allocated in the diMount() function
|
|
possible deadlock in pcpu_alloc_noprof
block
|
4 |
C |
|
|
257 |
351d |
604d
|
28/29 |
350d |
677bdb7346b6
bcachefs: Fix deadlock
|
|
KASAN: slab-out-of-bounds Read in ea_get (4)
jfs
|
17 |
C |
|
|
4 |
445d |
469d
|
28/29 |
350d |
fdf480da5837
jfs: fix slab-out-of-bounds read in ea_get()
|
|
INFO: task hung in __blockdev_direct_IO (4)
exfat
|
1 |
C |
done |
|
3 |
373d |
437d
|
28/29 |
350d |
b0522303f672
exfat: fix the infinite loop in exfat_find_last_cluster()
|
|
possible deadlock in gtp_encap_enable_socket
net
|
4 |
C |
error |
done |
24 |
410d |
610d
|
28/29 |
350d |
752e2217d789
smc: Fix lockdep false-positive for IPPROTO_SMC.
|
|
kernel BUG in bch2_btree_node_iter_init
fs
|
-1 |
C |
done |
done |
167 |
374d |
478d
|
28/29 |
350d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
general protection fault in clone_private_mount
overlayfs
|
2 |
C |
done |
|
713 |
471d |
474d
|
28/29 |
350d |
db04662e2f4f
fs: allow detached mounts in clone_private_mount()
|
|
WARNING: refcount bug in ax25_release (3)
hams
|
13 |
C |
done |
|
5256 |
425d |
730d
|
28/29 |
350d |
bca0902e6173
ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
2f6efbabceb6
ax25: Remove broken autobind
|
|
general protection fault in bch2_snapshot_tree_oldest_subvol
fs
|
8 |
C |
done |
|
14 |
395d |
418d
|
28/29 |
350d |
aa6a591f0fd7
bcachefs: Fix null ptr deref in bch2_snapshot_tree_oldest_subvol()
71f8e806a5e4
bcachefs: Stricter checks on "key allowed in this btree"
|
|
possible deadlock in queue_stack_map_push_elem
bpf
|
4 |
C |
error |
|
78 |
417d |
769d
|
28/29 |
350d |
2f41503d6476
bpf: Convert queue_stack map to rqspinlock
|
|
KASAN: slab-out-of-bounds Read in validate_bset_keys
fs
|
19 |
C |
|
|
5 |
450d |
449d
|
28/29 |
350d |
3a04334d6282
bcachefs: Fix b->written overflow
|
|
WARNING: suspicious RCU usage in kvm_vcpu_gfn_to_memslot
kvm
|
4 |
C |
|
|
67 |
430d |
488d
|
28/29 |
350d |
3617c0ee7dec
KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR
|
|
BUG: soft lockup in rose_loopback_timer
hams
|
1 |
C |
|
|
1 |
481d |
477d
|
28/29 |
350d |
a1300691aed9
net: rose: lock the socket in rose_bind()
|
|
general protection fault in vxlan_vnigroup_uninit
net
|
2 |
C |
|
|
9 |
468d |
471d
|
28/29 |
350d |
5805402dcc56
vxlan: check vxlan_vnigroup_init() return value
|
|
possible deadlock in __queue_map_get
bpf
|
4 |
C |
error |
|
180 |
415d |
774d
|
28/29 |
350d |
2f41503d6476
bpf: Convert queue_stack map to rqspinlock
|
|
kernel BUG in new_curseg (2)
f2fs
|
-1 |
C |
done |
|
24 |
426d |
529d
|
28/29 |
350d |
48ea8b200414
f2fs: fix to avoid panic once fallocation fails for pinfile
|
|
general protection fault in add_wait_queue
kvm
net
virt
|
10 |
C |
done |
|
676 |
464d |
478d
|
28/29 |
350d |
78dafe1cf3af
vsock: Orphan socket after transport release
|
|
kernel BUG in write_all_supers
btrfs
|
-1 |
C |
|
|
20 |
406d |
425d
|
28/29 |
350d |
65f2a3b2323e
btrfs: remove folio order ASSERT()s in super block writeback path
|
|
KMSAN: uninit-value in bch2_write_inode
fs
|
7 |
C |
|
|
4476 |
438d |
486d
|
28/29 |
350d |
58517f4df842
bcachefs: Initialize from_inode members for bch_io_opts
|
|
BUG: sleeping function called from invalid context in ovl_cache_entry_new
ntfs3
afs
|
5 |
C |
done |
|
52 |
393d |
425d
|
28/29 |
350d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
WARNING in drv_remove_interface
wireless
|
-1 |
C |
done |
inconclusive |
29 |
456d |
2052d
|
28/29 |
350d |
49f27f29446a
wifi: nl80211: reject cooked mode if it is set along with other flags
|
|
kernel BUG in skbprio_enqueue
net
|
-1 |
C |
|
|
7 |
425d |
426d
|
28/29 |
350d |
ce8fe975fd99
net_sched: skbprio: Remove overly strict queue assertions
|
|
general protection fault in afs_atcell_get_link
afs
|
2 |
C |
|
|
25 |
432d |
435d
|
28/29 |
350d |
0307d16f3610
afs: Fix afs_atcell_get_link() to check if ws_cell is unset first
|
|
WARNING in call_s_stream
media
|
-1 |
C |
|
|
83 |
431d |
790d
|
28/29 |
350d |
36cef585e2a3
media: vimc: skip .s_stream() for stopped entities
|
|
KMSAN: uninit-value in __ipv6_addr_type
net
|
7 |
C |
|
|
3 |
460d |
460d
|
28/29 |
350d |
27843ce6ba3d
ipvlan: ensure network headers are in skb linear part
|
|
BUG: sleeping function called from invalid context in crypto_put_default_null_skcipher
crypto
|
5 |
C |
error |
|
5 |
512d |
512d
|
28/29 |
350d |
dcc47a028c24
crypto: null - Use spin lock instead of mutex
5b0af621c3f6
net: restrict SO_REUSEPORT to inet sockets
|
|
KASAN: use-after-free Read in __ocfs2_find_path
ocfs2
|
19 |
C |
inconclusive |
|
65 |
435d |
594d
|
28/29 |
350d |
a406aff8c051
ocfs2: validate l_tree_depth to avoid out-of-bounds access
|
|
kernel BUG in bch2_stripe_validate
fs
|
-1 |
C |
done |
done |
6 |
428d |
513d
|
28/29 |
350d |
71f8e806a5e4
bcachefs: Stricter checks on "key allowed in this btree"
|
|
kernel BUG in __journal_res_get (2)
fs
|
-1 |
C |
error |
done |
1527 |
351d |
559d
|
28/29 |
350d |
4c0d2c67ac6d
bcachefs: Fix early startup error path
|
|
KASAN: slab-use-after-free Read in steam_input_open
input
usb
|
19 |
C |
done |
|
5 |
445d |
458d
|
28/29 |
350d |
e53fc232a65f
HID: hid-steam: Fix use-after-free when detaching device
|
|
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work (2)
netfilter
|
19 |
syz |
|
|
1 |
451d |
450d
|
28/29 |
350d |
fb8286562ecf
netfilter: nf_tables: make destruction work queue pernet
|
|
KMSAN: uninit-value in ppp_sync_send (2)
ppp
|
7 |
C |
|
|
3 |
457d |
467d
|
28/29 |
350d |
aabc6596ffb3
net: ppp: Add bound checking for skb data on ppp_sync_txmung
|
|
BUG: unable to handle kernel paging request in txBeginAnon
jfs
|
11 |
C |
inconclusive |
|
43 |
443d |
732d
|
28/29 |
350d |
b5799dd77054
jfs: add check read-only before truncation in jfs_truncate_nolock()
0176e69743ec
jfs: add check read-only before txBeginAnon() call
|
|
KASAN: slab-use-after-free Read in afs_dynroot_readdir
afs
|
19 |
C |
|
|
2 |
408d |
422d
|
28/29 |
350d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
WARNING in fsnotify_file_area_perm
xfs
|
-1 |
C |
|
|
9 |
438d |
475d
|
28/29 |
350d |
955fbe0ef19d
Revert "fsnotify: generate pre-content permission event on page fault"
|
|
possible deadlock in diFree (2)
jfs
|
4 |
C |
|
|
40 |
426d |
551d
|
28/29 |
350d |
b61e69bb1c04
jfs: Prevent copying of nlink with value 0 from disk inode
|
|
KASAN: slab-use-after-free Read in software_node_notify_remove
acpi
|
19 |
C |
done |
|
28 |
393d |
415d
|
28/29 |
350d |
bc2c46426f2d
software node: Prevent link creation failure from causing kobj reference count imbalance
|
|
kernel BUG in clear_inode (2)
jfs
|
-1 |
C |
inconclusive |
|
986 |
350d |
575d
|
28/29 |
350d |
8c3f9a70d2d4
jfs: reject on-disk inodes of an unsupported type
|
|
general protection fault in p9_client_walk
v9fs
|
2 |
C |
|
|
3 |
427d |
443d
|
28/29 |
350d |
3f61ac7c65bd
fs/9p: fix NULL pointer dereference on mkdir
|
|
possible deadlock in ipv6_sock_ac_close (4)
net
|
4 |
C |
error |
|
5 |
417d |
454d
|
28/29 |
350d |
752e2217d789
smc: Fix lockdep false-positive for IPPROTO_SMC.
|
|
WARNING in __ceph_open_session
ceph
|
-1 |
C |
done |
|
321 |
413d |
414d
|
28/29 |
350d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst (2)
jfs
|
19 |
C |
error |
|
119 |
393d |
522d
|
28/29 |
350d |
a8dfb2168906
jfs: add index corruption check to DT_GETPAGE()
|
|
kernel BUG in filemap_fault
sound
|
-1 |
C |
done |
|
138 |
355d |
453d
|
28/29 |
350d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
|
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
19 |
C |
done |
|
34 |
490d |
821d
|
28/29 |
350d |
b4f82f9ed43a
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
|
|
BUG: unable to handle kernel paging request in efivarfs_pm_notify
fs
efi
|
8 |
C |
|
|
1037 |
447d |
458d
|
28/29 |
350d |
cb6ae457bc6a
efivarfs: Defer PM notifier registration until .fill_super
|
|
WARNING: bad unlock balance in __rtnl_unlock
net
|
4 |
C |
done |
|
18 |
447d |
448d
|
28/29 |
350d |
f130a0cc1b4f
inet: fix lwtunnel_valid_encap_type() lock imbalance
|
|
BUG: unable to handle kernel NULL pointer dereference in __generic_file_write_iter (2)
ntfs3
|
10 |
C |
|
|
8 |
480d |
513d
|
28/29 |
350d |
285cec318bf5
fs/ntfs3: Keep write operations atomic
|
|
possible deadlock in lock_system_sleep
pm
|
4 |
C |
|
|
3 |
461d |
460d
|
28/29 |
350d |
52323ed1444e
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
|
|
WARNING in file_seek_cur_needs_f_lock
overlayfs
ext4
|
-1 |
C |
done |
|
10 |
365d |
415d
|
28/29 |
350d |
10a77965760c
batman-adv: Fix double-hold of meshif when getting enabled
|
|
BUG: sleeping function called from invalid context in __alloc_frozen_pages_noprof
afs
|
5 |
C |
done |
|
61 |
407d |
425d
|
28/29 |
350d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
possible deadlock in elv_iosched_store
block
|
4 |
C |
|
|
56 |
365d |
424d
|
28/29 |
350d |
01b91bf14f6d
block: don't grab elevator lock during queue initialization
|
|
possible deadlock in efivarfs_actor
mm
|
4 |
C |
|
|
8 |
427d |
444d
|
28/29 |
350d |
dec1277875a5
efivarfs: use I_MUTEX_CHILD nested lock to traverse variables on resume
|
|
INFO: task hung in _free_event
perf
|
1 |
C |
|
|
2 |
532d |
555d
|
28/29 |
350d |
56799bc03565
perf: Fix hang while freeing sigtrap event
|
|
divide error in dbAllocAG
jfs
|
2 |
C |
done |
|
172 |
425d |
540d
|
28/29 |
350d |
ddf2846f22e8
jfs: add sanity check for agwidth in dbMount
|
|
WARNING in vmx_handle_exit (2)
kvm-x86
|
-1 |
C |
|
|
3 |
451d |
531d
|
28/29 |
350d |
64c947a1cf35
KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
|
|
BUG: unable to handle kernel paging request in vma_merge_existing_range
mm
|
8 |
C |
done |
|
8 |
405d |
432d
|
28/29 |
350d |
41e6ddcaa0f1
mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
|
|
WARNING in ucan_probe
can
|
-1 |
C |
done |
|
143 |
432d |
463d
|
28/29 |
350d |
1d22a122ffb1
can: ucan: fix out of bound read in strscpy() source
|
|
KASAN: stack-out-of-bounds Read in usb_check_int_endpoints
usb
|
17 |
C |
|
|
61 |
422d |
485d
|
28/29 |
350d |
0b43d98ff29b
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
|
|
WARNING in remove_proc_entry (7)
nfs
|
-1 |
syz |
|
|
682 |
351d |
475d
|
28/29 |
350d |
930b64ca0c51
nfsd: don't ignore the return code of svc_proc_register()
|
|
BUG: bad usercopy in vfs_readlink
ext4
|
-1 |
C |
done |
|
5 |
447d |
477d
|
28/29 |
350d |
5f920d5d6083
ext4: verify fast symlink length
|
|
BUG: corrupted list in hci_chan_del (2)
bluetooth
|
19 |
C |
done |
|
502 |
471d |
474d
|
28/29 |
350d |
ab4eedb790ca
Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
|
|
BUG: sleeping function called from invalid context in folio_mc_copy
mm
|
5 |
C |
done |
|
5415 |
393d |
425d
|
28/29 |
350d |
2d900efff915
mm/migrate: fix sleep in atomic for large folios and buffer heads
|
|
WARNING in to_nfit_bus_uuid
acpi
nvdimm
|
-1 |
C |
|
|
4 |
455d |
619d
|
28/29 |
350d |
2ff0e408db36
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
|
|
kernel BUG in __bch2_trans_commit
fs
|
-1 |
C |
unreliable |
|
11858 |
558d |
583d
|
28/29 |
381d |
8b22abb4c840
bcachefs: -o norecovery now bails out of recovery earlier
|
|
WARNING in kvm_timer_update_irq
kvmarm
|
-1 |
C |
|
|
15 |
550d |
582d
|
28/29 |
383d |
38d7aacca092
KVM: arm64: Get rid of userspace_irqchip_in_use
|
|
WARNING in kvm_handle_mmio_return
kvmarm
|
-1 |
C |
|
|
5 |
551d |
558d
|
28/29 |
383d |
e735a5da6442
KVM: arm64: Don't retire aborted MMIO instruction
|
|
possible deadlock in bch2_alloc_sectors_start_trans
fs
|
4 |
C |
inconclusive |
|
64 |
539d |
561d
|
28/29 |
383d |
2cd85fea49d8
bcachefs: Don't recurse in check_discard_freespace_key
|
|
KASAN: vmalloc-out-of-bounds Write in vrealloc_noprof
bpf
|
21 |
C |
done |
|
440 |
385d |
548d
|
28/29 |
384d |
d699440f58ce
mm: fix vrealloc()'s KASAN poisoning logic
|
|
kernel BUG in bch2_get_scanned_nodes
fs
|
-1 |
C |
done |
|
101 |
484d |
545d
|
28/29 |
384d |
a6f4794fcd86
bcachefs: struct bkey_validate_context
|
|
WARNING: lock held when returning to user space in rtnl_link_ops_get
net
|
4 |
C |
done |
|
9 |
548d |
555d
|
28/29 |
384d |
9b234a97b10c
rtnetlink: fix rtnl_dump_ifinfo() error path
|
|
WARNING in udf_rmdir (2)
udf
|
-1 |
C |
inconclusive |
done |
2 |
545d |
545d
|
28/29 |
384d |
c5566903af56
udf: Skip parent dir link count update if corrupted
|
|
WARNING: lock held when returning to user space in nsim_pp_hold_write
net
|
4 |
C |
|
|
4 |
523d |
528d
|
28/29 |
384d |
b9b8301d369b
net: netdevsim: fix nsim_pp_hold_write()
|
|
general protection fault in vsock_stream_has_data
net
virt
|
2 |
C |
done |
done |
6 |
501d |
497d
|
28/29 |
385d |
df137da9d6d1
vsock/virtio: cancel close work in the destructor
|
|
possible deadlock in zswap_store
mm
|
4 |
C |
inconclusive |
|
24203 |
456d |
506d
|
28/29 |
385d |
4dff389c9f1d
Revert "mm: zswap: fix race between [de]compression and CPU hotunplug"
|
|
kernel BUG in bch2_evacuate_bucket
fs
|
-1 |
C |
done |
|
4 |
548d |
547d
|
28/29 |
385d |
9e92d6e9efb0
bcachefs: Kill bch2_get_next_backpointer()
|
|
KASAN: slab-use-after-free Read in binder_release_work
kernel
|
19 |
C |
done |
done |
2151 |
531d |
601d
|
28/29 |
385d |
7e20434cbca8
binder: fix freeze UAF in binder_release_work()
|
|
KASAN: use-after-free Read in ring_buffer_map
trace
|
19 |
C |
|
|
15 |
522d |
527d
|
28/29 |
385d |
c58a812c8e49
ring-buffer: Fix overflow in __rb_map_vma
|
|
WARNING in io_pin_pages
io-uring
|
-1 |
C |
done |
|
14 |
553d |
551d
|
28/29 |
385d |
0c0a4eae26ac
io_uring: check for overflows in io_pin_pages
|
|
WARNING in nsim_udp_tunnel_set_port
net
|
-1 |
C |
|
|
15 |
482d |
496d
|
28/29 |
385d |
50bf398e1cea
net: netdevsim: try to close UDP port harness races
|
|
KMSAN: uninit-value in ocfs2_file_read_iter
ocfs2
|
7 |
C |
|
|
3 |
579d |
576d
|
28/29 |
385d |
adc77b19f62d
ocfs2: fix uninitialized value in ocfs2_file_read_iter()
|
|
KASAN: slab-use-after-free Read in sco_sock_connect
bluetooth
|
19 |
syz |
|
|
1 |
549d |
547d
|
28/29 |
385d |
ed9588554943
Bluetooth: SCO: remove the redundant sco_conn_put
|
|
WARNING in nft_socket_init
netfilter
|
-1 |
C |
done |
|
14 |
480d |
548d
|
28/29 |
385d |
b7529880cb96
netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
|
|
BUG: unable to handle kernel paging request in try_to_wake_up (2)
net
|
19 |
C |
error |
|
31 |
461d |
547d
|
28/29 |
385d |
f10bef73fb35
btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
|
|
VFS: Busy inodes after unmount (use-after-free)
fs
|
2 |
C |
error |
|
55684 |
386d |
1218d
|
28/29 |
385d |
965b5dd1894f
ocfs2: free inode when ocfs2_get_init_inode() fails
|
|
general protection fault in exfat_init_ext_entry
exfat
|
2 |
C |
done |
|
43 |
507d |
541d
|
28/29 |
385d |
70465acbb0ce
exfat: fix exfat_find_empty_entry() not returning error on failure
|
|
general protection fault in qt2_read_bulk_callback
usb
|
2 |
C |
error |
|
5 |
505d |
501d
|
28/29 |
385d |
575a5adf48b0
USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
|
|
general protection fault in put_page (4)
net
|
2 |
C |
done |
|
170 |
508d |
525d
|
28/29 |
385d |
cbb26f7d8451
mptcp: fix TCP options overflow.
|
|
WARNING in nilfs_rmdir
nilfs
|
-1 |
C |
error |
|
295 |
505d |
552d
|
28/29 |
385d |
901ce9705fbb
nilfs2: prevent use of deleted inode
|
|
general protection fault in account_kernel_stack (3)
mm
|
2 |
C |
|
|
7 |
510d |
525d
|
28/29 |
385d |
4db3d750ac7e
nvmet: Don't overflow subsysnqn
|
|
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
5 |
C |
done |
|
380 |
537d |
779d
|
28/29 |
385d |
4d94f0555827
Bluetooth: hci_core: Fix sleeping function called from invalid context
|
|
WARNING in nsim_dev_health_break_write
net
|
-1 |
C |
|
|
10 |
524d |
529d
|
28/29 |
385d |
ee76746387f6
netdevsim: prevent bad user input in nsim_dev_health_break_write()
|
|
possible deadlock in ieee80211_remove_interfaces
wireless
|
4 |
C |
error |
|
326122 |
444d |
628d
|
28/29 |
385d |
e759e1e4a4bd
net: revert RTNL changes in unregister_netdevice_many_notify()
|
|
WARNING in netlink_ack_tlv_fill
net
|
-1 |
C |
error |
|
3 |
563d |
560d
|
28/29 |
385d |
3bf39fa849ab
netlink: fix false positive warning in extack during dumps
|
|
KASAN: use-after-free Read in nilfs_find_entry
nilfs
|
19 |
C |
inconclusive |
|
8 |
540d |
561d
|
28/29 |
385d |
985ebec4ab0a
nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
|
|
kernel BUG in __pskb_pull_tail
tipc
|
-1 |
C |
done |
|
13 |
524d |
530d
|
28/29 |
385d |
429fde2d81bc
net: tun: fix tun_napi_alloc_frags()
|
|
KMSAN: uninit-value in nsim_get_ringparam
net
|
7 |
C |
|
|
59 |
480d |
488d
|
28/29 |
385d |
6db9d3a536cd
netdevsim: don't assume core pre-populates HDS params on GET
|
|
WARNING: lock held when returning to user space in afs_proc_addr_prefs_write
afs
|
4 |
C |
|
|
5 |
509d |
517d
|
28/29 |
385d |
17a4fde81d3a
afs: Fix merge preference rule failure condition
|
|
WARNING in lock_list_lru_of_memcg
mm
|
-1 |
syz |
|
|
2 |
466d |
529d
|
28/29 |
385d |
62e72d2cf702
mm, madvise: fix potential workingset node list_lru leaks
|
|
kernel BUG in bch2_btree_path_traverse_one
fs
|
-1 |
C |
done |
|
9 |
533d |
566d
|
28/29 |
385d |
f11ca2ab18e3
bcachefs: Guard against backpointers to unknown btrees
|
|
general protection fault in ocfs2_prepare_dir_for_insert
ocfs2
|
8 |
C |
inconclusive |
|
1072 |
396d |
645d
|
28/29 |
385d |
b0fce54b8c0d
ocfs2: check dir i_size in ocfs2_find_entry
|
|
possible deadlock in xfs_dquot_detach_buf
xfs
|
4 |
C |
done |
|
6864 |
477d |
525d
|
28/29 |
385d |
1aacd3fac248
xfs: release the dquot buf outside of qli_lock
|
|
kernel BUG in bch2_journal_pin_set
fs
|
-1 |
C |
done |
|
11 |
494d |
547d
|
28/29 |
385d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
WARNING in get_mode_access
lsm
|
-1 |
C |
inconclusive |
|
12 |
500d |
557d
|
28/29 |
385d |
49440290a093
landlock: Handle weird files
|
|
general protection fault in pick_link
ntfs3
|
2 |
C |
|
|
5 |
408d |
558d
|
28/29 |
385d |
2afd4d267e6d
fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
|
|
KASAN: vmalloc-out-of-bounds Read in acpi_nfit_ctl (2)
acpi
nvdimm
|
17 |
C |
|
|
23 |
526d |
567d
|
28/29 |
385d |
265e98f72bac
acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
|
|
WARNING in bch2_journal_flush_seq_async
fs
|
-1 |
C |
|
|
27 |
491d |
616d
|
28/29 |
385d |
4746ee182a76
bcachefs: Check for inode journal seq in the future
|
|
general protection fault in proc_scheduler
fs
|
2 |
syz |
|
|
6 |
504d |
509d
|
28/29 |
385d |
d38e26e36206
mptcp: sysctl: sched: avoid using current->nsproxy
|
|
UBSAN: shift-out-of-bounds in iova_bitmap_alloc
iommu
|
-1 |
C |
done |
|
6 |
494d |
500d
|
28/29 |
385d |
e24c15510592
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
|
|
KASAN: slab-out-of-bounds Read in selinux_ip_output
selinux
|
19 |
C |
done |
|
1490 |
536d |
546d
|
28/29 |
385d |
eedcad2f2a37
selinux: use sk_to_full_sk() in selinux_ip_output()
|
|
KMSAN: uninit-value in ima_add_template_entry (2)
exfat
|
7 |
C |
|
|
123 |
391d |
602d
|
28/29 |
385d |
98e2fb26d1a9
exfat: fix the new buffer was not zeroed before writing
|
|
general protection fault in modify_prefix_route
net
|
2 |
C |
done |
|
11 |
546d |
546d
|
28/29 |
385d |
a747e02430df
ipv6: avoid possible NULL deref in modify_prefix_route()
|
|
general protection fault in do_migrate_pages
mm
|
2 |
C |
|
|
2 |
536d |
553d
|
28/29 |
385d |
091c1dd2d4df
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
|
|
kernel BUG in bch2_rechecksum_bio
fs
|
-1 |
C |
|
|
4 |
554d |
564d
|
28/29 |
385d |
9bdb3b73e732
bcachefs: Check for extent crc uncompressed/compressed size mismatch
|
|
WARNING in iguanair_probe/usb_submit_urb (2)
media
|
-1 |
C |
done |
|
18 |
486d |
607d
|
28/29 |
385d |
b98d5000c505
media: rc: iguanair: handle timeouts
|
|
kernel BUG in __bch2_journal_pin_put
fs
|
-1 |
C |
|
|
11 |
506d |
548d
|
28/29 |
385d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
WARNING: refcount bug in sk_skb_reason_drop
can
|
13 |
C |
done |
|
8107 |
533d |
600d
|
28/29 |
385d |
a8c695005bfe
can: j1939: j1939_session_new(): fix skb reference counting
|
|
KMSAN: uninit-value in inode_go_dump (5)
gfs2
|
7 |
C |
|
|
6 |
548d |
602d
|
28/29 |
385d |
f9417fcfca3c
KMSAN: uninit-value in inode_go_dump (5)
|
|
possible deadlock in xfs_icwalk_ag (2)
xfs
|
4 |
C |
|
|
1066 |
426d |
770d
|
28/29 |
385d |
45f69d091bab
xfs: eliminate lockdep false positives in xfs_attr_shortform_list
|
|
kernel BUG in const_folio_flags (2)
fs
mm
|
-1 |
syz |
|
|
3 |
490d |
550d
|
28/29 |
385d |
3203b3ab0fcf
mm/filemap: don't call folio_test_locked() without a reference in next_uptodate_folio()
|
|
KASAN: slab-use-after-free Read in __mmap_region
mm
|
19 |
C |
|
|
7 |
499d |
536d
|
28/29 |
385d |
42c4e4b20d9c
mm: correctly reference merged VMA
|
|
general protection fault in bpf_prog_array_delete_safe
bpf
|
2 |
C |
done |
|
5 |
534d |
536d
|
28/29 |
385d |
978c4486cca5
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
|
|
INFO: task hung in lock_sock_nested (5)
mptcp
tipc
|
1 |
C |
done |
|
43 |
395d |
517d
|
28/29 |
385d |
06cc8786516f
tls: skip setting sk_write_space on rekey
|
|
UBSAN: array-index-out-of-bounds in read_inline_xattr
f2fs
|
15 |
C |
done |
|
25 |
482d |
539d
|
28/29 |
385d |
5c1768b67250
f2fs: fix to do sanity check correctly on i_inline_xattr_size
|
|
WARNING in __dev_queue_xmit (5)
net
|
-1 |
C |
|
|
41 |
527d |
525d
|
28/29 |
385d |
5eb70dbebf32
netdev-genl: avoid empty messages in queue dump
|
|
WARNING in free_netdev (2)
net
|
-1 |
syz |
|
|
259 |
389d |
494d
|
28/29 |
385d |
bff406bc0424
net: destroy dev->lock later in free_netdev()
|
|
possible deadlock in f2fs_evict_inode
f2fs
|
4 |
syz |
|
|
2 |
599d |
596d
|
28/29 |
385d |
f10a890308a7
f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
|
|
WARNING in bitmap_parse_user
trace
|
-1 |
C |
|
|
83 |
507d |
527d
|
28/29 |
385d |
98feccbf32cf
tracing: Prevent bad count for tracing_cpumask_write
|
|
kernel BUG in __bch2_btree_node_write
fs
|
-1 |
C |
|
|
110 |
491d |
601d
|
28/29 |
385d |
75eabea6988e
bcachefs: Fix dup/misordered check in btree node read
|
|
kernel BUG in bch2_btree_node_lock_write
fs
|
-1 |
C |
done |
|
8 |
539d |
551d
|
28/29 |
385d |
f9e0a9be70c8
bcachefs: Issue a transaction restart after commit in repair
|
|
KMSAN: uninit-value in io_recv
io-uring
|
7 |
C |
|
|
31 |
508d |
509d
|
28/29 |
385d |
c6e60a0a68b7
io_uring/net: always initialize kmsg->msg.msg_inq upfront
|
|
BUG: stack guard page was hit in sys_open
mm
v9fs
|
-1 |
C |
|
|
11 |
525d |
562d
|
28/29 |
385d |
4acb665cf4f3
netfs: Work around recursion by abandoning retry if nothing read
|
|
general protection fault in cleanup_bearer
tipc
|
19 |
C |
|
|
13668 |
523d |
538d
|
28/29 |
385d |
b04d86fff66b
tipc: fix NULL deref in cleanup_bearer()
|
|
WARNING in rtl8150_open/usb_submit_urb
usb
|
-1 |
C |
|
|
5 |
478d |
631d
|
28/29 |
385d |
90b7f2961798
net: usb: rtl8150: enable basic endpoint checking
|
|
KMSAN: uninit-value in hsr_forward_skb (2)
net
|
7 |
C |
|
|
22 |
539d |
546d
|
28/29 |
385d |
b9653d19e556
net: hsr: avoid potential out-of-bound access in fill_frame_info()
|
|
kernel BUG in bch2_btree_pos_to_text (2)
fs
|
-1 |
C |
|
|
51 |
493d |
550d
|
28/29 |
385d |
abf23afa36eb
bcachefs: Fix btree node scan when unknown btree IDs are present
|
|
kernel BUG in bch2_bucket_alloc_trans (3)
fs
|
-1 |
C |
error |
|
711 |
491d |
554d
|
28/29 |
385d |
828552ca74a4
bcachefs: Kill bch2_bucket_alloc_new_fs()
|
|
general protection fault in vsscanf (2)
mm
|
2 |
C |
|
|
11 |
521d |
527d
|
28/29 |
385d |
d3ac65d274b3
mm: huge_memory: handle strsep not finding delimiter
|
|
WARNING in iommufd_device_unbind
iommu
|
-1 |
syz |
error |
|
3 |
539d |
551d
|
28/29 |
385d |
d9df72c6acd6
iommu: iommufd: fix WARNING in iommufd_device_unbind
|
|
WARNING in ni_fiemap
ntfs3
|
-1 |
C |
|
|
99 |
534d |
649d
|
28/29 |
385d |
e2705dd3d16d
fs/ntfs3: Fix warning in ni_fiemap
|
|
WARNING in nilfs_btree_propagate (2)
nilfs
|
-1 |
C |
error |
inconclusive |
2 |
546d |
588d
|
28/29 |
385d |
ca76bb226bf4
nilfs2: do not force clear folio if buffer is referenced
|
|
WARNING in bitmap_parselist_user
kernel
|
-1 |
C |
|
|
35 |
506d |
525d
|
28/29 |
385d |
dd2a5b5514ab
mm/util: make memdup_user_nul() similar to memdup_user()
|
|
WARNING in mptcp_pm_nl_set_flags (2)
mptcp
|
-1 |
syz |
done |
|
2 |
502d |
497d
|
28/29 |
385d |
1bb0d1348546
mptcp: pm: only set fullmesh for subflow endp
|
|
kernel BUG in nilfs_delete_entry
nilfs
|
-1 |
C |
done |
|
22 |
494d |
757d
|
28/29 |
385d |
ee70999a988b
nilfs2: handle errors that nilfs_prepare_chunk() may return
|
|
WARNING in thrustmaster_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
25 |
490d |
591d
|
28/29 |
385d |
50420d7c79c3
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
|
|
WARNING in tomoyo_write_control
tomoyo
|
-1 |
C |
|
|
301 |
489d |
527d
|
28/29 |
385d |
3df7546fc03b
tomoyo: don't emit warning in tomoyo_write_control()
|
|
WARNING in handle_policy_update
lsm
|
-1 |
C |
|
|
61 |
506d |
527d
|
28/29 |
385d |
f09ff307c729
safesetid: check size of policy writes
|
|
KASAN: slab-out-of-bounds Read in led_tg_check
netfilter
|
17 |
C |
done |
|
5 |
542d |
552d
|
28/29 |
385d |
04317f4eb2aa
netfilter: x_tables: fix LED ID check in led_tg_check()
|
|
KASAN: slab-use-after-free Read in ocfs2_lock_global_qf
ocfs2
|
19 |
C |
inconclusive |
|
11 |
510d |
562d
|
28/29 |
385d |
5f3fd772d152
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
|
|
kernel BUG in bch2_journal_noflush_seq
fs
|
-1 |
C |
done |
done |
841 |
491d |
685d
|
28/29 |
385d |
0eafe758ac44
bcachefs: Check for bucket journal seq in the future
|
|
KMSAN: uninit-value in __exfat_get_dentry_set
exfat
|
7 |
C |
|
|
14 |
544d |
598d
|
28/29 |
385d |
02dffe9ab092
exfat: fix uninit-value in __exfat_get_dentry_set
|
|
UBSAN: array-index-out-of-bounds in mr_table_dump
net
|
15 |
C |
|
|
4 |
490d |
490d
|
28/29 |
385d |
15a901361ec3
ipmr: do not call mr_mfc_uses_dev() for unres entries
|
|
KASAN: slab-use-after-free Read in set_powered_sync
bluetooth
|
19 |
C |
done |
|
153 |
545d |
681d
|
28/29 |
385d |
0b882940665c
Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
|
|
divide error in drm_mode_vrefresh
dri
|
2 |
C |
done |
|
15 |
525d |
1070d
|
28/29 |
385d |
9398332f23fa
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
|
|
KASAN: use-after-free Read in ocfs2_search_extent_list
ocfs2
|
19 |
C |
inconclusive |
|
3 |
503d |
533d
|
28/29 |
385d |
34bb50c42335
ocfs2: check el->l_next_free_rec in ocfs2_get_clusters_nocache
|
|
KASAN: out-of-bounds Read in copy_from_kernel_nofault
mm
|
17 |
C |
done |
|
1628 |
427d |
603d
|
28/29 |
385d |
e4137f08816b
mm, kasan, kmsan: instrument copy_from/to_kernel_nofault
|
|
UBSAN: array-index-out-of-bounds in inline_xattr_addr
f2fs
|
15 |
C |
|
|
6 |
491d |
523d
|
28/29 |
385d |
5c1768b67250
f2fs: fix to do sanity check correctly on i_inline_xattr_size
|
|
INFO: task hung in process_measurement (2)
integrity
lsm
|
1 |
C |
done |
|
607 |
387d |
991d
|
28/29 |
385d |
a5324b3a488d
exfat: fix the infinite loop in __exfat_free_cluster()
|
|
WARNING: suspicious RCU usage in __ethtool_get_ts_info
net
|
4 |
C |
done |
|
41 |
505d |
526d
|
28/29 |
385d |
4c61d809cf60
net: ethtool: Fix suspicious rcu_dereference usage
|
|
general protection fault in bch2_checksum
fs
|
19 |
C |
done |
|
34 |
387d |
678d
|
28/29 |
385d |
f7f196170dcd
bcachefs: cryptographic MACs on superblock are not (yet?) supported
|
|
WARNING in ovl_encode_real_fh
overlayfs
|
-1 |
C |
|
|
7 |
508d |
575d
|
28/29 |
385d |
974e3fe0ac61
fs: relax assertions on failure to encode file handles
|
|
KASAN: slab-use-after-free Read in sg_release
scsi
usb
|
19 |
syz |
|
|
1 |
556d |
566d
|
28/29 |
385d |
f10593ad9bc3
scsi: sg: Fix slab-use-after-free read in sg_release()
|
|
UBSAN: shift-out-of-bounds in flow_classify
net
|
-1 |
C |
error |
|
5 |
510d |
509d
|
28/29 |
385d |
a039e54397c6
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
|
|
WARNING in rxrpc_send_data
afs
net
|
-1 |
C |
done |
|
275 |
526d |
533d
|
28/29 |
385d |
ae4f89989479
rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
|
|
WARNING in l2tp_exit_net
net
|
-1 |
syz |
done |
|
219 |
536d |
621d
|
28/29 |
385d |
5d066766c5f1
net/l2tp: fix warning in l2tp_exit_net found by syzbot
|
|
KMSAN: uninit-value in hfs_read_inode
hfs
|
7 |
C |
|
|
2 |
540d |
551d
|
28/29 |
385d |
b905bafdea21
hfs: Sanity check the root record
|
|
KASAN: slab-out-of-bounds Read in f2fs_getxattr
f2fs
|
17 |
C |
done |
|
9 |
450d |
509d
|
28/29 |
385d |
5c1768b67250
f2fs: fix to do sanity check correctly on i_inline_xattr_size
|
|
possible deadlock in team_port_change_check (2)
net
|
4 |
C |
done |
|
16406 |
396d |
817d
|
28/29 |
385d |
3fff5da4ca21
team: prevent adding a device which is already a team device lower
|
|
BUG: unable to handle kernel paging request in crypto_skcipher_encrypt
bcachefs
|
8 |
C |
|
|
433 |
478d |
711d
|
28/29 |
385d |
dba8243f3b46
bcachefs: Don't try to en/decrypt when encryption not available
|
|
KASAN: slab-out-of-bounds Read in orangefs_debug_write
orangefs
|
17 |
C |
|
|
6 |
486d |
521d
|
28/29 |
385d |
f7c848431632
orangefs: fix a oob in orangefs_debug_write
|
|
WARNING: locking bug in __rmqueue_pcplist
mm
|
4 |
C |
|
|
11148 |
477d |
570d
|
28/29 |
385d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
general protection fault in vidtv_mux_stop_thread
media
|
2 |
C |
|
|
9 |
487d |
514d
|
28/29 |
385d |
1221989555db
media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
|
|
KASAN: slab-use-after-free Read in ila_nf_input
net
|
19 |
syz |
|
|
38 |
509d |
512d
|
28/29 |
385d |
260466b576bc
ila: serialize calls to nf_register_net_hooks()
|
|
WARNING in ieee80211_set_active_links
wireless
|
-1 |
C |
|
|
2 |
495d |
513d
|
28/29 |
385d |
7553477cbfd7
wifi: mac80211: prohibit deactivating all links
|
|
WARNING: locking bug in eventfd_signal_mask
io-uring
fs
|
4 |
C |
done |
|
6 |
510d |
514d
|
28/29 |
385d |
a9c83a0ab66a
io_uring/timeout: flush timeouts outside of the timeout lock
|
|
general protection fault in dev_prep_valid_name
wireless
|
2 |
C |
done |
|
792 |
513d |
557d
|
28/29 |
385d |
48327566769a
rtnetlink: fix double call of rtnl_link_get_net_ifla()
|
|
general protection fault in btrfs_search_slot
btrfs
|
2 |
C |
done |
|
9 |
541d |
580d
|
28/29 |
385d |
3ed51857a50f
btrfs: add a sanity check for btrfs root in btrfs_search_slot()
|
|
kernel BUG in ocfs2_truncate_log_append
ocfs2
|
-1 |
C |
|
|
4 |
513d |
566d
|
28/29 |
385d |
01676ecd0b5c
ocfs2: check tl->count of truncate log inode in ocfs2_get_truncate_log_info
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync
bluetooth
|
19 |
syz |
|
|
40 |
499d |
672d
|
28/29 |
385d |
26fbd3494a7d
Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
|
|
kernel BUG in iov_iter_revert (2)
fuse
netfs
|
-1 |
C |
done |
|
61 |
501d |
572d
|
28/29 |
385d |
105549d09a53
netfs: Fix enomem handling in buffered reads
|
|
kernel BUG in vlan_get_tci
net
|
-1 |
C |
done |
|
5 |
512d |
512d
|
28/29 |
385d |
77ee7a6d16b6
af_packet: fix vlan_get_tci() vs MSG_PEEK
|
|
WARNING in ip6mr_free_table
net
|
-1 |
C |
done |
|
97859 |
534d |
540d
|
28/29 |
385d |
50b94204446e
ipmr: tune the ipmr_can_free_table() checks.
|
|
WARNING in __io_submit_flush_completions
io-uring
|
-1 |
C |
|
|
23 |
502d |
522d
|
28/29 |
385d |
60495b08cf7a
io_uring: silence false positive warnings
|
|
possible deadlock in chaoskey_release
usb
|
4 |
C |
|
|
90 |
590d |
595d
|
28/29 |
385d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
WARNING in wnd_add_free_ext (3)
ntfs3
|
-1 |
C |
done |
|
19 |
414d |
650d
|
28/29 |
385d |
5fc982fe7eca
fs/ntfs3: Fix case when unmarked clusters intersect with zone
|
|
WARNING in __mptcp_clean_una (2)
mptcp
|
-1 |
C |
done |
|
11 |
487d |
526d
|
28/29 |
385d |
619af16b3b57
mptcp: handle fastopen disconnect correctly
|
|
general protection fault in bch2_btree_path_traverse_one
fs
|
8 |
C |
done |
|
564 |
478d |
579d
|
28/29 |
385d |
90f3683e8f7c
bcachefs: Fix null ptr deref in btree_path_lock_root()
c7e78f7b0178
bcachefs: Ignore empty btree root journal entries
|
|
possible deadlock in __bch2_trans_relock
btrfs
|
4 |
C |
|
|
52 |
493d |
580d
|
28/29 |
385d |
ff1dd05f8233
bcachefs: bch2_trans_relock() is trylock for lockdep
|
|
BUG: corrupted list in bch2_btree_and_journal_iter_exit
fs
|
8 |
C |
done |
|
7 |
502d |
547d
|
28/29 |
385d |
0184dfa3b821
bcachefs: Fix journal_iter list corruption
|
|
WARNING: locking bug in get_random_u8
kernel
|
4 |
syz |
|
|
70 |
485d |
556d
|
28/29 |
385d |
d40797d6720e
kasan: make kasan_record_aux_stack_noalloc() the default behaviour
|
|
WARNING in posixtimer_send_sigqueue (2)
kernel
|
-1 |
C |
done |
|
557 |
478d |
525d
|
28/29 |
385d |
8c4840277b6d
signal/posixtimers: Handle ignore/blocked sequences correctly
|
|
KASAN: slab-use-after-free Read in bpf_trace_run2 (2)
bpf
trace
|
19 |
syz |
error |
|
123 |
569d |
586d
|
28/29 |
385d |
2e8a12b82c40
tracing: Fix syscall tracepoint use-after-free
|
|
BUG: corrupted list in ieee802154_if_remove
wpan
|
8 |
C |
error |
|
3 |
564d |
566d
|
28/29 |
385d |
eb09fbeb4870
mac802154: check local interfaces before deleting sdata list
|
|
KMSAN: uninit-value in dib3000mb_attach (2)
usb
media
|
7 |
C |
|
|
4873 |
521d |
2042d
|
28/29 |
385d |
2dd59fe0e19e
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
|
|
KMSAN: uninit-value in io_nop
io-uring
|
7 |
C |
|
|
39 |
542d |
551d
|
28/29 |
385d |
ee116574de84
io_uring/nop: ensure nop->fd is always initialized
|
|
WARNING in mark_buffer_dirty (6)
fs
|
-1 |
C |
error |
|
11669 |
385d |
952d
|
28/29 |
385d |
ca76bb226bf4
nilfs2: do not force clear folio if buffer is referenced
|
|
KASAN: slab-out-of-bounds Read in nsim_dev_health_break_write
net
|
17 |
C |
|
|
4 |
523d |
529d
|
28/29 |
385d |
ee76746387f6
netdevsim: prevent bad user input in nsim_dev_health_break_write()
|
|
BUG: unable to handle kernel paging request in find_first_extent_item
btrfs
|
8 |
C |
|
|
4 |
514d |
510d
|
28/29 |
385d |
6aecd91a5c5b
btrfs: avoid NULL pointer dereference if no valid extent tree
|
|
WARNING in uvc_status_unregister
usb
media
|
-1 |
C |
done |
|
61256 |
477d |
584d
|
28/29 |
385d |
a67f75c2b5ec
media: uvcvideo: Fix deadlock during uvc_probe
|
|
INFO: rcu detected stall in hub_event
usb
|
1 |
C |
done |
|
1233 |
385d |
2378d
|
28/29 |
385d |
64f2657b5793
HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
|
|
kernel BUG in bch2_bio_compress (2)
fs
|
-1 |
C |
|
|
5 |
433d |
558d
|
28/29 |
385d |
3d0b3b51c5ab
bcachefs: Don't BUG_ON() when superblock feature wasn't set for compressed data
|
|
WARNING in page_pool_put_unrefed_netmem
net
|
-1 |
C |
error |
|
7 |
498d |
638d
|
28/29 |
385d |
a126061c80d5
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
|
|
possible deadlock in chaoskey_open
usb
|
4 |
C |
|
|
475 |
590d |
595d
|
28/29 |
385d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
WARNING in udf_rename (2)
udf
|
-1 |
C |
error |
|
8 |
539d |
546d
|
28/29 |
385d |
6756af923e06
udf: Verify inode link counts before performing rename
|
|
KMSAN: uninit-value in f2fs_new_node_page
f2fs
|
7 |
C |
|
|
39 |
485d |
539d
|
28/29 |
385d |
76f01376df39
f2fs: ensure that node info flags are always initialized
|
|
WARNING: locking bug in __lock_task_sighand
bpf
trace
|
4 |
C |
unreliable |
|
89 |
488d |
544d
|
28/29 |
385d |
87c544108b61
bpf: Send signals asynchronously if !preemptible
|
|
KASAN: slab-out-of-bounds Read in ovl_inode_upper
overlayfs
|
17 |
C |
|
|
4 |
548d |
547d
|
28/29 |
385d |
2957fa4931a3
fs/backing_file: fix wrong argument in callback
|
|
kernel BUG in bch2_btree_write_buffer_flush_locked
fs
|
-1 |
C |
done |
|
35 |
495d |
575d
|
28/29 |
385d |
b3d82c2f2761
bcachefs: Guard against journal seq overflow
|
|
KASAN: null-ptr-deref Read in fuse_copy_do
fuse
|
12 |
C |
done |
|
10 |
505d |
545d
|
28/29 |
385d |
78f2560fc9fa
fuse: Set *nbytesp=0 in fuse_get_user_pages on allocation failure
|
|
WARNING in __proc_create (3)
afs
|
-1 |
C |
|
|
2 |
513d |
509d
|
28/29 |
385d |
8fd56ad6e7c9
afs: Fix the maximum cell name length
|
|
general protection fault in vsock_connectible_has_data
net
virt
|
2 |
C |
done |
|
7 |
504d |
503d
|
28/29 |
385d |
f6abafcd32f9
vsock/bpf: return early if transport is not assigned
|
|
kernel BUG in vlan_get_protocol_dgram
net
|
-1 |
C |
done |
|
8 |
512d |
512d
|
28/29 |
385d |
f91a5b808938
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
|
|
kernel BUG in bch2_btree_root_read
fs
|
-1 |
C |
|
|
9 |
476d |
550d
|
28/29 |
385d |
828552ca74a4
bcachefs: Kill bch2_bucket_alloc_new_fs()
|
|
WARNING in current_check_refer_path
lsm
|
-1 |
C |
|
|
90 |
500d |
684d
|
28/29 |
385d |
49440290a093
landlock: Handle weird files
|
|
INFO: task hung in exfat_sync_fs
exfat
|
1 |
C |
error |
|
1859 |
516d |
1032d
|
28/29 |
385d |
fee873761bd9
exfat: fix the infinite loop in exfat_readdir()
|
|
KASAN: slab-out-of-bounds Write in __put_unused_fd
fs
|
22 |
C |
done |
|
5 |
508d |
511d
|
28/29 |
385d |
0c0214df28f0
fanotify: Fix crash in fanotify_init(2)
|
|
possible deadlock in usb_deregister_dev (3)
usb
|
4 |
C |
|
|
103 |
590d |
595d
|
28/29 |
385d |
d73dc7b182be
USB: chaoskey: Fix possible deadlock chaoskey_list_lock
|
|
possible deadlock in page_cache_ra_unbounded
mm
fs
|
4 |
C |
error |
done |
163 |
492d |
1253d
|
28/29 |
448d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in skb_checksum_help (3)
net
|
-1 |
C |
done |
done |
9460 |
560d |
887d
|
28/29 |
484d |
89add40066f9
net: drop bad gso csum_start and offset in virtio_net_hdr
|
|
KASAN: use-after-free Read in reiserfs_fill_super (3)
fs
|
19 |
C |
error |
done |
47 |
554d |
599d
|
28/29 |
498d |
fb6f20ecb121
reiserfs: The last commit
|
|
kernel BUG in bch2_fs_btree_write_buffer_exit
fs
|
-1 |
C |
done |
|
6138 |
554d |
606d
|
28/29 |
514d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
kernel BUG in bch2_journal_res_get (2)
fs
|
-1 |
C |
|
|
1710 |
555d |
579d
|
28/29 |
514d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
kernel BUG in bch2_fs_btree_cache_exit
fs
|
-1 |
C |
done |
|
2766 |
555d |
586d
|
28/29 |
514d |
ca43f73cd172
bcachefs: bch2_btree_write_buffer_flush_going_ro()
|
|
divide error in __tcp_select_window (3)
net
|
2 |
C |
|
|
5 |
565d |
571d
|
28/29 |
526d |
ce7356ae3594
mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
|
|
BUG: using smp_processor_id() in preemptible code in bpf_mem_alloc
bpf
|
4 |
C |
done |
|
12 |
558d |
555d
|
28/29 |
526d |
4ff04abf9d5b
bpf: Add necessary migrate_disable to range_tree.
|
|
WARNING: suspicious RCU usage in phonet_route_del
net
|
4 |
C |
done |
|
7 |
567d |
571d
|
28/29 |
526d |
38a1f50a5efb
phonet: do not call synchronize_rcu() from phonet_route_del()
|
|
general protection fault in io_uring_show_fdinfo (2)
io-uring
|
2 |
C |
done |
|
19 |
572d |
571d
|
28/29 |
527d |
d50f94d761a5
io_uring/rsrc: get rid of the empty node and dummy_ubuf
|
|
general protection fault in io_sqe_buffer_register
io-uring
|
2 |
C |
done |
|
55 |
569d |
571d
|
28/29 |
527d |
d50f94d761a5
io_uring/rsrc: get rid of the empty node and dummy_ubuf
|
|
kernel BUG in __bch2_btree_node_hash_insert
fs
|
-1 |
C |
done |
|
396 |
555d |
563d
|
28/29 |
527d |
0b6ec0c5ac6c
bcachefs: Fix assertion pop in topology repair
|
|
general protection fault in put_page (3)
net
|
2 |
C |
done |
|
47 |
527d |
571d
|
28/29 |
527d |
341468e0ab4b
lib/iov_iter: fix bvec iterator setup
|
|
KASAN: slab-out-of-bounds Read in journal_entry_dev_usage_to_text
fs
|
17 |
C |
done |
|
33 |
556d |
666d
|
28/29 |
527d |
657d4282d8c4
bcachefs: Fix journal_entry_dev_usage_to_text() overrun
|
|
WARNING in posixtimer_send_sigqueue
kernel
|
-1 |
C |
error |
|
196 |
527d |
559d
|
28/29 |
527d |
cdc905d16b07
posix-timers: Fix spurious warning on double enqueue versus do_exit()
|
|
general protection fault in touch_buffer
nilfs
|
2 |
C |
|
|
8 |
563d |
573d
|
28/29 |
527d |
cd45e963e44b
nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
|
|
UBSAN: array-index-out-of-bounds in jfs_readdir
jfs
|
19 |
C |
inconclusive |
|
89 |
534d |
785d
|
28/29 |
527d |
839f102efb16
jfs: fix array-index-out-of-bounds in jfs_readdir
|
|
kernel BUG in __bkey_unpack_pos
fs
|
-1 |
C |
|
|
4 |
535d |
573d
|
28/29 |
527d |
dc537189b5cf
bcachefs: Fix validate_bset() repair path
|
|
kernel BUG in bch2_trans_node_iter_init
fs
|
-1 |
C |
done |
|
13 |
565d |
579d
|
28/29 |
527d |
f8f1dde68681
bcachefs: Fix missing validation for bch_backpointer.level
|
|
kernel BUG in bch2_btree_path_level_init (2)
fs
|
-1 |
C |
done |
|
29 |
530d |
580d
|
28/29 |
527d |
f8f1dde68681
bcachefs: Fix missing validation for bch_backpointer.level
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_add (2)
netfilter
|
17 |
C |
|
|
3 |
565d |
561d
|
28/29 |
527d |
35f56c554eb1
netfilter: ipset: add missing range check in bitmap_ip_uadt
|
|
WARNING in sk_skb_reason_drop
net
|
-1 |
C |
done |
|
1447 |
528d |
556d
|
28/29 |
527d |
85c7975acd97
net: ip: fix unexpected return in fib_validate_source()
|
|
UBSAN: shift-out-of-bounds in ocfs2_fill_super (2)
ocfs2
|
-1 |
C |
|
|
81 |
556d |
577d
|
28/29 |
527d |
23aab037106d
ocfs2: fix UBSAN warning in ocfs2_verify_volume()
|
|
WARNING in media_create_pad_link
usb
media
|
-1 |
C |
done |
done |
104 |
551d |
2203d
|
28/29 |
527d |
3dd075fe8ebb
media: uvcvideo: Require entities to have a non-zero unique ID
|
|
UBSAN: shift-out-of-bounds in dbSplit (2)
jfs
|
-1 |
C |
error |
|
403 |
540d |
785d
|
28/29 |
527d |
a5f5e4698f8a
jfs: fix shift-out-of-bounds in dbSplit
|
|
kernel BUG in bch2_dev_btree_bitmap_mark
fs
|
-1 |
C |
done |
|
31 |
558d |
582d
|
28/29 |
527d |
27a036a0c3e7
bcachefs: Fix bch_member.btree_bitmap_shift validation
|
|
kernel BUG in ocfs2_set_new_buffer_uptodate
ocfs2
|
-1 |
C |
inconclusive |
|
55 |
535d |
646d
|
28/29 |
527d |
737f34137844
ocfs2: uncache inode which has failed entering the group
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree (2)
jfs
|
15 |
C |
inconclusive |
|
77 |
553d |
738d
|
28/29 |
527d |
a174706ba4da
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
kernel BUG in bch2_bkey_pack_pos_lossy
fs
|
-1 |
C |
|
|
7 |
565d |
577d
|
28/29 |
527d |
dc537189b5cf
bcachefs: Fix validate_bset() repair path
|
|
KASAN: use-after-free Read in netdev_unregister_kobject
pm
|
19 |
C |
error |
|
6281 |
534d |
764d
|
28/29 |
527d |
27aabf27fd01
Bluetooth: fix use-after-free in device_for_each_child()
|
|
KMSAN: uninit-value in hci_rx_work
bluetooth
|
7 |
C |
|
|
29 |
554d |
672d
|
28/29 |
527d |
3fe288a8214e
Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
|
|
WARNING: locking bug in ext4_move_extents
ext4
|
4 |
C |
done |
|
12000 |
533d |
1087d
|
28/29 |
527d |
d7fe143cb115
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
|
|
INFO: task hung in snd_card_free
sound
|
1 |
C |
error |
|
24 |
555d |
570d
|
28/29 |
527d |
dafb28f02be4
ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
|
|
kernel BUG in bch2_run_recovery_pass
fs
|
-1 |
C |
done |
|
17 |
559d |
579d
|
28/29 |
527d |
2642084f26b5
bcachefs: Allow for unknown key types in backpointers fsck
|
|
WARNING in thermal_thresholds_flush
pm
|
-1 |
C |
done |
|
76 |
585d |
585d
|
28/29 |
527d |
54219ee4eaeb
thermal: thresholds: Fix thermal lock annotation issue
|
|
general protection fault in swap_reclaim_full_clusters
mm
|
2 |
C |
|
|
1530 |
559d |
567d
|
28/29 |
527d |
dcf32ea7eced
mm: swapfile: fix cluster reclaim work crash on rotational devices
|
|
UBSAN: array-index-out-of-bounds in dtReadFirst
jfs
|
19 |
C |
error |
|
200 |
528d |
756d
|
28/29 |
527d |
ca84a2c9be48
jfs: array-index-out-of-bounds fix in dtReadFirst
|
|
WARNING in hci_conn_timeout
bluetooth
|
-1 |
C |
done |
|
6022 |
527d |
2124d
|
28/29 |
527d |
2b0f2fc9ed62
Bluetooth: hci_conn: Use disable_delayed_work_sync
|
|
kernel BUG in bch2_ptr_swab
fs
|
-1 |
C |
inconclusive |
|
11 |
564d |
581d
|
28/29 |
527d |
840c2fbcc5cd
bcachefs: Fix assertion pop in bch2_ptr_swab()
|
|
WARNING in __v4l2_ctrl_modify_dimensions
media
|
-1 |
C |
|
|
237 |
551d |
631d
|
28/29 |
527d |
9f070b1862f3
media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
|
|
general protection fault in fuse_do_readpage
fuse
|
8 |
C |
|
|
9 |
545d |
569d
|
28/29 |
527d |
3a23787ca875
erofs: fix file-backed mounts over FUSE
|
|
WARNING in iomap_iter (4)
iomap
erofs
|
-1 |
C |
done |
|
1 |
561d |
557d
|
28/29 |
527d |
0bc8061ffc73
erofs: handle NONHEAD !delta[1] lclusters gracefully
|
|
general protection fault in ocfs2_xa_block_wipe_namevalue
ocfs2
|
2 |
C |
|
|
4 |
580d |
577d
|
28/29 |
531d |
0b63c0e01fba
ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
|
|
kernel BUG in __bch2_bkey_cmp_packed_format_checked
fs
|
-1 |
C |
|
|
4 |
579d |
579d
|
28/29 |
531d |
d335bb3fd3a4
bcachefs: Ancient versions with bad bkey_formats are no longer supported
|
|
kernel BUG in bch2_bkey_cmp_packed
fs
|
-1 |
C |
|
|
8 |
565d |
579d
|
28/29 |
531d |
d335bb3fd3a4
bcachefs: Ancient versions with bad bkey_formats are no longer supported
|
|
WARNING in __sock_create
net
|
-1 |
C |
done |
|
4 |
566d |
566d
|
28/29 |
531d |
d293958a8595
net/smc: do not leave a dangling sk pointer in __smc_create()
|
|
KMSAN: uninit-value in sctp_sf_ootb
sctp
|
7 |
C |
|
|
18 |
570d |
638d
|
28/29 |
531d |
0ead60804b64
sctp: properly validate chunk size in sctp_sf_ootb()
|
|
kernel BUG in bch2_inconsistent_error
fs
|
-1 |
C |
|
|
4 |
565d |
577d
|
28/29 |
531d |
f9f0a5390dce
bcachefs: Change OPT_STR max to be 1 less than the size of choices array
|
|
possible deadlock in ni_fiemap
ntfs3
|
4 |
C |
error |
done |
4007 |
590d |
1317d
|
28/29 |
543d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
22 |
C |
done |
|
275 |
578d |
922d
|
28/29 |
547d |
1bf4470a3939
Bluetooth: SCO: Fix UAF on sco_sock_timeout
|
|
KASAN: slab-use-after-free Read in bch2_reconstruct_alloc
fs
|
19 |
C |
done |
|
2 |
576d |
580d
|
28/29 |
559d |
8e910ca20e11
bcachefs: Fix UAF in bch2_reconstruct_alloc()
|
|
BUG: Bad page state in bpf_test_run_xdp_live
net
|
-1 |
C |
done |
|
17 |
573d |
576d
|
28/29 |
559d |
c40dd8c47325
bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
|
|
kernel BUG in bch2_bucket_alloc_trans (2)
fs
|
-1 |
C |
done |
|
103 |
559d |
587d
|
28/29 |
559d |
3fd27e9c57bf
bcachefs: init freespace inited bits to 0 in bch2_fs_initialize
|
|
kernel BUG in ocfs2_truncate_inline
ocfs2
|
-1 |
C |
inconclusive |
|
3 |
581d |
595d
|
28/29 |
559d |
bc0a2f3a73fc
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
|
|
KASAN: null-ptr-deref Read in bch2_sb_set_upgrade_extra
fs
|
11 |
C |
|
|
2 |
585d |
581d
|
28/29 |
559d |
a25a83de45b4
bcachefs: fix null-ptr-deref in have_stripes()
|
|
possible deadlock in nilfs_dirty_inode (4)
nilfs
|
4 |
C |
|
|
2 |
575d |
585d
|
28/29 |
559d |
b3a033e3ecd3
nilfs2: fix potential deadlock with newly created symlinks
|
|
WARNING in push_jmp_history
bpf
|
-1 |
C |
done |
|
5 |
596d |
596d
|
28/29 |
559d |
aa30eb3260b2
bpf: Force checkpoint when jmp history is too long
|
|
general protection fault in btree_node_iter_and_journal_peek
fs
|
2 |
C |
|
|
3 |
582d |
604d
|
28/29 |
559d |
3726a1970bd7
bcachefs: Fix NULL ptr dereference in btree_node_iter_and_journal_peek
|
|
UBSAN: shift-out-of-bounds in bch2_alloc_to_text
fs
|
-1 |
C |
|
|
29 |
570d |
583d
|
28/29 |
559d |
5c41f75d1b92
bcachefs: fix shift oob in alloc_lru_idx_fragmentation
|
|
KASAN: null-ptr-deref Write in xfs_filestream_select_ag (2)
xfs
|
12 |
syz |
|
|
3 |
585d |
585d
|
28/29 |
559d |
dc60992ce76f
xfs: fix finding a last resort AG in xfs_filestream_pick_ag
|
|
possible deadlock in process_measurement (4)
integrity
lsm
|
4 |
C |
done |
|
7976 |
569d |
606d
|
28/29 |
559d |
58a039e679fe
mm: split critical region in remap_file_pages() and invoke LSMs in between
|
|
UBSAN: shift-out-of-bounds in validate_sb_layout
fs
|
-1 |
C |
done |
|
7 |
572d |
580d
|
28/29 |
559d |
2045fc4295c4
bcachefs: Fix invalid shift in validate_sb_layout()
|
|
kernel BUG in __block_write_begin_int (3)
nilfs
|
-1 |
C |
|
|
4 |
588d |
588d
|
28/29 |
559d |
41e192ad2779
nilfs2: fix kernel bug due to missing clearing of checked flag
|
|
possible deadlock in lock_mm_and_find_vma (2)
mm
|
4 |
C |
|
|
6626 |
562d |
634d
|
28/29 |
559d |
58a039e679fe
mm: split critical region in remap_file_pages() and invoke LSMs in between
|
|
possible deadlock in bch2_replicas_entry_validate
fs
|
4 |
C |
done |
|
9468 |
581d |
600d
|
28/29 |
559d |
bf4baaa087e2
bcachefs: Fix lockdep splat in bch2_accounting_read
|
|
possible deadlock in ext4_xattr_inode_iget (3)
ext4
|
4 |
C |
error |
done |
183 |
602d |
784d
|
28/29 |
559d |
d1bc560e9a9c
ext4: nested locking for xattr inode
|
|
inconsistent lock state in ppp_input
ppp
|
4 |
C |
|
|
15 |
588d |
607d
|
28/29 |
560d |
aec7291003df
ppp: do not assume bh is held in ppp_channel_bridge_input()
|
|
kernel BUG in bch2_btree_pos_to_text
fs
|
-1 |
C |
|
|
8 |
563d |
612d
|
28/29 |
560d |
0151d10a480d
bcachefs: add check for btree id against max in try read node
|
|
possible deadlock in fsnotify_destroy_mark
squashfs
|
4 |
C |
|
|
46 |
600d |
643d
|
28/29 |
560d |
cad3f4a22cfa
inotify: Fix possible deadlock in fsnotify_destroy_mark
|
|
INFO: task hung in vcs_open (8)
nilfs
serial
|
1 |
C |
inconclusive |
|
7 |
601d |
607d
|
28/29 |
560d |
08cfa12adf88
nilfs2: propagate directory read errors from nilfs_find_entry()
|
|
possible deadlock in sk_clone_lock (3)
mptcp
|
4 |
C |
|
|
21 |
580d |
628d
|
28/29 |
560d |
3d041393ea8c
mptcp: prevent MPC handshake on port-based signal endpoints
|
|
WARNING in __mptcp_move_skbs_from_subflow
mptcp
|
-1 |
C |
error |
|
90 |
593d |
680d
|
28/29 |
560d |
4dabcdf58121
tcp: fix mptcp DSS corruption due to large pmtu xmit
|
|
INFO: task hung in usb_port_suspend
usb
|
1 |
C |
|
|
12 |
583d |
592d
|
28/29 |
560d |
5189df7b8088
USB: gadget: dummy-hcd: Fix "task hung" problem
|
|
general protection fault in dev_map_enqueue (2)
bpf
net
|
19 |
C |
error |
done |
336 |
664d |
730d
|
28/29 |
560d |
09d88791c7cd
bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
|
|
kernel BUG in submit_bh_wbc (3)
nilfs
fs
|
-1 |
C |
done |
|
18 |
583d |
590d
|
28/29 |
560d |
6ed469df0bfb
nilfs2: fix kernel bug due to missing clearing of buffer delay flag
|
|
general protection fault in prt_str
fs
|
2 |
C |
done |
|
2 |
602d |
617d
|
28/29 |
560d |
a30f32222df2
bcachefs: Fix NULL pointer dereference in bch2_opt_to_text
|
|
WARNING in kthread_unpark (2)
wireguard
gfs2
|
-1 |
syz |
done |
|
35 |
599d |
745d
|
28/29 |
560d |
214e01ad4ed7
kthread: unpark only parked kthread
|
|
general protection fault in bch2_alloc_read
fs
|
2 |
C |
|
|
7 |
601d |
608d
|
28/29 |
560d |
a319aeaebb6c
bcachefs: Fix missing bounds checks in bch2_alloc_read()
|
|
general protection fault in run_is_mapped_full
ntfs3
|
8 |
C |
error |
|
72 |
595d |
683d
|
28/29 |
560d |
a33fb016e49e
fs/ntfs3: Fix general protection fault in run_is_mapped_full
|
|
WARNING: kmalloc bug in wnd_init
ntfs3
|
-1 |
C |
done |
|
3 |
666d |
812d
|
28/29 |
560d |
c4a8ba334262
fs/ntfs3: Add rough attr alloc_size check
|
|
WARNING: locking bug in try_to_wake_up
kernel
|
19 |
C |
error |
|
157 |
561d |
741d
|
28/29 |
560d |
41fd1e94066a
btrfs: wait for fixup workers before stopping cleaner kthread during umount
|
|
KASAN: slab-out-of-bounds Read in udf_get_filelongad (2)
udf
|
17 |
C |
|
|
4 |
617d |
631d
|
28/29 |
560d |
c226964ec786
udf: refactor inode_bmap() to handle error
|
|
INFO: trying to register non-static key in mark_as_free_ex
ntfs3
|
-1 |
C |
done |
|
2 |
618d |
630d
|
28/29 |
560d |
d178944db36b
fs/ntfs3: Additional check in ni_clear()
|
|
UBSAN: shift-out-of-bounds in xfrm_selector_match (2)
net
|
-1 |
C |
error |
|
10 |
604d |
617d
|
28/29 |
560d |
3f0ab59e6537
xfrm: validate new SA's prefixlen using SA family when sel.family is unset
|
|
WARNING in p9_client_create (2)
v9fs
|
-1 |
C |
done |
|
26070 |
575d |
611d
|
28/29 |
560d |
79efebae4afc
9p: Avoid creating multiple slab caches with the same name
|
|
WARNING in xt_cluster_mt (2)
netfilter
|
-1 |
C |
inconclusive |
|
5 |
602d |
600d
|
28/29 |
560d |
0bfcb7b71e73
netfilter: xtables: avoid NFPROTO_UNSPEC where needed
|
|
KMSAN: uninit-value in ppp_async_push (4)
ppp
|
7 |
C |
|
|
43 |
593d |
594d
|
28/29 |
560d |
40dddd4b8bd0
ppp: fix ppp_async_encode() illegal access
|
|
KMSAN: uninit-value in netfs_clear_buffer
netfs
|
7 |
C |
|
|
46 |
604d |
613d
|
28/29 |
560d |
f6023535b52f
netfs: Fix a KMSAN uninit-value error in netfs_clear_buffer
|
|
UBSAN: shift-out-of-bounds in bch2_stripe_to_text
fs
|
-1 |
C |
|
|
3 |
612d |
608d
|
28/29 |
560d |
9f25dbe0bf91
bcachefs: Add missing validation for bch_stripe.csum_granularity_bits
|
|
UBSAN: shift-out-of-bounds in member_to_text
fs
|
-1 |
C |
|
|
12 |
587d |
631d
|
28/29 |
560d |
c1bd21bb6518
bcachefs: Fix invalid shift in member_to_text()
|
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
4 |
C |
done |
|
22650 |
589d |
1717d
|
28/29 |
560d |
08d1914293da
Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
|
|
general protection fault in write_all_supers
btrfs
|
8 |
C |
|
|
21 |
580d |
623d
|
28/29 |
560d |
3c36a72c1d27
btrfs: reject ro->rw reconfiguration if there are hard ro requirements
|
|
KMSAN: uninit-value in from_kuid (2)
ocfs2
|
7 |
C |
|
|
75 |
582d |
613d
|
28/29 |
560d |
15f343474816
fs: Fix uninitialized value issue in from_kuid and from_kgid
|
|
BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio (3)
erofs
|
10 |
C |
|
|
492 |
560d |
617d
|
28/29 |
560d |
416a8b2c02fe
erofs: ensure regular inodes for file-backed mounts
|
|
KMSAN: uninit-value in vfat_rename2
exfat
|
7 |
C |
|
|
2 |
604d |
600d
|
28/29 |
560d |
963a7f4d3b90
fat: fix uninitialized variable
|
|
possible deadlock in mi_read
ntfs3
|
4 |
C |
error |
|
11141 |
560d |
1333d
|
28/29 |
560d |
03b097099eef
fs/ntfs3: Fix possible deadlock in mi_read
|
|
kernel BUG in dma_alloc_attrs
iommu
|
-1 |
C |
|
|
4 |
584d |
588d
|
28/29 |
560d |
78b2770c935f
dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory
|
|
INFO: rcu detected stall in br_handle_frame (5)
bridge
|
1 |
syz |
|
|
24 |
563d |
592d
|
28/29 |
560d |
a1494d532e28
netdevsim: use cond_resched() in nsim_dev_trap_report_work()
|
|
BUG: sleeping function called from invalid context in ntfs_d_hash
ntfs3
|
5 |
C |
done |
|
740 |
595d |
632d
|
28/29 |
560d |
589996bf8c45
ntfs3: Change to non-blocking allocation in ntfs_d_hash
|
|
KMSAN: uninit-value in udf_get_fileshortad
udf
|
7 |
C |
|
|
3 |
604d |
616d
|
28/29 |
560d |
264db9d666ad
udf: fix uninit-value use in udf_get_fileshortad
|
|
KASAN: slab-use-after-free Read in advance_sched
net
|
19 |
C |
error |
|
15 |
604d |
890d
|
28/29 |
560d |
f504465970ae
net: sched: fix use-after-free in taprio_change()
|
|
WARNING in copy_huge_pmd
mm
|
-1 |
C |
done |
|
361 |
594d |
610d
|
28/29 |
560d |
47fa30118f02
mm/huge_memory: check pmd_special() only after pmd_present()
|
|
possible deadlock in ntfs_set_state (2)
ntfs3
|
4 |
C |
error |
|
943 |
592d |
834d
|
28/29 |
560d |
5b2db723455a
fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
|
|
KASAN: slab-use-after-free Read in l2cap_connect (2)
bluetooth
|
19 |
C |
done |
|
8 |
612d |
701d
|
28/29 |
560d |
333b4fd11e89
Bluetooth: L2CAP: Fix uaf in l2cap_connect
|
|
KASAN: stack-out-of-bounds Read in profile_pc
kernel
|
17 |
C |
error |
done |
9302 |
696d |
1822d
|
28/29 |
573d |
093d9603b600
x86: stop playing stack games in profile_pc()
|
|
INFO: task hung in ext4_stop_mmpd
ext4
|
1 |
C |
done |
done |
483 |
613d |
686d
|
28/29 |
575d |
d3476f3dad4a
ext4: don't set SB_RDONLY after filesystem errors
|
|
WARNING in io_sq_offload_create
io-uring
|
-1 |
C |
|
|
284 |
609d |
613d
|
28/29 |
575d |
a09c17240bdf
io_uring/sqpoll: retain test for whether the CPU is valid
|
|
general protection fault in ethnl_phy_doit
net
|
2 |
C |
done |
|
6 |
622d |
623d
|
28/29 |
578d |
fce1e9f86af1
net: ethtool: phy: Check the req_info.pdn field for GET commands
|
|
WARNING in __bch2_fsck_err (2)
fs
|
-1 |
C |
|
|
3 |
600d |
596d
|
28/29 |
579d |
5612daafb764
bcachefs: Fix fsck warnings from bkey validation
|
|
BUG: unable to handle kernel NULL pointer dereference in attr_make_nonresident
ntfs3
|
10 |
C |
error |
done |
110 |
673d |
755d
|
28/29 |
581d |
0f9579d9e033
fs/ntfs3: Add missing .dirty_folio in address_space_operations
|
|
UBSAN: array-index-out-of-bounds in dbNextAG (2)
jfs
|
15 |
C |
inconclusive |
|
53 |
615d |
685d
|
28/29 |
581d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
kernel BUG in __page_table_check_zero
usb
|
-1 |
C |
error |
done |
213 |
614d |
1101d
|
28/29 |
581d |
79a61cc3fc04
mm: avoid leaving partial pfn mappings around in error case
|
|
WARNING: lock held when returning to user space in f2fs_ioc_start_atomic_write
f2fs
|
4 |
C |
done |
|
34 |
650d |
650d
|
28/29 |
581d |
b2c160f4f3cf
f2fs: atomic: fix to forbid dio in atomic_file
|
|
general protection fault in ovl_llseek
overlayfs
|
2 |
C |
|
|
5 |
607d |
607d
|
28/29 |
581d |
0c33037c825e
ovl: fix file leak in ovl_real_fdget_meta()
|
|
KMSAN: uninit-value in nf_reject_ip6_tcphdr_put
netfilter
|
7 |
C |
|
|
136 |
607d |
620d
|
28/29 |
581d |
9c778fe48d20
UPSTREAM: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
|
|
WARNING in remove_proc_entry (6)
can
|
-1 |
C |
done |
|
377 |
600d |
629d
|
28/29 |
581d |
94b0818fa635
can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
|
|
kernel BUG in btrfs_get_ordered_extents_for_logging
btrfs
|
-1 |
syz |
|
|
3 |
638d |
635d
|
28/29 |
581d |
cd9253c23aed
btrfs: fix race between direct IO write and fsync when using same fd
|
|
kernel BUG in clear_inode
btrfs
|
-1 |
C |
|
|
12 |
584d |
725d
|
28/29 |
581d |
88b1afbf0f6b
vfs: fix race between evice_inodes() and find_inode()&iput()
|
|
general protection fault in nilfs_btree_insert (2)
nilfs
|
2 |
C |
inconclusive |
|
1 |
622d |
632d
|
28/29 |
581d |
9403001ad65a
nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
|
|
general protection fault in bch2_fs_recovery
fs
|
8 |
C |
|
|
10 |
605d |
624d
|
28/29 |
581d |
025c55a4c7f1
bcachefs: return err ptr instead of null in read sb clean
|
|
memory leak in clear_state_bit
btrfs
|
3 |
C |
|
|
3 |
904d |
915d
|
28/29 |
581d |
c346c629765a
btrfs: qgroup: don't use extent changeset when not needed
|
|
WARNING in rcu_sync_dtor
f2fs
|
-1 |
C |
done |
|
749 |
606d |
670d
|
28/29 |
581d |
930c6ab93492
f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
|
|
KASAN: null-ptr-deref Write in jbd2_journal_update_sb_log_tail
ext4
|
12 |
C |
|
|
4 |
608d |
646d
|
28/29 |
581d |
5784d9fcfd43
ocfs2: fix null-ptr-deref when journal load failed.
|
|
KASAN: slab-use-after-free Read in __uprobe_unregister
perf
trace
|
19 |
C |
|
|
9 |
616d |
654d
|
28/29 |
581d |
5fe6e308abae
bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
|
|
KASAN: use-after-free Read in ext4_search_dir (2)
ext4
|
19 |
C |
|
|
5 |
622d |
646d
|
28/29 |
581d |
c6b72f5d82b1
ext4: avoid OOB when system.data xattr changes underneath the filesystem
|
|
WARNING: refcount bug in ethnl_phy_done
net
|
13 |
C |
done |
|
4 |
623d |
623d
|
28/29 |
581d |
1ad84a151af7
net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP
|
|
WARNING: bad unlock balance in ocfs2_read_blocks
ocfs2
|
4 |
C |
|
|
240 |
614d |
646d
|
28/29 |
581d |
c03a82b4a0c9
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
|
|
kernel BUG in f2fs_evict_inode (3)
f2fs
|
-1 |
C |
error |
|
33 |
599d |
647d
|
28/29 |
581d |
884ee6dc85b9
f2fs: get rid of online repaire on corrupted directory
|
|
kernel BUG in trace_dma_unmap_sg
iommu
|
-1 |
C |
|
|
5 |
606d |
608d
|
28/29 |
581d |
bfc4a245a794
dma-mapping: fix DMA API tracing for chained scatterlists
|
|
INFO: rcu detected stall in schedule_timeout (6)
usb
|
1 |
C |
done |
|
40 |
583d |
740d
|
28/29 |
581d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
divide error in ext4_mb_regular_allocator
ext4
|
2 |
C |
done |
|
2 |
641d |
651d
|
28/29 |
581d |
ee85e0938aa8
ext4: check stripe size compatibility on remount as well
|
|
WARNING in __rate_control_send_low (2)
wireless
|
-1 |
C |
done |
|
3233 |
581d |
734d
|
28/29 |
581d |
e7a7ef9a0742
wifi: mac80211: don't use rate mask for offchannel TX either
|
|
kernel BUG in __sock_sendmsg
net
|
-1 |
C |
|
|
111 |
631d |
648d
|
28/29 |
581d |
fe1910f9337b
tcp_bpf: fix return value of tcp_bpf_sendmsg()
|
|
kernel BUG in vfs_get_tree
fs
|
-1 |
C |
done |
|
318 |
599d |
643d
|
28/29 |
581d |
b29c30ab48e0
bcachefs: Fix incorrect IS_ERR_OR_NULL usage
|
|
general protection fault in ata_msense_control
ide
|
2 |
C |
|
|
13 |
607d |
613d
|
28/29 |
581d |
03a9cfc1314b
ata: libata-scsi: Fix ata_msense_control_spgt2()
|
|
KASAN: slab-use-after-free Read in __timer_delete_sync
mptcp
|
19 |
syz |
error |
|
1 |
633d |
630d
|
28/29 |
581d |
b4cd80b03389
mptcp: pm: Fix uaf in __timer_delete_sync
|
|
UBSAN: array-index-out-of-bounds in dbSplit
jfs
|
15 |
C |
inconclusive |
|
31 |
622d |
670d
|
28/29 |
581d |
d64ff0d23067
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: shift-out-of-bounds in dbFindBits
jfs
|
-1 |
C |
error |
|
53 |
584d |
687d
|
28/29 |
581d |
b0b2fc815e51
jfs: UBSAN: shift-out-of-bounds in dbFindBits
|
|
KASAN: use-after-free Read in rtw_load_firmware_cb
usb
wireless
|
19 |
C |
|
|
848 |
607d |
670d
|
28/29 |
581d |
0e735a4c6137
wifi: rtw88: always wait for both firmware loading attempts
|
|
INFO: rcu detected stall in aoecmd_cfg (2)
usb
block
|
1 |
C |
done |
|
7 |
635d |
748d
|
28/29 |
581d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined
fs
|
7 |
C |
|
|
7 |
605d |
624d
|
28/29 |
581d |
0696a18a8cc3
bcachefs: memset bounce buffer portion to 0 after key_sort_fix_overlapping
|
|
WARNING in mptcp_pm_nl_set_flags
mptcp
|
-1 |
syz |
done |
|
3 |
639d |
639d
|
28/29 |
581d |
9366922adc6a
mptcp: pm: fix ID 0 endp usage after multiple re-creations
|
|
INFO: task hung in z_erofs_runqueue
erofs
|
1 |
C |
|
|
379 |
599d |
669d
|
28/29 |
581d |
9e2f9d34dd12
erofs: handle overlapped pclusters out of crafted images properly
|
|
possible deadlock in ocfs2_get_system_file_inode
ocfs2
|
4 |
C |
done |
|
14785 |
599d |
650d
|
28/29 |
581d |
7bf1823e010e
ocfs2: fix deadlock in ocfs2_get_system_file_inode
|
|
WARNING: ODEBUG bug in ocfs2_local_read_info
ocfs2
|
-1 |
C |
inconclusive |
|
7 |
599d |
631d
|
28/29 |
581d |
35fccce29feb
ocfs2: cancel dqi_sync_work before freeing oinfo
|
|
KASAN: slab-use-after-free Read in dbFreeBits
jfs
|
19 |
C |
done |
|
6 |
619d |
648d
|
28/29 |
581d |
d6c1b3599b2f
jfs: Fix uaf in dbFreeBits
|
|
WARNING in __dev_queue_xmit (4)
net
|
-1 |
C |
|
|
387 |
583d |
629d
|
28/29 |
581d |
9d301de12da6
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
|
|
BUG: corrupted list in gfs2_fill_super
gfs2
|
22 |
C |
done |
|
8527 |
608d |
724d
|
28/29 |
581d |
6cb9df81a2c4
gfs2: fix double destroy_workqueue error
|
|
WARNING in hsr_fill_frame_info
net
|
-1 |
C |
error |
|
80 |
606d |
635d
|
28/29 |
581d |
430d67bdcb04
net: hsr: Use the seqnr lock for frames received via interlink port.
|
|
KMSAN: uninit-value in ocfs2_get_block
ocfs2
|
7 |
C |
|
|
5 |
613d |
609d
|
28/29 |
581d |
2af148ef8549
ocfs2: fix uninit-value in ocfs2_get_block()
|
|
memory leak in corrupted (2)
mm
exfat
|
3 |
syz |
|
|
432 |
619d |
785d
|
28/29 |
581d |
c290fe508eee
exfat: resolve memory leak from exfat_create_upcase_table()
|
|
KMSAN: kernel-infoleak in raw_ioctl (2)
usb
|
9 |
C |
|
|
18201 |
606d |
672d
|
28/29 |
581d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
WARNING in vmx_handle_exit
kvm-x86
|
-1 |
C |
error |
|
5 |
611d |
784d
|
28/29 |
581d |
3f6821aa147b
KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
|
|
WARNING in fscrypt_fname_siphash
ext4
fscrypt
|
-1 |
C |
unreliable |
|
32 |
633d |
727d
|
28/29 |
581d |
985b67cd8639
ext4: filesystems without casefold feature cannot be mounted with siphash
|
|
kernel BUG in new_curseg
f2fs
|
-1 |
C |
|
|
8 |
612d |
625d
|
28/29 |
581d |
65a6ce4726c2
f2fs: fix to don't panic system for no free segment fault injection
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_putcs (3)
fbdev
btrfs
|
10 |
C |
|
|
4 |
611d |
624d
|
28/29 |
581d |
5b97eebcce1b
fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
|
|
general protection fault in smack_log_callback
audit
|
10 |
C |
done |
|
12 |
609d |
614d
|
28/29 |
581d |
8a23c9e1ba46
selinux,smack: properly reference the LSM blob in security_watch_key()
|
|
WARNING in sock_map_close (2)
bpf
net
|
-1 |
C |
done |
|
3 |
643d |
642d
|
28/29 |
581d |
1461f5a3d810
l2tp: avoid overriding sk->sk_user_data
|
|
KASAN: null-ptr-deref Write in f2fs_stop_gc_thread
f2fs
|
22 |
C |
done |
|
5 |
624d |
671d
|
28/29 |
581d |
c7f114d864ac
f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
|
|
KMSAN: kernel-usb-infoleak in usbtmc_write
usb
|
9 |
C |
|
|
167 |
606d |
671d
|
28/29 |
581d |
625fa77151f0
USB: usbtmc: prevent kernel-usb-infoleak
|
|
INFO: task hung in uevent_show
usb
|
1 |
C |
done |
|
9704 |
652d |
713d
|
28/29 |
581d |
9313d139aa25
usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
|
|
WARNING: suspicious RCU usage in bch2_snapshot_tree_oldest_subvol
fs
|
4 |
C |
|
|
21 |
605d |
616d
|
28/29 |
581d |
39c3aad43f6f
bcachefs: Hold read lock in bch2_snapshot_tree_oldest_subvol()
|
|
general protection fault in __copy_super
fs
|
2 |
C |
done |
|
5 |
610d |
613d
|
28/29 |
581d |
40d40c6bea19
bcachefs: assign return error when iterating through layout
|
|
KASAN: slab-use-after-free Read in unix_stream_read_actor (2)
net
|
19 |
C |
inconclusive |
|
4 |
634d |
629d
|
28/29 |
581d |
5aa57d9f2d53
af_unix: Don't return OOB skb in manage_oob().
|
|
KASAN: slab-use-after-free Read in lockref_get_not_dead (2)
fs
|
19 |
syz |
error |
|
1 |
632d |
628d
|
28/29 |
581d |
4e32c25b58b9
libfs: fix get_stashed_dentry()
|
|
UBSAN: shift-out-of-bounds in ocfs2_fill_super
ocfs2
|
-1 |
C |
|
|
199 |
582d |
650d
|
28/29 |
581d |
7f86b2942791
ocfs2: fix shift-out-of-bounds UBSAN bug in ocfs2_verify_volume()
|
|
WARNING: lock held when returning to user space in ethnl_act_cable_test
net
|
4 |
C |
done |
|
43 |
637d |
639d
|
28/29 |
581d |
3d6a0c4f4552
net: fix unreleased lock in cable test
|
|
BUG: unable to handle kernel paging request in bpf_prog_ADDR (3)
bpf
net
|
8 |
C |
done |
|
6 |
683d |
682d
|
28/29 |
581d |
92de36080c93
bpf: Fail verification for sign-extension of packet data/data_end/data_meta
|
|
WARNING in iopt_map_pages
iommu
|
-1 |
C |
error |
|
3 |
636d |
716d
|
28/29 |
581d |
8f6887349b2f
iommufd: Protect against overflow of ALIGN() during iova allocation
|
|
KASAN: slab-use-after-free Read in btrfs_cleanup_defrag_inodes
btrfs
|
19 |
C |
|
|
266 |
612d |
617d
|
28/29 |
581d |
7f1b63f981b8
btrfs: fix use-after-free on rbtree that tracks inodes for auto defrag
|
|
WARNING in ethnl_req_get_phydev
net
|
-1 |
C |
done |
|
73 |
637d |
639d
|
28/29 |
581d |
cff69f72d333
ethtool: pse-pd: move pse validation into set
|
|
possible deadlock in hfsplus_file_extend
hfs
|
4 |
C |
error |
done |
31659 |
589d |
1278d
|
28/29 |
582d |
be4edd1642ee
hfsplus: fix to avoid false alarm of circular locking
|
|
WARNING: ODEBUG bug in ext4_fill_super (4)
ext4
|
-1 |
C |
|
|
6 |
612d |
706d
|
28/29 |
582d |
0ce160c5bdb6
ext4: fix timer use-after-free on failed mount
|
|
WARNING in input_mt_init_slots
input
|
-1 |
C |
inconclusive |
|
14301 |
652d |
1962d
|
28/29 |
582d |
99d3bf5f7377
Input: MT - limit max slots
206f533a0a7c
Input: uinput - reject requests with unreasonable number of slots
|
|
INFO: rcu detected stall in neigh_timer_handler (8)
net
|
1 |
C |
done |
done |
72 |
653d |
713d
|
28/29 |
582d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
INFO: rcu detected stall in __mod_timer (5)
usb
|
1 |
C |
error |
done |
10 |
659d |
723d
|
28/29 |
582d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
possible deadlock in touch_wq_lockdep_map
usb
|
4 |
C |
|
|
1208 |
605d |
801d
|
28/29 |
600d |
ccbde4b128ef
char: xillybus: Don't destroy workqueue from work item running on it
|
|
kernel BUG in bch2_lru_change (2)
fs
|
-1 |
C |
|
|
2 |
649d |
649d
|
28/29 |
600d |
9482f3b05332
bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru
|
|
WARNING in bch2_fs_journal_stop
fs
|
-1 |
C |
done |
|
1463 |
647d |
679d
|
28/29 |
600d |
7f2de6947f92
bcachefs: Fix warning in bch2_fs_journal_stop()
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u33:NUM[NUM]
bluetooth
|
-1 |
C |
|
|
13 |
656d |
669d
|
28/29 |
600d |
c531e63871c0
Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
|
|
general protection fault in reuseport_add_sock (3)
net
|
2 |
C |
done |
|
3 |
667d |
666d
|
28/29 |
600d |
9ab0faa7f9ff
sctp: Fix null-ptr-deref in reuseport_add_sock().
|
|
KMSAN: uninit-value in line6_midibuf_read
usb
sound
|
7 |
C |
|
|
357 |
609d |
672d
|
28/29 |
600d |
15b7a03205b3
ALSA: line6: Fix racy access to midibuf
|
|
kernel BUG in bch2_journal_replay
fs
|
-1 |
C |
done |
|
3 |
644d |
715d
|
28/29 |
600d |
cab18be6957b
bcachefs: Fix replay_now_at() assert
|
|
BUG: stack guard page was hit in vsock_bpf_recvmsg
net
virt
|
-1 |
C |
done |
|
6 |
655d |
655d
|
28/29 |
600d |
69139d2919dd
vsock: fix recursive ->recvmsg calls
|
|
KMSAN: uninit-value in bch2_alloc_v4_validate
fs
|
7 |
C |
|
|
5 |
644d |
643d
|
28/29 |
600d |
8ed823b19214
bcachefs: Fix compat issue with old alloc_v4 keys
|
|
KMSAN: uninit-value in pick_link
squashfs
|
7 |
C |
|
|
9 |
660d |
665d
|
28/29 |
600d |
810ee43d9cd2
Squashfs: sanity check symbolic link size
|
|
WARNING in kvm_recalculate_apic_map
kvm-x86
|
-1 |
C |
done |
|
23 |
651d |
687d
|
28/29 |
600d |
4b7c3f6d04bd
KVM: x86: Make x2APIC ID 100% readonly
|
|
WARNING in __bch2_fsck_err
fs
|
-1 |
C |
|
|
200 |
602d |
649d
|
28/29 |
600d |
075cabf324c3
bcachefs: Fix forgetting to pass trans to fsck_err()
|
|
possible deadlock in __kernfs_remove
kernfs
|
4 |
C |
|
|
438 |
658d |
701d
|
28/29 |
600d |
15fffc6a5624
driver core: Fix uevent_show() vs driver detach race
|
|
KASAN: slab-use-after-free Read in kcm_release
net
|
19 |
C |
|
|
2 |
709d |
749d
|
28/29 |
600d |
807067bf014d
kcm: Serialise kcm_sendmsg() for the same socket.
|
|
KASAN: slab-out-of-bounds Write in bch2_dev_journal_init
fs
|
21 |
C |
|
|
2 |
646d |
646d
|
28/29 |
600d |
bdbdd4759f08
bcachefs: Fix missing validation in bch2_sb_journal_v2_validate()
|
|
kernel BUG in binder_inc_ref_for_node
kernel
|
-1 |
C |
error |
|
16721 |
653d |
683d
|
28/29 |
600d |
11512c197d38
binder: fix descriptor lookup for context manager
|
|
WARNING in skb_warn_bad_offload (5)
net
|
-1 |
C |
done |
|
18 |
647d |
680d
|
28/29 |
600d |
30b03f2a0592
udp: Fall back to software USO if IPv6 extension headers are present
|
|
KASAN: slab-out-of-bounds Read in cougar_report_fixup
input
usb
|
17 |
C |
|
|
31 |
631d |
665d
|
28/29 |
600d |
a6e9c391d45b
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
|
|
WARNING: bad unlock balance in btrfs_direct_write
btrfs
|
4 |
C |
done |
|
235 |
657d |
663d
|
28/29 |
600d |
e0391e92f9ab
btrfs: fix double inode unlock for direct IO sync writes
|
|
WARNING in discard_new_inode
fs
|
-1 |
C |
|
|
3 |
649d |
649d
|
28/29 |
600d |
99c87fe0f584
bcachefs: fix incorrect i_state usage
|
|
kernel BUG in bch2_sort_keys
fs
|
-1 |
C |
error |
|
3 |
727d |
751d
|
27/29 |
628d |
5dfd3746b6c4
bcachefs: Fix needs_whiteout BUG_ON() in bkey_sort()
|
|
possible deadlock in bch2_btree_roots_to_journal_entries
exfat
|
4 |
C |
done |
|
29 |
689d |
722d
|
27/29 |
635d |
1841027c7de4
bcachefs: bch2_gc_btree() should not use btree_root_lock
|
|
possible deadlock in bch2_gc_mark_key
fs
|
4 |
C |
done |
|
86 |
653d |
729d
|
27/29 |
635d |
1841027c7de4
bcachefs: bch2_gc_btree() should not use btree_root_lock
|
|
possible deadlock in __mmap_lock_do_trace_start_locking
mm
|
4 |
C |
done |
done |
30 |
667d |
761d
|
27/29 |
636d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
BUG: unable to handle kernel paging request in list_lru_add
mm
|
10 |
C |
done |
done |
11367 |
683d |
995d
|
27/29 |
637d |
aacd897d4d75
Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT"
|
|
WARNING in __replicas_deltas_realloc
fs
|
-1 |
C |
|
|
9 |
655d |
678d
|
27/29 |
637d |
1d16c605cc55
bcachefs: Disk space accounting rewrite
|
|
kernel BUG in bch2_fs_journal_stop
fs
|
-1 |
C |
done |
|
4370 |
651d |
743d
|
27/29 |
637d |
600b8be5e747
bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning
|
|
kernel BUG in __replicas_entry_idx
fs
|
-1 |
C |
done |
unreliable |
3 |
733d |
736d
|
27/29 |
638d |
8bb8d683a401
bcachefs: Delete journal-buf-sharded old style accounting
|
|
WARNING in bch2_fs_usage_read_one
f2fs
|
-1 |
C |
done |
|
18 |
749d |
750d
|
27/29 |
638d |
8bb8d683a401
bcachefs: Delete journal-buf-sharded old style accounting
|
|
WARNING: refcount bug in sk_common_release
net
|
13 |
C |
|
|
9 |
663d |
678d
|
27/29 |
638d |
2fe5273f149c
net/smc: prevent UAF in inet_create()
|
|
WARNING: refcount bug in inet_create
net
|
13 |
C |
done |
|
10 |
665d |
692d
|
27/29 |
638d |
2fe5273f149c
net/smc: prevent UAF in inet_create()
|
|
kernel panic: not locked: inodes NUM:NUM:NUM cached
fs
|
2 |
C |
|
|
2 |
722d |
732d
|
27/29 |
638d |
385f0c05d670
bcachefs: kill key cache arg to bch2_assert_pos_locked()
|
|
BUG: MAX_LOCK_DEPTH too low! (4)
fs
|
-1 |
C |
error |
|
1364 |
652d |
749d
|
27/29 |
639d |
375476c41405
bcachefs: Add lockdep support for btree node locks
|
|
WARNING in bch2_fs_ioctl
fs
|
-1 |
C |
done |
|
36 |
652d |
714d
|
27/29 |
642d |
d293ece10810
bcachefs: Fix shutdown ordering
|
|
kernel panic: bch_dev->ref underflow, last put: bch2_get_next_dev
fs
|
2 |
C |
done |
|
21 |
732d |
742d
|
27/29 |
642d |
9667214b30ef
bcachefs: Fix ref in trans_mark_dev_sbs() error path
|
|
kernel BUG in btrfs_folio_end_all_writers
btrfs
|
-1 |
C |
done |
|
102 |
661d |
673d
|
27/29 |
642d |
478574370bef
btrfs: make cow_file_range_inline() honor locked_page on error
|
|
KMSAN: uninit-value in profile_hits (3)
kernel
|
19 |
C |
|
|
1529 |
668d |
882d
|
27/29 |
642d |
7c51f7bbf057
profiling: remove prof_cpu_mask
|
|
KASAN: stack-out-of-bounds Read in xdp_do_check_flushed
bpf
net
|
17 |
C |
done |
|
127 |
663d |
683d
|
27/29 |
642d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
KMSAN: uninit-value in io_req_task_work_add_remote
io-uring
|
7 |
C |
|
|
10 |
670d |
672d
|
27/29 |
642d |
0db4618e8fab
io_uring/msg_ring: fix uninitialized use of target_req->flags
|
|
general protection fault in __dev_flush
net
bpf
|
19 |
C |
|
|
35 |
663d |
677d
|
27/29 |
642d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
KMSAN: uninit-value in tcf_ct_flow_table_get
net
|
7 |
C |
|
|
603 |
663d |
671d
|
27/29 |
642d |
2191a54f6322
sched: act_ct: take care of padding in struct zones_ht_key
|
|
KASAN: slab-use-after-free Read in bq_xmit_all
bpf
net
|
19 |
C |
done |
|
29 |
663d |
677d
|
27/29 |
642d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
general protection fault in __xsk_map_flush
net
bpf
|
19 |
C |
done |
|
26 |
663d |
680d
|
27/29 |
642d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
general protection fault in __cpu_map_flush
bpf
net
|
10 |
C |
inconclusive |
|
25 |
663d |
677d
|
27/29 |
642d |
9da49aa80d68
tun: Add missing bpf_net_ctx_clear() in do_xdp_generic()
|
|
kernel BUG in ext4_write_inline_data
ext4
|
-1 |
C |
error |
|
36 |
681d |
1167d
|
27/29 |
643d |
5c099c4fdc43
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
|
|
kernel BUG in f2fs_vm_page_mkwrite
f2fs
|
-1 |
C |
error |
done |
12 |
692d |
719d
|
27/29 |
644d |
a8eb3de28e7a
f2fs: fix return value of f2fs_convert_inline_inode()
|
|
possible deadlock in __mmap_lock_do_trace_released
mm
|
4 |
C |
done |
done |
5 |
676d |
693d
|
27/29 |
645d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
WARNING in __hci_cmd_sync_sk
bluetooth
|
-1 |
syz |
|
|
36 |
671d |
687d
|
27/29 |
648d |
f1a8f402f13f
Bluetooth: L2CAP: Fix deadlock
|
|
WARNING in __btrfs_free_extent (2)
btrfs
|
-1 |
C |
done |
|
118 |
651d |
702d
|
27/29 |
648d |
a776bf5f3c23
btrfs: slightly loosen the requirement for qgroup removal
|
|
divide error in tcp_rcv_space_adjust (3)
net
|
2 |
C |
done |
|
3 |
755d |
756d
|
27/29 |
650d |
94062790aedb
UPSTREAM: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
|
|
KASAN: slab-use-after-free Read in lru_add_fn
nilfs
mm
|
19 |
C |
inconclusive |
|
68 |
699d |
748d
|
27/29 |
650d |
49ae997f8f0d
nilfs2: add missing check for inode numbers on directory entries
nilfs2: add missing check for inode numbers on directory entries
|
|
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (5)
btrfs
|
-1 |
C |
|
|
931 |
651d |
681d
|
27/29 |
650d |
375476c41405
bcachefs: Add lockdep support for btree node locks
|
|
BUG: corrupted list in __folio_undo_large_rmappable
mm
|
8 |
C |
error |
|
36 |
686d |
685d
|
27/29 |
651d |
1390a3334a48
mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio
|
|
KMSAN: uninit-value in hfs_revalidate_dentry
hfs
|
7 |
C |
|
|
11669 |
711d |
1279d
|
27/29 |
651d |
26a2ed107929
hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
|
|
WARNING: suspicious RCU usage in bch2_bucket_ref_update
fs
|
4 |
C |
done |
|
5 |
687d |
686d
|
27/29 |
651d |
6f692b1672bd
bcachefs: Fix RCU splat
|
|
inconsistent lock state in valid_state (3)
mm
|
4 |
C |
error |
|
376 |
662d |
711d
|
27/29 |
651d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
kernel BUG in f2fs_evict_inode (2)
f2fs
|
-1 |
C |
error |
|
575 |
651d |
930d
|
27/29 |
651d |
192b8fb8d1c8
f2fs: fix to don't dirty inode for readonly filesystem
|
|
general protection fault in dev_map_redirect
bpf
net
|
2 |
C |
|
|
362 |
687d |
694d
|
27/29 |
651d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
stack segment fault in dev_hash_map_redirect
bpf
net
|
2 |
C |
done |
|
29 |
687d |
694d
|
27/29 |
651d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
general protection fault in dtInsertEntry
jfs
|
17 |
C |
inconclusive |
|
501 |
653d |
778d
|
27/29 |
651d |
ce6dede912f0
jfs: fix null ptr deref in dtInsertEntry
|
|
WARNING in __fortify_report
ext4
|
-1 |
C |
|
|
251 |
700d |
734d
|
27/29 |
651d |
be27cd64461c
ext4: use memtostr_pad() for s_volume_name
|
|
UBSAN: array-index-out-of-bounds in diFree
jfs
|
15 |
C |
inconclusive |
|
226 |
653d |
763d
|
27/29 |
651d |
f73f969b2eb3
jfs: Fix array-index-out-of-bounds in diFree
|
|
WARNING in __ip6_make_skb (2)
net
|
-1 |
C |
done |
|
104 |
715d |
730d
|
27/29 |
651d |
73451e9aaa24
net: validate SO_TXTIME clockid coming from userspace
|
|
KMSAN: uninit-value in ext4_inlinedir_to_tree
ext4
|
7 |
C |
|
|
267 |
711d |
757d
|
27/29 |
651d |
8dc9c3da79c8
ext4: fix uninitialized variable in ext4_inlinedir_to_tree
|
|
KASAN: slab-use-after-free Read in l2tp_tunnel_del_work
net
|
19 |
C |
done |
|
99 |
686d |
701d
|
27/29 |
651d |
f8ad00f3fb2a
l2tp: fix possible UAF when cleaning up tunnels
|
|
BUG: unable to handle kernel paging request in do_split
ext4
|
8 |
C |
inconclusive |
|
17 |
684d |
697d
|
27/29 |
651d |
50ea741def58
ext4: check dot and dotdot of dx_root before making dir indexed
f9ca51596bbf
ext4: make sure the first directory block is not a hole
|
|
WARNING in __cfg80211_connect_result (2)
wireless
|
-1 |
C |
error |
|
232 |
664d |
730d
|
27/29 |
651d |
b5d14b0c6716
wifi: virt_wifi: avoid reporting connection success with wrong SSID
|
|
KASAN: slab-use-after-free Read in sanity_check_extent_cache
f2fs
|
19 |
C |
done |
|
5 |
714d |
757d
|
27/29 |
651d |
d7409b05a64f
f2fs: fix to cover read extent cache access with lock
|
|
possible deadlock in try_to_wake_up (5)
mm
|
4 |
C |
|
|
88 |
654d |
726d
|
27/29 |
651d |
7d6be67cfdd4
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
BUG: sleeping function called from invalid context in bch2_printbuf_make_room
fs
|
5 |
C |
done |
|
27 |
675d |
673d
|
27/29 |
651d |
737759fc098f
bcachefs: Fix printbuf usage while atomic
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG
jfs
|
-1 |
C |
unreliable |
|
5 |
689d |
704d
|
27/29 |
651d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
kernel BUG in __block_write_begin_int (2)
nilfs
|
-1 |
C |
inconclusive |
|
2 |
688d |
753d
|
27/29 |
651d |
a9e1ddc09ca5
nilfs2: fix kernel bug on rename operation of broken directory
|
|
possible deadlock in hfsplus_file_truncate
hfs
|
4 |
C |
error |
|
51400 |
651d |
1278d
|
27/29 |
651d |
be4edd1642ee
hfsplus: fix to avoid false alarm of circular locking
|
|
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid (2)
fs
|
-1 |
C |
|
|
117 |
652d |
716d
|
27/29 |
651d |
a0bd30e4ea9d
bcachefs: Fix shift greater than integer size
|
|
KMSAN: uninit-value in ppp_async_push (3)
ppp
|
7 |
C |
|
|
4 |
735d |
691d
|
27/29 |
651d |
f2aeb7306a89
ppp: reject claimed-as-LCP but actually malformed packets
|
|
memory leak in _r8712_init_xmit_priv (2)
usb
staging
|
3 |
C |
|
|
2 |
904d |
919d
|
27/29 |
651d |
9ed3e0a0e1b1
staging: rtl8712: remove unnecessary alignment of pxmitpriv->pxmitbuf
|
|
KMSAN: uninit-value in hfsplus_listxattr (2)
hfs
|
7 |
C |
|
|
6 |
754d |
778d
|
27/29 |
651d |
0570730c1630
hfsplus: fix uninit-value in copy_name
|
|
stack segment fault in bpf_xdp_redirect
bpf
net
|
2 |
C |
|
|
181 |
687d |
694d
|
27/29 |
651d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
general protection fault in __block_commit_write
ext4
|
8 |
C |
inconclusive |
|
7 |
694d |
842d
|
27/29 |
651d |
83f4414b8f84
ext4: sanity check for NULL pointer after ext4_force_shutdown
|
|
general protection fault in tomoyo_socket_bind_permission
io-uring
|
2 |
C |
|
|
4 |
683d |
683d
|
27/29 |
651d |
ad00e629145b
io_uring/net: check socket is valid in io_bind()/io_listen()
|
|
KMSAN: uninit-value in copy_name
hfs
|
7 |
C |
|
|
300 |
711d |
739d
|
27/29 |
651d |
0570730c1630
hfsplus: fix uninit-value in copy_name
|
|
kernel BUG in btrfs_free_tree_block
btrfs
|
-1 |
C |
error |
|
150 |
652d |
1338d
|
27/29 |
651d |
bb3868033a4c
btrfs: do not BUG_ON() when freeing tree block after error
|
|
WARNING in __kvm_gpc_refresh (2)
kvm
|
-1 |
C |
error |
|
2 |
714d |
728d
|
27/29 |
651d |
ebbdf37ce9ab
KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN
|
|
stack segment fault in cpu_map_redirect
bpf
net
|
2 |
C |
done |
|
11 |
687d |
686d
|
27/29 |
651d |
fecef4cd42c6
tun: Assign missing bpf_net_context.
|
|
KASAN: slab-use-after-free Write in l2tp_session_delete
net
|
22 |
C |
done |
|
1286 |
681d |
700d
|
27/29 |
651d |
f8ad00f3fb2a
l2tp: fix possible UAF when cleaning up tunnels
|
|
KMSAN: uninit-value in vsock_assign_transport (2)
net
virt
|
7 |
C |
|
|
14 |
712d |
768d
|
27/29 |
651d |
1e1fdcbdde3b
vhost/vsock: always initialize seqpacket_allow
|
|
WARNING in __ip_make_skb
net
|
-1 |
C |
done |
|
54 |
715d |
729d
|
27/29 |
651d |
73451e9aaa24
net: validate SO_TXTIME clockid coming from userspace
|
|
WARNING in btusb_submit_intr_urb/usb_submit_urb
bluetooth
usb
|
-1 |
C |
error |
|
2 |
689d |
700d
|
27/29 |
651d |
a368ecde8a50
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
|
|
possible deadlock in attr_data_get_block
ntfs3
|
4 |
C |
error |
|
3111 |
651d |
1318d
|
27/29 |
651d |
d57431c6f511
fs/ntfs3: Do copy_to_user out of run_lock
|
|
general protection fault in __io_remove_buffers
io-uring
|
2 |
C |
done |
|
3 |
679d |
678d
|
27/29 |
651d |
bcc87d978b83
io_uring: fix error pbuf checking
|
|
UBSAN: shift-out-of-bounds in parse_audio_unit
sound
|
-1 |
C |
error |
|
3 |
683d |
681d
|
27/29 |
651d |
2f38cf730cae
ALSA: usb: Fix UBSAN warning in parse_audio_unit()
|
|
KMSAN: uninit-value in udf_update_tag
udf
|
7 |
C |
|
|
877 |
714d |
881d
|
27/29 |
651d |
27ab33854873
udf: Fix bogus checksum computation in udf_rename()
|
|
general protection fault in dequeue_hugetlb_folio_nodemask (2)
mm
|
2 |
C |
done |
|
14 |
708d |
715d
|
27/29 |
651d |
09a533622842
mm/hugetlb: guard dequeue_hugetlb_folio_nodemask against NUMA_NO_NODE uses
|
|
WARNING: lock held when returning to user space in ns_ioctl
fs
|
4 |
C |
done |
|
147 |
667d |
678d
|
27/29 |
651d |
280e36f0d5b9
nsfs: use cleanup guard
|
|
general protection fault in coalesce_fill_reply
net
|
2 |
C |
done |
|
27 |
694d |
699d
|
27/29 |
651d |
74d6529b78f7
net: ethtool: Fix the panic caused by dev being null when dumping coalesce
|
|
kernel BUG in submit_bh_wbc (2)
udf
|
-1 |
C |
done |
|
123 |
656d |
762d
|
27/29 |
651d |
a90d4471146d
udf: Avoid using corrupted block bitmap buffer
|
|
WARNING in bpf_lwt_seg6_adjust_srh
net
bpf
|
-1 |
C |
done |
|
30 |
686d |
700d
|
27/29 |
651d |
c13fda93aca1
bpf: Remove tst_run from lwt_seg6local_prog_ops.
|
|
kernel BUG in f2fs_write_inline_data
f2fs
|
-1 |
C |
inconclusive |
|
41 |
703d |
757d
|
27/29 |
651d |
a8eb3de28e7a
f2fs: fix return value of f2fs_convert_inline_inode()
fc01008c92f4
f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
|
|
BUG: sleeping function called from invalid context in vma_alloc_folio_noprof
mm
|
5 |
C |
done |
|
1 |
681d |
680d
|
27/29 |
651d |
280e36f0d5b9
nsfs: use cleanup guard
|
|
UBSAN: shift-out-of-bounds in try_to_shrink_lruvec
mm
|
-1 |
C |
done |
|
4 |
727d |
728d
|
27/29 |
651d |
462966dc7d70
mm: vmscan: reset sc->priority on retry
|
|
BUG: unable to handle kernel NULL pointer dereference in path_from_stashed
fs
|
10 |
C |
|
|
23 |
672d |
675d
|
27/29 |
651d |
f60d38cb02d0
pidfs: when time ns disabled add check for ioctl
|
|
INFO: rcu detected stall in security_file_ioctl (8)
tomoyo
|
1 |
C |
error |
done |
8 |
694d |
733d
|
26/29 |
658d |
e63413418088
net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
|
|
KASAN: slab-use-after-free Read in nf_tables_trans_destroy_work
netfilter
|
19 |
C |
error |
|
147 |
687d |
694d
|
26/29 |
658d |
9f6958ba2e90
netfilter: nf_tables: unconditionally flush pending work before notifier
|
|
KASAN: slab-out-of-bounds Read in btrfs_qgroup_inherit
btrfs
|
17 |
C |
done |
|
2 |
721d |
717d
|
26/29 |
658d |
724d8042cef8
btrfs: always do the basic checks for btrfs_qgroup_inherit structure
|
|
general protection fault in l2cap_sock_recv_cb
bluetooth
|
8 |
C |
inconclusive |
|
8 |
692d |
719d
|
26/29 |
658d |
89e856e124f9
bluetooth/l2cap: sync sock recv cb and release
|
|
WARNING in filemap_unaccount_folio
nilfs
|
-1 |
C |
inconclusive |
|
13 |
700d |
735d
|
26/29 |
658d |
49ae997f8f0d
nilfs2: add missing check for inode numbers on directory entries
|
|
BUG: soft lockup in mld_ifc_work (2)
wireless
|
1 |
C |
|
|
2 |
746d |
758d
|
26/29 |
658d |
d1cba2ea8121
wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
|
|
WARNING in hci_conn_del
bluetooth
|
-1 |
C |
done |
|
10497 |
687d |
819d
|
26/29 |
658d |
015d79c96d62
Bluetooth: Ignore too large handle values in BIG
1cc18c2ab2e8
bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
|
|
WARNING in __mptcp_clean_una
mptcp
|
-1 |
C |
done |
done |
248 |
705d |
830d
|
26/29 |
662d |
fb7a0d334894
mptcp: ensure snd_nxt is properly initialized on connect
|
|
WARNING in implement
input
usb
|
-1 |
C |
error |
done |
960 |
714d |
2444d
|
26/29 |
664d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
|
|
INFO: rcu detected stall in __run_timer_base
usb
|
1 |
C |
done |
done |
10 |
705d |
773d
|
26/29 |
664d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
KMSAN: uninit-value in io_req_cqe_overflow (3)
io-uring
|
7 |
C |
|
|
16 |
711d |
712d
|
26/29 |
670d |
18414a4a2eab
io_uring/net: assign kmsg inq/flags before buffer selection
|
|
WARNING in unmap_page_range (3)
mm
|
-1 |
C |
|
|
169 |
789d |
799d
|
26/29 |
676d |
f8572367eaff
mm/memory: fix missing pte marker for !page on pte zaps
|
|
kernel BUG in bch2_ioctl_fsck_online
fs
|
-1 |
C |
done |
|
3 |
707d |
703d
|
26/29 |
682d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
WARNING in __virt_to_phys (4)
fs
|
-1 |
C |
|
|
2 |
696d |
692d
|
26/29 |
682d |
9bd01500e4d8
bcachefs: Fix freeing of error pointers
|
|
UBSAN: shift-out-of-bounds in bch2_btree_node_read_done
fs
|
-1 |
C |
|
|
3 |
710d |
733d
|
26/29 |
684d |
9e7cfb35e266
bcachefs: Check for invalid btree IDs
|
|
INFO: rcu detected stall in sys_wait4 (4)
mm
|
1 |
C |
done |
done |
2 |
742d |
775d
|
26/29 |
684d |
fb66df20a720
net/sched: taprio: extend minimum interval restriction to entire cycle too
|
|
INFO: task hung in journal_quiesce
fs
|
1 |
syz |
|
|
76 |
697d |
726d
|
26/29 |
686d |
89d21b69b4f8
bcachefs: Add missing bch2_journal_do_writes() call
|
|
INFO: task hung in nilfs_segctor_thread (2)
nilfs
|
1 |
C |
inconclusive |
|
98 |
718d |
828d
|
26/29 |
686d |
7373a51e7998
nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
|
|
WARNING in bch2_fs_read_write_early
fs
|
-1 |
C |
|
|
35 |
704d |
711d
|
26/29 |
686d |
1ba44217f825
bcachefs: delete_dead_snapshots() doesn't need to go RW
|
|
WARNING in hid_output_report
usb
input
|
-1 |
C |
error |
|
3 |
731d |
751d
|
26/29 |
686d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
fba383985354
net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
|
|
INFO: task hung in rfkill_global_led_trigger_worker (2)
net
nfc
|
1 |
C |
error |
|
1362 |
687d |
1288d
|
26/29 |
686d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
KASAN: slab-out-of-bounds Read in ea_get (2)
jfs
|
17 |
C |
|
|
33 |
689d |
753d
|
26/29 |
686d |
7c55b78818cf
jfs: xattr: fix buffer overflow for invalid xattr
|
|
INFO: task hung in wdm_release
usb
|
1 |
C |
error |
|
1 |
710d |
706d
|
26/29 |
686d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
WARNING in rdev_scan
wireless
|
-1 |
C |
done |
|
3 |
710d |
714d
|
26/29 |
686d |
0941772342d5
wifi: cfg80211: wext: set ssids=NULL for passive scans
|
|
memory leak in nr_create (3)
hams
|
3 |
C |
|
|
9 |
888d |
1078d
|
26/29 |
686d |
0b9130247f3b
netrom: Fix a memory leak in nr_heartbeat_expiry()
|
|
INFO: rcu detected stall in raw_ioctl
usb
|
1 |
C |
|
|
49 |
693d |
939d
|
26/29 |
686d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu
fs
|
19 |
C |
|
|
2 |
704d |
700d
|
26/29 |
686d |
211c581de28e
bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu
|
|
KMSAN: uninit-value in asus_report_fixup
input
usb
|
17 |
C |
done |
|
35 |
708d |
732d
|
26/29 |
686d |
89e1ee118d6f
hid: asus: asus_report_fixup: fix potential read out of bounds
|
|
UBSAN: shift-out-of-bounds in bch2_blacklist_entries_gc
fs
|
-1 |
C |
|
|
45 |
700d |
700d
|
26/29 |
686d |
472237b69d07
bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc
|
|
INFO: task hung in rtnetlink_rcv_msg
net
|
1 |
C |
inconclusive |
inconclusive |
1970 |
687d |
2650d
|
26/29 |
686d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
kernel BUG in bch2_journal_res_get
fs
|
-1 |
C |
|
|
2 |
716d |
712d
|
26/29 |
686d |
dbf4d79b7fc7
bcachefs: Fix early init error path in journal code
|
|
INFO: task hung in addrconf_verify_work (8)
net
|
1 |
C |
error |
|
1294 |
686d |
890d
|
26/29 |
686d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
kernel BUG in bch2_lru_change
fs
|
-1 |
C |
done |
|
4 |
704d |
719d
|
26/29 |
686d |
cff07e2739d8
bcachefs: Guard against overflowing LRU_TIME_BITS
|
|
INFO: task hung in switchdev_deferred_process_work (2)
net
|
1 |
C |
inconclusive |
|
1226 |
687d |
2129d
|
26/29 |
686d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
possible deadlock in ovl_copy_up_flags
overlayfs
|
4 |
C |
done |
|
7 |
712d |
734d
|
26/29 |
686d |
db03d39053a9
ovl: fix copy-up in tmpfile
|
|
possible deadlock in console_flush_all (2)
trace
bpf
|
4 |
C |
error |
|
52996 |
687d |
962d
|
26/29 |
686d |
ae01e52da244
serial: drop debugging WARN_ON_ONCE() from uart_write()
|
|
kernel BUG in __vma_reservation_common
mm
|
-1 |
C |
error |
|
8 |
717d |
751d
|
26/29 |
686d |
8daf9c702ee7
mm/hugetlb: do not call vma_add_reservation upon ENOMEM
|
|
KMSAN: kernel-infoleak in raw_recvmsg
can
|
9 |
C |
|
|
121 |
712d |
760d
|
26/29 |
686d |
b7cdf1dd5d2a
net: can: j1939: Initialize unused data in j1939_send_one()
|
|
INFO: task hung in reg_check_chans_work (6)
wireless
|
1 |
C |
error |
|
129 |
689d |
763d
|
26/29 |
686d |
d864319871b0
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
|
|
WARNING: kmalloc bug in __snapshot_t_mut
fs
|
-1 |
C |
done |
|
10 |
697d |
727d
|
26/29 |
686d |
64cd7de998f3
bcachefs: Fix kmalloc bug in __snapshot_t_mut
|
|
WARNING in skb_ensure_writable
bpf
net
|
-1 |
C |
done |
|
2893 |
687d |
764d
|
26/29 |
686d |
2bbe3e5a2f4e
bpf: Avoid splat in pskb_pull_reason
|
|
BUG: soft lockup in hci_cmd_timeout
bluetooth
usb
|
1 |
C |
|
|
1 |
718d |
714d
|
26/29 |
686d |
22f008128625
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
|
|
WARNING in cxacru_cm/usb_submit_urb
usb
|
-1 |
C |
error |
inconclusive |
14 |
705d |
2273d
|
26/29 |
686d |
2eabb655a968
usb: atm: cxacru: fix endpoint checking in cxacru_bind()
|
|
kernel BUG in gc_bucket
fs
|
-1 |
C |
done |
|
221 |
720d |
724d
|
26/29 |
686d |
9432e90df1b8
bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket()
|
|
KASAN: slab-out-of-bounds Read in cfg80211_wext_freq
wireless
|
17 |
C |
inconclusive |
|
133 |
701d |
728d
|
26/29 |
686d |
6ef09cdc5ba0
wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
|
|
possible deadlock in __sock_map_delete
net
bpf
|
4 |
C |
|
|
14 |
728d |
773d
|
26/29 |
694d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
WARNING in geneve_xmit
net
|
-1 |
C |
done |
|
42 |
761d |
767d
|
26/29 |
705d |
d8a6213d70ac
geneve: fix header validation in geneve[6]_xmit_skb
|
|
possible deadlock in __hrtimer_run_queues (2)
kernel
|
4 |
C |
error |
done |
16 |
761d |
793d
|
26/29 |
705d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
WARNING in ieee80211_link_info_change_notify (2)
wireless
|
-1 |
C |
inconclusive |
|
8918 |
715d |
1183d
|
26/29 |
708d |
02c665f048a4
wifi: mac80211: apply mcast rate only if interface is up
|
|
general protection fault in bpf_get_attach_cookie_tracing
trace
bpf
|
2 |
C |
error |
|
7 |
720d |
751d
|
26/29 |
708d |
d0d1df8ba18a
bpf: Set run context for rawtp test_run callback
|
|
KASAN: slab-use-after-free Read in bpf_link_free (2)
bpf
|
19 |
syz |
|
|
52 |
717d |
730d
|
26/29 |
708d |
2884dc7d08d9
bpf: Fix a potential use-after-free in bpf_link_free()
|
|
WARNING in ieee80211_rx_list
wireless
|
-1 |
C |
inconclusive |
error |
3489 |
718d |
2071d
|
26/29 |
708d |
177c6ae9725d
wifi: mac80211: handle tasklet frames before stopping
|
|
WARNING in fuse_request_end
fuse
|
-1 |
C |
error |
|
3 |
735d |
746d
|
26/29 |
711d |
246014876d78
fuse: clear FR_SENT when re-adding requests into pending list
|
|
WARNING in packet_setsockopt
net
|
-1 |
C |
|
|
83 |
743d |
782d
|
26/29 |
712d |
86d43e2bf93c
af_packet: avoid a false positive warning in packet_setsockopt()
|
|
kernel BUG in dev_gro_receive
net
|
-1 |
C |
done |
|
72 |
725d |
741d
|
25/29 |
714d |
be008726d0ac
net: gro: initialize network_offset in network layer
|
|
KMSAN: uninit-value in virtqueue_add (4)
mm
|
7 |
C |
|
|
203184 |
715d |
876d
|
25/29 |
715d |
61b258b0d2f6
x86: call instrumentation hooks from copy_mc.c
|
|
KMSAN: uninit-value in nilfs_add_checksums_on_logs (2)
nilfs
|
7 |
C |
|
|
171 |
715d |
876d
|
25/29 |
715d |
61b258b0d2f6
x86: call instrumentation hooks from copy_mc.c
|
|
KMSAN: uninit-value in nci_ntf_packet (2)
net
nfc
|
7 |
C |
|
|
13 |
717d |
730d
|
25/29 |
715d |
068648aab72c
nfc/nci: Add the inconsistency check between the input data length and count
|
|
UBSAN: shift-out-of-bounds in bch2_sb_dev_has_data
fs
|
-1 |
C |
done |
|
15 |
745d |
743d
|
25/29 |
715d |
bcfbaea8e547
bcachefs: Fix shift overflows in replicas.c
|
|
inconsistent lock state in valid_state (2)
sound
|
4 |
C |
inconclusive |
|
57405 |
715d |
840d
|
25/29 |
715d |
b79491896151
dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
|
|
kernel panic: not locked: inodes NUM:ADDR:NUM cached
fs
|
2 |
C |
|
|
2 |
742d |
738d
|
25/29 |
715d |
6ce26ad376bd
bcachefs: Fix missing parens in drop_locks_do()
|
|
kernel BUG in bch2_btree_iter_verify_entry_exit
fs
|
-1 |
C |
done |
|
3 |
735d |
740d
|
25/29 |
715d |
765b8cb8acab
bcachefs: Check for subvolues with bogus snapshot/inode fields
|
|
kernel BUG in bch2_checksum
fs
|
-1 |
C |
done |
|
9 |
732d |
743d
|
25/29 |
715d |
6b74fdcc8e25
bcachefs: bch2_checksum() returns 0 for unknown checksum type
|
|
WARNING in sock_map_close
bpf
net
|
-1 |
C |
error |
|
182 |
715d |
778d
|
25/29 |
715d |
4b4647add7d3
sock_map: avoid race between sock_map_close and sk_psock_put
|
|
possible deadlock in sock_hash_delete_elem (2)
bpf
net
|
4 |
C |
|
|
1127 |
715d |
798d
|
25/29 |
715d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
KASAN: slab-use-after-free Read in p9_fid_destroy
v9fs
|
19 |
C |
|
|
13 |
730d |
811d
|
25/29 |
715d |
f89ea63f1c65
netfs, 9p: Fix race between umount and async request completion
|
|
kernel BUG in cpu_replicas_add_entry
fs
|
-1 |
C |
done |
|
11 |
726d |
744d
|
25/29 |
715d |
5fa421448d1f
bcachefs: Fix bogus verify_replicas_entry() assert
|
|
kernel BUG in __journal_res_get
ext4
|
-1 |
C |
done |
|
7 |
723d |
748d
|
25/29 |
715d |
cd3b31f9d417
bcachefs: Ensure we're RW before journalling
|
|
general protection fault in nf_tproxy_laddr4
netfilter
|
8 |
C |
error |
|
5 |
734d |
744d
|
25/29 |
715d |
21a673bddc8f
netfilter: tproxy: bail out if IP has been disabled on the device
|
|
KASAN: stack-out-of-bounds Read in __bch2_encrypt_bio
fs
|
17 |
C |
done |
|
2 |
745d |
742d
|
25/29 |
715d |
2ba24864d2f6
bcachefs: Fix stack oob in __bch2_encrypt_bio()
|
|
INFO: rcu detected stall in packet_release
net
|
1 |
C |
unreliable |
|
1 |
807d |
729d
|
25/29 |
715d |
fb66df20a720
net/sched: taprio: extend minimum interval restriction to entire cycle too
|
|
WARNING in collect_domain_accesses
lsm
|
-1 |
C |
done |
|
3 |
735d |
746d
|
25/29 |
715d |
88da52ccd66e
landlock: Fix d_parent walk
|
|
UBSAN: shift-out-of-bounds in bch2_btree_lost_data
fs
|
-1 |
C |
done |
|
3 |
741d |
740d
|
25/29 |
715d |
f108ddd467b5
bcachefs: Fix shift overflow in btree_lost_data()
|
|
KMSAN: uninit-value in p9_client_rpc (2)
v9fs
|
7 |
C |
|
|
5 |
754d |
787d
|
25/29 |
715d |
25460d6f3902
net/9p: fix uninit-value in p9_client_rpc()
|
|
WARNING: lock held when returning to user space in srcu_lock_acquire
rcu
|
4 |
C |
|
|
3 |
745d |
743d
|
25/29 |
715d |
70dd062e27e6
bcachefs: Fix btree_trans leak in bch2_readahead()
|
|
kernel panic: bch_dev->ref underflow, last put: bch2_trigger_alloc
fs
|
2 |
C |
done |
|
6 |
732d |
744d
|
25/29 |
715d |
9667214b30ef
bcachefs: Fix ref in trans_mark_dev_sbs() error path
|
|
general protection fault in __bch2_insert_snapshot_whiteouts
fs
|
8 |
C |
done |
|
65 |
730d |
743d
|
25/29 |
715d |
6d48e61364ae
bcachefs: Add missing guard in bch2_snapshot_has_children()
|
|
KASAN: slab-use-after-free Read in evict_inodes
fs
|
19 |
C |
done |
|
2 |
747d |
743d
|
25/29 |
715d |
d93ff5fa40b9
bcachefs: Fix race path in bch2_inode_insert()
|
|
INFO: task hung in nilfs_detach_log_writer
nilfs
|
1 |
C |
inconclusive |
|
125 |
734d |
1311d
|
25/29 |
715d |
eb85dace897c
nilfs2: fix potential hang in nilfs_detach_log_writer()
|
|
general protection fault in crypto_skcipher_encrypt
crypto
|
8 |
C |
error |
|
66 |
715d |
742d
|
25/29 |
715d |
c06a8b75679d
bcachefs: Fix bch2_alloc_ciphers()
|
|
INFO: rcu detected stall in snd_timer_user_release (3)
sound
|
1 |
C |
inconclusive |
|
3 |
749d |
757d
|
25/29 |
715d |
4a63bd179fa8
ALSA: timer: Set lower bound of start tick time
|
|
KMSAN: uninit-value in bch2_dirent_invalid
fs
|
7 |
C |
|
|
239 |
715d |
743d
|
25/29 |
715d |
2195b755ebd2
bcachefs: Fix unsafety in bch2_dirent_name_bytes()
|
|
kernel BUG in bch2_fs_recovery
fs
|
-1 |
C |
done |
done |
161 |
748d |
753d
|
25/29 |
715d |
7ffec9ccdc6a
bcachefs: don't free error pointers
|
|
INFO: trying to register non-static key in __timer_delete_sync (2)
net
|
-1 |
C |
|
|
45524 |
742d |
760d
|
25/29 |
718d |
3c668cef61ad
net: hsr: init prune_proxy_timer sooner
|
|
possible deadlock in nr_rt_ioctl
hams
|
4 |
C |
inconclusive |
|
8 |
724d |
752d
|
25/29 |
718d |
e03e7f20ebf7
netrom: fix possible dead-lock in nr_rt_ioctl()
|
|
WARNING in __inet_accept
net
|
-1 |
C |
done |
|
3 |
737d |
737d
|
25/29 |
720d |
26afda78cda3
UPSTREAM: net: relax socket state check at accept time.
|
|
KASAN: slab-out-of-bounds Read in f2fs_get_node_info
f2fs
|
17 |
C |
error |
|
4 |
748d |
762d
|
25/29 |
720d |
20faaf30e555
f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
|
|
general protection fault in subflow_v6_route_req
mptcp
|
2 |
C |
done |
|
2 |
751d |
751d
|
25/29 |
720d |
445c0b69c729
mptcp: fix possible NULL dereferences
|
|
WARNING in sg_remove_sfp_usercontext
scsi
|
-1 |
C |
|
|
36031 |
775d |
789d
|
25/29 |
720d |
d4e655c49f47
scsi: sg: Avoid race in error handling & drop bogus warn
|
|
KMSAN: uninit-value in __bpf_strtoull
bpf
|
7 |
C |
|
|
119 |
722d |
798d
|
25/29 |
720d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
WARNING in iomap_iter (2)
iomap
|
-1 |
C |
|
|
4 |
759d |
755d
|
25/29 |
720d |
0c12028aec83
block: refine the EOF check in blkdev_iomap_begin
|
|
KMSAN: uninit-value in trie_delete_elem
bpf
|
7 |
C |
|
|
52 |
721d |
791d
|
25/29 |
720d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
UBSAN: shift-out-of-bounds in read_one_super
fs
|
-1 |
C |
done |
|
31 |
721d |
751d
|
25/29 |
720d |
71dac2482ad3
bcachefs: BCH_SB_LAYOUT_SIZE_BITS_MAX
|
|
KMSAN: uninit-value in nci_rx_work
nfc
net
|
7 |
C |
|
|
582 |
720d |
876d
|
25/29 |
720d |
e4a87abf5885
nfc: nci: Fix uninit-value in nci_rx_work
|
|
KASAN: slab-use-after-free Read in unix_del_edges
net
|
19 |
C |
done |
|
2 |
768d |
768d
|
25/29 |
720d |
1af2dface5d2
af_unix: Don't access successor in unix_del_edges() during GC.
|
|
INFO: task hung in ext4_quota_write
ext4
|
1 |
C |
inconclusive |
|
22 |
772d |
876d
|
25/29 |
720d |
0a46ef234756
ext4: do not create EA inode under buffer lock
|
|
WARNING: kmalloc bug in bch2_dev_buckets_resize
fs
|
-1 |
C |
|
|
17 |
721d |
753d
|
25/29 |
720d |
db42549d402c
bcachefs: Add a better limit for maximum number of buckets
|
|
WARNING in mb_cache_destroy
ext4
|
-1 |
C |
done |
|
738 |
738d |
757d
|
25/29 |
720d |
0c0b4a49d3e7
ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
|
|
WARNING in __virt_to_phys (3)
fs
|
-1 |
C |
|
|
447 |
720d |
753d
|
25/29 |
720d |
7ffec9ccdc6a
bcachefs: don't free error pointers
|
|
KMSAN: uninit-value in br_dev_xmit (2)
bridge
|
7 |
C |
|
|
2 |
749d |
745d
|
25/29 |
720d |
8bd67ebb50c0
net: bridge: xmit: make sure we have at least eth header len bytes
|
|
KMSAN: uninit-value in dev_map_lookup_elem
bpf
net
|
7 |
C |
|
|
3 |
786d |
793d
|
25/29 |
720d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
BUG: sleeping function called from invalid context in console_lock (2)
serial
|
5 |
C |
inconclusive |
inconclusive |
7447 |
721d |
1814d
|
25/29 |
720d |
6bd23e0c2bb6
tty: add the option to have a tty reject a new ldisc
|
|
KMSAN: uninit-value in trie_lookup_elem
bpf
|
7 |
C |
|
|
12 |
778d |
796d
|
25/29 |
720d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
possible deadlock in kvfree_call_rcu
bpf
|
4 |
C |
|
|
1431 |
722d |
791d
|
25/29 |
720d |
59f2f841179a
bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
|
|
BUG: unable to handle kernel paging request in bch2_fs_btree_key_cache_exit
fs
|
8 |
C |
|
|
1002 |
720d |
753d
|
25/29 |
720d |
b30b70ad8bff
bcachefs: Fix early error path in bch2_fs_btree_key_cache_exit()
|
|
WARNING: suspicious RCU usage in bch2_fs_quota_read
ext4
|
4 |
C |
done |
|
24 |
721d |
751d
|
25/29 |
720d |
8060bf1d83f7
bcachefs: Fix snapshot_t() usage in bch2_fs_quota_read_inode()
|
|
KASAN: slab-out-of-bounds Write in do_handle_open
nfs
|
21 |
C |
|
|
643 |
782d |
784d
|
25/29 |
720d |
68d6f4f3fbd9
fs: Annotate struct file_handle with __counted_by() and use struct_size()
|
|
UBSAN: shift-out-of-bounds in __bch2_bkey_invalid
fs
|
-1 |
C |
done |
|
6 |
725d |
751d
|
25/29 |
720d |
2bb9600d5d47
bcachefs: Guard against unknown k.k->type in __bkey_invalid()
|
|
BUG: unable to handle kernel paging request in bpf_prog_ADDR (2)
bpf
|
8 |
C |
|
|
3 |
764d |
778d
|
25/29 |
720d |
543576ec15b1
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_downgrade_to_text
fs
|
17 |
C |
done |
|
32 |
738d |
751d
|
25/29 |
720d |
692aa7a54b2b
bcachefs: Fix sb_field_downgrade validation
|
|
KMSAN: uninit-value in array_map_lookup_elem
bpf
|
7 |
C |
|
|
10 |
776d |
796d
|
25/29 |
720d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
KMSAN: uninit-value in sock_map_delete_elem
bpf
net
|
7 |
C |
|
|
44 |
722d |
792d
|
25/29 |
720d |
e8742081db7d
bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
|
|
KASAN: slab-use-after-free Read in fsnotify
ext4
|
19 |
C |
error |
|
3 |
769d |
776d
|
25/29 |
720d |
795bb82d12a1
fsnotify: fix UAF from FS_ERROR event on a shutting down filesystem
|
|
KASAN: slab-out-of-bounds Read in bch2_sb_clean_to_text
fs
|
17 |
C |
done |
|
3 |
742d |
751d
|
25/29 |
720d |
f39055220f6f
bcachefs: Add missing validation for superblock section clean
|
|
WARNING in ar5523_cmd/usb_submit_urb
usb
wireless
|
-1 |
C |
error |
|
39 |
753d |
2309d
|
25/29 |
720d |
e120b6388d7d
wifi: ar5523: enable proper endpoint verification
|
|
WARNING in qdisc_alloc
net
|
-1 |
C |
error |
|
1069 |
743d |
757d
|
25/29 |
720d |
86735b57c905
net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
|
|
WARNING in __mark_chain_precision (4)
bpf
|
-1 |
C |
|
|
8 |
765d |
785d
|
25/29 |
720d |
1f2a74b41ea8
bpf: prevent r10 register from being marked as precise
|
|
kernel BUG in bch2_alloc_v4_invalid
fs
|
-1 |
C |
error |
|
3 |
728d |
751d
|
25/29 |
720d |
6b8cbfc3db75
bcachefs: Fix assert in bch2_alloc_v4_invalid()
|
|
KASAN: slab-out-of-bounds Read in bch2_varint_decode_fast
fs
|
17 |
C |
|
|
583 |
721d |
753d
|
25/29 |
720d |
4a8521b6bb81
bcachefs: Inodes need extra padding for varint_decode_fast()
|
|
WARNING in __page_table_check_ptes_set
mm
|
-1 |
C |
|
|
2 |
769d |
765d
|
25/29 |
720d |
c88033efe9a3
mm/userfaultfd: reset ptes when close() for wr-protected ones
|
|
KASAN: global-out-of-bounds Read in __nla_validate_parse
net
|
17 |
C |
|
|
5 |
779d |
779d
|
25/29 |
720d |
8750539ba317
net: team: fix incorrect maxattr
|
|
UBSAN: shift-out-of-bounds in bch2_bkey_format_invalid
fs
|
-1 |
C |
|
|
45 |
723d |
749d
|
25/29 |
720d |
61692c7812ab
bcachefs: bch2_bkey_format_field_overflows()
|
|
WARNING in __mod_memcg_lruvec_state
cgroups
mm
|
-1 |
C |
|
|
270 |
750d |
785d
|
25/29 |
720d |
4f687281012e
mm: do not update memcg stats for NR_{FILE/SHMEM}_PMDMAPPED
|
|
WARNING in carl9170_usb_send_rx_irq_urb/usb_submit_urb
usb
wireless
|
-1 |
C |
error |
inconclusive |
18 |
765d |
1908d
|
25/29 |
720d |
b6dd09b3dac8
wifi: carl9170: add a proper sanity check for endpoints
|
|
UBSAN: shift-out-of-bounds in rewrite_old_nodes_pred
fs
|
-1 |
C |
done |
|
3 |
752d |
751d
|
25/29 |
720d |
0ec5b3b7ccfc
bcachefs: Fix shift-by-64 in bformat_needs_redo()
|
|
kernel BUG in bch2_btree_node_read_done
fs
|
-1 |
C |
error |
|
5 |
751d |
753d
|
25/29 |
720d |
a2ddaf965f6a
bcachefs: bucket_pos_to_bp_noerror()
|
|
KASAN: slab-use-after-free Read in vhost_task_fn
kvm
net
virt
|
19 |
C |
done |
|
2661 |
755d |
757d
|
25/29 |
720d |
db5247d9bf5c
vhost_task: Handle SIGKILL by flushing work and exiting
|
|
WARNING: zero-size vmalloc in ubi_read_volume_table
mtd
|
-1 |
C |
|
|
3 |
787d |
785d
|
25/29 |
732d |
68a24aba7c59
ubi: Check for too small LEB size in VTBL code
|
|
WARNING in emit_fiemap_extent
btrfs
|
-1 |
C |
error |
done |
14 |
816d |
1071d
|
25/29 |
733d |
a1a4a9ca77f1
btrfs: fix race between ordered extent completion and fiemap
|
|
possible deadlock in move_pages
mm
|
4 |
C |
|
|
206 |
790d |
799d
|
25/29 |
734d |
30af24facf0a
userfaultfd: fix deadlock warning when locking src and dst VMAs
|
|
KASAN: stack-out-of-bounds Read in hash
bpf
|
17 |
C |
done |
|
5 |
773d |
780d
|
25/29 |
734d |
a8d89feba7e5
bpf: Check bloom filter map value size
|
|
possible deadlock in force_sig_info_to_task
bpf
trace
|
4 |
C |
error |
|
6 |
754d |
762d
|
25/29 |
734d |
02b670c1f88e
x86/mm: Remove broken vsyscall emulation code from the page fault code
|
|
KMSAN: uninit-value in geneve_xmit (3)
net
|
7 |
C |
|
|
14 |
776d |
783d
|
25/29 |
734d |
d8a6213d70ac
geneve: fix header validation in geneve[6]_xmit_skb
|
|
WARNING in mmu_free_root_page
kvm-x86
|
-1 |
C |
|
|
104 |
766d |
789d
|
25/29 |
734d |
1bc26cb90902
KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (3)
net
|
9 |
C |
|
|
25 |
737d |
791d
|
25/29 |
734d |
d313eb8b7755
net/sched: act_skbmod: prevent kernel-infoleak
|
|
KASAN: slab-use-after-free Read in ip_skb_dst_mtu
netfilter
|
19 |
C |
error |
|
5 |
780d |
812d
|
25/29 |
734d |
18685451fc4e
inet: inet_defrag: prevent sk release while still in use
|
|
KMSAN: uninit-value in gre_rcv (3)
net
|
7 |
C |
|
|
3 |
789d |
789d
|
25/29 |
734d |
17af420545a7
erspan: make sure erspan_base_hdr is present in skb->head
|
|
KMSAN: uninit-value in line6_pod_process_message
sound
|
7 |
C |
|
|
5 |
784d |
785d
|
25/29 |
734d |
c4e51e424e2c
ALSA: line6: Zero-initialize message buffers
|
|
WARNING: suspicious RCU usage in __do_softirq
kernel
|
4 |
C |
|
|
199 |
758d |
784d
|
25/29 |
734d |
1dd1eff161bd
softirq: Fix suspicious RCU usage in __do_softirq()
|
|
KASAN: slab-out-of-bounds Read in nfc_llcp_setsockopt
net
nfc
|
17 |
C |
error |
|
5 |
771d |
780d
|
25/29 |
734d |
7a87441c9651
nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
|
|
KASAN: slab-use-after-free Read in __vma_reservation_common
mm
|
19 |
syz |
|
|
13 |
760d |
774d
|
25/29 |
734d |
37641efaa3fa
hugetlb: check for anon_vma prior to folio allocation
|
|
WARNING in vmk80xx_auto_attach/usb_submit_urb
usb
|
-1 |
C |
unreliable |
inconclusive |
2 |
809d |
1810d
|
25/29 |
734d |
d1718530e3f6
comedi: vmk80xx: fix incomplete endpoint checking
|
|
WARNING: refcount bug in __reset_page_owner
mm
|
13 |
C |
|
|
93128 |
767d |
799d
|
25/29 |
734d |
f5c12105c15f
mm,page_owner: fix refcount imbalance
|
|
KASAN: slab-out-of-bounds Read in update_counters
netfilter
bridge
|
17 |
C |
|
|
3 |
781d |
781d
|
25/29 |
734d |
0c83842df40f
netfilter: validate user input for expected length
|
|
KMSAN: uninit-value in ieee80211_rx_handlers (2)
wireless
|
7 |
C |
|
|
4 |
773d |
792d
|
25/29 |
734d |
7c1c73bf84c5
wifi: mac80211: check EHT/TTLM action frame length
|
|
KASAN: slab-out-of-bounds Read in do_ipt_set_ctl
netfilter
|
17 |
C |
|
|
111 |
772d |
782d
|
25/29 |
734d |
0c83842df40f
netfilter: validate user input for expected length
|
|
WARNING in sock_map_delete_elem
bpf
net
|
-1 |
C |
|
|
17183 |
761d |
799d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in scheduler_tick (3)
bpf
net
|
4 |
C |
|
|
1179 |
761d |
797d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
BUG: soft lockup in sys_sendmsg
tipc
batman
|
1 |
C |
|
|
3 |
793d |
835d
|
25/29 |
734d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
possible deadlock in rcu_exp_handler
net
bpf
|
4 |
C |
|
|
1 |
774d |
770d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
KMSAN: uninit-value in v9fs_evict_inode
v9fs
|
7 |
C |
|
|
5206 |
790d |
801d
|
25/29 |
734d |
6630036b7c22
fs/9p: fix uninitialized values during inode evict
|
|
possible deadlock in rcu_report_exp_cpu_mult
net
bpf
|
4 |
C |
done |
|
30 |
762d |
800d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in try_to_wake_up (4)
bpf
net
|
4 |
C |
error |
|
19 |
736d |
799d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in ahci_single_level_irq_intr
bpf
net
|
4 |
C |
|
|
10 |
783d |
791d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_unref
bpf
net
|
-1 |
C |
error |
|
97 |
761d |
775d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
INFO: rcu detected stall in rtnl_newlink (4)
sctp
fs
|
1 |
C |
error |
|
9 |
741d |
817d
|
25/29 |
734d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
possible deadlock in __lock_task_sighand (2)
bpf
|
4 |
C |
|
|
1476 |
735d |
799d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_hash_delete_elem
bpf
net
|
-1 |
C |
done |
|
16982 |
761d |
799d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in hrtimer_run_queues
bpf
net
|
4 |
C |
error |
|
592 |
761d |
798d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in swake_up_one
bpf
net
|
4 |
C |
|
|
4 |
773d |
771d
|
25/29 |
734d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault (2)
mm
|
8 |
C |
|
|
2 |
775d |
785d
|
25/29 |
734d |
c6f48506ba30
arm32, bpf: Reimplement sign-extension mov instruction
|
|
KASAN: slab-out-of-bounds Read in xsk_setsockopt
bpf
net
|
17 |
C |
|
|
17 |
773d |
782d
|
25/29 |
734d |
237f3cf13b20
xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
|
|
KMSAN: uninit-value in ipvlan_queue_xmit (2)
net
|
7 |
C |
|
|
2 |
808d |
769d
|
25/29 |
734d |
4b911a9690d7
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
|
|
possible deadlock in __unix_gc
net
|
4 |
C |
done |
|
5 |
761d |
763d
|
25/29 |
734d |
1971d13ffa84
af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
|
|
WARNING in gre_tap_xmit (2)
net
|
-1 |
C |
done |
|
67 |
742d |
768d
|
25/29 |
734d |
4b911a9690d7
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
|
|
UBSAN: array-index-out-of-bounds in check_stack_range_initialized
bpf
|
15 |
C |
error |
|
21 |
765d |
798d
|
25/29 |
734d |
ecc6a2101840
bpf: Protect against int overflow for stack access size
|
|
general protection fault in dev_map_enqueue
net
bpf
|
19 |
C |
|
|
676 |
734d |
791d
|
25/29 |
734d |
5bcf0dcbf906
xdp: use flags field to disambiguate broadcast redirect
|
|
KMSAN: uninit-value in nci_ntf_packet
net
nfc
|
7 |
C |
|
|
79 |
736d |
876d
|
25/29 |
734d |
d24b03535e5e
nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
|
|
KASAN: slab-use-after-free Read in v9fs_stat2inode_dotl
v9fs
|
19 |
C |
done |
|
585 |
790d |
845d
|
25/29 |
734d |
11763a8598f8
fs/9p: fix uaf in in v9fs_stat2inode_dotl
|
|
possible deadlock in unix_del_edges
net
|
4 |
C |
|
|
49 |
778d |
782d
|
25/29 |
734d |
b46f4eaa4f0e
af_unix: Clear stale u->oob_skb.
|
|
WARNING in __hugetlb_cgroup_uncharge_folio
mm
|
-1 |
syz |
|
|
3 |
763d |
772d
|
25/29 |
734d |
b76b46902c2d
mm/hugetlb: fix missing hugetlb_lock for resv uncharge
|
|
KASAN: slab-use-after-free Read in bpf_link_free
bpf
|
19 |
syz |
|
|
181 |
734d |
782d
|
25/29 |
734d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
WARNING: refcount bug in ax25_release (2)
hams
|
13 |
C |
|
|
240 |
734d |
800d
|
25/29 |
734d |
467324bcfe1a
ax25: Fix netdev refcount issue
|
|
KASAN: slab-out-of-bounds Read in data_sock_setsockopt
net
|
17 |
C |
|
|
2 |
779d |
779d
|
25/29 |
734d |
138b787804f4
mISDN: fix MISDN_TIME_STAMP handling
|
|
KASAN: slab-use-after-free Read in bpf_trace_run4
bpf
trace
|
19 |
C |
error |
|
169 |
778d |
797d
|
25/29 |
734d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
KMSAN: uninit-value in nci_dev_up
net
nfc
|
7 |
C |
|
|
7 |
793d |
852d
|
25/29 |
734d |
d24b03535e5e
nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
|
|
UBSAN: array-index-out-of-bounds in nilfs_add_link
nilfs
|
15 |
C |
error |
|
4 |
771d |
772d
|
25/29 |
734d |
c4a7dc9523b5
nilfs2: fix OOB in nilfs_set_de_type
|
|
KASAN: slab-use-after-free Read in bpf_trace_run2
bpf
trace
|
19 |
C |
error |
|
653 |
778d |
797d
|
25/29 |
734d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
KASAN: slab-use-after-free Read in __fput (2)
fs
|
19 |
C |
done |
|
6 |
758d |
763d
|
25/29 |
734d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
KASAN: slab-use-after-free Read in bpf_trace_run1
bpf
trace
|
19 |
C |
error |
|
78 |
779d |
793d
|
25/29 |
734d |
1a80dbcb2dba
bpf: support deferring bpf_link dealloc to after RCU grace period
|
|
possible deadlock in unix_notinflight
net
|
4 |
C |
|
|
7 |
761d |
776d
|
25/29 |
734d |
b46f4eaa4f0e
af_unix: Clear stale u->oob_skb.
|
|
general protection fault in __ep_remove
fs
|
2 |
C |
|
|
1 |
779d |
779d
|
25/29 |
734d |
4efaa5acf0a1
epoll: be better about file lifetimes
|
|
general protection fault in jbd2__journal_start
ext4
|
2 |
C |
error |
|
3 |
797d |
852d
|
25/29 |
734d |
f2e812c1522d
xfs: don't use current->journal_info
|
|
kernel BUG in sg_init_one
mm
|
-1 |
C |
|
|
1032 |
790d |
799d
|
25/29 |
734d |
9c500835f279
mm: zswap: fix kernel BUG in sg_init_one
|
|
WARNING in __rate_control_send_low
wireless
|
-1 |
C |
inconclusive |
|
2759 |
734d |
2050d
|
25/29 |
734d |
ab9177d83c04
wifi: mac80211: don't use rate mask for scanning
|
|
WARNING in clear_dirty_gfn_range
kvm-x86
|
-1 |
C |
|
|
3 |
783d |
805d
|
25/29 |
734d |
2673dfb591a3
KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
|
|
KMSAN: uninit-value in nf_flow_offload_ip_hook
netfilter
|
7 |
C |
|
|
5 |
782d |
782d
|
25/29 |
734d |
87b3593bed18
netfilter: flowtable: validate pppoe header
|
|
WARNING: ODEBUG bug in bdev_super_lock (2)
fs
|
-1 |
C |
done |
|
3 |
772d |
769d
|
25/29 |
734d |
22650a99821d
fs,block: yield devices early
|
|
WARNING in hugetlb_change_protection (2)
mm
|
-1 |
C |
|
|
631 |
754d |
781d
|
25/29 |
734d |
c5977c95dff1
mm/userfaultfd: allow hugetlb change protection upon poison entry
|
|
WARNING in __kvm_gpc_refresh
kvm
|
-1 |
C |
|
|
178 |
735d |
799d
|
25/29 |
734d |
5c9ca4ed8908
KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation
|
|
WARNING in btrfs_sync_log
btrfs
|
-1 |
C |
error |
inconclusive |
6 |
808d |
1318d
|
25/29 |
735d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
WARNING in btrfs_put_transaction
btrfs
|
-1 |
C |
error |
inconclusive |
83 |
751d |
1273d
|
25/29 |
735d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
WARNING in __btrfs_free_extent
btrfs
|
-1 |
C |
error |
|
300 |
743d |
1301d
|
25/29 |
735d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
WARNING in btrfs_get_root_ref
btrfs
|
-1 |
syz |
unreliable |
inconclusive |
3 |
810d |
824d
|
25/29 |
735d |
e2b54eaf28df
btrfs: fix double free of anonymous device after snapshot creation failure
|
|
kernel BUG at fs/inode.c:LINE! (2)
fs
|
-1 |
C |
done |
unreliable |
322 |
749d |
2097d
|
25/29 |
736d |
319c15174757
epoll: take epitem list out of struct file
|
|
kernel BUG in create_pending_snapshot
btrfs
|
-1 |
C |
error |
done |
32 |
974d |
1280d
|
25/29 |
737d |
df9f27823904
btrfs: do not BUG_ON on failure to get dir index for new snapshot
|
|
WARNING in btrfs_free_reserved_data_space_noquota
btrfs
|
-1 |
C |
done |
done |
7 |
862d |
1275d
|
25/29 |
738d |
9e65bfca24cf
btrfs: fix qgroup_free_reserved_data int overflow
|
|
WARNING in stashed_dentry_prune (2)
fs
|
-1 |
C |
done |
|
54 |
761d |
770d
|
25/29 |
738d |
9d9539db8638
pidfs: remove config option
|
|
kernel BUG in __extent_writepage_io
btrfs
|
-1 |
syz |
done |
inconclusive |
8 |
815d |
933d
|
25/29 |
739d |
5571e41ec6e5
btrfs: don't drop extent_map for free space inode on write error
|
|
BUG: sleeping function called from invalid context in gsm_send
serial
|
5 |
C |
error |
|
16 |
823d |
1336d
|
25/29 |
761d |
acdab4cb4ba7
Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
|
|
kernel BUG in submit_bh_wbc
nilfs
|
-1 |
C |
done |
|
10 |
763d |
772d
|
25/29 |
762d |
269cdf353b5b
nilfs2: prevent kernel bug at submit_bh_wbc()
|
|
inconsistent lock state in snd_hrtimer_callback (2)
sound
|
4 |
C |
|
|
2600 |
771d |
773d
|
25/29 |
765d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in snd_timer_close_locked (2)
sound
|
4 |
C |
done |
|
3036 |
771d |
773d
|
25/29 |
765d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
inconsistent lock state in snd_timer_interrupt (3)
sound
|
4 |
C |
|
|
710 |
771d |
775d
|
25/29 |
765d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
INFO: rcu detected stall in snd_timer_user_release (2)
sound
|
1 |
C |
|
|
7 |
765d |
778d
|
25/29 |
765d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (5)
sound
|
4 |
C |
|
|
5210 |
771d |
773d
|
25/29 |
765d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
INFO: task hung in xfs_inodegc_flush
xfs
|
1 |
C |
error |
|
7 |
843d |
840d
|
25/29 |
774d |
c70e1779b73a
workqueue: Fix pwq->nr_in_flight corruption in try_to_grab_pending()
|
|
WARNING in cleanup_net (3)
net
|
-1 |
syz |
|
|
240 |
775d |
909d
|
25/29 |
775d |
2a750d6a5b36
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
|
|
WARNING in net_free (2)
net
|
-1 |
syz |
|
|
27 |
781d |
827d
|
25/29 |
775d |
2a750d6a5b36
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
|
|
inconsistent lock state in snd_timer_interrupt (2)
sound
|
4 |
C |
done |
|
208 |
775d |
777d
|
25/29 |
775d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
KMSAN: uninit-value in em_ret_far
kvm-x86
|
7 |
C |
|
|
37 |
802d |
868d
|
25/29 |
776d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
WARNING in stashed_dentry_prune
fs
|
-1 |
C |
done |
|
20 |
805d |
805d
|
25/29 |
776d |
9d9539db8638
pidfs: remove config option
|
|
BUG: bad usercopy in raw_getsockopt
mm
hardening
|
-1 |
C |
done |
|
4 |
826d |
826d
|
25/29 |
776d |
c8fba5d6df5e
can: raw: fix getsockopt() for new CAN_RAW_XL_VCID_OPTS
|
|
WARNING: ODEBUG bug in bdev_super_lock
fs
|
-1 |
C |
|
|
3 |
779d |
789d
|
25/29 |
776d |
59a55a63c246
fs,block: get holder during claim
|
|
KMSAN: uninit-value in cookie_v4_check
net
|
7 |
C |
|
|
9 |
798d |
804d
|
25/29 |
776d |
956c0d619107
tcp: Clear req->syncookie in reqsk_alloc().
|
|
KMSAN: uninit-value in bcmp (2)
sound
|
7 |
C |
|
|
7 |
841d |
864d
|
25/29 |
777d |
fde2497d2bc3
fat: fix uninitialized field in nostale filehandles
|
|
KASAN: slab-use-after-free Read in sys_io_cancel
fs
|
19 |
C |
done |
|
894 |
777d |
815d
|
25/29 |
777d |
28468cbed92e
Revert "fs/aio: Make io_cancel() generate completions again"
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave (4)
sound
|
4 |
C |
|
|
24677 |
777d |
799d
|
25/29 |
777d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
divide error in isd200_ata_command
usb-storage
|
2 |
C |
done |
|
10 |
816d |
821d
|
25/29 |
777d |
014bcf41d946
USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
|
|
UBSAN: shift-out-of-bounds in taprio_change
net
|
-1 |
C |
done |
|
4 |
806d |
806d
|
25/29 |
777d |
343041b59b78
net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
|
|
WARNING: suspicious RCU usage in in6_dump_addrs (2)
net
|
4 |
C |
done |
|
3 |
819d |
819d
|
25/29 |
777d |
67ea41d19d2a
inet6: expand rcu_read_lock() scope in inet6_dump_addr()
|
|
KASAN: slab-use-after-free Read in f2fs_filemap_fault
f2fs
|
19 |
C |
unreliable |
|
40 |
781d |
863d
|
25/29 |
777d |
eb70d5a6c932
f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
|
|
KMSAN: uninit-value in ieee80211_amsdu_to_8023s
wireless
|
7 |
C |
|
|
4 |
814d |
820d
|
25/29 |
777d |
9ad797485692
wifi: cfg80211: check A-MSDU format more carefully
|
|
general protection fault in btintel_read_version
bluetooth
|
2 |
C |
error |
|
5 |
850d |
860d
|
25/29 |
777d |
b79e04091010
Bluetooth: btintel: Fix null ptr deref in btintel_read_version
|
|
KMSAN: uninit-value in hsr_get_node (2)
net
|
7 |
C |
|
|
49 |
778d |
864d
|
25/29 |
777d |
ddbec99f5857
hsr: Fix uninit-value access in hsr_get_node()
|
|
KMSAN: kernel-infoleak in sys_name_to_handle_at (4)
nfs
|
9 |
C |
|
|
7 |
814d |
864d
|
25/29 |
777d |
3948abaa4e2b
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
|
|
KASAN: slab-use-after-free Write in __hci_acl_create_connection_sync
bluetooth
|
22 |
C |
done |
|
87 |
827d |
839d
|
25/29 |
777d |
5f641f03abcc
Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
|
|
WARNING in mpls_gso_segment
net
|
-1 |
C |
done |
|
20 |
823d |
825d
|
25/29 |
777d |
025f8ad20f2e
net: mpls: error out if inner headers are not set
|
|
possible deadlock in snd_pcm_period_elapsed (4)
sound
|
4 |
C |
done |
|
90659 |
777d |
803d
|
25/29 |
777d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
inconsistent lock state in snd_timer_interrupt
sound
|
4 |
C |
|
|
1927 |
777d |
799d
|
25/29 |
777d |
587d67fd929a
ALSA: timer: Fix missing irq-disable at closing
|
|
WARNING in rds_conn_connect_if_down
rds
|
-1 |
C |
error |
|
17 |
811d |
1141d
|
25/29 |
777d |
c055fc00c07b
net/rds: fix WARNING in rds_conn_connect_if_down
|
|
general protection fault in bpf_struct_ops_find_value
bpf
|
2 |
C |
done |
|
9 |
850d |
852d
|
25/29 |
777d |
e6be8cd5d3cf
bpf: Fix error checks against bpf_get_btf_vmlinux().
|
|
BUG: unable to handle kernel NULL pointer dereference in dev_map_hash_update_elem
net
bpf
|
10 |
C |
|
|
2 |
821d |
828d
|
25/29 |
777d |
281d464a34f5
bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
|
|
KMSAN: uninit-value in geneve_udp_encap_recv
net
|
7 |
C |
|
|
2 |
822d |
852d
|
25/29 |
777d |
1ca1ba465e55
geneve: make sure to pull inner header in geneve_rx()
|
|
WARNING in ovl_copy_up_file
overlayfs
|
-1 |
C |
|
|
2 |
805d |
805d
|
25/29 |
777d |
77a28aa47687
ovl: relax WARN_ON in ovl_verify_area()
|
|
kernel BUG at fs/buffer.c:LINE!
nilfs
|
-1 |
C |
done |
error |
567 |
778d |
2959d
|
25/29 |
777d |
f2f26b4a84a0
nilfs2: fix failure to detect DAT corruption in btree and direct mappings
|
|
kernel BUG in __nla_validate_parse
net
|
-1 |
C |
done |
|
13 |
806d |
808d
|
25/29 |
777d |
d8a21070b6e1
nexthop: Fix out-of-bounds access during attribute validation
|
|
KASAN: slab-use-after-free Read in pvr2_context_set_notify (2)
pvrusb2
|
19 |
C |
|
|
1069 |
777d |
847d
|
25/29 |
777d |
0a0b79ea55de
media: pvrusb2: fix uaf in pvr2_context_set_notify
|
|
KMSAN: uninit-value in ima_add_template_entry
erofs
|
7 |
C |
|
|
5 |
814d |
827d
|
25/29 |
777d |
893e5e9b7369
erofs: fix uninitialized page cache reported by KMSAN
|
|
BUG: sleeping function called from invalid context in __getblk_gfp
fs
|
5 |
C |
error |
done |
3673 |
881d |
1276d
|
25/29 |
777d |
f123dc86388c
sysv: don't call sb_bread() with pointers_lock held
|
|
general protection fault in btf_is_module
bpf
|
2 |
C |
error |
|
318 |
849d |
853d
|
25/29 |
777d |
e6be8cd5d3cf
bpf: Fix error checks against bpf_get_btf_vmlinux().
|
|
KMSAN: uninit-value in io_sendrecv_fail
io-uring
|
7 |
C |
|
|
29 |
795d |
802d
|
25/29 |
777d |
e21e1c45e1fe
io_uring: clear opcode specific data for an early failure
|
|
INFO: task hung in deactivate_super (2)
jfs
|
1 |
C |
inconclusive |
done |
121 |
815d |
1154d
|
25/29 |
778d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in __lock_sock_fast (2)
net
|
5 |
C |
|
|
6 |
816d |
818d
|
25/29 |
784d |
d6a9608af9a7
mptcp: fix possible deadlock in subflow diag
|
|
possible deadlock in tcp_diag_get_aux
net
|
4 |
C |
|
|
117 |
810d |
827d
|
25/29 |
784d |
d6a9608af9a7
mptcp: fix possible deadlock in subflow diag
|
|
kernel BUG in eth_header (2)
net
|
-1 |
C |
|
|
2 |
861d |
861d
|
25/29 |
784d |
dad555c816a5
llc: make llc_ui_sendmsg() more robust against bonding changes
|
|
BUG: unable to handle kernel NULL pointer dereference in unix_stream_sendmsg
net
bpf
|
10 |
C |
|
|
1 |
820d |
820d
|
25/29 |
785d |
4cd12c6065df
bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
|
|
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready
bpf
net
|
10 |
C |
unreliable |
|
15 |
815d |
935d
|
25/29 |
785d |
4cd12c6065df
bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
|
|
WARNING in blk_rq_map_user_iov
block
|
-1 |
C |
done |
|
3546 |
849d |
991d
|
25/29 |
788d |
13f3956eb568
block: Fix WARNING in _copy_from_iter
|
|
WARNING in copy_page_from_iter
block
|
-1 |
C |
done |
|
1987 |
857d |
1169d
|
25/29 |
788d |
13f3956eb568
block: Fix WARNING in _copy_from_iter
|
|
INFO: task hung in unix_stream_sendmsg
net
|
1 |
C |
done |
|
4 |
826d |
829d
|
25/29 |
789d |
aa82ac51d633
af_unix: Drop oob_skb ref before purging queue in GC.
|
|
WARNING in __alloc_skb (3)
ppp
|
-1 |
C |
|
|
2 |
842d |
842d
|
25/29 |
789d |
cb88cb53badb
ppp_async: limit MRU to 64K
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault
mm
|
8 |
C |
done |
|
5 |
820d |
919d
|
25/29 |
789d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
KASAN: slab-out-of-bounds Read in getname_kernel (2)
btrfs
|
17 |
C |
done |
|
5 |
843d |
890d
|
25/29 |
789d |
9845664b9ee4
btrfs: dev-replace: properly validate device names
|
|
kernel BUG in end_buffer_async_write
nilfs
|
-1 |
C |
inconclusive |
|
6 |
878d |
1088d
|
25/29 |
789d |
5bc09b397cbf
nilfs2: fix potential bug in end_buffer_async_write
|
|
memory leak in pppoe_sendmsg
net
|
3 |
C |
|
|
26 |
881d |
2553d
|
25/29 |
789d |
dc34ebd5c018
pppoe: Fix memory leak in pppoe_sendmsg()
|
|
memory leak in corrupted
bluetooth
|
3 |
syz |
|
|
536 |
790d |
862d
|
25/29 |
789d |
0a186b49bba5
batman-adv: mcast: fix memory leak on deleting a batman-adv interface
|
|
WARNING in __unix_gc
net
|
-1 |
C |
|
|
49 |
838d |
844d
|
25/29 |
789d |
1279f9d9dec2
af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
|
|
kernel BUG in iov_iter_revert
exfat
|
-1 |
C |
done |
|
5 |
842d |
861d
|
25/29 |
789d |
0991abeddefa
exfat: fix zero the unwritten part for dio read
|
|
WARNING: ODEBUG bug in ip_set_free
netfilter
|
-1 |
C |
|
|
42 |
830d |
833d
|
25/29 |
790d |
27c5a095e251
netfilter: ipset: Missing gc cancellations fixed
|
|
possible deadlock in rds_wake_sk_sleep (4)
rds
|
4 |
C |
error |
|
16 |
840d |
1469d
|
25/29 |
790d |
f1acf1ac84d2
net:rds: Fix possible deadlock in rds_message_put
|
|
possible deadlock in rds_message_put
rds
|
4 |
C |
done |
error |
5 |
928d |
1239d
|
25/29 |
790d |
f1acf1ac84d2
net:rds: Fix possible deadlock in rds_message_put
|
|
KASAN: slab-use-after-free Read in sock_wfree (2)
intel-wired-lan
|
19 |
C |
|
|
4 |
852d |
861d
|
25/29 |
790d |
aa2b2eb39348
llc: call sock_orphan() at release time
|
|
WARNING: ODEBUG bug in hash_netiface4_destroy
netfilter
|
-1 |
C |
done |
|
80 |
830d |
844d
|
25/29 |
790d |
27c5a095e251
netfilter: ipset: Missing gc cancellations fixed
|
|
possible deadlock in j1939_sk_queue_drop_all
can
|
4 |
C |
error |
done |
281 |
849d |
1722d
|
25/29 |
791d |
6cdedc18ba7b
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
|
|
possible deadlock in j1939_sk_errqueue (2)
can
|
4 |
C |
done |
|
24 |
831d |
1058d
|
25/29 |
791d |
6cdedc18ba7b
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
|
|
memory leak in virtual_ncidev_write (2)
net
nfc
|
3 |
C |
|
|
2 |
889d |
1050d
|
25/29 |
791d |
bfb007aebe6b
nfc: nci: free rx_data_reassembly skb on NCI device cleanup
|
|
general protection fault in tipc_udp_is_known_peer
tipc
|
2 |
C |
error |
|
1 |
877d |
890d
|
25/29 |
791d |
3871aa01e1a7
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate (2)
net
|
7 |
C |
|
|
3 |
842d |
857d
|
25/29 |
791d |
8d975c15c0cd
ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
|
|
INFO: task hung in rtnl_lock (3)
net
|
1 |
C |
|
|
128 |
796d |
1148d
|
25/29 |
791d |
3871aa01e1a7
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
|
|
possible deadlock in j1939_session_activate
can
|
4 |
C |
done |
done |
67 |
843d |
1677d
|
25/29 |
791d |
6cdedc18ba7b
can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock
|
|
WARNING in bcm5974_start_traffic/usb_submit_urb
input
|
-1 |
C |
error |
|
41 |
796d |
2391d
|
25/29 |
791d |
2b9c3eb32a69
Input: bcm5974 - check endpoint type before starting traffic
|
|
WARNING in ieee80211_bss_info_change_notify (2)
wireless
|
-1 |
C |
done |
|
1392 |
813d |
957d
|
25/29 |
791d |
f78c1375339a
wifi: nl80211: reject iftype change with mesh ID change
|
|
WARNING in btrfs_issue_discard
btrfs
|
-1 |
C |
done |
|
9 |
849d |
862d
|
25/29 |
791d |
a208b3f132b4
btrfs: don't warn if discard range is not aligned to sector
|
|
WARNING in __nf_unregister_net_hook (6)
netfilter
|
-1 |
C |
error |
|
2 |
835d |
952d
|
25/29 |
791d |
bccebf647017
netfilter: nf_tables: set dormant flag on hook register failure
|
|
memory leak in sctp_packet_transmit
sctp
|
3 |
C |
|
|
14 |
917d |
2134d
|
25/29 |
791d |
4e45170d9acc
net: sctp: fix skb leak in sctp_inq_free()
|
|
KMSAN: uninit-value in geneve_xmit (2)
net
|
7 |
C |
|
|
12 |
796d |
873d
|
25/29 |
792d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
WARNING in ip6gre_tunnel_xmit
net
|
-1 |
C |
done |
|
2 |
821d |
822d
|
25/29 |
792d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
KASAN: use-after-free Read in __skb_flow_dissect (3)
net
|
19 |
C |
|
|
1 |
866d |
876d
|
25/29 |
792d |
5ae1e9922bbd
net: ip_tunnel: prevent perpetual headroom growth
|
|
memory leak in add_block_entry
btrfs
|
3 |
C |
|
|
4 |
889d |
1081d
|
25/29 |
792d |
f03e274a8b29
btrfs: ref-verify: free ref cache before clearing mount opt
|
|
INFO: task hung in addrconf_dad_work (3)
net
|
1 |
C |
|
|
185 |
806d |
847d
|
25/29 |
792d |
ba5e1272142d
netdevsim: avoid potential loop in nsim_dev_trap_report_work()
|
|
KASAN: invalid-access Read in neon_aes_ctr_encrypt
arm
crypto
|
17 |
C |
|
|
3 |
819d |
830d
|
25/29 |
792d |
1c0cf6d19690
crypto: arm64/neonbs - fix out-of-bounds access on short input
|
|
memory leak in add_tree_block
btrfs
|
3 |
C |
|
|
5 |
874d |
1276d
|
25/29 |
792d |
f03e274a8b29
btrfs: ref-verify: free ref cache before clearing mount opt
|
|
KASAN: slab-out-of-bounds Read in ntfs_listxattr (2)
ntfs3
|
17 |
C |
error |
|
15 |
840d |
882d
|
25/29 |
792d |
731ab1f98288
fs/ntfs3: Fix oob in ntfs_listxattr
|
|
KMSAN: kernel-infoleak in __skb_datagram_iter (2)
net
|
19 |
C |
|
|
126 |
793d |
844d
|
25/29 |
792d |
661779e1fcaf
netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
|
|
INFO: task hung in unix_dgram_sendmsg
net
|
1 |
C |
done |
|
36 |
818d |
837d
|
25/29 |
792d |
25236c91b5ab
af_unix: Fix task hung while purging oob_skb in GC.
|
|
KMSAN: uninit-value in __llc_lookup_established
net
|
7 |
C |
|
|
46 |
860d |
903d
|
25/29 |
792d |
e3f9bed9bee2
llc: Drop support for ETH_P_TR_802_2.
|
|
INFO: task hung in migrate_pages_batch
nilfs
|
1 |
C |
|
|
22 |
838d |
849d
|
25/29 |
792d |
38296afe3c6e
nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
|
|
BUG: unable to handle kernel NULL pointer dereference in crypto_arc4_crypt
crypto
|
10 |
C |
done |
|
4 |
850d |
848d
|
25/29 |
792d |
69fba378edca
crypto: cbc - Ensure statesize is zero
|
|
BUG: unable to handle kernel NULL pointer dereference in dtInsertEntry
jfs
|
19 |
C |
error |
done |
29 |
845d |
1338d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in reiserfs_dirty_inode
fs
|
4 |
C |
done |
done |
519 |
847d |
1276d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in ntfs_lookup_inode_by_name
ntfs3
|
19 |
C |
error |
done |
17 |
808d |
1244d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in do_open_execat
ntfs3
|
-1 |
C |
error |
done |
12 |
853d |
1012d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in udf_finalize_lvid
udf
|
19 |
C |
inconclusive |
done |
39 |
869d |
1072d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in gfs2_withdraw
gfs2
|
5 |
C |
error |
done |
182 |
869d |
990d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in ntfs_iget
ntfs3
|
-1 |
C |
error |
done |
9 |
850d |
1092d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in ntfs_iget5
ntfs3
|
19 |
C |
done |
done |
3633 |
861d |
1495d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in udf_free_blocks
udf
|
19 |
C |
done |
done |
2 |
871d |
1082d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: trying to register non-static key in txEnd
jfs
|
-1 |
C |
inconclusive |
done |
20 |
871d |
968d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in ntfs_read_folio
ntfs3
|
19 |
C |
error |
done |
12 |
858d |
1166d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in hfs_mdb_commit
hfs
|
1 |
C |
error |
done |
25 |
849d |
1226d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in map_mft_record
ntfs3
|
4 |
C |
error |
done |
845 |
847d |
1316d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in ext4_xattr_inode_iget (2)
ext4
|
4 |
C |
done |
done |
22 |
862d |
1055d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Write in hfs_bnode_read_key
hfs
|
21 |
C |
error |
done |
4 |
861d |
1083d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in jfs_readdir
jfs
|
19 |
C |
error |
done |
17 |
870d |
1230d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in __bread_gfp
fs
|
5 |
C |
error |
done |
359 |
873d |
1275d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in ntfs_iget
ntfs3
|
-1 |
C |
error |
done |
73 |
811d |
1188d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in reiserfs_sync_fs
fs
|
1 |
C |
error |
done |
22 |
873d |
1252d
|
25/29 |
797d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (3)
kvm
|
-1 |
C |
inconclusive |
done |
44 |
861d |
922d
|
25/29 |
810d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
WARNING in gfs2_check_blk_type
gfs2
|
-1 |
C |
error |
done |
67 |
858d |
1262d
|
25/29 |
813d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in perf_event_open
perf
|
-1 |
C |
done |
done |
43004 |
874d |
889d
|
25/29 |
820d |
7e2c1e4b34f0
perf: Fix perf_event_validate_size() lockdep splat
|
|
KASAN: slab-out-of-bounds Write in udf_adinicb_writepage
udf
|
21 |
C |
error |
done |
5 |
872d |
1160d
|
25/29 |
821d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in lmLogClose (2)
jfs
|
1 |
C |
inconclusive |
done |
5 |
867d |
960d
|
25/29 |
823d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel panic: stack is corrupted in run_unpack_ex
ntfs3
|
2 |
C |
done |
done |
3 |
877d |
1236d
|
25/29 |
823d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in common_perm_cond
ext4
apparmor
|
2 |
C |
error |
done |
1 |
877d |
1042d
|
25/29 |
824d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in udf_process_sequence
udf
|
15 |
C |
error |
done |
6 |
871d |
1030d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in __fget_files (2)
fs
|
2 |
C |
done |
done |
1 |
881d |
877d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __generic_file_fsync (3)
exfat
|
1 |
C |
inconclusive |
done |
8 |
879d |
1386d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ext4_discard_allocated_blocks
ext4
|
-1 |
C |
inconclusive |
done |
4 |
871d |
988d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in write_cache_pages (3)
gfs2
|
1 |
C |
done |
done |
10 |
871d |
996d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in __get_metapage
jfs
|
1 |
C |
error |
done |
32 |
870d |
1324d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Write in udf_close_lvid
udf
|
22 |
C |
done |
|
144 |
870d |
1464d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in ext4_search_dir
prio:low
ext4
|
19 |
C |
error |
done |
20 |
870d |
1111d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel paging request in reiserfs_readdir_inode
fs
|
19 |
C |
error |
done |
11 |
872d |
1237d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in entry_points_to_object
fs
|
-1 |
C |
done |
done |
21 |
872d |
916d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel panic: stack is corrupted in __lock_acquire (5)
ntfs3
|
2 |
C |
error |
done |
18 |
870d |
1247d
|
25/29 |
825d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txLock
jfs
|
-1 |
C |
inconclusive |
done |
10 |
873d |
990d
|
25/29 |
830d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in lock_two_nondirectories
ext4
|
-1 |
C |
|
|
3 |
883d |
893d
|
25/29 |
830d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in utf8nlookup
exfat
ext4
|
2 |
C |
done |
done |
3 |
873d |
980d
|
25/29 |
830d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in ext4_enable_quotas
ext4
|
-1 |
C |
error |
done |
16 |
874d |
1055d
|
25/29 |
830d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: out-of-bounds Read in ext4_ext_remove_space
ext4
|
17 |
C |
error |
done |
8 |
873d |
1047d
|
25/29 |
830d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: vmalloc-out-of-bounds Read in cleanup_bitmap_list
fs
|
17 |
C |
error |
done |
100 |
875d |
1306d
|
25/29 |
830d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in hfsplus_read_wrapper
hfs
|
19 |
C |
inconclusive |
done |
7 |
881d |
1104d
|
25/29 |
831d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: null-ptr-deref Read in ida_free (4)
bluetooth
|
11 |
C |
done |
done |
29 |
885d |
924d
|
25/29 |
832d |
af73483f4e8b
ida: Fix crash in ida_free when the bitmap is empty
|
|
KASAN: use-after-free Read in set_de_name_and_namelen
fs
|
19 |
C |
error |
done |
15 |
877d |
1279d
|
25/29 |
833d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dtSearch
jfs
|
19 |
C |
error |
done |
33 |
876d |
1339d
|
25/29 |
833d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbSplit
jfs
|
-1 |
C |
error |
done |
7 |
876d |
1331d
|
25/29 |
837d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in hci_rfkill_set_block
bluetooth
|
4 |
C |
done |
|
3391 |
873d |
946d
|
25/29 |
842d |
769bf60e17ee
Bluetooth: Fix deadlock in vhci_send_frame
|
|
KASAN: use-after-free Read in udf_sync_fs
udf
|
19 |
C |
done |
done |
37 |
880d |
1019d
|
25/29 |
843d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in ext4_convert_inline_data_nolock
ext4
|
19 |
C |
error |
done |
7 |
880d |
1156d
|
25/29 |
843d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING: ODEBUG bug in netdev_run_todo
batman
|
-1 |
C |
error |
error |
5467 |
1067d |
2121d
|
25/29 |
844d |
abac3ac97fe8
batman-adv: Broken sync while rescheduling delayed work
|
|
BUG: unable to handle kernel NULL pointer dereference in reiserfs_find_entry
fs
|
19 |
C |
error |
done |
25 |
880d |
1317d
|
25/29 |
844d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in ext4_handle_clustersize (2)
ext4
|
-1 |
C |
error |
done |
3 |
881d |
885d
|
25/29 |
844d |
6f861765464f
fs: Block writes to mounted block devices
|
|
possible deadlock in seq_read_iter (2)
overlayfs
|
4 |
C |
done |
done |
14 |
883d |
1042d
|
25/29 |
845d |
da40448ce4eb
fs: move file_start_write() into direct_splice_actor()
|
|
KMSAN: uninit-value in io_rw_fail
io-uring
|
7 |
C |
|
|
25 |
848d |
864d
|
25/29 |
845d |
0a535eddbe0d
io_uring/rw: ensure io->bytes_done is always initialized
|
|
KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim (2)
net
|
7 |
C |
|
|
17 |
847d |
872d
|
25/29 |
845d |
d375b98e0248
ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
|
|
kernel BUG in ntfs_truncate
ntfs3
|
-1 |
C |
error |
done |
4 |
882d |
1240d
|
25/29 |
846d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in hfsplus_find_init
hfs
|
1 |
C |
error |
done |
1 |
888d |
983d
|
25/29 |
846d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in reiserfs_get_unused_objectid
fs
|
19 |
C |
inconclusive |
done |
3 |
882d |
1155d
|
25/29 |
846d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in timerqueue_del (2)
kernel
|
2 |
C |
done |
done |
3 |
888d |
1030d
|
25/29 |
846d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in udf_new_block
udf
|
-1 |
C |
inconclusive |
done |
31 |
882d |
1166d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in __mark_chain_precision (3)
bpf
|
-1 |
C |
done |
|
19 |
877d |
898d
|
25/29 |
847d |
482d548d40b0
bpf: handle fake register spill to stack with BPF_ST_MEM instruction
|
|
KMSAN: uninit-value in subflow_check_req
mptcp
|
7 |
C |
|
|
63 |
873d |
868d
|
25/29 |
847d |
66ff70df1a91
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
|
|
KASAN: use-after-free Read in ext4_find_extent (3)
prio:low
ext4
|
19 |
C |
error |
done |
31 |
883d |
1064d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in ext4_write_inline_data_end
ext4
|
-1 |
C |
error |
done |
32 |
884d |
1181d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in path_mount (2)
jfs
|
1 |
C |
error |
done |
8 |
883d |
1012d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: use-after-free Read in crc_itu_t
udf
|
19 |
C |
inconclusive |
done |
50 |
883d |
1333d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in scatterwalk_copychunks (5)
crypto
|
2 |
C |
done |
|
2920 |
876d |
882d
|
25/29 |
847d |
744e1885922a
crypto: scomp - fix req->dst buffer overflow
|
|
KASAN: slab-out-of-bounds Write in squashfs_readahead (2)
squashfs
|
21 |
C |
done |
|
2 |
931d |
927d
|
25/29 |
847d |
12427de9439d
Squashfs: fix variable overflow triggered by sysbot
|
|
KASAN: slab-use-after-free Read in nla_find
bpf
net
|
19 |
C |
done |
|
4 |
891d |
890d
|
25/29 |
847d |
2130c519a401
bpf: Use nla_ok() instead of checking nla_len directly
|
|
KASAN: slab-use-after-free Read in nfc_alloc_send_skb
net
nfc
|
19 |
C |
error |
|
3 |
900d |
930d
|
25/29 |
847d |
c95f919567d6
nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
|
|
KASAN: slab-use-after-free Read in jfs_evict_inode
jfs
|
19 |
syz |
error |
|
1 |
947d |
943d
|
25/29 |
847d |
e0e1958f4c36
jfs: fix uaf in jfs_evict_inode
|
|
kernel BUG in move_pages
mm
|
-1 |
C |
done |
|
2 |
870d |
866d
|
25/29 |
847d |
5d4747a6cc8e
userfaultfd: avoid huge_zero_page in UFFDIO_MOVE
|
|
general protection fault in bio_first_folio
block
|
2 |
C |
done |
|
683 |
859d |
893d
|
25/29 |
847d |
7bed6f3d08b7
block: Fix iterating over an empty bio with bio_for_each_folio_all
|
|
general protection fault in bfs_get_block (2)
bfs
|
2 |
C |
error |
done |
2 |
895d |
913d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in arc4_crypt
crypto
|
17 |
C |
done |
|
6 |
879d |
890d
|
25/29 |
847d |
37c6fc323a81
crypto: skcipher - Pass statesize for simple lskcipher instances
|
|
WARNING in get_pte_pfn
mm
io-uring
|
-1 |
C |
error |
|
2 |
876d |
887d
|
25/29 |
847d |
c28ac3c7eb94
mm/mglru: skip special VMAs in lru_gen_look_around()
|
|
UBSAN: array-index-out-of-bounds in diNewExt
jfs
|
15 |
C |
inconclusive |
|
31 |
847d |
899d
|
25/29 |
847d |
49f9637aafa6
jfs: fix array-index-out-of-bounds in diNewExt
|
|
INFO: task hung in gfs2_gl_hash_clear (3)
gfs2
|
1 |
C |
error |
done |
80 |
886d |
1275d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: corrupted list in efivar_entry_remove
efi
|
8 |
C |
|
|
104 |
849d |
1369d
|
25/29 |
847d |
cdb46a8aefbf
efivarfs: Move efivarfs list into superblock s_fs_info
|
|
general protection fault in dtSplitUp
jfs
|
2 |
C |
error |
done |
2 |
897d |
1333d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in __bio_release_pages
block
|
10 |
C |
|
|
6 |
864d |
862d
|
25/29 |
847d |
7bed6f3d08b7
block: Fix iterating over an empty bio with bio_for_each_folio_all
|
|
general protection fault in tomoyo_check_acl (3)
hfs
|
2 |
C |
inconclusive |
done |
1 |
897d |
1054d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in hfsc_tcf_block
net
|
2 |
C |
done |
|
1020 |
870d |
877d
|
25/29 |
847d |
94e2557d086a
net: sched: move block device tracking into tcf_block_get/put_ext()
|
|
possible deadlock in chown_common
fs
|
4 |
C |
error |
done |
22 |
855d |
1325d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in __udf_add_aext (2)
udf
|
-1 |
syz |
error |
done |
6 |
898d |
1078d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: sleeping function called from invalid context in glock_hash_walk
gfs2
|
5 |
C |
done |
done |
31 |
893d |
994d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: array-index-out-of-bounds in diWrite
jfs
|
15 |
C |
error |
done |
13 |
894d |
1314d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in pvr2_context_set_notify
usb
pvrusb2
|
22 |
C |
|
|
3814 |
847d |
1053d
|
25/29 |
847d |
ded85b0c0edd
media: pvrusb2: fix use after free on context disconnection
|
|
BUG: sleeping function called from invalid context in gfs2_make_fs_ro
gfs2
|
5 |
C |
error |
done |
1 |
893d |
1037d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-use-after-free Read in kill_f2fs_super
f2fs
|
19 |
C |
done |
|
2331 |
860d |
865d
|
25/29 |
847d |
c919330dd578
f2fs: fix double free of f2fs_sb_info
|
|
kernel BUG in balance_leaf
fs
|
-1 |
C |
error |
done |
16 |
887d |
1239d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING: locking bug in corrupted (2)
bpf
|
4 |
C |
done |
done |
1 |
897d |
1051d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in mptcp_check_listen_stop
mptcp
|
-1 |
C |
done |
|
47 |
847d |
895d
|
25/29 |
847d |
4c0288299fd0
mptcp: prevent tcp diag from closing listener subflows
|
|
WARNING in __sk_msg_free
bpf
net
|
-1 |
C |
done |
|
4 |
874d |
872d
|
25/29 |
847d |
dc9dfc8dc629
net: tls, fix WARNIING in __sk_msg_free
|
|
possible deadlock in pipe_write
fs
|
4 |
C |
inconclusive |
|
181 |
850d |
1528d
|
25/29 |
847d |
055ca8355991
fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
|
|
KMSAN: uninit-value in z_erofs_lz4_decompress (2)
erofs
|
7 |
C |
|
|
33 |
849d |
881d
|
25/29 |
847d |
496530c7c1df
erofs: avoid debugging output for (de)compressed data
|
|
INFO: trying to register non-static key in do_mpage_readpage
ntfs3
|
-1 |
C |
error |
done |
24 |
891d |
1245d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in direntry_check_right
fs
|
-1 |
C |
done |
done |
2 |
886d |
929d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in dsa_user_changeupper
net
|
17 |
C |
done |
|
1303 |
854d |
868d
|
25/29 |
847d |
844f104790bd
net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
|
|
WARNING in __folio_rmap_sanity_checks
mm
|
-1 |
C |
done |
|
168 |
870d |
874d
|
25/29 |
847d |
9c5938694cd0
mm/rmap: silence VM_WARN_ON_FOLIO() in __folio_rmap_sanity_checks()
|
|
WARNING in ea_get
jfs
|
-1 |
C |
error |
done |
10 |
890d |
1335d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
INFO: task hung in find_inode_fast (2)
ext4
|
1 |
C |
unreliable |
done |
10 |
895d |
1048d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
KASAN: slab-out-of-bounds Read in search_by_key (2)
fs
|
17 |
C |
|
|
4435 |
869d |
1300d
|
25/29 |
847d |
dd8f87f21dc3
reiserfs: fix uninit-value in comp_keys
|
|
UBSAN: array-index-out-of-bounds in dtSplitRoot
jfs
|
15 |
C |
error |
inconclusive |
2 |
991d |
1319d
|
25/29 |
847d |
27e56f59bab5
UBSAN: array-index-out-of-bounds in dtSplitRoot
|
|
possible deadlock in ntfs_set_state
ntfs3
|
4 |
C |
done |
done |
1360 |
859d |
1253d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
kernel BUG in txEnd
jfs
|
-1 |
C |
inconclusive |
done |
6 |
857d |
1071d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING: suspicious RCU usage in __cfg80211_bss_update
wireless
|
4 |
C |
done |
|
92 |
873d |
874d
|
25/29 |
847d |
1184950e341c
wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
|
|
general protection fault in qdisc_create
net
|
10 |
C |
done |
|
2821 |
870d |
877d
|
25/29 |
847d |
94e2557d086a
net: sched: move block device tracking into tcf_block_get/put_ext()
|
|
BUG: unable to handle kernel paging request in lookup_open
ntfs3
|
8 |
C |
error |
done |
1 |
896d |
1041d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in gfs2_rgrp_dump
gfs2
|
10 |
C |
done |
|
9 |
904d |
1247d
|
25/29 |
847d |
8877243beafa
gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
|
|
general protection fault in __hrtimer_run_queues (3)
kernel
|
17 |
C |
error |
done |
2 |
898d |
1063d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in dev_watchdog (2)
net
|
-1 |
C |
inconclusive |
|
6791 |
850d |
2249d
|
25/29 |
847d |
e316dd1cf135
net: don't dump stack on queue timeout
|
|
WARNING in kvm_mmu_notifier_change_pte
kvm
|
-1 |
C |
inconclusive |
|
2 |
885d |
895d
|
25/29 |
847d |
4cccb6221cae
fs/proc/task_mmu: move mmu notification mechanism inside mm lock
|
|
KMSAN: uninit-value in netif_skb_features (2)
net
|
7 |
C |
|
|
9 |
891d |
979d
|
25/29 |
847d |
9181d6f8a2bb
net: add more sanity check in virtio_net_hdr_to_skb()
|
|
INFO: task hung in hwrng_fillfn
crypto
|
1 |
C |
error |
|
27 |
849d |
913d
|
25/29 |
847d |
78aafb3884f6
hwrng: core - Fix page fault dead lock on mmap-ed hwrng
|
|
kernel BUG in ext4_split_extent_at (2)
ext4
|
-1 |
C |
error |
done |
3 |
884d |
1079d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
BUG: unable to handle kernel NULL pointer dereference in gfs2_rindex_update
gfs2
|
10 |
C |
error |
done |
4 |
893d |
1251d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
WARNING in ip6_route_info_create
net
|
-1 |
C |
done |
|
241 |
897d |
901d
|
25/29 |
847d |
a3c205d0560f
ipv6: do not check fib6_has_expires() in fib6_info_release()
|
|
general protection fault in page_pool_unlist
net
|
2 |
C |
done |
|
648 |
908d |
909d
|
25/29 |
847d |
f9893fdac319
net: page_pool: fix general protection fault in page_pool_unlist
|
|
KMSAN: uninit-value in shrinker_alloc
mm
|
7 |
syz |
|
|
2 |
897d |
875d
|
25/29 |
847d |
7fba9420b726
mm: shrinker: use kvzalloc_node() from expand_one_shrinker_info()
|
|
possible deadlock in __run_timers
kernel
|
4 |
C |
error |
done |
1 |
895d |
891d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
UBSAN: shift-out-of-bounds in dbJoin
jfs
|
-1 |
C |
error |
|
3 |
940d |
1325d
|
25/29 |
847d |
cca974daeb6c
jfs: fix shift-out-of-bounds in dbJoin
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
jfs
|
15 |
C |
error |
error |
41 |
861d |
1339d
|
25/29 |
847d |
9862ec7ac1cb
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
74ecdda68242
jfs: fix array-index-out-of-bounds in dbAdjTree
|
|
KASAN: slab-use-after-free Read in destroy_device_list
f2fs
|
19 |
C |
done |
|
3597 |
860d |
865d
|
25/29 |
847d |
c919330dd578
f2fs: fix double free of f2fs_sb_info
|
|
kernel BUG in gfs2_quota_cleanup
gfs2
|
-1 |
C |
done |
|
4 |
889d |
989d
|
25/29 |
847d |
71733b492200
gfs2: fix kernel BUG in gfs2_quota_cleanup
|
|
KMSAN: uninit-value in validate_xmit_skb
net
|
7 |
C |
|
|
21 |
849d |
866d
|
25/29 |
847d |
9181d6f8a2bb
net: add more sanity check in virtio_net_hdr_to_skb()
|
|
kernel BUG in flush_journal_list
exfat
|
-1 |
C |
done |
done |
3 |
891d |
1079d
|
25/29 |
847d |
6f861765464f
fs: Block writes to mounted block devices
|
|
general protection fault in htb_tcf_block
net
|
2 |
C |
done |
|
885 |
870d |
877d
|
25/29 |
847d |
94e2557d086a
net: sched: move block device tracking into tcf_block_get/put_ext()
|
|
kernel BUG in prog_array_map_poke_run
bpf
|
-1 |
C |
done |
done |
35 |
891d |
931d
|
25/29 |
855d |
4b7de801606e
bpf: Fix prog_array_map_poke_run map poke update
|
|
general protection fault in skb_segment (4)
net
|
8 |
C |
error |
|
4 |
892d |
899d
|
25/29 |
856d |
23d05d563b7e
net: prevent mss overflow in skb_segment()
|
|
WARNING in fib6_add (5)
net
|
-1 |
C |
done |
|
6 |
901d |
1064d
|
25/29 |
856d |
75475bb51e78
ipv6: fix potential NULL deref in fib6_add()
|
|
KASAN: slab-use-after-free Read in btrfs_qgroup_account_extent
btrfs
|
22 |
C |
done |
|
40 |
926d |
936d
|
25/29 |
857d |
6c8e69e4a702
btrfs: fix race between accounting qgroup extents and removing a qgroup
|
|
KASAN: slab-out-of-bounds Read in dns_resolver_preparse
net
|
17 |
C |
done |
|
46 |
882d |
895d
|
25/29 |
857d |
1997b3cb4217
keys, dns: Fix missing size check of V1 server-list header
|
|
WARNING in rate_control_rate_init (2)
wireless
|
-1 |
C |
done |
|
9 |
888d |
1059d
|
25/29 |
857d |
c1393c132b90
wifi: mac80211: check if the existing link config remains unchanged
|
|
general protection fault in dccp_write_xmit (2)
net
|
8 |
C |
done |
|
32 |
889d |
944d
|
25/29 |
857d |
cac23b7d7627
net: Return error from sk_stream_wait_connect() if sk_wait_event() fails
|
|
WARNING in ieee80211_rfkill_poll
wireless
|
-1 |
C |
|
|
684 |
898d |
930d
|
25/29 |
857d |
8e2f6f236621
wifi: cfg80211: lock wiphy mutex for rfkill poll
|
|
general protection fault in d_path
integrity
overlayfs
|
2 |
C |
done |
|
210 |
915d |
1056d
|
25/29 |
857d |
8a924db2d7b5
fs: Pass AT_GETATTR_NOSEC flag to getattr interface function
|
|
KASAN: null-ptr-deref Write in unix_stream_bpf_update_proto
bpf
net
|
12 |
C |
done |
|
54 |
878d |
908d
|
25/29 |
857d |
8d6650646ce4
bpf: syzkaller found null ptr deref in unix_bpf proto add
|
|
memory leak in skb_copy (2)
nfc
net
|
3 |
syz |
|
|
3 |
930d |
1047d
|
25/29 |
857d |
84d2db91f14a
nfc: virtual_ncidev: Add variable to check if ndev is running
|
|
WARNING in squashfs_read_data
squashfs
|
-1 |
C |
error |
|
2 |
927d |
923d
|
25/29 |
857d |
eb66b8abae98
squashfs: squashfs_read_data need to check if the length is 0
|
|
general protection fault in hugetlb_vma_lock_write
mm
|
2 |
C |
done |
|
110 |
900d |
941d
|
25/29 |
857d |
187da0f8250a
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
|
|
general protection fault in tls_merge_open_record
net
|
2 |
syz |
unreliable |
|
5 |
940d |
940d
|
25/29 |
857d |
53f2cb491b50
tls: fix NULL deref on tls_sw_splice_eof() with empty record
|
|
WARNING in pagemap_scan_pmd_entry
fs
|
-1 |
C |
inconclusive |
|
48 |
901d |
923d
|
25/29 |
857d |
0dff1b407def
mm/pagemap: fix ioctl(PAGEMAP_SCAN) on vma check
|
|
WARNING in __alloc_skb (2)
ppp
|
-1 |
C |
done |
|
2 |
913d |
927d
|
25/29 |
857d |
c0a2a1b0d631
ppp: limit MRU to 64K
|
|
WARNING in nilfs_sufile_set_segment_usage
nilfs
|
-1 |
C |
inconclusive |
|
341 |
916d |
1334d
|
25/29 |
857d |
675abf8df135
nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
|
|
WARNING in unmap_page_range (2)
mm
|
-1 |
C |
done |
|
2112 |
897d |
923d
|
25/29 |
857d |
4980e837cab7
mm/pagemap: fix wr-protect even if PM_SCAN_WP_MATCHING not set
|
|
memory leak in btrfs_ref_tree_mod
btrfs
|
3 |
syz |
|
|
1 |
1020d |
1016d
|
25/29 |
857d |
f91192cd6859
btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
|
|
general protection fault in autofs_fill_super
autofs
|
2 |
syz |
done |
|
7 |
916d |
925d
|
25/29 |
857d |
66917f85db60
autofs: add: new_inode check in autofs_fill_super()
|
|
BUG: unable to handle kernel paging request in __pte_offset_map_lock
mm
|
8 |
C |
|
|
2 |
933d |
943d
|
25/29 |
857d |
9aa1345d66b8
mm: fix oops when filemap_map_pmd() without prealloc_pte
|
|
memory leak in ovl_parse_param
overlayfs
|
3 |
C |
|
|
1 |
931d |
927d
|
25/29 |
857d |
37f32f526438
ovl: fix memory leak in ovl_parse_param()
|
|
KMSAN: uninit-value in drm_mode_setcrtc
dri
|
7 |
C |
|
|
41 |
898d |
1074d
|
25/29 |
857d |
3823119b9c2b
drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
6e455f5dcdd1
drm/crtc: fix uninitialized variable use
|
|
WARNING in blk_mq_start_request
block
|
-1 |
C |
done |
|
29 |
915d |
932d
|
25/29 |
857d |
53f2bca26092
block/null_blk: Fix double blk_mq_start_request() warning
|
|
KASAN: slab-use-after-free Read in unix_stream_read_actor
net
|
19 |
C |
error |
|
6 |
912d |
928d
|
25/29 |
857d |
4b7b492615cf
af_unix: fix use-after-free in unix_stream_read_actor()
|
|
WARNING in create_pending_snapshot
btrfs
|
-1 |
C |
done |
|
3 |
924d |
929d
|
25/29 |
857d |
8049ba5d0a28
btrfs: do not abort transaction if there is already an existing qgroup
|
|
general protection fault in ptp_ioctl
net
|
2 |
C |
done |
|
8 |
932d |
933d
|
25/29 |
857d |
8a4f030dbced
ptp: Fixes a null pointer dereference in ptp_ioctl
|
|
kernel BUG in ip6gre_header (2)
net
|
-1 |
C |
|
|
2 |
956d |
971d
|
25/29 |
857d |
3cffa2ddc4d3
bonding: stop the device in bond_setup_by_slave()
|
|
KMSAN: uninit-value in mptcp_incoming_options
mptcp
|
7 |
C |
|
|
93 |
908d |
916d
|
25/29 |
857d |
237ff253f2d4
mptcp: fix uninit-value in mptcp_incoming_options
|
|
WARNING in __kernel_write_iter
btrfs
|
-1 |
C |
inconclusive |
|
1149 |
908d |
1325d
|
25/29 |
857d |
0ac1d13a55eb
btrfs: send: ensure send_fd is writable
|
|
memory leak in btrfs_add_delayed_tree_ref
btrfs
|
3 |
C |
|
|
6 |
928d |
932d
|
25/29 |
857d |
609d99379736
btrfs: fix qgroup record leaks when using simple quotas
|
|
WARNING in ext4_dio_write_end_io
ext4
|
-1 |
C |
done |
|
2 |
917d |
916d
|
25/29 |
857d |
619f75dae2cf
ext4: fix warning in ext4_dio_write_end_io()
|
|
KASAN: slab-use-after-free Read in iommufd_vfio_ioas
iommu
|
19 |
C |
done |
|
4 |
918d |
936d
|
25/29 |
857d |
6f9c4d8c468c
iommufd: Do not UAF during iommufd_put_object()
|
|
BUG: unable to handle kernel paging request in nsim_bpf
net
|
8 |
C |
|
|
3 |
914d |
930d
|
25/29 |
857d |
c0c6bde586c7
netdevsim: Don't accept device bound programs
|
|
BUG: Dentry still in use in unmount
f2fs
|
-1 |
C |
done |
|
58 |
893d |
1370d
|
25/29 |
857d |
413ba91089c7
ovl: fix dentry reference leak after changes to underlying layers
|
|
kernel BUG in ipgre_header
net
|
-1 |
C |
|
|
4 |
907d |
921d
|
25/29 |
857d |
3cffa2ddc4d3
bonding: stop the device in bond_setup_by_slave()
|
|
KASAN: use-after-free Read in j1939_session_get_by_addr
|
19 |
C |
done |
error |
66 |
2383d |
2395d
|
25/29 |
865d |
d966635b384b
can: j1939: transport: make sure the aborted session will be deactivated only once
|
|
KASAN: stack-out-of-bounds Read in tcp_inbound_hash
net
|
17 |
C |
done |
|
28 |
927d |
940d
|
25/29 |
867d |
02f0717e9835
net/tcp: fix possible out-of-bounds reads in tcp_hash_fail()
|
|
WARNING in dev_index_reserve (2)
net
|
-1 |
C |
done |
|
68 |
947d |
957d
|
25/29 |
867d |
cbfbfe3aee71
tun: prevent negative ifindex
|
|
possible deadlock in super_lock
ext4
|
4 |
C |
done |
done |
52 |
915d |
996d
|
25/29 |
868d |
fd1464105cb3
fs: Avoid grabbing sb->s_umount under bdev->bd_holder_lock
|
|
KMSAN: uninit-value in dccp_v6_err
net
|
7 |
C |
|
|
4 |
982d |
987d
|
25/29 |
869d |
6af289746a63
dccp: fix dccp_v4_err()/dccp_v6_err() again
|
|
UBSAN: array-index-out-of-bounds in xtSearch
jfs
|
15 |
C |
unreliable |
done |
122 |
913d |
1331d
|
25/29 |
869d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in txCommit
jfs
|
15 |
C |
error |
done |
396 |
936d |
1318d
|
25/29 |
869d |
a779ed754e52
jfs: define xtree root and page independently
|
|
inconsistent lock state in nf_connlabels_put
netfilter
|
4 |
C |
done |
|
4 |
943d |
944d
|
25/29 |
874d |
643d12603664
netfilter: conntrack: switch connlabels to atomic_t
|
|
KASAN: use-after-free Read in __media_entity_remove_links
usb
media
|
19 |
C |
|
|
7 |
2255d |
2353d
|
25/29 |
874d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
KASAN: slab-out-of-bounds Read in ntfs_listxattr
ntfs3
|
17 |
C |
done |
|
70 |
887d |
1267d
|
25/29 |
886d |
8e7e27b2ee1e
fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
3c675ddffb17
ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
|
|
general protection fault in scatterwalk_copychunks (4)
net
crypto
|
19 |
C |
done |
done |
1341 |
886d |
1898d
|
25/29 |
886d |
cfaa80c91f6f
net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
|
|
WARNING in page_copy_sane
fs
mm
|
-1 |
C |
done |
|
3 |
985d |
982d
|
25/29 |
888d |
a08c7193e4f1
mm/filemap: remove hugetlb special casing in filemap.c
|
|
general protection fault in ovl_encode_real_fh
overlayfs
|
2 |
C |
done |
|
3 |
967d |
967d
|
25/29 |
888d |
c7242a45cb8c
ovl: fix NULL pointer defer when encoding non-decodable lower fid
|
|
possible deadlock in __btrfs_release_delayed_node (3)
btrfs
|
4 |
syz |
|
|
2 |
1006d |
1002d
|
25/29 |
888d |
e110f8911ddb
btrfs: fix lockdep splat and potential deadlock after failure running delayed items
|
|
KMSAN: uninit-value in smsc95xx_reset
usb
|
7 |
C |
|
|
425 |
944d |
2108d
|
25/29 |
888d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
general protection fault in lbmStartIO
jfs
|
2 |
C |
done |
|
2 |
955d |
962d
|
25/29 |
888d |
6306ff39a7fc
jfs: fix log->bdev_handle null ptr deref in lbmStartIO
|
|
general protection fault in usb_hub_create_port_device
kernel
|
2 |
C |
done |
done |
4 |
988d |
994d
|
25/29 |
888d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
KASAN: slab-out-of-bounds Read in create_monitor_event
bluetooth
|
17 |
C |
done |
|
952 |
946d |
961d
|
25/29 |
888d |
18f547f3fc07
Bluetooth: hci_sock: fix slab oob read in create_monitor_event
|
|
WARNING: zero-size vmalloc in print_tainted
bpf
net
|
-1 |
C |
|
|
79 |
1080d |
1114d
|
25/29 |
888d |
a12bbb3cccf0
xdp: Fix zero-size allocation warning in xskq_create()
|
|
kernel BUG in __block_write_begin_int
block
|
-1 |
C |
done |
|
14 |
977d |
996d
|
25/29 |
888d |
4aa8cdd5e523
iomap: handle error conditions more gracefully in iomap_to_bh
|
|
WARNING in ext4_iomap_begin (2)
ext4
|
-1 |
C |
done |
|
7 |
960d |
1075d
|
25/29 |
888d |
ce56d21355cd
ext4: fix racy may inline data check in dio write
|
|
KASAN: use-after-free Read in bcmp
ntfs3
|
19 |
C |
done |
|
289 |
891d |
1050d
|
25/29 |
888d |
34e6552a442f
fs/ntfs3: Fix OOB read in ntfs_init_from_boot
|
|
general protection fault in serio_handle_event
kernel
|
2 |
C |
done |
done |
6 |
983d |
992d
|
25/29 |
888d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
KMSAN: uninit-value in IP6_ECN_decapsulate
net
|
7 |
C |
|
|
981 |
889d |
2805d
|
25/29 |
888d |
484b4833c604
hsr: Fix uninit-value access in fill_frame_info()
|
|
UBSAN: array-index-out-of-bounds in diAlloc
jfs
|
15 |
C |
error |
inconclusive |
37 |
928d |
1337d
|
25/29 |
888d |
05d9ea1ceb62
jfs: fix array-index-out-of-bounds in diAlloc
|
|
KMSAN: uninit-value in __tipc_nl_bearer_enable (2)
tipc
|
7 |
C |
|
|
21 |
934d |
979d
|
25/29 |
888d |
19b3f72a41a8
tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
|
|
memory leak in kcm_sendmsg (2)
net
|
3 |
C |
|
|
1 |
1001d |
1035d
|
25/29 |
888d |
c821a88bd720
kcm: Fix memory leak in error path of kcm_sendmsg()
|
|
INFO: task hung in clean_bdev_aliases
block
|
1 |
C |
done |
|
201 |
969d |
995d
|
25/29 |
888d |
381c043233e6
iomap: add a workaround for racy i_size updates on block devices
|
|
KMSAN: uninit-value in virtio_transport_recv_pkt
virt
kvm
net
|
7 |
C |
|
|
20713 |
929d |
943d
|
25/29 |
888d |
34c4effacfc3
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
|
|
WARNING in skb_warn_bad_offload (4)
net
|
-1 |
C |
done |
|
1763 |
950d |
978d
|
25/29 |
888d |
fc8b2a619469
net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
|
|
UBSAN: array-index-out-of-bounds in io_setup_async_msg
io-uring
|
15 |
C |
done |
|
3 |
987d |
986d
|
25/29 |
888d |
c21a8027ad8a
io_uring/net: fix iter retargeting for selected buf
|
|
WARNING in bpf_mprog_attach
bpf
|
-1 |
C |
|
|
3 |
966d |
973d
|
25/29 |
888d |
f9b0e1088bbf
bpf, mprog: Fix maximum program check on mprog attachment
|
|
WARNING in __ip6_append_data
net
|
-1 |
C |
unreliable |
|
5 |
958d |
987d
|
25/29 |
888d |
9d4c75800f61
ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
|
|
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e (2)
ntfs3
|
10 |
C |
done |
|
4 |
956d |
1028d
|
25/29 |
888d |
1f9b94af923c
fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e()
|
|
BUG: corrupted list in ptp_open
net
|
8 |
C |
done |
|
7 |
934d |
943d
|
25/29 |
888d |
1bea2c3e6df8
ptp: fix corrupted list in ptp_open
b714ca2ccf6a
ptp: ptp_read should not release queue
|
|
general protection fault in nfc_register_device
kernel
|
11 |
C |
done |
|
190 |
889d |
1003d
|
25/29 |
888d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
possible deadlock in rfkill_send_events
wireless
|
4 |
C |
done |
|
22 |
950d |
960d
|
25/29 |
888d |
f2ac54ebf856
net: rfkill: reduce data->mtx scope in rfkill_fop_open
|
|
general protection fault in wpan_phy_register
kernel
|
2 |
C |
done |
done |
7 |
980d |
987d
|
25/29 |
888d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
BUG: Bad page map (7)
mm
|
-1 |
C |
done |
|
19 |
968d |
990d
|
25/29 |
888d |
ce60f27bb62d
mm: abstract moving to the next PFN
|
|
KMSAN: uninit-value in mii_nway_restart
usb
|
7 |
C |
|
|
2449 |
957d |
2549d
|
25/29 |
888d |
8f8abb863fa5
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
|
|
WARNING in bpf_mprog_pos_before
bpf
|
-1 |
C |
done |
|
26 |
966d |
973d
|
25/29 |
888d |
f9b0e1088bbf
bpf, mprog: Fix maximum program check on mprog attachment
|
|
general protection fault in io_get_cqe_overflow
io-uring
|
2 |
C |
done |
|
2 |
970d |
967d
|
25/29 |
888d |
1658633c0465
io_uring: ensure io_lockdep_assert_cq_locked() handles disabled rings
|
|
general protection fault in hci_register_dev
kernel
|
2 |
C |
unreliable |
done |
4 |
985d |
992d
|
25/29 |
888d |
fd6f7ad2fd4d
driver core: return an error when dev_set_name() hasn't happened
|
|
WARNING in skb_checksum_help (2)
net
|
-1 |
C |
done |
|
3816 |
888d |
978d
|
25/29 |
888d |
fc8b2a619469
net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
|
|
divide error in iommufd_test
iommu
|
2 |
C |
done |
|
4 |
940d |
942d
|
25/29 |
888d |
2e22aac3ea9c
iommufd/selftest: Fix page-size check in iommufd_test_dirty()
|
|
KMSAN: uninit-value in tipc_nl_node_reset_link_stats
tipc
|
7 |
C |
|
|
2 |
969d |
979d
|
25/29 |
888d |
19b3f72a41a8
tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
|
|
WARNING: suspicious RCU usage in gfs2_permission
gfs2
|
4 |
C |
done |
|
263 |
939d |
959d
|
25/29 |
888d |
074d7306a4fe
gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
|
|
BUG: corrupted list in nfc_llcp_register_device
net
nfc
|
22 |
C |
error |
|
136 |
964d |
1253d
|
25/29 |
888d |
dfc7f7a988da
net: nfc: llcp: Add lock when modifying device list
|
|
KASAN: slab-use-after-free Read in pwq_release_workfn
kernel
|
19 |
C |
unreliable |
|
79 |
950d |
1000d
|
25/29 |
888d |
643445531829
workqueue: Fix UAF report by KASAN in pwq_release_workfn()
|
|
UBSAN: array-index-out-of-bounds in dbFindLeaf
jfs
|
15 |
C |
error |
|
6 |
987d |
1302d
|
25/29 |
888d |
22cad8bc1d36
jfs: fix array-index-out-of-bounds in dbFindLeaf
|
|
KMSAN: uninit-value in smsc75xx_bind
usb
|
7 |
C |
|
|
63 |
986d |
2483d
|
25/29 |
888d |
e9c65989920f
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
|
|
BUG: sleeping function called from invalid context in __hci_cmd_sync_sk
bluetooth
|
5 |
C |
done |
|
34 |
957d |
1074d
|
25/29 |
888d |
acab8ff29a2a
Bluetooth: ISO: Fix invalid context error
|
|
general protection fault in bpf_prog_offload_verifier_prep
bpf
|
8 |
C |
done |
|
31 |
978d |
996d
|
25/29 |
888d |
1a49f4195d34
bpf: Avoid dummy bpf_offload_netdev in __bpf_prog_dev_bound_init
|
|
possible deadlock in btrfs_search_slot (2)
btrfs
|
4 |
C |
error |
|
2 |
1009d |
1005d
|
25/29 |
888d |
ee34a82e890a
btrfs: release path before inode lookup during the ino lookup ioctl
|
|
KASAN: slab-out-of-bounds Read in imon_probe
media
usb
|
17 |
syz |
|
|
2 |
983d |
1005d
|
25/29 |
888d |
a1766a4fd83b
media: imon: fix access to invalid resource for the second interface
|
|
KASAN: slab-use-after-free Write in gfs2_qd_dealloc
gfs2
|
22 |
C |
inconclusive |
|
27 |
917d |
970d
|
25/29 |
888d |
bdcb8aa434c6
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
|
|
memory leak in binder_transaction (2)
kernel
|
3 |
C |
|
|
2 |
988d |
1283d
|
25/29 |
888d |
1aa3aaf8953c
binder: fix memory leaks of spam and pending work
|
|
general protection fault in inherit_task_group
perf
|
2 |
C |
done |
done |
4 |
941d |
938d
|
25/29 |
888d |
a71ef31485bb
perf/core: Fix potential NULL deref
|
|
KMSAN: uninit-value in smsc95xx_eeprom_confirm_not_busy
usb
|
7 |
C |
|
|
521 |
943d |
1056d
|
25/29 |
888d |
51a32e828109
net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
|
|
UBSAN: shift-out-of-bounds in nci_activate_target
net
nfc
|
-1 |
C |
done |
|
6 |
966d |
1150d
|
25/29 |
888d |
354a6e707e29
nfc: nci: assert requested protocol is valid
|
|
KASAN: use-after-free Read in powermate_config_complete (4)
input
|
19 |
syz |
done |
unreliable |
14 |
992d |
1364d
|
25/29 |
888d |
5c15c60e7be6
Input: powermate - fix use-after-free in powermate_config_complete
|
|
UBSAN: shift-out-of-bounds in set_flicker
usb
media
|
-1 |
syz |
|
|
5 |
933d |
1013d
|
25/29 |
888d |
099be1822d1f
media: gspca: cpia1: shift-out-of-bounds in set_flicker
|
|
UBSAN: shift-out-of-bounds in ntfs_fill_super (2)
ntfs3
|
-1 |
C |
error |
|
5716 |
914d |
1183d
|
25/29 |
888d |
91a4b1ee78cb
fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super
|
|
possible deadlock in mnt_want_write (2)
integrity
overlayfs
|
4 |
C |
done |
|
867 |
938d |
1806d
|
25/29 |
888d |
e044374a8a0a
ima: annotate iint mutex to avoid lockdep false positive warnings
|
|
WARNING in inet_csk_get_port (2)
net
|
-1 |
C |
done |
|
88 |
949d |
979d
|
25/29 |
888d |
8702cf12e6ba
tcp: Fix listen() warning with v4-mapped-v6 address.
|
|
WARNING in ieee80211_get_ringparam
wireless
|
-1 |
C |
done |
|
151 |
974d |
981d
|
25/29 |
888d |
6b348f6e34ce
wifi: mac80211: ethtool: always hold wiphy mutex
|
|
KASAN: slab-use-after-free Read in ntfs_write_bh
ntfs3
|
19 |
C |
done |
|
100 |
964d |
988d
|
25/29 |
888d |
493c71926c20
ntfs3: put resources during ntfs_fill_super()
|
|
KASAN: use-after-free Read in ntfs_test_inode
ntfs3
|
19 |
C |
done |
|
402 |
901d |
1836d
|
25/29 |
888d |
493c71926c20
ntfs3: put resources during ntfs_fill_super()
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
jfs
|
15 |
C |
inconclusive |
inconclusive |
52 |
911d |
1339d
|
25/29 |
888d |
64933ab7b048
fs/jfs: Add validity check for db_maxag and db_agpref
|
|
KMSAN: uninit-value in fq_change
net
|
7 |
C |
|
|
8 |
930d |
932d
|
25/29 |
888d |
f1a3b283f852
UPSTREAM: net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP
|
|
KMSAN: uninit-value in llc_station_rcv
net
|
7 |
C |
|
|
2 |
943d |
952d
|
25/29 |
888d |
7b3ba18703a6
llc: verify mac len before reading mac header
|
|
KASAN: invalid-free in ovl_copy_up_one
overlayfs
|
24 |
C |
done |
|
2 |
978d |
974d
|
25/29 |
888d |
5b02bfc1e7e3
ovl: do not encode lower fh with upper sb_writers held
|
|
WARNING in try_grab_page
xfs
mm
|
-1 |
C |
|
|
48 |
973d |
1058d
|
23/29 |
957d |
f443fd5af5db
crypto, cifs: fix error handling in extract_iter_to_sg()
|
|
kernel BUG in add_new_free_space
btrfs
|
-1 |
C |
|
|
3 |
1062d |
1130d
|
23/29 |
957d |
d8ccbd21918f
btrfs: remove BUG_ON()'s in add_new_free_space()
|
|
INFO: rcu detected stall in sys_close (5)
net
|
1 |
C |
done |
|
1 |
1002d |
1002d
|
23/29 |
957d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
possible deadlock in shmem_uncharge (2)
mm
|
4 |
C |
done |
|
29 |
1045d |
1044d
|
23/29 |
957d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
|
WARNING in unregister_vlan_dev
net
|
-1 |
C |
done |
|
1310 |
1010d |
1019d
|
23/29 |
957d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
general protection fault in __drop_extent_tree
f2fs
|
2 |
C |
error |
|
3 |
1102d |
1142d
|
23/29 |
957d |
458c15dfbce6
f2fs: don't reset unchangable mount option in f2fs_remount()
|
|
general protection fault in io_uring_show_fdinfo
io-uring
|
2 |
C |
done |
|
17 |
990d |
998d
|
23/29 |
957d |
32f5dea040ee
io_uring/fdinfo: only print ->sq_array[] if it's there
|
|
KASAN: slab-out-of-bounds Read in read_descriptors (3)
usb
|
17 |
C |
error |
|
7 |
1045d |
1072d
|
23/29 |
957d |
ff33299ec8bb
USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
|
|
WARNING in do_chunk_alloc
btrfs
|
-1 |
C |
error |
done |
35 |
1064d |
1281d
|
23/29 |
957d |
cd361199ff23
btrfs: wait on uncached block groups on every allocation loop
|
|
general protection fault in generic_hwtstamp_ioctl_lower
net
|
2 |
C |
done |
|
7 |
1024d |
1027d
|
23/29 |
957d |
c35e927cbe09
net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib()
|
|
INFO: rcu detected stall in unix_release
net
|
1 |
C |
done |
|
1 |
1021d |
1017d
|
23/29 |
957d |
da71714e359b
net/sched: fix a qdisc modification with ambiguous command request
|
|
UBSAN: array-index-out-of-bounds in f2fs_iget
f2fs
|
15 |
C |
done |
|
6 |
997d |
1042d
|
23/29 |
957d |
958ccbbf1ce7
Revert "f2fs: fix to do sanity check on extent cache correctly"
|
|
WARNING in init_module_from_file
modules
|
-1 |
C |
|
|
98 |
1051d |
1059d
|
23/29 |
957d |
f1962207150c
module: fix init_module_from_file() error handling
|
|
WARNING: refcount bug in xp_put_pool
bpf
net
|
13 |
C |
done |
|
2 |
1032d |
1031d
|
23/29 |
957d |
85c2c79a0730
xsk: fix refcount underflow in error path
|
|
WARNING in ip6_tnl_exit_batch_net
net
|
-1 |
C |
done |
|
29 |
1013d |
1019d
|
23/29 |
957d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
KASAN: invalid-free in dbUnmount
jfs
|
24 |
syz |
error |
|
119 |
974d |
1234d
|
23/29 |
957d |
cade5397e546
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
|
|
KASAN: stack-out-of-bounds Write in __nla_validate_parse
net
|
21 |
C |
done |
|
4 |
1025d |
1040d
|
23/29 |
957d |
4d50e50045aa
net: flower: fix stack-out-of-bounds in fl_set_key_cfm()
|
|
KMSAN: uninit-value in af_alg_free_resources
crypto
|
7 |
C |
|
|
156 |
1010d |
1047d
|
23/29 |
957d |
080aa61e370b
crypto: fix uninit-value in af_alg_free_resources
|
|
general protection fault in sco_conn_add
bluetooth
|
2 |
C |
done |
|
4 |
1043d |
1053d
|
23/29 |
957d |
b4066eb04bb6
Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link
|
|
KASAN: null-ptr-deref Read in txBegin
jfs
|
11 |
C |
error |
|
30 |
1059d |
1193d
|
23/29 |
957d |
47cfdc338d67
FS: JFS: Fix null-ptr-deref Read in txBegin
|
|
WARNING in ntfs_load_attr_list
ntfs3
|
-1 |
C |
|
|
4 |
1123d |
1241d
|
23/29 |
957d |
ea303f72d70c
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
|
|
WARNING in iommufd_access_destroy
iommu
|
-1 |
C |
done |
|
3 |
1046d |
1048d
|
23/29 |
957d |
99f98a7c0d69
iommufd: IOMMUFD_DESTROY should not increase the refcount
|
|
BUG: unable to handle kernel paging request in handshake_nl_done_doit
tls
|
8 |
C |
|
|
2 |
1003d |
1003d
|
23/29 |
957d |
82ba0ff7bf04
net/handshake: fix null-ptr-deref in handshake_nl_done_doit()
|
|
WARNING: bad unlock balance in sockopt_release_sock
net
|
4 |
C |
done |
|
2 |
1006d |
1006d
|
23/29 |
957d |
8be6f88b9d3f
inet: fix IP_TRANSPARENT error handling
|
|
KASAN: slab-use-after-free Read in xsk_diag_dump
net
bpf
|
19 |
C |
done |
|
9 |
993d |
1002d
|
23/29 |
957d |
3e019d8a05a3
xsk: Fix xsk_diag use-after-free error during socket cleanup
|
|
KMSAN: uninit-value in alauda_check_media
usb
usb-storage
|
7 |
C |
|
|
1059 |
1040d |
2423d
|
23/29 |
957d |
a6ff6e7a9dd6
usb-storage: alauda: Fix uninit-value in alauda_check_media()
|
|
UBSAN: array-index-out-of-bounds in xfs_attr3_leaf_add_work
xfs
|
15 |
C |
error |
done |
1923 |
1035d |
1074d
|
23/29 |
957d |
a49bbce58ea9
xfs: convert flex-array declarations in xfs attr leaf blocks
|
|
KASAN: slab-use-after-free Read in input_dev_uevent
input
|
19 |
C |
done |
|
7 |
998d |
1009d
|
23/29 |
957d |
dd613a4e45f8
HID: uclogic: Correct devm device reference for hidinput input_dev name
|
|
BUG: unable to handle kernel paging request in ovs_vport_add
openvswitch
|
8 |
C |
done |
|
2 |
1020d |
1019d
|
23/29 |
957d |
a552bfa16bab
net: openvswitch: reject negative ifindex
|
|
KASAN: slab-use-after-free Read in nilfs_load_inode_block (2)
nilfs
|
19 |
C |
done |
|
4 |
1025d |
1039d
|
23/29 |
957d |
f8654743a0e6
nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
|
|
memory leak in autofs_wait
autofs
|
3 |
C |
|
|
4 |
1091d |
1462d
|
23/29 |
957d |
ccbe77f7e45d
autofs: fix memory leak of waitqueues in autofs_catatonic_mode
|
|
general protection fault in f2fs_drop_extent_tree
f2fs
|
2 |
C |
error |
done |
1 |
1067d |
1063d
|
23/29 |
957d |
458c15dfbce6
f2fs: don't reset unchangable mount option in f2fs_remount()
|
|
WARNING in mark_buffer_dirty (5)
nilfs
|
-1 |
C |
done |
|
172 |
960d |
1079d
|
23/29 |
957d |
cdaac8e7e5a0
nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
|
|
WARNING in ieee80211_probe_client
wireless
|
-1 |
C |
done |
error |
124 |
989d |
2059d
|
23/29 |
957d |
67dfa589aa88
wifi: mac80211: check for station first in client probe
|
|
general protection fault in skb_segment (3)
net
|
2 |
C |
done |
|
2 |
1017d |
1017d
|
23/29 |
957d |
b616be6b9768
net: do not allow gso_size to be set to GSO_BY_FRAGS
|
|
BUG: soft lockup in fq_pie_timer (4)
net
|
1 |
syz |
|
|
5 |
988d |
1038d
|
23/29 |
957d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
UBSAN: array-index-out-of-bounds in dbAllocDmapLev
jfs
|
15 |
C |
error |
|
2 |
1077d |
1251d
|
23/29 |
957d |
4e302336d5ca
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
|
|
INFO: rcu detected stall in nsim_dev_trap_report_work
net
|
1 |
syz |
|
|
4 |
993d |
1036d
|
23/29 |
957d |
8c21ab1bae94
net/sched: fq_pie: avoid stalls in fq_pie_timer()
|
|
WARNING in rtnl_dellink (3)
net
|
-1 |
C |
done |
|
492 |
1009d |
1019d
|
23/29 |
957d |
ace0ab3a4b54
Revert "vlan: Fix VLAN 0 memory leak"
|
|
KASAN: slab-use-after-free Read in team_device_event
net
|
19 |
C |
done |
|
2 |
993d |
992d
|
23/29 |
957d |
6afcf0fb9270
Revert "net: team: do not use dynamic lockdep key"
|
|
general protection fault in ext4_finish_bio
ext4
|
2 |
C |
done |
|
1 |
1062d |
1058d
|
23/29 |
957d |
0b7ec177b589
crypto: algif_hash - Fix race between MORE and non-MORE sends
|
|
WARNING in sta_info_insert_rcu (3)
wireless
|
-1 |
C |
done |
|
6 |
1005d |
1046d
|
23/29 |
957d |
5d4e04bf3a0f
wifi: cfg80211: reject auth/assoc to AP with our address
|
|
KASAN: slab-use-after-free Read in fuse_test_super
fuse
|
19 |
C |
done |
|
6 |
1001d |
1004d
|
23/29 |
957d |
dc3216b14160
super: ensure valid info
|
|
KASAN: slab-use-after-free Read in iopt_unmap_iova_range
iommu
|
19 |
C |
error |
|
7 |
1065d |
1076d
|
23/29 |
957d |
804ca14d04df
iommufd: Do not access the area pointer after unlocking
|
|
possible deadlock in inode_add_bytes
fs
|
4 |
C |
done |
|
124 |
1045d |
1044d
|
23/29 |
957d |
509f006932de
shmem: fix quota lock nesting in huge hole handling
|
|
KASAN: slab-out-of-bounds Read in xlog_pack_data
xfs
|
17 |
C |
error |
done |
4 |
1078d |
1074d
|
23/29 |
957d |
f1e1765aad7d
xfs: journal geometry is not properly bounds checked
|
|
WARNING in tcx_uninstall
net
bpf
|
-1 |
C |
done |
|
7 |
1032d |
1036d
|
23/29 |
957d |
079082c60aff
tcx: Fix splat during dev unregister
|
|
INFO: task hung in pipe_release (4)
fs
|
1 |
C |
done |
|
51 |
1050d |
1050d
|
23/29 |
957d |
0f71c9caf267
udp: Fix __ip_append_data()'s handling of MSG_SPLICE_PAGES
|
|
possible deadlock in do_user_addr_fault
exfat
|
4 |
C |
unreliable |
done |
39 |
1064d |
1155d
|
23/29 |
957d |
ff84772fd45d
exfat: release s_lock before calling dir_emit()
|
|
general protection fault in sys_finit_module
modules
|
21 |
C |
error |
done |
84 |
1057d |
1057d
|
23/29 |
957d |
f1962207150c
module: fix init_module_from_file() error handling
|
|
KASAN: slab-out-of-bounds Read in do_csum
net
|
19 |
C |
|
|
160 |
962d |
1003d
|
23/29 |
957d |
8bd795fedb84
arm64: csum: Fix OoB access in IP checksum code for negative lengths
|
|
kernel BUG in btrfs_ioctl
btrfs
|
-1 |
C |
error |
|
1 |
1074d |
1070d
|
23/29 |
957d |
b19c98f237cd
btrfs: fix race between balance and cancel/pause
|
|
KMSAN: uninit-value in hwsim_cloned_frame_received_nl
wireless
|
7 |
C |
|
|
8315 |
1001d |
2071d
|
23/29 |
957d |
fba360a047d5
wifi: mac80211_hwsim: drop short frames
|
|
WARNING in dev_index_reserve
bridge
|
-1 |
C |
done |
|
7120 |
960d |
1014d
|
23/29 |
957d |
f534f6581ec0
net: validate veth and vxcan peer ifindexes
30188bd7838c
rtnetlink: Reject negative ifindexes in RTM_NEWLINK
|
|
memory leak in raw_open
usb
|
3 |
C |
|
|
1 |
1053d |
1049d
|
23/29 |
957d |
83e30f2bf86e
USB: gadget: Fix the memory leak in raw_gadget driver
|
|
possible deadlock in lock_mm_and_find_vma
exfat
|
4 |
C |
error |
|
2 |
1029d |
1048d
|
23/29 |
957d |
ff84772fd45d
exfat: release s_lock before calling dir_emit()
|
|
KASAN: use-after-free Read in gsm_cleanup_mux
serial
|
19 |
C |
done |
done |
16 |
1023d |
1302d
|
23/29 |
957d |
3c4f8333b582
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
|
|
UBSAN: shift-out-of-bounds in ext2_fill_super (2)
ext4
|
-1 |
C |
|
|
571 |
1035d |
1079d
|
23/29 |
957d |
404615d7f1dc
ext2: Drop fragment support
|
|
WARNING in bpf_xdp_adjust_tail (4)
bpf
|
-1 |
C |
error |
|
466 |
1023d |
1233d
|
23/29 |
957d |
d14eea09edf4
net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
|
|
KMSAN: uninit-value in ieee802154_subif_start_xmit
bpf
|
8 |
C |
done |
|
119 |
1028d |
1024d
|
23/29 |
957d |
db2baf82b098
bpf: Fix an incorrect verification success with movsx insn
|
|
WARNING: ODEBUG bug in ingress_destroy
net
|
-1 |
C |
done |
|
16 |
1038d |
1041d
|
23/29 |
957d |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
WARNING in ext4_file_write_iter
ext4
|
-1 |
C |
error |
|
17314 |
975d |
1075d
|
23/29 |
957d |
194505b55dd7
ext4: drop dio overwrite only flag and associated warning
|
|
KASAN: slab-out-of-bounds Read in mt_validate_nulls
mm
|
17 |
C |
error |
done |
15 |
1058d |
1056d
|
23/29 |
957d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
general protection fault in prepare_to_wait (2)
hams
|
8 |
syz |
inconclusive |
|
4 |
975d |
1012d
|
23/29 |
957d |
c2f8fd794960
netrom: Deny concurrent connect().
|
|
kernel BUG in validate_mm (2)
mm
|
-1 |
C |
unreliable |
done |
217 |
1058d |
1056d
|
23/29 |
957d |
ae80b4041984
mm: validate the mm before dropping the mmap lock
|
|
KASAN: invalid-free in init_file
overlayfs
|
24 |
C |
done |
|
6 |
1059d |
1060d
|
23/29 |
957d |
dff745c1221a
fs: move cleanup from init_file() into its callers
|
|
kernel BUG in prepare_to_merge
btrfs
|
-1 |
C |
done |
|
48 |
1021d |
1060d
|
23/29 |
957d |
773e722a98e2
btrfs: avoid race between qgroup tree creation and relocation
05d7ce504545
btrfs: exit gracefully if reloc roots don't match
6ebcd021c92b
btrfs: reject invalid reloc tree root keys with stack dump
|
|
KASAN: slab-out-of-bounds Read in bio_split_rw
block
|
17 |
C |
done |
|
1 |
1062d |
1058d
|
23/29 |
957d |
0b7ec177b589
crypto: algif_hash - Fix race between MORE and non-MORE sends
|
|
WARNING: ODEBUG bug in tcx_uninstall
bpf
net
|
-1 |
C |
done |
|
38 |
1037d |
1041d
|
23/29 |
957d |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! (2)
kernel
|
-1 |
C |
|
|
2688 |
958d |
1915d
|
23/29 |
957d |
39285e124edb
net: team: do not use dynamic lockdep key
|
|
KMSAN: uninit-value in ieee80211_rx_handlers
wireless
|
7 |
C |
|
|
8 |
1003d |
1058d
|
23/29 |
957d |
19e4a47ee747
wifi: mac80211: check S1G action frame size
|
|
WARNING in call_netdevice_notifiers_info
batman
|
-1 |
C |
done |
|
20 |
1007d |
1009d
|
23/29 |
957d |
987aae75fc10
batman-adv: Hold rtnl lock during MTU update via netlink
|
|
KASAN: slab-use-after-free Read in test_bdev_super_fc
fs
|
19 |
C |
done |
|
7 |
1024d |
1027d
|
23/29 |
957d |
aca740cecbe5
fs: open block device after superblock creation
|
|
KASAN: slab-use-after-free Read in afs_dynroot_test_super
afs
|
19 |
C |
done |
|
4 |
1001d |
997d
|
23/29 |
957d |
dc3216b14160
super: ensure valid info
|
|
general protection fault in folio_create_empty_buffers
nilfs
|
2 |
C |
error |
|
6 |
1026d |
1101d
|
23/29 |
957d |
f83913f8c5b8
nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
|
|
WARNING in corrupted (3)
usb
|
-1 |
C |
done |
|
19 |
1053d |
1100d
|
23/29 |
957d |
6f489a966fbe
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
general protection fault in gfs2_lookup_simple
gfs2
|
2 |
C |
done |
|
3 |
1028d |
1025d
|
23/29 |
957d |
111c7d27a1b7
gfs2: Use mapping->gfp_mask for metadata inodes
|
|
KASAN: slab-use-after-free Write in sco_chan_del
bluetooth
|
22 |
C |
done |
|
19 |
973d |
1107d
|
23/29 |
957d |
3344d318337d
Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
|
|
WARNING in usbnet_start_xmit/usb_submit_urb
usb
|
-1 |
C |
done |
|
92 |
1071d |
1654d
|
23/29 |
957d |
5e1627cb43dd
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
|
WARNING in ieee80211_bss_info_change_notify
wireless
|
-1 |
C |
done |
|
7725 |
957d |
2062d
|
23/29 |
957d |
abc76cf552e1
wifi: cfg80211: ocb: don't leave if not joined
|
|
UBSAN: shift-out-of-bounds in dbFree
jfs
|
-1 |
C |
error |
|
3 |
1097d |
1163d
|
23/29 |
957d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
UBSAN: array-index-out-of-bounds in print_bpf_insn
bpf
|
15 |
C |
done |
|
9 |
1029d |
1031d
|
23/29 |
957d |
e99688eba2e9
bpf: Fix an array-index-out-of-bounds issue in disasm.c
|
|
general protection fault in ext4_acquire_dquot
ext4
|
8 |
C |
|
|
4 |
1071d |
1110d
|
23/29 |
957d |
6a4e3363792e
quota: Properly disable quotas when add_dquot_ref() fails
|
|
BUG: unable to handle kernel paging request in ext4_calculate_overhead
ext4
|
8 |
C |
done |
|
31 |
1004d |
1006d
|
23/29 |
957d |
ee5c807137ce
ext4: ext4_get_{dev}_journal return proper error value
|
|
KASAN: slab-use-after-free Read in f2fs_truncate_data_blocks_range
f2fs
|
19 |
C |
error |
|
1 |
1070d |
1066d
|
23/29 |
957d |
a6ec83786ab9
f2fs: fix to do sanity check on direct node in truncate_dnode()
|
|
WARNING in diUnmount
jfs
|
-1 |
C |
error |
|
100 |
984d |
1278d
|
23/29 |
957d |
6e2bda2c192d
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
KMSAN: uninit-value in __netif_receive_skb_core
wireguard
wireless
|
19 |
C |
done |
|
353 |
997d |
2967d
|
23/29 |
957d |
dc644b540a2d
tcx: Fix splat in ingress_destroy upon tcx_entry_free
|
|
memory leak in snd_seq_create_port
sound
|
3 |
C |
|
|
1 |
1050d |
1046d
|
23/29 |
957d |
057849ccc3d8
ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
|
|
possible deadlock in f2fs_getxattr
f2fs
|
4 |
C |
done |
|
4570 |
974d |
1055d
|
23/29 |
957d |
5c13e2388bf3
f2fs: avoid false alarm of circular locking
|
|
general protection fault in btrfs_finish_ordered_extent
btrfs
|
2 |
C |
done |
|
8 |
1047d |
1048d
|
23/29 |
957d |
7cad645ebf20
btrfs: fix ordered extent split error handling in btrfs_dio_submit_io
|
|
memory leak in _r8712_init_xmit_priv
staging
usb
|
3 |
C |
|
|
1 |
1053d |
1049d
|
23/29 |
957d |
ac83631230f7
staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
|
|
kernel BUG in f2fs_evict_inode
f2fs
|
-1 |
C |
error |
|
135 |
973d |
1252d
|
23/29 |
957d |
a3ab55746612
f2fs: flush inode if atomic file is aborted
|
|
KASAN: use-after-free Read in qd_unlock (2)
gfs2
|
19 |
C |
error |
done |
5 |
1012d |
1240d
|
23/29 |
957d |
f66af88e3321
gfs2: Stop using gfs2_make_fs_ro for withdraw
|
|
WARNING in kvm_arch_vcpu_ioctl_run (5)
kvm-x86
|
-1 |
C |
error |
|
343 |
991d |
1079d
|
23/29 |
957d |
26a0652cb453
KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
|
|
UBSAN: shift-out-of-bounds in extAlloc
jfs
|
-1 |
C |
error |
|
6605 |
978d |
1339d
|
23/29 |
957d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
WARNING in __gup_longterm_locked
mm
|
-1 |
C |
error |
|
90 |
1056d |
1058d
|
23/29 |
957d |
6cd06ab12d1a
gup: make the stack expansion warning a bit more targeted
|
|
KASAN: slab-use-after-free Write in mini_qdisc_pair_swap
net
|
22 |
C |
error |
|
76 |
1006d |
1160d
|
23/29 |
971d |
84ad0af0bccd
net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting
c7cfbd115001
net/sched: sch_ingress: Only create under TC_H_INGRESS
|
|
KASAN: slab-out-of-bounds Read in extract_iter_to_sg
crypto
|
17 |
C |
done |
|
13 |
1075d |
1080d
|
23/29 |
971d |
4380499218c6
crypto: Fix af_alg_sendmsg(MSG_SPLICE_PAGES) sglist limit
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
memory leak in htc_connect_service
wireless
|
3 |
C |
|
|
1 |
1107d |
1188d
|
23/29 |
971d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
general protection fault in shash_async_final
crypto
|
2 |
C |
done |
|
13 |
1071d |
1080d
|
23/29 |
971d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
WARNING in blkdev_put (3)
block
|
-1 |
C |
done |
|
377 |
1071d |
1075d
|
23/29 |
971d |
c576c4bf9ecf
reiserfs: fix blkdev_put() warning from release_journal_dev()
|
|
WARNING in iommufd_test_check_pages
iommu
|
-1 |
C |
error |
|
4 |
1071d |
1121d
|
23/29 |
971d |
9883c7f84053
mm/gup: do not return 0 from pin_user_pages_fast() for bad args
|
|
possible deadlock in static_key_slow_inc (3)
cgroups
|
4 |
C |
done |
|
6387 |
1035d |
1083d
|
23/29 |
971d |
f0cc749254d1
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
|
|
WARNING in sock_i_ino
net
|
-1 |
C |
error |
|
22 |
1064d |
1068d
|
23/29 |
971d |
25a9c8a4431c
netlink: Add __sock_i_ino() for __netlink_diag_dump().
|
|
INFO: trying to register non-static key in skb_dequeue (2)
rdma
|
-1 |
syz |
error |
|
123 |
1076d |
1120d
|
23/29 |
971d |
2a62b6210ce8
RDMA/rxe: Fix the use-before-initialization error of resp_pkts
|
|
kernel BUG in assertfail (2)
btrfs
|
-1 |
C |
done |
done |
162 |
1077d |
1338d
|
23/29 |
971d |
745806fb4554
btrfs: do not ASSERT() on duplicated global roots
|
|
general protection fault in crypto_shash_final
crypto
|
2 |
C |
done |
|
2 |
1083d |
1080d
|
23/29 |
971d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
general protection fault in shash_async_update
crypto
|
2 |
C |
done |
done |
12 |
1071d |
1068d
|
23/29 |
971d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
KASAN: stack-out-of-bounds Read in ip6mr_ioctl
net
|
21 |
C |
done |
|
192 |
1070d |
1075d
|
23/29 |
971d |
3a4f0edbb793
ipv6: fix a typo in ip6mr_sk_ioctl()
|
|
WARNING in btf_type_id_size (2)
bpf
|
-1 |
C |
error |
|
8 |
1067d |
1098d
|
23/29 |
971d |
e6c2f594ed96
bpf: Silence a warning in btf_type_id_size()
|
|
WARNING: bad unlock balance in bpf
bpf
|
4 |
C |
done |
|
12 |
1096d |
1097d
|
23/29 |
971d |
4266f41feaee
bpf: Fix bad unlock balance on freeze_mutex
|
|
general protection fault in shash_ahash_update
crypto
|
2 |
C |
done |
done |
5 |
1072d |
1072d
|
23/29 |
971d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
WARNING in blkdev_get_by_dev
block
|
-1 |
C |
done |
|
45 |
1070d |
1075d
|
23/29 |
971d |
985958b8584c
block: fix wrong mode for blkdev_get_by_dev() from disk_scan_partitions()
|
|
inconsistent lock state in lru_gen_rotate_memcg
mm
|
4 |
C |
|
|
61 |
1062d |
1072d
|
23/29 |
971d |
814bc1de03ea
mm/mglru: make memcg_lru->lock irq safe
|
|
INFO: trying to register non-static key in skb_queue_tail
wireless
|
-1 |
C |
unreliable |
done |
171 |
1062d |
2164d
|
23/29 |
971d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
kernel BUG in ip6gre_header
net
|
-1 |
C |
|
|
5 |
1007d |
1078d
|
23/29 |
971d |
9eed321cde22
net: lapbether: only support ethernet devices
|
|
WARNING in unreserve_psock
net
|
-1 |
C |
done |
|
2816 |
1071d |
1078d
|
23/29 |
971d |
9f8d0dc0ec4a
kcm: Fix unnecessary psock unreservation.
|
|
WARNING in btrfs_split_ordered_extent
btrfs
|
-1 |
C |
done |
|
5 |
1080d |
1101d
|
23/29 |
971d |
7833b865953c
btrfs: fix iomap_begin length for nocow writes
|
|
general protection fault in splice_to_socket
fs
|
2 |
C |
done |
|
4 |
1077d |
1080d
|
23/29 |
971d |
ca2d49f77ce4
splice, net: Fix splice_to_socket() to handle pipe bufs larger than a page
|
|
KASAN: null-ptr-deref Write in get_block (2)
fs
|
12 |
C |
error |
|
11 |
1066d |
1100d
|
23/29 |
971d |
ea2b62f30589
fs/sysv: Null check to prevent null-ptr-deref bug
|
|
WARNING: refcount bug in fib6_nh_init
net
|
13 |
C |
done |
|
45 |
1071d |
1076d
|
23/29 |
971d |
3515440df461
ipv6: also use netdev_hold() in ip6_route_check_nh()
|
|
WARNING in nilfs_btree_assign
nilfs
|
-1 |
C |
error |
|
799 |
1036d |
1339d
|
23/29 |
971d |
679bd7ebdd31
nilfs2: fix buffer corruption due to concurrent device reads
|
|
general protection fault in shash_async_export
crypto
|
2 |
C |
done |
|
25 |
1074d |
1080d
|
23/29 |
971d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
KMSAN: uninit-value in ath9k_wmi_ctrl_rx
wireless
|
7 |
C |
|
|
45 |
1055d |
1177d
|
23/29 |
971d |
f24292e82708
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
|
|
general protection fault in nilfs_clear_dirty_page
nilfs
|
2 |
C |
done |
|
15 |
1079d |
1313d
|
23/29 |
971d |
782e53d0c144
nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
|
|
INFO: task hung in btrfs_sync_file (2)
btrfs
|
1 |
C |
error |
|
5 |
1094d |
1090d
|
23/29 |
971d |
745806fb4554
btrfs: do not ASSERT() on duplicated global roots
|
|
KASAN: stack-out-of-bounds Read in skb_splice_from_iter
net
|
17 |
C |
done |
|
64 |
1071d |
1080d
|
23/29 |
971d |
5a6f6873606e
ip, ip6: Fix splice to raw and ping sockets
|
|
WARNING in bpf_verifier_vlog
bpf
|
-1 |
C |
inconclusive |
|
6 |
1119d |
1356d
|
23/29 |
971d |
cff36398bd4c
bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
|
|
general protection fault in skb_queue_tail (3)
afs
|
19 |
C |
inconclusive |
done |
9 |
1089d |
1322d
|
23/29 |
971d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
KASAN: slab-out-of-bounds Read in taprio_dequeue_from_txq
net
|
17 |
syz |
error |
|
4 |
1085d |
1110d
|
23/29 |
971d |
be3618d96510
net/sched: taprio: fix slab-out-of-bounds Read in taprio_dequeue_from_txq
|
|
possible deadlock in scheduler_tick (2)
ntfs3
|
4 |
C |
|
|
10 |
1086d |
1103d
|
23/29 |
971d |
726ccdba1521
kasan,kmsan: remove __GFP_KSWAPD_RECLAIM usage from kasan/kmsan
|
|
WARNING in scm_recv
net
|
-1 |
C |
done |
|
8 |
1058d |
1061d
|
23/29 |
971d |
603fc57ab70c
af_unix: Skip SCM_PIDFD if scm->pid is NULL.
|
|
general protection fault in cryptd_hash_export
crypto
|
2 |
C |
done |
done |
12 |
1071d |
1080d
|
23/29 |
971d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
KASAN: stack-out-of-bounds Read in ipmr_ioctl
net
|
21 |
C |
done |
|
208 |
1070d |
1075d
|
23/29 |
971d |
634236b34d7a
net: remove sk_is_ipmr() and sk_is_icmpv6() helpers
|
|
general protection fault in crypto_shash_finup
crypto
|
2 |
C |
done |
|
6 |
1072d |
1080d
|
23/29 |
971d |
b6d972f68983
crypto: af_alg/hash: Fix recvmsg() after sendmsg(MSG_MORE)
|
|
possible deadlock in quotactl_fd
ext4
|
4 |
C |
error |
done |
141 |
1061d |
1142d
|
23/29 |
1014d |
949f95ff39bf
ext4: fix lockdep warning when enabling MMP
|
|
possible deadlock in btrfs_search_slot
btrfs
|
4 |
C |
error |
done |
188 |
1022d |
1296d
|
23/29 |
1020d |
b740d8061669
btrfs: free btrfs_path before copying root refs to userspace
|
|
WARNING in class_register
usb
|
-1 |
C |
done |
|
10 |
1153d |
1151d
|
23/29 |
1020d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
KASAN: use-after-free Write in j1939_sock_pending_del
can
|
22 |
syz |
done |
error |
17 |
2383d |
2395d
|
23/29 |
1020d |
fd81ebfe7975
can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
|
|
BUG: soft lockup in addrconf_rs_timer (2)
net
|
1 |
C |
|
|
51 |
1070d |
1091d
|
23/29 |
1058d |
cd2b8113c2e8
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
|
INFO: task hung in sync_inodes_sb (4)
nilfs
|
1 |
C |
done |
inconclusive |
345 |
1058d |
2013d
|
23/29 |
1058d |
92c5d1b860e9
nilfs2: reject devices with insufficient block count
|
|
kernel BUG in nilfs_btnode_create_block
nilfs
|
-1 |
C |
|
|
8 |
1103d |
1311d
|
23/29 |
1058d |
2f012f2baca1
nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
|
|
WARNING in nilfs_segctor_do_construct (2)
nilfs
|
-1 |
C |
error |
|
3 |
1109d |
1107d
|
23/29 |
1058d |
fee5eaecca86
nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
|
|
WARNING in __ext4fs_dirhash
ext4
|
-1 |
C |
done |
|
25 |
1112d |
1112d
|
22/29 |
1060d |
4b3cb1d108bf
ext4: improve error handling from ext4_dirhash()
|
|
KASAN: user-memory-access Write in zram_slot_lock
block
|
21 |
C |
done |
|
3 |
1100d |
1100d
|
22/29 |
1060d |
3eb96946f0be
block: make bio_check_eod work for zero sized devices
|
|
kernel BUG in btrfs_exclop_balance (2)
btrfs
|
-1 |
C |
error |
|
8 |
1086d |
1188d
|
22/29 |
1060d |
ac868bc9d136
btrfs: fix assertion of exclop condition when starting balance
|
|
WARNING: locking bug in ext4_xattr_inode_iget
ext4
|
4 |
C |
error |
|
23 |
1083d |
1114d
|
22/29 |
1060d |
2bc7e7c1a3bc
ext4: disallow ea_inodes with extended attributes
|
|
possible deadlock in ext4_xattr_get
ext4
|
4 |
C |
inconclusive |
|
3 |
1115d |
1388d
|
22/29 |
1060d |
b3e6bcb94590
ext4: add EA_INODE checking to ext4_iget()
|
|
WARNING in dlfb_submit_urb/usb_submit_urb (2)
fbdev
usb
|
-1 |
C |
|
|
2 |
1109d |
1105d
|
22/29 |
1060d |
ed9de4ed3987
fbdev: udlfb: Fix endpoint check
|
|
INFO: task hung in __sync_dirty_buffer
ext4
|
1 |
C |
inconclusive |
error |
832 |
1080d |
1728d
|
22/29 |
1060d |
f4ce24f54d9c
ext4: fix deadlock when converting an inline directory in nojournal mode
|
|
possible deadlock in ext4_multi_mount_protect
ext4
|
4 |
C |
|
|
584 |
1060d |
1145d
|
22/29 |
1060d |
949f95ff39bf
ext4: fix lockdep warning when enabling MMP
|
|
general protection fault in __aria_aesni_avx_gfni_crypt_16way
crypto
|
2 |
C |
|
|
49 |
1098d |
1115d
|
22/29 |
1060d |
6ab39f99927e
crypto: x86/aria - Use 16 byte alignment for GFNI constant vectors
|
|
WARNING: locking bug in ext4_xattr_inode_update_ref
ext4
|
4 |
C |
error |
|
4 |
1104d |
1231d
|
22/29 |
1060d |
b928dfdcb27d
ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
|
|
possible deadlock in ext4_setattr
ext4
|
4 |
C |
done |
|
7 |
1109d |
1229d
|
22/29 |
1060d |
b3e6bcb94590
ext4: add EA_INODE checking to ext4_iget()
|
|
general protection fault in gfs2_evict_inode (2)
gfs2
|
10 |
C |
error |
done |
134 |
1109d |
1430d
|
22/29 |
1060d |
504a10d9e46b
gfs2: Don't deref jdesc in evict
|
|
WARNING in usbtmc_ioctl/usb_submit_urb (2)
usb
|
-1 |
C |
done |
|
3 |
1121d |
1134d
|
22/29 |
1060d |
94d25e912898
USB: usbtmc: Fix direction for 0-length ioctl control messages
|
|
KASAN: slab-use-after-free Read in nilfs_load_inode_block
nilfs
|
19 |
C |
error |
|
18 |
1062d |
1115d
|
22/29 |
1060d |
9b5a04ac3ad9
nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
|
|
KASAN: slab-out-of-bounds Read in get_max_inline_xattr_value_size
ext4
|
19 |
C |
|
|
21 |
1116d |
1154d
|
22/29 |
1060d |
2220eaf90992
ext4: add bounds checking in get_max_inline_xattr_value_size()
|
|
KASAN: slab-out-of-bounds Read in ext4_group_desc_csum
ext4
|
19 |
C |
error |
|
26 |
1109d |
1210d
|
22/29 |
1060d |
4f04351888a8
ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
|
|
kernel BUG in ext4_get_group_info
ext4
|
-1 |
C |
error |
|
237 |
1109d |
1742d
|
22/29 |
1060d |
5354b2af3406
ext4: allow ext4_get_group_info() to fail
463808f237cf
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
|
|
WARNING in ext4_xattr_block_set (2)
ext4
|
-1 |
C |
error |
|
32 |
1111d |
1175d
|
22/29 |
1060d |
a44be64bbecb
ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
|
|
WARNING in kvfree (2)
ext4
|
-1 |
C |
|
|
47 |
1116d |
1168d
|
22/29 |
1060d |
b87c7cdf2bed
ext4: fix invalid free tracking in ext4_xattr_move_to_block()
|
|
possible deadlock in sco_conn_del
bluetooth
|
4 |
C |
done |
done |
279 |
1107d |
1510d
|
22/29 |
1060d |
a2ac591cb4d8
Bluetooth: Fix UAF in hci_conn_hash_flush again
|
|
KMSAN: uninit-value in xfrm_state_find
net
|
17 |
C |
error |
done |
215 |
1103d |
2903d
|
22/29 |
1060d |
3d776e31c841
xfrm: Reject optional tunnel/BEET mode templates in outbound policies
|
|
kernel BUG in workingset_activation (2)
kernel
|
-1 |
C |
inconclusive |
done |
40 |
1096d |
1288d
|
22/29 |
1060d |
0143d148d1e8
usb: usbfs: Enforce page requirements for mmap
|
|
memory leak in class_create
usb
|
3 |
C |
|
|
9 |
1104d |
1121d
|
22/29 |
1060d |
ddaf098ea779
driver core: class: properly reference count class_dev_iter()
|
|
memory leak in ext4_expand_extra_isize_ea
ext4
|
3 |
C |
|
|
2 |
1115d |
1182d
|
22/29 |
1060d |
b87c7cdf2bed
ext4: fix invalid free tracking in ext4_xattr_move_to_block()
|
|
possible deadlock in ext4_xattr_inode_iget
ext4
|
4 |
C |
done |
|
351 |
1070d |
1227d
|
22/29 |
1060d |
aff3bea95388
ext4: add lockdep annotations for i_data_sem for ea_inode's
|
|
general protection fault in soft_cursor
fbdev
|
11 |
C |
|
|
3 |
1096d |
1096d
|
22/29 |
1060d |
d78bd6cc6827
fbcon: Fix null-ptr-deref in soft_cursor
|
|
KASAN: slab-out-of-bounds Read in xfs_getbmap
xfs
|
17 |
C |
done |
|
5 |
1121d |
1121d
|
22/29 |
1060d |
1bba82fe1afa
xfs: fix negative array access in xfs_getbmap
|
|
kernel BUG in btrfs_csum_one_bio
btrfs
|
-1 |
C |
done |
|
4 |
1139d |
1217d
|
22/29 |
1060d |
806570c0bb7b
btrfs: handle memory allocation failure in btrfs_csum_one_bio
|
|
kernel BUG in btrfs_ioctl_add_dev
btrfs
|
-1 |
C |
error |
done |
46 |
1116d |
1192d
|
22/29 |
1060d |
ac868bc9d136
btrfs: fix assertion of exclop condition when starting balance
|
|
general protection fault in erofs_bread (2)
erofs
|
2 |
C |
done |
|
7 |
1096d |
1105d
|
22/29 |
1060d |
0a17567b4a85
erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init
erofs: fix null-ptr-deref caused by erofs_xattr_prefixes_init
|
|
possible deadlock in ext4_xattr_set_handle (3)
ext4
|
4 |
C |
|
|
451 |
1061d |
1218d
|
22/29 |
1060d |
b3e6bcb94590
ext4: add EA_INODE checking to ext4_iget()
|
|
KASAN: slab-use-after-free Read in hci_conn_hash_flush
bluetooth
|
22 |
C |
error |
|
3511 |
1086d |
1180d
|
22/29 |
1060d |
a2ac591cb4d8
Bluetooth: Fix UAF in hci_conn_hash_flush again
ca1fd42e7dbf
Bluetooth: Fix potential double free caused by hci_conn_unlink
|
|
kernel BUG in page_table_check_clear
mm
|
-1 |
C |
error |
|
17 |
1085d |
1118d
|
22/29 |
1060d |
44d0fb387b53
mm: page_table_check: Ensure user pages are not slab pages
0143d148d1e8
usb: usbfs: Enforce page requirements for mmap
|
|
memory leak in hwsim_new_radio_nl
wireless
|
3 |
C |
|
|
1 |
1111d |
1110d
|
22/29 |
1060d |
098abbd48ec1
mac80211_hwsim: fix memory leak in hwsim_new_radio_nl
|
|
WARNING in mb_find_extent
ext4
|
-1 |
C |
error |
error |
135 |
1202d |
1244d
|
22/29 |
1060d |
fa08a7b61dff
ext4: fix WARNING in mb_find_extent
|
|
kernel BUG in vmf_insert_pfn_prot
|
-1 |
C |
done |
done |
1933 |
1108d |
1713d
|
22/29 |
1077d |
a5b44c4adb16
drm/fbdev-generic: Always use shadow buffering
|
|
WARNING in __usbnet_read_cmd/usb_submit_urb
usb
|
-1 |
C |
error |
|
5 |
1206d |
1236d
|
22/29 |
1079d |
93fd565919cf
net: USB: Fix wrong-direction WARNING in plusb.c
net: USB: Fix wrong-direction WARNING in plusb.c
|
|
WARNING in iomap_iter
iomap
|
-1 |
C |
inconclusive |
|
141 |
1234d |
1660d
|
22/29 |
1079d |
6acd87d50998
erofs/zmap.c: Fix incorrect offset calculation
c490a0b5a4f3
loop: Check for overflow while configuring loop
|
|
KASAN: slab-out-of-bounds Write in udf_find_entry
udf
|
21 |
C |
error |
|
19 |
1293d |
1325d
|
22/29 |
1079d |
c8af247de385
udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
1c80afa04db3
udf: Implement searching for directory entry using new iteration code
|
|
memory leak in tcf_pedit_init
net
|
3 |
C |
|
|
1 |
1124d |
1124d
|
22/29 |
1083d |
1b483d9f5805
net/sched: act_pedit: free pedit keys on bail from offset check
|
|
KMSAN: kernel-infoleak in iommufd_vfio_ioctl
iommu
|
9 |
C |
|
|
15 |
1185d |
1199d
|
22/29 |
1083d |
b3551ead6163
iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
|
|
KASAN: wild-memory-access Write in v9fs_get_acl
v9fs
|
21 |
C |
|
|
7 |
1143d |
1176d
|
22/29 |
1083d |
707823e7f22f
9P FS: Fix wild-memory-access write in v9fs_get_acl
|
|
WARNING in sisusb_send_bulk_msg/usb_submit_urb
usb
|
-1 |
C |
unreliable |
|
418 |
1135d |
2520d
|
22/29 |
1083d |
df05a9b05e46
USB: sisusbvga: Add endpoint checks
|
|
general protection fault in pause_prepare_data
net
|
2 |
C |
error |
|
34 |
1217d |
1219d
|
22/29 |
1083d |
f5be9caf7bf0
net: ethtool: fix NULL pointer dereference in pause_prepare_data()
|
|
WARNING in udf_expand_dir_adinicb
udf
|
-1 |
C |
done |
|
2 |
1207d |
1203d
|
22/29 |
1083d |
df97f64dfa31
udf: Avoid directory type conversion failure due to ENOMEM
|
|
memory leak in vfs_tmpfile_open
overlayfs
|
3 |
C |
|
|
14 |
1221d |
1322d
|
22/29 |
1083d |
baabaa505563
ovl: fix tmpfile leak
|
|
kernel BUG in find_mergeable_anon_vma
mm
|
-1 |
C |
error |
|
4 |
1179d |
1175d
|
22/29 |
1083d |
3dd443254941
mm: enable maple tree RCU mode by default
|
|
unregister_netdevice: waiting for DEV to become free (7)
|
2 |
C |
inconclusive |
|
20422 |
1084d |
1285d
|
22/29 |
1083d |
266e9b3475ba
RDMA/siw: Remove namespace check from siw_netdev_event()
|
|
UBSAN: shift-out-of-bounds in fbcon_set_font
fbdev
|
-1 |
C |
error |
|
3 |
1213d |
1214d
|
22/29 |
1083d |
2b09d5d36498
fbcon: Check font dimension limits
|
|
KASAN: use-after-free Write in gadgetfs_kill_sb
usb
|
22 |
C |
error |
|
5 |
1226d |
1260d
|
22/29 |
1083d |
d18dcfe9860e
USB: gadgetfs: Fix race between mounting and unmounting
|
|
possible deadlock in jbd2_log_wait_commit
ext4
|
4 |
C |
done |
|
429 |
1159d |
1183d
|
22/29 |
1083d |
3c92792da850
ext4: Fix deadlock during directory rename
|
|
possible deadlock in static_key_slow_inc (2)
cgroups
|
4 |
C |
error |
|
32622 |
1083d |
1302d
|
22/29 |
1083d |
57dcd64c7e03
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
|
|
INFO: task hung in rfcomm_process_sessions (2)
bluetooth
|
1 |
C |
error |
done |
14 |
1245d |
1519d
|
22/29 |
1083d |
1d80d57ffcb5
Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
|
|
WARNING: proc registration bug in clusterip_tg_check (3)
netfilter
|
-1 |
C |
done |
inconclusive |
9 |
1222d |
1756d
|
22/29 |
1083d |
9db5d918e2c0
netfilter: ip_tables: remove clusterip target
|
|
KASAN: use-after-free Write in nr_release
hams
|
22 |
C |
done |
error |
1784 |
1097d |
2371d
|
22/29 |
1083d |
611792920925
netrom: Fix use-after-free caused by accept on already connected socket
|
|
KASAN: use-after-free Read in do_csum
net
|
19 |
C |
|
|
72 |
1086d |
1251d
|
22/29 |
1083d |
1ac885574470
inet: control sockets should not use current thread task_frag
|
|
WARNING in ext4_update_inline_data
ext4
|
-1 |
C |
error |
|
21 |
1180d |
1244d
|
22/29 |
1083d |
2b96b4a5d944
ext4: fix WARNING in ext4_update_inline_data
|
|
KMSAN: uninit-value in ethnl_set_linkmodes (2)
net
|
7 |
C |
|
|
40 |
1117d |
1422d
|
22/29 |
1083d |
9ad685dbfe7e
ethtool: Fix uninitialized number of lanes
|
|
KASAN: null-ptr-deref Read in ida_free (3)
fs
|
11 |
C |
error |
|
4 |
1158d |
1154d
|
22/29 |
1083d |
cb2239c198ad
fs: drop peer group ids under namespace lock
|
|
possible deadlock in ext4_bmap
ext4
|
4 |
C |
error |
|
78083 |
1084d |
1388d
|
22/29 |
1083d |
62913ae96de7
ext4, jbd2: add an optimized bmap for the journal inode
|
|
WARNING in put_pmu_ctx
perf
|
-1 |
C |
error |
|
66 |
1200d |
1254d
|
22/29 |
1083d |
4f64a6c9f6f1
perf: Fix perf_event_pmu_context serialization
|
|
WARNING in htb_destroy
net
|
-1 |
C |
done |
|
2 |
1201d |
1201d
|
22/29 |
1083d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
KASAN: use-after-free Read in xfs_btree_lookup_get_block
xfs
|
19 |
C |
error |
done |
7 |
1148d |
1245d
|
22/29 |
1083d |
22ed903eee23
xfs: verify buffer contents when we skip log replay
|
|
general protection fault in ethnl_set_plca_cfg
net
|
2 |
C |
done |
|
37 |
1227d |
1227d
|
22/29 |
1083d |
28dbf774bc87
plca.c: fix obvious mistake in checking retval
|
|
memory leak in tcindex_set_parms (3)
net
|
3 |
C |
|
|
1 |
1271d |
1267d
|
22/29 |
1083d |
8c710f75256b
net/sched: Retire tcindex classifier
|
|
WARNING in hfsplus_cat_write_inode
hfs
|
-1 |
C |
error |
|
141 |
1111d |
1278d
|
22/29 |
1083d |
81b21c0f0138
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
INFO: rcu detected stall in ext4_file_write_iter (6)
ext4
|
1 |
C |
error |
|
8 |
1141d |
1204d
|
22/29 |
1083d |
d125d1349abe
alarmtimer: Prevent starvation by small intervals and SIG_IGN
|
|
KASAN: null-ptr-deref Write in udf_write_fi
udf
|
21 |
C |
inconclusive |
done |
51 |
1215d |
1338d
|
22/29 |
1083d |
e9109a92d2a9
udf: Convert udf_rename() to new directory iteration code
|
|
WARNING in hfs_write_inode
hfs
|
-1 |
C |
done |
|
3 |
1240d |
1238d
|
22/29 |
1083d |
cb7a95af78d2
hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
|
|
INFO: task hung in tcindex_partial_destroy_work
|
1 |
C |
done |
unreliable |
84 |
1931d |
2067d
|
22/29 |
1083d |
8c710f75256b
net/sched: Retire tcindex classifier
|
|
general protection fault in nl802154_trigger_scan
wpan
|
8 |
C |
error |
|
31 |
1162d |
1180d
|
22/29 |
1083d |
02f18662f6c6
ieee802154: Prevent user from crashing the host
|
|
BUG: unable to handle kernel NULL pointer dereference in __build_skb_around
bpf
net
|
10 |
C |
done |
|
29 |
1163d |
1168d
|
22/29 |
1083d |
e5995bc7e2ba
bpf, test_run: fix crashes due to XDP frame overwriting/corruption
|
|
KASAN: null-ptr-deref Read in filemap_fault
mm
udf
|
11 |
C |
done |
|
112 |
1112d |
1124d
|
22/29 |
1083d |
38a55db9877c
filemap: Handle error return from __filemap_get_folio()
|
|
WARNING in udf_free_inode
udf
|
-1 |
C |
error |
|
19 |
1194d |
1329d
|
22/29 |
1083d |
85a37983ec69
udf: Detect system inodes linked into directory hierarchy
|
|
INFO: task hung in do_user_addr_fault (3)
ntfs3
|
1 |
C |
|
|
32 |
1166d |
1241d
|
22/29 |
1083d |
0226635c304c
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
|
|
general protection fault in virtio_transport_purge_skbs
net
|
2 |
C |
done |
|
3 |
1161d |
1160d
|
22/29 |
1083d |
b465518dc27d
vsock/loopback: use only sk_buff_head.lock to protect the packet queue
|
|
WARNING in do_symlinkat
ntfs3
|
-1 |
C |
error |
done |
66 |
1088d |
1252d
|
22/29 |
1083d |
267a36ba30a7
fs/ntfs3: Remove noacsrules
|
|
KASAN: use-after-free Read in ext4_find_extent (2)
ext4
|
19 |
C |
error |
|
2 |
1118d |
1243d
|
22/29 |
1083d |
835659598c67
ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
|
|
general protection fault in nilfs_btree_insert
nilfs
|
2 |
C |
error |
|
2 |
1248d |
1245d
|
22/29 |
1083d |
7633355e5c7f
nilfs2: fix general protection fault in nilfs_btree_insert()
|
|
KMSAN: uninit-value in ondemand_readahead
fs
mm
|
7 |
C |
|
|
221 |
1181d |
1345d
|
22/29 |
1083d |
3e35102666f8
fs/cramfs/inode.c: initialize file_ra_state
|
|
WARNING in j1939_session_deactivate_activate_next
can
|
-1 |
C |
error |
done |
502 |
1149d |
1554d
|
22/29 |
1083d |
d0553680f94c
can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
|
|
WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x0 vs. 64x768)
|
-1 |
C |
unreliable |
error |
24 |
1416d |
1416d
|
22/29 |
1083d |
1935f0deb611
drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
|
|
WARNING in cleanup_net (2)
net
|
-1 |
C |
error |
|
72 |
1118d |
1146d
|
22/29 |
1083d |
9744d2bf1976
smc: Fix use-after-free in tcp_write_timer_handler().
|
|
KASAN: use-after-free Read in cfusbl_device_notify
net
|
19 |
C |
done |
|
341 |
1175d |
1322d
|
22/29 |
1083d |
9781e98a9711
net: caif: Fix use-after-free in cfusbl_device_notify()
|
|
KMSAN: uninit-value in kalmia_send_init_packet
usb
|
7 |
C |
|
|
2 |
1213d |
1212d
|
22/29 |
1083d |
c68f345b7c42
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
|
|
WARNING in ip6erspan_tunnel_xmit (2)
net
|
-1 |
C |
unreliable |
|
5 |
1163d |
1163d
|
22/29 |
1083d |
8e50ed774554
erspan: do not use skb_mac_header() in ndo_start_xmit()
|
|
KMSAN: uninit-value in qrtr_tx_resume
net
arm-msm
|
7 |
C |
|
|
8 |
1157d |
1218d
|
22/29 |
1083d |
6417070918de
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
|
|
general protection fault in __d_add
ntfs3
|
10 |
C |
error |
|
16 |
1269d |
1325d
|
22/29 |
1083d |
254e69f284d7
fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
|
|
WARNING in pegasus_open/usb_submit_urb
input
usb
|
-1 |
C |
|
|
7 |
1164d |
2174d
|
22/29 |
1083d |
b3d80fd27a3c
Input: pegasus-notetaker - check pipe type when probing
|
|
possible deadlock in j1939_sk_errqueue
can
|
4 |
C |
unreliable |
|
227 |
1155d |
1692d
|
22/29 |
1083d |
d1366b283d94
can: j1939: prevent deadlock by moving j1939_sk_errqueue()
|
|
KASAN: use-after-free Read in __update_extent_tree_range
f2fs
|
19 |
C |
done |
|
9 |
1195d |
1243d
|
22/29 |
1083d |
a46bebd502fe
f2fs: synchronize atomic write aborts
|
|
WARNING in nla_get_range_unsigned (2)
net
|
-1 |
C |
done |
|
433 |
1159d |
1195d
|
22/29 |
1083d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
KASAN: slab-out-of-bounds Read in indx_insert_into_buffer
ntfs3
|
17 |
C |
error |
|
2 |
1270d |
1269d
|
22/29 |
1083d |
b8c44949044e
fs/ntfs3: Fix OOB read in indx_insert_into_buffer
|
|
WARNING: kmalloc bug in btrfs_ioctl_send
btrfs
|
-1 |
C |
done |
|
53 |
1204d |
1275d
|
22/29 |
1083d |
33e17b3f5ab7
btrfs: send: limit number of clones and allocated memory size
|
|
WARNING in shark_write_reg/usb_submit_urb
usb
|
-1 |
C |
error |
|
63 |
1133d |
2507d
|
22/29 |
1083d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
BUG: unable to handle kernel paging request in atm_tc_destroy
net
|
8 |
C |
error |
|
3 |
1202d |
1201d
|
22/29 |
1083d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
kernel BUG in ip_frag_next
net
|
-1 |
C |
done |
|
9 |
1217d |
1224d
|
22/29 |
1083d |
f72ff8b81ebc
net: fix kfree_skb_list use of skb_mark_not_on_list
|
|
WARNING in xfs_qm_dqget_cache_insert
xfs
|
-1 |
C |
error |
|
123 |
1109d |
1281d
|
22/29 |
1083d |
4b827b3f305d
xfs: remove WARN when dquot cache insertion fails
|
|
KMSAN: kernel-infoleak in _copy_to_iter (8)
mm
|
21 |
C |
|
|
21180 |
1083d |
1178d
|
22/29 |
1083d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
WARNING in io_cqring_event_overflow
io-uring
|
-1 |
C |
|
|
7 |
1223d |
1231d
|
22/29 |
1083d |
544d163d659d
io_uring: lock overflowing for IOPOLL
|
|
WARNING: locking bug in inet_autobind
net
|
4 |
C |
done |
error |
103 |
1245d |
2568d
|
22/29 |
1083d |
0b2c59720e65
l2tp: close all race conditions in l2tp_tunnel_register()
|
|
WARNING in rmqueue
erofs
|
-1 |
C |
error |
|
2 |
1152d |
1275d
|
22/29 |
1083d |
cc4efd3dd2ac
erofs: stop parsing non-compact HEAD index if clusterofs is invalid
|
|
BUG: scheduling while atomic in msleep
net
|
5 |
C |
done |
|
40 |
1217d |
1225d
|
22/29 |
1083d |
ea4fdbaa2f77
net/sched: sch_taprio: do not schedule in taprio_reset()
|
|
WARNING in __dev_queue_xmit (2)
net
|
-1 |
C |
|
|
76 |
1116d |
1187d
|
22/29 |
1083d |
693aa2c0d9b6
ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
|
|
memory leak in ath9k_hif_usb_rx_cb
wireless
|
3 |
C |
|
|
1 |
1259d |
1255d
|
22/29 |
1083d |
0af54343a762
wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
|
|
general protection fault in bpf_struct_ops_link_create
bpf
net
|
2 |
C |
done |
|
17 |
1157d |
1160d
|
22/29 |
1083d |
55fbae05476d
bpf: Check IS_ERR for the bpf_map_get() return value
|
|
WARNING: can't access registers at entry_SYSCALL_64_after_hwframe
|
-1 |
C |
|
|
15 |
1190d |
1195d
|
22/29 |
1083d |
00c8f01c4e84
objtool: Fix ORC 'signal' propagation
|
|
INFO: task hung in find_inode_fast
ext4
|
1 |
C |
error |
|
28 |
1086d |
1235d
|
22/29 |
1083d |
0f7bfd6f8164
ext4: fix task hung in ext4_xattr_delete_inode
|
|
memory leak in io_submit_sqes (4)
io-uring
|
3 |
C |
|
|
1 |
1235d |
1234d
|
22/29 |
1083d |
febb985c06cb
io_uring/poll: add hash if ready poll request can't complete inline
|
|
WARNING in hfsplus_cat_read_inode
hfs
|
-1 |
C |
error |
|
599 |
1108d |
1272d
|
22/29 |
1083d |
81b21c0f0138
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
KASAN: slab-out-of-bounds Read in udf_get_filelongad
udf
|
17 |
C |
|
|
2 |
1262d |
1262d
|
22/29 |
1083d |
53cafe1d6d8e
udf: Do not bother merging very long extents
|
|
BUG: unable to handle kernel NULL pointer dereference in ni_write_inode
ntfs3
|
10 |
C |
error |
|
596 |
1109d |
1341d
|
22/29 |
1083d |
8dae4f6341e3
fs/ntfs3: Fix NULL dereference in ni_write_inode
db2a3cc6a348
fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode'
|
|
KASAN: use-after-free Read in put_pmu_ctx
perf
|
19 |
C |
|
|
51 |
1238d |
1255d
|
22/29 |
1083d |
a551844e345b
perf: Fix use-after-free in error path
|
|
KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table
bridge
netfilter
|
17 |
C |
error |
|
4 |
1194d |
1194d
|
22/29 |
1083d |
e58a171d35e3
netfilter: ebtables: fix table blob use-after-free
|
|
WARNING: refcount bug in qrtr_recvmsg (2)
arm-msm
net
|
13 |
C |
error |
|
2 |
1168d |
1161d
|
22/29 |
1083d |
44d807320000
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
|
|
WARNING in remove_proc_entry (5)
scsi
|
-1 |
C |
|
|
158 |
1166d |
1209d
|
22/29 |
1083d |
2172e84ea00b
SUNRPC: Fix occasional warning when destroying gss_krb5_enctypes
|
|
possible deadlock in __jbd2_log_wait_for_space
ext4
|
4 |
C |
error |
|
34993 |
1139d |
1388d
|
22/29 |
1083d |
62913ae96de7
ext4, jbd2: add an optimized bmap for the journal inode
|
|
WARNING in split_huge_page_to_list (2)
mm
|
-1 |
C |
error |
|
2334 |
1108d |
1372d
|
22/29 |
1083d |
4737edbbdd49
mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
|
|
KASAN: slab-use-after-free Read in mas_next_entry
mm
|
19 |
syz |
error |
|
3 |
1145d |
1149d
|
22/29 |
1083d |
f4e9e0e69468
mm/mempolicy: fix use-after-free of VMA iterator
|
|
UBSAN: shift-out-of-bounds in blkstol2
jfs
|
-1 |
C |
error |
|
2 |
1302d |
1302d
|
22/29 |
1083d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
WARNING in nilfs_dat_prepare_end
nilfs
|
-1 |
C |
error |
|
288 |
1178d |
1331d
|
22/29 |
1083d |
5124a0a54985
nilfs2: replace WARN_ONs for invalid DAT metadata block requests
|
|
general protection fault in cache_first_page
squashfs
|
10 |
C |
error |
|
4 |
1224d |
1236d
|
22/29 |
1083d |
f65c4bbbd682
Squashfs: fix handling and sanity checking of xattr_ids count
72e544b1b283
squashfs: harden sanity check in squashfs_read_xattr_id_table
|
|
general protection fault in jhash
wireless
|
2 |
C |
done |
done |
15 |
1132d |
1152d
|
22/29 |
1083d |
2bef4d1fb8b3
wifi: mac80211_hwsim: fix potential NULL deref in hwsim_pmsr_report_nl()
|
|
general protection fault in mark_buffer_dirty_inode (2)
udf
|
2 |
C |
|
|
32 |
1116d |
1275d
|
22/29 |
1083d |
e9109a92d2a9
udf: Convert udf_rename() to new directory iteration code
|
|
WARNING in blkdev_put (2)
block
|
-1 |
C |
unreliable |
|
250 |
1159d |
1188d
|
22/29 |
1083d |
428913bce1e6
block: fix wrong mode for blkdev_put() from disk_scan_partitions()
|
|
WARNING: refcount bug in nr_release (4)
hams
|
13 |
C |
|
|
24 |
1198d |
1503d
|
22/29 |
1083d |
409db27e3a2e
netrom: Fix use-after-free of a listening socket.
|
|
KASAN: use-after-free Read in hfsplus_release_folio
hfs
|
19 |
C |
error |
|
23 |
1182d |
1257d
|
22/29 |
1083d |
07db5e247ab5
fs: hfsplus: fix UAF issue in hfsplus_put_super
|
|
memory leak in __proc_create
scsi
usb
|
3 |
syz |
|
|
1 |
1176d |
1176d
|
22/29 |
1083d |
be03df3d4bfe
scsi: core: Fix a procfs host directory removal regression
|
|
general protection fault in pn533_out_complete
nfc
|
2 |
C |
error |
|
15 |
1214d |
1229d
|
22/29 |
1083d |
484b7059796e
nfc: pn533: initialize struct pn533_out_arg properly
|
|
general protection fault in __xfs_free_extent
xfs
|
10 |
C |
error |
done |
17 |
1137d |
1256d
|
22/29 |
1083d |
b2ccab3199aa
xfs: pass per-ag references to xfs_free_extent
|
|
INFO: task hung in lock_mount
nilfs
|
1 |
C |
error |
error |
1238 |
1133d |
2948d
|
22/29 |
1083d |
a6a491c04888
nilfs2: fix infinite loop in nilfs_mdt_get_block()
|
|
kernel BUG in hpage_collapse_scan_file
mm
|
-1 |
C |
unreliable |
|
3 |
1135d |
1173d
|
22/29 |
1083d |
2ce0bdfebc74
mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file()
|
|
INFO: task hung in nfnetlink_rcv_msg (3)
netfilter
|
1 |
C |
done |
|
5 |
1264d |
1275d
|
22/29 |
1083d |
5e29dc36bd5e
netfilter: ipset: Rework long task execution when adding/deleting entries
|
|
WARNING in io_sync_cancel
io-uring
|
-1 |
C |
error |
|
3 |
1257d |
1253d
|
22/29 |
1083d |
23fffb2f09ce
io_uring/cancel: re-grab ctx mutex after finishing wait
|
|
WARNING in io_cqring_overflow_flush
io-uring
|
-1 |
C |
|
|
2 |
1257d |
1253d
|
22/29 |
1083d |
52ea806ad983
io_uring: finish waiting before flushing overflow entries
|
|
KASAN: slab-out-of-bounds Write in copy_verifier_state
bpf
|
21 |
C |
error |
done |
825 |
1237d |
1255d
|
22/29 |
1083d |
45435d8da71f
bpf: Always use maximal size for copy_array()
|
|
INFO: trying to register non-static key in net_free
net
|
-1 |
syz |
error |
|
17982 |
1191d |
1204d
|
22/29 |
1083d |
6e77a5a4af05
net: initialize net->notrefcnt_tracker earlier
|
|
BUG: unable to handle kernel paging request in clear_user_rep_good
iomap
|
8 |
syz |
error |
done |
2 |
1152d |
1209d
|
22/29 |
1083d |
d2c95f9d6802
x86: don't use REP_GOOD or ERMS for user memory clearing
|
|
WARNING: suspicious RCU usage in bond_mii_monitor
net
|
4 |
C |
|
|
13 |
1237d |
1256d
|
22/29 |
1083d |
42c7ded0eeac
bonding: fix lockdep splat in bond_miimon_commit()
|
|
general protection fault in start_transaction
btrfs
|
2 |
C |
error |
|
3 |
1238d |
1252d
|
22/29 |
1083d |
b7adbf9ada35
btrfs: fix race between quota rescan and disable leading to NULL pointer deref
|
|
WARNING in mbind_range
mm
|
-1 |
C |
error |
|
3 |
1233d |
1234d
|
22/29 |
1083d |
17dc622c7b0f
maple_tree: fix mas_prev() and mas_find() state handling
|
|
BUG: stack guard page was hit in inet6_release
bpf
net
|
-1 |
C |
done |
|
4 |
1218d |
1267d
|
22/29 |
1083d |
ddce1e091757
bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
|
|
memory leak in copy_process (5)
kernel
|
3 |
C |
|
|
1 |
1180d |
1176d
|
22/29 |
1083d |
2aab4b969002
af_unix: fix struct pid leaks in OOB support
|
|
possible deadlock in l2tp_tunnel_register (2)
net
|
4 |
C |
|
|
153 |
1178d |
1187d
|
22/29 |
1083d |
0b2c59720e65
l2tp: close all race conditions in l2tp_tunnel_register()
|
|
KASAN: slab-use-after-free Read in tcf_action_destroy
net
|
19 |
C |
error |
|
32 |
1110d |
1185d
|
22/29 |
1083d |
dfd2f0eb2347
net/sched: flower: fix fl_change() error recovery path
|
|
possible deadlock in release_sock
net
|
4 |
C |
done |
|
42 |
1224d |
1225d
|
22/29 |
1083d |
b9fb10d131b8
l2tp: prevent lockdep issue in l2tp_tunnel_register()
|
|
possible deadlock in tty_port_tty_get
serial
|
4 |
C |
|
|
22661 |
1133d |
1334d
|
22/29 |
1083d |
1007843a9190
mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
|
|
WARNING in j1939_xtp_rx_abort_one
|
-1 |
C |
done |
|
379 |
1219d |
1757d
|
22/29 |
1083d |
d0553680f94c
can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
|
|
WARNING: suspicious RCU usage in mas_walk
kernfs
|
4 |
C |
error |
|
234 |
1159d |
1489d
|
22/29 |
1083d |
6db504ce55bd
mm/ksm: fix race with VMA iteration and mm_struct teardown
|
|
memory leak in nfc_genl_se_io
net
nfc
|
3 |
C |
|
|
1 |
1198d |
1194d
|
22/29 |
1083d |
25ff6f8a5a3b
nfc: fix memory leak of se_io context in nfc_genl_se_io
|
|
BUG: bad usercopy in con_font_op
hardening
mm
|
-1 |
C |
done |
|
1 |
1180d |
1180d
|
22/29 |
1083d |
18365ebf23f3
tty: vt: protect KD_FONT_OP_GET_TALL from unbound access
|
|
general protection fault in xpad_probe
usb
|
2 |
C |
done |
|
24 |
1120d |
1142d
|
22/29 |
1083d |
53bea86b5712
Revert "Input: xpad - fix support for some third-party controllers"
|
|
BUG: bad usercopy in put_cmsg
hardening
mm
|
-1 |
C |
|
|
3 |
1198d |
1200d
|
22/29 |
1083d |
2558b8039d05
net: use a bounce buffer for copying skb->mark
|
|
general protection fault in tcindex_set_parms
net
|
2 |
C |
done |
|
2 |
1198d |
1198d
|
22/29 |
1083d |
42018a322bd4
net/sched: tcindex: search key must be 16 bits
|
|
UBSAN: shift-out-of-bounds in dbAllocBits
jfs
|
-1 |
C |
error |
done |
4 |
1192d |
1325d
|
22/29 |
1083d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
kernel BUG in fou_build_udp
net
|
-1 |
C |
|
|
1 |
1119d |
1119d
|
22/29 |
1083d |
c88f8d5cd95f
UPSTREAM: sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
|
|
KASAN: use-after-free Read in io_worker_get
io-uring
|
19 |
C |
done |
done |
5 |
1199d |
1234d
|
22/29 |
1083d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
INFO: task hung in nilfs_segctor_thread
nilfs
|
1 |
C |
error |
|
94 |
1120d |
1294d
|
22/29 |
1083d |
99b9402a36f0
nilfs2: fix underflow in second superblock position calculations
|
|
general protection fault in drm_crtc_next_vblank_start
dri
|
2 |
C |
done |
|
4 |
1152d |
1150d
|
22/29 |
1083d |
6f1ccbf07453
drm/vblank: Fix for drivers that do not drm_vblank_init()
|
|
memory leak in nr_create (2)
hams
|
3 |
C |
|
|
11 |
1154d |
1213d
|
22/29 |
1083d |
611792920925
netrom: Fix use-after-free caused by accept on already connected socket
|
|
kernel BUG in rxrpc_put_call
afs
net
|
-1 |
C |
done |
|
9 |
1221d |
1233d
|
22/29 |
1083d |
01644a1f98ff
rxrpc: Fix wrong error return in rxrpc_connect_call()
|
|
kernel BUG in rxrpc_put_peer
net
afs
|
-1 |
C |
|
|
80 |
1224d |
1267d
|
22/29 |
1083d |
9d35d880e0e4
rxrpc: Move client call connection to the I/O thread
03fc55adf876
rxrpc: Only disconnect calls in the I/O thread
|
|
WARNING in nilfs_dat_commit_end
nilfs
|
-1 |
C |
error |
|
267 |
1178d |
1334d
|
22/29 |
1083d |
602ce7b8e134
nilfs2: prevent WARNING in nilfs_dat_commit_end()
|
|
possible deadlock in freeze_super (2)
gfs2
|
4 |
C |
error |
done |
15 |
1108d |
1325d
|
22/29 |
1083d |
b66f723bb552
gfs2: Improve gfs2_make_fs_rw error handling
|
|
INFO: task hung in write_cache_pages (2)
mm
fs
|
1 |
C |
done |
|
36 |
1111d |
1182d
|
22/29 |
1083d |
fb3592c41a44
migrate_pages: fix deadlock in batched migration
|
|
KMSAN: uninit-value in vfs_write
fs
|
7 |
C |
|
|
3 |
1207d |
1177d
|
22/29 |
1083d |
2b4c99f7d9a5
can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
|
|
WARNING in _copy_from_iter
block
tipc
|
-1 |
C |
error |
|
32057 |
1171d |
1265d
|
22/29 |
1083d |
11a4d6f67cf5
tipc: fix kernel warning when sending SYN message
|
|
UBSAN: shift-out-of-bounds in dbFindCtl
jfs
|
-1 |
C |
inconclusive |
done |
45 |
1183d |
1325d
|
22/29 |
1083d |
fad376fce0af
fs/jfs: fix shift exponent db_agl2size negative
|
|
INFO: rcu detected stall in devlink_nl_cmd_port_get_dumpit
net
|
1 |
syz |
|
|
7 |
1182d |
1199d
|
22/29 |
1083d |
b20b8aec6ffc
devlink: Fix netdev notifier chain corruption
|
|
KASAN: use-after-free Read in io_wq_worker_wake
io-uring
|
19 |
C |
done |
done |
1 |
1201d |
1234d
|
22/29 |
1083d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
UBSAN: array-index-out-of-bounds in __gfs2_iomap_get
gfs2
|
15 |
C |
error |
|
26 |
1129d |
1252d
|
22/29 |
1083d |
cfcdb5bad34f
gfs2: Fix inode height consistency check
|
|
KASAN: slab-use-after-free Read in class_register
usb
|
19 |
C |
done |
|
13 |
1153d |
1152d
|
22/29 |
1083d |
f326ea63ecc6
driver core: class: fix slab-use-after-free Read in class_register()
|
|
memory leak in ath9k_hif_usb_firmware_cb
wireless
|
3 |
C |
|
|
1591 |
1227d |
2023d
|
22/29 |
1083d |
9b25e3985477
wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
|
|
WARNING in inet_sock_destruct (3)
net
|
-1 |
C |
|
|
87 |
1087d |
1190d
|
22/29 |
1083d |
880ce5f20033
net: avoid skb end_offset change in __skb_unclone_keeptruesize()
|
|
KMSAN: uninit-value in ipv6_find_tlv
net
|
7 |
C |
|
|
271 |
1125d |
2478d
|
22/29 |
1083d |
ea30388baebc
ipv6: Fix an uninit variable access bug in __ip6_make_skb()
|
|
WARNING in mark_buffer_dirty (4)
bfs
nilfs
|
-1 |
C |
inconclusive |
|
1152 |
1083d |
1423d
|
22/29 |
1083d |
28a65b49eb53
nilfs2: do not write dirty data after degenerating to read-only
|
|
WARNING in fscrypt_destroy_keyring
ext4
fscrypt
|
-1 |
C |
|
|
2 |
1172d |
1170d
|
22/29 |
1083d |
ccb820dc7d22
fscrypt: destroy keyring after security_sb_delete()
|
|
WARNING in default_device_exit_batch (4)
net
|
-1 |
C |
error |
|
954 |
1159d |
1285d
|
22/29 |
1083d |
e667d4690986
bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails
|
|
memory leak in regulatory_hint_core
wireless
|
3 |
C |
|
|
2 |
1282d |
1310d
|
22/29 |
1083d |
399ab7fe0fa0
net: sched: fix memory leak in tcindex_set_parms
|
|
WARNING in __udf_add_aext
udf
|
-1 |
C |
error |
|
170 |
1087d |
1324d
|
22/29 |
1083d |
e9109a92d2a9
udf: Convert udf_rename() to new directory iteration code
|
|
BUG: unable to handle kernel NULL pointer dereference in __writepage
udf
|
10 |
C |
done |
|
17 |
1192d |
1256d
|
22/29 |
1083d |
79d3c6dbada4
udf: Convert in-ICB files to use udf_writepages()
|
|
KMSAN: kernel-infoleak in copyout (2)
net
|
17 |
C |
|
|
6723 |
1084d |
2252d
|
22/29 |
1083d |
8222d5910dae
xfrm: Zero padding when dumping algos and encap
|
|
WARNING in ath6kl_htc_pipe_rx_complete
usb
wireless
|
-1 |
C |
error |
|
2008 |
1122d |
2392d
|
22/29 |
1083d |
75c4a8154cb6
wifi: ath6kl: reduce WARN to dev_dbg() in callback
|
|
WARNING in udf_setsize
udf
|
-1 |
C |
done |
|
24 |
1086d |
1257d
|
22/29 |
1083d |
256fe4162f8b
udf: Do not update file length for failed writes to inline files
|
|
kernel BUG in hfs_bnode_put
hfs
|
-1 |
C |
error |
|
5 |
1214d |
1269d
|
22/29 |
1083d |
a9dc087fd3c4
hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
|
|
KASAN: null-ptr-deref Read in __fl_put
net
|
11 |
C |
error |
|
16 |
1165d |
1184d
|
22/29 |
1083d |
dfd2f0eb2347
net/sched: flower: fix fl_change() error recovery path
|
|
general protection fault in udf_fiiter_write_fi
udf
|
2 |
C |
error |
|
2 |
1230d |
1234d
|
22/29 |
1083d |
f950fd052913
udf: Protect rename against modification of moved directory
|
|
general protection fault in sctp_outq_tail
sctp
|
8 |
C |
error |
|
5 |
1149d |
1161d
|
22/29 |
1083d |
2584024b2355
sctp: check send stream number after wait_for_sndbuf
|
|
WARNING: CPU: NUM PID: NUM at mm/page_alloc.c:LINE get_page_from_freeli
mm
erofs
|
-1 |
C |
error |
|
1 |
1255d |
1251d
|
22/29 |
1083d |
12724ba38992
erofs: fix kvcalloc() misuse with __GFP_NOFAIL
|
|
WARNING in kvm_arch_vcpu_ioctl_run (4)
kvm-x86
|
-1 |
C |
error |
|
288 |
1084d |
1167d
|
22/29 |
1083d |
0dc902267cb3
KVM: x86: Suppress pending MMIO write exits if emulator detects exception
|
|
general protection fault in hrtimer_active (5)
kernel
|
2 |
C |
error |
|
22 |
1198d |
1202d
|
22/29 |
1083d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
WARNING in __kernel_read (2)
fsverity
|
-1 |
C |
error |
|
318 |
1128d |
2069d
|
22/29 |
1083d |
04839139213c
fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
|
|
INFO: task hung in extent_write_cache_pages
btrfs
|
1 |
C |
error |
|
5 |
1115d |
1223d
|
22/29 |
1083d |
519b7e13b5ae
btrfs: lock the inode in shared mode before starting fiemap
|
|
kernel BUG in inet_sock_destruct
net
|
-1 |
C |
error |
|
3 |
1240d |
1239d
|
22/29 |
1083d |
1ac885574470
inet: control sockets should not use current thread task_frag
|
|
BUG: corrupted list in taprio_destroy
net
|
8 |
C |
done |
|
2 |
1201d |
1201d
|
22/29 |
1083d |
4fab64126891
net/sched: fix error recovery in qdisc_create()
|
|
WARNING: suspicious RCU usage in mas_start
kernfs
|
4 |
C |
error |
done |
23 |
1155d |
1188d
|
22/29 |
1083d |
6db504ce55bd
mm/ksm: fix race with VMA iteration and mm_struct teardown
|
|
WARNING in shark_write_val/usb_submit_urb
usb
|
-1 |
C |
error |
done |
51 |
1141d |
2500d
|
22/29 |
1083d |
76e31045ba03
media: radio-shark: Add endpoint checks
|
|
memory leak in prctl
mm
|
3 |
C |
|
|
1 |
1257d |
1253d
|
22/29 |
1083d |
a1193de562f5
mm: fix vma->anon_name memory leak for anonymous shmem VMAs
|
|
WARNING in print_tainted
ext4
|
-1 |
C |
|
|
162 |
1084d |
1255d
|
22/29 |
1083d |
c6adf659a8ba
can: isotp: check CAN address family in isotp_bind()
4f027cba8216
can: isotp: split tx timer into transmission and timeout
|
|
WARNING in vkms_get_vblank_timestamp
dri
|
-1 |
syz |
error |
|
41 |
1087d |
1146d
|
22/29 |
1083d |
f2c7ca890182
drm/atomic-helper: Don't set deadline for modesets
|
|
KASAN: invalid-free in skb_free_head (2)
net
|
24 |
C |
error |
|
25 |
1125d |
1190d
|
22/29 |
1083d |
880ce5f20033
net: avoid skb end_offset change in __skb_unclone_keeptruesize()
|
|
general protection fault in skb_dequeue (3)
wireless
|
2 |
C |
done |
|
6 |
1201d |
1211d
|
22/29 |
1083d |
33b3b041543e
splice: Add a func to do a splice from an O_DIRECT file without ITER_PIPE
|
|
possible deadlock in jbd2_journal_lock_updates
ext4
|
4 |
C |
error |
|
83148 |
1090d |
1388d
|
22/29 |
1083d |
62913ae96de7
ext4, jbd2: add an optimized bmap for the journal inode
|
|
memory leak in __build_skb (3)
wireless
|
3 |
C |
|
|
2 |
1244d |
1241d
|
22/29 |
1083d |
9b25e3985477
wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
|
|
INFO: task hung in freeze_super (3)
gfs2
|
1 |
C |
error |
|
19 |
1104d |
1265d
|
22/29 |
1083d |
b66f723bb552
gfs2: Improve gfs2_make_fs_rw error handling
|
|
KMSAN: uninit-value in qdisc_run
kernel
|
7 |
C |
|
|
2 |
1295d |
1232d
|
22/29 |
1083d |
3a415d59c1db
net/sched: sch_taprio: fix possible use-after-free
|
|
UBSAN: shift-out-of-bounds in ext2_fill_super
ext4
|
-1 |
C |
|
|
2265 |
1083d |
1187d
|
22/29 |
1083d |
62aeb94433fc
ext2: Check block size validity during mount
|
|
KASAN: wild-memory-access Read in io_wq_worker_running
io-uring
|
19 |
C |
|
|
39 |
1229d |
1236d
|
22/29 |
1083d |
e6db6f9398da
io_uring/io-wq: only free worker if it was allocated for creation
|
|
KASAN: slab-out-of-bounds Read in hdr_delete_de
ntfs3
|
17 |
C |
error |
|
2 |
1268d |
1268d
|
22/29 |
1083d |
ab84eee4c7ab
fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
|
|
WARNING in submit_bio_checks
|
-1 |
C |
done |
unreliable |
1851 |
1526d |
2146d
|
22/29 |
1135d |
57e95e4670d1
block: fix and cleanup bio_check_ro
|
|
general protection fault in dma_fence_array_first
dri
media
|
2 |
C |
done |
|
7 |
1519d |
1519d
|
22/29 |
1140d |
21d139d73f77
dma-buf/sync-file: fix logic error in new fence merge code
|
|
BUG: sleeping function called from invalid context in folio_copy
mm
|
5 |
C |
unreliable |
|
271 |
1769d |
1767d
|
22/29 |
1140d |
715cbfd6c5c5
mm/migrate: Add folio_migrate_copy()
|
|
KASAN: use-after-free Read in hci_cmd_timeout
|
19 |
C |
done |
error |
371 |
1264d |
2577d
|
22/29 |
1140d |
97dfaf073f58
Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
|
|
KASAN: slab-out-of-bounds Read in sk_psock_get
net
|
17 |
C |
done |
error |
9 |
1401d |
1735d
|
22/29 |
1140d |
2a0133723f9e
net: fix refcount bug in sk_psock_get (2)
|
|
KASAN: use-after-free Read in delete_partition (2)
block
|
19 |
C |
done |
|
1 |
1884d |
1883d
|
22/29 |
1140d |
b5cfbd35ecca
block: check disk exist before trying to add partition
|
|
INFO: task hung in port100_probe
usb
nfc
|
1 |
C |
error |
inconclusive |
10 |
1541d |
1799d
|
22/29 |
1140d |
f80cfe2f2658
NFC: port100: fix use-after-free in port100_send_complete
|
|
KASAN: slab-out-of-bounds Read in ntfs_get_ea
ntfs3
|
17 |
C |
error |
done |
9 |
1290d |
1358d
|
22/29 |
1140d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
possible deadlock in nci_start_poll
net
nfc
|
4 |
C |
error |
done |
83 |
1188d |
1289d
|
22/29 |
1141d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
possible deadlock in bpf_trace_printk
bpf
trace
|
4 |
C |
done |
done |
68 |
1192d |
1447d
|
22/29 |
1160d |
05b24ff9b2cf
bpf: Prevent bpf program recursion for raw tracepoint probes
|
|
WARNING in btrfs_run_delayed_refs
btrfs
|
-1 |
C |
error |
done |
15 |
1205d |
1318d
|
22/29 |
1168d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
kernel BUG in pskb_expand_head
net
|
-1 |
C |
done |
|
1600 |
1202d |
1654d
|
22/29 |
1187d |
5f33a09e769a
can: isotp: convert struct tpcon::{idx,len} to unsigned int
7c759040c1dd
can: isotp: fix potential CAN frame reception race in isotp_rcv()
|
|
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast
kvm-x86
|
7 |
C |
|
|
20 |
1395d |
1428d
|
22/29 |
1187d |
8a414f943f8b
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
|
|
kernel BUG in __text_poke
kernel
|
-1 |
C |
|
|
80 |
1387d |
1563d
|
22/29 |
1187d |
1d5f82d9dd47
bpf, x86: fix freeing of not-finalized bpf_prog_pack
d24d2a2b0a81
bpf: bpf_prog_pack: Set proper size before freeing ro_header
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_jit_free
bpf
|
17 |
C |
|
|
68 |
1387d |
1562d
|
22/29 |
1187d |
1d5f82d9dd47
bpf, x86: fix freeing of not-finalized bpf_prog_pack
d24d2a2b0a81
bpf: bpf_prog_pack: Set proper size before freeing ro_header
|
|
WARNING in __dev_queue_xmit
|
-1 |
C |
done |
|
16774 |
1187d |
1401d
|
22/29 |
1187d |
dc633700f00f
net/af_packet: check len when min_header_len equals to 0
b12e924a2f5b
net/ieee802154: don't warn zero-sized raw_sendmsg()
3a4d061c699b
net/ieee802154: reject zero-sized raw_sendmsg()
|
|
INFO: trying to register non-static key in ieee80211_do_stop
wireless
|
-1 |
C |
error |
|
70591 |
1372d |
1412d
|
22/29 |
1187d |
aa40d5a43526
wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
wifi: mac80211: do not abuse fq.lock in ieee80211_do_stop()
|
|
KASAN: use-after-free Read in mgmt_pending_remove
bluetooth
|
19 |
C |
unreliable |
|
9 |
1359d |
1379d
|
22/29 |
1187d |
3cfbc6ac22d6
Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor()
Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor()
|
|
WARNING in alloc_charge_hpage
mm
|
-1 |
C |
error |
|
112 |
1236d |
1307d
|
22/29 |
1187d |
e031ff96b334
mm: khugepaged: allow page allocation fallback to eligible nodes
dec1d352de5c
mm: replace VM_WARN_ON to pr_warn if the node is offline with __GFP_THISNODE
|
|
WARNING in ipgre_xmit
net
|
-1 |
C |
done |
|
9916 |
1438d |
1454d
|
22/29 |
1187d |
8d21e9963bec
ip_gre: test csum_start instead of transport header
|
|
inconsistent lock state in fs_reclaim_acquire (3)
kernel
|
4 |
C |
|
|
2 |
1302d |
1308d
|
22/29 |
1187d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
|
KASAN: use-after-free Read in mas_next_nentry
fs
mm
|
19 |
C |
error |
done |
343 |
1296d |
1490d
|
22/29 |
1187d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
KASAN: use-after-free Read in tty_release
io-uring
serial
|
19 |
C |
done |
|
23 |
1516d |
1526d
|
22/29 |
1187d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
|
KMSAN: uninit-value in ax88178_reset
usb
|
7 |
C |
|
|
284 |
1496d |
1602d
|
22/29 |
1187d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
general protection fault in br_mst_info_size
bridge
|
2 |
C |
error |
|
26 |
1524d |
1527d
|
22/29 |
1187d |
cde3fc244b3d
net: bridge: mst: prevent NULL deref in br_mst_info_size()
|
|
KASAN: wild-memory-access Read in skb_copy_bits
net
|
17 |
C |
|
|
2 |
1356d |
1356d
|
22/29 |
1187d |
0d24148bd276
inet: ping: fix recent breakage
|
|
general protection fault in list_lru_add
mm
|
8 |
C |
done |
|
1125 |
1237d |
1525d
|
22/29 |
1187d |
ae085d7f9365
mm: kfence: fix missing objcg housekeeping for SLAB
|
|
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (3)
tipc
|
7 |
C |
|
|
65 |
1284d |
1300d
|
22/29 |
1187d |
1c075b192fe4
tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
|
|
WARNING: kmalloc bug in xdp_umem_create (2)
bpf
net
|
-1 |
C |
done |
|
21 |
1567d |
1633d
|
22/29 |
1187d |
0708a0afe291
mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
|
|
general protection fault in sg_alloc_append_table_from_pages
dri
media
|
11 |
C |
done |
|
477 |
1220d |
1686d
|
22/29 |
1187d |
2b6dd600dd72
udmabuf: validate ubuf->pagecount
|
|
BUG: sleeping function called from invalid context in sk_psock_skb_ingress_self
bpf
net
|
5 |
C |
done |
|
151 |
1297d |
1319d
|
22/29 |
1187d |
2d1f274b95c6
skmsg: pass gfp argument to alloc_sk_msg()
|
|
INFO: task hung in addrconf_verify_work (6)
|
1 |
C |
done |
|
86 |
1191d |
1428d
|
22/29 |
1187d |
ff1fa2081d17
net: tun: avoid disabling NAPI twice
|
|
KASAN: use-after-free Read in ipvlan_queue_xmit (3)
net
|
19 |
C |
error |
error |
8 |
1391d |
1989d
|
22/29 |
1187d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
WARNING in change_protection
mm
|
-1 |
C |
unreliable |
|
13 |
1330d |
1335d
|
22/29 |
1187d |
515778e2d790
mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
|
|
possible deadlock in dccp_v4_ctl_send_reset
mptcp
|
4 |
C |
done |
|
26 |
1274d |
1286d
|
22/29 |
1187d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING in exit_tasks_rcu_finish
kernel
|
-1 |
C |
done |
|
20 |
1442d |
1444d
|
22/29 |
1187d |
0356d4e66214
rcu-tasks: Track blocked RCU Tasks Trace readers
|
|
memory leak in kobject_set_name_vargs (5)
nilfs
|
3 |
C |
|
|
4 |
1332d |
1434d
|
22/29 |
1187d |
d0d51a97063d
nilfs2: fix leak of nilfs_root in case of writer thread creation failure
|
|
BUG: unable to handle kernel NULL pointer dereference in ni_find_attr
ntfs3
|
10 |
C |
done |
done |
81 |
1236d |
1371d
|
22/29 |
1187d |
2681631c2973
fs/ntfs3: Add null pointer check to attr_load_runs_vcn
|
|
possible deadlock in console_unlock (2)
serial
|
4 |
C |
error |
done |
599 |
1204d |
1655d
|
22/29 |
1187d |
09c5ba0aa2fc
printk: add kthread console printers
|
|
general protection fault in llc_build_and_send_xid_pkt
net
|
2 |
C |
done |
|
2 |
1524d |
1525d
|
22/29 |
1187d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
KASAN: use-after-free Read in unregister_shrinker (2)
mm
|
19 |
C |
error |
|
3799 |
1300d |
1343d
|
22/29 |
1187d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
KMSAN: uninit-value in mpol_rebind_mm (2)
mm
|
7 |
C |
|
|
11 |
1442d |
1566d
|
22/29 |
1187d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
possible deadlock in snd_timer_interrupt (2)
sound
|
4 |
C |
error |
|
29 |
1387d |
1647d
|
22/29 |
1187d |
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
possible deadlock in display_open
usb
|
4 |
C |
inconclusive |
|
48888 |
1455d |
2482d
|
22/29 |
1187d |
db264d4c66c0
media: imon: reorganize serialization
|
|
kernel BUG in __clear_extent_bit
btrfs
|
-1 |
C |
error |
|
5 |
1263d |
1278d
|
22/29 |
1187d |
5a75034e71ef
btrfs: do not panic if we can't allocate a prealloc extent state
|
|
KASAN: use-after-free Read in pty_close
serial
io-uring
fuse
|
19 |
C |
done |
|
4 |
1392d |
1420d
|
22/29 |
1187d |
7a121ced6e64
io_uring: don't miss setting REQ_F_DOUBLE_POLL
|
|
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (2)
media
|
21 |
C |
inconclusive |
done |
14 |
1212d |
1724d
|
22/29 |
1187d |
94a7ad928346
media: vivid: fix compose size exceed boundary
|
|
general protection fault in pm_qos_update_target
pm
|
2 |
syz |
inconclusive |
done |
1 |
1527d |
1835d
|
22/29 |
1187d |
3c3201f8c7bb
ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
|
|
KMSAN: uninit-value in asix_mdio_read (3)
usb
|
7 |
C |
|
|
1582 |
1471d |
1536d
|
22/29 |
1187d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
INFO: rcu detected stall in sys_lsetxattr
fs
|
1 |
C |
done |
|
2 |
1499d |
1498d
|
22/29 |
1187d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
|
WARNING in ext4_da_release_space
ext4
|
-1 |
C |
error |
|
9 |
1200d |
1323d
|
22/29 |
1187d |
1b8f787ef547
ext4: fix warning in 'ext4_da_release_space'
|
|
BUG: unable to handle kernel NULL pointer dereference in ntfs_sparse_cluster
ntfs3
|
10 |
C |
error |
done |
11 |
1253d |
1255d
|
22/29 |
1187d |
c380b52f6c57
fs/ntfs3: Change new sparse cluster processing
|
|
WARNING in cpuset_attach
cgroups
|
-1 |
C |
error |
|
20922 |
1370d |
1371d
|
22/29 |
1187d |
43626dade36f
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
|
|
WARNING in __skb_flow_dissect (4)
net
|
-1 |
C |
error |
|
6 |
1298d |
1308d
|
22/29 |
1187d |
9f225444467b
ppp: associate skb with a device at tx
|
|
WARNING in inet_csk_get_port
net
|
-1 |
C |
done |
|
1166 |
1236d |
1464d
|
22/29 |
1187d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
memory leak in __insert_pending
ext4
|
3 |
C |
|
|
1 |
1304d |
1300d
|
22/29 |
1187d |
1da18e38cb97
ext4: fix reserved cluster accounting in __es_remove_extent()
|
|
memory leak in crypto_create_tfm_node
ext4
crypto
|
3 |
C |
|
|
3 |
1318d |
1323d
|
22/29 |
1187d |
ccd30a476f8e
fscrypt: fix keyring memory leak on mount failure
|
|
WARNING in vcpu_enter_guest (2)
kvm-x86
|
-1 |
C |
|
|
42 |
1300d |
1309d
|
22/29 |
1187d |
dea0d5a2fde6
KVM: x86: Exempt pending triple fault from event injection sanity check
|
|
KASAN: use-after-free Read in drm_gem_object_release_handle
|
19 |
C |
done |
|
362 |
1268d |
1653d
|
22/29 |
1187d |
24013314be6e
drm/shmem-helper: Remove errant put in error path
|
|
WARNING in ext2_fill_super
ext4
|
-1 |
C |
|
|
2 |
1373d |
1369d
|
22/29 |
1187d |
d766f2d1e3e3
ext2: Add sanity checks for group and filesystem size
e7c7fbb9a857
ext2: Use kvmalloc() for group descriptor array
|
|
KASAN: use-after-free Read in btrfs_scan_one_device (2)
btrfs
|
19 |
C |
|
|
2 |
1549d |
1546d
|
22/29 |
1187d |
79c9234ba596
btrfs: don't access possibly stale fs_info data in device_list_add
|
|
KASAN: use-after-free Read in free_netdev (3)
net
|
19 |
C |
inconclusive |
|
130 |
1280d |
1435d
|
22/29 |
1187d |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
WARNING in bpf_skb_load_helper_16_no_cache
bpf
|
-1 |
C |
done |
|
6 |
1394d |
1424d
|
22/29 |
1187d |
0326195f523a
bpf: Make sure mac_header was set before using it
|
|
general protection fault in release_udmabuf
dri
media
|
8 |
C |
inconclusive |
|
31 |
1326d |
1377d
|
22/29 |
1187d |
d9c04a1b7a15
udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
|
|
KASAN: slab-out-of-bounds Read in cttimeout_net_exit
netfilter
|
17 |
C |
|
|
1444 |
1433d |
1470d
|
22/29 |
1187d |
aeed55a08d0b
netfilter: cttimeout: fix slab-out-of-bounds read in cttimeout_net_exit
394e771684f7
netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exit
|
|
WARNING in snd_usbmidi_output_open
sound
usb
|
-1 |
C |
done |
|
37 |
1285d |
1292d
|
22/29 |
1187d |
ad72c3c3f6eb
ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
|
|
WARNING in send_packet/usb_submit_urb
usb
|
-1 |
C |
inconclusive |
|
847 |
1256d |
1422d
|
22/29 |
1187d |
813ceef062b5
media: imon: fix a race condition in send_packet()
|
|
KASAN: slab-out-of-bounds Read in io_uring_show_fdinfo
io-uring
|
19 |
C |
done |
|
5 |
1319d |
1325d
|
22/29 |
1187d |
00927931cb63
io_uring: fix fdinfo sqe offsets calculation
|
|
KASAN: slab-out-of-bounds Read in thrustmaster_probe
usb
input
|
17 |
C |
unreliable |
|
92 |
1532d |
1556d
|
22/29 |
1187d |
fc3ef2e3297b
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
|
|
INFO: rcu detected stall in sys_setxattr (2)
fs
|
1 |
C |
done |
|
3 |
1499d |
1498d
|
22/29 |
1187d |
0014edaedfd8
fs: unset MNT_WRITE_HOLD on failure
|
|
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff
kvm-x86
|
8 |
C |
error |
|
7736 |
1279d |
1301d
|
22/29 |
1187d |
1cfaac2400c7
x86/kasan: Populate shadow for shared chunk of the CPU entry area
|
|
WARNING in skb_try_coalesce
net
|
-1 |
C |
error |
|
1521 |
1459d |
1913d
|
22/29 |
1187d |
763087dab975
net: add skb_set_end_offset() helper
|
|
INFO: task hung in misc_open (4)
usb
|
1 |
C |
error |
inconclusive |
144 |
1216d |
1928d
|
22/29 |
1187d |
8386c414e27c
PM: hibernate: defer device probing when resuming from hibernation
|
|
general protection fault in sock_reserve_memory
net
|
2 |
C |
done |
|
2 |
1563d |
1563d
|
22/29 |
1187d |
25206111512d
crypto: af_alg - get rid of alg_memory_allocated
|
|
general protection fault in __dentry_path (2)
fs
|
8 |
C |
error |
|
174 |
1492d |
1503d
|
22/29 |
1187d |
5c697c367a66
KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
|
|
WARNING in tcp_enter_loss (3)
net
|
-1 |
C |
inconclusive |
|
7 |
1304d |
1601d
|
22/29 |
1187d |
0c175da7b037
tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
|
|
divide error in dbNextAG
jfs
|
2 |
syz |
error |
|
2 |
1533d |
1529d
|
22/29 |
1187d |
2cc7cc01c15f
jfs: fix divide error in dbNextAG
|
|
general protection fault in tls_sk_proto_close (3)
net
|
2 |
C |
done |
|
276 |
1436d |
1835d
|
22/29 |
1187d |
69135c572d1f
net/tls: fix tls_sk_proto_close executed repeatedly
|
|
KASAN: use-after-free Read in nilfs_mdt_destroy
nilfs
|
19 |
C |
error |
|
20 |
1328d |
1343d
|
22/29 |
1187d |
2e488f13755f
fs: fix UAF/GPF bug in nilfs_mdt_destroy
|
|
KASAN: slab-out-of-bounds Read in hfs_cat_keycmp
hfs
|
17 |
C |
error |
done |
2 |
1191d |
1256d
|
22/29 |
1187d |
c53ed55cb275
hfs: Fix OOB Write in hfs_asc2mac
|
|
possible deadlock in l2tp_tunnel_register
net
|
4 |
C |
error |
|
9492 |
1187d |
1287d
|
22/29 |
1187d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
general protection fault in em_cmp_match
net
|
10 |
C |
|
|
4 |
1263d |
1259d
|
22/29 |
1187d |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
kernel BUG in __filemap_get_folio
mm
|
-1 |
C |
done |
|
814 |
1327d |
1497d
|
22/29 |
1187d |
63b1898fffcd
XArray: Disallow sibling entries of nodes
|
|
kernel BUG in commit_creds
lsm
io-uring
|
-1 |
C |
done |
|
5 |
1499d |
1503d
|
22/29 |
1187d |
701521403cfb
io_uring: abort file assignment prior to assigning creds
|
|
WARNING in mntput_no_expire (3)
fs
|
-1 |
C |
inconclusive |
|
29 |
1237d |
1653d
|
22/29 |
1187d |
a91714312eb1
percpu_ref_init(): clean ->percpu_count_ref on failure
|
|
WARNING in nilfs_segctor_do_construct
nilfs
|
-1 |
C |
|
|
5 |
1214d |
1337d
|
22/29 |
1187d |
723ac751208f
nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
|
|
KASAN: slab-out-of-bounds Read in vxlan_vnifilter_dump_dev
|
19 |
C |
done |
|
30 |
1517d |
1518d
|
22/29 |
1187d |
9d570741aec1
vxlan: do not feed vxlan_vnifilter_dump_dev with non vxlan devices
|
|
general protection fault in ip6_rcv_core
net
|
8 |
C |
done |
|
275 |
1278d |
1504d
|
22/29 |
1187d |
0339d25a2807
ipv6: fix NULL deref in ip6_rcv_core()
|
|
BUG: unable to handle kernel paging request in ovl_set_acl
overlayfs
|
8 |
C |
error |
|
4 |
1300d |
1301d
|
22/29 |
1187d |
5b52aebef895
ovl: call posix_acl_release() after error checking
|
|
KASAN: use-after-free Read in z_erofs_transform_plain
erofs
|
19 |
C |
done |
|
4 |
1192d |
1269d
|
22/29 |
1187d |
c505feba4c0d
erofs: validate the extent length for uncompressed pclusters
|
|
KMSAN: uninit-value in mpol_rebind_task (2)
mm
|
7 |
C |
|
|
7 |
1443d |
1604d
|
22/29 |
1187d |
018160ad314d
mm/mempolicy: fix uninit-value in mpol_rebind_policy()
|
|
KASAN: use-after-free Read in rxrpc_lookup_local
afs
net
|
22 |
C |
|
|
3997 |
1238d |
1267d
|
22/29 |
1187d |
8fbcc83334a7
rxrpc: Fix I/O thread startup getting skipped
eaa02390adb0
rxrpc: Fix NULL deref in rxrpc_unuse_local()
|
|
WARNING in kernfs_active
kernfs
|
-1 |
C |
error |
|
150 |
1201d |
1325d
|
22/29 |
1187d |
1edfe4ea16ca
kernfs: Fix spurious lockdep warning in kernfs_find_and_get_node_by_id()
|
|
kernel BUG in warn_crc32c_csum_combine
net
exfat
|
-1 |
C |
error |
|
17 |
1301d |
1311d
|
22/29 |
1187d |
7f57f8165cb6
af_key: Fix send_acquire race with pfkey_register
|
|
KASAN: use-after-free Read in dev_uevent
kernel
|
19 |
syz |
|
|
54 |
1195d |
2168d
|
22/29 |
1187d |
16b1941eac2b
usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
|
|
WARNING in u32_change
net
|
-1 |
C |
|
|
28 |
1242d |
1339d
|
22/29 |
1187d |
7cba18332e36
net: sched: cls_u32: Avoid memcpy() false-positive warning
|
|
general protection fault in metadata_dst_free
net
|
2 |
C |
|
|
348 |
1318d |
1357d
|
22/29 |
1187d |
c52add61c27e
macsec: don't free NULL metadata_dst
|
|
memory leak in watch_queue_set_size
kernel
|
3 |
C |
|
|
1 |
1530d |
1522d
|
22/29 |
1187d |
b490207017ba
watch_queue: Free the page array when watch_queue is dismantled
|
|
memory leak in virtual_ncidev_write
net
nfc
|
3 |
C |
|
|
1 |
1286d |
1286d
|
22/29 |
1187d |
53270fb0fd77
NFC: nci: fix memory leak in nci_rx_data_packet()
|
|
memory leak in __vsock_create
net
virt
io-uring
|
3 |
C |
|
|
1 |
1512d |
1508d
|
22/29 |
1187d |
7e97cfed9929
vsock: Fix memory leak in vsock_connect()
|
|
WARNING: locking bug in hugetlb_no_page
mm
|
4 |
C |
|
|
1 |
1291d |
1291d
|
22/29 |
1187d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
KASAN: slab-out-of-bounds Read in __fscache_acquire_volume
fs
mm
|
17 |
C |
done |
done |
1 |
1367d |
1366d
|
22/29 |
1187d |
9f0933ac026f
fscache: fix OOB Read in __fscache_acquire_volume
|
|
general protection fault in blk_mq_update_nr_hw_queues
block
|
2 |
C |
error |
|
16 |
1285d |
1297d
|
22/29 |
1187d |
90b0296ece4b
block: fix crash in 'blk_mq_elv_switch_none'
|
|
WARNING in skb_tunnel_check_pmtu
net
|
-1 |
C |
done |
|
8 |
1429d |
1435d
|
22/29 |
1187d |
853a76148802
tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
|
|
general protection fault in nilfs_palloc_commit_free_entry
nilfs
|
2 |
C |
error |
|
2 |
1303d |
1312d
|
22/29 |
1187d |
f0a0ccda18d6
nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
|
|
BUG: sleeping function called from invalid context in smc_pnet_apply_ib
rdma
|
5 |
C |
inconclusive |
|
92 |
1551d |
1559d
|
22/29 |
1187d |
7ff57e98fb78
net/smc: Use a mutex for locking "struct smc_pnettable"
|
|
KASAN: use-after-free Read in nf_hook_entries_grow
netfilter
|
19 |
C |
done |
done |
5 |
1578d |
1619d
|
22/29 |
1187d |
6069da443bf6
netfilter: nf_tables: unregister flowtable hooks on netns exit
|
|
BUG: unable to handle kernel NULL pointer dereference in lock_page
nilfs
|
10 |
C |
error |
|
4 |
1297d |
1306d
|
22/29 |
1187d |
512c5ca01a36
nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
|
|
KMSAN: kernel-infoleak in vcs_read (2)
serial
|
18 |
C |
|
|
1556 |
1210d |
2365d
|
22/29 |
1187d |
af77c56aa353
tty: vt: initialize unicode screen buffer
|
|
memory leak in ipv6_renew_options
net
|
3 |
C |
|
|
1 |
1413d |
1409d
|
22/29 |
1187d |
e27326009a3d
net: ping6: Fix memleak in ipv6_renew_options().
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit (2)
fbdev
|
21 |
C |
done |
|
701 |
1362d |
1650d
|
22/29 |
1187d |
566f9c9f8933
vt: Clear selection before changing the font
|
|
UBSAN: shift-out-of-bounds in ntfs_fill_super
ntfs3
|
-1 |
C |
done |
|
3643 |
1187d |
1497d
|
22/29 |
1187d |
a3b774342fa7
fs/ntfs3: validate BOOT sectors_per_clusters
|
|
possible deadlock in kcm_ioctl
net
|
4 |
C |
error |
|
20 |
1373d |
1375d
|
22/29 |
1187d |
8fc29ff3910f
kcm: fix strp_init() order and cleanup
|
|
KMSAN: uninit-value in can_send
can
|
7 |
C |
|
|
630 |
1282d |
1300d
|
22/29 |
1187d |
3eb3d283e857
can: j1939: j1939_send_one(): fix missing CAN header initialization
|
|
memory leak in __tcp_send_ack
net
|
3 |
C |
|
|
10 |
1325d |
1856d
|
22/29 |
1187d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
INFO: task hung in hub_port_init (2)
usb
|
1 |
C |
error |
|
486 |
1191d |
1653d
|
22/29 |
1187d |
26fbe9772b8c
USB: core: Fix hang in usb_kill_urb by adding memory barriers
|
|
KMSAN: uninit-value in __tipc_nl_bearer_enable
tipc
|
7 |
C |
|
|
1288 |
1188d |
2716d
|
22/29 |
1187d |
7f36f798f89b
tipc: check attribute length for bearer name
|
|
kernel BUG in __skb_gso_segment
net
|
-1 |
C |
done |
|
11 |
1455d |
1453d
|
22/29 |
1187d |
e9d3f80935b6
net/af_packet: make sure to pull mac header
|
|
inconsistent lock state in kmem_cache_alloc
io-uring
|
4 |
C |
|
|
4 |
1331d |
1338d
|
22/29 |
1187d |
b000145e9907
io_uring/rw: defer fsnotify calls to task context
|
|
WARNING in vmx_queue_exception (2)
kvm-x86
|
-1 |
C |
|
|
5 |
1487d |
1485d
|
22/29 |
1187d |
053d2290c030
KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
|
|
BUG: unable to handle kernel NULL pointer dereference in gsmld_receive_buf
serial
|
10 |
C |
error |
|
324 |
1361d |
1388d
|
22/29 |
1187d |
f16c6d2e58a4
tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
|
|
KASAN: null-ptr-deref Write in io_file_get_normal
io-uring
fs
|
12 |
C |
done |
|
107 |
1433d |
1517d
|
22/29 |
1187d |
d5361233e9ab
io_uring: drop the old style inflight file tracking
|
|
general protection fault in i2c_setup_smbus_alert
acpi
usb
|
2 |
C |
done |
|
20 |
1554d |
1572d
|
22/29 |
1187d |
8302532f47bb
i2c: smbus: Check for parent device before dereference
|
|
KASAN: use-after-free Write in sco_sock_timeout
bluetooth
|
22 |
C |
done |
|
272 |
1462d |
1734d
|
22/29 |
1187d |
7aa1e7d15f8a
Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
|
|
general protection fault in tcp_create_openreq_child
net
|
2 |
C |
unreliable |
|
83 |
1492d |
1495d
|
22/29 |
1187d |
ba5a4fdd63ae
tcp: make sure treq->af_specific is initialized
|
|
INFO: trying to register non-static key in rxe_cleanup_task
rdma
|
-1 |
syz |
|
|
299 |
1189d |
1464d
|
22/29 |
1187d |
fd5382c5805c
RDMA/rxe: Fix error unwind in rxe_create_qp()
|
|
KASAN: out-of-bounds Read in ntfs_set_ea
ntfs3
|
17 |
C |
error |
done |
4 |
1254d |
1256d
|
22/29 |
1187d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
UBSAN: array-index-out-of-bounds in nfnetlink_unbind
netfilter
|
17 |
C |
done |
|
6621 |
1454d |
1470d
|
22/29 |
1187d |
ffd219efd9ee
netfilter: nfnetlink: fix warn in nfnetlink_unbind
|
|
INFO: trying to register non-static key in nilfs_bmap_lookup_at_level
nilfs
|
-1 |
C |
error |
|
124 |
1297d |
1335d
|
22/29 |
1187d |
21a87d88c225
nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
|
|
general protection fault in ovl_dentry_upper
overlayfs
|
2 |
C |
error |
|
2 |
1284d |
1280d
|
22/29 |
1187d |
672e4268b286
ovl: fix use inode directly in rcu-walk mode
|
|
BUG: unable to handle kernel paging request in get_desc
kernel
|
8 |
syz |
error |
|
8 |
1288d |
1299d
|
22/29 |
1187d |
97650148a15e
x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
|
|
general protection fault in ath9k_hif_usb_rx_cb (2)
wireless
|
2 |
C |
error |
|
1678 |
1385d |
2139d
|
22/29 |
1187d |
0ac4827f78c7
ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
|
|
UBSAN: shift-out-of-bounds in dbAllocAG
jfs
|
-1 |
C |
error |
|
10 |
1304d |
1336d
|
22/29 |
1187d |
898f70669568
fs: jfs: fix shift-out-of-bounds in dbAllocAG
|
|
KASAN: vmalloc-out-of-bounds Write in ringbuf_map_alloc
bpf
|
21 |
C |
done |
|
541 |
1573d |
1576d
|
22/29 |
1187d |
b293dcc473d2
bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
|
|
BUG: sleeping function called from invalid context in break_ksm
mm
|
5 |
C |
|
|
9 |
1314d |
1314d
|
22/29 |
1187d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
|
KMSAN: uninit-value in ipvlan_queue_xmit
net
|
7 |
C |
|
|
2 |
1366d |
1949d
|
22/29 |
1187d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
possible deadlock in btrfs_commit_transaction
btrfs
|
4 |
C |
error |
done |
6 |
1278d |
1289d
|
22/29 |
1187d |
b740d8061669
btrfs: free btrfs_path before copying root refs to userspace
|
|
UBSAN: shift-out-of-bounds in __access_remote_vm
ntfs3
|
-1 |
C |
done |
|
3 |
1376d |
1373d
|
22/29 |
1187d |
caad9dd8792a
fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
|
|
possible deadlock in nci_set_local_general_bytes
net
nfc
|
4 |
C |
|
|
32 |
1238d |
1289d
|
22/29 |
1187d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
KASAN: slab-out-of-bounds Read in run_unpack
ntfs3
|
19 |
C |
|
|
97 |
1235d |
1342d
|
22/29 |
1187d |
887bfc546097
fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
|
|
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek
sound
usb
|
19 |
syz |
error |
|
48 |
1389d |
1500d
|
22/29 |
1187d |
0665886ad139
ALSA: usb-audio: Clear MIDI port active flag after draining
|
|
BUG: MAX_LOCK_DEPTH too low! (3)
smc
|
-1 |
C |
done |
|
18 |
1559d |
1568d
|
22/29 |
1187d |
1de9770d121e
net/smc: Avoid overwriting the copies of clcsock callback functions
|
|
UBSAN: shift-out-of-bounds in hid_report_raw_event (2)
input
usb
|
-1 |
C |
error |
|
1 |
1292d |
1288d
|
22/29 |
1187d |
ec61b4191858
HID: core: fix shift-out-of-bounds in hid_report_raw_event
|
|
KASAN: use-after-free Read in port100_send_complete
nfc
usb
|
19 |
C |
|
|
1 |
1544d |
1540d
|
22/29 |
1187d |
f80cfe2f2658
NFC: port100: fix use-after-free in port100_send_complete
|
|
KASAN: use-after-free Read in usb_udc_uevent
usb
|
19 |
syz |
error |
|
30 |
1398d |
2184d
|
22/29 |
1187d |
2191c00855b0
USB: gadget: Fix use-after-free Read in usb_udc_uevent()
|
|
general protection fault in skb_clone (5)
net
|
10 |
C |
done |
|
7 |
1303d |
1321d
|
22/29 |
1187d |
d8b57135fd9f
net: hsr: avoid possible NULL deref in skb_clone()
|
|
KASAN: slab-out-of-bounds Write in dbgfs_rm_context_write
damon
|
21 |
C |
error |
|
6 |
1299d |
1304d
|
22/29 |
1187d |
1de09a7281ed
mm/damon/dbgfs: check if rm_contexts input is for a real context
|
|
KMSAN: kernel-infoleak in _copy_to_iter (7)
net
|
21 |
C |
|
|
138977 |
1187d |
1540d
|
22/29 |
1187d |
633593a80898
sctp: fix kernel-infoleak for SCTP sockets
|
|
KASAN: use-after-free Read in bio_poll
block
|
19 |
C |
done |
|
6 |
1478d |
1478d
|
22/29 |
1187d |
9650b453a3d4
block: ignore RWF_HIPRI hint for sync dio
|
|
possible deadlock in virtual_nci_close
nfc
net
|
4 |
C |
done |
|
939 |
1188d |
1290d
|
22/29 |
1187d |
b2e44aac91b2
NFC: nci: Allow to create multiple virtual nci devices
|
|
KASAN: slab-out-of-bounds Read in mi_find_attr
ntfs3
|
17 |
C |
done |
done |
1 |
1259d |
1255d
|
22/29 |
1187d |
4f1dc7d9756e
fs/ntfs3: Validate attribute name offset
|
|
KASAN: use-after-free Read in do_garbage_collect
f2fs
|
19 |
C |
inconclusive |
|
2 |
1291d |
1290d
|
22/29 |
1187d |
d3b7b4afd6b2
f2fs: fix to do sanity check on i_extra_isize in is_alive()
|
|
BUG: sleeping function called from invalid context in smc_pnet_add
net
|
5 |
C |
done |
|
45 |
1569d |
1570d
|
22/29 |
1187d |
94fdd7c02a56
net/smc: use GFP_ATOMIC allocation in smc_pnet_add_eth()
|
|
KASAN: slab-out-of-bounds Write in bpf_prog_test_run_xdp
net
bpf
|
21 |
C |
done |
|
18 |
1563d |
1581d
|
22/29 |
1187d |
a6763080856f
bpf: test_run: Fix OOB access in bpf_prog_test_run_xdp
|
|
KASAN: slab-out-of-bounds Read in smc_fback_error_report
smc
|
19 |
C |
error |
|
72 |
1490d |
1566d
|
22/29 |
1187d |
0558226cebee
net/smc: Fix slab-out-of-bounds issue in fallback
|
|
memory leak in iovec_from_user
fs
io-uring
|
3 |
C |
|
|
1 |
1505d |
1501d
|
22/29 |
1187d |
323b190ba2de
io_uring: free iovec if file assignment fails
|
|
BUG: unable to handle kernel paging request in mi_enum_attr
ntfs3
|
19 |
C |
error |
done |
18 |
1238d |
1364d
|
22/29 |
1187d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
WARNING: refcount bug in nldev_newlink
rdma
|
13 |
C |
|
|
33 |
1261d |
1266d
|
22/29 |
1187d |
e42f9c2e6aad
RDMA: Add missed netdev_put() for the netdevice_tracker
|
|
KASAN: slab-out-of-bounds Read in __hfs_brec_find
hfs
|
17 |
C |
|
|
5 |
1262d |
1276d
|
22/29 |
1187d |
8d824e69d9f3
hfs: fix OOB Read in __hfs_brec_find
|
|
WARNING in bpf_check (3)
|
-1 |
C |
done |
done |
1736 |
1333d |
2266d
|
22/29 |
1187d |
34dd3bad1a6f
bpf: Relax the requirement to use preallocated hash maps in tracing progs.
|
|
memory leak in usb_set_configuration (3)
usb
|
3 |
C |
|
|
2 |
1426d |
1452d
|
22/29 |
1187d |
945a9a8e448b
media: pvrusb2: fix memory leak in pvr_probe
|
|
KASAN: use-after-free Read in ar5523_cmd_tx_cb
usb
wireless
|
19 |
C |
inconclusive |
|
372 |
1283d |
1338d
|
22/29 |
1187d |
b6702a942a06
wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
|
|
possible deadlock in strp_work
net
|
4 |
C |
error |
|
4 |
1373d |
1375d
|
22/29 |
1187d |
8fc29ff3910f
kcm: fix strp_init() order and cleanup
|
|
WARNING in dlfb_submit_urb/usb_submit_urb
usb
fbdev
|
-1 |
C |
done |
|
481 |
1260d |
2521d
|
22/29 |
1187d |
aaf7dbe07385
video: fbdev: udlfb: properly check endpoint type
|
|
WARNING in devl_port_unregister
net
|
-1 |
C |
|
|
1690 |
1191d |
1293d
|
22/29 |
1187d |
1fb22ed67195
devlink: Fix warning when unregistering a port
|
|
WARNING: suspicious RCU usage in corrupted (2)
net
|
4 |
C |
unreliable |
|
7 |
1432d |
1443d
|
22/29 |
1187d |
4e43e64d0f13
ipv6: fix lockdep splat in in6_dump_addrs()
|
|
kernel BUG in vhost_get_vq_desc
virt
kvm
net
|
-1 |
C |
inconclusive |
|
19 |
1551d |
1564d
|
22/29 |
1187d |
a58da53ffd70
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
KASAN: use-after-free Read in snd_rawmidi_transmit
sound
usb
|
19 |
C |
done |
done |
7 |
1456d |
1490d
|
22/29 |
1187d |
0125de38122f
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
|
|
WARNING in skb_warn_bad_offload (3)
net
|
-1 |
C |
done |
|
115 |
1188d |
1325d
|
22/29 |
1187d |
87445f369cca
ipv6: ping: fix wrong checksum for large frames
|
|
WARNING in arp_ioctl
net
|
-1 |
C |
error |
done |
17 |
1260d |
1329d
|
22/29 |
1187d |
b5f0de6df6dc
net: dev: Convert sa_data to flexible array in struct sockaddr
|
|
general protection fault in __pm_runtime_resume (2)
pm
|
2 |
C |
error |
|
7 |
1526d |
1536d
|
22/29 |
1187d |
32cb08e95869
Bluetooth: hci_uart: add missing NULL check in h5_enqueue
|
|
KMSAN: kernel-usb-infoleak in hif_usb_send
wireless
|
9 |
C |
|
|
18149 |
1495d |
2114d
|
22/29 |
1187d |
d1e0df1c57bd
ath9k_htc: fix uninit value bugs
|
|
WARNING in ipvlan_queue_xmit
net
|
-1 |
C |
inconclusive |
|
4 |
1366d |
1366d
|
22/29 |
1187d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
KASAN: use-after-free Read in notifier_call_chain
kernel
|
19 |
C |
error |
|
157 |
1280d |
1285d
|
22/29 |
1187d |
5daadc86f27e
net: tun: Fix use-after-free in tun_detach()
|
|
WARNING in wnd_init
ntfs3
|
-1 |
C |
done |
|
23 |
1254d |
1336d
|
22/29 |
1187d |
0d0f659bf713
fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()
019d22eb0eb7
fs/ntfs3: Validate attribute data and valid sizes
|
|
KASAN: use-after-free Read in si470x_int_in_callback (2)
usb
media
|
19 |
C |
error |
|
7303 |
1255d |
2412d
|
22/29 |
1187d |
7d21e0b1b41b
media: si470x: Fix use-after-free in si470x_int_in_callback()
|
|
BUG: unable to handle kernel NULL pointer dereference in f2fs_stop_discard_thread
f2fs
|
12 |
C |
done |
|
23 |
1256d |
1322d
|
22/29 |
1187d |
91586ce0d39a
f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
|
|
WARNING in __perf_event_overflow
perf
|
-1 |
C |
done |
|
9 |
1277d |
1302d
|
22/29 |
1187d |
bb88f9695460
perf: Improve missing SIGTRAP checking
|
|
WARNING: still has locks held in tls_rx_reader_lock
net
|
4 |
C |
done |
|
4 |
1405d |
1406d
|
22/29 |
1187d |
dde06aaa89b7
tls: rx: release the sock lock on locking timeout
|
|
memory leak in gs_usb_probe
can
usb
|
3 |
C |
|
|
1 |
1523d |
1519d
|
22/29 |
1187d |
50d34a0d151d
can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration
|
|
memory leak in airspy_probe
media
usb
|
3 |
C |
|
|
1 |
1389d |
1385d
|
22/29 |
1187d |
23bc5eb55f8c
media: airspy: fix memory leak in airspy probe
|
|
general protection fault in hugetlbfs_parse_param
mm
|
2 |
C |
|
|
5 |
1303d |
1315d
|
22/29 |
1187d |
26215b7ee923
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
|
|
possible deadlock in __snd_pcm_lib_xfer
sound
|
4 |
C |
unreliable |
|
3 |
1520d |
1519d
|
22/29 |
1187d |
bc55cfd5718c
ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
|
|
WARNING: suspicious RCU usage in in6_dump_addrs
net
|
4 |
C |
unreliable |
|
613 |
1400d |
1443d
|
22/29 |
1187d |
4e43e64d0f13
ipv6: fix lockdep splat in in6_dump_addrs()
|
|
inconsistent lock state in smc_fback_state_change
smc
|
4 |
C |
error |
|
7 |
1279d |
1285d
|
22/29 |
1187d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
memory leak in blk_iolatency_init (2)
block
cgroups
|
3 |
C |
|
|
131 |
1329d |
1536d
|
22/29 |
1187d |
daaca3522a8e
block: release rq qos structures for queue without disk
|
|
KMSAN: uninit-value in idmouse_open
usb
|
7 |
C |
|
|
5 |
1350d |
1346d
|
22/29 |
1187d |
bce2b0539933
usb: idmouse: fix an uninit-value in idmouse_open
|
|
KASAN: use-after-free Read in tcp_retransmit_timer (5)
net
|
19 |
C |
unreliable |
|
16000 |
1271d |
2284d
|
22/29 |
1187d |
3a58f13a881e
net: rds: acquire refcount on TCP sockets
|
|
WARNING in inet_csk_destroy_sock (2)
io-uring
net
|
-1 |
C |
done |
|
8 |
1236d |
1323d
|
22/29 |
1187d |
e0833d1fedb0
dccp/tcp: Fixup bhash2 bucket when connect() fails.
|
|
WARNING in ovl_fh_to_dentry
overlayfs
|
-1 |
C |
|
|
169 |
1262d |
1341d
|
22/29 |
1187d |
cf8aa9bf97ca
ovl: Use "buf" flexible array for memcpy() destination
|
|
WARNING in notify_change (2)
fuse
|
-1 |
C |
unreliable |
|
2 |
1281d |
1282d
|
22/29 |
1187d |
44361e8cf9dd
fuse: lock inode unconditionally in fuse_fallocate()
|
|
KASAN: null-ptr-deref Read in ida_free (2)
usb
|
11 |
C |
done |
|
3 |
1432d |
1432d
|
22/29 |
1187d |
90bc2af24638
USB: gadget: Fix double-free bug in raw_gadget driver
|
|
KASAN: use-after-free Read in nf_confirm
netfilter
|
19 |
C |
done |
|
605 |
1454d |
1470d
|
22/29 |
1187d |
56b14ecec97f
netfilter: conntrack: re-fetch conntrack after insertion
|
|
WARNING in __vunmap
net
|
-1 |
C |
error |
error |
154 |
1337d |
2657d
|
22/29 |
1187d |
8a04d2fc700f
xfrm: Update ipcomp_scratches with NULL when freed
|
|
memory leak in xas_nomem
mm
|
3 |
C |
|
|
1 |
1464d |
1460d
|
22/29 |
1187d |
69a37a8ba1b4
mm/huge_memory: Fix xarray node memory leak
|
|
WARNING in io_req_complete_failed
io-uring
|
-1 |
C |
error |
|
2 |
1279d |
1275d
|
22/29 |
1187d |
c06c6c5d2767
io_uring: always lock in io_apoll_task_func
|
|
memory leak in napi_get_frags
net
|
3 |
C |
|
|
11 |
1937d |
1958d
|
22/29 |
1187d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
memory leak in netlink_policy_dump_add_policy
net
|
3 |
C |
|
|
1 |
1387d |
1383d
|
22/29 |
1187d |
249801360db3
net: genl: fix error path memory leak in policy dumping
|
|
KASAN: use-after-free Read in nf_tables_trans_destroy_work
netfilter
|
19 |
C |
done |
|
6 |
1317d |
1324d
|
22/29 |
1187d |
d4bc8271db21
netfilter: nf_tables: netlink notifier might race to release objects
26b5934ff419
netfilter: nf_tables: release flow rule object from commit path
|
|
KASAN: use-after-free Read in jbd2_journal_wait_updates
ext4
|
19 |
C |
error |
|
143 |
1524d |
1568d
|
22/29 |
1187d |
cc16eecae687
jbd2: fix use-after-free of transaction_t race
|
|
general protection fault in llc_ui_connect
net
|
2 |
C |
done |
|
17 |
1520d |
1524d
|
22/29 |
1187d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
memory leak in ndisc_send_rs
net
|
3 |
C |
|
|
2 |
1684d |
1731d
|
22/29 |
1187d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
WARNING in find_vma
mm
|
-1 |
C |
done |
|
2616 |
1364d |
1388d
|
22/29 |
1187d |
d6f35446d076
binder_alloc: Add missing mmap_lock calls when using the VMA
44e602b4e52f
binder_alloc: add missing mmap_lock calls when using the VMA
|
|
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable
kvm-x86
|
8 |
C |
error |
|
28 |
1376d |
1380d
|
22/29 |
1187d |
4ba4f4194274
KVM: Properly unwind VM creation if creating debugfs fails
|
|
WARNING in __brelse
udf
|
-1 |
C |
inconclusive |
|
22 |
1194d |
1336d
|
22/29 |
1187d |
c791730f2554
udf: Avoid double brelse() in udf_rename()
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
C |
done |
|
4 |
1395d |
1448d
|
22/29 |
1187d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
WARNING in erofs_iget
erofs
mm
|
-1 |
C |
|
|
6 |
1309d |
1359d
|
22/29 |
1187d |
1dd73601a1cb
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
|
|
INFO: task hung in hci_dev_close_sync
bluetooth
|
1 |
C |
unreliable |
|
2366 |
1329d |
1484d
|
22/29 |
1187d |
e36bea6e78ab
Bluetooth: core: Fix deadlock on hci_power_on_sync.
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl (2)
kernel
|
9 |
C |
|
|
2 |
1337d |
1336d
|
22/29 |
1187d |
e5b0d06d9b10
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
|
|
general protection fault in llc_ui_sendmsg
net
|
2 |
C |
done |
|
365 |
1520d |
1525d
|
22/29 |
1187d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
WARNING in nf_tables_exit_net
netfilter
|
-1 |
C |
error |
|
3 |
1306d |
1305d
|
22/29 |
1187d |
03c1f1ef1584
netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
|
|
possible deadlock in console_lock_spinning_enable (2)
serial
|
4 |
C |
inconclusive |
done |
117 |
1468d |
1654d
|
22/29 |
1187d |
09c5ba0aa2fc
printk: add kthread console printers
|
|
WARNING in scsi_alloc_sgtables
scsi
fuse
|
-1 |
C |
|
|
93 |
1428d |
1773d
|
22/29 |
1187d |
d9a434fa0c12
scsi: core: Fix warning in scsi_alloc_sgtables()
|
|
UBSAN: shift-out-of-bounds in nilfs_load_super_block
nilfs
|
-1 |
C |
error |
|
3 |
1299d |
1309d
|
22/29 |
1187d |
610a2a3d7d8b
nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
|
|
INFO: task hung in blk_freeze_queue (3)
arm
|
1 |
C |
|
|
8 |
1285d |
1364d
|
22/29 |
1187d |
1de7c3cf48fc
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
|
|
UBSAN: shift-out-of-bounds in init_sb (3)
gfs2
|
-1 |
C |
|
|
40 |
1317d |
1382d
|
22/29 |
1187d |
670f8ce56dd0
gfs2: Check sb_bsize_shift after reading superblock
|
|
memory leak in keyctl_watch_key
keyrings
lsm
|
3 |
C |
|
|
1 |
1532d |
1528d
|
22/29 |
1187d |
3d8dcf278b1e
watch_queue: Actually free the watch
|
|
memory leak in fbcon_set_font (2)
fbdev
|
3 |
C |
|
|
1 |
1269d |
1269d
|
22/29 |
1187d |
3c3bfb8586f8
fbdev: fbcon: release buffer when fbcon_do_set_font() failed
|
|
INFO: task hung in scsi_remove_host
scsi
usb
|
1 |
C |
done |
|
328 |
1339d |
1374d
|
22/29 |
1187d |
2b36209ca818
scsi: core: Revert "Call blk_mq_free_tag_set() earlier"
d94b2d00f7bf
scsi: core: Revert "Make sure that hosts outlive targets"
f782201ebc2b
scsi: core: Revert "Make sure that targets outlive devices"
70e8d057bef5
scsi: core: Revert "Simplify LLD module reference counting"
|
|
KASAN: slab-out-of-bounds Read in packet_recvmsg
net
|
21 |
C |
inconclusive |
|
12 |
1536d |
1937d
|
22/29 |
1187d |
c700525fcc06
net/packet: fix slab-out-of-bounds access in packet_recvmsg()
|
|
WARNING in binder_alloc_vma_close
kernel
|
-1 |
C |
done |
|
18 |
1340d |
1430d
|
22/29 |
1187d |
b0cab80ecd54
android: binder: fix lockdep check on clearing vma
|
|
general protection fault in ext4_fill_super
exfat
ext4
|
12 |
C |
done |
|
5 |
1375d |
1591d
|
22/29 |
1187d |
7c268d4ce2d3
ext4: fix potential NULL pointer dereference in ext4_fill_super()
|
|
INFO: task hung in vhost_work_dev_flush
virt
kvm
net
|
1 |
C |
error |
|
2 |
1567d |
1558d
|
22/29 |
1187d |
e2ae38cf3d91
vhost: fix hung thread due to erroneous iotlb entries
|
|
stack segment fault in skb_clone
net
|
2 |
C |
unreliable |
inconclusive |
3 |
1442d |
1627d
|
22/29 |
1187d |
d8b57135fd9f
net: hsr: avoid possible NULL deref in skb_clone()
|
|
WARNING: suspicious RCU usage in bond_ethtool_get_ts_info
net
|
4 |
C |
done |
|
6 |
1473d |
1475d
|
22/29 |
1187d |
9b80ccda233f
bonding: fix missed rcu protection
|
|
WARNING in nsim_map_alloc_elem
mm
|
-1 |
C |
error |
|
7 |
1382d |
1403d
|
22/29 |
1187d |
d0b80a9edb1a
netdevsim: Avoid allocation warnings triggered from user space
|
|
KASAN: use-after-free Read in nilfs_segctor_sync
nilfs
|
19 |
C |
error |
|
3 |
1293d |
1303d
|
22/29 |
1187d |
8cccf05fe857
nilfs2: fix use-after-free bug of ns_writer on remount
|
|
KASAN: slab-out-of-bounds Write in watch_queue_set_filter
kernel
|
21 |
C |
inconclusive |
|
7 |
1528d |
1531d
|
22/29 |
1187d |
c993ee0f9f81
watch_queue: Fix filter limit check
|
|
UBSAN: array-index-out-of-bounds in pvr2_i2c_core_init
pvrusb2
usb
|
15 |
C |
inconclusive |
|
4 |
1472d |
1503d
|
22/29 |
1187d |
471bec68457a
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
|
|
WARNING in ext4_expand_extra_isize_ea
ext4
|
-1 |
C |
error |
done |
3 |
1261d |
1273d
|
22/29 |
1187d |
cc12a6f25e07
ext4: allocate extended attribute value in vmalloc area
|
|
general protection fault in do_check_common
bpf
|
2 |
C |
done |
|
5 |
1420d |
1424d
|
22/29 |
1187d |
d1a6edecc1fd
bpf: Check attach_func_proto more carefully in check_return_code
|
|
general protection fault in rlb_req_update_slave_clients
net
|
2 |
C |
inconclusive |
|
3 |
1451d |
1451d
|
22/29 |
1187d |
ab84db251c04
net: bonding: fix possible NULL deref in rlb code
|
|
WARNING in usbtmc_ioctl/usb_submit_urb
usb
|
-1 |
C |
inconclusive |
|
8 |
1200d |
1545d
|
22/29 |
1187d |
e9b667a82cdc
usb: usbtmc: Fix bug in pipe direction for control transfers
|
|
BUG: unable to handle kernel paging request in evict
exfat
|
19 |
C |
error |
done |
23 |
1295d |
1340d
|
22/29 |
1187d |
4e3c51f4e805
fs: do not update freeing inode i_io_list
|
|
BUG: unable to handle kernel paging request in truncate_inode_partial_folio
fs
mm
|
8 |
C |
error |
|
4 |
1389d |
1428d
|
22/29 |
1187d |
84ac013046cc
secretmem: fix unhandled fault in truncate
|
|
WARNING in hugetlb_wp
mm
|
-1 |
C |
error |
|
3 |
1300d |
1306d
|
22/29 |
1187d |
f347454d0341
mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings
|
|
KASAN: invalid-free in tcp_disconnect
net
|
24 |
C |
unreliable |
|
74 |
1316d |
1330d
|
22/29 |
1187d |
72e560cb8c6f
tcp: cdg: allow tcp_cdg_release() to be called multiple times
|
|
WARNING in wireless_send_event
wireless
|
-1 |
C |
|
|
210 |
1304d |
1341d
|
22/29 |
1187d |
e3e6e1d16a4c
wifi: wext: use flex array destination for memcpy()
|
|
WARNING in register_shrinker_prepared
f2fs
mm
|
-1 |
C |
error |
|
64 |
1449d |
1450d
|
22/29 |
1187d |
5035ebc644ae
mm: shrinkers: introduce debugfs interface for memory shrinkers
|
|
WARNING in __split_huge_page_tail
arch
mm
io-uring
|
-1 |
C |
error |
|
155 |
1236d |
1309d
|
22/29 |
1187d |
5aae9265ee1a
mm: prep_compound_tail() clear page->private
|
|
WARNING in __folio_mark_dirty
gfs2
|
-1 |
C |
error |
|
1791 |
1187d |
1671d
|
22/29 |
1187d |
e897be17a441
nilfs2: fix lockdep warnings in page operations for btree nodes
|
|
BUG: sleeping function called from invalid context in static_key_slow_inc
|
5 |
C |
done |
|
82 |
1274d |
1287d
|
22/29 |
1187d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb (2)
|
19 |
C |
done |
|
48810 |
1384d |
2017d
|
22/29 |
1187d |
0ac4827f78c7
ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
|
|
kernel BUG in btrfs_drop_extents
btrfs
|
-1 |
C |
|
|
4 |
1263d |
1278d
|
22/29 |
1187d |
162d053e15fe
btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
|
|
BUG: sleeping function called from invalid context in binder_ioctl
kernel
|
5 |
C |
done |
|
30 |
1465d |
1471d
|
22/29 |
1187d |
aed86f8add0e
binder: fix atomic sleep when get extended error
|
|
KASAN: use-after-free Read in madvise_update_vma
|
19 |
C |
done |
|
38 |
1552d |
1569d
|
22/29 |
1187d |
942341dcc574
mm: fix use-after-free when anon vma name is used after vma is freed
|
|
WARNING in mcba_usb_probe/usb_submit_urb
usb
can
|
-1 |
C |
error |
|
537 |
1517d |
2512d
|
22/29 |
1187d |
136bed0bfd3b
can: mcba_usb: properly check endpoint type
|
|
KASAN: use-after-free Read in register_shrinker_prepared (2)
mm
|
19 |
C |
done |
|
1145 |
1300d |
1338d
|
22/29 |
1187d |
bd86c69dae65
NFSD: unregister shrinker when nfsd_init_net() fails
|
|
possible deadlock in rds_tcp_reset_callbacks
rds
|
4 |
C |
error |
|
1458 |
1296d |
1375d
|
22/29 |
1187d |
a91b750fd662
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
|
|
BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission
lsm
mm
|
10 |
C |
|
|
1 |
1294d |
1290d
|
22/29 |
1187d |
578b565b240a
9p/fd: Fix write overflow in p9_read_work
|
|
memory leak in nft_chain_parse_hook
netfilter
|
3 |
C |
|
|
1 |
1369d |
1366d
|
22/29 |
1187d |
77972a36ecc4
netfilter: nf_tables: clean up hook list when offload flags check fails
|
|
memory leak in sctp_sched_prio_set
sctp
|
3 |
C |
|
|
2 |
1280d |
1286d
|
22/29 |
1187d |
9ed7bfc79542
sctp: fix memory leak in sctp_stream_outq_migrate()
|
|
BUG: sleeping function called from invalid context in sk_psock_stop
|
5 |
C |
done |
|
232 |
1388d |
1446d
|
22/29 |
1187d |
697fb80a5364
bpf: Fix sockmap calling sleepable function in teardown path
|
|
general protection fault in btrfs_stop_all_workers
btrfs
|
2 |
C |
done |
|
554 |
1485d |
1490d
|
22/29 |
1187d |
385de0ef387d
btrfs: use a normal workqueue for rmw_workers
|
|
BUG: corrupted list in hci_conn_add_sysfs
bluetooth
|
19 |
C |
error |
done |
9 |
1342d |
1341d
|
22/29 |
1187d |
448a496f7606
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
|
|
kernel BUG in __set_page_owner_handle
gfs2
|
-1 |
C |
|
|
37 |
1317d |
1480d
|
22/29 |
1187d |
cd8c1fd8cdd1
mm/page_owner: use strscpy() instead of strlcpy()
|
|
KASAN: slab-out-of-bounds Write in hfs_asc2mac
hfs
|
21 |
C |
error |
|
161 |
1261d |
1279d
|
22/29 |
1187d |
c53ed55cb275
hfs: Fix OOB Write in hfs_asc2mac
|
|
WARNING in __dma_map_sg_attrs
|
-1 |
C |
inconclusive |
|
65 |
1387d |
1637d
|
22/29 |
1187d |
9e9fa6a9198b
udmabuf: Set the DMA mask for the udmabuf device (v2)
|
|
WARNING: ODEBUG bug in __cancel_work
bluetooth
|
-1 |
C |
inconclusive |
|
1 |
1381d |
1377d
|
22/29 |
1187d |
2d2cb3066f2c
Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
|
|
INFO: trying to register non-static key in gsmld_write
serial
|
-1 |
C |
error |
|
803 |
1359d |
1388d
|
22/29 |
1187d |
4bb1a53be85f
tty: n_gsm: initialize more members at gsm_alloc_mux()
|
|
KMSAN: uninit-value in ath9k_htc_rx_msg
wireless
|
7 |
C |
|
|
17731 |
1198d |
2116d
|
22/29 |
1187d |
b383e8abed41
wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
|
|
memory leak in vlan_dev_set_egress_priority (2)
net
|
3 |
C |
|
|
1 |
1419d |
1419d
|
22/29 |
1187d |
72a0b329114b
vlan: fix memory leak in vlan_newlink()
|
|
WARNING in ieee80211_link_info_change_notify
wireless
|
-1 |
C |
inconclusive |
|
1376 |
1187d |
1430d
|
22/29 |
1187d |
591e73ee3f73
wifi: mac80211: properly skip link info driver update
|
|
general protection fault in ieee80211_subif_start_xmit (2)
wireless
|
2 |
C |
error |
|
5 |
1304d |
1311d
|
22/29 |
1187d |
780854186946
wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit()
|
|
kernel BUG in ext4_mb_use_inode_pa
ext4
|
-1 |
C |
error |
done |
2 |
1331d |
1331d
|
22/29 |
1187d |
4bb26f2885ac
ext4: avoid crash when inline data creation follows DIO write
|
|
INFO: task hung in __writeback_inodes_sb_nr (5)
ext4
|
1 |
C |
done |
|
48 |
1194d |
1565d
|
22/29 |
1187d |
7d9b1b578d67
ip6mr: fix use-after-free in ip6mr_sk_done()
|
|
memory leak in z_erofs_do_read_page
erofs
|
3 |
C |
|
|
1 |
1273d |
1272d
|
22/29 |
1187d |
c42c0ffe8117
erofs: Fix pcluster memleak when its block address is zero
|
|
KASAN: use-after-free Write in io_sendrecv_fail
io-uring
|
22 |
C |
|
|
75 |
1318d |
1341d
|
22/29 |
1187d |
a75155faef4e
io_uring/net: fix UAF in io_sendrecv_fail()
|
|
general protection fault in reweight_entity
kernel
|
2 |
C |
error |
done |
10 |
1563d |
1617d
|
22/29 |
1187d |
13765de8148f
sched/fair: Fix fault in reweight_entity
|
|
KASAN: use-after-free Read in __nf_register_net_hook
netfilter
|
19 |
C |
error |
|
5 |
1549d |
1550d
|
22/29 |
1187d |
56763f12b0f0
netfilter: fix use-after-free in __nf_register_net_hook()
|
|
WARNING in bpf_test_finish
bpf
net
|
-1 |
C |
done |
|
3 |
1549d |
1549d
|
22/29 |
1187d |
530e214c5b5a
bpf, test_run: Fix overflow in XDP frags bpf_test_finish
|
|
general protection fault in gfs2_dump_glock
gfs2
|
17 |
C |
|
|
25 |
1189d |
1591d
|
22/29 |
1187d |
428f651cb80b
gfs2: assign rgrp glock before compute_bitstructs
|
|
BUG: corrupted list in p9_fd_cancel (2)
v9fs
fuse
|
8 |
C |
error |
|
8 |
1286d |
1312d
|
22/29 |
1187d |
11c10956515b
9p/fd: fix issue of list_del corruption in p9_fd_cancel()
|
|
KASAN: use-after-free Read in ntfs_attr_find
ntfs3
|
19 |
C |
done |
|
74 |
1204d |
1370d
|
22/29 |
1187d |
36a4d82dddbb
ntfs: fix out-of-bounds read in ntfs_attr_find()
|
|
KMSAN: uninit-value in ___bpf_prog_run (3)
bpf
|
7 |
C |
|
|
5 |
1502d |
1504d
|
22/29 |
1187d |
99c07327ae11
netlink: reset network and mac headers in netlink_dump()
|
|
kernel BUG in __page_mapcount
kernel
|
-1 |
C |
error |
|
45 |
1587d |
1822d
|
22/29 |
1187d |
24d7275ce279
fs/proc: task_mmu.c: don't read mapcount for migration entry
|
|
general protection fault in check_helper_call
bpf
|
2 |
C |
done |
|
4 |
1407d |
1411d
|
22/29 |
1187d |
d1a6edecc1fd
bpf: Check attach_func_proto more carefully in check_return_code
|
|
memory leak in do_replace
bridge
netfilter
|
3 |
C |
|
|
1 |
1349d |
1345d
|
22/29 |
1187d |
62ce44c4fff9
netfilter: ebtables: fix memory leak when blob is malformed
|
|
KASAN: null-ptr-deref Write in kcm_tx_work (3)
net
|
12 |
C |
inconclusive |
inconclusive |
7 |
1334d |
1435d
|
22/29 |
1187d |
ec7eede369fe
kcm: avoid potential race in kcm_tx_work
|
|
KASAN: use-after-free Read in nilfs_segctor_confirm
nilfs
|
19 |
C |
inconclusive |
|
19 |
1315d |
1333d
|
22/29 |
1187d |
d325dc6eb763
nilfs2: fix use-after-free bug of struct nilfs_root
|
|
KASAN: invalid-free in free_prealloced_shrinker
mm
|
24 |
C |
done |
|
3 |
1407d |
1407d
|
22/29 |
1187d |
14773bfa70e6
mm: shrinkers: fix double kfree on shrinker name
|
|
WARNING: refcount bug in sk_psock_get (2)
net
|
13 |
C |
done |
|
4 |
1412d |
1453d
|
22/29 |
1187d |
2a0133723f9e
net: fix refcount bug in sk_psock_get (2)
|
|
WARNING in free_loaded_vmcs (3)
kvm-x86
|
-1 |
C |
inconclusive |
|
2 |
1584d |
1583d
|
22/29 |
1187d |
f7e570780efc
KVM: x86: Forcibly leave nested virt when SMM state is toggled
|
|
general protection fault in submit_bio_checks
block
btrfs
|
2 |
C |
done |
|
1258 |
1554d |
1577d
|
22/29 |
1187d |
78e3437450be
block: call bio_associate_blkg from bio_reset
|
|
WARNING in nci_send_cmd
net
nfc
|
-1 |
C |
|
|
13 |
1274d |
1288d
|
22/29 |
1187d |
0ad6bded175e
nfc/nci: fix race with opening and closing
|
|
kernel BUG in binder_alloc_deferred_release
kernel
|
-1 |
C |
done |
|
4 |
1435d |
1437d
|
22/29 |
1187d |
a43cfc87caaf
android: binder: stop saving a pointer to the VMA
|
|
WARNING in nfnetlink_unbind
netfilter
|
-1 |
C |
done |
|
235 |
1454d |
1470d
|
22/29 |
1187d |
ffd219efd9ee
netfilter: nfnetlink: fix warn in nfnetlink_unbind
|
|
general protection fault in legacy_parse_param
fs
|
21 |
C |
done |
|
20 |
1527d |
1789d
|
22/29 |
1187d |
ecff30575b5a
LSM: general protection fault in legacy_parse_param
|
|
INFO: trying to register non-static key in f2fs_handle_error
f2fs
|
-1 |
C |
|
|
523 |
1237d |
1298d
|
22/29 |
1187d |
cc249e4cba9a
f2fs: fix to avoid accessing uninitialized spinlock
92b4cf5b4895
f2fs: initialize locks earlier in f2fs_fill_super()
|
|
general protection fault in btf_decl_tag_resolve
bpf
|
2 |
C |
done |
|
6 |
1574d |
1574d
|
22/29 |
1187d |
d7e7b42f4f95
bpf: Fix a btf decl_tag bug when tagging a function
|
|
possible deadlock in p9_req_put
|
4 |
C |
done |
|
2815 |
1297d |
1388d
|
22/29 |
1187d |
52f1c45dde91
9p: trans_fd/p9_conn_cancel: drop client lock earlier
|
|
KASAN: use-after-free Write in null_skcipher_crypt
crypto
|
22 |
C |
done |
|
3 |
1545d |
1743d
|
22/29 |
1187d |
ebe48d368e97
esp: Fix possible buffer overflow in ESP transformation
|
|
memory leak in mld_newpack
net
|
3 |
C |
|
|
2 |
1348d |
1766d
|
22/29 |
1187d |
a43206156263
usbnet: Fix memory leak in usbnet_disconnect()
|
|
KASAN: use-after-free Read in io_rsrc_node_ref_zero
fs
|
19 |
C |
done |
|
3 |
1556d |
1555d
|
22/29 |
1187d |
80912cef18f1
io_uring: disallow modification of rsrc_data during quiesce
|
|
WARNING in netif_napi_add_weight
net
|
-1 |
C |
inconclusive |
done |
45 |
1426d |
1439d
|
22/29 |
1187d |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
WARNING in isotp_tx_timer_handler (2)
can
|
-1 |
C |
|
|
1416 |
1213d |
1536d
|
22/29 |
1187d |
3ea566422cbd
can: isotp: sanitize CAN ID checks in isotp_bind()
d73497081710
can: isotp: stop timeout monitoring when no first frame was sent
|
|
WARNING in ext4_xattr_block_set
ext4
|
-1 |
C |
error |
|
57 |
1193d |
1299d
|
22/29 |
1187d |
fae381a3d79b
ext4: init quota for 'old.inode' in 'ext4_rename'
|
|
general protection fault in shm_close
kernel
|
2 |
C |
done |
|
48 |
1288d |
1290d
|
22/29 |
1187d |
b6305049f306
ipc/shm: call underlying open/close vm_ops
|
|
KASAN: use-after-free Read in udl_get_urb_timeout
dri
usb
|
19 |
C |
done |
|
142 |
1344d |
1374d
|
22/29 |
1187d |
ed9605a66b62
Revert "drm/udl: Kill pending URBs at suspend and disconnect"
|
|
WARNING in kvm_arch_vcpu_ioctl_run (3)
kvm-x86
|
-1 |
C |
done |
error |
16157 |
1188d |
2982d
|
22/29 |
1187d |
ec6e4d863258
KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start (2)
kvm
|
-1 |
C |
done |
|
14 |
1514d |
1528d
|
22/29 |
1187d |
01e67e04c281
mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
|
|
memory leak in dvb_usb_device_init
media
usb
|
3 |
syz |
|
|
1 |
1293d |
1463d
|
22/29 |
1187d |
94d90fb06b94
media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
|
|
BUG: using smp_processor_id() in preemptible code in tun_chr_write_iter
net
|
4 |
C |
done |
|
1834 |
1527d |
1536d
|
22/29 |
1187d |
fc93db153b01
net: disable preemption in dev_core_stats_XXX_inc() helpers
|
|
WARNING in cpuset_write_resmask
cgroups
|
-1 |
C |
done |
done |
127 |
1543d |
1609d
|
22/29 |
1187d |
d068eebbd482
cgroup/cpuset: Make child cpusets restrict parents on v1 hierarchy
|
|
WARNING in f2fs_is_valid_blkaddr
f2fs
|
-1 |
C |
done |
|
2562 |
1456d |
2074d
|
22/29 |
1187d |
dc2f78e2d4cc
f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
|
|
general protection fault in binder_alloc_new_buf
kernel
|
12 |
C |
error |
|
315 |
1344d |
1375d
|
22/29 |
1187d |
1da52815d5f1
binder: fix alloc->vma_vm_mm null-ptr dereference
|
|
BUG: using smp_processor_id() in preemptible code in netdev_core_stats_alloc
net
|
4 |
C |
error |
|
2210 |
1527d |
1536d
|
22/29 |
1187d |
fc93db153b01
net: disable preemption in dev_core_stats_XXX_inc() helpers
|
|
KASAN: use-after-free Read in remove_wait_queue (3)
kernfs
|
19 |
C |
inconclusive |
|
123 |
1227d |
1653d
|
22/29 |
1187d |
a06247c6804f
psi: Fix uaf issue when psi trigger is destroyed while being polled
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold (2)
sctp
|
22 |
C |
inconclusive |
|
7 |
1339d |
1338d
|
22/29 |
1187d |
022152aaebe1
sctp: handle the error returned from sctp_auth_asoc_init_active_key
|
|
WARNING in ovs_dp_reset_user_features
openvswitch
|
-1 |
C |
done |
|
3 |
1306d |
1322d
|
22/29 |
1187d |
fd954cc1919e
openvswitch: switch from WARN to pr_warn
|
|
kernel BUG in ext4_ind_remove_space
ext4
|
-1 |
C |
error |
done |
10 |
1513d |
1563d
|
22/29 |
1187d |
2da376228a24
ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
|
|
kernel BUG in f2fs_init_xattr_caches
f2fs
|
-1 |
C |
|
|
24 |
1343d |
1366d
|
22/29 |
1187d |
7e9c323c52b3
mm/slub: fix to return errno if kmalloc() fails
|
|
KASAN: use-after-free Read in hugetlb_fault
mm
|
22 |
C |
|
|
383 |
1216d |
1312d
|
22/29 |
1187d |
04ada095dcfc
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
|
|
BUG: missing reserved tailroom
bpf
net
|
-1 |
C |
done |
|
2 |
1539d |
1538d
|
22/29 |
1187d |
b6f1f780b393
bpf, test_run: Fix packet size check for live packet mode
|
|
general protection fault in smc_pnet_add (2)
smc
|
2 |
C |
inconclusive |
|
590 |
1503d |
1518d
|
22/29 |
1187d |
d22f4f977236
net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
|
|
WARNING in ntfs_fill_super
ntfs3
|
-1 |
C |
error |
|
20 |
1268d |
1332d
|
22/29 |
1187d |
59bfd7a483da
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
|
|
possible deadlock in ___neigh_create
net
|
4 |
C |
error |
|
24 |
1573d |
1576d
|
22/29 |
1187d |
4a81f6da9cb2
net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
|
|
BUG: unable to handle kernel paging request in kernfs_put_active
kernfs
nilfs
|
8 |
C |
|
|
2 |
1348d |
1348d
|
22/29 |
1187d |
2e488f13755f
fs: fix UAF/GPF bug in nilfs_mdt_destroy
|
|
KASAN: slab-out-of-bounds Read in ntfs_trim_fs
ntfs3
|
19 |
C |
done |
|
204 |
1240d |
1337d
|
22/29 |
1187d |
557d19675a47
fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs
|
|
WARNING in pskb_expand_head
|
-1 |
C |
done |
done |
222 |
1301d |
1948d
|
22/29 |
1187d |
dbae2b062824
net: skb: introduce and use a single page frag cache
|
|
general protection fault in llc_build_and_send_ui_pkt
net
|
2 |
C |
done |
|
26 |
1521d |
1524d
|
22/29 |
1187d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
memory leak in kvm_vcpu_ioctl_set_cpuid2
kvm-x86
|
3 |
C |
|
|
1 |
1585d |
1581d
|
22/29 |
1187d |
811f95ff9527
KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
|
|
BUG: unable to handle kernel paging request in can_rcv_filter
can
|
8 |
C |
|
|
5 |
1270d |
1267d
|
22/29 |
1187d |
0acc442309a0
can: af_can: fix NULL pointer dereference in can_rcv_filter
|
|
general protection fault in ntfs_update_mftmirr
ntfs3
|
10 |
C |
error |
|
6680 |
1373d |
1497d
|
22/29 |
1187d |
321460ca3b55
fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
|
|
WARNING in tls_strp_done
net
|
-1 |
C |
error |
|
22 |
1377d |
1382d
|
22/29 |
1187d |
849f16bbfb68
tls: rx: react to strparser initialization errors
|
|
WARNING in __set_page_dirty
nilfs
|
-1 |
C |
error |
|
9 |
1547d |
1771d
|
22/29 |
1187d |
e897be17a441
nilfs2: fix lockdep warnings in page operations for btree nodes
|
|
KASAN: use-after-free Read in __post_watch_notification
kernel
|
19 |
C |
inconclusive |
|
1 |
1401d |
1399d
|
22/29 |
1187d |
e64ab2dbd882
watch_queue: Fix missing locking in add_watch_to_object()
|
|
WARNING: locking bug in hfa384x_usbctlx_completion_task
staging
usb
|
4 |
C |
|
|
2 |
1434d |
1430d
|
22/29 |
1187d |
ee6c6e734247
staging/wlan-ng: get the correct struct hfa384x in work callback
|
|
BUG: unable to handle kernel NULL pointer dereference in __rxe_do_task
rdma
|
10 |
syz |
|
|
120 |
1314d |
1383d
|
22/29 |
1187d |
a625ca30eff8
RDMA/rxe: Fix "kernel NULL pointer dereference" error
|
|
KASAN: slab-out-of-bounds Write in __build_skb_around
net
bpf
|
21 |
C |
error |
|
2536 |
1261d |
1275d
|
22/29 |
1187d |
ce098da1497c
skbuff: Introduce slab_build_skb()
|
|
general protection fault in end_page_writeback
mm
nilfs
|
2 |
C |
error |
done |
2 |
1286d |
1317d
|
22/29 |
1187d |
512c5ca01a36
nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
|
|
KASAN: use-after-free Read in add_wait_queue
fs
io-uring
|
19 |
C |
done |
done |
13 |
1520d |
1527d
|
22/29 |
1187d |
d89a4fac0fbc
io_uring: fix assuming triggered poll waitqueue is the single poll
|
|
WARNING in sk_stream_kill_queues (8)
net
|
-1 |
C |
unreliable |
|
4268 |
1191d |
1427d
|
22/29 |
1187d |
e9c6e7976026
tcp: fix sock skb accounting in tcp_read_skb()
|
|
KMSAN: uninit-value in r871xu_drv_init
usb
|
7 |
C |
|
|
7342 |
1435d |
2546d
|
22/29 |
1187d |
0458e5428e5e
staging: rtl8712: fix uninit-value in r871xu_drv_init()
d1b57669732d
staging: rtl8712: fix uninit-value in usb_read8() and friends
|
|
WARNING in fuse_write_file_get
fuse
|
-1 |
C |
done |
|
85 |
1374d |
1502d
|
22/29 |
1187d |
035ff33cf4db
fuse: write inode in fuse_release()
|
|
WARNING in mroute_clean_tables
net
|
-1 |
C |
|
|
10 |
1547d |
1567d
|
22/29 |
1187d |
5611a00697c8
ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
|
|
general protection fault in pse_prepare_data
net
|
10 |
C |
inconclusive |
|
6 |
1237d |
1315d
|
22/29 |
1187d |
46cdedf2a0fa
ethtool: pse-pd: fix null-deref on genl_info in dump
|
|
BUG: unable to handle kernel NULL pointer dereference in io_do_iopoll
fs
io-uring
|
10 |
C |
done |
|
3 |
1471d |
1470d
|
22/29 |
1187d |
aa184e8671f0
io_uring: don't attempt to IOPOLL for MSG_RING requests
|
|
WARNING in btf_type_id_size
bpf
|
-1 |
C |
done |
|
10 |
1248d |
1319d
|
22/29 |
1187d |
ea68376c8bed
bpf: prevent decl_tag from being referenced in func_proto
|
|
KMSAN: uninit-value in bcmp
net
|
19 |
C |
error |
done |
907 |
1223d |
2544d
|
22/29 |
1187d |
4f1dc7d9756e
fs/ntfs3: Validate attribute name offset
|
|
KASAN: use-after-free Read in move_expired_inodes (2)
exfat
|
19 |
C |
done |
|
4 |
1284d |
1324d
|
22/29 |
1187d |
4e3c51f4e805
fs: do not update freeing inode i_io_list
|
|
UBSAN: shift-out-of-bounds in tcf_pedit_init
net
|
-1 |
C |
done |
|
59 |
1468d |
1475d
|
22/29 |
1187d |
4d42d54a7d6a
net/sched: act_pedit: sanitize shift argument before usage
|
|
general protection fault in llc_build_and_send_test_pkt
net
|
2 |
C |
done |
|
25 |
1519d |
1524d
|
22/29 |
1187d |
2d327a79ee17
llc: only change llc->dev when bind() succeeds
|
|
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence
sound
|
12 |
C |
unreliable |
|
8 |
1364d |
1509d
|
22/29 |
1187d |
2f7a26abb824
ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
|
|
BUG: corrupted list in rdma_listen (2)
rdma
|
19 |
C |
inconclusive |
|
5 |
1568d |
1635d
|
22/29 |
1187d |
22e9f71072fa
RDMA/cma: Do not change route.addr.src_addr outside state checks
|
|
possible deadlock in snd_hrtimer_callback (2)
fs
|
4 |
C |
inconclusive |
|
582 |
1392d |
1658d
|
22/29 |
1187d |
96b097091c66
ALSA: pcm: Use deferred fasync helper
95cc637c1afd
ALSA: timer: Use deferred fasync helper
|
|
KASAN: use-after-free Read in __kernfs_remove
|
19 |
C |
done |
|
3985 |
1327d |
1370d
|
22/29 |
1187d |
4abc99652812
kernfs: fix use-after-free in __kernfs_remove
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (3)
fbdev
|
8 |
C |
unreliable |
|
11 |
1373d |
1416d
|
22/29 |
1187d |
a5a923038d70
fbdev: fbcon: Properly revert changes when vc_resize() failed
|
|
BUG: unable to handle kernel NULL pointer dereference in em_u32_match
net
|
10 |
C |
|
|
2 |
1243d |
1299d
|
22/29 |
1187d |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
WARNING: ODEBUG bug in htab_map_alloc
bpf
|
-1 |
C |
|
|
6456 |
1331d |
1355d
|
22/29 |
1187d |
cf7de6a53600
bpf: add missing percpu_counter_destroy() in htab_map_alloc()
|
|
memory leak in ntfs_init_fs_context
ntfs3
|
3 |
C |
|
|
169 |
1252d |
1373d
|
22/29 |
1187d |
51e76a232f8c
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
|
|
kernel BUG in ext4_es_cache_extent
ext4
|
-1 |
C |
inconclusive |
|
6 |
1211d |
1570d
|
22/29 |
1187d |
c878bea3c9d7
ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
|
|
BUG: sleeping function called from invalid context in vm_area_dup
mm
|
5 |
C |
|
|
3 |
1314d |
1314d
|
22/29 |
1187d |
d7c0e68dab98
mm/ksm: convert break_ksm() to use walk_page_range_vma()
|
|
BUG: sleeping function called from invalid context in kernfs_walk_and_get_ns
kernfs
|
5 |
C |
error |
|
196 |
1317d |
1322d
|
22/29 |
1187d |
46307fd6e27a
cgroup: Reorganize css_set_lock and kernfs path processing
|
|
KASAN: use-after-free Read in hugetlb_handle_userfault
mm
|
19 |
C |
|
|
4 |
1332d |
1356d
|
22/29 |
1187d |
958f32ce832b
mm: hugetlb: fix UAF in hugetlb_handle_userfault
|
|
WARNING in iomap_read_inline_data
gfs2
iomap
|
-1 |
C |
|
|
3 |
1257d |
1275d
|
22/29 |
1187d |
70376c7ff312
gfs2: Always check inode size of inline inodes
|
|
general protection fault in skb_unlink
net
|
2 |
C |
done |
error |
8 |
1357d |
2918d
|
22/29 |
1187d |
5121197ecc5d
kcm: close race conditions on sk_receive_queue
|
|
memory leak in kvm_set_memslot
kvm
|
3 |
C |
|
|
1 |
1471d |
1471d
|
22/29 |
1187d |
c87661f855c3
KVM: Free new dirty bitmap if creating a new memslot fails
|
|
WARNING in sk_destruct
net
|
-1 |
C |
done |
|
454 |
1463d |
1590d
|
22/29 |
1187d |
ebdc1a030962
tcp: add a missing sk_defer_free_flush() in tcp_splice_read()
|
|
BUG: unable to handle kernel paging request in eventfd_ctx_put
fs
|
8 |
C |
done |
|
7 |
1312d |
1340d
|
22/29 |
1187d |
7353633814f6
KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
|
|
KASAN: use-after-free Read in task_work_run (2)
kernel
|
19 |
C |
unreliable |
|
18 |
1266d |
1359d
|
22/29 |
1187d |
517e6a301f34
perf: Fix perf_pending_task() UaF
|
|
KASAN: slab-out-of-bounds Read in ipvlan_queue_xmit
net
|
17 |
C |
error |
error |
8 |
1550d |
2027d
|
22/29 |
1187d |
81225b2ea161
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
|
|
memory leak in do_seccomp (2)
kernel
|
3 |
C |
|
|
4 |
1371d |
1920d
|
22/29 |
1187d |
a1140cb215fa
seccomp: Move copy_seccomp() to no failure path.
|
|
KASAN: use-after-free Read in __io_remove_buffers
io-uring
|
19 |
C |
done |
|
2 |
1390d |
1386d
|
22/29 |
1187d |
ec8516f3b7c4
io_uring: fix free of unallocated buffer list
|
|
WARNING in cfg80211_ch_switch_notify
wireless
|
-1 |
C |
done |
|
744 |
1388d |
1432d
|
22/29 |
1187d |
77e7b6ba78ed
wifi: cfg80211: handle IBSS in channel switch
|
|
WARNING in napi_complete_done
net
|
-1 |
C |
error |
|
104 |
1295d |
1299d
|
22/29 |
1187d |
07d120aa33cc
net: tun: call napi_schedule_prep() to ensure we own a napi
|
|
INFO: task hung in add_early_randomness (2)
usb
crypto
|
1 |
C |
done |
|
182 |
1235d |
1454d
|
22/29 |
1187d |
228432551bd8
virtio-rng: make device ready before making request
|
|
WARNING: kmalloc bug in bpf
bpf
|
-1 |
C |
done |
done |
562 |
1525d |
1643d
|
22/29 |
1187d |
0708a0afe291
mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
|
|
possible deadlock in f2fs_write_checkpoint
f2fs
|
4 |
C |
done |
|
2208 |
1548d |
1594d
|
22/29 |
1187d |
c7f91bd41029
f2fs: Restore rwsem lockdep support
|
|
KASAN: use-after-free Read in xfs_qm_dqfree_one
xfs
|
19 |
syz |
|
|
7 |
1259d |
1269d
|
22/29 |
1187d |
52f31ed22821
xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING
|
|
KMSAN: uninit-value in tomoyo_path_chown
fs
|
7 |
C |
|
|
13763 |
1345d |
1346d
|
22/29 |
1187d |
f52d74b190f8
open: always initialize ownership fields
|
|
KMSAN: uninit-value in asix_check_host_enable
usb
|
7 |
C |
|
|
109 |
1496d |
1554d
|
22/29 |
1187d |
920a9fa27e78
net: asix: add proper error handling of usb read errors
|
|
WARNING in bpf_skb_load_helper_32
bpf
|
-1 |
C |
done |
|
9 |
1389d |
1420d
|
22/29 |
1187d |
0326195f523a
bpf: Make sure mac_header was set before using it
|
|
KASAN: use-after-free Read in ip6mr_sk_done
net
|
19 |
C |
done |
|
10988 |
1302d |
1571d
|
22/29 |
1187d |
7d9b1b578d67
ip6mr: fix use-after-free in ip6mr_sk_done()
|
|
WARNING in jfs_symlink
jfs
|
-1 |
C |
|
|
12 |
1309d |
1319d
|
22/29 |
1187d |
ebe060369f8d
jfs: Fix fortify moan in symlink
|
|
possible deadlock in btrfs_search_slot_get_root
btrfs
|
4 |
C |
|
|
5 |
1278d |
1297d
|
22/29 |
1187d |
b740d8061669
btrfs: free btrfs_path before copying root refs to userspace
|
|
WARNING in component_del
dri
|
-1 |
C |
done |
|
6 |
1569d |
1590d
|
22/29 |
1187d |
c853685d11c0
usb: core: Unregister device on component_add() failure
|
|
WARNING: refcount bug in smc_pnet_add
smc
|
13 |
C |
done |
|
98 |
1557d |
1571d
|
22/29 |
1187d |
28f922213886
net/smc: fix ref_tracker issue in smc_pnet_add()
|
|
KASAN: use-after-free Read in hdr_find_e
ntfs3
|
19 |
C |
done |
done |
66 |
1195d |
1337d
|
22/29 |
1187d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
possible deadlock in blkdev_put (3)
block
exfat
|
4 |
C |
|
|
870 |
1464d |
1536d
|
22/29 |
1187d |
d292dc80686a
loop: don't destroy lo->workqueue in __loop_clr_fd
|
|
KASAN: use-after-free Read in filp_close
io-uring
fs
|
19 |
C |
done |
|
17 |
1229d |
1458d
|
22/29 |
1187d |
40a1926022d1
fix the breakage in close_fd_get_file() calling conventions change
|
|
KMSAN: uninit-value in tcp_recvmsg
net
|
7 |
C |
|
|
25918 |
1310d |
1435d
|
22/29 |
1187d |
1228b34c8d0e
net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()
|
|
memory leak in smc_sysctl_net_init
smc
|
3 |
C |
|
|
8 |
1519d |
1524d
|
22/29 |
1187d |
5ae6acf1d00b
net/smc: fix a memory leak in smc_sysctl_net_exit()
|
|
general protection fault in binder_alloc_print_pages
kernel
|
12 |
C |
error |
|
157 |
1344d |
1375d
|
22/29 |
1187d |
1da52815d5f1
binder: fix alloc->vma_vm_mm null-ptr dereference
|
|
KASAN: null-ptr-deref Read in __free_pages
kernel
|
11 |
C |
inconclusive |
|
21 |
1266d |
1528d
|
22/29 |
1187d |
a635415a064e
watch_queue: Fix NULL dereference in error cleanup
|
|
KASAN: use-after-free Read in net_tx_action
kernel
|
19 |
C |
inconclusive |
|
3 |
1323d |
1367d
|
22/29 |
1187d |
ebda44da44f6
net: sched: fix race condition in qdisc_graft()
|
|
WARNING in blk_mq_release
block
|
-1 |
C |
error |
|
11 |
1368d |
1387d
|
22/29 |
1187d |
aa0c680c3aa9
block: Do not call blk_put_queue() if gendisk allocation fails
|
|
WARNING in hif_usb_send/usb_submit_urb
wireless
|
-1 |
C |
unreliable |
done |
374 |
1268d |
2060d
|
22/29 |
1187d |
16ef02bad239
wifi: ath9k: verify the expected usb_endpoints are present
|
|
BUG: Bad page map (5)
mm
|
19 |
C |
|
|
35 |
1229d |
1487d
|
22/29 |
1187d |
4d24de9425f7
mm: MADV_COLLAPSE: refetch vm_end after reacquiring mmap_lock
|
|
KASAN: use-after-free Read in mas_next_entry
fs
mm
|
19 |
C |
error |
|
16 |
1298d |
1312d
|
22/29 |
1187d |
59f2f4b8a757
fs/userfaultfd: Fix maple tree iterator in userfaultfd_unregister()
|
|
memory leak in hidraw_report_event
input
usb
|
3 |
C |
|
|
1 |
1463d |
1462d
|
22/29 |
1187d |
a5623a203cff
HID: hidraw: fix memory leak in hidraw_release()
|
|
KASAN: use-after-free Read in inet_bind2_bucket_find
net
io-uring
|
19 |
C |
done |
|
13 |
1442d |
1449d
|
22/29 |
1187d |
593d1ebe00a4
Revert "net: Add a second bind table hashed by port and address"
|
|
INFO: task hung in p9_fd_close
v9fs
|
1 |
C |
error |
error |
484 |
1297d |
2461d
|
22/29 |
1187d |
ef575281b21e
9p/trans_fd: always use O_NONBLOCK read/write
|
|
KASAN: use-after-free Read in post_one_notification
kernel
|
19 |
C |
inconclusive |
|
19 |
1328d |
1527d
|
22/29 |
1187d |
353f7988dd84
watchqueue: make sure to serialize 'wqueue->defunct' properly
|
|
memory leak in smc_create (2)
smc
|
3 |
C |
|
|
2 |
1524d |
1520d
|
22/29 |
1187d |
1a74e9932374
net/smc: Fix sock leak when release after smc_shutdown()
|
|
WARNING in bpf_bprintf_prepare (2)
bpf
|
-1 |
C |
|
|
2 |
1321d |
1360d
|
22/29 |
1187d |
05b24ff9b2cf
bpf: Prevent bpf program recursion for raw tracepoint probes
|
|
KASAN: use-after-free Read in driver_register
usb
|
19 |
C |
|
|
131 |
1431d |
1482d
|
22/29 |
1187d |
5f0b5f4d50fa
usb: gadget: fix race when gadget driver register via ioctl
|
|
possible deadlock in __inet_inherit_port
net
|
4 |
C |
done |
|
85 |
1225d |
1286d
|
22/29 |
1187d |
af295e854a4e
l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
|
|
WARNING: kobject bug in erofs_unregister_sysfs
erofs
|
-1 |
C |
done |
|
5 |
1528d |
1530d
|
22/29 |
1187d |
a942da24abc5
fs: erofs: add sanity check for kobject in erofs_unregister_sysfs
|
|
KASAN: use-after-free Read in blk_mq_sched_free_rqs
block
|
19 |
C |
error |
|
8 |
1435d |
1484d
|
22/29 |
1187d |
50e34d78815e
block: disable the elevator int del_gendisk
|
|
WARNING in driver_unregister
input
usb
|
-1 |
C |
|
|
1 |
1465d |
1461d
|
22/29 |
1187d |
f2d8c2606825
usb: gadget: Fix non-unique driver names in raw-gadget driver
|
|
KASAN: use-after-free Read in LZ4_decompress_safe_partial
erofs
|
19 |
C |
done |
|
13 |
1515d |
1670d
|
22/29 |
1187d |
eafc0a02391b
lz4: fix LZ4_decompress_safe_partial read out of bound
|
|
KASAN: null-ptr-deref Write in kill_f2fs_super
f2fs
|
12 |
C |
error |
|
49 |
1301d |
1322d
|
22/29 |
1187d |
91586ce0d39a
f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
|
|
memory leak in setup_mq_sysctls
kernel
|
3 |
C |
|
|
2 |
1265d |
1437d
|
22/29 |
1187d |
db7cfc380900
ipc: Free mq_sysctls if ipc namespace creation failed
|
|
memory leak in vhci_write
bluetooth
|
3 |
C |
|
|
1 |
1379d |
1375d
|
22/29 |
1187d |
7c9524d92964
Bluetooth: L2CAP: Fix memory leak in vhci_write
|
|
WARNING in btrfs_commit_transaction
btrfs
|
-1 |
C |
inconclusive |
done |
3 |
1208d |
1301d
|
22/29 |
1187d |
8bb808c6ad91
btrfs: don't print stack trace when transaction is aborted due to ENOMEM
|
|
general protection fault in kvm_arch_vcpu_ioctl
kvm-x86
|
2 |
C |
inconclusive |
|
365 |
1388d |
1425d
|
22/29 |
1187d |
f83894b24c2a
KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
|
|
possible deadlock in nilfs_count_free_blocks
nilfs
|
4 |
C |
|
|
60 |
1305d |
1318d
|
22/29 |
1187d |
8ac932a4921a
nilfs2: fix deadlock in nilfs_count_free_blocks()
|
|
kernel BUG at fs/ext4/inline.c:LINE!
ext4
|
-1 |
C |
done |
done |
76 |
1227d |
2050d
|
22/29 |
1187d |
5c099c4fdc43
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
|
|
INFO: trying to register non-static key in hci_uart_flush (2)
bluetooth
|
-1 |
syz |
error |
error |
37 |
1315d |
2457d
|
22/29 |
1187d |
3124d320c22f
Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
|
|
WARNING: still has locks held in io_ring_submit_lock
fs
io-uring
|
4 |
C |
done |
|
3 |
1472d |
1472d
|
22/29 |
1187d |
e7637a492b9f
io_uring: fix locking state for empty buffer group
|
|
INFO: rcu detected stall in mld_ifc_work
net
|
1 |
C |
inconclusive |
|
1 |
1564d |
1564d
|
22/29 |
1187d |
5740d0689096
net: sched: limit TC_ACT_REPEAT loops
|
|
WARNING in aiptek_open/usb_submit_urb
usb
input
|
-1 |
C |
error |
|
2380 |
1524d |
2546d
|
22/29 |
1187d |
5600f6986628
Input: aiptek - properly check endpoint type
|
|
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2)
sound
|
-1 |
C |
done |
|
2 |
1536d |
1532d
|
22/29 |
1187d |
efb6402c3c4a
ALSA: oss: Fix PCM OSS buffer allocation overflow
|
|
WARNING in __queue_work (3)
kernel
|
-1 |
syz |
error |
|
953 |
1288d |
2122d
|
22/29 |
1187d |
877afadad2dc
Bluetooth: When HCI work queue is drained, only queue chained work
|
|
general protection fault in fq_codel_enqueue (3)
net
|
2 |
C |
inconclusive |
|
5 |
1425d |
1670d
|
22/29 |
1187d |
fd1894224407
bpf: Don't redirect packets with invalid pkt_len
|
|
KASAN: invalid-free in io_clean_op
io-uring
|
24 |
C |
|
|
13 |
1322d |
1339d
|
22/29 |
1187d |
4c17a496a7a0
io_uring/net: fix cleanup double free free_iov init
|
|
WARNING in check_map_prog_compatibility
bpf
|
-1 |
C |
inconclusive |
done |
128 |
1339d |
1502d
|
22/29 |
1187d |
34dd3bad1a6f
bpf: Relax the requirement to use preallocated hash maps in tracing progs.
|
|
WARNING: bad unlock balance in rxrpc_do_sendmsg
afs
net
|
4 |
C |
inconclusive |
|
14 |
1393d |
1598d
|
22/29 |
1187d |
b0f571ecd794
rxrpc: Fix locking in rxrpc's sendmsg
|
|
memory leak in tun_chr_open
net
|
3 |
C |
|
|
1 |
1357d |
1357d
|
22/29 |
1187d |
1118b2049d77
net: tun: Fix memory leaks of napi_get_frags
|
|
possible deadlock in snd_pcm_period_elapsed (3)
sound
|
4 |
C |
inconclusive |
|
23 |
1385d |
1610d
|
22/29 |
1187d |
96b097091c66
ALSA: pcm: Use deferred fasync helper
|
|
memory leak in blk_mq_init_tags
block
usb
|
3 |
C |
|
|
2 |
1514d |
1521d
|
22/29 |
1187d |
03252259e18e
scsi: sd: Clean up gendisk if device_add_disk() failed
|
|
general protection fault in udpv6_sendmsg
net
|
2 |
C |
error |
|
69 |
1284d |
1293d
|
22/29 |
1187d |
6423ac2eb31e
rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket
|
|
general protection fault in erofs_bread
erofs
|
2 |
C |
error |
|
3 |
1304d |
1314d
|
22/29 |
1187d |
e5126de138ca
erofs: fix general protection fault when reading fragment
|
|
WARNING in ieee80211_ibss_csa_beacon
wireless
|
-1 |
C |
error |
|
4997 |
1188d |
2057d
|
22/29 |
1187d |
15bc8966b6d3
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
|
|
INFO: task hung in synchronize_rcu (3)
|
1 |
C |
done |
done |
374 |
1197d |
2134d
|
22/29 |
1187d |
2d08935682ac
KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io()
|
|
WARNING in static_key_slow_try_dec (3)
kernel
|
-1 |
C |
|
|
26 |
1199d |
1359d
|
22/29 |
1187d |
921ebde3c0d2
netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
|
|
KASAN: slab-out-of-bounds Read in decrypt_internal
net
|
17 |
C |
inconclusive |
done |
4 |
1510d |
1600d
|
22/29 |
1187d |
9381fe8c849c
net/tls: fix slab-out-of-bounds bug in decrypt_internal
|
|
INFO: task hung in __input_unregister_device (4)
usb
input
|
1 |
C |
done |
|
924 |
1360d |
1425d
|
22/29 |
1187d |
98e01215708b
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
|
|
general protection fault in __ext4_journal_get_write_access
fuse
ext4
|
2 |
C |
done |
done |
7 |
2023d |
2073d
|
22/29 |
1288d |
384d87ef2c95
block: Do not discard buffers under a mounted filesystem
|
|
WARNING in sco_sock_sendmsg
mm
|
-1 |
C |
inconclusive |
|
2 |
1728d |
1728d
|
22/29 |
1322d |
0771cbb3b97d
Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
|
|
WARNING in ipvlan_unregister_nf_hook
net
|
-1 |
C |
done |
done |
4151 |
1636d |
2272d
|
22/29 |
1345d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
WARNING: ODEBUG bug in bt_host_release
bluetooth
|
-1 |
syz |
done |
done |
7 |
1870d |
2123d
|
22/29 |
1345d |
e2cb6b891ad2
bluetooth: eliminate the potential race condition when removing the HCI controller
|
|
WARNING: suspicious RCU usage (5)
|
-1 |
C |
done |
|
1 |
1443d |
1439d
|
20/29 |
1433d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
general protection fault in sock_close
net
|
2 |
syz |
done |
unreliable |
2 |
2098d |
2094d
|
20/29 |
1462d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING in dev_change_net_namespace
net
|
-1 |
syz |
done |
done |
8 |
1648d |
2296d
|
20/29 |
1468d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
general protection fault in hci_inquiry_result_with_rssi_evt
bluetooth
|
2 |
C |
done |
|
17 |
1601d |
1626d
|
20/29 |
1468d |
72279d17df54
Bluetooth: hci_event: Rework hci_inquiry_result_with_rssi_evt
|
|
general protection fault in __loop_clr_fd
block
|
2 |
C |
done |
|
5702 |
2244d |
2272d
|
20/29 |
1468d |
87579e9b7d8d
loop: use worker per cgroup instead of kworker
|
|
WARNING in rtnl_dellink
net
|
-1 |
C |
done |
done |
94 |
1595d |
2106d
|
20/29 |
1474d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
INFO: task hung in linkwatch_event (2)
net
|
1 |
C |
done |
done |
1033 |
1493d |
2219d
|
20/29 |
1474d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
BUG: unable to handle kernel paging request in bitfill_aligned (2)
fbdev
|
21 |
C |
inconclusive |
done |
26 |
1609d |
2016d
|
20/29 |
1474d |
0499f419b76f
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
|
|
WARNING in drm_gem_shmem_vm_open
|
-1 |
syz |
done |
done |
38 |
1607d |
1742d
|
20/29 |
1474d |
0499f419b76f
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
|
|
INFO: task hung in usb_get_descriptor
|
1 |
C |
done |
done |
4149 |
1537d |
2059d
|
20/29 |
1474d |
363eaa3a450a
usbip: synchronize event handler with sysfs code paths
|
|
general protection fault in ieee80211_chanctx_num_assigned
wireless
|
2 |
C |
inconclusive |
done |
15 |
1624d |
2058d
|
20/29 |
1474d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
general protection fault in xfrm_user_rcv_msg_compat
net
|
2 |
C |
unreliable |
done |
1543 |
1755d |
1967d
|
20/29 |
1474d |
4e9505064f58
net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
|
|
KASAN: slab-out-of-bounds Read in add_adv_patterns_monitor
bluetooth
|
17 |
C |
error |
done |
5 |
1924d |
1944d
|
20/29 |
1475d |
b4a221ea8a1f
Bluetooth: advmon offload MSFT add rssi support
|
|
KASAN: use-after-free Read in ext4_xattr_set_entry (4)
ext4
|
22 |
C |
error |
done |
21 |
1556d |
1942d
|
20/29 |
1521d |
6e47a3cc68fc
ext4: get rid of super block and sbi from handle_mount_ops()
|
|
KASAN: out-of-bounds Read in ath9k_hif_usb_rx_cb (3)
wireless
usb
|
17 |
C |
unreliable |
done |
7 |
1564d |
1967d
|
20/29 |
1532d |
6ce708f54cc8
ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
|
|
KASAN: slab-out-of-bounds Write in betop_probe
input
usb
|
21 |
C |
unreliable |
|
9 |
1741d |
2297d
|
20/29 |
1532d |
689e453a9b9c
HID: betop: fix slab-out-of-bounds Write in betop_probe
HID: betop: fix slab-out-of-bounds Write in betop_probe
|
|
possible deadlock in scheduler_tick
kvm-x86
|
4 |
C |
error |
|
99 |
1878d |
1890d
|
20/29 |
1532d |
a83829f56c7c
KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken
8228c77d8b56
KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
|
|
WARNING in mptcp_sendmsg_frag
mptcp
|
-1 |
C |
inconclusive |
|
6 |
1708d |
1715d
|
20/29 |
1532d |
efe686ffce01
mptcp: ensure tx skbs always have the MPTCP ext
mptcp: ensure tx skbs always have the MPTCP ext
|
|
KMSAN: uninit-value in dvb_usb_adapter_dvb_init (2)
media
usb
|
7 |
C |
|
|
34 |
1801d |
2016d
|
20/29 |
1532d |
c5453769f77c
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
899a61a3305d
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
|
|
BUG: sleeping function called from invalid context in __might_resched
serial
|
5 |
C |
inconclusive |
|
9 |
1655d |
1659d
|
20/29 |
1540d |
1ee33b1ca2b8
tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
|
|
WARNING in cgroup_finalize_control
|
-1 |
syz |
done |
done |
9 |
1678d |
2206d
|
20/29 |
1540d |
7ee285395b21
cgroup: Make rebind_subsystems() disable v2 controllers all at once
|
|
KASAN: use-after-free Read in snd_mixer_oss_get_volume1
sound
|
19 |
C |
inconclusive |
|
1 |
1683d |
1679d
|
20/29 |
1540d |
411cef6adfb3
ALSA: mixer: oss: Fix racy access to slots
|
|
memory leak in blk_iolatency_init
block
cgroups
|
3 |
C |
|
|
833 |
1541d |
1716d
|
20/29 |
1540d |
6f5ddde41069
blkcg: fix memory leak in blk_iolatency_init
|
|
memory leak in __mdiobus_register
usb
|
3 |
C |
|
|
1 |
1708d |
1704d
|
20/29 |
1540d |
ab609f25d198
net: mdiobus: Fix memory leak in __mdiobus_register
ca6e11c337da
phy: mdio: fix memory leak
|
|
WARNING in ref_tracker_dir_exit
|
-1 |
C |
done |
|
16271 |
1596d |
1625d
|
20/29 |
1540d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
WARNING in ovl_create_real
overlayfs
|
-1 |
C |
unreliable |
|
164 |
1662d |
1730d
|
20/29 |
1540d |
1f5573cfe7a7
ovl: fix warning in ovl_create_real()
|
|
WARNING: kmalloc bug in hash_ip_create
netfilter
|
-1 |
C |
done |
|
641 |
1699d |
1726d
|
20/29 |
1540d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
WARNING in __i2c_transfer (2)
i2c
|
-1 |
C |
done |
|
337 |
1605d |
1653d
|
20/29 |
1540d |
bb436283e25a
i2c: validate user data in compat ioctl
|
|
WARNING in sta_info_insert_rcu
|
-1 |
C |
done |
done |
2533 |
1634d |
2071d
|
20/29 |
1540d |
a6555f844549
mac80211: Drop frames from invalid MAC address in ad-hoc mode
|
|
KASAN: use-after-free Read in __crypto_xor
crypto
|
19 |
C |
done |
|
9 |
1696d |
1727d
|
20/29 |
1540d |
68b6dea802ce
crypto: pcrypt - Delay write to padata->info
da353fac65fe
net/tls: Fix flipped sign in tls_err_abort() calls
|
|
KMSAN: uninit-value in legacy_dvb_usb_read_remote_control
media
usb
|
7 |
C |
|
|
186 |
1650d |
1991d
|
20/29 |
1540d |
afae4ef7d5ad
media: dvb-usb: fix ununit-value in az6027_rc_query
|
|
KMSAN: kernel-infoleak in move_addr_to_user (6)
tipc
|
9 |
C |
|
|
4 |
1580d |
1618d
|
20/29 |
1540d |
d6d86830705f
net ticp:fix a kernel-infoleak in __tipc_sendmsg()
|
|
memory leak in bsg_register_queue
usb
|
3 |
C |
|
|
1 |
1723d |
1719d
|
20/29 |
1540d |
1a0db7744e45
scsi: bsg: Fix device unregistration
|
|
KASAN: use-after-free Read in nft_table_lookup (2)
netfilter
|
19 |
syz |
done |
|
1 |
1721d |
1717d
|
20/29 |
1540d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
memory leak in reg_copy_regd
wireless
|
3 |
C |
|
|
1 |
1774d |
1770d
|
20/29 |
1540d |
e53e9828a8d2
cfg80211: always free wiphy specific regdomain
|
|
divide error in usbnet_start_xmit
usb
|
2 |
C |
|
|
760 |
1664d |
1681d
|
20/29 |
1540d |
397430b50a36
usbnet: sanity check for maxpacket
|
|
KASAN: use-after-free Read in srcu_invoke_callbacks
block
|
19 |
syz |
error |
|
4 |
1585d |
1596d
|
20/29 |
1540d |
850fd2abbe02
block: cleanup q->srcu
|
|
KMSAN: kernel-infoleak in _copy_to_iter (6)
net
|
9 |
C |
|
|
748 |
1540d |
1629d
|
20/29 |
1540d |
71ddeac8cd1d
inet_diag: fix kernel-infoleak for UDP sockets
|
|
WARNING: ODEBUG bug in qdisc_create
net
|
-1 |
C |
done |
|
6 |
1709d |
1737d
|
20/29 |
1540d |
a56d447f196f
net/sched: sch_taprio: properly cancel timer from taprio_destroy()
|
|
WARNING: suspicious RCU usage in xfrm_set_default
net
|
4 |
C |
done |
|
20 |
1703d |
1708d
|
20/29 |
1540d |
93ec1320b017
xfrm: fix rcu lock in xfrm_notify_userpolicy()
|
|
KASAN: slab-out-of-bounds Write in usb_hcd_poll_rh_status (2)
usb
|
21 |
C |
inconclusive |
|
116 |
1604d |
2087d
|
20/29 |
1540d |
1d7d4c07932e
USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
|
|
general protection fault in io_uring_register
fs
io-uring
|
2 |
syz |
done |
|
1 |
1720d |
1716d
|
20/29 |
1540d |
41d3a6bd1d37
io_uring: pin SQPOLL data before unlocking ring lock
|
|
INFO: trying to register non-static key in mxl111sf_ctrl_msg
usb
media
|
-1 |
C |
|
|
73 |
2496d |
2599d
|
20/29 |
1540d |
44870a9e7a3c
media: mxl111sf: change mutex_init() location
|
|
KASAN: use-after-free Write in io_queue_worker_create
fs
io-uring
|
22 |
C |
unreliable |
|
132 |
1623d |
1633d
|
20/29 |
1540d |
71a85387546e
io-wq: check for wq exit after adding new worker task_work
e47498afeca9
io-wq: remove spurious bit clear on task_work addition
|
|
KASAN: null-ptr-deref Write in sock_setsockopt
net
|
12 |
C |
|
|
45 |
1558d |
1666d
|
20/29 |
1540d |
d00c8ee31729
net: fix possible NULL deref in sock_reserve_memory
|
|
general protection fault in rcu_segcblist_enqueue
kvm-x86
|
2 |
C |
done |
done |
368 |
1723d |
1787d
|
20/29 |
1540d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
WARNING in atp_close (3)
input
|
-1 |
C |
|
|
125 |
1604d |
1697d
|
20/29 |
1540d |
9f3ccdc3f6ef
Input: appletouch - initialize work before device registration
|
|
KASAN: use-after-free Read in netlbl_catmap_walk
lsm
net
|
19 |
C |
inconclusive |
|
1 |
1735d |
1735d
|
20/29 |
1540d |
0817534ff9ea
smackfs: Fix use-after-free in netlbl_catmap_walk()
|
|
WARNING in page_counter_cancel (3)
mm
cgroups
|
-1 |
C |
done |
|
22 |
1598d |
1647d
|
20/29 |
1540d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
KMSAN: uninit-value in ppp_send_frame
ppp
|
7 |
C |
|
|
5 |
1584d |
1604d
|
20/29 |
1540d |
44073187990d
ppp: ensure minimum packet size in ppp_write()
|
|
general protection fault in bpf_skb_cgroup_id
net
bpf
|
2 |
C |
inconclusive |
|
107 |
1697d |
1712d
|
20/29 |
1540d |
435b08ec0094
bpf, test, cgroup: Use sk_{alloc,free} for test cases
|
|
general protection fault in inet_csk_accept
net
|
2 |
C |
done |
|
8 |
1629d |
1628d
|
20/29 |
1540d |
b0cdc5dbcf2b
mptcp: never allow the PM to close a listener subflow
|
|
KASAN: null-ptr-deref Write in rhashtable_free_and_destroy (2)
wireless
|
12 |
C |
unreliable |
|
38 |
1605d |
1870d
|
20/29 |
1540d |
8b5cb7e41d9d
mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
|
|
general protection fault in set_task_ioprio
block
|
2 |
C |
done |
|
19 |
1617d |
1618d
|
20/29 |
1540d |
a957b61254a7
block: fix error in handling dead task for ioprio setting
|
|
INFO: task hung in disconnect_work
wireless
|
1 |
C |
inconclusive |
done |
3 |
1651d |
1925d
|
20/29 |
1540d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
INFO: trying to register non-static key in ath9k_htc_rxep
wireless
|
-1 |
C |
unreliable |
|
9896 |
1595d |
2168d
|
20/29 |
1540d |
b0ec7e55fce6
ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()
|
|
WARNING in nested_vmx_vmexit
kvm-x86
|
-1 |
C |
done |
|
101 |
1617d |
1633d
|
20/29 |
1540d |
a80dfc025924
KVM: VMX: Always clear vmx->fail on emulation_required
|
|
KASAN: invalid-free in security_tun_dev_free_security
selinux
|
24 |
syz |
error |
error |
346 |
1616d |
1958d
|
20/29 |
1540d |
158b515f703e
tun: avoid double free in tun_free_netdev
|
|
INFO: task hung in io_uring_del_tctx_node
io-uring
fs
|
1 |
C |
unreliable |
|
37 |
1542d |
1706d
|
20/29 |
1540d |
8bab4c09f24e
io_uring: allow conditional reschedule for intensive iterators
|
|
KASAN: use-after-free Read in __isofs_iget
isofs
|
19 |
C |
inconclusive |
|
2 |
1688d |
1684d
|
20/29 |
1540d |
e96a1866b405
isofs: Fix out of bound access for corrupted isofs image
|
|
INFO: trying to register non-static key in l2cap_sock_teardown_cb
bluetooth
|
-1 |
C |
done |
done |
88 |
1668d |
1972d
|
20/29 |
1540d |
1bff51ea59a9
Bluetooth: fix use-after-free error in lock_sock_nested()
|
|
KASAN: invalid-free in packet_set_ring
net
|
24 |
C |
inconclusive |
|
4 |
1626d |
1627d
|
20/29 |
1540d |
ec6af094ea28
net/packet: rx_owner_map depends on pg_vec
|
|
KASAN: use-after-free Read in disk_release_events
block
fuse
exfat
|
19 |
syz |
inconclusive |
|
1 |
1629d |
1625d
|
20/29 |
1540d |
99d8690aae4b
block: fix error unwinding in device_add_disk
|
|
WARNING: ODEBUG bug in corrupted (2)
usb
input
|
-1 |
C |
error |
|
2 |
1610d |
1821d
|
20/29 |
1540d |
33812fc7c8d7
HID: magicmouse: Fix an error handling path in magicmouse_probe()
|
|
KASAN: use-after-free Read in rtl8712_dl_fw
usb
staging
|
19 |
C |
|
|
6961 |
1657d |
1680d
|
20/29 |
1540d |
c052cc1a069c
staging: rtl8712: fix use-after-free in rtl8712_dl_fw
|
|
general protection fault in cgroup_sk_free
cgroups
|
2 |
C |
error |
|
2727 |
1698d |
1712d
|
20/29 |
1540d |
78cc316e9583
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
|
|
general protection fault in bpf_skb_ancestor_cgroup_id
net
bpf
|
2 |
C |
unreliable |
|
232 |
1696d |
1712d
|
20/29 |
1540d |
435b08ec0094
bpf, test, cgroup: Use sk_{alloc,free} for test cases
|
|
WARNING in loop_add
|
-1 |
C |
done |
error |
64 |
1655d |
2469d
|
20/29 |
1540d |
278167fd2f8f
block: add __must_check for *add_disk*() callers
|
|
INFO: rcu detected stall in fq_pie_timer
net
|
1 |
C |
error |
|
35 |
1581d |
1799d
|
20/29 |
1540d |
61c2402665f1
net/sched: fq_pie: prevent dismantle issue
|
|
INFO: rcu detected stall in sys_recvmmsg
mptcp
|
1 |
C |
done |
|
52 |
1577d |
1708d
|
20/29 |
1540d |
612f71d7328c
mptcp: fix possible stall on recvmsg()
|
|
KASAN: use-after-free Write in io_submit_one
fs
|
22 |
C |
done |
|
11 |
1627d |
1665d
|
20/29 |
1540d |
75feae73a280
block: fix single bio async DIO error handling
|
|
general protection fault in free_percpu
net
|
2 |
syz |
unreliable |
done |
80 |
1608d |
1875d
|
20/29 |
1540d |
158b515f703e
tun: avoid double free in tun_free_netdev
|
|
WARNING: kmalloc bug in hash_net_create
netfilter
|
-1 |
C |
done |
|
283 |
1699d |
1726d
|
20/29 |
1540d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
possible deadlock in snd_mixer_oss_ioctl1
sound
|
4 |
C |
done |
|
149 |
1672d |
1676d
|
20/29 |
1540d |
3ab799201845
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
|
|
WARNING in kvm_mmu_notifier_invalidate_range_start
kvm
|
-1 |
C |
done |
|
19 |
1549d |
1610d
|
20/29 |
1540d |
d6aba4c8e20d
hugetlbfs: fix off-by-one error in hugetlb_vmdelete_list()
|
|
WARNING: lock held when returning to user space in tcp_setsockopt (2)
net
|
4 |
C |
done |
done |
6 |
1614d |
1620d
|
20/29 |
1540d |
b29fcfb54cd7
mptcp: full disconnect implementation
|
|
possible deadlock in dquot_commit
ext4
|
4 |
C |
unreliable |
|
41 |
1631d |
1931d
|
20/29 |
1540d |
4013d47a5307
ext4: make sure to reset inode lockdep class when quota enabling fails
|
|
WARNING in tcf_chain0_head_change_cb_del (3)
net
|
-1 |
C |
inconclusive |
|
107 |
1624d |
1759d
|
20/29 |
1540d |
ab443c539167
sch_cake: do not call cake_destroy() from cake_init()
|
|
WARNING in inc_nlink (2)
fs
|
-1 |
C |
inconclusive |
done |
21 |
1541d |
1878d
|
20/29 |
1540d |
97f044f690ba
fuse: don't increment nlink in link()
|
|
possible deadlock in io_worker_cancel_cb
io-uring
fs
|
4 |
C |
done |
|
9 |
1621d |
1626d
|
20/29 |
1540d |
d800c65c2d4e
io-wq: drop wqe lock before creating new worker
|
|
WARNING: ODEBUG bug in batadv_v_ogm_free
batman
|
-1 |
C |
done |
done |
6 |
1674d |
1692d
|
20/29 |
1540d |
6f68cd634856
net: batman-adv: fix error handling
|
|
KMSAN: kernel-usb-infoleak in usbnet_write_cmd (3)
usb
|
9 |
C |
|
|
256 |
1558d |
1602d
|
20/29 |
1540d |
d668769eb9c5
net: mcs7830: handle usb read errors properly
|
|
KMSAN: uninit-value in ppp_async_push (2)
ppp
|
7 |
C |
|
|
323 |
1560d |
1631d
|
20/29 |
1540d |
44073187990d
ppp: ensure minimum packet size in ppp_write()
|
|
WARNING: suspicious RCU usage in __dev_queue_xmit
batman
|
4 |
C |
done |
|
635 |
1597d |
1598d
|
20/29 |
1540d |
6316136ec6e3
netfilter: egress: avoid a lockdep splat
|
|
WARNING in nsim_dev_reload_destroy
net
|
-1 |
C |
done |
|
2895 |
1671d |
1676d
|
20/29 |
1540d |
fb9d19c2d844
Revert "devlink: Remove not-executed trap group notifications"
|
|
KASAN: use-after-free Read in blk_mq_sched_tags_teardown
block
usb
|
19 |
C |
done |
|
6 |
1677d |
1675d
|
20/29 |
1540d |
8bdf7b3fe1f4
blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown()
|
|
KASAN: null-ptr-deref Write in l2cap_chan_put
bluetooth
|
21 |
syz |
done |
done |
7 |
1672d |
2118d
|
20/29 |
1540d |
1bff51ea59a9
Bluetooth: fix use-after-free error in lock_sock_nested()
|
|
INFO: trying to register non-static key in ath9k_wmi_event_tasklet
wireless
usb
|
-1 |
C |
unreliable |
|
7 |
1631d |
1807d
|
20/29 |
1540d |
8b3046abc99e
ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()
|
|
KASAN: use-after-free Read in free_netdev (2)
net
|
19 |
C |
done |
done |
1715 |
1638d |
2272d
|
20/29 |
1540d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
INFO: task hung in set_current_rng
crypto
usb
|
1 |
C |
unreliable |
done |
1 |
1667d |
1785d
|
20/29 |
1540d |
2bb31abdbe55
hwrng: virtio - don't wait on cleanup
|
|
general protection fault in fuse_test_super
fuse
|
19 |
C |
error |
|
32 |
1547d |
1715d
|
20/29 |
1540d |
80019f113832
fuse: always initialize sb->s_fs_info
|
|
memory leak in mgmt_cmd_complete
bluetooth
|
3 |
C |
|
|
3 |
1736d |
1836d
|
20/29 |
1540d |
709fca500067
Bluetooth: hci_sock: purge socket queues in the destruct() callback
|
|
kernel BUG at net/core/dev.c:LINE! (4)
|
-1 |
C |
done |
done |
432 |
1624d |
2011d
|
20/29 |
1540d |
f123cffdd8fe
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
|
|
WARNING: refcount bug in sys_memfd_secret
mm
|
13 |
C |
done |
done |
4217 |
1675d |
1677d
|
20/29 |
1540d |
87066fdd2e30
Revert "mm/secretmem: use refcount_t instead of atomic_t"
|
|
KMSAN: uninit-value in ax88772a_hw_reset
usb
|
7 |
C |
|
|
94 |
1558d |
1646d
|
20/29 |
1540d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
WARNING: kmalloc bug in nf_tables_newset
netfilter
|
-1 |
C |
done |
|
95 |
1699d |
1726d
|
20/29 |
1540d |
45928afe94a0
netfilter: nf_tables: Fix oversized kvmalloc() calls
|
|
WARNING in static_key_slow_try_dec (2)
kernel
|
-1 |
C |
unreliable |
|
5417 |
1679d |
1747d
|
20/29 |
1540d |
f7d8a19f9a05
Revert "KVM: x86: Open code necessary bits of kvm_lapic_set_base() at vCPU RESET"
|
|
UBSAN: shift-out-of-bounds in __qdisc_calculate_pkt_len
net
|
-1 |
C |
unreliable |
|
5660 |
1699d |
1996d
|
20/29 |
1540d |
b193e15ac69d
net: prevent user from passing illegal stab size
|
|
WARNING in emulate_vsyscall
kernel
|
-1 |
C |
done |
done |
3890 |
1704d |
1884d
|
20/29 |
1540d |
d4ffd5df9d18
x86/fault: Fix wrong signal when vsyscall fails with pkey
|
|
WARNING: kmalloc bug in hash_mac_create
netfilter
|
-1 |
C |
done |
|
11 |
1720d |
1724d
|
20/29 |
1540d |
7bbc3d385bd8
netfilter: ipset: Fix oversized kvmalloc() calls
|
|
BUG: unable to handle kernel paging request in __blk_mq_alloc_requests
io-uring
block
|
19 |
C |
unreliable |
|
107 |
1659d |
1667d
|
20/29 |
1540d |
a22c00be90de
block: assign correct tag before doing prefetch of request
|
|
WARNING in ieee80211_vif_release_channel (2)
wireless
|
-1 |
C |
done |
|
5 |
1615d |
1619d
|
20/29 |
1540d |
87a270625a89
mac80211: fix locking in ieee80211_start_ap error path
|
|
KASAN: use-after-free Read in unmap_page_range (2)
mm
|
19 |
C |
unreliable |
|
4 |
1650d |
1668d
|
20/29 |
1540d |
337546e83fc7
mm/oom_kill.c: prevent a race between process_mrelease and exit_mmap
|
|
general protection fault in dev_get_by_index_rcu (2)
bpf
net
|
2 |
C |
error |
|
18 |
1600d |
1600d
|
20/29 |
1540d |
382778edc826
xdp: check prog type before updating BPF link
|
|
possible deadlock in fuse_reverse_inval_entry
fuse
|
4 |
C |
error |
|
1 |
1722d |
1748d
|
20/29 |
1540d |
bda9a71980e0
fuse: annotate lock in fuse_reverse_inval_entry()
|
|
INFO: rcu detected stall in snd_seq_write (2)
sound
|
1 |
syz |
done |
|
21 |
1656d |
1668d
|
20/29 |
1540d |
6fadb494a638
ALSA: seq: Set upper limit of processed events
|
|
possible deadlock in md_open
raid
|
4 |
C |
unreliable |
|
2844 |
1703d |
1736d
|
20/29 |
1540d |
7df835a32a8b
md: fix a lock order reversal in md_alloc
|
|
INFO: task hung in io_uring_try_cancel_requests
fs
io-uring
|
1 |
C |
error |
|
41 |
1630d |
1671d
|
20/29 |
1540d |
f75d118349be
io_uring: harder fdinfo sq/cq ring iterating
|
|
possible deadlock in blkdev_put (2)
exfat
block
|
4 |
C |
done |
|
502 |
1540d |
1642d
|
20/29 |
1540d |
322c4293ecc5
loop: make autoclear operation asynchronous
|
|
INFO: rcu detected stall in dummy_timer (3)
usb
|
1 |
C |
error |
|
132 |
1554d |
2142d
|
20/29 |
1540d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
WARNING in page_counter_uncharge
cgroups
mm
|
-1 |
C |
done |
done |
2 |
1609d |
1609d
|
20/29 |
1540d |
269bda9e7da4
mptcp: Check reclaim amount before reducing allocation
|
|
KMSAN: uninit-value in asix_mdio_read (2)
usb
|
7 |
C |
|
|
1075 |
1540d |
1620d
|
20/29 |
1540d |
8035b1a2a37a
asix: fix uninit-value in asix_mdio_read()
|
|
WARNING in __dev_set_promiscuity
net
|
-1 |
C |
done |
|
11 |
1702d |
1705d
|
20/29 |
1540d |
a5b8fd657881
net: dev_addr_list: handle first address in __hw_addr_add_ex
|
|
WARNING in signalfd_cleanup
fs
io-uring
|
-1 |
C |
done |
|
201 |
1587d |
1602d
|
20/29 |
1540d |
791f3465c4af
io_uring: fix UAF due to missing POLLFREE handling
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_cancel
net
usb
|
5 |
C |
done |
|
28 |
1616d |
1630d
|
20/29 |
1540d |
744451c162a5
Bluetooth: hci_sync: Push sync command cancellation to workqueue
|
|
general protection fault in percpu_ref_put
cgroups
|
2 |
C |
done |
|
412 |
1699d |
1709d
|
20/29 |
1540d |
78cc316e9583
bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt
|
|
WARNING: refcount bug in j1939_netdev_start (2)
can
|
13 |
syz |
error |
error |
51 |
1679d |
2326d
|
20/29 |
1540d |
d9d52a3ebd28
can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
|
|
INFO: rcu detected stall in newstat
fs
usb
|
1 |
C |
unreliable |
done |
4 |
1635d |
1758d
|
20/29 |
1540d |
476db72e5219
media: mceusb: return without resubmitting URB in case of -EPROTO error.
|
|
BUG: spinlock bad magic in synchronize_srcu
kvm-x86
|
4 |
C |
done |
done |
3254 |
1702d |
2072d
|
20/29 |
1540d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
INFO: task hung in do_proc_bulk
usb
|
1 |
syz |
inconclusive |
|
8 |
1667d |
1732d
|
20/29 |
1540d |
ae8709b296d8
USB: core: Make do_proc_control() and do_proc_bulk() killable
|
|
BUG: sleeping function called from invalid context in tipc_crypto_start
net
|
5 |
C |
done |
done |
6 |
1618d |
1625d
|
20/29 |
1540d |
f845fe5819ef
Revert "tipc: use consistent GFP flags"
|
|
general protection fault in ref_tracker_alloc
net
|
2 |
C |
done |
|
679 |
1596d |
1625d
|
20/29 |
1540d |
0976b888a150
ethtool: fix null-ptr-deref on ref tracker
|
|
INFO: task hung in io_uring_cancel_generic (2)
io-uring
fs
|
1 |
C |
done |
|
97 |
1624d |
1651d
|
20/29 |
1540d |
78a780602075
io_uring: ensure task_work gets run as part of cancelations
|
|
WARNING in perf_pending_event
perf
|
-1 |
C |
error |
|
3 |
1664d |
1659d
|
20/29 |
1540d |
73743c3b0922
perf: Ignore sigtrap for tracepoints destined for other tasks
|
|
INFO: rcu detected stall in io_wqe_worker (2)
fs
io-uring
|
1 |
C |
done |
|
2 |
1673d |
1673d
|
20/29 |
1540d |
c5e0321e43de
Revert "devlink: Remove not-executed trap policer notifications"
|
|
WARNING: kmalloc bug in bpf_check
bpf
|
-1 |
C |
done |
|
34 |
1714d |
1726d
|
20/29 |
1540d |
0e6491b55970
bpf: Add oversize check before call kvcalloc()
|
|
WARNING in hrtimer_forward
kernel
|
-1 |
C |
done |
done |
217 |
1585d |
2070d
|
20/29 |
1540d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
|
KMSAN: uninit-value in kvm_cpuid
kvm-x86
|
7 |
C |
|
|
22 |
1674d |
1699d
|
20/29 |
1540d |
e8a747d0884e
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
|
|
kernel panic: smack: Failed to initialize cipso DOI.
lsm
|
2 |
C |
done |
error |
128 |
1667d |
2248d
|
20/29 |
1540d |
f91488ee15bd
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
|
|
KMSAN: uninit-value in pneigh_fill_info
net
|
7 |
C |
|
|
14 |
1628d |
1632d
|
20/29 |
1540d |
e195e9b5dee6
net, neigh: clear whole pneigh_entry at alloc time
|
|
WARNING in z_erofs_lz4_decompress
erofs
|
-1 |
C |
|
|
2 |
1674d |
1676d
|
20/29 |
1540d |
a0961f351d82
erofs: don't trigger WARN() when decompression fails
|
|
KASAN: use-after-free Read in sixpack_close
hams
|
19 |
C |
done |
|
879 |
1649d |
1654d
|
20/29 |
1540d |
81b1d548d00b
hamradio: remove needs_free_netdev to avoid UAF
|
|
INFO: rcu detected stall in ieee80211_tasklet_handler
wireless
|
1 |
C |
error |
done |
74 |
1704d |
1984d
|
20/29 |
1540d |
313bbd1990b6
mac80211-hwsim: fix late beacon hrtimer handling
|
|
UBSAN: shift-out-of-bounds in nl802154_new_interface
wpan
|
-1 |
C |
inconclusive |
done |
879 |
1642d |
1920d
|
20/29 |
1540d |
451dc48c806a
net: ieee802154: handle iftypes as u32
|
|
possible deadlock in wake_up_all_idle_cpus
perf
|
4 |
C |
done |
|
14 |
1677d |
1684d
|
20/29 |
1540d |
96611c26dc35
sched: Improve wake_up_all_idle_cpus() take #2
|
|
KMSAN: uninit-value in snd_rawmidi_ioctl
sound
|
7 |
C |
|
|
1506 |
1558d |
1620d
|
20/29 |
1540d |
39a8fc4971a0
ALSA: rawmidi - fix the uninitalized user_pversion
|
|
KASAN: slab-out-of-bounds Read in hci_le_meta_evt (2)
bluetooth
|
17 |
C |
inconclusive |
|
2 |
1669d |
1668d
|
20/29 |
1540d |
3a56ef719f0b
Bluetooth: stop proccessing malicious adv data
|
|
general protection fault in nfc_alloc_send_skb
net
nfc
|
2 |
C |
done |
|
2 |
1608d |
1602d
|
20/29 |
1540d |
dded08927ca3
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
|
|
BUG: corrupted list in em28xx_init_extension
usb
media
|
8 |
C |
error |
|
18 |
1771d |
2315d
|
20/29 |
1540d |
2c98b8a3458d
media: em28xx: add missing em28xx_close_extension
|
|
possible deadlock in mptcp_close
mptcp
|
4 |
C |
done |
|
931 |
1698d |
1709d
|
20/29 |
1540d |
49054556289e
net: introduce and use lock_sock_fast_nested()
|
|
BUG: unable to handle kernel NULL pointer dereference in fifo_set_limit
net
|
10 |
C |
error |
|
1 |
1700d |
1700d
|
20/29 |
1540d |
560ee196fe9e
net_sched: fix NULL deref in fifo_set_limit()
|
|
general protection fault in ieee80211_assign_vif_chanctx
wireless
|
2 |
C |
inconclusive |
|
4 |
1678d |
1936d
|
20/29 |
1540d |
563fbefed46a
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
|
|
WARNING in rtnl_stats_get
net
|
-1 |
C |
unreliable |
|
31 |
1667d |
1856d
|
20/29 |
1540d |
0854a0513321
net: bridge: fix under estimation in br_get_linkxstats_size()
|
|
kernel BUG at net/phonet/socket.c:LINE!
net
|
-1 |
C |
inconclusive |
|
168 |
1617d |
2238d
|
20/29 |
1540d |
75a2f3152009
phonet/pep: refuse to enable an unbound pipe
|
|
possible deadlock in io_poll_double_wake (3)
io-uring
fs
|
4 |
C |
error |
done |
703 |
1596d |
1869d
|
20/29 |
1540d |
aa43477b0402
io_uring: poll rework
|
|
KASAN: use-after-free Read in nf_tables_dump_sets
netfilter
|
19 |
syz |
done |
done |
1 |
1723d |
1751d
|
20/29 |
1540d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
KASAN: use-after-free Read in __lock_sock
sctp
|
19 |
syz |
done |
error |
26 |
1932d |
2748d
|
20/29 |
1540d |
5ec7d18d1813
sctp: use call_rcu to free endpoint
|
|
KMSAN: uninit-value in fib_get_nhs
net
|
7 |
C |
|
|
14 |
1558d |
1629d
|
20/29 |
1540d |
7a3429bace0e
ipv4: Check attribute length for RTA_GATEWAY in multipath route
|
|
WARNING in sk_stream_kill_queues (7)
net
|
-1 |
C |
|
|
6689 |
1541d |
1659d
|
20/29 |
1540d |
c4777efa751d
net: add and use skb_unclone_keeptruesize() helper
|
|
WARNING in batadv_nc_mesh_free
batman
|
-1 |
C |
inconclusive |
|
1 |
1678d |
1678d
|
20/29 |
1540d |
6f68cd634856
net: batman-adv: fix error handling
|
|
KASAN: use-after-free Read in vlan_dev_real_dev (2)
net
|
19 |
C |
error |
|
7 |
1677d |
1688d
|
20/29 |
1540d |
563bcbae3ba2
net: vlan: fix a UAF in vlan_dev_real_dev()
|
|
KASAN: null-ptr-deref Write in __pm_runtime_resume
pm
|
12 |
C |
done |
|
108 |
1555d |
1733d
|
20/29 |
1540d |
2fc7acb69fa3
Bluetooth: hci_uart: fix GPF in h5_recv
|
|
UBSAN: shift-out-of-bounds in xfrm_get_default
net
|
-1 |
C |
done |
|
104 |
1692d |
1730d
|
20/29 |
1540d |
3c10ffddc61f
net: xfrm: fix shift-out-of-bounds in xfrm_get_default
|
|
WARNING in new_slab
mm
|
-1 |
C |
inconclusive |
|
2 |
1588d |
1618d
|
20/29 |
1540d |
c12837d1bb31
ref_tracker: use __GFP_NOFAIL more carefully
|
|
INFO: task hung in hwrng_register
crypto
usb
|
1 |
syz |
unreliable |
done |
1 |
1687d |
1743d
|
20/29 |
1540d |
2bb31abdbe55
hwrng: virtio - don't wait on cleanup
|
|
WARNING in ref_tracker_free
net
|
-1 |
C |
done |
|
14831 |
1598d |
1625d
|
20/29 |
1540d |
123e495ecc25
net: linkwatch: be more careful about dev->linkwatch_dev_tracker
|
|
WARNING in bpf_warn_invalid_xdp_action
|
-1 |
C |
done |
done |
8941 |
1597d |
2316d
|
20/29 |
1540d |
2cbad989033b
bpf: Do not WARN in bpf_warn_invalid_xdp_action()
|
|
INFO: rcu detected stall in br_multicast_query_expired
kernel
|
1 |
C |
inconclusive |
|
2 |
1618d |
1618d
|
20/29 |
1540d |
f83a112bd91a
net: bridge: mcast: add and enforce startup query interval minimum
|
|
unregister_netdevice: waiting for DEV to become free (6)
|
2 |
C |
error |
|
13128 |
1540d |
1659d
|
20/29 |
1540d |
34ac17ecbf57
ethtool: use ethnl_parse_header_dev_put()
|
|
WARNING in trc_read_check_handler
kernel
|
-1 |
C |
unreliable |
done |
40 |
1667d |
1756d
|
20/29 |
1540d |
96017bf90397
rcu-tasks: Simplify trc_read_check_handler() atomic operations
|
|
WARNING: held lock freed in spi_unregister_controller
spi
usb
|
4 |
C |
inconclusive |
|
251 |
1640d |
1680d
|
20/29 |
1540d |
6c53b45c71b4
spi: fix use-after-free of the add_lock mutex
|
|
kernel BUG in find_lock_entries
mm
|
-1 |
C |
done |
|
10 |
1588d |
1751d
|
20/29 |
1540d |
d417b49fff3e
mm/filemap.c: remove bogus VM_BUG_ON
|
|
WARNING in __nf_unregister_net_hook (4)
netfilter
|
-1 |
C |
error |
|
66 |
1542d |
1872d
|
20/29 |
1540d |
68a3765c659f
netfilter: nf_tables: skip netdev events generated on netns removal
|
|
WARNING in gnet_stats_add_basic
net
|
-1 |
C |
done |
|
14 |
1681d |
1681d
|
20/29 |
1540d |
e22db7bd552f
net: sched: Allow statistics reads from softirq.
|
|
WARNING in isotp_tx_timer_handler
can
|
-1 |
C |
error |
|
1553 |
1540d |
1983d
|
20/29 |
1540d |
9acf636215a6
can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
|
|
general protection fault in hrtimer_active (3)
kernel
|
2 |
syz |
done |
error |
34 |
1575d |
1880d
|
20/29 |
1540d |
e28587cc491e
sit: do not call ipip6_dev_free() from sit_init_net()
|
|
INFO: task hung in io_wqe_worker
fs
io-uring
|
1 |
C |
unreliable |
|
3 |
1682d |
1678d
|
20/29 |
1540d |
1d5f5ea7cb7d
io-wq: remove worker to owner tw dependency
|
|
BUG: corrupted list in netif_napi_add
net
|
8 |
syz |
unreliable |
done |
17 |
1655d |
1686d
|
20/29 |
1540d |
0315a075f134
net: fix premature exit from NAPI state polling in napi_disable()
|
|
WARNING in fuse_evict_inode
fuse
|
-1 |
C |
done |
|
43 |
1677d |
1682d
|
20/29 |
1540d |
5c791fe1e2a4
fuse: make sure reclaim doesn't write the inode
|
|
KASAN: use-after-free Read in bdev_free_inode
block
|
19 |
syz |
error |
|
7 |
1691d |
1710d
|
20/29 |
1540d |
06cc978d3ff2
block: genhd: fix double kfree() in __alloc_disk_node()
|
|
general protection fault in scsi_queue_rq
fuse
scsi
|
2 |
C |
done |
done |
4000 |
1657d |
2052d
|
20/29 |
1540d |
20aaef52eb08
scsi: scsi_ioctl: Validate command size
|
|
INFO: task can't die in __cond_resched
net
|
1 |
C |
error |
|
66 |
1655d |
1709d
|
20/29 |
1540d |
e9edc188fc76
netfilter: conntrack: serialize hash resizes and cleanups
|
|
BUG: unable to handle kernel NULL pointer dereference in bpf
|
10 |
C |
done |
|
753 |
1598d |
1669d
|
20/29 |
1540d |
ad10c381d133
bpf: Add missing map_delete_elem method to bloom filter map
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_prog_put
bpf
|
17 |
C |
done |
|
2 |
1620d |
1619d
|
20/29 |
1540d |
218d747a4142
bpf, sockmap: Fix double bpf_prog_put on error case in map_link
|
|
general protection fault in nf_tables_dump_tables
netfilter
|
2 |
syz |
done |
done |
4 |
1705d |
1705d
|
20/29 |
1540d |
a499b03bf36b
netfilter: nf_tables: unlink table before deleting it
|
|
BUG: unable to handle kernel NULL pointer dereference in unix_shutdown
net
|
10 |
C |
unreliable |
|
413 |
1737d |
1739d
|
20/29 |
1583d |
d359902d5c35
af_unix: Fix NULL pointer bug in unix_shutdown
|
|
kernel BUG at mm/vmalloc.c:LINE! (2)
mm
|
-1 |
C |
done |
done |
6605 |
1736d |
2146d
|
20/29 |
1583d |
537cf4e3cc2f
xsk: Fix umem cleanup bug at socket destruct
|
|
memory leak in __pskb_copy_fclone
wpan
|
3 |
C |
|
|
21 |
1778d |
1920d
|
20/29 |
1600d |
1090340f7ee5
net: Fix memory leak in ieee802154_raw_deliver
|
|
WARNING in rtl28xxu_ctrl_msg/usb_submit_urb
usb
|
-1 |
C |
|
|
50 |
1781d |
1829d
|
20/29 |
1658d |
76f22c93b209
media: rtl28xxu: fix zero-length control request
media: rtl28xxu: fix zero-length control request
|
|
WARNING in hso_free_net_device
usb
|
-1 |
C |
error |
|
528 |
1777d |
2457d
|
20/29 |
1658d |
788e67f18d79
usb: hso: fix error handling code of hso_create_net_device
usb: hso: fix error handling code of hso_create_net_device
|
|
KASAN: null-ptr-deref Read in filp_close (2)
fs
|
19 |
C |
|
|
3 |
1779d |
1888d
|
20/29 |
1658d |
3b0462726e7e
cgroup: verify that source is a string
9b5b872215fe
file: fix close_range() for unshare+cloexec
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (2)
bluetooth
|
5 |
C |
done |
error |
19391 |
1750d |
2285d
|
20/29 |
1658d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
KASAN: use-after-free Write in dec_rlimit_ucounts
kernel
|
22 |
C |
|
|
4 |
1741d |
1775d
|
20/29 |
1658d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
bbb6d0f3e1fe
ucounts: Increase ucounts reference counter before the security hook
|
|
KASAN: use-after-free Read in cipso_v4_genopt
lsm
net
|
19 |
C |
inconclusive |
|
5 |
1910d |
1911d
|
20/29 |
1659d |
ad5d07f4a9cd
cipso,calipso: resolve a number of problems with the DOI refcounts
1165affd4848
net: mac802154: Fix general protection fault
|
|
memory leak in kobject_set_name_vargs (4)
kernel
|
3 |
C |
|
|
171 |
1726d |
2013d
|
20/29 |
1659d |
8fd0c1b0647a
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
|
|
WARNING in destroy_conntrack
netfilter
|
-1 |
C |
done |
|
1 |
1753d |
1751d
|
20/29 |
1659d |
e3245a7b7b34
netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
|
|
general protection fault in hwsim_del_edge_nl
wpan
|
2 |
C |
done |
|
3 |
1804d |
1804d
|
20/29 |
1659d |
0303b30375df
ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
|
|
KMSAN: uninit-value in number (3)
media
|
7 |
C |
|
|
8575 |
1659d |
1903d
|
20/29 |
1659d |
eaaea4681984
media: gspca/sq905.c: fix uninitialized variable
|
|
WARNING in idr_get_next
arm-msm
net
|
-1 |
C |
error |
done |
21 |
1850d |
2094d
|
20/29 |
1659d |
3cbf7530a163
qrtr: Convert qrtr_ports from IDR to XArray
|
|
KASAN: null-ptr-deref Read in phy_disconnect
net
usb
|
11 |
C |
|
|
255 |
1726d |
1730d
|
20/29 |
1659d |
1406e8cb4b05
net: usb: asix: do not call phy_disconnect() for ax88178
|
|
WARNING in ex_handler_fprestore
kernel
|
-1 |
C |
done |
|
5 |
1821d |
1829d
|
20/29 |
1659d |
484cea4f362e
x86/fpu: Prevent state corruption in __fpu__restore_sig()
|
|
KMSAN: uninit-value in hsr_fill_frame_info
net
|
7 |
C |
|
|
249 |
1776d |
2074d
|
20/29 |
1659d |
2e9f60932a2c
net: hsr: check skb can contain struct hsr_ethhdr in fill_frame_info
|
|
possible deadlock in snd_timer_interrupt
sound
|
4 |
C |
done |
|
41 |
1666d |
1766d
|
20/29 |
1659d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING: refcount bug in ip6_tnl_dev_uninit
net
|
13 |
C |
done |
|
16 |
1882d |
1887d
|
20/29 |
1659d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
WARNING in bpf_bprintf_prepare
bpf
|
-1 |
C |
unreliable |
|
96 |
1804d |
1842d
|
20/29 |
1659d |
e2d5b2bb769f
bpf: Fix nested bpf_bprintf_prepare with more per-cpu buffers
|
|
KASAN: use-after-free Read in snd_seq_timer_interrupt (2)
sound
|
19 |
C |
inconclusive |
|
2 |
1816d |
1814d
|
20/29 |
1659d |
83e197a8414c
ALSA: seq: Fix race of snd_seq_timer_open()
|
|
possible deadlock in hfs_find_init
hfs
|
4 |
C |
done |
error |
1 |
1965d |
2956d
|
20/29 |
1659d |
b3b2177a2d79
hfs: add lock nesting notation to hfs_find_init
|
|
KASAN: slab-out-of-bounds Read in add_del_if
bridge
|
17 |
C |
unreliable |
|
970 |
1750d |
1727d
|
20/29 |
1659d |
9384eacd80f3
net: core: don't call SIOCBRADD/DELIF for non-bridge devices
|
|
memory leak in zr364xx_start_readpipe
media
usb
|
3 |
C |
|
|
2 |
1808d |
1835d
|
20/29 |
1659d |
0a045eac8d04
media: zr364xx: fix memory leak in zr364xx_start_readpipe
|
|
KASAN: use-after-free Write in alloc_ucounts
exfat
|
22 |
syz |
|
|
7 |
1757d |
1775d
|
20/29 |
1659d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
|
UBSAN: shift-out-of-bounds in ___bpf_prog_run
bpf
|
-1 |
C |
unreliable |
|
38 |
1793d |
1903d
|
20/29 |
1659d |
28131e9d9333
bpf: Fix up register-based shifts in interpreter to silence KUBSAN
|
|
memory leak in garp_request_join
net
|
3 |
C |
|
|
414 |
1788d |
2311d
|
20/29 |
1659d |
42ca63f98084
net/802/garp: fix memleak in garp_request_join()
|
|
memory leak in pcan_usb_fd_init
usb
can
|
3 |
C |
|
|
19 |
1923d |
1992d
|
20/29 |
1659d |
a0b96b4a6274
drivers: net: fix memory leak in peak_usb_create_dev
|
|
unregister_netdevice: waiting for DEV to become free (5)
|
2 |
C |
done |
|
40035 |
1659d |
1904d
|
20/29 |
1659d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
WARNING in dtv5100_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
51 |
1780d |
1826d
|
20/29 |
1659d |
8c8b9a9be2af
media: dtv5100: fix control-request directions
|
|
memory leak in io_sqe_buffers_register
fs
|
3 |
C |
|
|
2 |
1852d |
1853d
|
20/29 |
1659d |
bb6659cc0ad3
io_uring: Fix memory leak in io_sqe_buffers_register()
|
|
BUG: using smp_processor_id() in preemptible code in clock_was_set
kernel
|
4 |
C |
done |
|
231 |
1747d |
1748d
|
20/29 |
1659d |
9482fd71dbb8
hrtimer: Use raw_cpu_ptr() in clock_was_set()
|
|
KMSAN: uninit-value in virtio_net_hdr_to_skb
net
|
7 |
C |
|
|
325 |
1777d |
1835d
|
20/29 |
1659d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
memory leak in kvm_dev_ioctl
kvm
|
3 |
C |
|
|
37 |
1777d |
1789d
|
20/29 |
1659d |
004d62eb4e57
kvm: debugfs: fix memory leak in kvm_create_vm_debugfs
|
|
WARNING in blk_rq_append_bio
block
usb
|
-1 |
C |
done |
|
6 |
1870d |
1835d
|
20/29 |
1659d |
cbb749cf377a
block: remove an incorrect check from blk_rq_append_bio
|
|
INFO: task hung in ext4_put_super
ext4
|
1 |
C |
inconclusive |
done |
1 |
1806d |
1835d
|
20/29 |
1659d |
618f003199c6
ext4: fix memory leak in ext4_fill_super
|
|
WARNING in io_link_timeout_fn
fs
io-uring
|
-1 |
C |
done |
|
2 |
1840d |
1840d
|
20/29 |
1659d |
447c19f3b507
io_uring: fix ltout double free on completion race
|
|
KASAN: slab-out-of-bounds Write in ext4_write_inline_data_end
ext4
|
21 |
C |
done |
|
1 |
1742d |
1742d
|
20/29 |
1659d |
a54c4613dac1
ext4: fix race writing to an inline_data file while its xattrs are changing
|
|
general protection fault in nl802154_del_llsec_devkey
wpan
|
8 |
C |
inconclusive |
|
229 |
1872d |
1924d
|
20/29 |
1659d |
27c746869e1a
net: ieee802154: fix nl802154 del llsec devkey
|
|
WARNING in exception_type
kvm-x86
|
-1 |
C |
error |
|
1 |
1731d |
1731d
|
20/29 |
1659d |
e7177339d7b5
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
|
|
memory leak in hwsim_add_one
wpan
|
3 |
C |
|
|
1 |
1816d |
1814d
|
20/29 |
1659d |
28a5501c3383
ieee802154: hwsim: Fix memory leak in hwsim_add_one
|
|
WARNING in taprio_change
|
-1 |
C |
done |
|
746 |
1845d |
2081d
|
20/29 |
1659d |
ed8157f1ebf1
net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
|
|
KASAN: out-of-bounds Read in leaf_paste_entries
fs
|
17 |
C |
inconclusive |
|
8 |
1691d |
1922d
|
20/29 |
1659d |
13d257503c09
reiserfs: check directory items on read from disk
|
|
kernel BUG in llc_sap_action_send_xid_c
net
|
-1 |
C |
error |
|
61 |
1659d |
1873d
|
20/29 |
1659d |
c7c9d2102c9c
net: llc: fix skb_over_panic
|
|
BUG: unable to handle kernel NULL pointer dereference in htb_select_queue
net
|
10 |
syz |
done |
|
8 |
1889d |
1904d
|
20/29 |
1659d |
fb3a3e37de33
sch_htb: Fix offload cleanup in htb_destroy on htb_init failure
93bde210c434
sch_htb: Fix select_queue for non-offload mode
|
|
WARNING in netlbl_cipsov4_add
|
-1 |
C |
inconclusive |
|
4433 |
1722d |
1922d
|
20/29 |
1659d |
8ca34a13f7f9
net: cipso: fix warnings in netlbl_cipsov4_add_std
|
|
general protection fault in io_commit_cqring (2)
io-uring
fs
|
12 |
C |
done |
|
82 |
1871d |
1885d
|
20/29 |
1659d |
51520426f4bc
io_uring: handle setup-failed ctx in kill_timeouts
|
|
memory leak in __ieee80211_beacon_get
wireless
|
3 |
syz |
|
|
14 |
1814d |
1935d
|
20/29 |
1659d |
bd18de517923
mac80211_hwsim: drop pending frames on stop
|
|
KASAN: use-after-free Write in sk_psock_stop
bpf
net
|
22 |
syz |
done |
|
74 |
1857d |
1877d
|
20/29 |
1659d |
aadb2bb83ff7
sock_map: Fix a potential use-after-free in sock_map_close()
|
|
INFO: task hung in io_sq_thread_park (2)
fs
io-uring
|
1 |
syz |
done |
|
2 |
1781d |
1777d
|
20/29 |
1659d |
46fee9ab02cb
io_uring: remove double poll entry on arm failure
|
|
INFO: rcu detected stall in wg_packet_tx_worker (3)
net
|
1 |
C |
inconclusive |
|
5 |
1745d |
1727d
|
20/29 |
1659d |
c7c5e6ff533f
fq_codel: reject silly quantum parameters
|
|
WARNING: refcount bug in vti6_dev_uninit
net
|
13 |
C |
|
|
26 |
1882d |
1887d
|
20/29 |
1659d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
memory leak in smsc75xx_bind
usb
|
3 |
syz |
|
|
2 |
1828d |
1829d
|
20/29 |
1659d |
46a8b29c6306
net: usb: fix memory leak in smsc75xx_bind
|
|
memory leak in mcba_usb_probe
usb
|
3 |
C |
|
|
34 |
1806d |
1983d
|
20/29 |
1659d |
91c02557174b
can: mcba_usb: fix memory leak in mcba_usb
|
|
KMSAN: kernel-infoleak in i2cdev_read
i2c
|
9 |
C |
|
|
592 |
1776d |
1901d
|
20/29 |
1659d |
86ff25ed6cd8
i2c: dev: zero out array used for i2c reads from userspace
|
|
general protection fault in unix_dgram_connect
net
|
2 |
C |
done |
|
2 |
1733d |
1733d
|
20/29 |
1659d |
dc56ad7028c5
af_unix: fix potential NULL deref in unix_dgram_connect()
|
|
WARNING in __percpu_ref_exit (2)
fs
|
-1 |
C |
error |
done |
31 |
1660d |
1898d
|
20/29 |
1659d |
a298232ee6b9
io_uring: fix link timeout refs
|
|
WARNING in cfg80211_connect
|
-1 |
C |
done |
|
2320 |
1872d |
2064d
|
20/29 |
1659d |
1b5ab825d9ac
cfg80211: remove WARN_ON() in cfg80211_sme_connect
|
|
BUG: unable to handle kernel paging request in vga16fb_fillrect
fbdev
|
8 |
C |
inconclusive |
|
14 |
1661d |
1778d
|
20/29 |
1659d |
8c28051cdcbe
fbmem: don't allow too huge resolutions
|
|
BUG: unable to handle kernel paging request in csum_partial (3)
kernel
|
8 |
C |
done |
|
1 |
1746d |
1777d
|
20/29 |
1659d |
9cf448c200ba
ip6_gre: add validation for csum_start
1d011c4803c7
ip_gre: add validation for csum_start
|
|
WARNING in hid_submit_ctrl/usb_submit_urb
input
usb
|
-1 |
C |
done |
|
38 |
1725d |
1773d
|
20/29 |
1659d |
0a824efdb724
HID: usbhid: Fix warning caused by 0-length input reports
|
|
WARNING in ext4_xattr_set_entry
ext4
|
-1 |
C |
unreliable |
|
7 |
1908d |
1991d
|
20/29 |
1659d |
6b22489911b7
ext4: do not try to set xattr into ea_inode if value is empty
|
|
memory leak in nfcmrvl_nci_register_dev
usb
|
3 |
C |
|
|
9 |
1926d |
1971d
|
20/29 |
1659d |
e0652f8bb44d
NFC: nci: fix memory leak in nci_allocate_device
|
|
WARNING in kvm_wait
kvm
|
-1 |
C |
error |
|
119882 |
1888d |
1905d
|
20/29 |
1659d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
general protection fault in ieee802154_llsec_parse_key_id
wpan
|
11 |
C |
inconclusive |
|
92 |
1819d |
1920d
|
20/29 |
1659d |
6f7f657f2440
net: ieee802154: nl-mac: fix check on panid
|
|
memory leak in xfrm_user_rcv_msg
net
|
3 |
C |
|
|
1 |
1803d |
1799d
|
20/29 |
1659d |
7c1a80e80cde
net: xfrm: fix memory leak in xfrm_user_rcv_msg
|
|
memory leak in bpf (2)
bpf
|
3 |
C |
|
|
3 |
1813d |
1882d
|
20/29 |
1659d |
ccff81e1d028
bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
|
|
possible deadlock in __fs_reclaim_acquire
mm
|
4 |
syz |
unreliable |
|
672 |
1776d |
1788d
|
20/29 |
1659d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
general protection fault in btf_type_id_size
bpf
|
2 |
C |
unreliable |
|
6 |
1909d |
1906d
|
20/29 |
1659d |
350a5c4dd245
bpf: Dont allow vmlinux BTF to be used in map_create and prog_load.
|
|
memory leak in tty_init_dev
serial
|
3 |
C |
|
|
9 |
1818d |
2462d
|
20/29 |
1659d |
58af3d3d54e8
net: caif: fix memory leak in ldisc_open
|
|
INFO: task hung in __io_uring_cancel
fs
io-uring
|
1 |
C |
done |
|
5 |
1797d |
1863d
|
20/29 |
1659d |
28090c133869
io_uring: fix work_exit sqpoll cancellations
|
|
divide error in __tcp_select_window (2)
net
|
2 |
C |
done |
|
4 |
1873d |
1874d
|
20/29 |
1659d |
a7150e382267
Revert "tcp: Reset tcp connections in SYN-SENT state"
|
|
KASAN: use-after-free Read in tipc_recvmsg
tipc
|
19 |
C |
done |
|
2198 |
1765d |
1773d
|
20/29 |
1659d |
cc19862ffe45
tipc: fix an use-after-free issue in tipc_recvmsg
|
|
general protection fault in br_switchdev_fdb_notify
bridge
|
2 |
C |
error |
|
82 |
1754d |
1759d
|
20/29 |
1659d |
0541a6293298
net: bridge: validate the NUD_PERMANENT bit when adding an extern_learn FDB entry
|
|
memory leak in create_io_worker
io-uring
fs
|
3 |
C |
|
|
5 |
1682d |
1721d
|
20/29 |
1659d |
66e70be72288
io-wq: fix memory leak in create_io_worker()
|
|
INFO: trying to register non-static key in l2cap_chan_del
bluetooth
|
-1 |
syz |
inconclusive |
|
73 |
1902d |
2120d
|
20/29 |
1659d |
3af70b39fa2d
Bluetooth: check for zapped sk before connecting
|
|
KMSAN: uninit-value in ip_rcv_core
net
|
7 |
C |
|
|
141 |
1776d |
2809d
|
20/29 |
1659d |
6628ddfec758
net: geneve: check skb is large enough for IPv4/IPv6 header
|
|
memory leak in hdcs_probe_1020
usb
media
|
3 |
C |
|
|
1 |
1886d |
1882d
|
20/29 |
1659d |
4f4e6644cd87
media: gscpa/stv06xx: fix memory leak
|
|
WARNING in ieee802154_get_llsec_params
wpan
|
-1 |
C |
done |
|
36 |
1872d |
1918d
|
20/29 |
1659d |
1534efc7bbc1
net: ieee802154: stop dump llsec params for monitors
|
|
WARNING in slave_kobj_release
net
|
-1 |
C |
done |
|
3 |
1837d |
1925d
|
20/29 |
1659d |
35d96e631860
bonding: init notify_work earlier to avoid uninitialized use
|
|
WARNING in io_wqe_enqueue
io-uring
fs
|
-1 |
C |
done |
|
13 |
1818d |
1818d
|
20/29 |
1659d |
e6ab8991c5d0
io_uring: fix false WARN_ONCE
|
|
KASAN: use-after-free Write in get_ucounts
kernel
|
22 |
syz |
unreliable |
done |
7 |
1756d |
1784d
|
20/29 |
1659d |
345daff2e994
ucounts: Fix race condition between alloc_ucounts and put_ucounts
|
|
divide error in nft_limit_init
netfilter
|
2 |
C |
done |
|
4 |
1872d |
1873d
|
20/29 |
1659d |
b895bdf5d643
netfilter: nft_limit: avoid possible divide error in nft_limit_init
|
|
BUG: unable to handle kernel paging request in cap_capable
lsm
|
8 |
C |
unreliable |
|
4 |
1756d |
1756d
|
20/29 |
1659d |
9384eacd80f3
net: core: don't call SIOCBRADD/DELIF for non-bridge devices
|
|
KASAN: slab-out-of-bounds Write in xt_compat_target_from_user
netfilter
|
21 |
C |
error |
error |
1 |
2109d |
2108d
|
20/29 |
1659d |
b29c457a6511
netfilter: x_tables: fix compat match/target pad out-of-bound write
|
|
KASAN: use-after-free Read in eth_header_parse_protocol
net
|
19 |
C |
done |
|
1453 |
1857d |
1903d
|
20/29 |
1659d |
61431a5907fc
net: ensure mac header is set in virtio_net_hdr_to_skb()
|
|
KMSAN: uninit-value in pegasus_probe
usb
|
7 |
C |
|
|
258 |
1757d |
2427d
|
20/29 |
1659d |
af35fc37354c
net: pegasus: fix uninit-value in get_interrupt_interval
|
|
general protection fault in magicmouse_remove
usb
input
|
2 |
C |
|
|
47 |
1809d |
1836d
|
20/29 |
1659d |
4b4f6cecca44
HID: magicmouse: fix NULL-deref on disconnect
|
|
KASAN: use-after-free Read in nbd_genl_connect (2)
nbd
|
19 |
C |
unreliable |
|
6 |
1736d |
1736d
|
20/29 |
1659d |
7ee656c3ac3d
nbd: remove nbd->destroy_complete
|
|
KASAN: use-after-free Read in ntfs_iget (2)
ntfs3
|
19 |
C |
inconclusive |
|
2 |
1818d |
1814d
|
20/29 |
1659d |
d98e4d95411b
ntfs: fix validity check for file name attribute
|
|
UBSAN: shift-out-of-bounds in ext4_mb_init
ext4
|
-1 |
C |
done |
|
5 |
1930d |
1941d
|
20/29 |
1659d |
f91436d55a27
fs/ext4: fix integer overflow in s_log_groups_per_flex
|
|
memory leak in __send_signal
kernel
|
3 |
syz |
|
|
3 |
1801d |
1815d
|
20/29 |
1659d |
399f8dd9a866
signal: Prevent sigqueue caching after task got released
|
|
WARNING in ieee80211_free_ack_frame
wireless
|
-1 |
syz |
done |
|
117 |
1663d |
2058d
|
20/29 |
1659d |
bd18de517923
mac80211_hwsim: drop pending frames on stop
|
|
WARNING in batadv_iv_send_outstanding_bat_ogm_packet
batman
|
-1 |
C |
done |
|
12568 |
1791d |
2417d
|
20/29 |
1659d |
9f460ae31c44
batman-adv: Avoid WARN_ON timing related checks
|
|
WARNING in io_poll_double_wake
fs
io-uring
|
-1 |
C |
done |
done |
1124 |
1761d |
1862d
|
20/29 |
1659d |
a890d01e4ee0
io_uring: fix poll requests leaking second poll entries
|
|
WARNING: refcount bug in ip6gre_tunnel_uninit
net
|
13 |
C |
error |
|
10 |
1884d |
1887d
|
20/29 |
1659d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
memory leak in dvb_create_media_graph
usb
media
|
3 |
C |
|
|
26 |
1865d |
2022d
|
20/29 |
1659d |
bf9a40ae8d72
media: dvbdev: Fix memory leak in dvb_media_device_free()
|
|
WARNING in vkms_vblank_simulate (2)
dri
|
-1 |
C |
error |
|
77748 |
1659d |
2034d
|
20/29 |
1659d |
b4142fc4d52d
drm/vkms: fix misuse of WARN_ON
|
|
memory leak in hdcs_probe_1x00
media
usb
|
3 |
C |
|
|
1 |
1915d |
1915d
|
20/29 |
1659d |
4f4e6644cd87
media: gscpa/stv06xx: fix memory leak
|
|
WARNING in osif_probe/usb_submit_urb
usb
|
-1 |
C |
|
|
45 |
1784d |
1829d
|
20/29 |
1659d |
4ca070ef0dd8
i2c: robotfuzz-osif: fix control-request directions
|
|
general protection fault in cdev_del (2)
fs
|
11 |
C |
error |
|
45 |
1793d |
2071d
|
20/29 |
1659d |
8a12f8836145
net: hso: fix null-ptr-deref during tty device unregistration
0a360e8b65d6
tty: n_gsm: check error while registering tty devices
|
|
general protection fault in nl802154_del_llsec_dev
wpan
|
8 |
C |
inconclusive |
|
166 |
1872d |
1923d
|
20/29 |
1659d |
3d1eac2f4558
net: ieee802154: fix nl802154 del llsec dev
|
|
WARNING: ODEBUG bug in __sk_destruct (2)
can
|
-1 |
C |
done |
done |
62 |
1669d |
1866d
|
20/29 |
1659d |
14a4696bc311
can: isotp: isotp_release(): omit unintended hrtimer restart on socket release
|
|
INFO: task hung in io_wq_put_and_exit
io-uring
fs
|
1 |
C |
unreliable |
|
628 |
1660d |
1721d
|
20/29 |
1659d |
3b33e3f4a6c0
io-wq: fix silly logic error in io_task_work_match()
|
|
KASAN: use-after-free Read in bcm_rx_handler
can
|
19 |
syz |
done |
|
2 |
1811d |
1841d
|
20/29 |
1659d |
d5f9023fa61e
can: bcm: delay release of struct bcm_op after synchronize_rcu()
|
|
possible deadlock in do_fcntl
usb
fs
|
4 |
C |
done |
|
245 |
1735d |
2067d
|
20/29 |
1659d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
WARNING in qt2_attach/usb_submit_urb
usb
|
-1 |
C |
|
|
171 |
1808d |
1829d
|
20/29 |
1659d |
eb8dbe80326c
USB: serial: quatech2: fix control-request directions
|
|
BUG: sleeping function called from invalid context in stack_depot_save
mm
|
5 |
C |
unreliable |
|
8490 |
1758d |
1788d
|
20/29 |
1659d |
187ad460b841
mm/page_alloc: avoid page allocator recursion with pagesets.lock held
|
|
memory leak in hub_event (2)
usb
|
3 |
C |
|
|
2 |
1896d |
1899d
|
20/29 |
1659d |
dcb4b8ad6a44
misc/uss720: fix memory leak in uss720_probe
|
|
memory leak in usb_set_configuration (2)
usb
|
3 |
C |
|
|
2 |
1753d |
1861d
|
20/29 |
1659d |
be8656e62e9e
media: cpia2: fix memory leak in cpia2_usb_probe
|
|
WARNING in usb_new_device/usb_submit_urb
usb
|
-1 |
C |
|
|
2 |
1823d |
1819d
|
20/29 |
1659d |
60dfe484cef4
USB: core: Avoid WARNings for 0-length descriptor requests
|
|
WARNING in rtl8152_probe
usb
|
-1 |
C |
|
|
23 |
1817d |
1841d
|
20/29 |
1659d |
1a44fb38cc65
r8152: check the informaton of the device
|
|
inconsistent lock state in sco_sock_timeout
bluetooth
|
4 |
C |
done |
|
16 |
1764d |
2108d
|
20/29 |
1659d |
ba316be1b6a0
Bluetooth: schedule SCO timeouts with delayed_work
|
|
WARNING in ieee80211_get_sband
wireless
|
-1 |
C |
done |
|
7 |
1827d |
2052d
|
20/29 |
1659d |
0ee4d55534f8
mac80211: remove warning in ieee80211_get_sband()
|
|
general protection fault in hci_release_dev
bluetooth
|
2 |
C |
done |
|
41 |
1738d |
1759d
|
20/29 |
1659d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
WARNING in do_proc_control/usb_submit_urb
usb
|
-1 |
C |
error |
|
456 |
1768d |
1781d
|
20/29 |
1659d |
b0863f192732
USB: core: Fix incorrect pipe calculation in do_proc_control()
|
|
memory leak in skb_clone
wpan
|
3 |
C |
|
|
2 |
1768d |
1873d
|
20/29 |
1659d |
1090340f7ee5
net: Fix memory leak in ieee802154_raw_deliver
|
|
general protection fault in try_grab_compound_head
io-uring
mm
|
7 |
C |
done |
|
5 |
1760d |
1788d
|
20/29 |
1659d |
d08af0a59684
mm/hugetlb: fix refs calculation from unaligned @vaddr
|
|
BUG: using smp_processor_id() in preemptible code in radix_tree_node_alloc
net
arm-msm
|
4 |
C |
done |
done |
544 |
1845d |
2182d
|
20/29 |
1659d |
3cbf7530a163
qrtr: Convert qrtr_ports from IDR to XArray
|
|
general protection fault in reiserfs_security_init
reiserfs
|
2 |
C |
done |
|
26311 |
1882d |
2074d
|
20/29 |
1659d |
5e46d1b78a03
reiserfs: update reiserfs_xattrs_initialized() condition
|
|
KASAN: slab-out-of-bounds Read in do_wait_for_common
staging
usb
|
19 |
C |
error |
|
5 |
1753d |
1772d
|
20/29 |
1659d |
e9e6aa51b273
staging: rtl8712: error handling refactoring
|
|
BUG: sleeping function called from invalid context in __alloc_skb
netfilter
|
5 |
C |
done |
|
33 |
1706d |
1848d
|
20/29 |
1659d |
7072a355ba19
netfilter: nfnetlink: add a missing rcu_read_unlock()
|
|
WARNING in do_proc_bulk
mm
|
-1 |
C |
inconclusive |
|
3 |
1850d |
1850d
|
20/29 |
1659d |
4f2629ea67e7
USB: usbfs: Don't WARN about excessively large memory allocations
|
|
BUG: unable to handle kernel paging request in corrupted (3)
|
8 |
C |
done |
|
45 |
1667d |
1836d
|
20/29 |
1659d |
7a274727702c
io_uring: don't modify req->poll for rw
|
|
BUG: unable to handle kernel NULL pointer dereference in kiocb_done
fs
io-uring
|
10 |
C |
unreliable |
done |
3 |
1727d |
1726d
|
20/29 |
1659d |
b8ce1b9d25cc
io_uring: don't submit half-prepared drain request
|
|
general protection fault in smc_tx_sendmsg
smc
|
2 |
C |
done |
|
6369 |
1793d |
1801d
|
20/29 |
1659d |
17081633e22d
net/smc: Ensure correct state of the socket in send path
|
|
UBSAN: array-index-out-of-bounds in ima_inode_setxattr
lsm
integrity
|
15 |
C |
unreliable |
|
6 |
1740d |
1741d
|
20/29 |
1659d |
cb181da16196
IMA: reject unknown hash algorithms in ima_get_hash_algo
|
|
memory leak in em28xx_dvb_init
media
usb
|
3 |
C |
|
|
1 |
1898d |
1898d
|
20/29 |
1659d |
0ae10a7dc899
media: em28xx: fix memory leak
|
|
memory leak in qrtr_create
arm-msm
net
|
3 |
C |
|
|
3 |
1763d |
1933d
|
20/29 |
1659d |
52f3456a96c0
net: qrtr: fix memory leaks
|
|
memory leak in virtio_transport_send_pkt_info
virt
kvm
net
|
3 |
C |
|
|
2 |
1870d |
1933d
|
20/29 |
1659d |
8432b8114957
vsock/virtio: free queued packets when closing socket
|
|
possible deadlock in loop_probe
|
4 |
C |
done |
|
20656 |
1780d |
1805d
|
20/29 |
1659d |
962bf783ef65
mtd: break circular locks in register_mtd_blktrans
|
|
possible deadlock in __loop_clr_fd (2)
block
ext4
|
4 |
C |
unreliable |
|
6977 |
1659d |
1784d
|
20/29 |
1659d |
1c500ad70638
loop: reduce the loop_ctl_mutex scope
|
|
memory leak in __usbhid_submit_report
input
usb
|
3 |
C |
|
|
129 |
1729d |
2022d
|
20/29 |
1659d |
f7744fa16b96
HID: usbhid: free raw_report buffers in usbhid_stop
|
|
WARNING in io_try_cancel_userdata
fs
io-uring
|
-1 |
syz |
unreliable |
|
4 |
1733d |
1738d
|
20/29 |
1659d |
dadebc350da2
io_uring: fix io_try_cancel_userdata race for iowq
|
|
WARNING in x86_emulate_instruction
kvm-x86
|
-1 |
C |
done |
|
4 |
1835d |
1831d
|
20/29 |
1659d |
da6393cdd8aa
KVM: X86: Fix warning caused by stale emulation context
|
|
UBSAN: shift-out-of-bounds in choke_change (2)
net
|
-1 |
C |
done |
|
7 |
1874d |
1889d
|
20/29 |
1659d |
3a87571f0ffc
sch_red: fix off-by-one checks in red_check_params()
|
|
KMSAN: kernel-infoleak in copy_page_to_iter (2)
fs
mm
|
9 |
C |
|
|
2099 |
1754d |
2813d
|
20/29 |
1659d |
ce3aba43599f
ext4: fix kernel infoleak via ext4_extent_header
|
|
BUG: scheduling while atomic: syz-executor/ADDR
kernel
|
-1 |
C |
done |
|
5 |
1734d |
1791d
|
20/29 |
1659d |
72ff2bf04db2
crypto: aesni - xts_crypt() return if walk.nbytes is 0
|
|
UBSAN: shift-out-of-bounds in xprt_calc_majortimeo
net
nfs
|
-1 |
C |
unreliable |
|
149 |
1860d |
1988d
|
20/29 |
1659d |
c09f11ef3595
NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
|
|
INFO: rcu detected stall in tx
net
|
1 |
C |
error |
unreliable |
3 |
1726d |
1864d
|
20/29 |
1659d |
30fad76ce4e9
USB: usbtmc: Fix RCU stall warning
|
|
KASAN: use-after-free Read in r871xu_dev_remove
usb
staging
|
19 |
C |
unreliable |
|
152 |
1752d |
1779d
|
20/29 |
1659d |
e9e6aa51b273
staging: rtl8712: error handling refactoring
|
|
KMSAN: kernel-infoleak in fb_cmap_to_user
fbdev
|
9 |
C |
|
|
439 |
1776d |
1926d
|
20/29 |
1659d |
19ab233989d0
fbdev: zero-fill colormap in fbcmap.c
|
|
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info
sound
usb
|
17 |
C |
|
|
10 |
1838d |
1842d
|
20/29 |
1659d |
e84749a78dc8
ALSA: usb-audio: Validate MS endpoint descriptors
|
|
WARNING in mntput_no_expire (2)
fs
|
-1 |
C |
done |
|
68 |
1667d |
1882d
|
20/29 |
1659d |
7d01ef7585c0
Make sure nd->path.mnt and nd->path.dentry are always valid pointers
|
|
WARNING in ieee802154_del_seclevel
wpan
|
-1 |
C |
done |
|
7 |
1883d |
1920d
|
20/29 |
1659d |
9dde130937e9
net: ieee802154: forbid monitor for del llsec seclevel
|
|
memory leak in snd_ctl_led_register
usb
|
3 |
C |
|
|
1 |
1845d |
1836d
|
20/29 |
1659d |
3ae72f6ab9c1
ALSA: control led: fix memory leak in snd_ctl_led_register
|
|
KMSAN: kernel-usb-infoleak in hid_submit_ctrl
input
usb
|
9 |
C |
|
|
839 |
1833d |
2441d
|
20/29 |
1659d |
6be388f4a35d
HID: usbhid: fix info leak in hid_submit_ctrl
|
|
BUG: unable to handle kernel paging request in diFree
jfs
|
8 |
C |
done |
|
13 |
1795d |
2067d
|
20/29 |
1659d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
KMSAN: uninit-value in asix_mdio_read
usb
|
7 |
C |
|
|
915 |
1760d |
2423d
|
20/29 |
1659d |
a786e3195d6a
net: asix: fix uninit value bugs
|
|
general protection fault in kcm_sendmsg
net
|
19 |
C |
done |
|
7957 |
1793d |
1814d
|
20/29 |
1659d |
a47c397bb29f
revert "net: kcm: fix memory leak in kcm_sendmsg"
|
|
WARNING in sk_stream_kill_queues (6)
net
|
-1 |
C |
|
|
11376 |
1659d |
1873d
|
20/29 |
1659d |
144748eb0c44
bpf, sockmap: Fix incorrect fwd_alloc accounting
|
|
BUG: MAX_LOCKDEP_CHAINS too low! (2)
net
|
-1 |
C |
error |
|
84838 |
1659d |
2135d
|
20/29 |
1659d |
5dc33592e955
lockdep: Allow tuning tracing capacity constants.
|
|
WARNING in input_register_device
input
usb
|
-1 |
C |
error |
done |
11 |
1876d |
2027d
|
20/29 |
1659d |
b4104180a2ef
kobject_uevent: remove warning in init_uevent_argv()
|
|
KASAN: use-after-free Read in disk_part_iter_next (2)
block
|
19 |
C |
done |
|
327 |
1881d |
1899d
|
20/29 |
1659d |
e82fc7855749
block: don't create too many partitions
|
|
memory leak in cfserl_create
net
|
3 |
C |
|
|
13 |
2378d |
2547d
|
20/29 |
1659d |
b53558a950a8
net: caif: fix memory leak in caif_device_notify
|
|
memory leak in cinergyt2_fe_attach
usb
media
|
3 |
C |
|
|
3 |
1964d |
2021d
|
20/29 |
1659d |
9ad1efee086e
media: dvd_usb: memory leak in cinergyt2_fe_attach
|
|
memory leak in radix_tree_insert
arm-msm
net
|
3 |
C |
|
|
1 |
1884d |
1883d
|
20/29 |
1659d |
8a03dd925786
net: qrtr: Fix memory leak on qrtr_tx_wait failure
|
|
KASAN: use-after-free Read in nfc_llcp_put_ssap
net
nfc
|
19 |
syz |
done |
|
4 |
1844d |
1852d
|
20/29 |
1659d |
c61760e6940d
net/nfc: fix use-after-free llcp_sock_bind/connect
|
|
BUG: unable to handle kernel paging request in vga16fb_imageblit (2)
fbdev
|
8 |
C |
done |
|
27 |
1841d |
2210d
|
20/29 |
1659d |
ffb324e6f874
tty: vt: always invoke vc->vc_sw->con_resize callback
|
|
WARNING: suspicious RCU usage in tcp_bpf_update_proto
bpf
net
|
4 |
C |
done |
|
539 |
1857d |
1877d
|
20/29 |
1659d |
51e0158a5432
skmsg: Pass psock pointer to ->psock_update_sk_prot()
|
|
UBSAN: array-index-out-of-bounds in udf_statfs
udf
|
15 |
C |
error |
error |
3 |
1766d |
1852d
|
20/29 |
1659d |
781d2a9a2fc7
udf: Check LVID earlier
|
|
WARNING: suspicious RCU usage in bpf_get_current_cgroup_id
bpf
|
4 |
C |
done |
|
764 |
1729d |
1768d
|
20/29 |
1659d |
2d3a1e3615c5
bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
|
|
general protection fault in __io_file_supports_nowait
fs
io-uring
|
2 |
C |
done |
done |
13 |
1724d |
1729d
|
20/29 |
1659d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
possible deadlock in pipe_lock (5)
overlayfs
|
4 |
C |
done |
|
5 |
1767d |
1767d
|
20/29 |
1659d |
9b91b6b019fd
ovl: fix deadlock in splice write
|
|
INFO: task hung in usb_remote_wakeup (2)
usb
|
1 |
syz |
inconclusive |
done |
9 |
1740d |
1939d
|
20/29 |
1659d |
363eaa3a450a
usbip: synchronize event handler with sysfs code paths
|
|
WARNING: suspicious RCU usage in bond_ipsec_add_sa (2)
|
4 |
C |
done |
|
540 |
1787d |
2074d
|
20/29 |
1659d |
b648eba4c69e
bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
|
|
KASAN: use-after-free Read in bdev_evict_inode
fs
|
19 |
C |
unreliable |
|
1305 |
1743d |
1746d
|
20/29 |
1659d |
889c05cc5834
block: ensure the bdi is freed after inode_detach_wb
|
|
WARNING in pvr2_i2c_core_done
usb
fs
|
-1 |
C |
error |
|
5780 |
1780d |
2435d
|
20/29 |
1659d |
f8194e5e63fd
media: pvrusb2: fix warning in pvr2_i2c_core_done
|
|
general protection fault in nl802154_add_llsec_key
wpan
|
8 |
C |
inconclusive |
|
340 |
1872d |
1926d
|
20/29 |
1659d |
20d5fe2d7103
net: ieee802154: fix nl802154 add llsec key
|
|
INFO: task hung in io_uring_cancel_generic
io-uring
fs
|
1 |
C |
unreliable |
|
151 |
1659d |
1780d
|
20/29 |
1659d |
1b48773f9fd0
io_uring: fix io_drain_req()
|
|
divide error in fill_meta_index
squashfs
|
2 |
C |
inconclusive |
|
1 |
1848d |
1848d
|
20/29 |
1659d |
d6e621de1fce
squashfs: fix divide error in calculate_skip()
|
|
memory leak in copy_process (2)
kernel
|
3 |
C |
|
|
2 |
1900d |
1899d
|
20/29 |
1659d |
f60a85cad677
bpf: Fix umd memory leak in copy_process()
|
|
WARNING in __i2c_transfer
i2c
|
-1 |
C |
done |
|
2847 |
1659d |
1902d
|
20/29 |
1659d |
71581562ee36
i2c: bail out early when RDWR parameters are wrong
|
|
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post (2)
|
17 |
C |
done |
|
41 |
1761d |
2125d
|
20/29 |
1659d |
ad9d24c9429e
net: qrtr: fix OOB Read in qrtr_endpoint_post
|
|
BUG: sleeping function called from invalid context in __ipv6_dev_mc_dec
net
|
5 |
C |
done |
|
21 |
1792d |
1849d
|
20/29 |
1659d |
a100243d95a6
rtnetlink: avoid RCU read lock when holding RTNL
|
|
INFO: task hung in del_gendisk
block
|
1 |
C |
done |
|
5 |
1747d |
1780d
|
20/29 |
1659d |
68c9417b193d
nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
|
|
INFO: trying to register non-static key in skb_dequeue
bluetooth
|
-1 |
C |
error |
|
28951 |
1844d |
2125d
|
20/29 |
1659d |
be8597239379
Bluetooth: initialize skb_queue_head at l2cap_chan_create()
|
|
WARNING: refcount bug in in_dev_finish_destroy
net
|
13 |
C |
unreliable |
|
463 |
1660d |
1887d
|
20/29 |
1659d |
0d7a7b2014b1
ipv6: remove extra dev_hold() for fallback tunnels
|
|
KASAN: use-after-free Read in __d_alloc (2)
fs
|
19 |
C |
unreliable |
|
6774 |
1701d |
1745d
|
20/29 |
1659d |
0766ec82e5fb
namei: Fix use after free in kern_path_locked
|
|
KMSAN: uninit-value in validate_beacon_head
wireless
|
7 |
C |
|
|
284 |
1778d |
2005d
|
20/29 |
1659d |
9a6847ba1747
nl80211: fix beacon head validation
|
|
WARNING: suspicious RCU usage in vxlan_xmit
net
|
4 |
C |
error |
|
1 |
1801d |
1801d
|
20/29 |
1659d |
85e8b032d6eb
vxlan: add missing rcu_read_lock() in neigh_reduce()
|
|
general protection fault in udmabuf_create
dri
media
|
2 |
C |
done |
|
2 |
1754d |
1750d
|
20/29 |
1659d |
b9770b0b6eac
udmabuf: fix general protection fault in udmabuf_create
|
|
memory leak in new_inode
ext4
|
3 |
C |
|
|
5 |
1705d |
2013d
|
20/29 |
1659d |
a8867f4e3809
ext4: fix memory leak in ext4_mb_init_backend on error path.
|
|
WARNING: zero-size vmalloc in dvb_dmx_init
media
usb
|
-1 |
C |
|
|
62 |
1781d |
1845d
|
20/29 |
1659d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
memory leak in ext4_multi_mount_protect
ext4
|
3 |
C |
|
|
12 |
1802d |
1980d
|
20/29 |
1659d |
618f003199c6
ext4: fix memory leak in ext4_fill_super
|
|
WARNING in tracepoint_add_func
trace
bpf
|
-1 |
C |
done |
|
20635 |
1775d |
2158d
|
20/29 |
1659d |
9913d5745bd7
tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
|
|
UBSAN: shift-out-of-bounds in nft_hash_estimate
netfilter
|
-1 |
C |
done |
|
3 |
1847d |
1847d
|
20/29 |
1659d |
a54754ec9891
netfilter: nftables: avoid overflows in nft_hash_buckets()
|
|
KASAN: use-after-free Read in blk_mq_exit_sched
usb
block
|
19 |
C |
done |
|
9 |
1798d |
1813d
|
20/29 |
1659d |
f0c1c4d2864e
blk-mq: fix use-after-free in blk_mq_exit_sched
|
|
divide error in do_journal_end (2)
erofs
|
2 |
C |
inconclusive |
|
2 |
1841d |
1841d
|
20/29 |
1659d |
a149127be52f
reiserfs: add check for invalid 1st journal block
|
|
BUG: MAX_LOCKDEP_ENTRIES too low!
|
-1 |
C |
done |
|
179076 |
1844d |
2535d
|
20/29 |
1659d |
5dc33592e955
lockdep: Allow tuning tracing capacity constants.
|
|
BUG: corrupted list in kobject_add_internal (3)
bluetooth
|
8 |
C |
inconclusive |
|
3 |
1695d |
1799d
|
20/29 |
1659d |
92fe24a7db75
Bluetooth: skip invalid hci_sync_conn_complete_evt
|
|
WARNING in nbd_dev_add
block
|
-1 |
C |
inconclusive |
|
131 |
1660d |
1920d
|
20/29 |
1659d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
possible deadlock in del_gendisk
|
4 |
C |
done |
|
158215 |
1722d |
1869d
|
20/29 |
1659d |
990e78116d38
block: loop: fix deadlock between open and remove
|
|
possible deadlock in br_ioctl_call
net
|
4 |
C |
unreliable |
|
4161 |
1750d |
1760d
|
20/29 |
1659d |
893b19587534
net: bridge: fix ioctl locking
|
|
WARNING in __vmalloc_node_range
media
usb
|
-1 |
C |
|
|
7 |
1845d |
1847d
|
20/29 |
1659d |
c680ed46e418
media: dvb-usb: fix wrong definition
|
|
WARNING: ODEBUG bug in ext4_fill_super (3)
ext4
|
-1 |
C |
done |
|
392 |
1661d |
1900d
|
20/29 |
1659d |
0ce160c5bdb6
ext4: fix timer use-after-free on failed mount
|
|
BUG: sleeping function called from invalid context in _copy_to_iter
net
|
5 |
C |
done |
|
60 |
1745d |
1752d
|
20/29 |
1659d |
876c14ad014d
af_unix: fix holding spinlock in oob handling
|
|
possible deadlock in f_getown
fs
|
4 |
C |
done |
done |
164 |
1737d |
2067d
|
20/29 |
1659d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
memory leak in rds_send_probe
|
3 |
C |
done |
|
27 |
1957d |
2499d
|
20/29 |
1659d |
49bfcbfd989a
net: rds: fix memory leak in rds_recvmsg
|
|
general protection fault in blk_mq_run_hw_queues
block
|
11 |
C |
unreliable |
|
305 |
1739d |
1787d
|
20/29 |
1659d |
16ad3db3b24c
nbd: fix order of cleaning up the queue and freeing the tagset
|
|
INFO: task hung in fuse_launder_page
fuse
|
1 |
C |
unreliable |
|
1 |
1751d |
1747d
|
20/29 |
1659d |
76224355db75
fuse: truncate pagecache on atomic_o_trunc
|
|
INFO: task hung in register_netdevice_notifier (2)
can
wireless
|
1 |
syz |
done |
|
10555 |
1803d |
2408d
|
20/29 |
1659d |
8d0caedb7596
can: bcm/raw/isotp: use per module netdevice notifier
|
|
general protection fault in hwsim_set_edge_lqi
wpan
|
2 |
C |
done |
|
4 |
1748d |
1801d
|
20/29 |
1659d |
0303b30375df
ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
|
|
WARNING: still has locks held in io_sq_thread
|
4 |
C |
done |
|
8689 |
1871d |
1885d
|
20/29 |
1659d |
82734c5b1b24
io_uring: drop sqd lock before handling signals for SQPOLL
|
|
KASAN: use-after-free Write in nft_ct_tmpl_put_pcpu
netfilter
|
22 |
C |
done |
|
3 |
1753d |
1753d
|
20/29 |
1659d |
e3245a7b7b34
netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
|
|
memory leak in tcindex_set_parms
net
|
3 |
C |
|
|
94 |
1818d |
2303d
|
20/29 |
1659d |
f5051bcece50
net: sched: fix memory leak in tcindex_partial_destroy_work
|
|
general protection fault in sock_from_file
net
io-uring
|
2 |
C |
inconclusive |
|
78 |
1723d |
1730d
|
20/29 |
1659d |
c6d3d9cbd659
io_uring: fix queueing half-created requests
|
|
memory leak in h4_recv_buf
|
3 |
C |
done |
|
21 |
1769d |
2529d
|
20/29 |
1659d |
bb2853a6a421
tty: Fix data race between tiocsti() and flush_to_ldisc()
|
|
WARNING in sta_info_alloc
|
-1 |
C |
done |
done |
145 |
1805d |
2059d
|
20/29 |
1659d |
0ee4d55534f8
mac80211: remove warning in ieee80211_get_sband()
|
|
possible deadlock in snd_hrtimer_callback
fs
|
4 |
C |
done |
|
571 |
1660d |
1767d
|
20/29 |
1659d |
f671a691e299
fcntl: fix potential deadlocks for &fown_struct.lock
|
|
general protection fault in gfn_to_rmap (2)
kvm-x86
|
2 |
C |
done |
|
1 |
1814d |
1813d
|
20/29 |
1659d |
78fcb2c91adf
KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
|
|
UBSAN: shift-out-of-bounds in profile_init
kernel
|
-1 |
C |
unreliable |
|
23 |
1727d |
1777d
|
20/29 |
1659d |
2d186afd04d6
profiling: fix shift-out-of-bounds bugs
|
|
KASAN: use-after-free Read in hci_send_acl
bluetooth
|
19 |
C |
done |
|
2 |
1913d |
2123d
|
20/29 |
1659d |
5c4c8c954409
Bluetooth: verify AMP hci_chan before amp_destroy
|
|
WARNING: ODEBUG bug in cancel_delayed_work
|
-1 |
C |
done |
|
3384 |
1675d |
2126d
|
20/29 |
1659d |
3a9d54b1947e
Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
|
|
memory leak in usb_urb_init
media
usb
|
3 |
C |
|
|
1 |
1972d |
1968d
|
20/29 |
1659d |
b7cd0da982e3
media: dvb-usb: fix memory leak in dvb_usb_adapter_init
|
|
general protection fault in crypto_destroy_tfm
crypto
|
2 |
syz |
unreliable |
|
57 |
1873d |
1914d
|
20/29 |
1659d |
83681f2bebb3
crypto: api - check for ERR pointers in crypto_destroy_tfm()
|
|
possible deadlock in console_lock_spinning_enable
|
4 |
C |
done |
|
1693 |
1659d |
2532d
|
20/29 |
1659d |
c0070e1e6027
ttyprintk: Add TTY hangup callback.
|
|
memory leak in ip_vs_add_service
lvs
|
3 |
C |
|
|
1 |
1832d |
1828d
|
20/29 |
1659d |
56e4ee82e850
ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
|
|
possible deadlock in io_sq_thread_finish
fs
|
4 |
C |
unreliable |
done |
4 |
1904d |
1907d
|
20/29 |
1659d |
f4e61f0c9add
x86/kvm: Fix broken irq restoration in kvm_wait
|
|
BUG: unable to handle kernel NULL pointer dereference in fbcon_cursor
fbdev
|
10 |
C |
done |
|
21 |
1885d |
2018d
|
20/29 |
1659d |
01faae5193d6
drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
|
|
memory leak in nr_create
hams
|
3 |
C |
|
|
250 |
1771d |
2556d
|
20/29 |
1659d |
517a16b1a88b
netrom: Decrease sock refcount when sock timers expire
|
|
general protection fault in ieee802154_llsec_parse_dev_addr
wpan
|
2 |
C |
inconclusive |
|
80 |
1786d |
1916d
|
20/29 |
1659d |
88c17855ac42
net: ieee802154: forbid monitor for set llsec params
|
|
WARNING in smk_set_cipso (2)
lsm
|
-1 |
C |
inconclusive |
|
24 |
1793d |
1871d
|
20/29 |
1659d |
49ec114a6e62
smackfs: restrict bytes count in smk_set_cipso()
|
|
memory leak in atusb_probe
usb
wpan
|
3 |
C |
|
|
71 |
1875d |
2020d
|
20/29 |
1659d |
6b9fbe169551
drivers: net: fix memory leak in atusb_probe
|
|
WARNING: ODEBUG bug in net_dm_cmd_trace
net
|
-1 |
syz |
unreliable |
|
2 |
1910d |
1906d
|
20/29 |
1659d |
9398e9c0b1d4
drop_monitor: Perform cleanup upon probe registration failure
|
|
general protection fault in nft_set_elem_expr_alloc
netfilter
|
2 |
C |
done |
|
3 |
1823d |
1819d
|
20/29 |
1659d |
ad9f151e560b
netfilter: nf_tables: initialize set before expression setup
|
|
general protection fault in do_blk_trace_setup
block
trace
|
2 |
C |
done |
|
25 |
1735d |
1736d
|
20/29 |
1659d |
1d1cf156dc17
sg: pass the device name to blk_trace_setup
|
|
WARNING in xfrm_alloc_compat (2)
net
|
-1 |
C |
done |
|
47 |
1874d |
1884d
|
20/29 |
1659d |
ef19e111337f
xfrm/compat: Cleanup WARN()s that can be user-triggered
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold
sctp
|
22 |
C |
done |
|
4 |
1772d |
1780d
|
20/29 |
1659d |
58acd1009226
sctp: update active_key for asoc when old key is being replaced
|
|
UBSAN: shift-out-of-bounds in load_balance
kernel
|
-1 |
syz |
|
|
2167 |
1844d |
1949d
|
20/29 |
1659d |
39a2a6eb5c9b
sched/fair: Fix shift-out-of-bounds in load_balance()
|
|
WARNING in io_rsrc_node_switch
io-uring
fs
|
-1 |
C |
done |
|
174 |
1844d |
1854d
|
20/29 |
1659d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
KASAN: use-after-free Read in firmware_fallback_sysfs
kernel
|
19 |
C |
error |
|
16514 |
1741d |
1941d
|
20/29 |
1659d |
75d95e2e39b2
firmware_loader: fix use-after-free in firmware_fallback_sysfs
|
|
WARNING in tcindex_alloc_perfect_hash
mm
|
-1 |
C |
inconclusive |
|
349 |
1789d |
1963d
|
20/29 |
1659d |
3f2db250099f
net: sched: fix warning in tcindex_alloc_perfect_hash
|
|
KMSAN: uninit-value in caif_seqpkt_sendmsg
net
|
7 |
C |
|
|
2365 |
1706d |
2122d
|
20/29 |
1659d |
991e634360f2
net: fix uninit-value in caif_seqpkt_sendmsg
|
|
KASAN: invalid-free in ieee80211_ibss_leave
wireless
|
24 |
C |
inconclusive |
|
1 |
1903d |
1931d
|
20/29 |
1659d |
3bd801b14e0c
mac80211: fix double free in ibss_leave
|
|
WARNING in io_wq_submit_work (2)
io-uring
fs
|
-1 |
C |
done |
done |
52 |
1718d |
1721d
|
20/29 |
1659d |
713b9825a4c4
io-wq: fix cancellation on create-worker failure
|
|
memory leak in prepare_creds (2)
lsm
|
3 |
C |
|
|
2 |
1797d |
1893d
|
20/29 |
1659d |
f60a85cad677
bpf: Fix umd memory leak in copy_process()
|
|
WARNING in cfg80211_inform_single_bss_frame_data
wireless
|
-1 |
C |
done |
|
1 |
1848d |
1941d
|
20/29 |
1659d |
e298aa358f0c
mac80211: fix skb length check in ieee80211_scan_rx()
|
|
memory leak in mrp_request_join
net
|
3 |
C |
|
|
215 |
1799d |
2317d
|
20/29 |
1659d |
996af62167d0
net/802/mrp: fix memleak in mrp_request_join()
|
|
INFO: task hung in unregister_netdevice_notifier (3)
can
|
1 |
syz |
error |
error |
184 |
2471d |
2656d
|
20/29 |
1659d |
8d0caedb7596
can: bcm/raw/isotp: use per module netdevice notifier
|
|
KASAN: slab-out-of-bounds Write in decode_data
hams
|
21 |
C |
done |
error |
7 |
2209d |
2365d
|
20/29 |
1659d |
19d1532a1876
net: 6pack: fix slab-out-of-bounds in decode_data
|
|
memory leak in tcp_cdg_init
net
|
3 |
syz |
|
|
6 |
1824d |
1963d
|
20/29 |
1659d |
be5d1b61a2ad
tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
|
|
KASAN: use-after-free Read in drm_getunique
dri
|
19 |
syz |
inconclusive |
|
2 |
1820d |
1820d
|
20/29 |
1659d |
b436acd1cf7f
drm: Fix use-after-free read in drm_getunique()
|
|
WARNING in hsr_forward_skb
|
-1 |
C |
done |
done |
1310 |
1874d |
2702d
|
20/29 |
1659d |
9d6803921a16
net: hsr: Reset MAC header for Tx path
|
|
WARNING: refcount bug in sk_psock_get
net
|
13 |
C |
done |
|
8 |
1846d |
1873d
|
20/29 |
1659d |
8621436671f3
smc: disallow TCP_ULP in smc_setsockopt()
|
|
WARNING in close_fs_devices (3)
btrfs
|
-1 |
C |
done |
|
98 |
1761d |
2005d
|
20/29 |
1659d |
b2a616676839
btrfs: fix rw device counting in __btrfs_free_extra_devids
|
|
KASAN: use-after-free Read in check_all_holdout_tasks_trace
mm
|
19 |
syz |
done |
|
4 |
1761d |
1831d
|
20/29 |
1659d |
1d10bf55d85d
rcu-tasks: Don't delete holdouts within trc_inspect_reader()
|
|
BUG: unable to handle kernel paging request in nl802154_del_llsec_key
wpan
|
8 |
C |
inconclusive |
|
235 |
1872d |
1923d
|
20/29 |
1659d |
37feaaf5ceb2
net: ieee802154: fix nl802154 del llsec key
|
|
WARNING: refcount bug in ipip6_tunnel_uninit
net
|
13 |
C |
done |
|
199 |
1881d |
1887d
|
20/29 |
1659d |
6289a98f0817
sit: proper dev_{hold|put} in ndo_[un]init methods
|
|
WARNING: refcount bug in register_netdevice
net
|
13 |
C |
unreliable |
|
97 |
1880d |
1887d
|
20/29 |
1659d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
possible deadlock in sctp_addr_wq_timeout_handler
sctp
|
4 |
C |
done |
|
8 |
1852d |
1852d
|
20/29 |
1659d |
01bfe5e8e428
Revert "net/sctp: fix race condition in sctp_destroy_sock"
|
|
INFO: task hung in hci_req_sync
bluetooth
|
1 |
C |
inconclusive |
|
1 |
1753d |
1749d
|
20/29 |
1659d |
f41a4b2b5eb7
Bluetooth: add timeout sanity check to hci_inquiry
|
|
WARNING: refcount bug in ip6erspan_tunnel_uninit
net
|
13 |
C |
error |
|
11 |
1884d |
1886d
|
20/29 |
1659d |
7f700334be9a
ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
|
|
UBSAN: shift-out-of-bounds in xfrm_set_default
net
|
-1 |
C |
unreliable |
|
79 |
1754d |
1764d
|
20/29 |
1659d |
5d8dbb7fb82b
net: xfrm: fix shift-out-of-bounce
|
|
WARNING in fuse_get_tree
fuse
|
-1 |
C |
unreliable |
|
22 |
1755d |
1761d
|
20/29 |
1659d |
5d5b74aa9c76
fuse: allow sharing existing sb
|
|
INFO: task hung in hub_port_init
|
1 |
C |
done |
|
15888 |
1659d |
2059d
|
20/29 |
1659d |
258c81b341c8
usbip: give back URBs for unsent unlink requests during cleanup
|
|
general protection fault in wb_timer_fn
block
exfat
|
2 |
C |
done |
|
60 |
1737d |
1746d
|
20/29 |
1659d |
d152c682f03c
block: add an explicit ->disk backpointer to the request_queue
|
|
memory leak in con_do_clear_unimap
serial
|
3 |
C |
|
|
13 |
1861d |
1920d
|
20/29 |
1659d |
211b4d42b70f
tty: fix memory leak in vc_deallocate
|
|
KMSAN: kernel-infoleak in _copy_to_iter (5)
net
|
9 |
C |
|
|
23883 |
1768d |
2204d
|
20/29 |
1659d |
08c27f3322fe
batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
|
|
KMSAN: uninit-value in __dev_mc_add
net
|
7 |
C |
|
|
213 |
2603d |
2799d
|
20/29 |
1659d |
cca8ea3b05c9
net: tun: set tun->dev->addr_len during TUNSETLINK processing
|
|
KASAN: vmalloc-out-of-bounds Write in imageblit
fbdev
|
21 |
C |
|
|
104 |
1673d |
1967d
|
20/29 |
1659d |
3b0c40612471
tty: Fix out-of-bound vmalloc access in imageblit
|
|
WARNING in init_timer_key
wireless
|
-1 |
C |
done |
|
2 |
1829d |
1936d
|
20/29 |
1659d |
a64b6a25dd9f
cfg80211: call cfg80211_leave_ocb when switching away from OCB
|
|
KASAN: stack-out-of-bounds Read in iov_iter_revert
fs
io-uring
|
17 |
C |
error |
|
14 |
1732d |
1748d
|
20/29 |
1659d |
89c2b3b74918
io_uring: reexpand under-reexpanded iters
|
|
WARNING in futex_requeue
kernel
|
-1 |
syz |
|
|
4 |
1724d |
1728d
|
20/29 |
1659d |
4f07ec0d76f2
futex: Prevent inconsistent state and exit race
|
|
WARNING in internal_create_group
fs
|
-1 |
C |
inconclusive |
|
20 |
1724d |
1777d
|
20/29 |
1659d |
b1a811633f73
block: nbd: add sanity check for first_minor
|
|
UBSAN: shift-out-of-bounds in vhci_hub_control (2)
usb
|
-1 |
C |
unreliable |
|
5 |
1881d |
1889d
|
20/29 |
1659d |
1cc5ed25bdad
usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
|
|
WARNING in __static_key_slow_dec
kernel
|
-1 |
C |
unreliable |
|
19 |
1722d |
1726d
|
20/29 |
1659d |
6d5f1ef83868
bonding: Fix negative jump label count on nested bonding
|
|
memory leak in kcm_sendmsg
net
|
3 |
C |
|
|
2 |
2155d |
2294d
|
20/29 |
1659d |
c47cc304990a
net: kcm: fix memory leak in kcm_sendmsg
|
|
kernel BUG in remove_inode_hugepages
fs
mm
|
-1 |
C |
unreliable |
|
3 |
1744d |
1744d
|
20/29 |
1659d |
c7b1850dfb41
hugetlb: don't pass page cache pages to restore_reserve_on_error
|
|
WARNING in io_wq_put
fs
io-uring
|
-1 |
C |
unreliable |
|
3 |
1893d |
1904d
|
20/29 |
1659d |
f5d2d23bf0d9
io-wq: fix race around pending work on teardown
|
|
memory leak in v4l2_ctrl_handler_init_class
usb
media
|
3 |
C |
|
|
12 |
1864d |
1916d
|
20/29 |
1659d |
9c39be40c015
media: drivers/media/usb: fix memory leak in zr364xx_probe
|
|
KMSAN: uninit-value in ax88179_get_mac_addr
usb
|
7 |
C |
|
|
149 |
1777d |
2042d
|
20/29 |
1659d |
bd78980be1a6
net: usb: ax88179_178a: initialize local variables before use
|
|
WARNING in io_uring_setup (2)
fs
io-uring
|
-1 |
C |
done |
|
40 |
1844d |
1853d
|
20/29 |
1659d |
47b228ce6f66
io_uring: fix unchecked error in switch_start()
|
|
general protection fault in drm_atomic_set_crtc_for_connector
dri
|
2 |
C |
unreliable |
|
586 |
2016d |
2014d
|
20/29 |
1685d |
0003b687ee6d
drm: fix oops in drm_atomic_set_crtc_for_connector
|
|
UBSAN: shift-out-of-bounds in qdisc_get_rtab
net
|
-1 |
C |
unreliable |
done |
521 |
1952d |
1996d
|
20/29 |
1807d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
KASAN: out-of-bounds Read in kfence_guarded_free
kasan
mm
|
17 |
C |
error |
|
20 |
1970d |
1981d
|
20/29 |
1810d |
2b8305260fb3
kfence, kasan: make KFENCE compatible with KASAN
|
|
KASAN: global-out-of-bounds Read in netlink_policy_dump_add_policy (2)
kernel
|
17 |
C |
done |
|
2 |
1933d |
1933d
|
20/29 |
1827d |
33b347503f01
vdpa: Define vdpa mgmt device, ops and a netlink interface
|
|
KASAN: use-after-free Read in __cpuhp_state_remove_instance
kernel
|
19 |
C |
unreliable |
done |
2726 |
1894d |
1916d
|
20/29 |
1863d |
470ec4ed8c91
io-wq: fix double put of 'wq' in error path
|
|
KASAN: use-after-free Read in idr_for_each (2)
io-uring
fs
|
19 |
C |
error |
done |
86 |
1897d |
2060d
|
20/29 |
1863d |
61cf93700fe6
io_uring: Convert personality_idr to XArray
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run2
trace
bpf
|
17 |
C |
done |
done |
5 |
1915d |
2074d
|
20/29 |
1869d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
general protection fault in drm_client_buffer_vunmap
usb
dri
|
2 |
C |
unreliable |
done |
247 |
1902d |
2003d
|
20/29 |
1869d |
874a52f9b693
drm/fb-helper: only unmap if buffer not null
|
|
BUG: unable to handle kernel paging request in bpf_trace_run2
trace
bpf
|
8 |
C |
done |
done |
10 |
1913d |
2074d
|
20/29 |
1869d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
INFO: rcu detected stall in smp_call_function
perf
|
1 |
C |
|
|
107 |
1873d |
2128d
|
20/29 |
1870d |
c583bcb8f5ed
rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
1b7af295541d
sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled
|
|
INFO: task hung in io_uring_cancel_task_requests
fs
io-uring
|
1 |
C |
|
|
305 |
1897d |
1932d
|
20/29 |
1873d |
34343786ecc5
io_uring: unpark SQPOLL thread for cancelation
|
|
general protection fault in usb_audio_probe
sound
usb
|
2 |
C |
done |
|
360 |
1903d |
1905d
|
20/29 |
1873d |
30dea07180de
ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
|
|
UBSAN: shift-out-of-bounds in erofs_fc_fill_super
erofs
|
-1 |
C |
unreliable |
|
11 |
1923d |
1953d
|
20/29 |
1873d |
bde545295b71
erofs: fix shift-out-of-bounds of blkszbits
|
|
INFO: task hung in addrconf_verify_work (4)
|
1 |
C |
done |
|
132 |
1922d |
2009d
|
20/29 |
1873d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
possible deadlock in cfg80211_netdev_notifier_call
wireless
|
4 |
syz |
done |
|
13 |
1875d |
1941d
|
20/29 |
1873d |
40c575d1ec71
cfg80211: fix netdev registration deadlock
|
|
memory leak in qrtr_tun_open
arm-msm
net
|
3 |
C |
|
|
4 |
1965d |
2009d
|
20/29 |
1873d |
fc0494ead639
net: qrtr: Fix memory leak in qrtr_tun_open
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_printdata
usb
media
|
-1 |
C |
error |
|
331 |
1920d |
1987d
|
20/29 |
1873d |
9dec0f48a75e
media: mceusb: sanity check for prescaler value
|
|
memory leak in v2_read_file_info
ext4
|
3 |
C |
|
|
71 |
1922d |
1982d
|
20/29 |
1873d |
a4db1072e1a3
quota: Fix memory leak when handling corrupted quota file
|
|
KASAN: null-ptr-deref Read in tcf_idrinfo_destroy
net
|
11 |
C |
|
|
115 |
1876d |
2067d
|
20/29 |
1873d |
396d7f23adf9
net: sched: fix police ext initialization
|
|
general protection fault in j1939_netdev_notify (2)
can
|
2 |
C |
done |
|
19 |
1925d |
1984d
|
20/29 |
1873d |
4e096a18867a
net: introduce CAN specific pointer in the struct net_device
|
|
INFO: task hung in tcf_action_init_1
net
|
1 |
C |
done |
|
30 |
1933d |
2067d
|
20/29 |
1873d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
general protection fault in kobject_cleanup
gpio
usb
|
2 |
C |
unreliable |
|
72 |
1903d |
1916d
|
20/29 |
1873d |
a6112998ee45
gpio: fix NULL-deref-on-deregistration regression
|
|
KASAN: slab-out-of-bounds Read in skb_segment
net
|
17 |
C |
error |
|
311 |
1952d |
1955d
|
20/29 |
1873d |
00b229f762b0
net: fix GSO for SG-enabled devices
|
|
UBSAN: shift-out-of-bounds in snto32
input
usb
|
-1 |
C |
error |
|
58 |
1917d |
1990d
|
20/29 |
1873d |
a0312af1f94d
HID: core: detect and skip invalid inputs to snto32()
|
|
UBSAN: shift-out-of-bounds in exfat_fill_super
exfat
|
-1 |
C |
error |
|
3 |
1930d |
1947d
|
20/29 |
1873d |
78c276f5495a
exfat: fix shift-out-of-bounds in exfat_fill_super()
|
|
INFO: task hung in io_sq_thread_park
fs
io-uring
|
1 |
C |
unreliable |
|
263 |
1908d |
1913d
|
20/29 |
1873d |
3ebba796fa25
io_uring: ensure that SQPOLL thread is started for exit
|
|
KASAN: use-after-free Read in ntfs_iget
ntfs3
|
19 |
C |
error |
error |
1 |
2010d |
2006d
|
20/29 |
1873d |
4dfe6bd94959
ntfs: check for valid standard information attribute
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
C |
done |
|
33 |
1909d |
1916d
|
20/29 |
1873d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
WARNING in memdup_user_nul
lsm
|
-1 |
C |
inconclusive |
|
2 |
1959d |
1958d
|
20/29 |
1873d |
7ef4c19d245f
smackfs: restrict bytes count in smackfs write functions
|
|
memory leak in io_submit_sqes (2)
fs
io-uring
|
3 |
C |
|
|
1 |
1911d |
1910d
|
20/29 |
1873d |
f01272541d2c
io-wq: ensure all pending work is canceled on exit
|
|
INFO: task can't die in connmark_exit_net
net
|
1 |
syz |
error |
|
1 |
1996d |
1992d
|
20/29 |
1873d |
d349f9976868
net_sched: fix RTNL deadlock again caused by request_module()
|
|
memory leak in dlfb_usb_probe
usb
fbdev
|
3 |
C |
|
|
3 |
1987d |
1990d
|
20/29 |
1873d |
5c0e4110f751
udlfb: Fix memory leak in dlfb_usb_probe
|
|
UBSAN: shift-out-of-bounds in std_validate
media
|
-1 |
C |
unreliable |
|
2 |
1953d |
1953d
|
20/29 |
1873d |
048c96e28674
media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate
|
|
memory leak in zr364xx_probe
usb
media
|
3 |
C |
|
|
6 |
1928d |
1980d
|
20/29 |
1873d |
ea354b6ddd6f
media: zr364xx: fix memory leaks in probe()
|
|
KASAN: use-after-free Read in usb_audio_disconnect
sound
usb
|
19 |
C |
done |
|
15 |
1903d |
1904d
|
20/29 |
1873d |
c5aa956eaeb0
ALSA: usb-audio: fix use after free in usb_audio_disconnect
|
|
UBSAN: shift-out-of-bounds in chkSuper
jfs
|
-1 |
C |
unreliable |
|
28 |
1921d |
1987d
|
20/29 |
1873d |
3bef198f1b17
JFS: more checks for invalid superblock
|
|
KASAN: vmalloc-out-of-bounds Read in bpf_trace_run3
bpf
trace
|
17 |
C |
done |
|
6 |
1929d |
2031d
|
20/29 |
1873d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
UBSAN: shift-out-of-bounds in mceusb_dev_recv
media
usb
|
-1 |
C |
|
|
13 |
1920d |
1984d
|
20/29 |
1873d |
1b43bad31fb0
media: mceusb: Fix potential out-of-bounds shift
|
|
memory leak in video_usercopy
media
|
3 |
C |
|
|
19 |
1922d |
1984d
|
20/29 |
1873d |
fb18802a338b
media: v4l: ioctl: Fix memory leak in video_usercopy
|
|
BUG: sleeping function called from invalid context in rxe_alloc_nl
rdma
|
5 |
C |
done |
|
475 |
1939d |
1953d
|
20/29 |
1873d |
c4369575b2bc
RDMA/rxe: Fix bug in rxe_alloc()
|
|
WARNING in __alloc_skb
arm-msm
net
|
-1 |
C |
error |
|
24 |
1904d |
1916d
|
20/29 |
1873d |
093b036aa94e
net/qrtr: fix __netdev_alloc_skb call
|
|
WARNING in iov_iter_revert (2)
serial
|
-1 |
C |
done |
|
9 |
1924d |
1925d
|
20/29 |
1873d |
3342ff2698e9
tty: protect tty_write from odd low-level tty disciplines
|
|
WARNING in cfg80211_change_iface
wireless
|
-1 |
C |
inconclusive |
|
4 |
1940d |
1944d
|
20/29 |
1873d |
bae173563cbf
wext: call cfg80211_change_iface() with wiphy lock held
|
|
memory leak in edge_startup
usb
|
3 |
C |
|
|
1 |
1916d |
1912d
|
20/29 |
1873d |
cfdc67acc785
USB: serial: io_edgeport: fix memory leak in edge_startup
|
|
unexpected kernel reboot (3)
input
usb
|
-1 |
C |
error |
error |
21132 |
1873d |
2874d
|
20/29 |
1873d |
c8e2fe13d1d1
x86/perf: Use RET0 as default for guest_get_msrs to handle "no PMU" case
|
|
WARNING in qp_broker_alloc
kernel
|
-1 |
C |
inconclusive |
|
24 |
1918d |
1954d
|
20/29 |
1873d |
2fd10bcf0310
drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
|
|
WARNING in sk_stream_kill_queues (5)
net
|
-1 |
C |
done |
|
4684 |
1873d |
2004d
|
20/29 |
1873d |
097b9146c0e2
net: fix up truesize of cloned skb in skb_prepare_for_shift()
|
|
BUG: unable to handle kernel paging request in bpf_trace_run3
bpf
trace
|
8 |
C |
done |
|
40 |
1920d |
2043d
|
20/29 |
1873d |
befe6d946551
tracepoint: Do not fail unregistering a probe due to memory failure
|
|
KASAN: null-ptr-deref Write in event_handler
usb
|
12 |
C |
done |
|
2869 |
1912d |
2059d
|
20/29 |
1873d |
9380afd6df70
usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
718ad9693e36
usbip: fix vhci_hcd attach_store() races leading to gpf
46613c9dfa96
usbip: fix vudc usbip_sockfd_store races leading to gpf
|
|
KASAN: use-after-free Read in nbd_genl_connect
nbd
|
19 |
C |
inconclusive |
|
16 |
1904d |
1920d
|
20/29 |
1873d |
c9a2f90f4d6b
nbd: handle device refs for DESTROY_ON_DISCONNECT properly
|
|
WARNING in cfg80211_dev_rename
wireless
|
-1 |
C |
inconclusive |
|
22 |
1939d |
1944d
|
20/29 |
1873d |
0391a45c8007
nl80211: call cfg80211_dev_rename() under RTNL
|
|
general protection fault in gfs2_withdraw
gfs2
|
8 |
C |
done |
|
81 |
1921d |
2070d
|
20/29 |
1873d |
d5bf630f355d
gfs2: bypass signal_our_withdraw if no journal
|
|
KASAN: null-ptr-deref Write in amp_read_loc_assoc_final_data
bluetooth
|
12 |
C |
done |
|
185 |
1924d |
2125d
|
20/29 |
1873d |
e8bd76ede155
Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
|
|
possible deadlock in io_poll_double_wake (2)
io-uring
fs
|
4 |
C |
error |
error |
431 |
1873d |
2066d
|
20/29 |
1873d |
1c3b3e6527e5
io_uring: ignore double poll add on the same waitqueue head
|
|
WARNING in _cfg80211_unregister_wdev
wireless
|
-1 |
C |
inconclusive |
|
48 |
1938d |
1944d
|
20/29 |
1873d |
776a39b8196d
cfg80211: call cfg80211_destroy_ifaces() with wiphy lock held
|
|
INFO: task can't die in io_sq_thread_finish
ext4
|
1 |
syz |
|
|
137 |
1884d |
1916d
|
20/29 |
1873d |
eb85890b29e4
io_uring: ensure SQPOLL startup is triggered before error shutdown
|
|
WARNING in dst_release
net
|
-1 |
syz |
done |
|
2 |
1925d |
1924d
|
20/29 |
1873d |
e0be4931f3fe
mptcp: reset last_snd on subflow close
|
|
BUG: sleeping function called from invalid context in mm_access
mm
|
5 |
C |
done |
|
684 |
1958d |
1961d
|
20/29 |
1873d |
38e891849003
kbuild: lto: fix module versioning
|
|
KASAN: use-after-free Read in skb_segment
net
|
19 |
C |
error |
|
55 |
1952d |
1955d
|
20/29 |
1873d |
00b229f762b0
net: fix GSO for SG-enabled devices
|
|
inconsistent lock state in io_dismantle_req
fs
io-uring
|
4 |
C |
|
|
2 |
1941d |
1941d
|
20/29 |
1873d |
9ae1f8dd372e
io_uring: fix inconsistent lock state
|
|
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page
kvm-x86
|
8 |
syz |
error |
|
2 |
2637d |
2647d
|
20/29 |
1894d |
47c42e6b4192
KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
|
|
KASAN: slab-out-of-bounds Read in squashfs_get_id
squashfs
|
17 |
C |
error |
done |
77 |
1933d |
2069d
|
20/29 |
1902d |
e812cbbbbbb1
squashfs: avoid out of bounds writes in decompressors
|
|
UBSAN: shift-out-of-bounds in tcf_police_init
net
|
-1 |
C |
unreliable |
|
8 |
1953d |
1990d
|
20/29 |
1903d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
UBSAN: shift-out-of-bounds in est_timer
net
|
-1 |
C |
unreliable |
|
73 |
1912d |
1987d
|
20/29 |
1903d |
dd5e073381f2
net_sched: gen_estimator: support large ewma log
|
|
memory leak in xskq_create
bpf
net
|
3 |
C |
|
|
7 |
1970d |
1990d
|
19/29 |
1904d |
8bee68338408
xsk: Fix memory leak for failed bind
|
|
BUG: sleeping function called from invalid context in corrupted
wireless
|
5 |
syz |
done |
|
18 |
2000d |
2024d
|
19/29 |
1904d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
WARNING in md_ioctl
raid
|
-1 |
C |
done |
error |
684 |
1988d |
2949d
|
19/29 |
1904d |
c731b84b51bf
md: fix a warning caused by a race between concurrent md_ioctl()s
|
|
BUG: unable to handle kernel paging request in htab_map_alloc (2)
bpf
|
8 |
C |
unreliable |
|
8 |
1991d |
1999d
|
19/29 |
1904d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
UBSAN: shift-out-of-bounds in __detect_linklayer
net
|
-1 |
C |
unreliable |
done |
31 |
1952d |
1958d
|
19/29 |
1904d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
BUG: receive list entry not found for dev vxcan1, id 003, mask C00007FF
can
|
-1 |
C |
unreliable |
|
2 |
2008d |
2008d
|
19/29 |
1904d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
UBSAN: shift-out-of-bounds in tcindex_set_parms
net
|
-1 |
C |
unreliable |
done |
45 |
1952d |
1987d
|
19/29 |
1904d |
bcd0cf19ef82
net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
|
|
WARNING in io_uring_flush
fs
io-uring
|
-1 |
C |
unreliable |
|
10 |
1948d |
1957d
|
19/29 |
1904d |
4325cb498cb7
io_uring: fix uring_flush in exit_files() warning
|
|
general protection fault in rose_send_frame
|
2 |
C |
done |
done |
664 |
2014d |
2693d
|
19/29 |
1904d |
3b3fd068c56e
rose: Fix Null pointer dereference in rose_send_frame()
|
|
general protection fault in taprio_dequeue_soft
net
|
2 |
C |
done |
|
2 |
1989d |
1989d
|
19/29 |
1904d |
44d4775ca518
net/sched: sch_taprio: reset child qdiscs before freeing them
|
|
BUG: unable to handle kernel paging request in bpf_lru_populate
bpf
|
8 |
C |
done |
|
12 |
1990d |
1996d
|
19/29 |
1904d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
KASAN: slab-out-of-bounds Read in hci_le_meta_evt
bluetooth
|
17 |
C |
error |
error |
45 |
2001d |
2122d
|
19/29 |
1904d |
f7e0e8b2f1b0
Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
|
|
KASAN: use-after-free Read in disk_part_iter_next
block
|
19 |
C |
unreliable |
|
243 |
1904d |
1992d
|
19/29 |
1904d |
aebf5db91705
block: fix use-after-free in disk_part_iter_next
|
|
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected (2)
|
-1 |
C |
done |
|
640 |
1968d |
2086d
|
19/29 |
1904d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
kernel BUG at net/core/dev.c:NUM!
net
|
-1 |
C |
done |
|
35 |
1958d |
1960d
|
19/29 |
1904d |
47e4bb147a96
net: sit: unregister_netdevice on newlink's error path
|
|
KASAN: use-after-free Read in search_by_entry_key
fs
|
19 |
C |
done |
|
3 |
2053d |
2056d
|
19/29 |
1904d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
UBSAN: shift-out-of-bounds in f2fs_fill_super
f2fs
|
-1 |
C |
|
|
4 |
1996d |
1995d
|
19/29 |
1904d |
e584bbe82122
f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
|
|
KASAN: global-out-of-bounds Read in smc_nl_get_sys_info
smc
|
17 |
C |
error |
|
27 |
1956d |
1983d
|
19/29 |
1904d |
25fe2c9c4cd2
smc: fix out of bound access in smc_nl_get_sys_info()
|
|
KASAN: use-after-free Read in btrfs_scan_one_device
btrfs
|
19 |
C |
error |
|
70 |
2008d |
2074d
|
19/29 |
1904d |
0697d9a61099
btrfs: don't access possibly stale fs_info data for printing duplicate device
|
|
memory leak in prepare_creds
lsm
|
3 |
C |
|
|
10 |
1924d |
2098d
|
19/29 |
1904d |
f26c08b444df
io_uring: fix file leak on error path of io ctx creation
|
|
WARNING in percpu_ref_kill_and_confirm (2)
fs
|
-1 |
C |
done |
|
71 |
1979d |
1987d
|
19/29 |
1904d |
9faadcc8abe4
io_uring: fix double io_uring free
|
|
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anywa
bfs
|
-1 |
C |
unreliable |
|
1 |
2000d |
1996d
|
19/29 |
1904d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
general protection fault in ieee80211_subif_start_xmit
wireless
|
2 |
C |
unreliable |
|
29 |
1944d |
2011d
|
19/29 |
1904d |
054c9939b480
mac80211: pause TX while changing interface type
|
|
WARNING in rds_rdma_extra_size
mm
|
-1 |
C |
done |
|
165 |
1939d |
1963d
|
19/29 |
1904d |
a11148e6fcce
net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
|
|
KASAN: use-after-free Read in decode_session6
net
|
19 |
C |
done |
|
152 |
1950d |
2158d
|
19/29 |
1904d |
0356010d825e
sctp: bring inet(6)_skb_parm back to sctp_input_cb
|
|
divide error in __tcp_select_window
net
|
2 |
C |
done |
|
1119 |
2008d |
2013d
|
19/29 |
1904d |
fd8976790a6c
mptcp: be careful on MPTCP-level ack.
|
|
WARNING: suspicious RCU usage in kernfs_iop_permission
kernfs
|
4 |
C |
done |
|
1 |
1941d |
1941d
|
19/29 |
1904d |
b854cc659dcb
ovl: avoid deadlock on directory ioctl
|
|
WARNING in io_ring_ctx_wait_and_kill
fs
|
-1 |
C |
done |
|
9 |
1958d |
1960d
|
19/29 |
1904d |
06585c497b55
io_uring: do sqo disable on install_fd error
|
|
INFO: task hung in lock_sock_nested (4)
mptcp
|
1 |
C |
done |
|
6 |
1955d |
2002d
|
19/29 |
1904d |
05e3ecea4a63
mptcp: avoid potential infinite loop in mptcp_recvmsg()
|
|
UBSAN: shift-out-of-bounds in choke_enqueue
net
|
-1 |
C |
inconclusive |
|
3853 |
1904d |
1996d
|
19/29 |
1904d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
WARNING: suspicious RCU usage in get_wiphy_regdom
wireless
|
4 |
C |
done |
|
5031 |
1955d |
1987d
|
19/29 |
1904d |
51d62f2f2c50
cfg80211: Save the regulatory domain with a lock
|
|
WARNING: suspicious RCU usage in tcp_disconnect
net
|
4 |
C |
done |
|
25 |
1958d |
1960d
|
19/29 |
1904d |
13a9499e8333
mptcp: fix locking in mptcp_disconnect()
|
|
WARNING in spi_register_controller
usb
spi
|
-1 |
C |
|
|
1848 |
1988d |
2601d
|
19/29 |
1904d |
9c60cc797cf7
media: msi2500: assign SPI bus number dynamically
|
|
KMSAN: uninit-value in __nla_validate_parse (2)
net
|
7 |
C |
|
|
2 |
1965d |
1961d
|
19/29 |
1904d |
c96adff95619
cls_flower: call nla_ok() before nla_next()
|
|
INFO: task hung in __io_uring_files_cancel
io-uring
fs
|
1 |
C |
done |
|
30 |
1945d |
2012d
|
19/29 |
1904d |
bee749b187ac
io_uring: fix files cancellation
|
|
general protection fault in xsk_recvmsg
bpf
net
|
2 |
C |
done |
unreliable |
1800 |
1989d |
1958d
|
19/29 |
1904d |
3546b9b8eced
xsk: Validate socket state in xsk_recvmsg, prior touching socket members
|
|
UBSAN: shift-out-of-bounds in sfq_init
net
|
-1 |
C |
unreliable |
|
8 |
1967d |
1981d
|
19/29 |
1904d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
memory leak in h5_rx_pkt_start
bluetooth
|
3 |
C |
|
|
5 |
2101d |
2444d
|
19/29 |
1904d |
70f259a3f427
Bluetooth: hci_h5: close serdev device and free hu in h5_close
855af2d74c87
Bluetooth: hci_h5: fix memory leak in h5_close
|
|
kernel BUG at lib/string.c:LINE! (6)
netfilter
|
-1 |
C |
done |
|
2 |
1985d |
1981d
|
19/29 |
1904d |
6cb56218ad9e
netfilter: xt_RATEEST: reject non-null terminated string from userspace
|
|
kernel BUG at include/linux/highmem.h:LINE!
mm
|
-1 |
C |
error |
|
32 |
2008d |
2012d
|
19/29 |
1904d |
0060ef3b4e6d
mm: support THPs in zero_user_segments
|
|
UBSAN: shift-out-of-bounds in dummy_hub_control
usb
|
-1 |
C |
done |
|
5 |
1981d |
1978d
|
19/29 |
1904d |
c318840fb2a4
USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
|
|
KASAN: use-after-free Read in reiserfs_fill_super
fs
|
19 |
C |
error |
done |
2 |
1998d |
1997d
|
19/29 |
1904d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
BUG: unable to handle kernel paging request in percpu_ref_exit
fs
|
8 |
C |
done |
|
3 |
1965d |
1963d
|
19/29 |
1904d |
3e2224c5867f
io_uring: Fix return value from alloc_fixed_file_ref_node
|
|
KMSAN: uninit-value in gre_parse_header
net
|
7 |
C |
|
|
9283 |
1932d |
2530d
|
19/29 |
1904d |
085c7c4e1c0e
erspan: fix version 1 check in gre_parse_header()
|
|
UBSAN: shift-out-of-bounds in red_adaptative_timer
net
|
-1 |
C |
unreliable |
|
260 |
1904d |
1996d
|
19/29 |
1904d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KASAN: slab-out-of-bounds Write in xfrm_attr_cpy32
net
|
21 |
C |
done |
|
106 |
1994d |
2042d
|
19/29 |
1904d |
d1949d045fd6
xfrm/compat: memset(0) 64-bit padding at right place
|
|
WARNING in squashfs_read_table
mm
squashfs
|
-1 |
C |
inconclusive |
|
50 |
1934d |
1963d
|
19/29 |
1904d |
506220d2ba21
squashfs: add more sanity checks in xattr id lookup
|
|
BUG: receive list entry not found for dev vcan0, id 002, mask C00007FF
can
|
-1 |
C |
unreliable |
|
5 |
2008d |
2008d
|
19/29 |
1904d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
UBSAN: shift-out-of-bounds in parse_audio_format_i
usb
sound
|
-1 |
C |
error |
|
19 |
1989d |
1995d
|
19/29 |
1904d |
175b8d89fe29
ALSA: pcm: oss: Fix potential out-of-bounds shift
43d5ca88dfcd
ALSA: usb-audio: Fix potential out-of-bounds shift
|
|
UBSAN: array-index-out-of-bounds in dquot_resume
ext4
|
15 |
C |
done |
|
1 |
1998d |
1996d
|
19/29 |
1904d |
e51d68e76d60
fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode()
|
|
WARNING: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
bfs
|
-1 |
C |
done |
|
11 |
1999d |
2067d
|
19/29 |
1904d |
dc889b8d4a81
bfs: don't use WARNING: string when it's just info.
|
|
KASAN: use-after-free Read in htab_map_alloc
bpf
|
19 |
C |
done |
|
38 |
2031d |
2034d
|
19/29 |
1904d |
8aaeed81fcb9
bpf: Fix error path in htab_map_alloc()
|
|
general protection fault in io_disable_sqo_submit
fs
io-uring
|
2 |
C |
done |
|
124 |
1956d |
1960d
|
19/29 |
1904d |
b4411616c26f
io_uring: fix null-deref in io_disable_sqo_submit
|
|
KASAN: null-ptr-deref Write in bdi_put
|
12 |
C |
done |
done |
601 |
1961d |
1995d
|
19/29 |
1904d |
2d2f6f1b4799
block: pre-initialize struct block_device in bdev_alloc_inode
|
|
general protection fault in rose_transmit_clear_request
kernel
|
2 |
C |
done |
|
5 |
2033d |
2498d
|
19/29 |
1904d |
3b3fd068c56e
rose: Fix Null pointer dereference in rose_send_frame()
|
|
kernel BUG at net/core/skbuff.c:LINE! (3)
|
-1 |
C |
done |
|
4399 |
1919d |
3036d
|
19/29 |
1904d |
afbc293add64
af_key: relax availability checks for skb size calculation
|
|
UBSAN: shift-out-of-bounds in __red_change
net
|
-1 |
C |
unreliable |
|
24 |
1907d |
1995d
|
19/29 |
1904d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
WARNING in io_uring_cancel_task_requests
io-uring
fs
|
-1 |
syz |
done |
|
69 |
1941d |
1944d
|
19/29 |
1904d |
70b2c60d3797
io_uring: fix sqo ownership false positive warning
|
|
kernel BUG at fs/notify/dnotify/dnotify.c:LINE! (2)
fuse
|
-1 |
C |
inconclusive |
|
2 |
2005d |
2011d
|
19/29 |
1904d |
5d069dbe8aaf
fuse: fix bad inode
|
|
BUG: receive list entry not found for dev vcan0, id 001, mask C00007FF
can
|
-1 |
C |
unreliable |
|
5 |
2011d |
2011d
|
19/29 |
1904d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
inconsistent lock state in io_file_data_ref_zero
fs
|
4 |
C |
done |
|
7152 |
1987d |
2011d
|
19/29 |
1904d |
ac0648a56c1f
io_uring: use bottom half safe lock for fixed file data
|
|
unregister_netdevice: waiting for DEV to become free (4)
|
2 |
C |
done |
|
50394 |
1904d |
2106d
|
19/29 |
1904d |
5399d52233c4
rxrpc: Fix deadlock around release of dst cached on udp tunnel
|
|
WARNING in bpf_prog_test_run_raw_tp
mm
|
-1 |
C |
done |
|
36 |
1953d |
1963d
|
19/29 |
1904d |
7ac6ad051150
bpf: Reject too big ctx_size_in for raw_tp test run
|
|
UBSAN: shift-out-of-bounds in gred_change
net
|
-1 |
C |
unreliable |
|
5 |
1917d |
1972d
|
19/29 |
1904d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
BUG: corrupted list in io_file_get
fs
io-uring
|
8 |
C |
done |
|
3 |
1944d |
1944d
|
19/29 |
1904d |
f609cbb8911e
io_uring: fix list corruption for splice file_get
|
|
UBSAN: shift-out-of-bounds in option_probe
usb
|
-1 |
C |
error |
|
22 |
1994d |
1995d
|
19/29 |
1904d |
a251963f76fa
USB: serial: option: add interface-number sanity check to flag handling
|
|
KMSAN: kernel-infoleak in vmci_host_unlocked_ioctl
kernel
|
9 |
C |
|
|
22 |
1932d |
2017d
|
19/29 |
1904d |
31dcb6c30a26
misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
|
|
general protection fault in jffs2_parse_param
jffs2
|
2 |
C |
error |
done |
1632 |
1985d |
2074d
|
19/29 |
1904d |
a61df3c413e4
jffs2: Fix NULL pointer dereference in rp_size fs option parsing
|
|
KMSAN: uninit-value in number (2)
can
|
7 |
C |
|
|
168 |
1905d |
2284d
|
19/29 |
1904d |
c8c958a58fc6
can: af_can: prevent potential access of uninitialized member in can_rcv()
9aa9379d8f86
can: af_can: prevent potential access of uninitialized member in canfd_rcv()
|
|
possible deadlock in send_sigio (2)
fs
|
4 |
C |
done |
done |
40 |
1973d |
2086d
|
19/29 |
1904d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
kernel BUG at fs/reiserfs/prints.c:LINE!
fs
|
-1 |
C |
done |
done |
5 |
1995d |
2073d
|
19/29 |
1904d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
KASAN: vmalloc-out-of-bounds Write in lzo_uncompress
squashfs
|
21 |
C |
done |
|
8 |
1935d |
1960d
|
19/29 |
1904d |
e812cbbbbbb1
squashfs: avoid out of bounds writes in decompressors
|
|
BUG: unable to handle kernel paging request in pcpu_freelist_populate
bpf
|
8 |
C |
unreliable |
|
42 |
1989d |
2000d
|
19/29 |
1904d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
UBSAN: array-index-out-of-bounds in alg_bind
crypto
|
15 |
C |
error |
|
700 |
1989d |
2049d
|
19/29 |
1904d |
92eb6c3060eb
crypto: af_alg - avoid undefined behavior accessing salg_name
|
|
memory leak in rxrpc_lookup_local
net
afs
|
3 |
C |
|
|
1415 |
1944d |
2408d
|
19/29 |
1904d |
b8323f7288ab
rxrpc: Fix memory leak in rxrpc_lookup_local
|
|
WARNING: suspicious RCU usage in wiphy_apply_custom_regulatory
wireless
|
4 |
C |
done |
|
28 |
1987d |
1984d
|
19/29 |
1904d |
51d62f2f2c50
cfg80211: Save the regulatory domain with a lock
|
|
memory leak in generic_parse_monolithic
fs
|
3 |
C |
|
|
11 |
1995d |
2020d
|
19/29 |
1904d |
4cb682964706
afs: Fix memory leak when mounting with multiple source parameters
|
|
WARNING in mptcp_reset_timer
mptcp
|
-1 |
C |
unreliable |
|
1307 |
1921d |
2016d
|
19/29 |
1904d |
b680a214ec28
mptcp: update rtx timeout only if required.
|
|
KASAN: slab-out-of-bounds Write in record_print_text
fs
|
21 |
C |
done |
unreliable |
17 |
1945d |
1947d
|
19/29 |
1904d |
08d60e599954
printk: fix string termination for record_print_text()
|
|
WARNING in xfrm_alloc_compat
net
|
-1 |
C |
done |
|
130 |
1916d |
2038d
|
19/29 |
1904d |
dbd7ae5154d5
xfrm/compat: Translate by copying XFRMA_UNSPEC attribute
|
|
UBSAN: shift-out-of-bounds in red_enqueue
net
|
-1 |
C |
unreliable |
|
4906 |
1904d |
1996d
|
19/29 |
1904d |
bd1248f1ddbc
net: sched: prevent invalid Scell_log shift count
|
|
KMSAN: kernel-infoleak in move_addr_to_user (4)
net
|
9 |
C |
|
|
59 |
1911d |
1963d
|
19/29 |
1904d |
b42b3a2744b3
can: isotp: isotp_getname(): fix kernel information leak
|
|
general protection fault in ext4_commit_super
ext4
|
2 |
C |
done |
|
4 |
1983d |
1982d
|
19/29 |
1904d |
c92dc856848f
ext4: defer saving error info from atomic context
|
|
UBSAN: array-index-out-of-bounds in arch_uprobe_analyze_insn
trace
|
15 |
C |
done |
|
604 |
1997d |
2074d
|
19/29 |
1904d |
12cb908a11b2
x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes
84da009f06e6
x86/sev-es: Use new for_each_insn_prefix() macro to loop over prefixes bytes
4e9a5ae8df5b
x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
|
|
BUG: unable to handle kernel NULL pointer dereference in call_rcu
kernel
|
10 |
C |
done |
|
85 |
1974d |
1977d
|
19/29 |
1904d |
13384f6125ad
kasan: fix null pointer dereference in kasan_record_aux_stack
|
|
KASAN: vmalloc-out-of-bounds Read in htab_free_elems
bpf
|
17 |
C |
unreliable |
|
7 |
1997d |
1998d
|
19/29 |
1904d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
BUG: receive list entry not found for dev vxcan1, id 002, mask C00007FF
can
|
-1 |
C |
unreliable |
|
3 |
2008d |
2010d
|
19/29 |
1904d |
d73ff9b7c4ea
can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check
|
|
WARNING in rhashtable_free_and_destroy
wireless
|
-1 |
C |
error |
|
3 |
2000d |
2093d
|
19/29 |
1904d |
905b2032fa42
mac80211: mesh: fix mesh_pathtbl_init() error path
|
|
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow
fs
|
10 |
C |
inconclusive |
done |
3 |
1926d |
2067d
|
19/29 |
1904d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
BUG: sleeping function called from invalid context in sta_info_move_state
wireless
|
5 |
C |
done |
|
39248 |
1999d |
2030d
|
19/29 |
1904d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
UBSAN: shift-out-of-bounds in strset_parse_request
net
|
-1 |
C |
done |
|
16 |
1967d |
1990d
|
19/29 |
1904d |
efb796f5571f
ethtool: fix string set id check
|
|
KASAN: slab-out-of-bounds Read in btrfs_scan_one_device
btrfs
|
17 |
C |
done |
done |
1 |
2028d |
2024d
|
19/29 |
1904d |
0697d9a61099
btrfs: don't access possibly stale fs_info data for printing duplicate device
|
|
WARNING in qrtr_tun_write_iter
mm
|
-1 |
C |
error |
|
57 |
1932d |
1963d
|
19/29 |
1904d |
2a80c1581237
net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
|
|
memory leak in hub_event
usb
|
3 |
C |
|
|
7 |
1925d |
2013d
|
19/29 |
1904d |
e469d0b09a19
media: gspca: Fix memory leak in probe
|
|
possible deadlock in send_sigurg (2)
fs
|
4 |
C |
done |
|
25 |
1991d |
2042d
|
19/29 |
1904d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
WARNING in yurex_write/usb_submit_urb
usb
|
-1 |
C |
error |
|
78 |
1963d |
1991d
|
19/29 |
1904d |
372c93131998
USB: yurex: fix control-URB timeout handling
|
|
kernel BUG at fs/ext4/inode.c:LINE!
ext4
|
-1 |
C |
done |
|
9 |
1974d |
2099d
|
19/29 |
1904d |
073861ed77b6
mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
|
|
UBSAN: shift-out-of-bounds in cbq_dequeue
net
|
-1 |
C |
unreliable |
|
27 |
1952d |
1996d
|
19/29 |
1904d |
e4bedf48aaa5
net_sched: reject silly cell_log in qdisc_get_rtab()
|
|
KASAN: use-after-free Write in __sco_sock_close
bluetooth
|
22 |
C |
done |
done |
10 |
2025d |
2123d
|
19/29 |
1904d |
6dfccd13db2f
Bluetooth: Fix null pointer dereference in hci_event_packet()
|
|
BUG: unable to handle kernel paging request in dqput
ext4
|
8 |
C |
done |
|
7 |
1999d |
2068d
|
19/29 |
1904d |
11c514a99bb9
quota: Sanity-check quota file headers on load
|
|
UBSAN: shift-out-of-bounds in intel_pmu_refresh
kvm-x86
|
-1 |
C |
unreliable |
|
1237 |
1945d |
1995d
|
19/29 |
1904d |
e61ab2a320c3
KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
|
|
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info
sound
usb
|
-1 |
C |
error |
|
9 |
1962d |
1981d
|
19/29 |
1904d |
c06ccf3ebb75
ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
|
|
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked
sound
|
-1 |
C |
unreliable |
|
225 |
1980d |
1995d
|
19/29 |
1904d |
11cb881bf075
ALSA: pcm: oss: Fix a few more UBSAN fixes
|
|
UBSAN: shift-out-of-bounds in ext4_fill_super
ext4
|
-1 |
C |
unreliable |
|
88 |
1979d |
1995d
|
19/29 |
1904d |
c9200760da8a
ext4: check for invalid block size early when mounting a file system
|
|
INFO: rcu detected stall in tipc_release
tipc
|
1 |
C |
done |
done |
4 |
2015d |
2150d
|
19/29 |
1904d |
cc00bcaa5899
netfilter: x_tables: Switch synchronization to RCU
|
|
UBSAN: shift-out-of-bounds in vhci_hub_control
usb
|
-1 |
C |
unreliable |
|
4 |
1944d |
1981d
|
19/29 |
1904d |
718bf42b119d
usb: usbip: vhci_hcd: protect shift size
|
|
general protection fault in tower_disconnect
usb
|
2 |
C |
|
|
53 |
1987d |
1995d
|
19/29 |
1904d |
b175d273d4e4
USB: legotower: fix logical error in recent commit
|
|
kernel BUG at drivers/dma-buf/dma-buf.c:LINE!
dri
media
|
-1 |
syz |
error |
done |
11 |
2021d |
2271d
|
19/29 |
1904d |
e722a295cf49
staging: ion: remove from the tree
|
|
memory leak in wacom_probe
input
usb
|
3 |
C |
|
|
26 |
1967d |
2021d
|
19/29 |
1904d |
37309f47e2f5
HID: wacom: Fix memory leakage caused by kfifo_alloc
|
|
KASAN: use-after-free Read in service_outstanding_interrupt
usb
|
19 |
C |
|
|
28 |
1963d |
2118d
|
19/29 |
1904d |
5e5ff0b4b6bc
USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
|
|
general protection fault in call_commit_handler
|
2 |
C |
done |
|
428 |
1960d |
2041d
|
19/29 |
1904d |
5122565188ba
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
|
|
BUG: unable to handle kernel paging request in smc_nl_handle_smcr_dev
smc
|
8 |
C |
|
|
16 |
1973d |
1995d
|
19/29 |
1904d |
995433b795ce
net/smc: fix access to parent of an ib device
|
|
KASAN: vmalloc-out-of-bounds Write in bpf_lru_populate
bpf
|
21 |
C |
unreliable |
|
19 |
1990d |
2000d
|
19/29 |
1904d |
e1868b9e36d0
bpf: Avoid overflows involving hash elem_size
|
|
memory leak in copy_process
kernel
|
3 |
C |
|
|
23 |
1921d |
2018d
|
19/29 |
1904d |
450677dcb0cc
mm/madvise: fix memory leak from process_madvise
|
|
KASAN: stack-out-of-bounds Write in bitmap_from_arr32
net
|
21 |
C |
done |
|
2 |
2007d |
2003d
|
19/29 |
1904d |
a770bf515613
ethtool: fix stack overflow in ethnl_parse_bitset()
|
|
possible deadlock in hugetlb_cow
mm
|
4 |
C |
unreliable |
|
341 |
1974d |
1997d
|
19/29 |
1904d |
e7dd91c456a8
mm/hugetlb: fix deadlock in hugetlb_cow error path
|
|
KASAN: null-ptr-deref Write in start_transaction
btrfs
|
12 |
C |
done |
done |
1 |
1996d |
2023d
|
19/29 |
1904d |
ecfdc08b8cc6
btrfs: remove dio iomap DSYNC workaround
|
|
KASAN: slab-out-of-bounds Read in squashfs_export_iget
squashfs
|
17 |
C |
done |
error |
3 |
1975d |
1994d
|
19/29 |
1904d |
eabac19e40c0
squashfs: add more sanity checks in inode lookup
|
|
WARNING in io_disable_sqo_submit
fs
|
-1 |
C |
done |
|
9 |
1949d |
1957d
|
19/29 |
1904d |
6b393a1ff174
io_uring: fix false positive sqo warning on flush
|
|
KASAN: null-ptr-deref Read in filp_close
fs
|
11 |
C |
done |
|
9 |
1984d |
1986d
|
19/29 |
1904d |
fec8a6a69103
close_range: unshare all fds for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
6abc20f8f879
selftests/core: add regression test for CLOSE_RANGE_UNSHARE | CLOSE_RANGE_CLOEXEC
|
|
possible deadlock in _destroy_id
rdma
|
4 |
C |
unreliable |
|
28 |
2007d |
2015d
|
19/29 |
1904d |
dd37d2f59eb8
RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
|
|
UBSAN: array-index-out-of-bounds in ieee80211_del_key (2)
wireless
|
15 |
C |
error |
|
3 |
1995d |
2003d
|
19/29 |
1904d |
2d9463083ce9
nl80211: validate key indexes for cfg80211_registered_device
|
|
general protection fault in hci_event_packet
bluetooth
|
2 |
C |
done |
|
25 |
2070d |
2123d
|
19/29 |
1904d |
6dfccd13db2f
Bluetooth: Fix null pointer dereference in hci_event_packet()
|
|
KASAN: use-after-free Read in dump_schedule
net
|
19 |
C |
done |
done |
7 |
1981d |
2091d
|
19/29 |
1904d |
cc00bcaa5899
netfilter: x_tables: Switch synchronization to RCU
|
|
KASAN: invalid-free in p9_client_create (2)
v9fs
|
24 |
C |
done |
|
3 |
1945d |
1945d
|
19/29 |
1904d |
757fed1d0898
Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
|
|
general protection fault in wext_handle_ioctl
wireless
|
2 |
C |
inconclusive |
|
9 |
1947d |
2036d
|
19/29 |
1904d |
5122565188ba
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
|
|
INFO: rcu detected stall in sys_exit_group (6)
mm
|
1 |
C |
|
|
4 |
2064d |
2071d
|
19/29 |
1904d |
c583bcb8f5ed
rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
|
|
WARNING in cm109_input_ev/usb_submit_urb
input
usb
|
-1 |
C |
unreliable |
|
8 |
1993d |
2013d
|
19/29 |
1904d |
82e060904732
Input: cm109 - do not stomp on control URB
|
|
UBSAN: shift-out-of-bounds in hash_mac_create
netfilter
|
-1 |
C |
unreliable |
|
29 |
1971d |
1990d
|
19/29 |
1904d |
5c8193f568ae
netfilter: ipset: fix shift-out-of-bounds in htable_bits()
|
|
possible deadlock in process_measurement (2)
integrity
lsm
|
4 |
C |
done |
done |
56 |
2000d |
2367d
|
15/29 |
1967d |
15a8d68e9dc2
mm/hugetlb: a page from buddy is not on any list
|
|
INFO: rcu detected stall in sys_open (2)
crypto
|
1 |
C |
done |
done |
42 |
2024d |
2374d
|
15/29 |
1980d |
1d0e850a49a5
afs: Fix cell removal
|
|
BUG: unable to handle kernel paging request in cfb_imageblit
fbdev
|
8 |
C |
done |
done |
30 |
2015d |
2059d
|
15/29 |
1980d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
KASAN: use-after-free Read in eth_type_trans
net
|
19 |
C |
done |
error |
3 |
2204d |
2346d
|
15/29 |
1980d |
96aa1b22bd6b
tun: correct header offsets in napi frags mode
|
|
BUG: MAX_LOCKDEP_KEYS too low!
net
|
-1 |
C |
done |
error |
3496 |
2160d |
2404d
|
15/29 |
1994d |
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
|
BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low!
|
-1 |
C |
done |
error |
25236 |
2198d |
2638d
|
15/29 |
1994d |
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
|
INFO: rcu detected stall in __se_sys_mount
afs
|
1 |
C |
done |
done |
2 |
2026d |
2150d
|
15/29 |
1995d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: null-ptr-deref Write in kthread_use_mm
io-uring
fs
|
12 |
C |
done |
|
2 |
2032d |
2031d
|
15/29 |
2013d |
4b70cf9dea4c
io_uring: ensure consistent view of original task ->mm from SQPOLL
|
|
WARNING in close_fs_devices (2)
btrfs
|
-1 |
C |
|
|
23 |
2015d |
2076d
|
15/29 |
2013d |
cf89af146b7e
btrfs: dev-replace: fail mount if we don't have replace item with target device
|
|
memory leak in gadget_setup
usb
|
3 |
C |
|
|
49 |
2025d |
2041d
|
15/29 |
2013d |
129aa9734559
usb: raw-gadget: fix memory leak in gadget_setup
|
|
memory leak in gadget_bind
usb
|
3 |
C |
|
|
62 |
2025d |
2041d
|
15/29 |
2013d |
129aa9734559
usb: raw-gadget: fix memory leak in gadget_setup
|
|
general protection fault in io_uring_show_cred
fs
|
2 |
C |
done |
|
4 |
2029d |
2028d
|
15/29 |
2013d |
6b47ab81c9a9
io_uring: use correct pointer for io_uring_show_cred()
|
|
KASAN: use-after-free Write in io_submit_sqes
fs
io-uring
|
22 |
C |
error |
|
2 |
2031d |
2030d
|
15/29 |
2013d |
cb8a8ae31074
io_uring: drop req/tctx io_identity separately
|
|
INFO: rcu detected stall in process_one_work (3)
kernel
|
1 |
C |
done |
done |
1 |
2058d |
2099d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
INFO: task can't die in corrupted
fs
|
1 |
C |
done |
|
4 |
2031d |
2058d
|
15/29 |
2017d |
86f33603f8c5
f2fs: handle errors of f2fs_get_meta_page_nofail
|
|
BUG: corrupted list in kobject_add_internal
bluetooth
|
8 |
C |
done |
done |
9 |
2055d |
2118d
|
15/29 |
2017d |
a46b7ed4d52d
Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
|
|
WARNING in dma_map_page_attrs
iommu
|
-1 |
C |
unreliable |
|
304 |
2026d |
2043d
|
15/29 |
2017d |
683a9c7ed817
RDMA: Fix software RDMA drivers for dma mapping error
|
|
WARNING in unlock_new_inode
fs
|
-1 |
C |
done |
|
76 |
2054d |
2959d
|
15/29 |
2017d |
8859bf2b1278
reiserfs: only call unlock_new_inode() if I_NEW
|
|
memory leak in ieee80211_check_fast_xmit
wireless
|
3 |
C |
|
|
983 |
2027d |
2071d
|
15/29 |
2017d |
dcd479e10a05
mac80211: always wind down STA state
|
|
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_resize
openvswitch
|
4 |
C |
error |
|
1 |
2037d |
2036d
|
15/29 |
2017d |
fea07a487c6d
net: openvswitch: silence suspicious RCU usage warning
|
|
general protection fault in xsk_release
bpf
net
|
2 |
C |
done |
|
2 |
2070d |
2069d
|
15/29 |
2017d |
1fd17c8cd0aa
xsk: Fix possible crash in socket_release when out-of-memory
|
|
memory leak in reiserfs_parse_options
fs
|
3 |
C |
|
|
4 |
2082d |
2277d
|
15/29 |
2017d |
e9d4709fcc26
reiserfs: Fix memory leak in reiserfs_parse_options()
|
|
WARNING in binder_transaction_buffer_release (2)
kernel
|
-1 |
C |
done |
done |
442 |
2150d |
2191d
|
15/29 |
2017d |
e8b8ae7ce32e
binder: Remove bogus warning on failed same-process transaction
|
|
BUG: using __this_cpu_read() in preemptible code in trace_hardirqs_on
|
4 |
C |
done |
|
502745 |
2020d |
2051d
|
15/29 |
2017d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
INFO: task hung in wdm_flush
usb
|
1 |
C |
|
|
38294 |
2095d |
2479d
|
15/29 |
2017d |
37d2a36394d9
USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
|
|
INFO: trying to register non-static key in uhid_char_release
|
-1 |
C |
done |
done |
26 |
2094d |
2272d
|
15/29 |
2017d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
WARNING in ieee80211_s1g_channel_width
wireless
|
-1 |
C |
done |
|
3 |
2060d |
2060d
|
15/29 |
2017d |
c1cd35c60601
cfg80211: only allow S1G channels on S1G band
|
|
KMSAN: uninit-value in ieee80211_skb_resize
wireless
|
7 |
C |
|
|
5 |
2046d |
2071d
|
15/29 |
2017d |
14f46c1e5108
mac80211: fix use of skb payload instead of header
|
|
KASAN: global-out-of-bounds Read in precalculate_color
media
|
17 |
C |
done |
done |
170 |
2078d |
2371d
|
15/29 |
2017d |
e3158a5e7e66
media: vivid: Fix global-out-of-bounds read in precalculate_color()
|
|
general protection fault in percpu_ref_exit
fs
|
2 |
C |
done |
|
3 |
2053d |
2056d
|
15/29 |
2017d |
7ea6bf2e6c40
percpu_ref: don't refer to ref->data if it isn't allocated
|
|
KASAN: use-after-free Write in tcindex_change
net
|
22 |
C |
done |
done |
4 |
2260d |
2261d
|
15/29 |
2017d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
WARNING: refcount bug in do_enable_set
bluetooth
|
13 |
C |
inconclusive |
done |
8 |
2120d |
2230d
|
15/29 |
2017d |
b83764f9220a
Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
|
|
possible deadlock in cleanup_net
net
|
4 |
C |
done |
|
281 |
2086d |
2094d
|
15/29 |
2017d |
d966ddcc3821
tipc: fix a deadlock when flushing scheduled work
|
|
general protection fault in utf8_casefold
f2fs
|
2 |
C |
done |
|
1 |
2057d |
2056d
|
15/29 |
2017d |
f6322f3f1212
f2fs: reject CASEFOLD inode flag without casefold feature
|
|
KASAN: use-after-free Read in sctp_auth_free
sctp
|
19 |
C |
done |
|
4 |
2056d |
2057d
|
15/29 |
2017d |
d42ee76ecb6c
net-backports: sctp: fix sctp_auth_init_hmacs() error path
|
|
kernel panic: Fatal exception (3)
|
2 |
C |
done |
|
2 |
2052d |
2050d
|
15/29 |
2017d |
eadd1befdd77
netem: fix zero division in tabledist
|
|
KASAN: use-after-free Read in ath9k_hif_usb_rx_cb
wireless
|
19 |
C |
|
|
2849 |
2017d |
2252d
|
15/29 |
2017d |
03fb92a432ea
ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
|
|
memory leak in udf_process_sequence
udf
|
3 |
C |
|
|
4 |
2070d |
2074d
|
15/29 |
2017d |
a7be300de800
udf: Fix memory leak when mounting
|
|
general protection fault in unlink_file_vma
mm
|
2 |
C |
done |
|
1 |
2090d |
2086d
|
15/29 |
2017d |
bc4fe4cdd602
mm: mmap: Fix general protection fault in unlink_file_vma()
|
|
KASAN: use-after-free Read in fscache_alloc_cookie
fs
|
19 |
syz |
done |
|
1 |
2070d |
2070d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: unknown-crash Read in do_exit
kernel
|
17 |
C |
inconclusive |
done |
2 |
2075d |
2081d
|
15/29 |
2017d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
WARNING in handle_exception_nmi
kvm-x86
|
-1 |
C |
error |
done |
2653 |
2058d |
2063d
|
15/29 |
2017d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
KMSAN: uninit-value in ip_tunnel_xmit (2)
net
|
7 |
C |
|
|
11778 |
2022d |
2846d
|
15/29 |
2017d |
fdafed459998
ip_gre: set dev->hard_header_len and dev->needed_headroom properly
|
|
WARNING: refcount bug in p9_req_put
v9fs
|
13 |
syz |
inconclusive |
done |
6 |
2197d |
2749d
|
15/29 |
2017d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
INFO: rcu detected stall in ip_list_rcv
net
|
1 |
C |
error |
done |
3 |
2065d |
2091d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
UBSAN: array-index-out-of-bounds in precalculate_color
media
|
15 |
C |
|
|
153 |
2052d |
2077d
|
15/29 |
2017d |
e3158a5e7e66
media: vivid: Fix global-out-of-bounds read in precalculate_color()
|
|
KMSAN: uninit-value in can_receive (2)
can
|
7 |
C |
|
|
2060 |
2022d |
2116d
|
15/29 |
2017d |
e009f95b1543
can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
|
|
WARNING in syscall_exit_to_user_mode
kernel
|
-1 |
C |
done |
done |
1 |
2055d |
2084d
|
15/29 |
2017d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
general protection fault in tcf_generic_walker
net
|
2 |
syz |
|
|
9 |
2064d |
2067d
|
15/29 |
2017d |
580e4273d7a8
net_sched: check error pointer in tcf_dump_walker()
|
|
WARNING in print_bfs_bug
|
-1 |
C |
done |
|
14759 |
2049d |
2402d
|
15/29 |
2017d |
6d1823ccc480
lockdep: Optimize the memory usage of circular queue
|
|
KASAN: use-after-free Read in io_wqe_worker
fs
io-uring
|
19 |
C |
error |
|
2 |
2067d |
2069d
|
15/29 |
2017d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
INFO: task hung in io_uring_setup
|
1 |
C |
done |
|
51 |
2086d |
2092d
|
15/29 |
2017d |
7e84e1c7566a
io_uring: allow disabling rings during the creation
|
|
KMSAN: uninit-value in unix_find_other
net
|
7 |
C |
|
|
57 |
2062d |
2879d
|
15/29 |
2017d |
7ca1db21ef8e
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
|
|
KASAN: use-after-free Read in delete_partition
block
|
19 |
C |
done |
done |
3 |
2093d |
2090d
|
15/29 |
2017d |
08fc1ab6d748
block: fix locking in bdev_del_partition
|
|
WARNING in get_signal
kernel
|
-1 |
C |
done |
|
2 |
2060d |
2062d
|
15/29 |
2017d |
7b3c36fc4c23
ptrace: fix task_join_group_stop() for the case when current is traced
|
|
KASAN: use-after-free Write in refcount_warn_saturate
bluetooth
|
22 |
C |
inconclusive |
done |
2 |
2121d |
2280d
|
15/29 |
2017d |
b83764f9220a
Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
|
|
INFO: task hung in addrconf_verify_work (3)
|
1 |
C |
done |
|
75 |
2030d |
2065d
|
15/29 |
2017d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
kernel panic: stack is corrupted in get_kernel_gp_address
kernel
|
2 |
syz |
done |
done |
1 |
2051d |
2083d
|
15/29 |
2017d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
WARNING: ODEBUG bug in exit_to_user_mode_prepare
|
-1 |
C |
done |
done |
27 |
2092d |
2097d
|
15/29 |
2017d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KMSAN: uninit-value in batadv_hard_if_event (2)
batman
usb
|
7 |
C |
|
|
162 |
2033d |
2116d
|
15/29 |
2017d |
f45a4248ea4c
net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
|
|
INFO: task hung in ctrl_getfamily
net
|
1 |
syz |
done |
done |
22 |
2111d |
2724d
|
15/29 |
2017d |
47733f9daf4f
tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
|
|
KASAN: out-of-bounds Read in __switch_to (2)
kernel
|
17 |
syz |
done |
done |
1 |
2065d |
2061d
|
15/29 |
2017d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
WARNING: suspicious RCU usage in qrtr_ns_worker
arm-msm
net
|
4 |
C |
done |
|
1 |
2099d |
2162d
|
15/29 |
2017d |
a7809ff90ce6
net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
|
|
inconsistent lock state in xa_destroy
io-uring
fs
|
4 |
C |
|
|
755 |
2055d |
2056d
|
15/29 |
2017d |
ca6484cd308a
io_uring: no need to call xa_destroy() on empty xarray
|
|
KASAN: use-after-free Write in afs_manage_cell
afs
|
22 |
C |
done |
done |
20 |
2050d |
2119d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
possible deadlock in _snd_pcm_stream_lock_irqsave
|
4 |
C |
done |
|
997 |
2049d |
2086d
|
15/29 |
2017d |
6564d0ad67ef
ALSA: ctl: Workaround for lockdep warning wrt card->ctl_files_rwlock
|
|
INFO: task hung in io_uring_flush
io-uring
fs
|
1 |
C |
done |
done |
11 |
2108d |
2115d
|
15/29 |
2017d |
b7ddce3cbf01
io_uring: fix cancel of deferred reqs with ->files
|
|
memory leak in kobject_set_name_vargs (3)
nilfs
|
3 |
C |
|
|
19 |
2018d |
2074d
|
15/29 |
2017d |
cb8d53d2c973
ext4: fix leaking sysfs kobject after failed mount
|
|
WARNING in percpu_ref_exit (2)
|
-1 |
C |
done |
done |
272 |
2053d |
2349d
|
15/29 |
2017d |
c1e2148f8ecb
io_uring: free fixed_file_data after RCU grace period
|
|
KASAN: slab-out-of-bounds Write in gfs2_fill_super
gfs2
|
21 |
C |
done |
|
1 |
2065d |
2064d
|
15/29 |
2017d |
0ddc5154b24c
gfs2: add validation checks for size of superblock
|
|
WARNING in rxrpc_recvmsg
afs
net
|
-1 |
C |
error |
done |
5 |
2153d |
2153d
|
15/29 |
2017d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
general protection fault in open_xa_dir
fs
|
2 |
C |
done |
|
3 |
2053d |
2064d
|
15/29 |
2017d |
c2bb80b8bdd0
reiserfs: Fix oops during mount
|
|
KASAN: use-after-free Read in tcf_action_init
net
|
19 |
C |
done |
|
1 |
2069d |
2067d
|
15/29 |
2017d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
INFO: task hung in ubi_detach_mtd_dev
mtd
|
1 |
syz |
error |
error |
4 |
2198d |
2284d
|
15/29 |
2017d |
d005f8c6588e
ubi: check kthread_should_stop() after the setting of task state
|
|
INFO: rcu detected stall in exit_group
mm
|
1 |
C |
done |
done |
1 |
2055d |
2084d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: slab-out-of-bounds Read in ntfs_attr_find
ntfs3
|
17 |
C |
done |
|
9 |
2051d |
2976d
|
15/29 |
2017d |
4f8c94022f0b
ntfs: add check for mft record size in superblock
|
|
KASAN: slab-out-of-bounds Read in strset_parse_request
net
|
17 |
C |
error |
|
141 |
2056d |
2056d
|
15/29 |
2017d |
db972e532518
ethtool: strset: allow ETHTOOL_A_STRSET_COUNTS_ONLY attr
|
|
WARNING in arch_install_hw_breakpoint
kernel
|
-1 |
C |
inconclusive |
done |
8 |
2504d |
2621d
|
15/29 |
2017d |
e898e69d6b94
x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
|
|
KASAN: use-after-free Read in tipc_mcast_xmit (2)
tipc
|
19 |
C |
done |
|
37 |
2049d |
2062d
|
15/29 |
2017d |
ed42989eab57
tipc: fix the skb_unshare() in tipc_buf_append()
|
|
INFO: task hung in flush_to_ldisc
serial
|
1 |
C |
inconclusive |
done |
15 |
2294d |
2364d
|
15/29 |
2017d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
KASAN: use-after-free Write in io_wq_worker_running
io-uring
fs
|
22 |
C |
error |
|
14 |
2060d |
2087d
|
15/29 |
2017d |
c4068bf898dd
io-wq: fix use-after-free in io_wq_worker_running
|
|
KASAN: slab-out-of-bounds Read in soft_cursor
fbdev
|
17 |
C |
done |
|
218 |
2056d |
2365d
|
15/29 |
2017d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
BUG: unable to handle kernel paging request in tcf_action_dump_terse
net
|
8 |
C |
done |
|
15 |
2061d |
2067d
|
15/29 |
2017d |
580e4273d7a8
net_sched: check error pointer in tcf_dump_walker()
|
|
INFO: rcu detected stall in sys_mount (5)
afs
|
1 |
C |
done |
done |
10 |
2064d |
2086d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
general protection fault in qp_release_pages
kernel
|
2 |
C |
done |
|
2 |
2053d |
2053d
|
15/29 |
2017d |
90ca6333fd65
VMCI: check return value of get_user_pages_fast() for errors
|
|
INFO: task hung in lock_sock_nested (3)
net
|
1 |
C |
done |
|
5 |
2061d |
2062d
|
15/29 |
2017d |
d9fb8c507d42
mptcp: fix infinite loop on recvmsg()/worker() race.
|
|
KMSAN: uninit-value in __fget_light (2)
fs
|
7 |
C |
|
|
18 |
2034d |
2044d
|
15/29 |
2017d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
WARNING in ati_remote_sendpacket/usb_submit_urb
usb
media
|
-1 |
C |
|
|
22 |
2188d |
2499d
|
15/29 |
2017d |
a8be80053ea7
media: ati_remote: sanity check for both endpoints
|
|
KASAN: stack-out-of-bounds Read in csd_lock_record
kernel
|
17 |
C |
|
|
226 |
2148d |
2153d
|
15/29 |
2017d |
35feb60474bf
kernel/smp: Provide CSD lock timeout diagnostics
|
|
KASAN: use-after-free Read in afs_deactivate_cell (2)
afs
|
19 |
C |
done |
|
11 |
2055d |
2074d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
possible deadlock in mnt_want_write
fs
|
4 |
C |
done |
done |
662 |
2057d |
2864d
|
15/29 |
2017d |
146d62e5a586
ovl: detect overlapping layers
|
|
general protection fault in ieee80211_key_free
wireless
|
2 |
C |
done |
|
3 |
2053d |
2058d
|
15/29 |
2017d |
3dc289f8f139
net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
|
|
KASAN: use-after-free Write in vcs_read
serial
|
22 |
C |
done |
|
11 |
2100d |
2105d
|
15/29 |
2017d |
52c3c3a59234
Revert "vc_screen: extract vcs_read_buf_header"
|
|
WARNING in irqentry_exit
kernel
|
-1 |
C |
error |
done |
2080 |
2052d |
2119d
|
15/29 |
2017d |
4d004099a668
lockdep: Fix lockdep recursion
|
|
INFO: rcu detected stall in sys_newlstat
afs
|
1 |
C |
error |
done |
1 |
2072d |
2071d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
kernel BUG at net/rxrpc/conn_object.c:LINE!
net
afs
|
-1 |
C |
done |
|
855 |
2020d |
2085d
|
15/29 |
2017d |
546a42410bf7
rxrpc: Fix conn bundle leak in net-namespace exit
|
|
possible deadlock in dev_uc_sync
net
|
4 |
C |
done |
|
3 |
2053d |
2150d
|
15/29 |
2017d |
0e8b8d6a2d85
net: core: use list_del_init() instead of list_del() in netdev_run_todo()
|
|
WARNING in wp_page_copy
mm
|
-1 |
syz |
done |
done |
9 |
2290d |
2367d
|
15/29 |
2017d |
c3e5ea6ee574
mm: avoid data corruption on CoW fault into PFN-mapped VMA
|
|
general protection fault in vmk80xx_write_packet
usb
staging
|
2 |
C |
|
|
82 |
2058d |
2513d
|
15/29 |
2017d |
e1f13c879a7c
staging: comedi: check validity of wMaxPacketSize of usb endpoints found
|
|
general protection fault in rt6_fill_node
net
|
2 |
C |
done |
done |
3 |
2102d |
2099d
|
15/29 |
2017d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
KMSAN: uninit-value in do_ip_vs_set_ctl
lvs
|
7 |
C |
|
|
365 |
2022d |
2811d
|
15/29 |
2017d |
c5a8a8498eed
ipvs: Fix uninit-value in do_ip_vs_set_ctl()
|
|
memory leak in __team_options_register
net
|
3 |
C |
|
|
1 |
2087d |
2087d
|
15/29 |
2017d |
9a9e77495958
net: team: fix memory leak in __team_options_register
|
|
general protection fault in nexthop_is_blackhole
net
|
2 |
C |
done |
done |
1 |
2102d |
2099d
|
15/29 |
2017d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
KASAN: use-after-free Read in ucma_close (2)
rdma
|
19 |
syz |
done |
|
1 |
2084d |
2084d
|
15/29 |
2017d |
f5449e74802c
RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
|
|
UBSAN: array-index-out-of-bounds in ieee80211_del_key
wireless
|
15 |
C |
done |
|
685 |
2027d |
2071d
|
15/29 |
2017d |
3dc289f8f139
net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
|
|
INFO: task hung in htable_put
|
1 |
C |
done |
done |
29 |
2290d |
2343d
|
15/29 |
2017d |
99b79c3900d4
netfilter: xt_hashlimit: unregister proc file before releasing mutex
|
|
KASAN: use-after-free Write in xp_put_pool
bpf
net
|
22 |
C |
done |
|
50 |
2070d |
2093d
|
15/29 |
2017d |
83cf5c68d663
xsk: Fix use-after-free in failed shared_umem bind
|
|
KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (2)
wpan
|
19 |
C |
error |
done |
5 |
2151d |
2151d
|
15/29 |
2017d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
kernel panic: System is deadlocked on memory
mm
|
2 |
C |
done |
|
43 |
2144d |
2142d
|
15/29 |
2017d |
9066e5cfb73c
mm, oom: make the calculation of oom badness more accurate
|
|
general protection fault in strncasecmp
afs
|
2 |
C |
done |
|
1 |
2072d |
2071d
|
15/29 |
2017d |
92e3cc91d8f5
afs: Fix rapid cell addition/removal by not using RCU on cells tree
|
|
KASAN: slab-out-of-bounds Read in f2fs_build_segment_manager
f2fs
|
17 |
C |
error |
|
2 |
2070d |
2070d
|
15/29 |
2017d |
3a22e9ac7158
f2fs: fix to do sanity check on segment/section count
|
|
WARNING: refcount bug in l2cap_chan_put
|
13 |
C |
inconclusive |
done |
13 |
2120d |
2284d
|
15/29 |
2017d |
b83764f9220a
Bluetooth: Fix kernel oops triggered by hci_adv_monitors_clear()
|
|
WARNING: proc registration bug in afs_manage_cell
afs
|
-1 |
C |
done |
|
1 |
2071d |
2067d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
INFO: trying to register non-static key in exfat_cache_inval_inode
exfat
|
-1 |
C |
done |
|
4 |
2060d |
2067d
|
15/29 |
2017d |
8ff006e57ad3
exfat: fix use of uninitialized spinlock on error path
|
|
WARNING in nla_get_range_unsigned
net
|
-1 |
C |
done |
|
63 |
2093d |
2094d
|
15/29 |
2017d |
c30a3c957c88
netlink: policy: correct validation type check
|
|
KASAN: use-after-free Read in bit_putcs
fbdev
|
19 |
C |
|
|
12 |
2064d |
2284d
|
15/29 |
2017d |
988d0763361b
vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
|
|
BUG: using smp_processor_id() in preemptible code in tipc_crypto_xmit
tipc
|
4 |
C |
done |
done |
468 |
2090d |
2160d
|
15/29 |
2017d |
bb8872a1e6bc
tipc: fix using smp_processor_id() in preemptible
|
|
general protection fault in xsk_is_setup_for_bpf_map
net
bpf
|
2 |
C |
error |
|
294 |
2070d |
2093d
|
15/29 |
2017d |
968be23ceaca
xsk: Fix possible segfault at xskmap entry insertion
|
|
memory leak in read_adv_mon_features
bluetooth
|
3 |
C |
|
|
2 |
2087d |
2110d
|
15/29 |
2017d |
cafd472a10ff
Bluetooth: Fix memory leak in read_adv_mon_features()
|
|
INFO: trying to register non-static key in del_timer_sync (2)
wireless
usb
|
-1 |
C |
|
|
1206 |
2549d |
2601d
|
15/29 |
2017d |
621a3a8b1c0e
mwifiex: don't call del_timer_sync() on uninitialized timer
|
|
inconsistent lock state in icmp_send
net
|
4 |
syz |
done |
done |
1 |
2225d |
2722d
|
15/29 |
2017d |
1378817486d6
tipc: block BH before using dst_cache
|
|
BUG: unable to handle kernel paging request in pvclock_gtod_notify
kvm-x86
|
8 |
C |
done |
done |
8 |
2063d |
2082d
|
15/29 |
2017d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
INFO: trying to register non-static key in uhid_dev_destroy
input
|
-1 |
C |
unreliable |
done |
40 |
2100d |
2272d
|
15/29 |
2017d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
WARNING in bpf_raw_tp_link_fill_link_info
bpf
|
-1 |
C |
error |
|
56 |
2070d |
2085d
|
15/29 |
2017d |
b474959d5afd
bpf: Fix a buffer out-of-bound access when filling raw_tp link_info
|
|
KASAN: use-after-free Write in rxrpc_put_bundle
afs
net
|
22 |
C |
done |
|
229 |
2055d |
2079d
|
15/29 |
2017d |
f3af4ad1e08a
rxrpc: Fix bundle counting for exclusive connections
|
|
KASAN: use-after-free Read in tcf_action_destroy
net
|
19 |
C |
done |
|
8 |
2059d |
2074d
|
15/29 |
2017d |
0fedc63fadf0
net_sched: commit action insertions together
|
|
memory leak in xdp_umem_create
bpf
net
|
3 |
C |
|
|
17 |
2021d |
2041d
|
15/29 |
2017d |
e5e1a4bc916d
xsk: Fix possible memory leak at socket close
|
|
general protection fault in xsk_diag_dump (2)
bpf
net
|
2 |
C |
|
|
354 |
2074d |
2093d
|
15/29 |
2017d |
53ea2076d851
xsk: Fix possible segfault in xsk umem diagnostics
|
|
INFO: rcu detected stall in security_file_open (3)
afs
|
1 |
C |
done |
done |
2 |
2065d |
2064d
|
15/29 |
2017d |
1d0e850a49a5
afs: Fix cell removal
|
|
general protection fault in tcf_action_destroy (2)
net
|
2 |
C |
done |
done |
29 |
2055d |
2268d
|
15/29 |
2017d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: global-out-of-bounds Read in fbcon_get_font
fbdev
|
17 |
C |
inconclusive |
inconclusive |
41 |
2063d |
2360d
|
15/29 |
2017d |
5af08640795b
fbcon: Fix global-out-of-bounds read in fbcon_get_font()
|
|
WARNING: suspicious RCU usage in ctrl_cmd_new_lookup
net
arm-msm
|
4 |
C |
done |
done |
10 |
2073d |
2162d
|
15/29 |
2017d |
a7809ff90ce6
net: qrtr: ns: Protect radix_tree_deref_slot() using rcu read locks
|
|
general protection fault in io_poll_double_wake (2)
fs
io-uring
|
2 |
C |
error |
|
2 |
2067d |
2067d
|
15/29 |
2043d |
8706e04ed7d6
io_uring: always delete double poll wait entry on match
|
|
kernel BUG at lib/string.c:LINE! (5)
btrfs
|
-1 |
C |
done |
|
558 |
2071d |
2079d
|
15/29 |
2050d |
35be8851d172
btrfs: fix overflow when copying corrupt csums for a message
|
|
general protection fault in madvise_cold_or_pageout_pte_range
mm
|
2 |
C |
done |
|
3 |
2071d |
2081d
|
15/29 |
2052d |
ce2684254bd4
mm: validate pmd after splitting
|
|
KASAN: global-out-of-bounds Read in fbcon_resize
fbdev
|
17 |
C |
error |
|
673 |
2074d |
2106d
|
15/29 |
2055d |
ec0972adecb3
fbcon: Fix user font detection test at fbcon_resize().
|
|
memory leak in do_seccomp
kernel
|
3 |
C |
|
|
6 |
2087d |
2114d
|
15/29 |
2055d |
a566a9012acd
seccomp: don't leak memory when filter install races
|
|
KMSAN: uninit-value in __inet_diag_dump
net
|
7 |
C |
|
|
37 |
2057d |
2074d
|
15/29 |
2055d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
memory leak in do_eventfd
fs
|
3 |
C |
|
|
2 |
2102d |
2197d
|
15/29 |
2055d |
f65886606c2d
KVM: fix memory leak in kvm_io_bus_unregister_dev()
|
|
INFO: rcu detected stall in cleanup_net (4)
kernel
|
1 |
C |
done |
|
5 |
2090d |
2086d
|
15/29 |
2055d |
b5b73b26b3ca
taprio: Fix allowing too small intervals
|
|
INFO: task hung in tcf_ife_init
net
|
1 |
C |
done |
|
4 |
2087d |
2092d
|
15/29 |
2055d |
cc8e58f8325c
act_ife: load meta modules before tcf_idr_check_alloc()
|
|
KASAN: slab-out-of-bounds Read in prism2sta_probe_usb
usb
staging
|
17 |
C |
|
|
8 |
2095d |
2126d
|
15/29 |
2055d |
fea22e159d51
staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
|
|
KMSAN: uninit-value in inet_diag_cmd_exact
net
|
7 |
C |
|
|
31 |
2056d |
2068d
|
15/29 |
2055d |
d5e4d0a5e692
inet_diag: validate INET_DIAG_REQ_PROTOCOL attribute
|
|
KASAN: global-out-of-bounds Read in vga16fb_imageblit
|
17 |
C |
done |
|
1071 |
2082d |
2366d
|
15/29 |
2055d |
bd018a6a75ce
video: fbdev: fix OOB read in vga_8planes_imageblit()
|
|
memory leak in tipc_group_create_member
tipc
|
3 |
C |
|
|
32 |
2082d |
2490d
|
15/29 |
2055d |
bb3a420d47ab
tipc: Fix memory leak in tipc_group_create_member()
|
|
general protection fault in free_netdev
net
|
2 |
C |
error |
done |
3605 |
2131d |
2165d
|
15/29 |
2063d |
46ef5b89ec0e
ip6_gre: fix null-ptr-deref in ip6gre_init_net()
|
|
KASAN: use-after-free Read in do_madvise
io-uring
mm
|
19 |
syz |
error |
|
4 |
2103d |
2104d
|
15/29 |
2063d |
7867fd7cc44e
mm: madvise: fix vma user-after-free
|
|
KMSAN: kernel-infoleak in move_addr_to_user (3)
net
|
9 |
C |
|
|
79 |
2078d |
2112d
|
15/29 |
2067d |
38ba8b9241f5
can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
|
|
KASAN: slab-out-of-bounds Write in hiddev_ioctl_usage
input
usb
|
21 |
C |
|
|
279 |
2097d |
2440d
|
15/29 |
2070d |
25a097f52046
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
|
|
WARNING: refcount bug in red_destroy
net
|
13 |
C |
done |
|
1 |
2101d |
2099d
|
15/29 |
2070d |
5438dd45831e
net_sched: fix error path in red_init()
|
|
WARNING in slab_pre_alloc_hook
usb
|
-1 |
C |
|
|
210 |
2095d |
2115d
|
15/29 |
2070d |
f176ede3a3bd
USB: yurex: Fix bad gfp argument
|
|
INFO: rcu detected stall in ext4_file_write_iter
|
1 |
C |
inconclusive |
done |
93 |
2115d |
2647d
|
15/29 |
2070d |
7e24969022cb
block: allow for_each_bvec to support zero len bvec
|
|
WARNING: refcount bug in qdisc_put (2)
net
|
13 |
C |
done |
|
7 |
2100d |
2099d
|
15/29 |
2070d |
5438dd45831e
net_sched: fix error path in red_init()
|
|
BUG: corrupted list in mousedev_release
input
|
8 |
syz |
done |
|
5 |
2093d |
2095d
|
15/29 |
2070d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
possible deadlock in __lock_task_sighand
io-uring
|
4 |
C |
done |
|
12 |
2094d |
2096d
|
15/29 |
2070d |
fd7d6de22414
io_uring: don't recurse on tsk->sighand->siglock with signalfd
|
|
WARNING in snd_pcm_plugin_build_mulaw
sound
|
-1 |
C |
done |
|
4 |
2096d |
2094d
|
15/29 |
2070d |
949a1ebe8cea
ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
|
|
general protection fault in snd_ctl_release
sound
|
2 |
syz |
done |
|
4 |
2092d |
2093d
|
15/29 |
2070d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: global-out-of-bounds Read in bit_putcs
fbdev
|
17 |
C |
done |
|
262 |
2071d |
2364d
|
15/29 |
2070d |
39b3cffb8cf3
fbcon: prevent user font height or width change from causing potential out-of-bounds access
bc5269ca7650
vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
|
|
KASAN: use-after-free Read in fbcon_cursor
fbdev
|
19 |
syz |
done |
error |
10 |
2110d |
2354d
|
15/29 |
2070d |
f8d1653daec0
vt: defer kfree() of vc_screenbuf in vc_do_resize()
|
|
KMSAN: uninit-value in video_usercopy
media
|
7 |
C |
|
|
28 |
2135d |
2135d
|
15/29 |
2070d |
4ffb879ea648
media: media/v4l2-core: Fix kernel-infoleak in video_put_user()
|
|
WARNING in restore_regulatory_settings
|
-1 |
C |
done |
|
10414 |
2088d |
2332d
|
15/29 |
2070d |
47caf685a685
cfg80211: regulatory: reject invalid hints
|
|
INFO: task hung in pipe_release (2)
ext4
|
1 |
syz |
done |
|
3 |
2092d |
2123d
|
15/29 |
2070d |
7e24969022cb
block: allow for_each_bvec to support zero len bvec
|
|
KMSAN: kernel-infoleak in raw_ioctl
usb
|
9 |
C |
|
|
22 |
2092d |
2116d
|
15/29 |
2070d |
a092b7233f0e
net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
|
|
KASAN: use-after-free Read in bdev_del_partition
block
|
19 |
C |
done |
|
1 |
2094d |
2094d
|
15/29 |
2070d |
08fc1ab6d748
block: fix locking in bdev_del_partition
|
|
KASAN: vmalloc-out-of-bounds Write in bitfill_aligned
fbdev
|
21 |
C |
|
|
475 |
2130d |
2365d
|
15/29 |
2073d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
BUG: unable to handle kernel paging request in vmx_vcpu_run
kvm-x86
|
8 |
C |
error |
error |
194 |
2853d |
2967d
|
15/29 |
2074d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
possible deadlock in __io_queue_deferred
fs
io-uring
|
4 |
C |
error |
|
1 |
2117d |
2115d
|
15/29 |
2078d |
7271ef3a93a8
io_uring: fix recursive completion locking on oveflow flush
|
|
kernel BUG at mm/hugetlb.c:LINE!
|
-1 |
C |
done |
error |
10 |
2129d |
2242d
|
15/29 |
2078d |
15568299b7d9
hugetlbfs: prevent filesystem stacking of hugetlbfs
|
|
WARNING in r871xu_dev_remove
usb
staging
|
-1 |
C |
|
|
47375 |
2118d |
2469d
|
15/29 |
2078d |
b4383c971bc5
staging: rtl8712: handle firmware load failure
|
|
WARNING in ptrace_stop
|
-1 |
C |
done |
|
1413 |
2129d |
2133d
|
15/29 |
2078d |
d136122f5845
sched: Fix race against ptrace_freeze_trace()
|
|
general protection fault in do_con_write
|
2 |
C |
done |
|
10703 |
2130d |
2366d
|
15/29 |
2078d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
general protection fault in __btf_resolve_helper_id
bpf
|
2 |
C |
|
|
17 |
2143d |
2151d
|
15/29 |
2078d |
5b801dfb7feb
bpf: Fix NULL pointer dereference in __btf_resolve_helper_id()
|
|
memory leak in erase_aeb (2)
mtd
|
3 |
syz |
|
|
25 |
2137d |
2206d
|
15/29 |
2078d |
3b185255bb2f
ubi: fastmap: Don't produce the initial next anchor PEB when fastmap is disabled
|
|
KASAN: use-after-free Write in __linkwatch_run_queue
net
|
22 |
C |
error |
|
24 |
2133d |
2134d
|
15/29 |
2078d |
c75d1d5248c0
bonding: check return value of register_netdevice() in bond_newlink()
|
|
general protection fault in x86_fsgsbase_read_task
kernel
|
2 |
C |
done |
|
2 |
2112d |
2112d
|
15/29 |
2078d |
8ab49526b53d
x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
|
|
WARNING in __kernel_read
fs
|
-1 |
C |
done |
|
60 |
2085d |
2144d
|
15/29 |
2078d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
WARNING in inc_nlink
|
-1 |
C |
done |
|
26 |
2144d |
2247d
|
15/29 |
2078d |
facb03dddec0
fs/minix: don't allow getting deleted inodes
|
|
KASAN: use-after-free Read in delete_and_unsubscribe_port (2)
sound
|
19 |
syz |
done |
|
4 |
2122d |
2148d
|
15/29 |
2078d |
80982c7e834e
ALSA: seq: oss: Serialize ioctls
|
|
general protection fault in cdev_del
usb
fs
|
2 |
C |
|
|
315 |
2088d |
2556d
|
15/29 |
2078d |
e911e99a0770
usb: hso: check for return value in hso_serial_common_create()
|
|
KASAN: use-after-free Read in sock_def_write_space (2)
arm-msm
net
|
19 |
C |
error |
|
29 |
2079d |
2136d
|
15/29 |
2078d |
af9f691f0f5b
qrtr: orphan socket in qrtr_release()
|
|
kernel BUG at mm/khugepaged.c:LINE!
mm
|
-1 |
C |
done |
|
30 |
2105d |
2116d
|
15/29 |
2078d |
f3f99d63a815
khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
|
|
possible deadlock in shmem_fallocate (4)
mm
|
4 |
C |
done |
|
81 |
2129d |
2343d
|
15/29 |
2078d |
3e338d3c95c7
staging: android: ashmem: Fix lockdep warning for write operation
|
|
BUG: unable to handle kernel NULL pointer dereference in loop_rw_iter
io-uring
fs
|
10 |
C |
done |
|
24 |
2104d |
2115d
|
15/29 |
2078d |
2dd2111d0d38
io_uring: Fix NULL pointer dereference in loop_rw_iter()
|
|
kernel BUG at net/rxrpc/recvmsg.c:LINE!
afs
net
|
-1 |
C |
error |
|
10 |
2125d |
2153d
|
15/29 |
2078d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
KASAN: use-after-free Read in io_async_task_func
io-uring
fs
|
19 |
syz |
error |
|
1 |
2115d |
2115d
|
15/29 |
2078d |
6d816e088c35
io_uring: hold 'ctx' reference around task_work queue + execute
|
|
WARNING in idr_alloc
arm-msm
net
|
-1 |
C |
done |
|
65 |
2087d |
2162d
|
15/29 |
2078d |
8dfddfb79653
net: qrtr: fix usage of idr in port assignment to socket
|
|
WARNING in drop_nlink
fs
|
-1 |
C |
done |
error |
1 |
2226d |
2222d
|
15/29 |
2078d |
facb03dddec0
fs/minix: don't allow getting deleted inodes
|
|
KASAN: slab-out-of-bounds Read in vc_do_resize
serial
|
17 |
C |
done |
|
55 |
2115d |
2351d
|
15/29 |
2078d |
d88ca7e1a27e
fbmem: pull fbcon_update_vcs() out of fb_set_var()
|
|
general protection fault in fib_dump_info (2)
net
|
2 |
C |
done |
|
16 |
2102d |
2104d
|
15/29 |
2078d |
eeaac3634ee0
net: nexthop: don't allow empty NHA_GROUP
|
|
KASAN: slab-out-of-bounds Read in vsscanf (2)
lsm
|
17 |
C |
error |
|
5 |
2121d |
2134d
|
15/29 |
2078d |
a6bd4f6d9b07
Smack: fix another vsscanf out of bounds
|
|
KMSAN: uninit-value in netlink_policy_dump_start
net
|
7 |
C |
|
|
31 |
2083d |
2087d
|
15/29 |
2078d |
d1fb55592909
netlink: fix state reallocation in policy export
|
|
KASAN: null-ptr-deref Write in media_request_close
media
|
12 |
C |
done |
|
17 |
2121d |
2169d
|
15/29 |
2078d |
e30cc79cc80f
media: media-request: Fix crash if memory allocation fails
|
|
KASAN: use-after-free Read in devlink_health_reporter_destroy
net
|
19 |
C |
error |
|
1188 |
2142d |
2143d
|
15/29 |
2078d |
5d037b4d3df7
devlink: Fix use-after-free when destroying health reporters
|
|
kernel BUG at net/core/dev.c:LINE! (3)
net
|
-1 |
C |
done |
|
979 |
2093d |
2237d
|
15/29 |
2078d |
832707021666
bonding: fix a potential double-unregister
|
|
KASAN: use-after-free Read in path_init (2)
fs
|
19 |
C |
done |
|
29 |
2112d |
2114d
|
15/29 |
2078d |
24fb33d40d60
fix breakage in do_rmdir()
|
|
WARNING in __kernel_write
fs
|
-1 |
C |
done |
|
522 |
2127d |
2147d
|
15/29 |
2078d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
KMSAN: uninit-value in get_block
fs
|
7 |
C |
|
|
13 |
2194d |
2197d
|
15/29 |
2078d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
WARNING: suspicious RCU usage in ovs_flow_tbl_masks_cache_size
openvswitch
|
4 |
C |
done |
|
4093 |
2119d |
2121d
|
15/29 |
2078d |
fea07a487c6d
net: openvswitch: silence suspicious RCU usage warning
|
|
WARNING in submit_rx_urb/usb_submit_urb
usb
staging
|
-1 |
C |
|
|
397 |
2130d |
2554d
|
15/29 |
2078d |
faaff9765664
staging: wlan-ng: properly check endpoint types
|
|
KASAN: use-after-free Read in get_block
|
19 |
C |
done |
|
23 |
2144d |
2222d
|
15/29 |
2078d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
WARNING in idtentry_exit_cond_rcu
kernel
|
-1 |
syz |
|
|
6 |
2152d |
2148d
|
15/29 |
2078d |
bce9b042ec73
x86/traps: Disable interrupts in exc_aligment_check()
|
|
memory leak in nf_tables_addchain
netfilter
|
3 |
C |
|
|
1 |
2117d |
2114d
|
15/29 |
2078d |
59136aa3b264
netfilter: nf_tables: free chain context when BINDING flag is missing
|
|
KASAN: null-ptr-deref Write in get_block
fs
|
12 |
C |
done |
|
101 |
2144d |
2258d
|
15/29 |
2078d |
da27e0a0e5f6
fs/minix: check return value of sb_getblk()
|
|
WARNING: suspicious RCU usage in tipc_l2_send_msg
tipc
|
4 |
syz |
done |
|
60 |
2102d |
2160d
|
15/29 |
2078d |
f6db90964162
tipc: call rcu_read_lock() in tipc_aead_encrypt_done()
|
|
WARNING in compat_do_ebt_get_ctl
bridge
netfilter
|
-1 |
C |
done |
|
15 |
2108d |
2119d
|
15/29 |
2078d |
5c04da55c754
netfilter: ebtables: reject bogus getopt len value
|
|
memory leak in io_submit_sqes
fs
io-uring
|
3 |
C |
|
|
2 |
2095d |
2114d
|
15/29 |
2078d |
a36da65c4656
io_uring: fail poll arm on queue proc failure
|
|
WARNING in __nf_unregister_net_hook (2)
netfilter
|
-1 |
C |
done |
|
9 |
2144d |
2143d
|
15/29 |
2078d |
1e9451cbda45
netfilter: nf_tables: fix nat hook table deletion
|
|
KASAN: use-after-free Read in j1939_tp_txtimer
can
|
19 |
C |
done |
error |
5 |
2145d |
2343d
|
15/29 |
2078d |
cd3b3636c99f
can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
|
|
KASAN: use-after-free Write in get_block
fs
|
22 |
C |
inconclusive |
inconclusive |
12 |
2161d |
2211d
|
15/29 |
2078d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
KASAN: use-after-free Read in l2cap_chan_close
|
19 |
C |
done |
|
37 |
2120d |
2300d
|
15/29 |
2078d |
f9c70bdc279b
Bluetooth: add a mutex lock to avoid UAF in do_enale_set
|
|
KASAN: use-after-free Read in ax88172a_unbind
usb
|
19 |
C |
done |
|
2723 |
2130d |
2370d
|
15/29 |
2078d |
c28d9a285668
ax88172a: fix ax88172a_unbind() failures
|
|
general protection fault in vsock_poll
net
virt
|
2 |
syz |
done |
|
15 |
2123d |
2135d
|
15/29 |
2078d |
1980c0584483
vsock: fix potential null pointer dereference in vsock_poll()
|
|
BUG: corrupted list in p9_read_work (2)
v9fs
|
8 |
syz |
done |
error |
38 |
2380d |
2742d
|
15/29 |
2078d |
74d6a5d56629
9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
|
|
general protection fault in io_poll_double_wake
io-uring
fs
|
2 |
C |
done |
|
8 |
2082d |
2110d
|
15/29 |
2078d |
d4e7cd36a90e
io_uring: sanitize double poll handling
|
|
KMSAN: uninit-value in geneve_xmit
net
|
7 |
C |
|
|
163 |
2082d |
2135d
|
15/29 |
2078d |
32818c075c54
geneve: fix an uninitialized value in geneve_changelink()
|
|
general protection fault in syscall_return_slowpath
kernel
|
2 |
syz |
inconclusive |
done |
1 |
2184d |
2271d
|
15/29 |
2078d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
KMSAN: uninit-value in ax25_connect
hams
|
7 |
C |
|
|
15 |
2086d |
2219d
|
15/29 |
2078d |
2f2a7ffad5c6
AX.25: Fix out-of-bounds read in ax25_connect()
|
|
general protection fault in j1939_netdev_start
can
|
2 |
C |
done |
|
8 |
2131d |
2282d
|
15/29 |
2078d |
af804b782635
can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated
|
|
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt
bluetooth
|
17 |
C |
|
|
16 |
2121d |
2149d
|
15/29 |
2078d |
51c19bf3d5cf
Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
|
|
KASAN: out-of-bounds Read in pebs_update_state
perf
|
17 |
syz |
inconclusive |
done |
1 |
2155d |
2203d
|
15/29 |
2078d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
WARNING in submit_audio_out_urb/usb_submit_urb
sound
usb
|
-1 |
syz |
|
|
2 |
2148d |
2147d
|
15/29 |
2078d |
6e8a914ad619
ALSA: line6: Perform sanity check for each URB creation
|
|
KASAN: use-after-free Read in __xfrm6_tunnel_spi_lookup
net
|
19 |
C |
error |
|
12 |
2136d |
2141d
|
15/29 |
2078d |
8b404f46dd6a
xfrm: interface: not xfrmi_ipv6/ipip_handler twice
|
|
general protection fault in khugepaged
mm
|
2 |
C |
done |
|
3 |
2135d |
2148d
|
15/29 |
2078d |
594cced14ad3
khugepaged: fix null-pointer dereference due to race
|
|
KASAN: invalid-free in snd_seq_port_disconnect
sound
|
24 |
syz |
done |
|
9 |
2122d |
2127d
|
15/29 |
2078d |
80982c7e834e
ALSA: seq: oss: Serialize ioctls
|
|
KASAN: slab-out-of-bounds Write in sctp_setsockopt
sctp
|
21 |
C |
error |
|
590 |
2129d |
2134d
|
15/29 |
2078d |
dfd3d5266dc1
sctp: fix slab-out-of-bounds in SCTP_DELAYED_SACK processing
|
|
possible deadlock in io_timeout_fn
io-uring
fs
|
4 |
C |
done |
|
4 |
2113d |
2115d
|
15/29 |
2078d |
51a4cc112c7a
io_uring: defer file table grabbing request cleanup for locked requests
|
|
KMSAN: uninit-value in ucma_connect
rdma
|
7 |
C |
|
|
138 |
2083d |
2135d
|
15/29 |
2078d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
|
WARNING in snd_usbmidi_submit_urb/usb_submit_urb
usb
sound
|
-1 |
C |
done |
|
42 |
2161d |
2186d
|
15/29 |
2078d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
WARNING in snd_info_get_line
sound
|
-1 |
C |
done |
|
36 |
2134d |
2140d
|
15/29 |
2078d |
60379ba08532
ALSA: info: Drop WARN_ON() from buffer NULL sanity check
|
|
WARNING: suspicious RCU usage in ovs_flow_tbl_destroy
openvswitch
|
4 |
C |
done |
|
658 |
2119d |
2121d
|
15/29 |
2078d |
fea07a487c6d
net: openvswitch: silence suspicious RCU usage warning
|
|
INFO: trying to register non-static key in red_destroy
net
|
-1 |
C |
error |
|
318 |
2130d |
2151d
|
15/29 |
2078d |
608b4adab178
net_sched: initialize timer earlier in red_init()
|
|
general protection fault in go7007_usb_probe
usb
media
|
2 |
C |
|
|
2103 |
2118d |
2226d
|
15/29 |
2078d |
137641287eb4
go7007: add sanity checking for endpoints
|
|
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt
bluetooth
|
17 |
C |
error |
|
9 |
2123d |
2143d
|
15/29 |
2078d |
629b49c848ee
Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
|
|
KMSAN: uninit-value in __tipc_nl_compat_dumpit (3)
tipc
|
7 |
C |
|
|
6181 |
2079d |
2143d
|
15/29 |
2078d |
47733f9daf4f
tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
|
|
KASAN: wild-memory-access Read in ip_setsockopt
net
|
17 |
C |
|
|
2 |
2112d |
2112d
|
15/29 |
2078d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
KASAN: wild-memory-access Read in sctp_setsockopt
sctp
|
17 |
C |
|
|
2 |
2112d |
2112d
|
15/29 |
2078d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
KMSAN: uninit-value in xa_load
rdma
|
7 |
C |
|
|
208 |
2079d |
2135d
|
15/29 |
2078d |
31142a4ba617
RDMA/cm: Add min length checks to user structure copies
|
|
WARNING in vkms_vblank_simulate
|
-1 |
C |
done |
|
12903 |
2085d |
2661d
|
15/29 |
2078d |
51f644b40b4b
drm/atomic-helper: reset vblank on crtc reset
|
|
WARNING in snd_usbmidi_input_start/usb_submit_urb
usb
sound
|
-1 |
C |
done |
|
231 |
2139d |
2181d
|
15/29 |
2078d |
9b7e5208a941
ALSA: usb-audio: Fix race against the error recovery URB submission
|
|
KASAN: use-after-free Read in smk_write_relabel_self
lsm
|
19 |
C |
done |
|
2 |
2182d |
2178d
|
15/29 |
2078d |
beb4ee6770a8
Smack: fix use-after-free in smk_write_relabel_self()
|
|
possible deadlock in pipe_lock (3)
overlayfs
|
4 |
C |
inconclusive |
done |
4 |
2306d |
2343d
|
15/29 |
2107d |
1a980b8cbf00
ovl: add splice file read write helper
|
|
possible deadlock in dev_mc_unsync
net
|
4 |
C |
error |
done |
78 |
2145d |
2160d
|
15/29 |
2107d |
be74294ffa24
net: get rid of lockdep_set_class_and_subclass()
|
|
possible deadlock in lock_trace (3)
fs
|
4 |
syz |
inconclusive |
done |
69 |
2246d |
2380d
|
15/29 |
2107d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
|
possible deadlock in do_io_accounting (3)
fs
|
4 |
C |
inconclusive |
done |
39 |
2253d |
2343d
|
15/29 |
2107d |
76518d379885
proc: io_accounting: Use new infrastructure to fix deadlocks in execve
|
|
possible deadlock in proc_pid_personality
fs
|
4 |
syz |
inconclusive |
done |
3 |
2262d |
2272d
|
15/29 |
2107d |
2db9dbf71bf9
proc: Use new infrastructure to fix deadlocks in execve
|
|
WARNING: bad unlock balance in rcu_lock_release
fs
|
4 |
C |
inconclusive |
done |
1433 |
2248d |
2529d
|
15/29 |
2107d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
|
WARNING in hsr_addr_subst_dest
|
-1 |
C |
done |
done |
8639 |
2244d |
2702d
|
15/29 |
2107d |
4b793acdca00
hsr: use netdev_err() instead of WARN_ONCE()
|
|
WARNING: locking bug in try_to_grab_pending
net
|
4 |
syz |
error |
done |
1 |
2197d |
2659d
|
15/29 |
2107d |
1378817486d6
tipc: block BH before using dst_cache
|
|
KASAN: stack-out-of-bounds Read in update_stack_state
kernel
|
17 |
C |
unreliable |
done |
388 |
2322d |
3016d
|
15/29 |
2107d |
4ee7c60de83a
init, tracing: Add initcall trace events
|
|
WARNING: bad unlock balance in rcu_core
fs
|
4 |
C |
inconclusive |
done |
3578 |
2244d |
2600d
|
15/29 |
2107d |
10476e630422
locking/lockdep: Fix bad recursion pattern
|
|
general protection fault in qrtr_endpoint_post
net
arm-msm
|
2 |
C |
done |
done |
54 |
2145d |
2163d
|
15/29 |
2114d |
8ff41cc21714
net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
|
|
PANIC: double fault in fixup_bad_iret
kernel
|
2 |
C |
error |
|
11753 |
2148d |
2188d
|
15/29 |
2125d |
5144f8a8dfd7
compiler_types.h: Add __no_sanitize_{address,undefined} to noinstr
|
|
general protection fault in __apic_accept_irq (2)
kvm-x86
|
2 |
C |
done |
|
9 |
2162d |
2158d
|
15/29 |
2125d |
9d3c447c72fb
KVM: X86: Fix async pf caused null-ptr-deref
|
|
WARNING in enqueue_task_dl
kernel
|
-1 |
C |
done |
|
13 |
2169d |
2746d
|
15/29 |
2125d |
740797ce3a12
sched/core: Fix PI boosting between RT and DEADLINE tasks
|
|
PANIC: double fault in check_preemption_disabled
kernel
|
2 |
C |
|
|
2181 |
2156d |
2161d
|
15/29 |
2125d |
c7aadc09321d
x86/entry: Increase entry_stack size to a full page
|
|
memory leak in nbd_add_socket
nbd
|
3 |
C |
|
|
1 |
2247d |
2247d
|
15/29 |
2125d |
579dd91ab3a5
nbd: Fix memory leak in nbd_add_socket
|
|
WARNING in xfrm_policy_insert
net
|
-1 |
C |
inconclusive |
done |
6 |
2171d |
3024d
|
15/29 |
2128d |
ed17b8d377ea
xfrm: fix a warning in xfrm_policy_insert_list
|
|
BUG: unable to handle kernel paging request in netif_receive_generic_xdp
|
8 |
C |
done |
done |
160 |
2183d |
2319d
|
15/29 |
2129d |
96aa1b22bd6b
tun: correct header offsets in napi frags mode
|
|
WARNING in iomap_apply
iomap
|
-1 |
C |
done |
|
25 |
2197d |
2237d
|
15/29 |
2136d |
175efa81feb8
ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
|
|
KASAN: use-after-free Read in sock_def_write_space
arm-msm
net
|
19 |
C |
done |
|
67 |
2137d |
2502d
|
15/29 |
2137d |
a9b111016235
llc: make sure applications use ARPHRD_ETHER
|
|
KASAN: slab-out-of-bounds Read in qrtr_endpoint_post
arm-msm
net
|
17 |
C |
|
|
8 |
2159d |
2160d
|
15/29 |
2137d |
8ff41cc21714
net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
|
|
memory leak in qdisc_create_dflt
net
|
3 |
C |
|
|
1 |
2156d |
2152d
|
15/29 |
2137d |
306381aec7c2
net_sched: fix a memory leak in atm_tc_init()
|
|
WARNING in hsr_dev_finalize
net
|
-1 |
C |
error |
|
1546 |
2145d |
2160d
|
15/29 |
2137d |
ccfc9df1352b
hsr: fix interface leak in error path of hsr_dev_finalize()
|
|
kernel BUG at net/l2tp/l2tp_core.c:LINE!
net
|
-1 |
C |
|
|
10 |
2161d |
2157d
|
15/29 |
2137d |
c9a368f1c0fb
bpf: net: Avoid incorrect bpf_sk_reuseport_detach call
|
|
KASAN: vmalloc-out-of-bounds Read in tipc_nl_publ_dump
tipc
|
17 |
C |
|
|
22 |
2142d |
2160d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in netdev_name_node_lookup_rcu
wireguard
|
19 |
C |
error |
|
17 |
2146d |
2157d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in nl8NUM_dump_wpan_phy (2)
wpan
|
19 |
C |
|
|
18 |
2147d |
2160d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_nl_publ_dump (2)
tipc
|
19 |
C |
|
|
14 |
2146d |
2157d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_nl_node_dump_monitor_peer (2)
tipc
|
19 |
C |
|
|
54 |
2145d |
2160d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_udp_nl_dump_remoteip (2)
tipc
|
19 |
C |
|
|
9 |
2145d |
2164d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in devlink_get_from_attrs
net
|
19 |
C |
|
|
25 |
2145d |
2157d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: vmalloc-out-of-bounds Read in nl8NUM_dump_wpan_phy
wpan
|
17 |
C |
|
|
145 |
2142d |
2163d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in tipc_nl_node_dump_link
tipc
|
19 |
C |
error |
|
10 |
2151d |
2160d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: use-after-free Read in dev_get_by_name
wireguard
|
19 |
C |
|
|
4 |
2152d |
2157d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
KASAN: vmalloc-out-of-bounds Read in tipc_nl_node_dump_monitor_peer
tipc
|
17 |
C |
error |
|
9 |
2145d |
2163d
|
15/29 |
2137d |
bf64ff4c2aac
genetlink: get rid of family->attrbuf
|
|
general protection fault in unpin_user_pages
mm
|
2 |
C |
done |
|
13 |
2197d |
2197d
|
15/29 |
2139d |
f78cdbd75a57
rds: fix crash in rds_info_getsockopt()
|
|
KASAN: use-after-free Write in fsnotify_detach_connector_from_object
fs
|
22 |
C |
done |
|
4 |
2170d |
2175d
|
15/29 |
2139d |
ef1548adada5
proc: Use new_inode not new_inode_pseudo
|
|
KASAN: use-after-free Read in ip_icmp_error
net
|
19 |
C |
done |
|
14 |
2191d |
2191d
|
15/29 |
2139d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
KASAN: use-after-free Write in ath9k_htc_rx_msg
wireless
|
22 |
C |
|
|
93 |
2175d |
2252d
|
15/29 |
2139d |
e4ff08a4d727
ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
|
|
BUG: using smp_processor_id() in preemptible [ADDR] code: syz-executor
|
4 |
C |
done |
|
22297 |
2185d |
2523d
|
15/29 |
2139d |
1378817486d6
tipc: block BH before using dst_cache
|
|
KASAN: slab-out-of-bounds Read in vsscanf
lsm
|
17 |
C |
done |
|
61 |
2149d |
2252d
|
15/29 |
2139d |
84e99e58e8d1
Smack: slab-out-of-bounds in vsscanf
|
|
KASAN: slab-out-of-bounds Read in ip_icmp_error
net
|
17 |
C |
done |
|
13 |
2191d |
2191d
|
15/29 |
2139d |
239174945dac
tcp: tcp_v4_err() icmp skb is named icmp_skb
|
|
WARNING: proc registration bug in snmp6_register_dev
net
|
-1 |
C |
done |
|
14 |
2167d |
2233d
|
15/29 |
2139d |
de0083c7ed7d
hsr: avoid to create proc file after unregister
|
|
KASAN: null-ptr-deref Write in choke_reset
|
12 |
C |
done |
|
1441 |
2195d |
2229d
|
15/29 |
2139d |
8738c85c72b3
sch_choke: avoid potential panic in choke_reset()
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id
usb
sound
|
21 |
C |
done |
|
39 |
2158d |
2163d
|
15/29 |
2139d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt
sound
usb
|
21 |
C |
done |
|
5 |
2161d |
2163d
|
15/29 |
2139d |
220345e98f1c
ALSA: usb-audio: Fix OOB access of mixer element list
|
|
KASAN: use-after-free Read in vkms_dumb_create
dri
|
19 |
syz |
done |
|
2 |
2225d |
2221d
|
15/29 |
2139d |
0ea2ea42b31a
drm/vkms: Hold gem object while still in-use
|
|
KASAN: use-after-free Read in inet_diag_bc_sk
net
|
19 |
C |
done |
|
30 |
2214d |
2216d
|
15/29 |
2139d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
memory leak in ctnetlink_del_conntrack
netfilter
|
3 |
C |
|
|
1 |
2180d |
2177d
|
15/29 |
2139d |
6c2d2176a85e
netfilter: ctnetlink: memleak in filter initialization error path
|
|
BUG: MAX_LOCKDEP_CHAINS too low!
kernel
|
-1 |
C |
done |
|
17240 |
2139d |
2798d
|
15/29 |
2139d |
e7511f560f54
bonding: remove useless stats_lock_key
1a33e10e4a95
net: partially revert dynamic lockdep key changes
|
|
INFO: task hung in locks_remove_posix
fs
input
usb
|
1 |
syz |
|
|
2231 |
2174d |
2197d
|
15/29 |
2139d |
187b96db5ca7
x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
|
|
WARNING: refcount bug in crypto_mod_get
crypto
|
13 |
C |
done |
|
2 |
2205d |
2216d
|
15/29 |
2139d |
6603523bf5e4
crypto: api - Fix use-after-free and race in crypto_spawn_alg
|
|
KASAN: stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
wireless
|
21 |
C |
|
|
57 |
2175d |
2248d
|
15/29 |
2139d |
19d6c375d671
ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
|
|
KASAN: slab-out-of-bounds Read in ovl_check_fb_len
overlayfs
|
17 |
syz |
done |
|
3 |
2196d |
2195d
|
15/29 |
2139d |
522f6e6cba68
ovl: fix out of bounds access warning in ovl_check_fb_len()
|
|
KASAN: use-after-free Read in htc_connect_service
wireless
|
19 |
C |
|
|
41041 |
2174d |
2252d
|
15/29 |
2139d |
ced21a4c726b
ath9k: Fix use-after-free Read in htc_connect_service
|
|
general protection fault in ima_free_template_entry
lsm
integrity
|
2 |
C |
done |
|
3 |
2162d |
2182d
|
15/29 |
2139d |
42413b49804b
ima: Directly free *entry in ima_alloc_init_template() if digests is NULL
|
|
WARNING in kvm_inject_emulated_page_fault
kvm-x86
|
-1 |
C |
done |
|
20 |
2163d |
2183d
|
15/29 |
2139d |
7a35e515a705
KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
|
|
general protection fault in fq_codel_enqueue
net
|
2 |
C |
done |
|
25 |
2144d |
2229d
|
15/29 |
2139d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
memory leak in crypto_create_tfm
crypto
|
3 |
C |
|
|
14 |
2167d |
2184d
|
15/29 |
2139d |
819966c06b75
crypto: drbg - always try to free Jitter RNG instance
|
|
WARNING in memtype_reserve
|
-1 |
C |
done |
|
600 |
2200d |
2209d
|
15/29 |
2139d |
a0e710a7def4
USB: usbfs: fix mmap dma mismatch
|
|
general protection fault in put_cmsg
net
|
2 |
C |
done |
|
3 |
2205d |
2205d
|
15/29 |
2139d |
1b2f08df0a88
ipv6: set msg_control_is_user in do_ipv6_getsockopt
|
|
WARNING in usbhid_raw_request/usb_submit_urb (3)
usb
|
-1 |
syz |
|
|
18 |
2218d |
2324d
|
15/29 |
2139d |
ac854131d984
USB: core: Fix misleading driver bug report
|
|
memory leak in nf_tables_parse_netdev_hooks (3)
netfilter
|
3 |
C |
|
|
1 |
2180d |
2177d
|
15/29 |
2139d |
3003055f5066
netfilter: nf_tables: hook list memleak in flowtable deletion
|
|
INFO: trying to register non-static key in io_cqring_ev_posted (3)
fs
|
-1 |
C |
done |
|
3 |
2198d |
2201d
|
15/29 |
2139d |
583863ed9181
io_uring: initialize ctx->sqo_wait earlier
|
|
BUG: unable to handle kernel paging request in do_xdp_generic
|
8 |
C |
done |
done |
7444 |
2213d |
2320d
|
15/29 |
2139d |
96aa1b22bd6b
tun: correct header offsets in napi frags mode
|
|
KASAN: slab-out-of-bounds Read in inet_diag_bc_sk
net
|
17 |
C |
done |
|
45 |
2214d |
2216d
|
15/29 |
2139d |
ee1bd483cc06
inet_diag: bc: read cgroup id only for full sockets
|
|
INFO: task syz-executor can't die for more than 143 seconds. (2)
|
-1 |
C |
done |
|
2512 |
2140d |
2408d
|
15/29 |
2139d |
566d136289dc
pipe: Fix pipe_full() test in opipe_prep().
|
|
general protection fault in erspan_validate
net
|
2 |
C |
done |
|
520 |
2205d |
2212d
|
15/29 |
2139d |
51fa960d3b51
erspan: Check IFLA_GRE_ERSPAN_VER is set.
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE! (5)
serial
|
-1 |
C |
done |
|
241 |
2144d |
2217d
|
15/29 |
2139d |
57d38f26d81e
vt: fix unicode console freeing with a common interface
|
|
WARNING: refcount bug in crypto_destroy_tfm
crypto
|
13 |
C |
done |
|
4 |
2219d |
2241d
|
15/29 |
2139d |
6603523bf5e4
crypto: api - Fix use-after-free and race in crypto_spawn_alg
|
|
general protection fault in inet_unhash
net
|
2 |
C |
done |
|
40 |
2161d |
2189d
|
15/29 |
2139d |
02c71b144c81
l2tp: do not use inet_hash()/inet_unhash()
|
|
KASAN: use-after-free Read in rpc_net_ns
net
nfs
|
19 |
syz |
done |
|
10 |
2205d |
2211d
|
15/29 |
2139d |
31e9a7f35352
SUNRPC: fix use-after-free in rpc_free_client_work()
|
|
WARNING in tipc_msg_append
tipc
|
-1 |
C |
done |
|
107 |
2166d |
2180d
|
15/29 |
2139d |
c9aa81faf191
tipc: fix kernel WARNING in tipc_msg_append()
|
|
KASAN: slab-out-of-bounds Read in garmin_read_process
usb
|
17 |
C |
|
|
1 |
2257d |
2257d
|
15/29 |
2139d |
e9b3c610a05c
USB: serial: garmin_gps: add sanity checking for data length
|
|
KASAN: use-after-free Read in usbhid_close (3)
input
usb
|
19 |
C |
|
|
6 |
2213d |
2240d
|
15/29 |
2139d |
0ed08faded1d
HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2)
kvm-x86
|
-1 |
C |
done |
|
46328 |
2160d |
2191d
|
15/29 |
2139d |
7d2e8748af62
KVM: x86: Initialize tdp_level during vCPU creation
|
|
memory leak in genl_rcv_msg
net
|
3 |
C |
|
|
116 |
2175d |
2365d
|
15/29 |
2139d |
c36f05559104
genetlink: fix memory leaks in genl_family_rcv_msg_dumpit()
|
|
KMSAN: uninit-value in __dev_get_by_name
hams
|
7 |
C |
|
|
2 |
2201d |
2201d
|
15/29 |
2139d |
687775cec056
ax25: fix setsockopt(SO_BINDTODEVICE)
|
|
general protection fault in start_creating
fs
|
2 |
C |
done |
|
106 |
2161d |
2191d
|
15/29 |
2139d |
d56f5136b010
KVM: let kvm_destroy_vm_debugfs clean up vCPU debugfs directories
|
|
KASAN: slab-out-of-bounds Read in fl6_update_dst
net
|
17 |
C |
done |
|
43 |
2161d |
2206d
|
15/29 |
2139d |
bb986a50421a
seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds
|
|
general protection fault in __tipc_sendstream
tipc
|
2 |
C |
done |
|
444 |
2160d |
2190d
|
15/29 |
2139d |
4c21daae3dbc
tipc: Fix NULL pointer dereference in __tipc_sendstream()
5e9eeccc58f3
tipc: fix NULL pointer dereference in streaming
|
|
KASAN: use-after-free Read in ath9k_wmi_ctrl_rx
wireless
|
19 |
C |
|
|
1 |
2252d |
2251d
|
15/29 |
2139d |
abeaa85054ff
ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
|
|
KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen
net
|
17 |
C |
done |
|
4 |
2209d |
2229d
|
15/29 |
2139d |
9274124f023b
net: stricter validation of untrusted gso packets
|
|
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2)
ext4
|
10 |
C |
done |
|
3 |
2236d |
2234d
|
15/29 |
2139d |
829b37b8cddb
ext4: avoid race conditions when remounting with options that change dax
|
|
WARNING: locking bug in dev_mc_seq_show
net
|
4 |
C |
done |
|
3 |
2180d |
2191d
|
15/29 |
2139d |
845e0ebb4408
net: change addr_list_lock back to static key
|
|
general protection fault in selinux_socket_recvmsg
selinux
|
2 |
C |
done |
|
4 |
2195d |
2195d
|
15/29 |
2139d |
0a82e230c688
mptcp: avoid NULL-ptr derefence on fallback
|
|
KMSAN: uninit-value in skbprio_enqueue
net
|
7 |
syz |
|
|
11 |
2154d |
2217d
|
15/29 |
2139d |
2761121af87d
net_sched: sch_skbprio: add message validation to skbprio_change()
|
|
general protection fault in ath9k_hif_usb_rx_cb
wireless
|
2 |
C |
|
|
913 |
2139d |
2252d
|
15/29 |
2139d |
2bbcaaee1fcb
ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
|
|
INFO: rcu detected stall in wg_packet_tx_worker
net
|
1 |
C |
done |
|
24 |
2168d |
2221d
|
15/29 |
2139d |
df4953e4e997
sch_sfq: validate silly quantum values
|
|
KASAN: slab-out-of-bounds Read in br_mrp_parse
bridge
|
17 |
C |
done |
|
5 |
2196d |
2197d
|
15/29 |
2139d |
617504c67e01
bridge: mrp: Fix out-of-bounds read in br_mrp_parse
|
|
INFO: task hung in blkdev_issue_flush (2)
block
|
1 |
C |
done |
error |
3 |
2362d |
2520d
|
15/29 |
2156d |
2b5c8f0063e4
nbd: replace kill_bdev() with __invalidate_device() again
|
|
KASAN: use-after-free Read in blkdev_direct_IO
fs
|
19 |
C |
done |
error |
8 |
2484d |
2489d
|
15/29 |
2156d |
0eb6ddfb865c
block: Fix __blkdev_direct_IO() for bio fragments
|
|
KASAN: use-after-free Read in blkdev_bio_end_io
fs
|
19 |
C |
done |
error |
13 |
2475d |
2486d
|
15/29 |
2156d |
7b6620d7db56
block: remove REQ_NOWAIT_INLINE
|
|
memory leak in bio_clone_fast
block
|
3 |
C |
|
|
1 |
2478d |
2478d
|
15/29 |
2156d |
7b6620d7db56
block: remove REQ_NOWAIT_INLINE
|
|
WARNING: refcount bug in blk_mq_free_request (2)
block
|
13 |
C |
done |
error |
5 |
2486d |
2486d
|
15/29 |
2156d |
de6346ecbc8f
nbd: protect cmd->status with cmd->lock
|
|
memory leak in bio_copy_user_iov
|
3 |
C |
done |
|
34 |
2349d |
2534d
|
15/29 |
2156d |
3b7995a98ad7
block: fix memleak when __blk_rq_map_user_iov() is failed
|
|
WARNING in sk_stream_kill_queues (4)
net
|
-1 |
C |
done |
done |
6 |
2279d |
2283d
|
15/29 |
2156d |
b6f6118901d1
ipv6: restrict IPV6_ADDRFORM operation
|
|
WARNING in __mmdrop
mm
|
-1 |
syz |
done |
|
14 |
2494d |
2504d
|
15/29 |
2158d |
3d2c7d370475
Revert "vhost: access vq metadata through kernel virtual address"
|
|
WARNING in wa_nep_create/usb_submit_urb
usb
staging
|
-1 |
C |
|
|
114 |
2228d |
2512d
|
15/29 |
2158d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
WARNING in kfree (2)
net
|
-1 |
syz |
done |
done |
1 |
2269d |
2268d
|
15/29 |
2158d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
WARNING in hwarc_neep_init/usb_submit_urb
staging
usb
|
-1 |
C |
|
|
1 |
2263d |
2262d
|
15/29 |
2158d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
BUG: corrupted list in __uwb_rc_neh_rm
staging
usb
|
8 |
C |
|
|
9 |
2234d |
2269d
|
15/29 |
2158d |
caa6772db4c1
Staging: remove wusbcore and UWB from the kernel tree.
|
|
KASAN: null-ptr-deref Write in blk_mq_map_swqueue
block
|
12 |
C |
done |
|
3 |
2252d |
2252d
|
15/29 |
2161d |
d0930bb8f46b
blk-mq: Fix a recently introduced regression in blk_mq_realloc_hw_ctxs()
|
|
KASAN: use-after-free Read in chaoskey_disconnect
crypto
usb
|
19 |
C |
|
|
44 |
2372d |
2400d
|
15/29 |
2168d |
93ddb1f56ae1
USB: chaoskey: fix use-after-free on release
|
|
KMSAN: uninit-value in audit_log_vformat (2)
audit
|
7 |
C |
|
|
104 |
2208d |
2228d
|
15/29 |
2168d |
763dafc520ad
audit: check the length of userspace generated audit records
|
|
WARNING in __vm_enough_memory (2)
mm
|
-1 |
syz |
done |
|
6 |
2229d |
2233d
|
15/29 |
2168d |
dadbd85f2afc
mm: Fix MREMAP_DONTUNMAP accounting on VMA merge
|
|
WARNING in hwsim_new_radio_nl
wireless
|
-1 |
C |
done |
|
3 |
2235d |
2237d
|
15/29 |
2168d |
7ea862048317
mac80211_hwsim: Use kstrndup() in place of kasprintf()
|
|
KASAN: invalid-free in nf_tables_newset
netfilter
|
24 |
C |
done |
|
21 |
2231d |
2247d
|
15/29 |
2168d |
7fb6f78df700
netfilter: nf_tables: do not leave dangling pointer in nf_tables_set_alloc_name
|
|
WARNING: bad unlock balance in mptcp_poll
mptcp
|
4 |
C |
done |
|
10 |
2234d |
2236d
|
15/29 |
2168d |
e154659ba39a
mptcp: fix double-unlock in mptcp_poll
|
|
KASAN: use-after-free Read in dput (2)
fs
|
19 |
syz |
done |
|
4 |
2233d |
2232d
|
15/29 |
2168d |
4fa3b1c41737
proc: Handle umounts cleanly
|
|
possible deadlock in shmem_mfill_atomic_pte
mm
|
4 |
C |
done |
|
82 |
2196d |
2247d
|
15/29 |
2168d |
94b7cc01da5a
mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
|
|
KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init
kvm
|
17 |
C |
done |
|
1537 |
2195d |
2240d
|
15/29 |
2168d |
b6467ab142b7
KVM: Check validity of resolved slot when searching memslots
|
|
WARNING in set_precision (2)
wireless
|
-1 |
C |
done |
|
117 |
2230d |
2328d
|
15/29 |
2168d |
7ea862048317
mac80211_hwsim: Use kstrndup() in place of kasprintf()
|
|
INFO: rcu detected stall in io_uring_release
fs
|
1 |
syz |
|
|
15 |
2188d |
2229d
|
15/29 |
2168d |
3fd44c86711f
io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
|
|
possible deadlock in shmem_uncharge
mm
|
4 |
C |
done |
|
101 |
2197d |
2236d
|
15/29 |
2168d |
ea0dfeb4209b
shmem: fix possible deadlocks on shmlock_user_lock
|
|
possible deadlock in ext4_evict_inode
ext4
|
4 |
syz |
error |
error |
38 |
2781d |
2819d
|
15/29 |
2195d |
e5bfad3d7acc
smack: use GFP_NOFS while holding inode_smack::smk_lock
|
|
KASAN: use-after-free Write in tcindex_set_parms
net
|
22 |
C |
done |
|
13 |
2248d |
2268d
|
15/29 |
2208d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
possible deadlock in io_submit_one (3)
fs
|
4 |
syz |
done |
|
45 |
2237d |
2245d
|
15/29 |
2208d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
INFO: task hung in io_queue_file_removal
fs
|
1 |
C |
done |
|
16 |
2250d |
2258d
|
15/29 |
2208d |
4afdb733b160
io-uring: drop completion when removing file
|
|
KASAN: slab-out-of-bounds Write in tcindex_set_parms
|
21 |
C |
done |
|
10 |
2249d |
2270d
|
15/29 |
2208d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Read in tcindex_dump
net
|
19 |
syz |
|
|
1 |
2270d |
2268d
|
15/29 |
2208d |
b1be2e8cd290
net_sched: hold rtnl lock in tcindex_partial_destroy_work()
|
|
KMSAN: uninit-value in simple_attr_read
fs
|
7 |
C |
|
|
6 |
2211d |
2281d
|
15/29 |
2208d |
a65cab7d7f05
libfs: fix infoleak in simple_attr_read()
|
|
general protection fault in macsec_upd_offload
net
|
2 |
C |
done |
|
5 |
2246d |
2245d
|
15/29 |
2208d |
aa81700cf232
macsec: fix NULL dereference in macsec_upd_offload()
|
|
memory leak in erase_aeb
mtd
|
3 |
C |
|
|
109 |
2208d |
2361d
|
15/29 |
2208d |
c16f39d14a7e
ubi: fastmap: Free unused fastmap anchor peb during detach
|
|
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff
kvm-x86
|
10 |
C |
done |
|
6404 |
2252d |
2257d
|
15/29 |
2208d |
428b8f1d9f92
KVM: VMX: don't allow memory operands for inline asm that modifies SP
|
|
possible deadlock in send_sigurg
fs
|
4 |
C |
done |
|
65 |
2231d |
2245d
|
15/29 |
2208d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
WARNING: bad unlock balance in ucma_event_handler
|
4 |
C |
done |
|
143 |
2240d |
2904d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING in geneve_exit_batch_net (2)
net
|
-1 |
C |
done |
|
9 |
2255d |
2279d
|
15/29 |
2208d |
0fda7600c2e1
geneve: move debug check after netdev unregister
|
|
KASAN: invalid-free in tcf_exts_destroy
net
|
24 |
C |
done |
|
1 |
2271d |
2270d
|
15/29 |
2208d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Read in __hrtimer_run_queues
kernel
|
19 |
C |
done |
|
299 |
2240d |
2247d
|
15/29 |
2208d |
73d20564e0dc
hrtimer: Don't dereference the hrtimer pointer after the callback
|
|
WARNING: bad unlock balance in ucma_destroy_id
|
4 |
syz |
done |
|
44 |
2275d |
2828d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING: bad unlock balance in __get_user_pages_remote
mm
|
4 |
C |
done |
|
15 |
2240d |
2240d
|
15/29 |
2208d |
c7b6a566b985
mm/gup: Mark lock taken only after a successful retake
|
|
INFO: trying to register non-static key in __io_uring_register
fs
|
-1 |
C |
done |
|
39 |
2239d |
2241d
|
15/29 |
2208d |
f7fe9346869a
io_uring: initialize fixed_file_data lock
|
|
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user
selinux
|
17 |
C |
done |
|
1 |
2249d |
2248d
|
15/29 |
2208d |
a1a7e3a36e01
xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
|
|
KASAN: stack-out-of-bounds Write in mpol_to_str
mm
|
21 |
C |
done |
|
23 |
2249d |
2253d
|
15/29 |
2208d |
aa9f7d5172fa
mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
|
|
general protection fault in do_tcp_getsockopt (2)
net
|
2 |
C |
done |
|
1 |
2260d |
2260d
|
15/29 |
2208d |
6cd6cbf593bf
net-backports: tcp: repair: fix TCP_QUEUE_SEQ implementation
|
|
KASAN: use-after-free Read in addr_handler
rdma
|
19 |
syz |
done |
|
12 |
2239d |
2721d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
INFO: trying to register non-static key in io_cqring_ev_posted (2)
fs
|
-1 |
C |
done |
|
42 |
2211d |
2248d
|
15/29 |
2208d |
10bea96dcc13
io_uring: add missing finish_wait() in io_sq_thread()
|
|
KASAN: use-after-free Read in cma_cancel_operation
rdma
|
19 |
C |
done |
|
617 |
2295d |
2976d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
BUG: unable to handle kernel paging request in kernel_get_mempolicy
mm
|
8 |
C |
done |
|
1 |
2244d |
2241d
|
15/29 |
2208d |
ba841078cd05
mm/mempolicy: Allow lookup_node() to handle fatal signal
|
|
KASAN: slab-out-of-bounds Read in cgroup_file_notify
cgroups
|
17 |
C |
done |
|
1 |
2272d |
2268d
|
15/29 |
2208d |
726b7bbeafd4
hugetlb_cgroup: fix illegal access to memory
|
|
WARNING: refcount bug in __tcf_action_put
net
|
13 |
syz |
|
|
1 |
2269d |
2268d
|
15/29 |
2208d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Read in rdma_listen (2)
rdma
|
19 |
C |
done |
|
354 |
2246d |
2615d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING: kobject bug in ib_register_device
kernel
|
-1 |
C |
done |
|
14 |
2245d |
2284d
|
15/29 |
2208d |
7aefa6237cfe
RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET
|
|
general protection fault in ethnl_parse_header
net
|
2 |
C |
done |
|
9 |
2255d |
2259d
|
15/29 |
2208d |
55b474c41e58
netlink: check for null extack in cookie helpers
|
|
WARNING in vcpu_enter_guest
kvm-x86
|
-1 |
syz |
done |
|
19 |
2257d |
2371d
|
15/29 |
2208d |
d33294541889
KVM: x86: remove bogus user-triggerable WARN_ON
|
|
possible deadlock in send_sigio
fs
|
4 |
C |
done |
|
7 |
2235d |
2244d
|
15/29 |
2208d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
WARNING: ODEBUG bug in __init_work
net
|
-1 |
syz |
done |
|
1 |
2256d |
2255d
|
15/29 |
2208d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING in call_rcu
net
|
-1 |
C |
done |
|
8 |
2261d |
2268d
|
15/29 |
2208d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING: ODEBUG bug in tcf_queue_work
net
|
-1 |
C |
done |
|
30 |
2273d |
2273d
|
15/29 |
2208d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING in __blk_mq_delay_run_hw_queue
block
|
-1 |
C |
done |
error |
6 |
2321d |
2426d
|
15/29 |
2208d |
6e66b4939241
blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
|
|
general protection fault in qdisc_hash_add
net
|
2 |
C |
done |
|
47 |
2266d |
2267d
|
15/29 |
2208d |
7c4046b1c53b
Revert "net: sched: make newly activated qdiscs visible"
|
|
WARNING: refcount bug in tcindex_data_put
net
|
13 |
C |
done |
|
27 |
2244d |
2245d
|
15/29 |
2208d |
a8eab6d35e22
net_sched: fix a missing refcnt in tcindex_init()
|
|
KASAN: use-after-free Read in route4_get
net
|
19 |
C |
|
|
8 |
2236d |
2266d
|
15/29 |
2208d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
KASAN: use-after-free Read in __list_del_entry_valid (4)
rdma
|
19 |
C |
done |
|
16 |
2296d |
2984d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
general protection fault in erspan_netlink_parms
net
|
2 |
C |
done |
|
5 |
2263d |
2263d
|
15/29 |
2208d |
32ca98feab8c
net: ip_gre: Accept IFLA_INFO_DATA-less configuration
|
|
WARNING in kernfs_create_dir_ns
kernfs
|
-1 |
C |
done |
done |
3 |
2262d |
2523d
|
15/29 |
2208d |
810507fe6fd5
locking/lockdep: Reuse freed chain_hlocks entries
|
|
WARNING in af_alg_make_sg
crypto
|
-1 |
C |
done |
|
13 |
2239d |
2240d
|
15/29 |
2208d |
ae46d2aa6a7f
mm/gup: Let __get_user_pages_locked() return -EINTR for fatal signal
|
|
general protection fault in rdma_listen (2)
rdma
|
2 |
syz |
done |
|
104 |
2246d |
2757d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING in kernfs_new_node
kernfs
|
-1 |
C |
done |
done |
2 |
2262d |
2486d
|
15/29 |
2208d |
810507fe6fd5
locking/lockdep: Reuse freed chain_hlocks entries
|
|
possible deadlock in cma_netdev_callback
rdma
|
4 |
C |
done |
|
1399 |
2240d |
2282d
|
15/29 |
2208d |
33fb27fd5446
RDMA/siw: Fix passive connection establishment
|
|
WARNING: refcount bug in sctp_wfree
sctp
|
13 |
C |
done |
|
20 |
2248d |
2269d
|
15/29 |
2208d |
5c3e82fe1596
sctp: fix refcount bug in sctp_wfree
|
|
BUG: corrupted list in rdma_listen
rdma
|
8 |
C |
|
|
202 |
2380d |
2959d
|
15/29 |
2208d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
possible deadlock in free_ioctx_users (2)
|
4 |
C |
done |
|
44 |
2237d |
2245d
|
15/29 |
2208d |
63f818f46af9
proc: Use a dedicated lock in struct pid
|
|
WARNING: ODEBUG bug in route4_change
|
-1 |
C |
done |
|
68 |
2245d |
2268d
|
15/29 |
2208d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
KASAN: use-after-free Read in tty_open
serial
|
19 |
C |
done |
done |
8 |
2254d |
2366d
|
15/29 |
2208d |
ca4463bf8438
vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
|
|
KASAN: slab-out-of-bounds Read in edge_interrupt_callback
usb
|
17 |
C |
|
|
1 |
2256d |
2255d
|
15/29 |
2208d |
57aa9f294b09
USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
|
|
KMSAN: uninit-value in tcf_exts_change
net
|
7 |
C |
|
|
5 |
2259d |
2268d
|
15/29 |
2208d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
BUG: sleeping function called from invalid context in kmem_cache_alloc_node_trace
net
|
5 |
C |
done |
|
364 |
2269d |
2271d
|
15/29 |
2208d |
138470a9b2cc
net/sched: act_ct: fix lockdep splat in tcf_ct_flow_table_get
|
|
KASAN: use-after-free Write in release_tty
|
22 |
C |
done |
|
591 |
2244d |
2366d
|
15/29 |
2208d |
ca4463bf8438
vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
|
|
WARNING: ODEBUG bug in tcindex_destroy_work (3)
net
|
-1 |
syz |
done |
|
13 |
2247d |
2283d
|
15/29 |
2208d |
304e024216a8
net_sched: add a temporary refcnt for struct tcindex_data
|
|
KASAN: slab-out-of-bounds Read in hfa384x_usbin_callback
staging
usb
|
17 |
C |
|
|
1 |
2258d |
2258d
|
15/29 |
2208d |
1165dd73e811
staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
|
|
WARNING: refcount bug in igmp_start_timer
net
|
13 |
syz |
done |
done |
19 |
2473d |
2838d
|
15/29 |
2230d |
323ebb61e32b
net: use listified RX for handling GRO_NORMAL skbs
|
|
possible deadlock in sch_direct_xmit
net
|
4 |
C |
done |
done |
1548 |
2374d |
3052d
|
15/29 |
2230d |
323ebb61e32b
net: use listified RX for handling GRO_NORMAL skbs
|
|
KMSAN: uninit-value in __iptunnel_pull_header
net
|
7 |
C |
|
|
12 |
2264d |
2272d
|
15/29 |
2232d |
17c25cafd4d3
gre: fix uninit-value in __iptunnel_pull_header
|
|
INFO: task hung in hashlimit_mt_check_common
|
1 |
C |
done |
|
20 |
2289d |
2328d
|
15/29 |
2232d |
8d0015a7ab76
netfilter: xt_hashlimit: limit the max size of hashtable
c4a3922d2d20
netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put()
|
|
divide error in wg_packet_encrypt_worker
wireguard
|
2 |
C |
done |
|
12 |
2286d |
2294d
|
15/29 |
2232d |
175f1ca9a9ed
wireguard: send: account for mtu=0 devices
|
|
WARNING in idr_destroy
dri
|
-1 |
C |
done |
|
5 |
2261d |
2276d
|
15/29 |
2232d |
b216a8e7908c
drm/lease: fix WARNING in idr_destroy
|
|
BUG: soft lockup in sys_exit_group
usb
|
1 |
C |
|
|
6 |
2257d |
2280d
|
15/29 |
2232d |
d683469b3c93
ALSA: line6: Fix endless MIDI read loop
|
|
KMSAN: uninit-value in audit_receive
audit
|
7 |
C |
|
|
4 |
2283d |
2284d
|
15/29 |
2232d |
756125289285
audit: always check the netlink payload length in audit_receive_msg()
|
|
WARNING: lock held when returning to user space in ovl_write_iter
overlayfs
|
4 |
C |
done |
|
6 |
2262d |
2277d
|
15/29 |
2232d |
c853680453ac
ovl: fix lockdep warning for async write
|
|
INFO: task hung in hashlimit_net_exit
netfilter
|
1 |
syz |
done |
|
53 |
2286d |
2295d
|
15/29 |
2232d |
8d0015a7ab76
netfilter: xt_hashlimit: limit the max size of hashtable
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE! (4)
audit
|
-1 |
C |
|
|
18 |
2251d |
2286d
|
15/29 |
2232d |
2ad3e17ebf94
audit: fix error handling in audit_data_to_entry()
|
|
KMSAN: uninit-value in slhc_compress
net
|
7 |
C |
|
|
3 |
2275d |
2275d
|
15/29 |
2232d |
110a40dfb708
slip: make slhc_compress() more robust against malicious packets
|
|
WARNING: proc registration bug in hashlimit_mt_check_common
netfilter
|
-1 |
C |
done |
|
320 |
2272d |
2297d
|
15/29 |
2232d |
99b79c3900d4
netfilter: xt_hashlimit: unregister proc file before releasing mutex
|
|
memory leak in dma_buf_ioctl
|
3 |
C |
done |
|
129 |
2283d |
2499d
|
15/29 |
2232d |
d1f37226431f
dma-buf: free dmabuf->name in dma_buf_release()
|
|
INFO: trying to register non-static key in xa_destroy
rdma
|
-1 |
C |
done |
|
46 |
2255d |
2283d
|
15/29 |
2232d |
12e5eef0f4d8
RDMA/siw: Fix failure handling during device creation
|
|
BUG: unable to handle kernel NULL pointer dereference in inet_release
net
|
10 |
syz |
|
|
3 |
2282d |
2283d
|
15/29 |
2232d |
b6f6118901d1
ipv6: restrict IPV6_ADDRFORM operation
|
|
INFO: rcu detected stall in ip_set_uadd
netfilter
|
1 |
C |
done |
|
11 |
2277d |
2314d
|
15/29 |
2232d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
INFO: task hung in paste_selection
serial
|
1 |
C |
inconclusive |
done |
8 |
2299d |
2364d
|
15/29 |
2232d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
BUG: unable to handle kernel paging request in ethnl_update_bitset32
net
|
8 |
C |
|
|
168 |
2272d |
2284d
|
15/29 |
2232d |
e34f1753eebc
ethtool: limit bitset size
|
|
KMSAN: use-after-free in find_match
net
|
18 |
C |
|
|
52 |
2262d |
2292d
|
15/29 |
2232d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: use-after-free Read in vgem_gem_dumb_create
dri
|
19 |
C |
done |
|
15 |
2295d |
2307d
|
15/29 |
2232d |
4b848f20eda5
drm/vgem: Close use-after-free race in vgem_gem_create
|
|
memory leak in nf_tables_parse_netdev_hooks (2)
netfilter
|
3 |
C |
|
|
2 |
2272d |
2276d
|
15/29 |
2232d |
2d285f26ecd0
netfilter: nf_tables: free flowtable hooks on hook register error
|
|
KMSAN: uninit-value in bond_alb_xmit
net
|
7 |
syz |
|
|
3 |
2273d |
2275d
|
15/29 |
2232d |
b7469e83d2ad
bonding/alb: make sure arp header is pulled before accessing it
|
|
divide error in encrypt_packet
wireguard
|
2 |
C |
done |
|
89 |
2286d |
2294d
|
15/29 |
2232d |
175f1ca9a9ed
wireguard: send: account for mtu=0 devices
|
|
general protection fault in smc_ib_remove_dev
smc
|
2 |
C |
done |
|
98 |
2272d |
2284d
|
15/29 |
2232d |
a2f2ef4a54c0
net/smc: check for valid ib_client_data
|
|
possible deadlock in htab_lru_map_delete_node
bpf
|
4 |
C |
done |
|
264 |
2285d |
2291d
|
15/29 |
2232d |
b9aff38de2cb
bpf: Fix a potential deadlock with bpf_map_do_batch
|
|
KMSAN: use-after-free in ip6_dst_destroy
net
|
18 |
C |
|
|
2 |
2265d |
2277d
|
15/29 |
2232d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
memory leak in fasync_helper
fs
|
3 |
C |
|
|
14 |
2301d |
2362d
|
15/29 |
2232d |
67f562e3e147
net/smc: transfer fasync_list in case of fallback
|
|
possible deadlock in inet_csk_accept
net
|
4 |
C |
done |
|
992 |
2267d |
2268d
|
15/29 |
2232d |
06669ea346e4
net: memcg: fix lockdep splat in inet_csk_accept()
|
|
KASAN: slab-out-of-bounds Read in ethnl_update_bitset32
net
|
17 |
syz |
|
|
2 |
2278d |
2284d
|
15/29 |
2232d |
e34f1753eebc
ethtool: limit bitset size
|
|
KMSAN: uninit-value in audit_log_vformat
audit
|
7 |
C |
|
|
220 |
2232d |
2284d
|
15/29 |
2232d |
756125289285
audit: always check the netlink payload length in audit_receive_msg()
|
|
INFO: rcu detected stall in hash_ip4_gc
kernel
|
1 |
C |
done |
|
1 |
2314d |
2312d
|
15/29 |
2232d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
KMSAN: kernel-infoleak in tty_compat_ioctl
serial
|
9 |
C |
|
|
162 |
2254d |
2284d
|
15/29 |
2232d |
17329563a97d
tty: fix compat TIOCGSERIAL leaking uninitialized memory
|
|
BUG: sleeping function called from invalid context in __kmalloc
ceph
fs
|
5 |
C |
done |
|
5 |
2294d |
2300d
|
15/29 |
2232d |
b27a939e8376
ceph: canonicalize server path in place
|
|
INFO: rcu detected stall in ip_set_udel
netfilter
|
1 |
C |
done |
|
12 |
2292d |
2314d
|
15/29 |
2232d |
f66ee0410b1c
netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports
|
|
general protection fault in ip_set_comment_free
netfilter
|
2 |
C |
done |
|
19 |
2275d |
2312d
|
15/29 |
2232d |
8af1c6fbd923
netfilter: ipset: Fix forceadd evaluation path
|
|
possible deadlock in bond_get_stats (3)
net
|
4 |
syz |
done |
|
2 |
2287d |
2287d
|
15/29 |
2232d |
b3e80d44f5b1
bonding: fix lockdep warning in bond_get_stats()
|
|
KMSAN: uninit-value in kstrdup
net
|
7 |
C |
|
|
8 |
2268d |
2295d
|
15/29 |
2232d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
possible deadlock in sidtab_sid2str_put
selinux
|
4 |
C |
done |
|
1382 |
2294d |
2311d
|
15/29 |
2232d |
39a706fbcf26
selinux: fix sidtab string cache locking
|
|
KASAN: use-after-free Read in n_tty_receive_buf_common
|
19 |
C |
done |
|
68 |
2288d |
2364d
|
15/29 |
2232d |
07e6124a1a46
vt: selection, close sel_buffer race
|
|
KASAN: use-after-free Read in ethnl_update_bitset32
net
|
19 |
C |
done |
|
6 |
2276d |
2284d
|
15/29 |
2232d |
e34f1753eebc
ethtool: limit bitset size
|
|
general protection fault in nf_flow_table_offload_setup
|
2 |
C |
done |
done |
835 |
2286d |
2319d
|
15/29 |
2232d |
a7da92c2c8a1
netfilter: flowtable: skip offload setup if disabled
|
|
memory leak in nfs_fs_context_parse_monolithic
nfs
|
3 |
C |
|
|
18 |
2267d |
2293d
|
15/29 |
2232d |
75a9b9176157
NFS: Fix leak of ctx->nfs_server.hostname
|
|
KASAN: use-after-free Read in find_match
|
19 |
C |
done |
|
142 |
2286d |
2292d
|
15/29 |
2232d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
KMSAN: uninit-value in fat_evict_inode
exfat
|
7 |
C |
|
|
256 |
2262d |
2286d
|
15/29 |
2232d |
bc87302a093f
fat: fix uninit-memory access for partial initialized inode
|
|
KASAN: use-after-free Read in ip6_dst_destroy
net
|
19 |
C |
done |
|
1 |
2292d |
2292d
|
15/29 |
2232d |
44bfa9c5e5f0
net: rtnetlink: fix bugs in rtnl_alt_ifname()
|
|
WARNING: bad unlock balance in ovl_llseek
overlayfs
|
4 |
C |
done |
|
4 |
2264d |
2277d
|
15/29 |
2232d |
531d3040bc5c
ovl: fix lock in ovl_llseek()
|
|
KASAN: use-after-free Read in l3mdev_master_ifindex_rcu
net
|
19 |
C |
done |
done |
13 |
2288d |
2294d
|
15/29 |
2232d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
KASAN: slab-out-of-bounds Read in resample_shrink
sound
|
17 |
C |
done |
|
5 |
2254d |
2273d
|
15/29 |
2232d |
f2ecf903ef06
ALSA: pcm: oss: Avoid plugin buffer overflow
|
|
general protection fault in nldev_stat_set_doit
rdma
|
2 |
C |
done |
|
8 |
2266d |
2283d
|
15/29 |
2232d |
78f34a16c286
RDMA/nldev: Fix crash when set a QP to a new counter but QPN is missing
|
|
kernel panic: stack is corrupted in vhost_net_ioctl
kvm
net
virt
|
2 |
C |
done |
|
2 |
2292d |
2379d
|
15/29 |
2232d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr
lsm
net
|
10 |
C |
done |
|
8 |
2273d |
2283d
|
15/29 |
2232d |
dc24f8b4ecd3
mptcp: add dummy icsk_sync_mss()
|
|
INFO: task hung in lock_sock_nested (2)
net
virt
kvm
|
1 |
C |
done |
|
418 |
2272d |
2285d
|
15/29 |
2232d |
3f74957fcbea
vsock: fix potential deadlock in transport->release()
|
|
KMSAN: use-after-free in l3mdev_master_ifindex_rcu
net
|
18 |
C |
|
|
5 |
2263d |
2286d
|
15/29 |
2232d |
e08ad80551b4
net: add strict checks in netdev_name_node_alt_destroy()
|
|
unregister_netdevice: waiting for DEV to become free (3)
|
2 |
C |
|
|
1864 |
2232d |
2294d
|
15/29 |
2232d |
e34f1753eebc
ethtool: limit bitset size
|
|
KASAN: use-after-free Read in mld_in_v1_mode
net
|
19 |
C |
done |
|
3 |
2291d |
2294d
|
15/29 |
2232d |
e08ad80551b4
net-backports: net: add strict checks in netdev_name_node_alt_destroy()
|
|
possible deadlock in bpf_lru_push_free
bpf
|
4 |
C |
done |
|
609 |
2285d |
2292d
|
15/29 |
2232d |
b9aff38de2cb
bpf: Fix a potential deadlock with bpf_map_do_batch
|
|
WARNING in switch_fpu_return
kernel
|
-1 |
syz |
done |
done |
11 |
2304d |
2337d
|
15/29 |
2253d |
2620fe268e80
KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest"
|
|
KMSAN: use-after-free in rdma_listen
rdma
|
18 |
C |
|
|
26 |
2274d |
2419d
|
15/29 |
2253d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
|
KMSAN: uninit-value in rdma_listen
rdma
|
7 |
C |
|
|
28 |
2430d |
2795d
|
15/29 |
2253d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_add
netfilter
|
17 |
syz |
done |
done |
7 |
2309d |
2320d
|
15/29 |
2253d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_ext_cleanup
netfilter
|
17 |
C |
done |
done |
8 |
2303d |
2319d
|
15/29 |
2261d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_ext_cleanup
netfilter
|
17 |
C |
done |
done |
10 |
2311d |
2320d
|
15/29 |
2261d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
BUG: corrupted list in __nf_tables_abort
|
8 |
C |
done |
done |
29 |
2313d |
2321d
|
15/29 |
2261d |
eb014de4fd41
netfilter: nf_tables: autoload modules from the abort path
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_destroy
netfilter
|
17 |
C |
done |
done |
2 |
2314d |
2314d
|
15/29 |
2261d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_gc
|
17 |
C |
done |
done |
70 |
2302d |
2318d
|
15/29 |
2261d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_ext_cleanup
netfilter
|
17 |
C |
unreliable |
done |
15 |
2303d |
2319d
|
15/29 |
2261d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_destroy
netfilter
|
17 |
C |
done |
done |
2 |
2315d |
2315d
|
15/29 |
2261d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
general protection fault in gcmaes_crypt_by_sg (2)
crypto
|
2 |
C |
error |
done |
28 |
2319d |
2366d
|
15/29 |
2267d |
db885e66d268
net/tls: fix async operation
|
|
possible deadlock in wg_noise_handshake_create_initiation
wireguard
|
4 |
C |
done |
|
11 |
2301d |
2304d
|
15/29 |
2267d |
ec31c2676a10
wireguard: noise: reject peers with low order public keys
|
|
KASAN: use-after-free Read in slcan_open
can
|
19 |
C |
done |
|
2 |
2368d |
2367d
|
15/29 |
2267d |
9ebd796e2400
can: slcan: Fix use-after-free Read in slcan_open
|
|
BUG: unable to handle kernel paging request in slhc_free
net
|
8 |
C |
done |
done |
177 |
2588d |
2706d
|
15/29 |
2267d |
baf76f0c58ae
slip: make slhc_free() silently accept an error pointer
|
|
WARNING in _chaoskey_fill/usb_submit_urb
usb
|
-1 |
C |
|
|
15 |
2385d |
2437d
|
15/29 |
2267d |
92aa5986f4f7
USB: chaoskey: fix error case of a timeout
|
|
KASAN: slab-out-of-bounds Read in iov_iter_alignment
iomap
|
17 |
C |
error |
error |
79 |
2367d |
2364d
|
15/29 |
2267d |
e0ff126ee7ad
pipe: Fix bogus dereference in iov_iter_alignment()
|
|
possible deadlock in wg_set_device
|
4 |
C |
done |
|
33 |
2299d |
2304d
|
15/29 |
2267d |
ec31c2676a10
wireguard: noise: reject peers with low order public keys
|
|
WARNING: ODEBUG bug in io_sqe_files_unregister
fs
|
-1 |
C |
done |
|
964 |
2302d |
2349d
|
15/29 |
2267d |
2faf852d1be8
io_uring: cleanup fixed file data table references
|
|
WARNING in flexcop_usb_probe/usb_submit_urb
usb
media
|
-1 |
C |
|
|
4 |
2433d |
2470d
|
15/29 |
2267d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
BUG: unable to handle kernel paging request in ion_heap_clear_pages
staging
|
8 |
C |
|
|
4378 |
2350d |
2370d
|
15/29 |
2272d |
d98c9e83b5e7
kasan: fix crashes on access to memory mapped by vm_map_ram()
|
|
KASAN: use-after-free Read in bitmap_ip_ext_cleanup
netfilter
|
19 |
C |
done |
done |
2 |
2319d |
2319d
|
15/29 |
2285d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_ipmac_ext_cleanup
netfilter
|
19 |
C |
done |
done |
2 |
2319d |
2319d
|
15/29 |
2285d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Write in bitmap_ip_del
netfilter
|
21 |
C |
done |
done |
7 |
2317d |
2319d
|
15/29 |
2285d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_ip_destroy
netfilter
|
19 |
C |
done |
done |
1 |
2319d |
2319d
|
15/29 |
2288d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KMSAN: uninit-value in setup_udp_tunnel_sock
net
|
7 |
C |
|
|
1 |
2318d |
2318d
|
15/29 |
2289d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
WARNING in nft_request_module
netfilter
|
-1 |
C |
done |
|
7 |
2323d |
2323d
|
15/29 |
2289d |
9332d27d7918
netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
|
|
memory leak in reiserfs_fill_super
fs
|
3 |
C |
|
|
20 |
2308d |
2358d
|
15/29 |
2289d |
5474ca7da6f3
reiserfs: Fix memory leak of journal device string
|
|
memory leak in kobject_set_name_vargs (2)
|
3 |
C |
done |
|
47 |
2315d |
2499d
|
15/29 |
2289d |
cb626bf566eb
net-sysfs: Fix reference count leak
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_gc
|
17 |
C |
done |
|
197 |
2303d |
2320d
|
15/29 |
2289d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KMSAN: uninit-value in can_receive
can
|
7 |
C |
|
|
14 |
2292d |
2381d
|
15/29 |
2289d |
e7153bf70c34
can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs
|
|
memory leak in _sctp_make_chunk
sctp
|
3 |
C |
|
|
1 |
2353d |
2353d
|
15/29 |
2289d |
be7a77292077
sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_list
netfilter
|
17 |
C |
|
|
85 |
2304d |
2321d
|
15/29 |
2289d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: use-after-free Read in bitmap_port_ext_cleanup
netfilter
|
19 |
C |
done |
|
11 |
2319d |
2328d
|
15/29 |
2289d |
c120959387ef
netfilter: fix a use-after-free in mtype_destroy()
|
|
KMSAN: uninit-value in sd_init (2)
media
usb
|
7 |
C |
|
|
94 |
2395d |
2391d
|
15/29 |
2289d |
de89d0864f66
media: gspca: zero usb_buf
|
|
KMSAN: uninit-value in __request_module (3)
kernel
|
7 |
C |
|
|
58 |
2290d |
2318d
|
15/29 |
2289d |
36d79af7fb59
net-backports: net_sched: use validated TCA_KIND attribute in tc_new_tfilter()
|
|
KMSAN: uninit-value in rsvp_change
net
|
7 |
C |
|
|
4 |
2310d |
2311d
|
15/29 |
2289d |
cb3c0e6bdf64
cls_rsvp: fix rsvp_policy
|
|
KASAN: use-after-free Read in __nf_tables_abort
netfilter
|
19 |
C |
done |
|
3 |
2317d |
2318d
|
15/29 |
2289d |
eb014de4fd41
netfilter: nf_tables: autoload modules from the abort path
|
|
WARNING: suspicious RCU usage in find_set_and_id
netfilter
|
4 |
syz |
done |
|
6 |
2314d |
2317d
|
15/29 |
2289d |
5038517119d5
netfilter: ipset: fix suspicious RCU usage in find_set_and_id
|
|
BUG: corrupted list in nft_obj_del
netfilter
|
8 |
C |
done |
|
7 |
2321d |
2323d
|
15/29 |
2289d |
335178d5429c
netfilter: nf_tables: fix flowtable list del corruption
|
|
BUG: corrupted list in nf_tables_commit
netfilter
|
8 |
C |
done |
|
8 |
2323d |
2323d
|
15/29 |
2289d |
335178d5429c
netfilter: nf_tables: fix flowtable list del corruption
|
|
kernel panic: stack is corrupted in __lock_acquire (4)
kernel
|
2 |
syz |
error |
error |
75 |
2385d |
2543d
|
15/29 |
2289d |
4da6a196f93b
bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
|
|
INFO: rcu detected stall in addrconf_rs_timer (3)
net
|
1 |
C |
inconclusive |
done |
81 |
2350d |
2346d
|
15/29 |
2289d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
KASAN: slab-out-of-bounds Read in bitmap_ipmac_list
|
17 |
C |
done |
|
108 |
2305d |
2321d
|
15/29 |
2289d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
BUG: corrupted list in __dentry_kill (2)
fs
|
8 |
C |
done |
|
4945 |
2358d |
2358d
|
15/29 |
2289d |
a3d1e7eb5abe
simple_recursive_removal(): kernel-side rm -rf for ramfs-style filesystems
|
|
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock (2)
net
|
21 |
C |
done |
|
8 |
2316d |
2318d
|
15/29 |
2289d |
940ba1498665
net-backports: gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
BUG: sleeping function called from invalid context in lock_sock_nested
net
bpf
|
5 |
C |
|
|
1232 |
2289d |
2365d
|
15/29 |
2289d |
37f96694cf73
crypto: af_alg - Use bh_lock_sock in sk_destruct
|
|
general protection fault in dccp_timeout_nlattr_to_obj
netfilter
|
2 |
C |
done |
|
7 |
2329d |
2332d
|
15/29 |
2289d |
1d9a7acd3d1e
netfilter: conntrack: dccp, sctp: handle null timeout argument
|
|
memory leak in vlan_dev_set_egress_priority
net
|
3 |
C |
|
|
1 |
2332d |
2332d
|
15/29 |
2289d |
9bbd917e0bec
vlan: fix memory leak in vlan_dev_set_egress_priority
|
|
KMSAN: uninit-value in macvlan_broadcast
net
|
7 |
C |
|
|
2 |
2332d |
2332d
|
15/29 |
2289d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
general protection fault in xt_rateest_tg_checkentry
netfilter
|
2 |
C |
done |
|
12 |
2333d |
2343d
|
15/29 |
2289d |
1b789577f655
netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
|
|
WARNING in tcp_ack
net
|
-1 |
C |
done |
|
3 |
2330d |
2331d
|
15/29 |
2289d |
90d72256addf
gtp: fix bad unlock balance in gtp_encap_enable_socket
|
|
memory leak in em_nbyte_change
net
|
3 |
C |
|
|
1 |
2314d |
2314d
|
15/29 |
2289d |
55cd9f67f1e4
net_sched: ematch: reject invalid TCF_EM_SIMPLE
|
|
KMSAN: uninit-value in digitv_rc_query
media
usb
|
7 |
C |
|
|
4 |
2408d |
2391d
|
15/29 |
2289d |
eecc70d22ae5
media: digitv: don't continue if remote control state can't be read
569bc8d6a6a5
media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
|
|
general protection fault in xt_rateest_put
netfilter
|
2 |
C |
done |
|
97 |
2320d |
2327d
|
15/29 |
2289d |
212e7f56605e
netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
|
|
BUG: sleeping function called from invalid context in tpk_write
kernel
|
5 |
C |
done |
|
12 |
2321d |
2362d
|
15/29 |
2289d |
9a655c77ff8f
ttyprintk: fix a potential deadlock in interrupt context issue
|
|
memory leak in snd_pcm_hw_params
sound
|
3 |
C |
|
|
25 |
2302d |
2309d
|
15/29 |
2289d |
66f2d19f8116
ALSA: pcm: Fix memory leak at closing a stream without hw_free
|
|
KASAN: slab-out-of-bounds Read in macvlan_broadcast
net
|
17 |
C |
done |
|
10 |
2330d |
2332d
|
15/29 |
2289d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
KMSAN: uninit-value in number
media
usb
|
7 |
C |
|
|
190 |
2294d |
2391d
|
15/29 |
2289d |
51d0c99b391f
media: af9005: uninitialized variable printked
|
|
KMSAN: uninit-value in __tipc_nl_compat_dumpit
tipc
|
7 |
C |
|
|
4428 |
2289d |
2358d
|
15/29 |
2289d |
a7869e5f9174
tipc: eliminate KMSAN: uninit-value in __tipc_nl_compat_dumpit error
|
|
KASAN: slab-out-of-bounds Read in nla_put_nohdr
net
|
17 |
C |
done |
|
1 |
2317d |
2317d
|
15/29 |
2289d |
61678d28d4a4
net_sched: fix datalen for ematch
|
|
general protection fault in path_openat
ext4
|
2 |
C |
done |
|
7 |
2307d |
2307d
|
15/29 |
2289d |
6404674acd59
vfs: fix do_last() regression
|
|
general protection fault in free_verifier_state (3)
bpf
|
2 |
C |
|
|
5 |
2317d |
2324d
|
15/29 |
2289d |
f59bbfc2f609
bpf: Fix error path under memory pressure
|
|
KASAN: use-after-free Read in tcp_fastretrans_alert
net
|
19 |
C |
done |
|
1 |
2320d |
2320d
|
15/29 |
2289d |
2bec445f9bf3
net-backports: tcp: do not leave dangling pointers in tp->highest_sack
|
|
KASAN: use-after-free Read in root_remove_peer_lists
wireguard
|
19 |
C |
done |
|
2 |
2306d |
2306d
|
15/29 |
2289d |
9981159fc3b6
wireguard: allowedips: fix use-after-free in root_remove_peer_lists
|
|
KASAN: use-after-free Read in snd_timer_resolution
sound
|
19 |
C |
|
|
5 |
2305d |
2323d
|
15/29 |
2289d |
60adcfde92fa
ALSA: seq: Fix racy access for queue timer in proc read
|
|
KMSAN: uninit-value in i2c_w (2)
media
usb
|
7 |
C |
|
|
3 |
2403d |
2391d
|
15/29 |
2289d |
de89d0864f66
media: gspca: zero usb_buf
|
|
BUG: unable to handle kernel paging request in rhashtable_jhash2
net
|
8 |
C |
done |
|
6 |
2322d |
2323d
|
15/29 |
2289d |
41cdc741048b
netdevsim: fix nsim_fib6_rt_create() error path
|
|
memory leak in tcf_ctinfo_init
net
|
3 |
C |
|
|
2 |
2319d |
2320d
|
15/29 |
2289d |
09d4f10a5e78
net: sched: act_ctinfo: fix memory leak
|
|
WARNING in do_dentry_open (2)
fs
|
-1 |
C |
done |
|
17 |
2309d |
2307d
|
15/29 |
2289d |
a37f4958f7b6
debugfs: Return -EPERM when locked down
|
|
KASAN: slab-out-of-bounds Read in __nla_put_nohdr
net
|
17 |
C |
done |
|
4 |
2317d |
2317d
|
15/29 |
2289d |
61678d28d4a4
net_sched: fix datalen for ematch
|
|
INFO: rcu detected stall in br_handle_frame (2)
net
|
1 |
C |
done |
|
2 |
2349d |
2345d
|
15/29 |
2289d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
memory leak in nf_tables_parse_netdev_hooks
netfilter
|
3 |
C |
|
|
6 |
2293d |
2323d
|
15/29 |
2289d |
cd77e75b5e46
netfilter: nf_tables: fix memory leak in nf_tables_parse_netdev_hooks()
|
|
WARNING in __proc_create (2)
afs
|
-1 |
C |
done |
|
4 |
2317d |
2317d
|
15/29 |
2289d |
a45ea48e2bcd
afs: Fix characters allowed into cell names
|
|
INFO: rcu detected stall in netlink_sendmsg (3)
net
|
1 |
C |
done |
|
6 |
2297d |
2350d
|
15/29 |
2289d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
general protection fault in timer_is_static_object
input
|
2 |
C |
|
|
2 |
2373d |
2371d
|
15/29 |
2289d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
KASAN: null-ptr-deref Write in queue_work_on
can
|
12 |
C |
done |
error |
5 |
2474d |
2470d
|
15/29 |
2289d |
0ace17d56824
can, slip: Protect tty->disc_data in write_wakeup and close with RCU
|
|
WARNING in cbq_destroy_class
net
|
-1 |
C |
done |
|
7 |
2294d |
2317d
|
15/29 |
2289d |
2e24cd755552
net_sched: fix ops->bind_class() implementations
|
|
WARNING in tracepoint_probe_register_prio (3)
trace
|
-1 |
syz |
done |
|
979 |
2293d |
2931d
|
15/29 |
2289d |
64ae572bc7d0
tracing: Fix sched switch start/stop refcount racy updates
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE!
kvm-x86
|
-1 |
C |
done |
|
6 |
2346d |
2353d
|
15/29 |
2289d |
005ba37cb89b
mm: thp: KVM: Explicitly check for THP when populating secondary MMU
|
|
BUG: spinlock already unlocked in input_set_keycode
input
|
4 |
C |
|
|
2 |
2383d |
2381d
|
15/29 |
2289d |
cb222aed03d7
Input: add safety guards to input_set_keycode()
|
|
WARNING: refcount bug in cdev_get
|
13 |
C |
done |
|
105 |
2331d |
2471d
|
15/29 |
2289d |
68faa679b8be
chardev: Avoid potential use-after-free in 'chrdev_open()'
|
|
KMSAN: uninit-value in read_sensor_register (2)
media
usb
|
7 |
C |
|
|
44 |
2397d |
2414d
|
15/29 |
2289d |
de89d0864f66
media: gspca: zero usb_buf
|
|
inconsistent lock state in rxrpc_put_client_conn
|
4 |
C |
done |
|
18198 |
2298d |
2304d
|
15/29 |
2289d |
963485d436cc
rxrpc: Fix call RCU cleanup using non-bh-safe locks
|
|
WARNING in cbq_destroy
net
|
-1 |
C |
done |
|
1 |
2317d |
2317d
|
15/29 |
2289d |
2e24cd755552
net_sched: fix ops->bind_class() implementations
|
|
WARNING in dln2_start_rx_urbs/usb_submit_urb
usb
|
-1 |
C |
|
|
44 |
2305d |
2393d
|
15/29 |
2289d |
2b8bd606b1e6
mfd: dln2: More sanity checking for endpoints
|
|
KASAN: use-after-free Read in tcp_check_sack_reordering
net
|
19 |
C |
done |
|
2 |
2312d |
2321d
|
15/29 |
2289d |
2bec445f9bf3
net-backports: tcp: do not leave dangling pointers in tp->highest_sack
|
|
BUG: unable to handle kernel NULL pointer dereference in cfg80211_wext_siwfrag
wireless
|
10 |
C |
done |
|
8 |
2320d |
2332d
|
15/29 |
2289d |
24953de0a5e3
cfg80211: check for set_wiphy_params
|
|
WARNING in cgroup_apply_control_enable
cgroups
|
-1 |
C |
done |
|
178 |
2326d |
2878d
|
15/29 |
2289d |
3bc0bb36fa30
cgroup: Prevent double killing of css when enabling threaded cgroup
|
|
KASAN: slab-out-of-bounds Read in hid_field_extract
input
usb
|
17 |
C |
|
|
6 |
2330d |
2363d
|
15/29 |
2289d |
8ec321e96e05
HID: Fix slab-out-of-bounds read in hid_field_extract
|
|
general protection fault in nft_chain_parse_hook
netfilter
|
2 |
C |
done |
|
48 |
2308d |
2323d
|
15/29 |
2289d |
826035498ec1
netfilter: nf_tables: add __nft_chain_type_get()
|
|
WARNING in nf_tables_table_destroy
netfilter
|
-1 |
C |
done |
done |
1 |
2321d |
2321d
|
15/29 |
2289d |
eb014de4fd41
netfilter: nf_tables: autoload modules from the abort path
|
|
KASAN: slab-out-of-bounds Write in mpol_parse_str
mm
|
21 |
C |
done |
|
3 |
2328d |
2324d
|
15/29 |
2289d |
c7a91bc7c2e1
mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_gc
netfilter
|
17 |
C |
done |
|
15 |
2302d |
2320d
|
15/29 |
2289d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
WARNING: ODEBUG bug in rsi_probe
usb
wireless
|
-1 |
C |
|
|
10487 |
2303d |
2599d
|
15/29 |
2289d |
92aafe77123a
rsi: fix use-after-free on probe errors
|
|
KASAN: use-after-free Read in macvlan_broadcast
net
|
19 |
C |
done |
|
12 |
2330d |
2332d
|
15/29 |
2289d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
general protection fault in nft_tunnel_get_init
netfilter
|
2 |
C |
done |
|
7 |
2323d |
2323d
|
15/29 |
2289d |
1c702bf902bd
netfilter: nft_tunnel: fix null-attribute check
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_add
netfilter
|
17 |
syz |
done |
|
9 |
2314d |
2321d
|
15/29 |
2289d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
WARNING: bad unlock balance in gtp_encap_enable_socket
net
|
4 |
C |
done |
|
8 |
2329d |
2333d
|
15/29 |
2289d |
90d72256addf
net-backports: gtp: fix bad unlock balance in gtp_encap_enable_socket
|
|
WARNING: bad unlock balance in sch_direct_xmit
net
|
4 |
C |
done |
|
35 |
2319d |
2366d
|
15/29 |
2289d |
53d374979ef1
net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()
|
|
general protection fault in inet6_set_link_af
net
|
2 |
C |
done |
|
8 |
2299d |
2303d
|
15/29 |
2289d |
db3fa271022d
ipv6/addrconf: fix potential NULL deref in inet6_set_link_af()
|
|
general protection fault in tcf_ife_cleanup
net
|
2 |
C |
done |
|
111 |
2304d |
2328d
|
15/29 |
2289d |
44c23d71599f
net/sched: act_ife: initalize ife->metalist earlier
|
|
BUG: unable to handle kernel paging request in do_csum (2)
kernel
|
8 |
C |
done |
|
6 |
2313d |
2315d
|
15/29 |
2289d |
6cd021a58c18
udp: segment looped gso packets correctly
|
|
KASAN: use-after-free Write in __alloc_skb (2)
net
|
22 |
C |
done |
|
7 |
2340d |
2357d
|
15/29 |
2289d |
d836f5c69d87
net-backports: net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
|
|
KASAN: slab-out-of-bounds Read in bitmap_ip_test
netfilter
|
17 |
syz |
|
|
10 |
2310d |
2320d
|
15/29 |
2289d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
KASAN: slab-out-of-bounds Read in tcf_exts_destroy
net
|
17 |
C |
done |
error |
8 |
2412d |
2315d
|
15/29 |
2289d |
599be01ee567
net_sched: fix an OOB access in cls_tcindex
|
|
general protection fault in hash_ipportnet4_uadt
netfilter
|
2 |
C |
done |
|
13 |
2329d |
2331d
|
15/29 |
2289d |
22dad713b8a5
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
|
|
KASAN: slab-out-of-bounds Read in bitmap_port_list
netfilter
|
17 |
C |
|
|
152 |
2312d |
2321d
|
15/29 |
2289d |
32c72165dbd0
netfilter: ipset: use bitmap infrastructure completely
|
|
WARNING in uvc_scan_chain_forward
usb
media
|
-1 |
C |
|
|
6 |
2329d |
2353d
|
15/29 |
2289d |
68035c80e129
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
|
|
inconsistent lock state in rxrpc_put_client_connection_id
afs
net
|
4 |
C |
done |
|
473 |
2298d |
2304d
|
15/29 |
2289d |
963485d436cc
rxrpc: Fix call RCU cleanup using non-bh-safe locks
|
|
INFO: task hung in aead_recvmsg
crypto
|
1 |
C |
done |
|
11991 |
2316d |
3089d
|
15/29 |
2289d |
bbefa1dd6a6d
crypto: pcrypt - Avoid deadlock by using per-instance padata queues
|
|
KASAN: use-after-free Read in bitmap_port_destroy
netfilter
|
19 |
C |
|
|
1 |
2320d |
2320d
|
15/29 |
2289d |
c120959387ef
netfilter: fix a use-after-free in mtype_destroy()
|
|
KASAN: null-ptr-deref Read in tcf_generic_walker
net
|
11 |
C |
done |
|
6 |
2293d |
2312d
|
15/29 |
2289d |
760d228e322e
net_sched: walk through all child classes in tc_bind_tclass()
|
|
WARNING: refcount bug in chrdev_open
fs
|
13 |
C |
inconclusive |
done |
15 |
2369d |
2471d
|
15/29 |
2289d |
68faa679b8be
chardev: Avoid potential use-after-free in 'chrdev_open()'
|
|
INFO: task hung in __generic_file_fsync (2)
exfat
|
1 |
C |
done |
done |
28 |
2336d |
2337d
|
15/29 |
2290d |
85a8ce62c2ea
block: add bio_truncate to fix guard_bio_eod
|
|
WARNING in tcp_enter_loss (2)
net
|
-1 |
C |
done |
unreliable |
4 |
2947d |
2997d
|
15/29 |
2290d |
16ae6aa17052
tcp: ignore Fast Open on repair mode
|
|
KASAN: null-ptr-deref Read in refcount_sub_and_test_checked (2)
media
|
11 |
C |
inconclusive |
done |
916 |
2549d |
2751d
|
15/29 |
2290d |
62dcb4f41836
media: vb2: check memory model for VIDIOC_CREATE_BUFS
|
|
BUG: unable to handle kernel paging request in xfs_sb_quiet_read_verify
xfs
|
8 |
C |
done |
|
6 |
2350d |
2350d
|
15/29 |
2294d |
d98c9e83b5e7
kasan: fix crashes on access to memory mapped by vm_map_ram()
|
|
KASAN: vmalloc-out-of-bounds Write in pcpu_alloc
bpf
|
21 |
C |
done |
|
31 |
2342d |
2366d
|
15/29 |
2294d |
253a496d8e57
kasan: don't assume percpu shadow allocations will succeed
|
|
KASAN: use-after-free Read in iov_iter_alignment
iomap
|
19 |
C |
error |
|
3 |
2368d |
2367d
|
15/29 |
2294d |
e0ff126ee7ad
pipe: Fix bogus dereference in iov_iter_alignment()
|
|
memory leak in sctp_stream_init
sctp
|
3 |
C |
|
|
1 |
2355d |
2354d
|
15/29 |
2294d |
951c6db954a1
sctp: fix memleak on err handling of stream initialization
|
|
general protection fault in gigaset_probe
staging
usb
|
2 |
C |
|
|
6 |
2378d |
2497d
|
15/29 |
2294d |
53f35a39c386
staging: gigaset: fix general protection fault on probe
|
|
KASAN: use-after-free Read in ext4_xattr_set_entry (2)
ext4
|
19 |
C |
done |
|
19 |
2353d |
2762d
|
15/29 |
2294d |
9803387c55f7
ext4: validate the debug_want_extra_isize mount option at parse time
|
|
KMSAN: uninit-value in __crc32c_le_base
crypto
|
7 |
syz |
|
|
567 |
2330d |
2376d
|
15/29 |
2294d |
b6f3320b1d52
sctp: fully initialize v4 addr in some functions
|
|
unregister_netdevice: waiting for DEV to become free (2)
|
2 |
C |
done |
|
385621 |
2294d |
2841d
|
15/29 |
2294d |
ddd9b5e3e765
net-sysfs: Call dev_hold always in rx_queue_add_kobject
|
|
INFO: task hung in sync_inodes_sb (3)
exfat
|
1 |
C |
done |
|
6 |
2335d |
2343d
|
15/29 |
2294d |
85a8ce62c2ea
block: add bio_truncate to fix guard_bio_eod
|
|
KASAN: use-after-free Read in tomoyo_realpath_from_path
tomoyo
|
19 |
syz |
error |
error |
7 |
2354d |
2547d
|
15/29 |
2294d |
6f7c41374b62
tomoyo: Don't use nifty names on sockets.
|
|
KASAN: slab-out-of-bounds Read in hsr_debugfs_rename
net
|
17 |
C |
done |
|
18 |
2333d |
2342d
|
15/29 |
2294d |
04b69426d846
hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename()
|
|
general protection fault in j1939_sk_bind
|
2 |
syz |
done |
done |
22 |
2369d |
2395d
|
15/29 |
2294d |
00d4e14d2e4c
can: j1939: j1939_sk_bind(): take priv after lock is held
|
|
BUG: unable to handle kernel paging request in pcpu_alloc
bpf
|
8 |
C |
done |
|
24 |
2347d |
2366d
|
15/29 |
2294d |
253a496d8e57
kasan: don't assume percpu shadow allocations will succeed
|
|
general protection fault in sctp_stream_free (2)
sctp
|
2 |
C |
done |
|
25 |
2339d |
2350d
|
15/29 |
2294d |
61d5d4062876
sctp: fix err handling of stream initialization
|
|
inconsistent lock state in sp_get
ppp
|
4 |
C |
done |
|
2 |
2357d |
2357d
|
15/29 |
2294d |
5c9934b6767b
6pack,mkiss: fix possible deadlock
|
|
general protection fault in j1939_jsk_del (2)
can
|
2 |
syz |
|
|
21 |
2353d |
2370d
|
15/29 |
2294d |
00d4e14d2e4c
can: j1939: j1939_sk_bind(): take priv after lock is held
|
|
KASAN: vmalloc-out-of-bounds Read in compat_copy_entries
netfilter
bridge
|
17 |
C |
done |
|
3 |
2355d |
2355d
|
15/29 |
2294d |
e608f631f0ba
netfilter: ebtables: compat: reject all padding in matches/watchers
|
|
WARNING in ovl_rename
overlayfs
|
-1 |
C |
done |
done |
5 |
2586d |
2582d
|
15/29 |
2294d |
6889ee5a53b8
ovl: relax WARN_ON() on rename to self
|
|
possible deadlock in mon_bin_vma_fault
|
4 |
C |
done |
|
11427 |
2356d |
2822d
|
15/29 |
2294d |
19e6317d24c2
usb: mon: Fix a deadlock in usbmon between mmap and read
|
|
WARNING: refcount bug in smc_release (2)
smc
|
13 |
C |
done |
|
9 |
2351d |
2375d
|
15/29 |
2294d |
86434744fedf
net/smc: add fallback check to connect()
|
|
BUG: Bad rss-counter state (3)
|
-1 |
C |
unreliable |
done |
438 |
2494d |
2960d
|
15/29 |
2307d |
173d9d9fd3dd
mm/huge_memory: splitting set mapping+index before unfreeze
|
|
possible deadlock in flush_workqueue (2)
|
4 |
C |
done |
done |
256 |
2342d |
2775d
|
15/29 |
2307d |
e7c58097793e
hugetlbfs: revert "Use i_mmap_rwsem to fix page fault/truncate race"
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit (2)
sound
usb
|
17 |
C |
|
|
1 |
2393d |
2392d
|
15/29 |
2315d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
KASAN: use-after-free Read in j1939_xtp_rx_abort_one
can
|
19 |
C |
done |
done |
11 |
2387d |
2395d
|
15/29 |
2320d |
ddeeb7d4822e
can: j1939: j1939_can_recv(): add priv refcounting
|
|
memory leak in fdb_create (2)
bridge
|
3 |
C |
|
|
1 |
2368d |
2367d
|
15/29 |
2331d |
c4b4c421857d
net: bridge: deny dev_set_mac_address() when unregistering
|
|
KASAN: vmalloc-out-of-bounds Write in kvm_dev_ioctl_get_cpuid
kvm-x86
|
21 |
C |
|
|
41 |
2365d |
2366d
|
15/29 |
2331d |
433f4ba19041
KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
|
|
kernel BUG at include/linux/mm.h:LINE! (5)
net
|
-1 |
C |
done |
done |
129 |
2570d |
2640d
|
15/29 |
2331d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
KASAN: use-after-free Read in __queue_work (2)
|
19 |
C |
done |
done |
577 |
2525d |
2879d
|
15/29 |
2331d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
KASAN: slab-out-of-bounds Read in bpf_prog_create
net
bpf
|
17 |
C |
done |
|
447 |
2361d |
2443d
|
15/29 |
2331d |
0033b34a03ec
ppp: fix out-of-bounds access in bpf_prog_create()
|
|
memory leak in register_netdevice
net
|
3 |
C |
|
|
19 |
2362d |
2367d
|
15/29 |
2331d |
42c17fa69f98
net: fix a leak in register_netdevice()
|
|
KASAN: slab-out-of-bounds Read in vcs_scr_readw
serial
|
17 |
C |
done |
done |
16 |
2366d |
2366d
|
15/29 |
2331d |
0c9acb1af77a
vcs: prevent write access to vcsu devices
|
|
kernel BUG at fs/pipe.c:LINE!
fs
|
-1 |
C |
done |
|
693 |
2361d |
2368d
|
15/29 |
2331d |
8c7b8c34ae95
pipe: Remove assertion from pipe_poll()
|
|
KMSAN: uninit-value in usbnet_probe
usb
|
7 |
C |
|
|
1 |
2547d |
2547d
|
15/29 |
2331d |
78226f6eaac8
net: usb: asix: init MAC address buffers
|
|
KMSAN: uninit-value in nf_conntrack_tcp_packet
netfilter
|
7 |
syz |
|
|
3 |
2365d |
2368d
|
15/29 |
2331d |
9424e2e7ad93
net-backports: tcp: md5: fix potential overestimation of TCP option space
|
|
KASAN: slab-out-of-bounds Read in linear_transfer (3)
sound
|
17 |
C |
done |
|
5 |
2364d |
2366d
|
15/29 |
2331d |
4cc8d6505ab8
ALSA: pcm: oss: Avoid potential buffer overflows
|
|
KASAN: slab-out-of-bounds Write in pipe_write
|
21 |
C |
done |
|
40 |
2363d |
2368d
|
15/29 |
2331d |
8f868d68d335
pipe: Fix missing mask update after pipe_wait()
|
|
WARNING in tty_set_termios
|
-1 |
C |
done |
done |
1997 |
2491d |
2691d
|
15/29 |
2331d |
b36a1552d731
Bluetooth: hci_uart: check for missing tty operations
|
|
general protection fault in override_creds
lsm
|
2 |
C |
done |
|
6 |
2364d |
2368d
|
15/29 |
2331d |
0b8c0ec7eedc
io_uring: use current task creds instead of allocating a new one
|
|
WARNING in drm_mode_createblob_ioctl
dri
|
-1 |
C |
done |
|
7 |
2393d |
2417d
|
15/29 |
2331d |
5bf8bec3f4ce
drm: limit to INT_MAX in create_blob ioctl
|
|
WARNING: refcount bug in skb_set_owner_w
net
|
13 |
C |
done |
|
2 |
2367d |
2368d
|
15/29 |
2331d |
501a90c94510
net-backports: inet: protect against too small mtu values.
|
|
KMSAN: use-after-free in netlink_recvmsg
net
|
18 |
C |
|
|
1 |
2387d |
2387d
|
15/29 |
2357d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KMSAN: use-after-free in kfree_skb
bluetooth
|
18 |
syz |
|
|
34 |
2374d |
2422d
|
15/29 |
2357d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
general protection fault in io_commit_cqring
fs
|
2 |
C |
done |
|
3 |
2386d |
2386d
|
15/29 |
2357d |
15dff286d0e0
io_uring: check for validity of ->rings in teardown
|
|
general protection fault in ext4_writepages
ext4
|
2 |
C |
done |
|
18 |
2380d |
2389d
|
15/29 |
2357d |
4d06bfb97ecb
ext4: Add error handling for io_end_vec struct allocation
|
|
KMSAN: use-after-free in __skb_try_recv_from_queue
net
|
18 |
C |
|
|
4 |
2386d |
2409d
|
15/29 |
2357d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
general protection fault in ip_sublist_rcv
net
|
2 |
C |
done |
|
287 |
2400d |
2410d
|
15/29 |
2357d |
51210ad5a558
inet: do not call sublist_rcv on empty list
|
|
kernel BUG at include/linux/scatterlist.h:LINE!
net
|
-1 |
C |
done |
|
307 |
2368d |
2561d
|
15/29 |
2357d |
d10523d0b3d7
net/tls: free the record on encryption error
|
|
KASAN: use-after-free Read in snd_timer_open
sound
|
19 |
C |
done |
|
87 |
2388d |
2388d
|
15/29 |
2357d |
0c4f09ceec3d
ALSA: timer: Fix the breakage of slave link open
|
|
INFO: task hung in io_wq_destroy
fs
|
1 |
C |
done |
|
20 |
2371d |
2402d
|
15/29 |
2357d |
b60fda6000a9
io-wq: wait for io_wq_create() to setup necessary workers
|
|
INFO: trying to register non-static key in io_cqring_ev_posted
fs
|
-1 |
C |
done |
|
6 |
2372d |
2384d
|
15/29 |
2357d |
eb065d301e8c
io_uring: io_allocate_scq_urings() should return a sane state
|
|
KASAN: global-out-of-bounds Write in kbd_event
usb
serial
input
|
21 |
C |
|
|
6 |
2371d |
2393d
|
15/29 |
2357d |
b2b2dd71e085
tty: vt: keyboard: reject invalid keycodes
|
|
KASAN: use-after-free Read in tipc_nl_node_dump_monitor_peer
tipc
|
19 |
C |
done |
|
3 |
2422d |
2422d
|
15/29 |
2357d |
ab5b526da048
net: genetlink: always allocate separate attrs for dumpit ops
|
|
general protection fault in tss_update_io_bitmap
kernel
|
2 |
C |
done |
|
65 |
2373d |
2379d
|
15/29 |
2357d |
e3cb0c7102f0
x86/ioperm: Fix use of deprecated config option
|
|
general protection fault in ip6_sublist_rcv
net
|
2 |
C |
done |
|
327 |
2400d |
2402d
|
15/29 |
2357d |
51210ad5a558
inet: do not call sublist_rcv on empty list
|
|
general protection fault in flexcop_usb_probe
usb
media
|
2 |
C |
|
|
403 |
2371d |
2601d
|
15/29 |
2357d |
1b976fc6d684
media: b2c2-flexcop-usb: add sanity checking
|
|
WARNING in iov_iter_pipe
fs
|
-1 |
C |
done |
|
1117 |
2375d |
2392d
|
15/29 |
2357d |
419e9c38aa07
iomap: Fix pipe page leakage during splicing
|
|
kernel BUG at kernel/time/timer.c:LINE! (4)
media
usb
|
-1 |
syz |
|
|
1 |
2427d |
2423d
|
15/29 |
2357d |
f3f5ba42c58d
media: imon: invalid dereference in imon_touch_event
|
|
general protection fault in devlink_get_from_attrs
net
|
2 |
C |
|
|
7 |
2424d |
2423d
|
15/29 |
2357d |
82a843de41d4
net: devlink: fix reporter dump dumpit
|
|
KASAN: use-after-free Read in appledisplay_bl_get_brightness
usb
|
19 |
C |
|
|
1 |
2440d |
2437d
|
15/29 |
2357d |
91feb01596e5
appledisplay: fix error handling in the scheduled work
|
|
INFO: trying to register non-static key in ida_destroy
usb
media
|
-1 |
C |
|
|
4272 |
2370d |
2493d
|
15/29 |
2357d |
8c279e9394ca
media: uvcvideo: Fix error path in control parsing failure
|
|
KMSAN: use-after-free in skb_dequeue
bluetooth
|
18 |
C |
|
|
1 |
2417d |
2417d
|
15/29 |
2357d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
KASAN: use-after-free Read in tipc_nl_publ_dump
tipc
|
19 |
C |
|
|
2 |
2424d |
2423d
|
15/29 |
2357d |
ab5b526da048
net: genetlink: always allocate separate attrs for dumpit ops
|
|
general protection fault in snd_usb_create_mixer
usb
sound
|
2 |
C |
|
|
1 |
2380d |
2378d
|
15/29 |
2357d |
9435f2bb6687
ALSA: usb-audio: Fix NULL dereference at parsing BADD
|
|
general protection fault in tipc_nl_publ_dump
tipc
|
2 |
C |
|
|
135 |
2421d |
2423d
|
15/29 |
2357d |
6ea67769ff33
net: tipc: prepare attrs in __tipc_nl_compat_dumpit()
|
|
KASAN: use-after-free Read in nf_ct_deliver_cached_events
netfilter
|
19 |
C |
done |
|
169 |
2403d |
2408d
|
15/29 |
2357d |
ad88b7a6aa3e
netfilter: ecache: don't look for ecache extension on dying/unconfirmed conntracks
|
|
general protection fault in veth_get_stats64
net
|
2 |
C |
done |
|
2 |
2428d |
2428d
|
15/29 |
2357d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
general protection fault in usb_set_interface
usb
|
2 |
C |
|
|
3 |
2442d |
2444d
|
15/29 |
2357d |
c7a191464078
media: usbvision: Fix invalid accesses after device disconnect
|
|
KASAN: use-after-free Read in slip_open
net
|
19 |
C |
done |
|
3 |
2375d |
2377d
|
15/29 |
2357d |
e58c19124189
slip: Fix use-after-free Read in slip_open
|
|
WARNING in __rtnl_newlink
net
|
-1 |
C |
done |
|
2 |
2427d |
2427d
|
15/29 |
2357d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
BUG: unable to handle kernel paging request in io_wq_cancel_all
fs
|
8 |
C |
done |
|
2 |
2401d |
2401d
|
15/29 |
2357d |
975c99a57096
io_uring: io_wq_create() returns an error pointer, not NULL
|
|
KASAN: invalid-free in io_sqe_files_unregister
fs
|
24 |
C |
done |
|
3 |
2389d |
2390d
|
15/29 |
2357d |
46568e9be70f
io_uring: fix error clear of ->file_table in io_sqe_files_register()
|
|
KASAN: invalid-free in skb_free_head
bluetooth
|
24 |
C |
done |
|
1 |
2399d |
2398d
|
15/29 |
2357d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
general protection fault in ovs_vport_add
openvswitch
|
2 |
C |
done |
|
5 |
2419d |
2427d
|
15/29 |
2357d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
KASAN: use-after-free Read in nl8NUM_dump_wpan_phy
wpan
|
19 |
C |
done |
|
6 |
2422d |
2423d
|
15/29 |
2357d |
ab5b526da048
net: genetlink: always allocate separate attrs for dumpit ops
|
|
KASAN: use-after-free Read in tipc_udp_nl_dump_remoteip
tipc
|
19 |
C |
done |
|
3 |
2422d |
2423d
|
15/29 |
2357d |
ab5b526da048
net: genetlink: always allocate separate attrs for dumpit ops
|
|
KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs
wpan
|
19 |
C |
done |
|
3 |
2424d |
2423d
|
15/29 |
2357d |
ab5b526da048
net: genetlink: always allocate separate attrs for dumpit ops
|
|
WARNING: ODEBUG bug in free_netdev
net
|
-1 |
C |
done |
|
2 |
2426d |
2426d
|
15/29 |
2357d |
11fc7d5a0a2d
tun: fix memory leak in error path
|
|
general protection fault in ip6_tnl_ioctl
net
|
2 |
C |
done |
|
7 |
2416d |
2427d
|
15/29 |
2357d |
9077f052abd5
net: propagate errors correctly in register_netdevice()
|
|
KMSAN: use-after-free in copyout
net
|
18 |
C |
|
|
1 |
2422d |
2422d
|
15/29 |
2357d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
general protection fault in virtio_transport_release
kvm
net
virt
|
2 |
C |
done |
|
7 |
2379d |
2380d
|
15/29 |
2357d |
039fcccaed33
vsock: avoid to assign transport if its initialization fails
|
|
BUG: workqueue lockup (4)
block
|
-1 |
C |
|
|
47 |
2382d |
2788d
|
15/29 |
2357d |
7e7c005b4b1f
rtc: disable uie before setting time and enable after
|
|
WARNING in port100_send_cmd_async/usb_submit_urb
usb
nfc
|
-1 |
C |
|
|
83 |
2372d |
2512d
|
15/29 |
2359d |
5f9f0b11f081
nfc: port100: handle command failure cleanly
|
|
general protection fault in kvm_coalesced_mmio_init
kvm
|
2 |
syz |
done |
|
48 |
2387d |
2396d
|
14/29 |
2370d |
8a44119a98be
KVM: Fix NULL-ptr deref after kvm_create_vm fails
|
|
general protection fault in j1939_netdev_notify
can
|
2 |
syz |
done |
|
11 |
2383d |
2395d
|
14/29 |
2370d |
c48c8c1e2e81
can: j1939: main: j1939_ndev_to_priv(): avoid crash if can_ml_priv is NULL
|
|
KASAN: use-after-free Read in j1939_sk_recv
can
|
19 |
C |
done |
|
2 |
2389d |
2389d
|
14/29 |
2370d |
ddeeb7d4822e
can: j1939: j1939_can_recv(): add priv refcounting
|
|
KASAN: use-after-free Read in j1939_session_deactivate
can
|
19 |
syz |
done |
|
1 |
2391d |
2391d
|
14/29 |
2370d |
ddeeb7d4822e
can: j1939: j1939_can_recv(): add priv refcounting
|
|
WARNING in smc_unhash_sk (3)
smc
|
-1 |
C |
done |
|
362 |
2374d |
2464d
|
14/29 |
2370d |
8204df72bea1
net/smc: fix fastopen for non-blocking connect()
|
|
KASAN: use-after-free Read in do_mount
fs
|
19 |
syz |
done |
|
6 |
2415d |
2423d
|
14/29 |
2370d |
0ecee6699064
fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
|
|
general protection fault in j1939_jsk_del
|
2 |
syz |
done |
|
132 |
2371d |
2395d
|
14/29 |
2370d |
fd81ebfe7975
can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
|
|
memory leak in smc_create
smc
|
3 |
C |
|
|
19 |
2383d |
2396d
|
14/29 |
2370d |
6d6dd528d5af
net/smc: fix refcount non-blocking connect() -part 2
|
|
KASAN: use-after-free Read in j1939_session_get_by_addr_locked
can
|
19 |
C |
done |
|
1 |
2389d |
2389d
|
14/29 |
2370d |
ddeeb7d4822e
can: j1939: j1939_can_recv(): add priv refcounting
|
|
INFO: task hung in synchronize_rcu
|
1 |
syz |
done |
|
1206 |
2370d |
2397d
|
14/29 |
2370d |
8a44119a98be
KVM: Fix NULL-ptr deref after kvm_create_vm fails
|
|
KMSAN: uninit-value in ax88172a_bind
usb
|
7 |
C |
|
|
5 |
2402d |
2416d
|
14/29 |
2370d |
a9a51bd727d1
ax88172a: fix information leak on short answers
|
|
KMSAN: uninit-value in gf128mul_4k_lle (3)
crypto
|
7 |
C |
|
|
2958 |
2376d |
2741d
|
14/29 |
2370d |
683916f6a840
net/tls: fix sk_msg trim on fallback to copy mode
|
|
KMSAN: uninit-value in aesti_encrypt
crypto
|
7 |
C |
|
|
54 |
2424d |
2525d
|
14/29 |
2370d |
683916f6a840
net/tls: fix sk_msg trim on fallback to copy mode
|
|
WARNING: suspicious RCU usage in kvm_dev_ioctl
|
4 |
C |
done |
|
333 |
2387d |
2397d
|
14/29 |
2370d |
e2d3fcaf939d
KVM: fix placement of refcount initialization
|
|
KMSAN: use-after-free in build_audio_procunit
sound
usb
|
18 |
C |
|
|
2 |
2408d |
2408d
|
14/29 |
2370d |
976a68f06b2e
ALSA: usb-audio: Fix incorrect size check for processing/extension units
|
|
WARNING: refcount bug in j1939_netdev_start
can
|
13 |
syz |
done |
|
6 |
2373d |
2394d
|
14/29 |
2370d |
fd81ebfe7975
can: j1939: socket: rework socket locking for j1939_sk_release() and j1939_sk_sendmsg()
|
|
KMSAN: uninit-value in get_min_max_with_quirks
sound
usb
|
7 |
C |
|
|
11 |
2403d |
2391d
|
14/29 |
2370d |
167beb175679
ALSA: usb-audio: Fix missing error check at mixer resolution test
|
|
WARNING: ODEBUG bug in input_ff_destroy
input
usb
|
-1 |
C |
|
|
6 |
2379d |
2386d
|
14/29 |
2370d |
fa3a5a1880c9
Input: ff-memless - kill timer in destroy()
|
|
general protection fault in memcg_flush_percpu_vmstats
mm
cgroups
|
2 |
C |
error |
|
19 |
2400d |
2463d
|
14/29 |
2370d |
7961eee39784
mm: memcontrol: fix NULL-ptr deref in percpu stats flush
|
|
INFO: task hung in mpage_prepare_extent_to_map
|
1 |
syz |
done |
|
18606 |
2394d |
2402d
|
14/29 |
2370d |
4655e5e5f387
mm,thp: recheck each page before collapsing file THP
|
|
KMSAN: uninit-value in cdc_ncm_set_dgram_size
usb
|
7 |
C |
|
|
4 |
2401d |
2400d
|
14/29 |
2370d |
332f989a3b00
CDC-NCM: handle incomplete transfer of MTU
|
|
KASAN: use-after-free Read in mcba_usb_disconnect
usb
can
|
19 |
C |
|
|
2 |
2397d |
2430d
|
14/29 |
2370d |
4d6636498c41
can: mcba_usb: fix use-after-free on disconnect
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_wait_rsp
usb
|
9 |
C |
|
|
2 |
2414d |
2414d
|
14/29 |
2370d |
f7a1337f0d29
can: peak_usb: fix slab info leak
|
|
KASAN: invalid-free in rsi_91x_deinit
usb
wireless
|
24 |
C |
|
|
109 |
2443d |
2590d
|
13/29 |
2371d |
8b51dc729147
rsi: fix a double free bug in rsi_91x_deinit()
|
|
WARNING in generic_make_request_checks
|
-1 |
C |
done |
|
7760 |
2372d |
2848d
|
13/29 |
2371d |
8b2ded1c94c0
block: don't warn when doing fsync on read-only devices
|
|
BUG: spinlock recursion in release_sock
net
|
4 |
C |
done |
|
116 |
2497d |
2498d
|
13/29 |
2372d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
KMSAN: use-after-free in adu_disconnect
usb
|
18 |
C |
|
|
16 |
2416d |
2422d
|
13/29 |
2373d |
44efc269db79
USB: adutux: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in mutex_spin_on_owner
usb
|
18 |
C |
|
|
1 |
2422d |
2422d
|
13/29 |
2373d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in iowarrior_disconnect
usb
|
18 |
C |
|
|
21 |
2416d |
2422d
|
13/29 |
2373d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KMSAN: use-after-free in usb_autopm_put_interface
usb
|
18 |
C |
|
|
63 |
2402d |
2416d
|
13/29 |
2373d |
7a7591979748
USB: usblp: fix use-after-free on disconnect
|
|
KMSAN: uninit-value in lg4ff_set_autocenter_default
input
usb
|
7 |
C |
|
|
1 |
2403d |
2403d
|
13/29 |
2373d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
WARNING in sk_stream_kill_queues (3)
net
|
-1 |
C |
done |
|
622 |
2544d |
2903d
|
13/29 |
2373d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
WARNING: refcount bug in smc_release
smc
|
13 |
C |
done |
|
8 |
2384d |
2407d
|
13/29 |
2377d |
301428ea3708
net/smc: fix refcounting for non-blocking connect()
|
|
INFO: trying to register non-static key in bond_3ad_update_lacp_rate
net
|
-1 |
C |
done |
|
26 |
2400d |
2402d
|
13/29 |
2377d |
ad9bd8daf2f9
bonding: fix using uninitialized mode_lock
|
|
KASAN: use-after-free Read in fuse_request_end
fuse
|
19 |
syz |
done |
|
6 |
2408d |
2412d
|
13/29 |
2377d |
2b319d1f6f92
fuse: don't dereference req->args on finished request
|
|
memory leak in internal_dev_create
openvswitch
|
3 |
C |
|
|
88 |
2399d |
2486d
|
13/29 |
2377d |
9464cc37f367
net: openvswitch: free vport unless register_netdevice() succeeds
|
|
divide error in dummy_timer
usb
|
2 |
C |
|
|
3 |
2401d |
2406d
|
13/29 |
2377d |
54f83b8c8ea9
USB: gadget: Reject endpoints with 0 maxpacket value
|
|
memory leak in copy_net_ns
|
3 |
C |
done |
|
422 |
2398d |
2436d
|
13/29 |
2377d |
82ecff655e79
keys: Fix memory leak in copy_net_ns
|
|
INFO: trying to register non-static key in bond_3ad_update_ad_actor_settings
net
|
-1 |
C |
done |
|
69 |
2400d |
2402d
|
13/29 |
2377d |
ad9bd8daf2f9
bonding: fix using uninitialized mode_lock
|
|
KASAN: use-after-free Read in bpf_prog_kallsyms_find (2)
bpf
|
19 |
C |
done |
|
9 |
2406d |
2417d
|
13/29 |
2377d |
cd7455f1013e
bpf: Fix use after free in subprog's jited symbol removal
|
|
KASAN: use-after-free Read in is_bpf_text_address
bpf
|
19 |
C |
done |
|
3 |
2407d |
2408d
|
13/29 |
2377d |
cd7455f1013e
bpf: Fix use after free in subprog's jited symbol removal
|
|
KASAN: use-after-free Read in io_uring_setup
fs
|
19 |
syz |
error |
|
1 |
2403d |
2403d
|
13/29 |
2377d |
044c1ab399af
io_uring: don't touch ctx in setup after ring fd install
|
|
BUG: unable to handle kernel paging request in is_bpf_text_address
bpf
|
8 |
C |
done |
|
2 |
2413d |
2413d
|
13/29 |
2377d |
cd7455f1013e
bpf: Fix use after free in subprog's jited symbol removal
|
|
INFO: task hung in ld_usb_write
usb
|
1 |
C |
|
|
831 |
2396d |
2408d
|
13/29 |
2377d |
52403cfbc635
USB: ldusb: fix control-message timeout
|
|
general protection fault in kernfs_add_one
|
2 |
C |
done |
|
98 |
2486d |
2809d
|
13/29 |
2377d |
ac43432cb1f5
driver core: Fix use-after-free and double free on glue directory
|
|
KASAN: use-after-free Read in ep_scan_ready_list
fs
|
19 |
C |
|
done |
39 |
2841d |
2876d
|
13/29 |
2379d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
KASAN: use-after-free Read in iowarrior_disconnect
usb
|
19 |
C |
|
|
3056 |
2417d |
2472d
|
13/29 |
2379d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
WARNING in kernfs_get
|
-1 |
C |
done |
|
316 |
2487d |
2816d
|
13/29 |
2379d |
ac43432cb1f5
driver core: Fix use-after-free and double free on glue directory
|
|
KASAN: use-after-free Read in __schedule (2)
kvm-x86
|
19 |
C |
|
done |
961 |
2636d |
2854d
|
13/29 |
2379d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
divide error in usbtmc_generic_read
usb
|
2 |
C |
|
|
2 |
2478d |
2477d
|
13/29 |
2379d |
de7b9aa633b6
usbtmc: more sanity checking for packet size
|
|
KASAN: use-after-free Read in p9_fd_poll
v9fs
|
19 |
C |
|
done |
8 |
2844d |
2876d
|
13/29 |
2379d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
KASAN: use-after-free Read in vhci_hub_control
usb
|
19 |
C |
|
done |
41 |
2777d |
2823d
|
13/29 |
2379d |
81f7567c51ad
usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
|
|
INFO: task hung in vivid_stop_generating_vid_cap
|
1 |
C |
done |
done |
81 |
2763d |
2767d
|
13/29 |
2388d |
d65842f7126a
media: vb2: add waiting_in_dqbuf flag
|
|
WARNING in event_function_local
perf
|
-1 |
C |
|
unreliable |
15451 |
2785d |
3041d
|
13/29 |
2388d |
214ff83d4473
KVM: x86: hyperv: implement PV IPI send hypercalls
|
|
BUG: MAX_LOCK_DEPTH too low! (2)
net
|
-1 |
C |
|
done |
5 |
2875d |
2905d
|
13/29 |
2388d |
bab2c80e5a6c
nsh: set mac len based on inner packet
|
|
inconsistent lock state in ila_xlat_nl_cmd_del_mapping
net
|
4 |
C |
|
unreliable |
2496 |
2837d |
2843d
|
13/29 |
2388d |
7494de0454af
mfd: da9063: Replace regmap_add_irq_chip with devm counterpart
|
|
INFO: task hung in fuse_reverse_inval_entry
fuse
|
1 |
C |
|
done |
23 |
2852d |
2865d
|
13/29 |
2388d |
c59fd85e4fd0
fuse: change interrupt requests allocation algorithm
|
|
BUG: corrupted list in p9_conn_cancel
v9fs
|
8 |
C |
|
done |
18 |
2778d |
2878d
|
13/29 |
2388d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
general protection fault in p9_conn_cancel
v9fs
|
2 |
C |
|
done |
2 |
2858d |
2876d
|
13/29 |
2388d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
WARNING: ODEBUG bug in p9_fd_close
v9fs
|
-1 |
C |
|
done |
82 |
2839d |
2879d
|
13/29 |
2388d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
general protection fault in vb2_mmap
media
|
2 |
C |
inconclusive |
done |
21 |
2709d |
2754d
|
13/29 |
2388d |
cd26d1c4d1bc
media: vb2: vb2_mmap: move lock up
|
|
KASAN: stack-out-of-bounds Read in xfrm_state_find (5)
net
|
17 |
C |
|
done |
654 |
2675d |
2977d
|
13/29 |
2388d |
32bf94fb5c2e
xfrm: validate template mode
|
|
KASAN: slab-out-of-bounds Write in end_requests
fuse
|
21 |
C |
|
done |
2 |
2853d |
2857d
|
13/29 |
2388d |
45ff350bbd9d
fuse: fix unlocked access to processing queue
|
|
KASAN: use-after-free Read in uprobe_perf_close
trace
|
19 |
C |
|
done |
54 |
2657d |
2976d
|
13/29 |
2388d |
621b6d2ea297
perf/core: Fix use-after-free in uprobe_perf_close()
|
|
KASAN: use-after-free Read in _decode_session4
net
|
19 |
C |
|
done |
3 |
2980d |
2979d
|
13/29 |
2388d |
c6741fbed6dc
vti6: Properly adjust vti6 MTU from MTU of lower device
|
|
general protection fault in tcp_cleanup_ulp
net
|
2 |
syz |
done |
done |
6 |
2804d |
2820d
|
13/29 |
2388d |
5607fff30363
bpf: sockmap only allow ESTABLISHED sock state
|
|
WARNING in request_end
fuse
|
-1 |
C |
done |
done |
14 |
2765d |
2801d
|
13/29 |
2388d |
4c316f2f3ff3
fuse: set FR_SENT while locked
|
|
WARNING in dma_buf_vunmap
dri
media
|
-1 |
C |
done |
done |
17 |
2714d |
2752d
|
13/29 |
2388d |
62dcb4f41836
media: vb2: check memory model for VIDIOC_CREATE_BUFS
|
|
BUG: corrupted list in p9_write_work
v9fs
|
8 |
C |
|
done |
5 |
2801d |
2847d
|
13/29 |
2388d |
728356dedeff
9p: Add refcount to p9_req_t
|
|
KASAN: use-after-free Read in tick_sched_handle (3)
kernel
|
19 |
C |
|
done |
12 |
2690d |
2745d
|
13/29 |
2390d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
general protection fault in qca_setup
arm-msm
bluetooth
|
2 |
C |
done |
done |
6 |
2661d |
2661d
|
13/29 |
2390d |
b36a1552d731
Bluetooth: hci_uart: check for missing tty operations
|
|
general protection fault in tcp_splice_read
net
|
2 |
C |
done |
done |
23 |
2605d |
2714d
|
13/29 |
2390d |
07603b230895
net/smc: propagate file from SMC to TCP socket
|
|
KASAN: use-after-free Read in crypto_gcm_init_common
crypto
|
19 |
C |
done |
done |
14 |
2693d |
2758d
|
13/29 |
2392d |
9354544cbccf
net/tls: fix page double free on TX cleanup
|
|
KASAN: slab-out-of-bounds Read in find_first_zero_bit
bfs
|
17 |
C |
|
done |
1 |
2978d |
2978d
|
13/29 |
2392d |
d18771558910
bfs: extra sanity checking and static inode bitmap
|
|
kernel BUG at net/ipv4/ip_output.c:LINE!
net
|
-1 |
C |
|
done |
28225 |
2684d |
2875d
|
13/29 |
2392d |
e7c87bd6cc4e
bpf: in __bpf_redirect_no_mac pull mac only if present
|
|
general protection fault in put_pid
kernel
|
2 |
syz |
done |
done |
3 |
2714d |
2723d
|
13/29 |
2392d |
a8e911d13540
x86_64: increase stack size for KASAN_EXTRA
|
|
suspicious RCU usage at ./include/net/inet_sock.h:LINE
net
|
-1 |
C |
|
done |
171 |
3034d |
3125d
|
13/29 |
2392d |
3f32d0be6c16
tipc: lock wakeup & inputq at tipc_link_reset()
|
|
KASAN: use-after-free Read in _decode_session6
net
|
19 |
C |
|
done |
4 |
2751d |
2819d
|
13/29 |
2392d |
e7c87bd6cc4e
bpf: in __bpf_redirect_no_mac pull mac only if present
|
|
general protection fault in propagate_entity_cfs_rq
kernel
|
2 |
C |
|
done |
1 |
2875d |
2875d
|
13/29 |
2392d |
bab2c80e5a6c
nsh: set mac len based on inner packet
|
|
KASAN: use-after-free Write in __vb2_cleanup_fileio
media
|
22 |
C |
done |
inconclusive |
2 |
2764d |
2766d
|
13/29 |
2392d |
d65842f7126a
media: vb2: add waiting_in_dqbuf flag
|
|
KASAN: slab-out-of-bounds Read in ld_usb_read (3)
usb
|
17 |
C |
|
|
74 |
2403d |
2414d
|
13/29 |
2393d |
7a6f22d7479b
USB: ldusb: fix read info leaks
|
|
KASAN: slab-out-of-bounds Read in build_audio_procunit
usb
sound
|
17 |
C |
|
|
6 |
2399d |
2408d
|
13/29 |
2393d |
ba8bf0967a15
ALSA: usb-audio: Fix copy&paste error in the validator
|
|
KASAN: slab-out-of-bounds Write in ga_probe
input
|
21 |
C |
|
|
5 |
2423d |
2444d
|
13/29 |
2393d |
d9d4b1e46d95
HID: Fix assumption that devices have inputs
|
|
INFO: task hung in nbd_ioctl
nbd
|
1 |
C |
done |
|
71 |
2395d |
2430d
|
13/29 |
2393d |
cf1b2326b734
nbd: verify socket is supported during setup
|
|
KASAN: use-after-free Read in usb_autopm_put_interface
usb
|
19 |
C |
|
|
2373 |
2402d |
2415d
|
13/29 |
2393d |
7a7591979748
USB: usblp: fix use-after-free on disconnect
|
|
memory leak in gfs2_init_fs_context
gfs2
|
3 |
C |
|
|
13 |
2406d |
2428d
|
13/29 |
2393d |
30aecae86e91
gfs2: Fix memory leak when gfs2meta's fs_context is freed
|
|
KMSAN: uninit-value in sr9800_bind
usb
|
7 |
C |
|
|
27 |
2405d |
2428d
|
13/29 |
2395d |
77b6d09f4ae6
net: usb: sr9800: fix uninitialized local variable
|
|
memory leak in llc_ui_create (2)
|
3 |
C |
done |
|
19 |
2412d |
2531d
|
13/29 |
2395d |
c6ee11c39fcc
llc: fix sk_buff leak in llc_sap_state_process()
|
|
BUG: unable to handle kernel NULL pointer dereference in xsk_poll
bpf
net
|
10 |
C |
done |
|
10 |
2413d |
2431d
|
13/29 |
2395d |
df551058f7a3
xsk: Fix crash in poll when device does not support ndo_xsk_wakeup
|
|
KASAN: use-after-free Read in rxrpc_release_call
afs
net
|
19 |
syz |
done |
|
13 |
2413d |
2468d
|
13/29 |
2395d |
91fcfbe8852e
rxrpc: Fix call crypto state cleanup
|
|
KASAN: use-after-free Read in rxrpc_send_keepalive
afs
net
|
19 |
C |
error |
|
694 |
2410d |
2482d
|
13/29 |
2395d |
c48fc11b69e9
rxrpc: Fix call ref leak
|
|
memory leak in sctp_get_port_local (3)
sctp
|
3 |
C |
|
|
4 |
2411d |
2417d
|
13/29 |
2395d |
63dfb7938b13
sctp: change sctp_prot .no_autobind with true
|
|
memory leak in llc_ui_sendmsg
net
|
3 |
C |
|
|
125 |
2411d |
2562d
|
13/29 |
2395d |
c6ee11c39fcc
llc: fix sk_buff leak in llc_sap_state_process()
|
|
INFO: task hung in addrconf_verify_work (2)
net
|
1 |
C |
|
|
22 |
2417d |
2417d
|
13/29 |
2395d |
39f13ea2f61b
net: avoid potential infinite loop in tc_ctl_action()
|
|
KASAN: use-after-free Read in pn533_send_complete
nfc
usb
|
19 |
C |
|
|
4 |
2403d |
2423d
|
13/29 |
2395d |
6af3aa57a098
NFC: pn533: fix use-after-free and memleaks
|
|
KASAN: use-after-free Read in rxrpc_put_peer
afs
net
|
19 |
C |
error |
|
38 |
2411d |
2463d
|
13/29 |
2395d |
55f6c98e3674
rxrpc: Fix trace-after-put looking at the put peer record
9ebeddef58c4
rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
|
|
memory leak in llc_conn_ac_send_sabme_cmd_p_set_x
net
|
3 |
C |
|
|
225 |
2411d |
2562d
|
13/29 |
2395d |
b74555de21ac
llc: fix sk_buff leak in llc_conn_service()
|
|
general protection fault in rxrpc_error_report
net
afs
|
2 |
C |
done |
|
6 |
2411d |
2423d
|
13/29 |
2395d |
f0308fb07080
rxrpc: Fix possible NULL pointer access in ICMP handling
|
|
WARNING: suspicious RCU usage in xfrm_alloc_userspi
net
|
4 |
C |
done |
error |
86 |
2624d |
2625d
|
13/29 |
2396d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
general protection fault in get_work_pool
net
|
2 |
C |
|
done |
24 |
2604d |
3007d
|
13/29 |
2396d |
07bf7908950a
xfrm: Validate address prefix lengths in the xfrm selector.
|
|
general protection fault in xfrm_init_replay
net
|
2 |
syz |
inconclusive |
done |
2 |
2994d |
2993d
|
13/29 |
2396d |
d97ca5d714a5
xfrm_user: uncoditionally validate esn replay attribute struct
|
|
WARNING: suspicious RCU usage in xfrm_get_spdinfo
net
|
4 |
C |
done |
error |
46 |
2624d |
2625d
|
13/29 |
2396d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
WARNING: suspicious RCU usage in xfrm_get_sadinfo
net
|
4 |
C |
done |
error |
28 |
2624d |
2625d
|
13/29 |
2396d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
WARNING: suspicious RCU usage in xfrm_get_policy
net
|
4 |
syz |
done |
error |
8 |
2625d |
2625d
|
13/29 |
2396d |
f10e0010fae8
net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm
|
|
memory leak in sctp_stream_init_ext
sctp
|
3 |
C |
|
|
34 |
2417d |
2552d
|
13/29 |
2402d |
3c52b0af059e
lib/generic-radix-tree.c: add kmemleak annotations
|
|
possible deadlock in usb_deregister_dev (2)
usb
|
4 |
C |
|
|
956 |
2416d |
2444d
|
13/29 |
2403d |
33a7813219f2
USB: legousbtower: fix deadlock on disconnect
|
|
KMSAN: uninit-value in mts_usb_probe
usb
|
7 |
C |
|
|
29 |
2422d |
2428d
|
13/29 |
2403d |
177238c3d47d
USB: microtek: fix info-leak at probe
|
|
KMSAN: uninit-value in iowarrior_disconnect
usb
|
7 |
C |
|
|
18 |
2421d |
2427d
|
13/29 |
2403d |
edc4746f253d
USB: iowarrior: fix use-after-free on disconnect
|
|
KASAN: use-after-free Read in adu_disconnect
usb
|
19 |
C |
|
|
5304 |
2416d |
2486d
|
13/29 |
2403d |
44efc269db79
USB: adutux: fix use-after-free on disconnect
|
|
INFO: rcu detected stall in dummy_timer
usb
|
1 |
C |
|
|
16 |
2418d |
2482d
|
13/29 |
2403d |
32a0721c6620
USB: yurex: Don't retry on unexpected errors
|
|
KASAN: invalid-free in disconnect_rio (2)
usb
|
24 |
C |
|
|
51 |
2420d |
2441d
|
13/29 |
2403d |
015664d15270
USB: rio500: Remove Rio 500 kernel driver
|
|
INFO: trying to register non-static key in finish_writeback_work
fs
|
-1 |
syz |
error |
|
1 |
2439d |
2436d
|
13/29 |
2403d |
8e00c4e9dd85
writeback: fix use-after-free in finish_writeback_work()
|
|
general protection fault in bpf_tcp_close (2)
bpf
|
2 |
C |
|
done |
26 |
2832d |
2876d
|
13/29 |
2409d |
e06fa9c16ce4
bpf, sockmap: fix potential use after free in bpf_tcp_close
|
|
BUG: unable to handle kernel NULL pointer dereference in rds_bind
rds
|
10 |
C |
done |
|
51 |
2433d |
2444d
|
13/29 |
2415d |
05733434ee9a
net/rds: Check laddr_check before calling it
|
|
WARNING: lock held when returning to user space in rcu_lock_acquire
kernel
|
4 |
C |
done |
|
3 |
2428d |
2428d
|
13/29 |
2415d |
73956fc07dd7
membarrier: Fix RCU locking bug caused by faulty merge
|
|
memory leak in v9fs_cache_session_get_cookie
v9fs
|
3 |
C |
|
|
242 |
2415d |
2562d
|
13/29 |
2415d |
962a991c5de1
9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
|
|
WARNING in em28xx_usb_disconnect
usb
media
|
-1 |
C |
|
|
8 |
2450d |
2482d
|
13/29 |
2415d |
46e4a26615cc
media: em28xx: modules workqueue not inited for 2nd device
|
|
KASAN: use-after-free Read in si470x_int_in_callback
usb
media
|
19 |
C |
|
|
25 |
2424d |
2513d
|
13/29 |
2415d |
0d616f2a3fdb
media: radio/si470x: kill urb on error
|
|
kernel BUG at include/linux/skbuff.h:LINE! (2)
sctp
|
-1 |
C |
done |
|
58 |
2465d |
2475d
|
13/29 |
2415d |
c7a42eb49212
net: ipv6: fix listify ip6_rcv_finish in case of forwarding
|
|
general protection fault in make_kuid
kernel
|
2 |
C |
done |
|
4 |
2475d |
2500d
|
13/29 |
2415d |
1dd9bc08cf14
vfs: set fs_context::user_ns for reconfigure
|
|
general protection fault in ath6kl_usb_alloc_urb_from_pipe
usb
wireless
|
2 |
C |
|
|
1160 |
2441d |
2601d
|
13/29 |
2415d |
39d170b3cb62
ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
|
|
KMSAN: uninit-value in read_sensor_register
media
usb
|
7 |
C |
|
|
25 |
2415d |
2545d
|
13/29 |
2415d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
WARNING in rcu_note_context_switch
kernel
|
-1 |
C |
done |
|
1 |
2430d |
2430d
|
13/29 |
2415d |
73956fc07dd7
membarrier: Fix RCU locking bug caused by faulty merge
|
|
KMSAN: kernel-usb-infoleak in ttusb_dec_send_command
usb
|
9 |
C |
|
|
2 |
2483d |
2493d
|
13/29 |
2415d |
a10feaf8c464
media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
|
|
KASAN: use-after-free Read in atusb_disconnect
usb
wpan
|
19 |
C |
|
|
112 |
2416d |
2457d
|
13/29 |
2415d |
7fd25e6fc035
ieee802154: atusb: fix use-after-free at disconnect
|
|
KMSAN: uninit-value in inet_ehash_insert
net
|
7 |
C |
|
|
7 |
2424d |
2431d
|
13/29 |
2415d |
6af1799aaf3f
net-backports: ipv6: drop incoming packets having a v4mapped source address
|
|
KASAN: slab-out-of-bounds Read in hdpvr_probe
usb
media
|
17 |
C |
|
|
10 |
2452d |
2527d
|
13/29 |
2415d |
8b8900b729e4
media: hdpvr: add terminating 0 at end of string
|
|
BUG: assuming atomic context at net/kcm/kcmsock.c:LINE
|
-1 |
C |
done |
|
178 |
2431d |
2437d
|
13/29 |
2415d |
0355d6c1d591
net-backports: kcm: disable preemption in kcm_parse_func_strparser()
|
|
WARNING: suspicious RCU usage in netem_enqueue
|
4 |
C |
done |
|
16 |
2433d |
2447d
|
13/29 |
2415d |
159d2c7d8106
net-backports: sch_netem: fix rcu splat in netem_enqueue()
|
|
general protection fault in xsk_poll
net
bpf
|
2 |
C |
done |
|
430 |
2445d |
2472d
|
13/29 |
2415d |
42fddcc7c64b
xsk: use state member for socket synchronization
|
|
INFO: task syz-executor can't die for more than 143 seconds.
fs
|
-1 |
C |
done |
|
61 |
2432d |
2540d
|
13/29 |
2415d |
8619e5bdeee8
/dev/mem: Bail out upon SIGKILL.
7c3a6aedcd6a
kexec: bail out upon SIGKILL when allocating memory.
8f9e86ee7959
staging: android: ion: Bail out upon SIGKILL when allocating memory.
|
|
BUG: sleeping function called from invalid context in tcf_chain0_head_change_cb_del
net
|
5 |
C |
done |
|
187 |
2431d |
2444d
|
13/29 |
2415d |
e3ae1f96accd
net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
|
|
KASAN: global-out-of-bounds Read in load_next_firmware_from_table
usb
libertas
|
17 |
C |
|
|
5 |
2464d |
2513d
|
13/29 |
2415d |
764f3f1ecffc
libertas: Add missing sentinel at end of if_usb.c fw_table
|
|
WARNING in handle_desc
kvm-x86
|
-1 |
C |
done |
|
6 |
2441d |
2449d
|
13/29 |
2415d |
3ca94192278c
KVM: X86: Fix userspace set invalid CR4
|
|
general protection fault in kstrtouint (2)
fuse
|
2 |
C |
done |
|
40 |
2462d |
2504d
|
13/29 |
2415d |
74983ac20aea
vfs: Make fs_parse() handle fs_param_is_fd-type params better
|
|
divide error in usbnet_update_max_qlen
usb
|
2 |
C |
|
|
17 |
2432d |
2444d
|
13/29 |
2415d |
280ceaed79f1
usbnet: sanity checking of packet sizes and device mtu
|
|
KASAN: slab-out-of-bounds Read in technisat_usb2_rc_query
usb
media
|
17 |
C |
|
|
2236 |
2461d |
2599d
|
13/29 |
2415d |
0c4df39e504b
media: technisat-usb2: break out of loop at end of buffer
|
|
general protection fault in __apic_accept_irq
|
2 |
C |
done |
|
69 |
2443d |
2456d
|
13/29 |
2415d |
a073d7e3ad68
KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel
|
|
INFO: rcu detected stall in pie_timer
net
|
1 |
C |
|
|
19 |
2416d |
2451d
|
13/29 |
2415d |
4ce70b4aed57
net-backports: net: sched: sch_htb: don't call qdisc_put() while holding tree lock
|
|
KASAN: global-out-of-bounds Read in dvb_pll_attach
media
usb
|
17 |
C |
|
|
2 |
2453d |
2512d
|
13/29 |
2415d |
c268e7adea52
media: dvb-frontends: use ida for pll number
|
|
general protection fault in pk_probe
input
usb
|
2 |
C |
|
|
2 |
2461d |
2457d
|
13/29 |
2415d |
98375b86c791
HID: prodikeys: Fix general protection fault during probe
|
|
possible deadlock in free_ioctx_users
fuse
|
4 |
C |
|
|
509 |
2435d |
2816d
|
13/29 |
2415d |
76e43c8ccaa3
fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
|
|
KASAN: use-after-free Read in cbq_enqueue
net
|
19 |
C |
done |
|
4 |
2423d |
2425d
|
13/29 |
2415d |
e9789c7cc182
sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
|
|
general protection fault in dsmark_init
net
|
2 |
C |
done |
|
3 |
2424d |
2426d
|
13/29 |
2415d |
474f0813a300
sch_dsmark: fix potential NULL deref in dsmark_init()
|
|
KASAN: global-out-of-bounds Read in hdpvr_probe
usb
media
|
17 |
C |
|
|
15 |
2468d |
2581d
|
13/29 |
2415d |
d4a6a9537bc3
media: hdpvr: Add device num check and handling
|
|
WARNING: lock held when returning to user space in membarrier_private_expedited
kernel
|
4 |
C |
done |
|
7 |
2428d |
2430d
|
13/29 |
2415d |
73956fc07dd7
membarrier: Fix RCU locking bug caused by faulty merge
|
|
WARNING: ODEBUG bug in usbhid_disconnect (2)
input
usb
|
-1 |
C |
|
|
48 |
2435d |
2457d
|
13/29 |
2415d |
2bcdacb70327
HID: sony: Fix memory corruption issue on cleanup.
|
|
KASAN: slab-out-of-bounds Read in usb_reset_and_verify_device
usb
|
17 |
syz |
|
|
1 |
2466d |
2457d
|
13/29 |
2415d |
3dd550a2d365
USB: usbcore: Fix slab-out-of-bounds bug during device reset
|
|
KMSAN: uninit-value in i2c_w
media
usb
|
7 |
C |
|
|
2 |
2549d |
2548d
|
13/29 |
2415d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
BUG: MAX_STACK_TRACE_ENTRIES too low! (2)
|
-1 |
C |
done |
|
5045 |
2447d |
2616d
|
13/29 |
2415d |
12593b7467f9
locking/lockdep: Reduce space occupied by stack traces
|
|
possible deadlock in open_rio (3)
usb
|
4 |
C |
|
|
169 |
2441d |
2443d
|
13/29 |
2415d |
9472aff16ca0
USB: rio500: Fix lockdep violation
|
|
WARNING in kfree
fs
|
-1 |
C |
done |
|
2 |
2462d |
2461d
|
13/29 |
2415d |
43ce4c1feadb
vfs: Add a single-or-reconfig keying to vfs_get_super()
|
|
KMSAN: uninit-value in __request_module
kernel
|
7 |
C |
|
|
13 |
2425d |
2445d
|
13/29 |
2415d |
62794fc4fbf5
net_sched: add max len check for TCA_KIND
|
|
WARNING in zd_mac_clear
usb
wireless
|
-1 |
C |
|
|
13194 |
2441d |
2601d
|
13/29 |
2415d |
7a2eb7367fde
zd1211rw: remove false assertion from zd_mac_clear()
|
|
general protection fault in xsk_map_update_elem
bpf
|
2 |
C |
done |
|
12 |
2435d |
2437d
|
13/29 |
2415d |
fcd30ae0665c
bpf/xskmap: Return ERR_PTR for failure case instead of NULL.
|
|
possible deadlock in pie_timer
net
|
4 |
C |
done |
|
2 |
2432d |
2433d
|
13/29 |
2415d |
e3ae1f96accd
net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
|
|
KMSAN: uninit-value in sd_init
media
usb
|
7 |
C |
|
|
122 |
2415d |
2548d
|
13/29 |
2415d |
4843a543fad3
media: gspca: zero usb_buf on error
|
|
WARNING in iguanair_probe/usb_submit_urb
usb
media
|
-1 |
C |
|
|
3 |
2446d |
2496d
|
13/29 |
2415d |
ab1cbdf159be
media: iguanair: add sanity checks
|
|
memory leak in llcp_sock_bind
kernel
|
3 |
C |
done |
|
2 |
2437d |
2501d
|
13/29 |
2415d |
a0c2dc1fe63e
nfc: fix memory leak in llcp_sock_bind()
|
|
general protection fault in __pm_runtime_resume
input
usb
pm
|
2 |
C |
|
|
197 |
2435d |
2498d
|
13/29 |
2415d |
5f9242775bb6
HID: logitech: Fix general protection fault caused by Logitech driver
|
|
BUG: unable to handle kernel paging request in coalesced_mmio_write
kvm
|
8 |
C |
done |
|
10 |
2522d |
2527d
|
13/29 |
2415d |
b60fe990c6b0
KVM: coalesced_mmio: add bounds checking
|
|
divide error in cdc_ncm_update_rxtx_max
usb
|
2 |
C |
|
|
5 |
2431d |
2444d
|
13/29 |
2415d |
3fe4b3351301
cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
|
|
general protection fault in trace_probe_unlink
trace
|
2 |
C |
done |
|
7 |
2440d |
2444d
|
13/29 |
2415d |
d59fae6fea39
tracing/kprobe: Fix NULL pointer access in trace_porbe_unlink()
|
|
memory leak in ppp_write
ppp
|
3 |
C |
|
|
5 |
2442d |
2486d
|
13/29 |
2415d |
4c247de564f1
ppp: Fix memory leak in ppp_write
|
|
general protection fault in qdisc_put
|
2 |
C |
done |
|
60 |
2443d |
2453d
|
13/29 |
2415d |
6efb971ba8ed
net_sched: let qdisc_put() accept NULL pointer
|
|
general protection fault in dev_map_hash_update_elem
net
bpf
|
2 |
C |
done |
|
4 |
2449d |
2455d
|
13/29 |
2415d |
af58e7ee6a8d
xdp: Fix race in dev_map_hash_update_elem() when replacing element
|
|
KASAN: slab-out-of-bounds Read in hidraw_ioctl
input
|
17 |
C |
|
|
104 |
2442d |
2492d
|
13/29 |
2415d |
416dacb819f5
HID: hidraw: Fix invalid read in hidraw_ioctl
|
|
INFO: rcu detected stall in sys_exit_group
kernel
|
1 |
C |
done |
|
1 |
2447d |
2442d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
general protection fault in rds_recv_rcvbuf_delta
rds
|
2 |
C |
done |
|
35 |
2525d |
2753d
|
13/29 |
2422d |
c5c1a030a7db
net/rds: An rds_sock is added too early to the hash table
|
|
INFO: rcu detected stall in sys_sendmsg
net
|
1 |
C |
done |
|
2 |
2447d |
2447d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in addrconf_dad_work
|
1 |
C |
done |
|
126 |
2445d |
2450d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
general protection fault in addrconf_f6i_alloc
net
|
2 |
C |
|
|
305 |
2445d |
2455d
|
13/29 |
2422d |
8652f17c658d
ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
|
|
WARNING in __mark_chain_precision (2)
bpf
|
-1 |
C |
done |
|
18 |
2444d |
2462d
|
13/29 |
2422d |
2339cd6cd0b5
bpf: fix precision tracking of stack slots
|
|
INFO: rcu detected stall in br_handle_frame
|
1 |
C |
done |
|
341 |
2445d |
2450d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
general protection fault in tls_sk_proto_close (2)
net
|
2 |
syz |
error |
|
246 |
2445d |
2464d
|
13/29 |
2422d |
44580a0118d3
net: sock_map, fix missing ulp check in sock hash case
|
|
INFO: rcu detected stall in mld_ifc_timer_expire
|
1 |
C |
done |
|
152 |
2445d |
2453d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
BUG: soft lockup in addrconf_dad_work
net
|
1 |
C |
done |
|
1 |
2449d |
2449d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in igmp_ifc_timer_expire
net
|
1 |
C |
|
|
57 |
2445d |
2704d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
memory leak in sctp_get_port_local (2)
sctp
|
3 |
C |
|
|
34 |
2425d |
2483d
|
13/29 |
2422d |
29b99f54a8e6
sctp: destroy bucket if failed to bind addr
|
|
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass
net
|
10 |
C |
done |
|
61 |
2445d |
2453d
|
13/29 |
2422d |
8b142a00edcf
net_sched: check cops->tcf_block in tc_bind_tclass()
|
|
INFO: rcu detected stall in netlink_sendmsg (2)
|
1 |
C |
done |
|
11 |
2446d |
2452d
|
13/29 |
2422d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
KMSAN: uninit-value in capi_write
net
|
7 |
C |
|
|
445 |
2422d |
2661d
|
13/29 |
2422d |
fe163e534e5e
isdn/capi: check message length in capi_write()
|
|
memory leak in sctp_send_reset_streams
sctp
|
3 |
C |
|
|
7 |
2476d |
2552d
|
13/29 |
2426d |
6d5afe20397b
sctp: fix memleak in sctp_send_reset_streams
|
|
general protection fault in requeue_rx_msgs
net
|
2 |
syz |
done |
inconclusive |
1 |
2918d |
2918d
|
13/29 |
2426d |
eb7f54b90bd8
kcm: Fix use-after-free caused by clonned sockets
|
|
WARNING: suspicious RCU usage (4)
bpf
trace
|
-1 |
C |
|
done |
1 |
2824d |
2823d
|
13/29 |
2426d |
865e63b04e9b
tracing: Add back in rcu_irq_enter/exit_irqson() for rcuidle tracepoints
|
|
WARNING: suspicious RCU usage in trace_call_bpf
bpf
trace
|
4 |
C |
|
done |
327 |
2805d |
2823d
|
13/29 |
2426d |
865e63b04e9b
tracing: Add back in rcu_irq_enter/exit_irqson() for rcuidle tracepoints
|
|
KASAN: use-after-free Read in psock_map_pop
bpf
|
19 |
C |
|
done |
204 |
2772d |
2816d
|
13/29 |
2426d |
5607fff30363
bpf: sockmap only allow ESTABLISHED sock state
|
|
WARNING: refcount bug in nr_insert_socket
|
13 |
C |
done |
|
55 |
2489d |
2513d
|
13/29 |
2426d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: slab-out-of-bounds Read in sock_hash_ctx_update_elem
bpf
|
17 |
C |
|
done |
5 |
2857d |
2857d
|
13/29 |
2426d |
b845c898b2f1
bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
|
|
general protection fault in smap_list_hash_remove
bpf
|
2 |
C |
|
done |
52 |
2865d |
2883d
|
13/29 |
2426d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
WARNING in cbs_dequeue_soft
net
|
-1 |
C |
done |
|
13 |
2446d |
2453d
|
12/29 |
2445d |
1c6c09a0ae62
net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
|
|
KMSAN: uninit-value in batadv_iv_send_outstanding_bat_ogm_packet
batman
|
7 |
C |
|
|
9 |
2470d |
2470d
|
12/29 |
2445d |
a15d56a60760
batman-adv: Only read OGM tvlv_len after buffer len check
|
|
possible deadlock in usb_deregister_dev
usb
|
4 |
C |
|
|
82 |
2479d |
2486d
|
12/29 |
2454d |
c468a8aa790e
usb: iowarrior: fix deadlock on disconnect
|
|
general protection fault in packet_lookup_frame
net
|
2 |
C |
done |
|
7 |
2478d |
2478d
|
12/29 |
2454d |
32d3182cd2cd
net/packet: fix race in tpacket_snd()
|
|
WARNING in bpf_jit_free
bpf
|
-1 |
C |
done |
|
21697 |
2454d |
2871d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
memory leak in ip6_mc_add_src
net
|
3 |
C |
|
|
1 |
2465d |
2465d
|
12/29 |
2454d |
a84d01647989
mld: fix memory leak in mld_del_delrec()
|
|
WARNING in bpf_prog_kallsyms_add
bpf
|
-1 |
syz |
done |
done |
2 |
2497d |
2699d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
WARNING in __iforce_usb_xmit/usb_submit_urb
input
usb
|
-1 |
C |
|
|
3 |
2482d |
2486d
|
12/29 |
2454d |
849f5ae3a513
Input: iforce - add sanity checks
|
|
WARNING in kbtab_open/usb_submit_urb
usb
|
-1 |
C |
|
|
5 |
2481d |
2499d
|
12/29 |
2454d |
c88090dfc842
Input: kbtab - sanity check for endpoint type
|
|
BUG: unable to handle kernel paging request in bpf_prog_kallsyms_find
bpf
|
8 |
syz |
done |
inconclusive |
3 |
2671d |
2746d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
KASAN: use-after-free Read in rxrpc_queue_local
afs
net
|
19 |
C |
done |
|
1 |
2480d |
2479d
|
12/29 |
2454d |
06d9532fa6b3
rxrpc: Fix read-after-free in rxrpc_queue_local()
|
|
BUG: unable to handle kernel paging request in bpf_prog_kallsyms_add
bpf
|
8 |
syz |
error |
|
234 |
2455d |
2816d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
general protection fault in tls_write_space
net
|
2 |
syz |
|
|
33 |
2472d |
2482d
|
12/29 |
2454d |
57c722e932cf
net/tls: swap sk_write_space on close
|
|
WARNING in usbtouch_open
input
usb
|
-1 |
C |
|
|
768 |
2479d |
2493d
|
12/29 |
2454d |
b55d996f057b
Input: usbtouchscreen - initialize PM mutex before using it
|
|
KMSAN: uninit-value in rtm_new_nexthop
net
|
7 |
C |
|
|
8 |
2470d |
2470d
|
12/29 |
2454d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
KASAN: slab-out-of-bounds Read in bpf_int_jit_compile
kernel
|
17 |
C |
done |
|
1 |
2502d |
2499d
|
12/29 |
2454d |
7c2e988f400e
bpf: fix x64 JIT code generation for jmp to 1st insn
|
|
KASAN: use-after-free Read in bpf_prog_kallsyms_del
bpf
|
19 |
syz |
done |
inconclusive |
3 |
2702d |
2781d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
kernel BUG at net/rxrpc/local_object.c:LINE!
net
afs
|
-1 |
C |
done |
|
11167 |
2458d |
2525d
|
12/29 |
2454d |
730c5fd42c1e
rxrpc: Fix local endpoint refcounting
|
|
KASAN: null-ptr-deref Write in rxrpc_unuse_local
|
12 |
C |
done |
|
4422 |
2478d |
2483d
|
12/29 |
2454d |
68553f1a6f74
rxrpc: Fix local refcounting
|
|
KMSAN: uninit-value in batadv_netlink_dump_hardif
batman
|
7 |
C |
|
|
58 |
2465d |
2500d
|
12/29 |
2454d |
3ee1bb7aae97
batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
|
|
WARNING in bpf_prog_kallsyms_find
bpf
|
-1 |
C |
error |
|
5632 |
2454d |
2576d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
KASAN: slab-out-of-bounds Read in do_jit
kernel
|
17 |
C |
done |
|
16 |
2454d |
2499d
|
12/29 |
2454d |
7c2e988f400e
bpf: fix x64 JIT code generation for jmp to 1st insn
|
|
KASAN: use-after-free Read in ld_usb_release
usb
|
19 |
C |
|
|
14 |
2473d |
2482d
|
12/29 |
2454d |
303911cfc5b9
USB: core: Fix races in character device registration and deregistraion
|
|
KMSAN: uninit-value in rtm_dump_nexthop
net
|
7 |
C |
|
|
6 |
2464d |
2481d
|
12/29 |
2454d |
d00ee64e1dcf
netlink: Fix nlmsg_parse as a wrapper for strict message parsing
|
|
WARNING in is_bpf_text_address
bpf
|
-1 |
C |
done |
|
104 |
2464d |
2531d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
net
usb
|
17 |
C |
|
|
2 |
2478d |
2479d
|
12/29 |
2454d |
54364278fb3c
USB: CDC: fix sanity checks in CDC union parser
|
|
WARNING in __blkdev_put (2)
fs
|
-1 |
syz |
|
|
3082 |
2479d |
2486d
|
12/29 |
2454d |
e91455bad5cf
bdev: Fixup error handling in blkdev_get()
|
|
KASAN: use-after-free Read in device_release_driver_internal
usb
|
19 |
C |
|
|
5 |
2476d |
2499d
|
12/29 |
2454d |
c52873e5a1ef
usb: cdc-acm: make sure a refcount is taken early enough
|
|
KASAN: use-after-free Read in bpf_prog_kallsyms_add
bpf
|
19 |
syz |
error |
inconclusive |
120 |
2581d |
2816d
|
12/29 |
2454d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
WARNING in wdm_write/usb_submit_urb
usb
|
-1 |
C |
|
|
15 |
2458d |
2472d
|
12/29 |
2454d |
1426bd2c9f7e
USB: cdc-wdm: fix race between write and disconnect due to flag abuse
|
|
BUG: corrupted list in rxrpc_local_processor
net
afs
|
8 |
C |
done |
|
1679 |
2475d |
2482d
|
12/29 |
2454d |
b00df840fb40
rxrpc: Fix local endpoint replacement
|
|
BUG: unable to handle kernel paging request in hrtimer_interrupt
kernel
|
8 |
syz |
done |
|
2 |
2497d |
2533d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING in smc_unhash_sk (2)
|
-1 |
C |
done |
|
1047 |
2464d |
2600d
|
12/29 |
2464d |
cd2063604ea6
net/smc: avoid fallback in case of non-blocking connect
|
|
general protection fault in rcu_core
kernel
|
2 |
syz |
done |
|
1 |
2513d |
2513d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
general protection fault in mm_update_next_owner
kernel
|
2 |
syz |
done |
done |
1 |
2544d |
2544d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_pro_send_req
usb
|
9 |
C |
|
|
16 |
2467d |
2493d
|
12/29 |
2464d |
30a8beeb3042
can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
|
|
KASAN: use-after-free Write in validate_chain
kernel
|
22 |
syz |
done |
|
3 |
2521d |
2531d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING: held lock freed! (2)
hams
|
-1 |
C |
done |
|
1 |
2518d |
2514d
|
12/29 |
2464d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
general protection fault in tls_trim_both_msgs
net
|
2 |
C |
done |
|
36 |
2486d |
2498d
|
12/29 |
2464d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
KASAN: use-after-free Read in psi_task_change
kernel
|
19 |
syz |
done |
|
1 |
2498d |
2497d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: slab-out-of-bounds Read in class_equal
|
17 |
syz |
done |
|
45 |
2485d |
2558d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: slab-out-of-bounds Write in check_noncircular
kernel
|
21 |
syz |
done |
|
1 |
2504d |
2504d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING in mark_lock
kernel
|
-1 |
syz |
done |
|
2 |
2473d |
2528d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
general protection fault in holtek_kbd_input_event
input
|
2 |
C |
|
|
67 |
2485d |
2497d
|
12/29 |
2464d |
01ec0a5f19c8
HID: holtek: test for sanity of intfdata
|
|
KASAN: use-after-free Read in release_sock
hams
|
19 |
C |
done |
|
10 |
2487d |
2497d
|
12/29 |
2464d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: slab-out-of-bounds Write in validate_chain
hardening
mm
|
21 |
syz |
done |
|
6 |
2516d |
2531d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
general protection fault in tcf_ife_init
|
2 |
C |
done |
|
72 |
2486d |
2500d
|
12/29 |
2464d |
c8ec4632c6ac
ife: error out when nla attributes are empty
|
|
BUG: unable to handle kernel paging request in __do_softirq
bpf
|
8 |
syz |
done |
done |
1 |
2534d |
2533d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
kernel panic: stack is corrupted in validate_chain
kernel
|
2 |
syz |
done |
|
1 |
2527d |
2527d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: slab-out-of-bounds Read in corrupted (2)
hardening
mm
|
17 |
syz |
done |
|
3 |
2497d |
2546d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
BUG: unable to handle kernel paging request in tls_prots
net
bpf
|
8 |
syz |
done |
|
1 |
2527d |
2527d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
kernel panic: corrupted stack end in dput
fs
|
2 |
syz |
done |
|
1 |
2522d |
2522d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
general protection fault in tls_sk_proto_close
|
2 |
syz |
done |
|
260 |
2464d |
2497d
|
12/29 |
2464d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
WARNING in debug_check_no_obj_freed
|
-1 |
C |
done |
|
47 |
2465d |
2532d
|
12/29 |
2464d |
f9cedf1a9b1c
net/smc: do not schedule tx_work in SMC_CLOSED state
|
|
BUG: unable to handle kernel paging request in cpuacct_account_field
kernel
|
8 |
syz |
done |
done |
1 |
2532d |
2531d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
memory leak in fdb_create
bridge
|
3 |
C |
done |
|
4 |
2489d |
2529d
|
12/29 |
2464d |
d7bae09fa008
net: bridge: delete local fdb on device init failure
|
|
BUG: unable to handle kernel NULL pointer dereference in corrupted (4)
|
10 |
syz |
done |
done |
1 |
2528d |
2527d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING: held lock freed in nr_release
kernel
|
4 |
C |
done |
|
344 |
2485d |
2506d
|
12/29 |
2464d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: use-after-free Read in corrupted (3)
mm
|
19 |
syz |
done |
|
1 |
2527d |
2526d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING: ODEBUG bug in __sk_destruct
smc
|
-1 |
C |
|
|
2855 |
2484d |
2949d
|
12/29 |
2464d |
f9cedf1a9b1c
net/smc: do not schedule tx_work in SMC_CLOSED state
|
|
WARNING in cgroup_rstat_updated
cgroups
mm
|
-1 |
syz |
done |
|
1 |
2485d |
2485d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
general protection fault in rb_erase (2)
kernel
|
2 |
syz |
done |
|
4 |
2493d |
2701d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: slab-out-of-bounds Read in usage_accumulate
kernel
|
17 |
syz |
done |
|
3 |
2527d |
2546d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
KASAN: use-after-free Read in nr_release
hams
|
19 |
C |
done |
|
25 |
2466d |
2545d
|
12/29 |
2464d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
WARNING: refcount bug in nr_rx_frame
kernel
|
13 |
C |
done |
|
15 |
2488d |
2505d
|
12/29 |
2464d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
KASAN: use-after-free Read in hiddev_release
input
usb
|
19 |
C |
|
|
11 |
2475d |
2490d
|
12/29 |
2464d |
9c09b214f30e
HID: hiddev: avoid opening a disconnected device
6d4472d7bec3
HID: hiddev: do cleanup in failure of opening a device
|
|
KASAN: use-after-free Read in nr_insert_socket
hams
|
19 |
C |
done |
|
22 |
2488d |
2504d
|
12/29 |
2464d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
BUG: unable to handle kernel paging request in bpf_prog_ADDR
kernel
|
8 |
C |
done |
|
13 |
2487d |
2503d
|
12/29 |
2464d |
06a22d897d82
bpf: fix access to skb_shared_info->gso_segs
|
|
KASAN: use-after-free Read in nr_rx_frame (2)
hams
|
19 |
C |
done |
|
3 |
2492d |
2500d
|
12/29 |
2464d |
4638faac0327
netrom: hold sock when setting skb->destructor
|
|
memory leak in create_ctx
net
|
3 |
syz |
|
|
1 |
2544d |
2544d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING in xt_compat_add_offset
netfilter
|
-1 |
C |
done |
|
18 |
2486d |
2650d
|
12/29 |
2464d |
3b48300d5cc7
netfilter: ebtables: also count base chain policies
|
|
KMSAN: kernel-usb-infoleak in pcan_usb_pro_init
usb
|
9 |
C |
|
|
13 |
2468d |
2493d
|
12/29 |
2464d |
ead16e53c2f0
can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
|
|
kernel panic: corrupted stack end in corrupted
|
2 |
syz |
done |
|
17 |
2485d |
2532d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
WARNING in gpio_to_desc
usb
gpio
|
-1 |
C |
|
|
3 |
2482d |
2512d
|
12/29 |
2464d |
c3953a3c2d31
NFC: nfcmrvl: fix gpio-handling regression
|
|
general protection fault in rb_next (3)
kernel
|
2 |
syz |
done |
done |
1 |
2537d |
2536d
|
12/29 |
2464d |
95fa145479fb
bpf: sockmap/tls, close can race with map free
|
|
general protection fault in tls_setsockopt
net
|
2 |
syz |
done |
|
7 |
2493d |
2506d
|
12/29 |
2464d |
5d92e631b8be
net/tls: partially revert fix transition through disconnect with close
|
|
KMSAN: uninit-value in read_eprom_word
usb
|
7 |
C |
|
|
31 |
2466d |
2493d
|
12/29 |
2464d |
224c04973db1
net: usb: pegasus: fix improper read if get_registers() fail
|
|
general protection fault in finish_task_switch (2)
kernel
|
2 |
C |
|
done |
1538 |
2802d |
2846d
|
12/29 |
2469d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
possible deadlock in xsk_notifier
net
bpf
|
4 |
C |
done |
|
495 |
2503d |
2515d
|
12/29 |
2478d |
5464c3a0e9a0
xdp: fix potential deadlock on socket mutex
|
|
KASAN: use-after-free Write in _free_event
perf
|
22 |
C |
|
|
112 |
2642d |
2879d
|
12/29 |
2478d |
1cf8dfe8a661
perf/core: Fix race between close() and fork()
|
|
WARNING in __mark_chain_precision
|
-1 |
C |
done |
|
105 |
2478d |
2514d
|
12/29 |
2478d |
b3b50f05dc50
bpf: fix precision bit propagation for BPF_ST instructions
|
|
memory leak in nfs_get_client
nfs
|
3 |
C |
|
|
12 |
2515d |
2542d
|
12/29 |
2478d |
9f7761cf0409
NFS: Cleanup if nfs_match_client is interrupted
|
|
memory leak in policydb_read
kernel
|
3 |
C |
done |
|
1 |
2501d |
2500d
|
12/29 |
2478d |
45385237f65a
selinux: fix memory leak in policydb_init()
|
|
WARNING in binder_transaction_buffer_release
kernel
|
-1 |
syz |
error |
|
38 |
2521d |
2563d
|
12/29 |
2478d |
49ed96943a8e
binder: prevent transactions to context manager from its own process.
|
|
general protection fault in snd_usb_pipe_sanity_check
usb
sound
|
2 |
C |
|
|
72 |
2479d |
2493d
|
12/29 |
2478d |
5d78e1c2b7f4
ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
|
|
INFO: rcu detected stall in snd_seq_write
sound
|
1 |
syz |
error |
|
18 |
2498d |
2829d
|
12/29 |
2478d |
ede34f397ddb
ALSA: seq: Break too long mutex context in the write loop
|
|
KASAN: stack-out-of-bounds Read in hfcsusb_probe
usb
net
|
17 |
C |
|
|
634 |
2493d |
2599d
|
12/29 |
2478d |
f384e62a82ba
ISDN: hfcsusb: checking idx of ep configuration
|
|
BUG: unable to handle kernel NULL pointer dereference in hci_uart_set_flow_control
bluetooth
|
10 |
C |
done |
|
7 |
2623d |
2623d
|
12/29 |
2478d |
b36a1552d731
Bluetooth: hci_uart: check for missing tty operations
|
|
kernel BUG at drivers/usb/wusbcore/wusbhc.c:LINE!
usb
|
-1 |
C |
|
|
1 |
2500d |
2499d
|
12/29 |
2478d |
f90bf1ece48a
usb: wusbcore: fix unbalanced get/put cluster_id
|
|
memory leak in sctp_get_port_local
sctp
|
3 |
C |
|
|
28 |
2488d |
2555d
|
12/29 |
2486d |
9b6c08878e23
sctp: not bind the socket in sctp_connect
|
|
WARNING: Support for this device (Terratec Grabster AV400) is experimental.
usb
|
-1 |
C |
|
|
371 |
2494d |
2583d
|
12/29 |
2486d |
1753c7c4367a
media: pvrusb2: use a different format for warnings
|
|
general protection fault in send_hsr_supervision_frame
net
|
2 |
C |
done |
|
1395 |
2507d |
2515d
|
12/29 |
2486d |
311633b60406
hsr: switch ->dellink() to ->ndo_uninit()
|
|
memory leak in ip_mc_add_src (2)
net
|
3 |
C |
|
|
7 |
2497d |
2526d
|
12/29 |
2486d |
e5b1c6c6277d
igmp: fix memory leak in igmpv3_del_delrec()
|
|
general protection fault in btf_array_resolve
bpf
|
2 |
C |
error |
|
109 |
2511d |
2534d
|
12/29 |
2486d |
e4f07120210a
bpf: fix NULL deref in btf_type_is_resolve_source_only
|
|
general protection fault in sctp_sched_prio_sched
sctp
|
2 |
C |
done |
|
3 |
2523d |
2537d
|
12/29 |
2486d |
4d1415811e49
sctp: fix error handling on stream scheduler initialization
|
|
general protection fault in ip6_datagram_dst_update
net
|
2 |
C |
done |
|
12 |
2510d |
2513d
|
12/29 |
2486d |
8975a3abc303
ipv6: fix potential crash in ip6_datagram_dst_update()
|
|
KMSAN: uninit-value in ax88772_bind
usb
|
7 |
C |
|
|
80 |
2488d |
2549d
|
12/29 |
2486d |
78226f6eaac8
net: usb: asix: init MAC address buffers
|
|
kernel BUG at drivers/android/binder_alloc.c:LINE! (4)
|
-1 |
C |
done |
|
26 |
2527d |
2535d
|
12/29 |
2486d |
bb4a2e48d510
binder: return errors from buffer copy functions
|
|
KASAN: use-after-free Read in cpia2_usb_disconnect
usb
media
|
19 |
C |
|
|
3 |
2513d |
2597d
|
12/29 |
2486d |
eff73de2b160
media: cpia2_usb: first wake up, then free in disconnect
|
|
general protection fault in ovs_ct_exit
|
2 |
C |
done |
|
9888 |
2528d |
2533d
|
12/29 |
2486d |
b272a0ad7301
netns: restore ops before calling ops_exit_list
|
|
memory leak in binder_transaction
kernel
|
3 |
C |
|
|
3 |
2527d |
2539d
|
12/29 |
2486d |
1909a671dbc3
binder: fix memory leak in error path
|
|
KMSAN: uninit-value in bond_start_xmit (2)
net
|
7 |
C |
|
|
2309 |
2486d |
2810d
|
12/29 |
2486d |
9d1bc24b52fb
bonding: validate ip header before check IPPROTO_IGMP
|
|
WARNING in __flush_work (3)
usb
|
-1 |
C |
|
|
1251 |
2489d |
2599d
|
12/29 |
2486d |
11a087f484bf
media: uvcvideo: Fix access to uninitialized fields on probe error
|
|
memory leak in pfkey_xfrm_policy2msg_prep
net
|
3 |
C |
|
|
4 |
2527d |
2558d
|
12/29 |
2486d |
7c80eb1c7e2b
af_key: fix leaks in key_pol_get_resp and dump_sp.
|
|
KASAN: use-after-free Read in dvb_usb_device_exit
usb
|
19 |
C |
|
|
825 |
2487d |
2601d
|
12/29 |
2486d |
6cf97230cd5f
media: dvb: usb: fix use after free in dvb_usb_device_exit
|
|
INFO: trying to register non-static key in rtl_c2hcmd_launcher
usb
wireless
|
-1 |
C |
|
|
48950 |
2493d |
2601d
|
12/29 |
2486d |
6c0ed66f1a5b
rtlwifi: rtl8192cu: fix error handle when usb probe failed
|
|
KASAN: use-after-free Read in kfree_skb_list
net
|
19 |
C |
done |
|
383 |
2533d |
2551d
|
12/29 |
2486d |
b7034146756b
net: fix use-after-free in kfree_skb_list
|
|
KASAN: null-ptr-deref Read in zr364xx_vidioc_querycap
usb
media
|
11 |
C |
|
|
76 |
2494d |
2584d
|
12/29 |
2486d |
5d2e73a5f80a
media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
|
|
memory leak in __ip6_append_data
net
|
3 |
C |
|
|
10 |
2529d |
2555d
|
12/29 |
2486d |
dc93f46bc4e0
inet: frags: fix use-after-free read in inet_frag_destroy_rcu
|
|
WARNING: ath10k USB support is incomplete, don't expect anything to work!
usb
|
-1 |
C |
|
|
347 |
2494d |
2574d
|
12/29 |
2486d |
265df32eae58
ath10k: Change the warning message string
|
|
KASAN: use-after-free Write in xfrm_hash_rebuild
net
|
22 |
syz |
done |
|
8 |
2519d |
2568d
|
12/29 |
2486d |
fd709721352d
xfrm: policy: fix bydst hlist corruption on hash rebuild
|
|
memory leak in bcsp_recv
bluetooth
|
3 |
C |
|
|
3 |
2531d |
2558d
|
12/29 |
2486d |
4ce9146e0370
Bluetooth: hci_bcsp: Fix memory leak in rx_skb
|
|
memory leak in start_sync_thread
lvs
|
3 |
C |
|
|
7 |
2523d |
2555d
|
12/29 |
2486d |
5db7c8b9f9fc
ipvs: fix tinfo memory leak in start_sync_thread
|
|
KASAN: use-after-free Read in v4l2_release
usb
media
|
19 |
C |
|
|
275 |
2494d |
2598d
|
12/29 |
2486d |
c666355e60dd
media: radio-raremono: change devm_k*alloc to k*alloc
|
|
KASAN: use-after-free Read in brnf_exit_net
bridge
netfilter
|
19 |
syz |
done |
|
3 |
2530d |
2533d
|
12/29 |
2486d |
7e6daf50e1f4
netfilter: bridge: prevent UAF in brnf_exit_net()
|
|
WARNING in static_key_slow_try_dec
kernel
|
-1 |
C |
done |
|
58 |
2509d |
2513d
|
12/29 |
2486d |
d44e3fa5d7e6
ipv6: fix static key imbalance in fl_create()
|
|
WARNING: suspicious RCU usage in in_dev_dump_addr
net
|
4 |
C |
done |
|
107 |
2547d |
2549d
|
12/29 |
2486d |
d3e6e285fff3
net: ipv4: fix rcu lockdep splat due to wrong annotation
|
|
memory leak in nf_hook_entries_grow
lvs
|
3 |
C |
|
|
99 |
2514d |
2549d
|
12/29 |
2486d |
cf47a0b882a4
ipvs: defer hook registration to avoid leaks
|
|
general protection fault in tcp_v6_send_reset
net
|
2 |
C |
done |
|
353 |
2542d |
2546d
|
12/29 |
2486d |
392096736a06
ipv6: tcp: fix potential NULL deref in tcp_v6_send_reset()
|
|
KASAN: use-after-free Read in inet_frag_destroy_rcu
net
|
19 |
C |
done |
|
61 |
2554d |
2556d
|
12/29 |
2486d |
dc93f46bc4e0
inet: frags: fix use-after-free read in inet_frag_destroy_rcu
|
|
general protection fault in btf_struct_resolve
bpf
|
2 |
C |
error |
|
49 |
2511d |
2534d
|
12/29 |
2486d |
e4f07120210a
bpf: fix NULL deref in btf_type_is_resolve_source_only
|
|
KASAN: use-after-free Read in unregister_shrinker
mm
|
19 |
syz |
done |
|
3 |
2542d |
2547d
|
12/29 |
2486d |
689d7ba4895b
nfsd: fix cleanup of nfsd_reply_cache_init on failure
|
|
general protection fault in rxrpc_connect_call
afs
net
|
2 |
C |
done |
|
15 |
2535d |
2681d
|
12/29 |
2486d |
e835ada07091
rxrpc: Fix send on a connected, but unbound socket
|
|
WARNING: Detected a wedged cx25840 chip; the device will not work.
usb
|
-1 |
C |
|
|
62 |
2494d |
2583d
|
12/29 |
2486d |
1753c7c4367a
media: pvrusb2: use a different format for warnings
|
|
WARNING: suspicious RCU usage in fib_dump_info_fnhe
net
|
4 |
C |
done |
|
7 |
2526d |
2527d
|
12/29 |
2486d |
3b525691529b
ipv6: fix suspicious RCU usage in rt6_dump_route()
|
|
memory leak in hsr_create_self_node
net
|
3 |
C |
|
|
5 |
2525d |
2556d
|
12/29 |
2486d |
b9a1e627405d
hsr: implement dellink to clean up resources
|
|
general protection fault in call_fib6_multipath_entry_notifiers
net
|
2 |
C |
done |
|
94 |
2528d |
2533d
|
12/29 |
2486d |
9eee3b4913d7
ipv6: Error when route does not have any valid nexthops
|
|
WARNING in snd_usb_motu_microbookii_communicate/usb_submit_urb
usb
|
-1 |
C |
|
|
3 |
2503d |
2541d
|
12/29 |
2486d |
801ebf1043ae
ALSA: usb-audio: Sanity checks for each pipe and EP types
|
|
memory leak in nr_rx_frame
hams
|
3 |
C |
|
|
5 |
2493d |
2556d
|
12/29 |
2486d |
c8c8218ec5af
netrom: fix a memory leak in nr_rx_frame()
|
|
KASAN: use-after-free Read in p54u_load_firmware_cb
wireless
usb
|
19 |
syz |
|
|
40 |
2494d |
2577d
|
12/29 |
2486d |
6e41e2257f10
p54usb: Fix race between disconnect and firmware loading
|
|
memory leak in batadv_tvlv_handler_register
batman
|
3 |
C |
|
|
313 |
2511d |
2562d
|
12/29 |
2486d |
17f78dd1bd62
batman-adv: fix for leaked TVLV handler.
|
|
general protection fault in get_task_pid
kernel
|
2 |
C |
done |
|
24 |
2519d |
2521d
|
12/29 |
2493d |
28dd29c06d0d
fork: return proper negative error code
|
|
general protection fault in do_move_mount (2)
fs
|
2 |
syz |
done |
|
7 |
2526d |
2535d
|
12/29 |
2493d |
570d7a98e7d6
vfs: move_mount: reject moving kernel internal mounts
|
|
memory leak in packet_set_ring
net
|
3 |
C |
|
|
2 |
2526d |
2530d
|
12/29 |
2493d |
55655e3d1197
net/packet: fix memory leak in packet_set_ring()
|
|
possible deadlock in io_submit_one
fs
|
4 |
C |
done |
|
1779 |
2497d |
2668d
|
12/29 |
2493d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
|
KMSAN: uninit-value in tipc_nl_compat_bearer_disable
tipc
|
7 |
C |
|
|
19 |
2520d |
2533d
|
12/29 |
2493d |
4f07b80c9733
tipc: check msg->req data len in tipc_nl_compat_bearer_disable
|
|
memory leak in sctp_v6_create_accept_sk
sctp
|
3 |
C |
|
|
1 |
2551d |
2550d
|
12/29 |
2493d |
25bff6d5478b
sctp: change to hold sk after auth shkey is created successfully
|
|
memory leak in sctp_v4_create_accept_sk
sctp
|
3 |
C |
|
|
1 |
2530d |
2529d
|
12/29 |
2493d |
25bff6d5478b
sctp: change to hold sk after auth shkey is created successfully
|
|
possible deadlock in userfaultfd_release
|
4 |
C |
done |
|
137 |
2525d |
2768d
|
12/29 |
2493d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
|
memory leak in mpihelp_mul_karatsuba_case
crypto
|
3 |
C |
|
|
2 |
2528d |
2529d
|
12/29 |
2493d |
c8ea9fce2baf
lib/mpi: Fix karactx leak in mpi_powm
|
|
KASAN: global-out-of-bounds Read in qmi_wwan_probe
usb
|
17 |
C |
|
|
2 |
2517d |
2528d
|
12/29 |
2493d |
904d88d743b0
qmi_wwan: Fix out-of-bounds read
|
|
KASAN: null-ptr-deref Write in submit_audio_out_urb (2)
usb
|
12 |
C |
|
|
3423 |
2493d |
2525d
|
12/29 |
2493d |
3450121997ce
ALSA: line6: Fix write on zero-sized buffer
|
|
WARNING in kvm_set_tsc_khz
kvm-x86
|
-1 |
C |
|
|
5 |
2849d |
2845d
|
12/29 |
2493d |
3f16a5c31839
KVM: x86: degrade WARN to pr_warn_ratelimited
|
|
WARNING in notify_change
fs
|
-1 |
C |
|
|
566 |
2580d |
2970d
|
12/29 |
2498d |
f69e749a4935
Abort file_remove_privs() for non-reg. files
|
|
WARNING in cgroup_exit
cgroups
|
-1 |
C |
done |
|
64 |
2574d |
2576d
|
12/29 |
2498d |
f2b31bb59824
cgroup: never call do_group_exit() with task->frozen bit set
|
|
WARNING: syz-executor still has locks held!
|
-1 |
C |
done |
|
233 |
2729d |
2740d
|
12/29 |
2498d |
a72173ecfc67
Revert "exec: make de_thread() freezable"
|
|
general protection fault in inet_accept
net
|
2 |
C |
|
|
131 |
2715d |
2876d
|
12/29 |
2511d |
07603b230895
net/smc: propagate file from SMC to TCP socket
|
|
memory leak in sctp_process_init
sctp
|
3 |
C |
|
|
10 |
2536d |
2556d
|
12/29 |
2512d |
0a8dd9f67cd0
Fix memory leak in sctp_process_init
ce950f1050ce
sctp: Free cookie before we memdup a new one
|
|
memory leak in __memcg_init_list_lru_node
mm
|
3 |
C |
|
|
3 |
2543d |
2557d
|
12/29 |
2512d |
3510955b3271
mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
|
|
KMSAN: uninit-value in tcp_create_openreq_child
net
|
7 |
C |
|
|
4000 |
2513d |
2534d
|
12/29 |
2512d |
85f9aa7565bd
inet: clear num_timeout reqsk_alloc()
|
|
WARNING in fanotify_handle_event
fs
|
-1 |
C |
done |
|
5 |
2535d |
2534d
|
12/29 |
2512d |
c285a2f01d69
fanotify: update connector fsid cache on add mark
|
|
KASAN: use-after-free Read in pneigh_get_next
net
|
19 |
syz |
done |
|
2 |
2537d |
2537d
|
12/29 |
2512d |
f3e92cb8e2eb
neigh: fix use-after-free read in pneigh_get_next
|
|
memory leak in raw_sendmsg
can
|
3 |
C |
|
|
2 |
2537d |
2549d
|
12/29 |
2512d |
fd704bd5ee74
can: purge socket error queue on sock destruct
|
|
KASAN: slab-out-of-bounds Read in css_task_iter_advance
cgroups
|
17 |
C |
done |
|
19 |
2542d |
2548d
|
12/29 |
2512d |
c596687a008b
cgroup: Fix css_task_iter_advance_css_set() cset skip condition
|
|
memory leak in tipc_buf_acquire
tipc
|
3 |
C |
|
|
15 |
2536d |
2559d
|
12/29 |
2512d |
5cf02612b33f
tipc: purge deferredq list for each grp member in tipc_group_delete
|
|
general protection fault in __smc_diag_dump
|
2 |
syz |
done |
|
309 |
2688d |
2702d
|
12/29 |
2512d |
b03faa1fafc8
net/smc: postpone release of clcsock
|
|
memory leak in inet6_create
net
|
3 |
C |
|
|
2 |
2543d |
2546d
|
12/29 |
2512d |
522924b58308
net: correct udp zerocopy refcnt also when zerocopy only on append
|
|
memory leak in kobject_set_name_vargs
kernel
|
3 |
C |
|
|
12 |
2521d |
2554d
|
12/29 |
2512d |
4f488fbca2a8
cfg80211: fix memory leak of wiphy device name
|
|
KASAN: use-after-free Read in sprintf
net
|
19 |
syz |
done |
|
2 |
2537d |
2537d
|
12/29 |
2512d |
f3e92cb8e2eb
neigh: fix use-after-free read in pneigh_get_next
|
|
BUG: Dentry still in use [unmount of sysfs sysfs]
kernfs
|
-1 |
C |
done |
|
6 |
2537d |
2537d
|
12/29 |
2512d |
1b0b9cc8d379
vfs: fsmount: add missing mntget()
|
|
general protection fault in dst_dev_put (2)
net
|
2 |
C |
done |
|
442 |
2534d |
2723d
|
12/29 |
2512d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
BUG: Dentry still in use [unmount of hugetlbfs hugetlbfs]
fs
|
-1 |
C |
done |
|
3 |
2535d |
2535d
|
12/29 |
2512d |
1b0b9cc8d379
vfs: fsmount: add missing mntget()
|
|
KMSAN: kernel-infoleak in copy_siginfo_to_user (2)
kernel
|
9 |
C |
|
|
15 |
2542d |
2572d
|
12/29 |
2512d |
f6e2aa91a46d
signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
|
|
WARNING in blk_mq_sched_free_requests
block
|
-1 |
C |
done |
|
4 |
2539d |
2542d
|
12/29 |
2512d |
c326f846ebc2
blk-mq: remove WARN_ON(!q->elevator) from blk_mq_sched_free_requests
|
|
KASAN: use-after-free Read in rt_cache_valid
net
|
19 |
syz |
done |
|
5 |
2545d |
2660d
|
12/29 |
2512d |
c3bcde026684
tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
|
|
memory leak in new_inode_pseudo
smc
|
3 |
C |
|
|
136 |
2513d |
2561d
|
12/29 |
2512d |
355e8d26f719
io_uring: fix memory leak of UNIX domain socket inode
|
|
memory leak in lapb_register
x25
|
3 |
C |
|
|
16 |
2536d |
2562d
|
12/29 |
2512d |
6be8e297f9bc
lapb: fixed leak of control-blocks.
|
|
KASAN: use-after-free Read in blk_mq_free_rqs
block
|
19 |
C |
error |
|
3481 |
2542d |
2546d
|
12/29 |
2519d |
c3e2219216c9
block: free sched's request pool in blk_cleanup_queue
|
|
possible deadlock in aio_poll
fs
|
4 |
C |
|
|
5041 |
2671d |
2816d
|
12/29 |
2523d |
ae62c16e105a
userfaultfd: disable irqs when taking the waitqueue lock
|
|
KASAN: slab-out-of-bounds Read in rhashtable_walk_enter
|
17 |
C |
done |
|
48 |
2562d |
2566d
|
12/29 |
2528d |
526f5b851a96
tipc: fix modprobe tipc failed after switch order of device registration
|
|
BUG: spinlock bad magic in rhashtable_walk_enter
tipc
|
4 |
C |
done |
|
8 |
2562d |
2566d
|
12/29 |
2528d |
526f5b851a96
tipc: fix modprobe tipc failed after switch order of device registration
|
|
WARNING: proc registration bug in snd_info_card_register
usb
sound
|
-1 |
C |
|
|
453 |
2557d |
2601d
|
12/29 |
2528d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
KASAN: slab-out-of-bounds Write in default_read_copy_kernel
sound
|
21 |
C |
done |
|
3 |
2648d |
2725d
|
12/29 |
2528d |
ca0214ee2802
ALSA: pcm: Fix possible OOB access in PCM oss plugins
|
|
general protection fault in sctp_sched_dequeue_common (2)
sctp
|
2 |
C |
done |
|
3 |
2630d |
2630d
|
12/29 |
2529d |
2e990dfd1397
sctp: remove sched init from sctp_stream_init
|
|
WARNING in ovl_instantiate
overlayfs
|
-1 |
syz |
done |
|
75 |
2586d |
2754d
|
12/29 |
2529d |
146d62e5a586
ovl: detect overlapping layers
acf3062a7e1c
ovl: relax WARN_ON() for overlapping layers use case
|
|
general protection fault in sisusb_probe
usb
|
2 |
C |
|
|
3 |
2572d |
2575d
|
12/29 |
2533d |
9a5729f68d3a
USB: sisusbvga: fix oops in error path of sisusb_probe
|
|
INFO: task hung in __get_super
fs
|
1 |
C |
|
|
80 |
2533d |
2977d
|
12/29 |
2533d |
33ec3e53e7b1
loop: Don't change loop device under exclusive opener
|
|
KASAN: slab-out-of-bounds Write in usb_get_bos_descriptor
usb
|
21 |
syz |
|
|
3 |
2560d |
2573d
|
12/29 |
2533d |
a03ff5446081
USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
|
|
KASAN: invalid-free in disconnect_rio
usb
|
24 |
C |
|
|
180 |
2556d |
2601d
|
12/29 |
2533d |
3864d33943b4
USB: rio500: refuse more than one device at a time
|
|
general protection fault in smsusb_init_device
media
usb
|
2 |
C |
|
|
23 |
2557d |
2595d
|
12/29 |
2533d |
31e0456de5be
media: usb: siano: Fix general protection fault in smsusb
|
|
memory leak in packet_setsockopt
net
|
3 |
C |
|
|
10 |
2546d |
2563d
|
12/29 |
2533d |
afa0925c6fcc
packet: unconditionally free po->rollover
|
|
KASAN: use-after-free Read in napi_gro_frags
|
19 |
C |
done |
|
16 |
2553d |
2554d
|
12/29 |
2534d |
a4270d6795b0
net-gro: fix use-after-free read in napi_gro_frags()
|
|
memory leak in ip_mc_add_src
net
|
3 |
C |
|
|
14 |
2539d |
2563d
|
12/29 |
2534d |
3580d04aa674
ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
|
|
memory leak in process_preds
trace
|
3 |
C |
|
|
1 |
2556d |
2556d
|
12/29 |
2534d |
dfb4a6f2191a
tracing: Avoid memory leak in predicate_parse()
|
|
memory leak in llc_ui_create
net
|
3 |
C |
|
|
4 |
2544d |
2557d
|
12/29 |
2534d |
8fb44d60d414
llc: fix skb leak in llc_build_and_send_ui_pkt()
|
|
memory leak in inet_create
net
|
3 |
C |
|
|
2 |
2548d |
2563d
|
12/29 |
2534d |
100f6d8e0990
net: correct zerocopy refcnt with udp MSG_MORE
|
|
INFO: trying to register non-static key in rhashtable_walk_enter
tipc
|
-1 |
C |
|
|
16 |
2562d |
2566d
|
12/29 |
2534d |
526f5b851a96
tipc: fix modprobe tipc failed after switch order of device registration
|
|
KASAN: use-after-free Read in __dev_map_entry_free
bpf
net
|
19 |
C |
|
|
473 |
2616d |
2897d
|
12/29 |
2534d |
2baae3545327
bpf: devmap: fix use-after-free Read in __dev_map_entry_free
|
|
KASAN: null-ptr-deref Write in submit_audio_out_urb
sound
usb
|
12 |
C |
|
|
185 |
2541d |
2556d
|
12/29 |
2534d |
0b074ab7fc0d
ALSA: line6: Assure canceling delayed work at disconnection
|
|
INFO: task hung in usb_kill_urb
usb
|
1 |
C |
|
|
1515 |
2596d |
2601d
|
12/29 |
2538d |
50896c410354
USB: dummy-hcd: Fix failure to give back unlinked URBs
USB: dummy-hcd: Fix failure to give back unlinked URBs
|
|
KASAN: use-after-free Read in tipc_sk_filter_rcv
tipc
|
19 |
C |
done |
|
3439 |
2617d |
2624d
|
12/29 |
2538d |
77d5ad4048fb
tipc: fix use-after-free in tipc_sk_filter_rcv
|
|
BUG: assuming atomic context at net/core/flow_dissector.c:LINE
net
|
-1 |
syz |
|
|
19 |
2569d |
2573d
|
12/29 |
2538d |
b1c17a9a3538
flow_dissector: disable preemption around BPF calls
|
|
general protection fault in load_elf_binary
fs
mm
|
2 |
C |
done |
|
15 |
2611d |
2615d
|
12/29 |
2538d |
cc338010a233
fs/binfmt_elf.c: free PT_INTERP filename ASAP
|
|
INFO: task hung in snd_seq_kernel_client_ctl
sound
|
1 |
C |
done |
|
554 |
2601d |
2602d
|
12/29 |
2538d |
f0654ba94e33
Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
|
|
KASAN: use-after-free Read in snd_timer_process_callbacks
sound
|
19 |
C |
done |
|
4 |
2604d |
2605d
|
12/29 |
2538d |
df55531b8b0e
ALSA: timer: Revert active callback sync check at close
|
|
BUG: using __this_cpu_read() in preemptible code in ip6_finish_output
|
4 |
C |
done |
|
18807 |
2606d |
2611d
|
12/29 |
2538d |
28b05b928868
net: use correct this_cpu primitive in dev_recursion_level
|
|
WARNING: ODEBUG bug in netdev_freemem
|
-1 |
syz |
done |
|
1042 |
2538d |
2703d
|
12/29 |
2538d |
a3c7cd0cdf11
batman-adv: mcast: fix multicast tt/tvlv worker locking
|
|
WARNING: locking bug in nfs_get_client
nfs
|
4 |
C |
done |
|
13 |
2574d |
2575d
|
12/29 |
2538d |
c260121a97a3
NFS: Fix a double unlock from nfs_match,get_client
|
|
WARNING: locking bug in copy_process
mm
|
4 |
C |
done |
|
3 |
2572d |
2574d
|
12/29 |
2538d |
c3b7112df86b
fork: do not release lock that wasn't taken
|
|
KASAN: use-after-free Read in string
input
|
19 |
C |
|
|
247 |
2582d |
2822d
|
12/29 |
2538d |
c03a0fd0b609
kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
|
|
KASAN: use-after-free Read in get_mem_cgroup_from_mm
mm
cgroups
|
19 |
C |
done |
|
375 |
2584d |
2758d
|
12/29 |
2538d |
c3f3ce049f7d
userfaultfd: use RCU to free the task struct when fork fails
|
|
KASAN: use-after-free Read in __vb2_perform_fileio
|
19 |
C |
done |
|
786 |
2576d |
2766d
|
12/29 |
2538d |
d65842f7126a
media: vb2: add waiting_in_dqbuf flag
|
|
kernel BUG at drivers/android/binder_alloc.c:LINE! (3)
kernel
|
-1 |
C |
done |
|
24 |
2547d |
2616d
|
12/29 |
2538d |
a3c7cd0cdf11
batman-adv: mcast: fix multicast tt/tvlv worker locking
|
|
WARNING in batadv_mcast_mla_tt_retract
batman
|
-1 |
syz |
done |
|
190 |
2569d |
2704d
|
12/29 |
2538d |
a3c7cd0cdf11
batman-adv: mcast: fix multicast tt/tvlv worker locking
|
|
KASAN: use-after-free Write in __ext4_expand_extra_isize
ext4
|
22 |
C |
|
|
95 |
2585d |
2976d
|
12/29 |
2538d |
7bc04c5c2cc4
ext4: fix use-after-free race with debug_want_extra_isize
|
|
general protection fault in tipc_mcast_filter_msg
tipc
|
2 |
C |
done |
|
3889 |
2602d |
2624d
|
12/29 |
2538d |
08e046c8966a
tipc: fix a null pointer deref
|
|
WARNING in port_delete
sound
|
-1 |
syz |
done |
|
22 |
2661d |
2876d
|
12/29 |
2538d |
7c32ae35fbf9
ALSA: seq: Cover unsubscribe_port() in list_mutex
feb689025fbb
ALSA: seq: Protect in-kernel ioctl calls with mutex
|
|
possible deadlock in acct_pin_kill
|
4 |
C |
done |
|
273 |
2581d |
2798d
|
12/29 |
2538d |
9419a3191dcb
acct_on(): don't mess with freeze protection
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE! (2)
media
|
-1 |
C |
done |
|
522 |
2538d |
2748d
|
12/29 |
2538d |
dad7e270ba71
media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
|
|
general protection fault in __handle_mm_fault
net
|
2 |
C |
error |
|
17 |
2781d |
2790d
|
12/29 |
2542d |
ff09d7ec9786
mm/memory.c: recheck page table entry with page table lock held
|
|
KMSAN: uninit-value in aa_fqlookupn_profile
apparmor
|
7 |
C |
|
|
39 |
2753d |
2798d
|
12/29 |
2542d |
250f2da49cb8
apparmor: Fix uninitialized value in aa_split_fqname
|
|
BUG: bad usercopy in __check_heap_object (3)
mm
hardening
|
-1 |
C |
|
|
287 |
2810d |
2881d
|
12/29 |
2542d |
1f4aace60b0e
fs/seq_file.c: simplify seq_file iteration code and interface
|
|
general protection fault in put_fs_context
fs
|
2 |
C |
|
|
9 |
2765d |
2765d
|
12/29 |
2542d |
8d0347f6c3a9
convert do_remount_sb() to fs_context
|
|
kernel panic: MAC Initialization failed. (3)
tomoyo
|
2 |
C |
done |
|
799 |
2570d |
2644d
|
9/29 |
2542d |
e80b18599a39
tomoyo: Add a kernel config option for fuzzing testing.
|
|
WARNING in xfrm_state_fini (2)
net
|
-1 |
C |
|
|
37510 |
2581d |
3033d
|
12/29 |
2556d |
dbb2483b2a46
xfrm: clean up xfrm protocol checks
|
|
KMSAN: uninit-value in rds_connect
rds
|
7 |
C |
|
|
952 |
2584d |
2826d
|
12/29 |
2556d |
dd3ac9a68435
net/rds: Check address length before reading address family
|
|
general protection fault in __dev_printk
usb
|
2 |
C |
|
|
300 |
2583d |
2596d
|
12/29 |
2556d |
ef61eb43ada6
USB: yurex: Fix protection fault after device removal
|
|
INFO: trying to register non-static key in vmk80xx_detach
staging
usb
|
-1 |
C |
|
|
1528 |
2556d |
2601d
|
12/29 |
2556d |
08b7c2f9208f
staging: comedi: vmk80xx: Fix use of uninitialized semaphore
|
|
KMSAN: uninit-value in rtnl_stats_dump
net
|
7 |
syz |
|
|
14 |
2587d |
2602d
|
12/29 |
2556d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
BUG: unable to handle page fault for address = ADDR
kernel
|
-1 |
C |
done |
|
3 |
2589d |
2588d
|
12/29 |
2556d |
baf76f0c58ae
slip: make slhc_free() silently accept an error pointer
|
|
KASAN: use-after-free Read in seccomp_notify_release (2)
kernel
|
19 |
C |
done |
|
9 |
2619d |
2620d
|
12/29 |
2556d |
7a0df7fbc145
seccomp: Make NEW_LISTENER and TSYNC flags exclusive
|
|
WARNING in compat_copy_entries (2)
|
-1 |
syz |
done |
|
19416 |
2570d |
3003d
|
12/29 |
2556d |
7caa56f006e9
netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
|
|
KMSAN: uninit-value in rds_bind
rds
|
7 |
C |
|
|
6202 |
2584d |
2826d
|
12/29 |
2556d |
dd3ac9a68435
net/rds: Check address length before reading address family
|
|
INFO: trying to register non-static key in ni6501_detach
staging
usb
|
-1 |
C |
|
|
127 |
2557d |
2599d
|
12/29 |
2556d |
660cf4ce9d0f
staging: comedi: ni_usb6501: Fix use of uninitialized mutex
|
|
KASAN: slab-out-of-bounds Read in skb_gro_receive (2)
net
|
17 |
C |
done |
|
5 |
2582d |
2582d
|
12/29 |
2556d |
4dd2b82d5adf
udp: fix GRO packet of death
|
|
KASAN: stack-out-of-bounds Write in __ip_options_echo
net
|
21 |
syz |
done |
|
8 |
2590d |
2594d
|
12/29 |
2556d |
20ff83f10f11
ipv4: add sanity checks in ipv4_link_failure()
|
|
general protection fault in vcpu_enter_guest (2)
kvm-x86
|
2 |
C |
done |
|
11286 |
2582d |
2588d
|
12/29 |
2556d |
b904cb8dff82
KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
|
|
KASAN: use-after-free Read in snd_info_free_entry
usb
sound
|
19 |
C |
|
|
47 |
2569d |
2599d
|
12/29 |
2556d |
2a3f7221acdd
ALSA: core: Fix card races between register and disconnect
8c2f870890fd
ALSA: info: Fix racy addition/deletion of nodes
|
|
WARNING in percpu_ref_kill_and_confirm
|
-1 |
C |
done |
|
443 |
2585d |
2591d
|
12/29 |
2556d |
35fa71a030ca
io_uring: fail io_uring_register(2) on a dying io_uring instance
|
|
general protection fault in skb_queue_tail
|
2 |
C |
done |
|
35 |
2589d |
2591d
|
12/29 |
2556d |
032be5f19a94
rxrpc: fix race condition in rxrpc_input_packet()
|
|
WARNING in wiphy_register (4)
wireless
|
-1 |
syz |
error |
|
3 |
2600d |
2629d
|
12/29 |
2556d |
45fcef8b727b
mac80211_hwsim: calculate if_combination.max_interfaces
|
|
INFO: task hung in __io_uring_register
fs
|
1 |
C |
done |
|
51 |
2592d |
2601d
|
12/29 |
2556d |
b19062a56726
io_uring: fix possible deadlock between io_uring_{enter,register}
|
|
WARNING in __kthread_bind_mask
|
-1 |
C |
done |
|
2929 |
2590d |
2601d
|
12/29 |
2556d |
060586324648
io_uring: park SQPOLL thread if it's percpu
|
|
KASAN: slab-out-of-bounds Read in ds_probe
usb
|
17 |
C |
|
|
5 |
2558d |
2596d
|
12/29 |
2556d |
c114944d7d67
USB: w1 ds2490: Fix bug caused by improper use of altsetting array
|
|
KMSAN: uninit-value in rtnl_stats_get
net
|
7 |
C |
|
|
5 |
2594d |
2602d
|
12/29 |
2556d |
69f23a09daf9
rtnetlink: fix rtnl_valid_stats_req() nlmsg_len check
|
|
kernel BUG at net/core/net-sysfs.c:LINE!
net
|
-1 |
C |
done |
|
890 |
2586d |
2622d
|
12/29 |
2556d |
8ed633b9baf9
Revert "net-sysfs: Fix memory leak in netdev_register_kobject"
|
|
WARNING in io_uring_setup
|
-1 |
C |
done |
|
3601 |
2581d |
2601d
|
12/29 |
2556d |
917257daa0fe
io_uring: only test SQPOLL cpu after we've verified it
|
|
general protection fault in xfrmi_decode_session
|
2 |
C |
done |
|
16694 |
2581d |
2652d
|
12/29 |
2556d |
6ed69184ed9c
xfrm: Reset secpath in xfrm failure
|
|
INFO: task hung in vhost_net_stop_vq
net
virt
kvm
|
1 |
C |
done |
|
136 |
2596d |
2734d
|
12/29 |
2556d |
813dbeb656d6
vhost: reject zero size iova range
|
|
general protection fault in fanotify_handle_event
fs
|
2 |
syz |
done |
|
5 |
2595d |
2595d
|
12/29 |
2556d |
b1da6a51871c
fsnotify: Fix NULL ptr deref in fanotify_get_fsid()
|
|
BUG: unable to handle kernel paging request in do_mount
fs
|
8 |
C |
|
|
194 |
2767d |
2805d
|
12/29 |
2563d |
3e1aeb00e6d1
vfs: Implement a filesystem superblock creation/configuration context
|
|
KASAN: stack-out-of-bounds Read in string
usb
|
17 |
C |
|
|
46 |
2590d |
2601d
|
12/29 |
2568d |
c01c348ecdc6
USB: core: Fix unterminated string returned by usb_string()
|
|
WARNING in usb_submit_urb (4)
usb
|
-1 |
syz |
done |
|
46 |
2570d |
2758d
|
12/29 |
2568d |
c2b71462d294
USB: core: Fix bug caused by duplicate interface PM usage counter
|
|
WARNING: locking bug in icmp_send
net
|
4 |
syz |
done |
|
1 |
2653d |
2653d
|
12/29 |
2574d |
9926cb5f8b0f
tipc: change to check tipc_own_id to return in tipc_net_stop
|
|
KMSAN: uninit-value in ip6_compressed_string
nfs
net
|
7 |
C |
|
|
9024 |
2584d |
2736d
|
12/29 |
2584d |
7c2bd9a39845
NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
|
|
kernel BUG at fs/inode.c:LINE!
autofs
|
-1 |
C |
done |
|
2 |
2719d |
2718d
|
12/29 |
2601d |
9bf964c9cee4
autofs: simplify parse_options() function call
|
|
KMSAN: uninit-value in tipc_nl_compat_name_table_dump (2)
tipc
|
7 |
C |
|
|
6 |
2631d |
2616d
|
12/29 |
2602d |
2ac695d1d602
tipc: handle the err returned from cmd header function
|
|
BUG: corrupted list in rhashtable_walk_enter
net
|
8 |
syz |
error |
|
3 |
2621d |
2620d
|
12/29 |
2602d |
b5f9bd15b885
ila: Fix rhashtable walker list corruption
|
|
possible deadlock in seq_read
fs
|
4 |
C |
|
|
19074 |
2609d |
3098d
|
12/29 |
2602d |
73601ea5b7b1
fs/open.c: allow opening only regular files during execve()
|
|
KASAN: use-after-free Read in link_path_walk
fs
|
19 |
syz |
done |
|
5 |
2721d |
2736d
|
12/29 |
2602d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
|
KASAN: slab-out-of-bounds Read in default_write_copy_kernel
sound
|
17 |
C |
done |
|
366 |
2617d |
2740d
|
12/29 |
2602d |
ca0214ee2802
ALSA: pcm: Fix possible OOB access in PCM oss plugins
|
|
KASAN: use-after-free Read in trailing_symlink
fs
|
19 |
syz |
done |
|
2 |
2722d |
2736d
|
12/29 |
2602d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (3)
sctp
|
9 |
syz |
|
|
11 |
2604d |
2616d
|
12/29 |
2602d |
09279e615c81
sctp: initialize _pad of sockaddr_in before copying to user memory
|
|
KMSAN: uninit-value in tipc_nl_compat_link_set (3)
tipc
|
7 |
C |
|
|
15 |
2607d |
2617d
|
12/29 |
2602d |
8c63bf9ab4be
tipc: check link name with right length in tipc_nl_compat_link_set
|
|
KASAN: use-after-free Read in path_lookupat
fs
|
19 |
syz |
done |
|
1 |
2736d |
2736d
|
12/29 |
2602d |
1da6c4d9140c
bpf: fix use after free in bpf_evict_inode
|
|
KMSAN: uninit-value in tipc_nl_compat_bearer_enable (2)
tipc
|
7 |
C |
|
|
51 |
2604d |
2617d
|
12/29 |
2602d |
6f07e5f06c87
tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
|
|
KASAN: use-after-free Read in drm_gem_object_release
dri
|
19 |
C |
|
|
480 |
2617d |
2770d
|
12/29 |
2602d |
21d2b1227323
drm/vgem: fix use-after-free when drm_gem_handle_create() fails
|
|
WARNING: lock held when returning to user space in tun_get_user
net
|
4 |
C |
done |
|
55 |
2628d |
2629d
|
12/29 |
2603d |
9180bb4f0460
tun: add a missing rcu_read_unlock() in error path
|
|
kernel panic: corrupted stack end in wb_workfn
mm
|
2 |
C |
done |
|
14 |
2704d |
2704d
|
12/29 |
2603d |
ef82bcfa671b
sctp: use memdup_user instead of vmemdup_user
|
|
general protection fault in fib6_purge_rt
net
|
2 |
C |
done |
|
60 |
2605d |
2722d
|
12/29 |
2603d |
9926cb5f8b0f
tipc: change to check tipc_own_id to return in tipc_net_stop
|
|
general protection fault in sctp_assoc_rwnd_increase
sctp
|
2 |
C |
done |
|
28 |
2617d |
2632d
|
12/29 |
2603d |
636d25d557d1
sctp: not copy sctp_sock pd_lobby in sctp_copy_descendant
|
|
WARNING in free_loaded_vmcs (2)
kvm-x86
|
-1 |
syz |
done |
|
5 |
2821d |
2842d
|
11/29 |
2611d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
general protection fault in kvm_lapic_hv_timer_in_use
kvm-x86
|
2 |
syz |
done |
|
205 |
2804d |
2846d
|
11/29 |
2611d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in enter_vmx_operation
kvm-x86
|
-1 |
syz |
done |
|
8 |
2815d |
2826d
|
11/29 |
2611d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
WARNING in lockdep_unregister_key
bluetooth
|
-1 |
C |
done |
|
214 |
2619d |
2633d
|
11/29 |
2613d |
82efcab3b9f3
workqueue: Only unregister a registered lockdep key
|
|
WARNING: bad usercopy in fanotify_read
hardening
mm
|
-1 |
C |
done |
|
5 |
2633d |
2633d
|
11/29 |
2613d |
b2d22b6bb33a
fanotify: Allow copying of file handle to userspace
|
|
KASAN: use-after-free Read in filemap_fault
mm
fs
|
19 |
C |
|
|
277 |
2696d |
2706d
|
11/29 |
2613d |
6b4c9f446981
filemap: drop the mmap_sem for all blocking operations
|
|
general protection fault in ebitmap_destroy (2)
selinux
|
2 |
C |
done |
|
36 |
2622d |
2630d
|
11/29 |
2613d |
6a1afffb08ce
selinux: fix NULL dereference in policydb_destroy()
|
|
WARNING in __flush_work (2)
dri
|
-1 |
C |
|
|
38 |
2636d |
2637d
|
11/29 |
2616d |
b30b61ff6b1d
drm/vkms: Fix flush_work() without INIT_WORK().
|
|
general protection fault in sctp_sched_rr_dequeue
sctp
|
2 |
C |
done |
|
11 |
2629d |
2639d
|
11/29 |
2616d |
2e990dfd1397
sctp: remove sched init from sctp_stream_init
|
|
possible deadlock in shmem_fallocate (2)
mm
|
4 |
C |
|
|
1325 |
2638d |
2846d
|
11/29 |
2616d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
BUG: MAX_STACK_TRACE_ENTRIES too low!
|
-1 |
C |
done |
|
1725 |
2617d |
2643d
|
11/29 |
2616d |
009bb421b6ce
workqueue, lockdep: Fix an alloc_workqueue() error path
|
|
general protection fault in tc_ctl_chain
net
|
2 |
C |
|
|
21 |
2651d |
2659d
|
11/29 |
2616d |
af736bf071e8
net: sched: potential NULL dereference in tcf_block_find()
|
|
KASAN: use-after-free Read in unix_dgram_poll
net
|
19 |
syz |
|
|
2 |
2645d |
2642d
|
11/29 |
2616d |
84c4e1f89fef
aio: simplify - and fix - fget/fput for io_submit()
|
|
general protection fault in hci_uart_write_work
bluetooth
|
2 |
C |
|
|
84 |
2640d |
2689d
|
11/29 |
2616d |
32a7b4cbe93b
Bluetooth: hci_ldisc: Initialize hci_dev before open()
|
|
KASAN: use-after-free Read in rdma_listen
rdma
|
19 |
C |
|
|
1548 |
2617d |
2977d
|
11/29 |
2616d |
5fc01fb846bc
RDMA/cma: Rollback source IP address if failing to acquire device
|
|
kernel BUG at drivers/android/binder_alloc.c:LINE! (2)
kernel
|
-1 |
C |
|
|
1257 |
2616d |
2658d
|
11/29 |
2616d |
26528be6720b
binder: fix handling of misaligned binder object
|
|
INFO: trying to register non-static key in __flush_work
dri
|
-1 |
C |
|
|
5255 |
2637d |
2706d
|
11/29 |
2616d |
b30b61ff6b1d
drm/vkms: Fix flush_work() without INIT_WORK().
|
|
KASAN: use-after-free Read in alloc_workqueue
rdma
|
19 |
C |
|
|
37 |
2629d |
2641d
|
11/29 |
2616d |
009bb421b6ce
workqueue, lockdep: Fix an alloc_workqueue() error path
|
|
general protection fault in cgroup_reconfigure
cgroups
|
2 |
C |
|
|
7 |
2852d |
2881d
|
11/29 |
2616d |
23bf1b6be9c2
kernfs, sysfs, cgroup, intel_rdt: Support fs_context
|
|
KASAN: use-after-free Read in x25_device_event
x25
|
19 |
C |
|
|
548 |
2630d |
2705d
|
11/29 |
2616d |
95d6ebd53c79
net/x25: fix use-after-free in x25_device_event()
|
|
possible deadlock in __do_page_fault
fs
mm
|
4 |
C |
|
|
820 |
2638d |
2805d
|
11/29 |
2616d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
possible deadlock in vfs_fallocate
fs
|
4 |
C |
|
|
3981 |
2838d |
2949d
|
11/29 |
2616d |
fb4415a12632
staging: android: ashmem: Don't call fallocate() with ashmem_mutex held.
|
|
WARNING in get_q_data
media
|
-1 |
C |
|
|
649 |
2665d |
2674d
|
11/29 |
2616d |
db9a01b32ca9
media: vicodec: check type in g/s_selection
|
|
KMSAN: kernel-infoleak in video_usercopy
media
|
9 |
C |
|
|
410 |
2617d |
2716d
|
11/29 |
2616d |
f45f3f753b0a
media: v4l2-ctrls.c/uvc: zero v4l2_event
|
|
KMSAN: uninit-value in gue6_err (2)
net
|
7 |
C |
|
|
2826 |
2616d |
2639d
|
11/29 |
2616d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (2)
net
|
9 |
C |
|
|
8 |
2618d |
2632d
|
11/29 |
2616d |
163d1c3d6f17
l2tp: fix infoleak in l2tp_ip6_recvmsg()
|
|
general protection fault in nf_ct_gre_keymap_flush
netfilter
|
2 |
C |
|
|
22 |
2675d |
2681d
|
11/29 |
2616d |
ac088a88b5d5
netfilter: conntrack: fix error path in nf_conntrack_pernet_init()
|
|
general protection fault in xsk_diag_dump
net
bpf
|
2 |
C |
|
|
5 |
2634d |
2640d
|
11/29 |
2616d |
915905f8b1d4
xsk: fix potential crash in xsk_diag_put_umem()
|
|
BUG: unable to handle kernel paging request in h4_recv_buf
bluetooth
|
8 |
C |
|
|
203 |
2640d |
2702d
|
11/29 |
2616d |
1dc2d785156c
Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
|
|
KMSAN: uninit-value in gue_err (2)
net
|
7 |
C |
|
|
1617 |
2616d |
2639d
|
11/29 |
2616d |
5355ed6388e2
fou, fou6: avoid uninit-value in gue_err() and gue6_err()
|
|
KASAN: use-after-free Read in kobject_put
kernel
|
19 |
C |
|
|
12 |
2645d |
2776d
|
11/29 |
2616d |
e20a2e9c42c9
Bluetooth: Fix decrementing reference count twice in releasing socket
|
|
BUG: assuming atomic context at kernel/seccomp.c:LINE
kernel
|
-1 |
C |
|
|
709 |
2652d |
2653d
|
11/29 |
2616d |
e80d02dd7630
seccomp, bpf: disable preemption before calling into bpf prog
|
|
general protection fault in delayed_uprobe_remove
perf
trace
|
2 |
C |
done |
|
2 |
2761d |
2763d
|
11/29 |
2622d |
1aed58e67a6e
Uprobes: Fix kernel oops with delayed_uprobe_remove()
|
|
general protection fault in __x86_indirect_thunk_rbx
|
2 |
C |
done |
|
16 |
2757d |
2758d
|
11/29 |
2623d |
d6367d624137
fs/locks: use properly initialized file_lock when unlocking.
|
|
KASAN: use-after-free Read in update_blocked_averages
kernel
|
19 |
C |
done |
|
3 |
2739d |
2753d
|
11/29 |
2623d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
kernel BUG at mm/slab.c:LINE! (3)
mm
|
-1 |
C |
done |
|
14 |
2623d |
2751d
|
11/29 |
2623d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
WARNING in update_load_avg
kernel
|
-1 |
C |
done |
|
1 |
2746d |
2745d
|
11/29 |
2624d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
WARNING: bad usercopy in corrupted (2)
|
-1 |
C |
done |
|
12 |
2693d |
2739d
|
11/29 |
2624d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
KASAN: slab-out-of-bounds Read in tick_sched_handle
kernel
|
17 |
C |
done |
|
7 |
2690d |
2718d
|
11/29 |
2628d |
bc6e019b6ee6
fou: Prevent unbounded recursion in GUE error handler also with UDP-Lite
|
|
WARNING: lock held when returning to user space in set_property_atomic
dri
|
4 |
C |
|
|
145 |
2691d |
2705d
|
11/29 |
2637d |
4089e272ac61
gpu/drm: Fix lock held when returning to user space.
|
|
general protection fault in ax25cmp
hams
|
2 |
C |
|
|
2294 |
2674d |
2706d
|
11/29 |
2639d |
b0cf029234f9
net/rose: fix NULL ax25_cb kernel panic
|
|
KMSAN: uninit-value in batadv_interface_tx
batman
|
7 |
C |
|
|
98 |
2639d |
2661d
|
11/29 |
2639d |
4ffcbfac6064
batman-adv: fix uninit-value in batadv_interface_tx()
|
|
kernel BUG at security/keys/keyring.c:LINE!
keyrings
lsm
|
-1 |
C |
|
|
12 |
2691d |
2790d
|
11/29 |
2639d |
ede0fa98a900
KEYS: always initialize keyring_index_key::desc_len
|
|
KMSAN: uninit-value in tipc_subscrb_rcv_cb
tipc
|
7 |
C |
|
|
13 |
2949d |
2970d
|
11/29 |
2639d |
a88289f4ddee
tipc: fix uninit-value in in tipc_conn_rcv_sub
|
|
KASAN: use-after-free Write in __xfrm_policy_unlink
net
|
22 |
C |
|
|
254 |
2642d |
2870d
|
11/29 |
2639d |
1548bc4e0512
xfrm: policy: delete inexact policies from inexact list on hash rebuild
|
|
KMSAN: kernel-infoleak in kvm_vcpu_write_guest_page
kvm
|
9 |
C |
|
|
25 |
2730d |
2758d
|
11/29 |
2639d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
KASAN: use-after-free Read in task_is_descendant
lsm
|
19 |
C |
|
|
27 |
2688d |
2775d
|
11/29 |
2639d |
9474f4e7cd71
Yama: Check for pid death before checking ancestry
|
|
INFO: rcu detected stall in netlink_sendmsg
netfilter
|
1 |
syz |
|
|
83 |
2655d |
2711d
|
11/29 |
2639d |
12750abad517
xfrm: policy: fix infinite loop when merging src-nodes
|
|
WARNING in __flush_work
block
|
-1 |
C |
|
|
402 |
2668d |
2674d
|
11/29 |
2639d |
2e3c18d0ada1
block: pass no-op callback to INIT_WORK().
|
|
KASAN: use-after-free Read in __smc_diag_dump
smc
|
19 |
syz |
|
|
34 |
2689d |
2702d
|
11/29 |
2639d |
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
KMSAN: uninit-value in tipc_nl_compat_doit
tipc
|
7 |
C |
|
|
153 |
2654d |
2805d
|
11/29 |
2639d |
2753ca5d9009
tipc: fix uninit-value in tipc_nl_compat_doit
|
|
general protection fault in watchdog
kernel
|
2 |
C |
|
|
1 |
2721d |
2720d
|
11/29 |
2639d |
e2c8d550a973
netfilter: ebtables: account ebt_table_info to kmemcg
|
|
KASAN: use-after-free Read in kernel_accept
smc
|
19 |
C |
|
|
19 |
2721d |
2871d
|
11/29 |
2639d |
78abe3d0dfad
net/smc: fix TCP fallback socket release
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
WARNING in __skb_flow_dissect (3)
net
|
-1 |
syz |
|
|
224 |
2689d |
2778d
|
11/29 |
2639d |
0b7959b62573
tun: publish tfile after it's fully initialized
|
|
general protection fault in fuse_dev_do_write
fuse
|
2 |
C |
|
|
134 |
2667d |
2794d
|
11/29 |
2639d |
97e1532ef81a
fuse: handle zero sized retrieve correctly
|
|
KMSAN: uninit-value in tipc_nl_compat_name_table_dump
tipc
|
7 |
C |
|
|
51 |
2725d |
2765d
|
11/29 |
2639d |
974cb0e3e7c9
tipc: fix uninit-value in tipc_nl_compat_name_table_dump
|
|
INFO: rcu detected stall in snd_pcm_oss_read
sound
|
1 |
C |
|
|
2 |
2711d |
2710d
|
11/29 |
2639d |
e190161f96b8
ALSA: pcm: Fix tight loop of OSS capture stream
|
|
BUG: unable to handle kernel paging request in dput (2)
fs
|
8 |
C |
|
|
4 |
2673d |
2674d
|
11/29 |
2639d |
36991ca68db9
blk-mq: protect debugfs_create_files() from failures
37ea7b630ae5
debugfs: debugfs_lookup() should return NULL if not found
|
|
KASAN: slab-out-of-bounds Read in batadv_interface_tx
batman
|
17 |
C |
|
|
41 |
2665d |
2704d
|
11/29 |
2639d |
9114daa825fc
batman-adv: Force mac header to start of data on xmit
|
|
general protection fault in kernel_accept
smc
|
2 |
C |
|
|
280 |
2715d |
2876d
|
11/29 |
2639d |
78abe3d0dfad
net/smc: fix TCP fallback socket release
26d92e951fe0
smc: move unhash as early as possible in smc_release()
|
|
KASAN: stack-out-of-bounds in do_raw_spin_lock
hardening
mm
|
17 |
C |
|
|
1 |
2699d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: use-after-free Read in refcount_inc_not_zero_checked
hams
|
19 |
syz |
|
|
24 |
2642d |
2702d
|
11/29 |
2639d |
63346650c1a9
netrom: switch to sock timer API
|
|
KMSAN: uninit-value in tipc_nl_compat_link_set (2)
tipc
|
7 |
C |
|
|
13 |
2675d |
2716d
|
11/29 |
2639d |
edf5ff04a457
tipc: fix uninit-value in tipc_nl_compat_link_set
|
|
KMSAN: uninit-value in tipc_nl_compat_bearer_enable
tipc
|
7 |
C |
|
|
144 |
2640d |
2765d
|
11/29 |
2639d |
0762216c0ad2
tipc: fix uninit-value in tipc_nl_compat_bearer_enable
|
|
KMSAN: uninit-value in tipc_nl_compat_link_reset_stats
tipc
|
7 |
syz |
|
|
16 |
2643d |
2696d
|
11/29 |
2639d |
8b66fee7f8ee
tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
|
|
BUG: unable to handle kernel paging request in depot_save_stack
net
|
8 |
C |
|
|
1 |
2699d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: global-out-of-bounds Read in validate_nla
wireless
|
17 |
C |
|
|
14 |
2674d |
2679d
|
11/29 |
2639d |
a8b5c6d69261
nl80211: fix NLA_POLICY_NESTED() arguments
|
|
KASAN: invalid-free in sctp_stream_free
sctp
|
24 |
C |
|
|
5 |
2661d |
2668d
|
11/29 |
2639d |
af98c5a78517
sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
|
|
BUG: unable to handle kernel NULL pointer dereference in corrupted (3)
|
10 |
C |
|
|
1 |
2696d |
2696d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: slab-out-of-bounds Read in kvm_clear_dirty_log_protect
kvm
|
17 |
C |
|
|
54 |
2690d |
2701d
|
11/29 |
2639d |
98938aa8edd6
KVM: validate userspace input in kvm_clear_dirty_log_protect()
|
|
general protection fault in __dentry_path
fs
|
2 |
C |
|
|
2082 |
2641d |
2674d
|
11/29 |
2639d |
8ed0579c12b2
kvm: properly check debugfs dentry before using it
|
|
WARNING in tcp_send_loss_probe
net
|
-1 |
C |
|
|
9 |
2649d |
2701d
|
11/29 |
2639d |
bf50b606cfd8
tcp: repaired skbs must init their tso_segs
|
|
BUG: unable to handle kernel paging request in do_csum
kernel
|
8 |
C |
|
|
11 |
2732d |
2732d
|
11/29 |
2639d |
d5be7f632bad
net-backports: net: validate untrusted gso packets without csum offload
|
|
KASAN: stack-out-of-bounds Read in pick_next_task_fair
net
|
17 |
C |
|
|
1 |
2699d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
general protection fault in icmp6_send
net
|
2 |
syz |
|
|
2 |
2700d |
2700d
|
11/29 |
2639d |
8d9336704521
ipv6: make icmp6_send() robust against null skb->dev
|
|
WARNING in batadv_is_on_batman_iface
batman
|
-1 |
syz |
|
|
10 |
2679d |
2705d
|
11/29 |
2639d |
955d3411a17f
batman-adv: Avoid WARN on net_device without parent in netns
|
|
WARNING in clear_standby
ceph
|
-1 |
C |
|
|
3522 |
2679d |
2804d
|
11/29 |
2639d |
4aac9228d164
libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
|
|
WARNING in apparmor_cred_free
apparmor
|
-1 |
C |
|
|
109 |
2686d |
2693d
|
11/29 |
2639d |
a5795fd38ee8
LSM: Check for NULL cred-security on free
|
|
KASAN: out-of-bounds Read in update_curr
hardening
mm
|
17 |
syz |
|
|
1 |
2699d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
general protection fault in team_nl_cmd_options_set
net
|
2 |
C |
|
|
7 |
2708d |
2666d
|
11/29 |
2639d |
2fdeee254923
team: avoid complex list operations in team_nl_cmd_options_set()
|
|
WARNING in wiphy_register (3)
wireless
|
-1 |
syz |
|
|
31 |
2674d |
2705d
|
11/29 |
2639d |
9c5d3afac436
mac80211_hwsim: check that n_limits makes sense
|
|
kernel panic: stack is corrupted in printk
kernel
|
2 |
C |
|
|
1 |
2699d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KMSAN: kernel-infoleak in vmx_get_nested_state
kvm-x86
|
9 |
C |
|
|
6 |
2639d |
2751d
|
11/29 |
2639d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
general protection fault in rb_erase_cached
kernel
|
2 |
C |
|
|
1 |
2699d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: stack-out-of-bounds Read in gue_err_proto_handler
net
|
17 |
C |
|
|
1 |
2696d |
2696d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KASAN: out-of-bounds Read in __switch_to
kernel
|
17 |
C |
|
|
1 |
2699d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
KMSAN: uninit-value in tipc_nl_compat_dumpit
tipc
|
7 |
C |
|
|
209 |
2654d |
2804d
|
11/29 |
2639d |
2753ca5d9009
tipc: fix uninit-value in tipc_nl_compat_doit
|
|
general protection fault in corrupted (2)
trace
perf
|
2 |
C |
|
|
2 |
2696d |
2699d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
WARNING: locking bug in corrupted
kernel
|
4 |
C |
|
|
1 |
2688d |
2688d
|
11/29 |
2639d |
44039e00171b
fou6: Prevent unbounded recursion in GUE error handler
|
|
WARNING: refcount bug in kvm_vm_ioctl
kvm
|
13 |
syz |
|
|
13 |
2673d |
2786d
|
11/29 |
2639d |
cfa39381173d
kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
|
|
KMSAN: uninit-value in gue_err
net
|
7 |
C |
|
|
4686 |
2639d |
2693d
|
11/29 |
2639d |
26fc181e6cac
fou, fou6: do not assume linear skbs
|
|
KASAN: use-after-free Read in seccomp_notify_release
kernel
|
19 |
C |
|
|
27 |
2644d |
2692d
|
11/29 |
2639d |
a811dc61559e
seccomp: fix UAF in user-trap code
|
|
KASAN: use-after-free Read in batadv_interface_tx
batman
|
19 |
C |
|
|
54 |
2666d |
2704d
|
11/29 |
2639d |
9114daa825fc
batman-adv: Force mac header to start of data on xmit
|
|
general protection fault in ip6erspan_set_version
net
|
2 |
C |
|
|
39 |
2648d |
2653d
|
11/29 |
2639d |
efcc9bcaf77c
net: ip6_gre: fix possible NULL pointer dereference in ip6erspan_set_version
|
|
WARNING in __might_sleep (2)
serial
|
-1 |
C |
|
|
36 |
2679d |
2706d
|
11/29 |
2639d |
fc01d8c61ce0
tty/n_hdlc: fix __might_sleep warning
|
|
WARNING in xfrm6_tunnel_net_exit (2)
net
|
-1 |
C |
|
|
48816 |
2648d |
2930d
|
11/29 |
2639d |
f75a2804da39
xfrm: destroy xfrm_state synchronously on net exit path
|
|
KMSAN: uninit-value in tipc_conn_rcv_sub
tipc
|
7 |
C |
|
|
557 |
2641d |
2935d
|
11/29 |
2639d |
a88289f4ddee
tipc: fix uninit-value in in tipc_conn_rcv_sub
|
|
WARNING: bad unlock balance in rxrpc_recvmsg
afs
net
|
4 |
C |
|
|
9 |
2665d |
2669d
|
11/29 |
2639d |
6dce3c20ac42
rxrpc: bad unlock balance in rxrpc_recvmsg
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (2)
sctp
|
9 |
C |
|
|
16 |
2639d |
2689d
|
11/29 |
2639d |
400b8b9a2a17
sctp: allocate sctp_sockaddr_entry with kzalloc
|
|
general protection fault in relay_open_buf
trace
block
|
2 |
C |
|
|
287 |
2672d |
2673d
|
11/29 |
2639d |
2c1cf00eeacb
relay: check return of create_buf_file() properly
|
|
KMSAN: uninit-value in gue6_err
net
|
7 |
C |
|
|
8359 |
2639d |
2693d
|
11/29 |
2639d |
26fc181e6cac
fou, fou6: do not assume linear skbs
|
|
general protection fault in ebitmap_destroy
selinux
|
2 |
syz |
|
|
1 |
2694d |
2694d
|
11/29 |
2639d |
5b0e7310a2a3
selinux: fix GPF on invalid policy
|
|
general protection fault in debugfs_create_files
block
|
2 |
C |
|
|
111 |
2672d |
2673d
|
11/29 |
2639d |
36991ca68db9
blk-mq: protect debugfs_create_files() from failures
|
|
general protection fault in kvm_ioapic_scan_entry
kvm-x86
|
2 |
C |
|
|
148 |
2733d |
2843d
|
11/29 |
2645d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
general protection fault in finish_wait
net
|
2 |
C |
|
|
22 |
2663d |
2878d
|
11/29 |
2645d |
78abe3d0dfad
net/smc: fix TCP fallback socket release
|
|
KASAN: slab-out-of-bounds Write in fpstate_init
kernel
|
21 |
C |
|
|
15088 |
2710d |
2712d
|
11/29 |
2645d |
ed8e48122728
KVM: x86: fix size of x86_fpu_cache objects
|
|
KASAN: out-of-bounds Write in tls_push_record
net
|
21 |
C |
|
|
10 |
2779d |
2880d
|
11/29 |
2646d |
d829e9c4112b
tls: convert to generic sk_msg interface
|
|
kernel BUG at include/linux/mm.h:LINE! (2)
net
|
-1 |
C |
|
|
1009 |
2646d |
2909d
|
11/29 |
2646d |
d829e9c4112b
tls: convert to generic sk_msg interface
|
|
KASAN: use-after-free Write in tls_push_record (2)
net
|
22 |
C |
|
|
64 |
2774d |
2876d
|
11/29 |
2646d |
d829e9c4112b
tls: convert to generic sk_msg interface
|
|
KASAN: use-after-free Read in __list_add_valid (5)
rdma
|
19 |
C |
|
|
16 |
2978d |
2984d
|
11/29 |
2652d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
|
KASAN: use-after-free Read in bpf_cgroup_storage_release
bpf
|
19 |
C |
|
|
2 |
2854d |
2854d
|
11/29 |
2655d |
82c018d734a7
Merge branch 'bpf-cgroup-local-storage'
|
|
general protection fault in list_lru_count_one
mm
|
2 |
C |
|
|
12 |
2872d |
2870d
|
11/29 |
2678d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
WARNING in __debug_object_init (3)
bpf
net
|
-1 |
C |
|
|
1557 |
2766d |
2768d
|
11/29 |
2683d |
2cb494a36c98
bpf: add tests for direct packet access from CGROUP_SKB
|
|
general protection fault in keyctl_pkey_params_get
keyrings
lsm
|
2 |
C |
|
|
85 |
2702d |
2761d
|
11/29 |
2688d |
57b0e3145320
KEYS: fix parsing invalid pkey info string
94c13f66e13c
security: don't use a negative Opt_err token index
|
|
general protection fault in encode_rpcb_string
net
nfs
|
2 |
C |
|
|
6 |
2865d |
2962d
|
11/29 |
2688d |
81c88b18de1f
sunrpc: handle ENOMEM in rpcb_getport_async
|
|
KMSAN: uninit-value in vti6_tnl_xmit
net
|
7 |
syz |
|
|
60 |
2693d |
2716d
|
11/29 |
2688d |
cb9f1b783850
ip: validate header length on virtual device xmit
|
|
general protection fault in lo_ioctl (2)
block
|
2 |
syz |
|
|
2 |
2947d |
2947d
|
11/29 |
2688d |
310ca162d779
block/loop: Use global lock for ioctl() operation.
|
|
inconsistent lock state in nr_find_socket
hams
|
4 |
C |
|
|
19 |
2690d |
2706d
|
11/29 |
2688d |
7314f5480f3e
netrom: fix locking in nr_find_socket()
|
|
KASAN: invalid-free in x25_asy_free
net
|
24 |
C |
|
|
67 |
2700d |
2706d
|
11/29 |
2688d |
d5c7c745f254
net/wan: fix a double free in x25_asy_open_tty()
|
|
WARNING in kmem_cache_create_usercopy
v9fs
|
-1 |
C |
|
|
10 |
2704d |
2762d
|
11/29 |
2688d |
574d356b7a02
9p/net: put a lower bound on msize
|
|
possible deadlock in blkdev_reread_part
block
|
4 |
C |
|
|
5736 |
2707d |
3128d
|
11/29 |
2688d |
0da03cab87e6
loop: Fix deadlock when calling blkdev_reread_part()
85b0a54a82e4
loop: Move loop_reread_partitions() out of loop_ctl_mutex
|
|
KMSAN: uninit-value in check_6rd
net
|
7 |
C |
|
|
81 |
2694d |
2716d
|
11/29 |
2688d |
cb9f1b783850
ip: validate header length on virtual device xmit
|
|
WARNING: locking bug in loop_control_ioctl
block
|
4 |
C |
|
|
4018 |
2728d |
2755d
|
11/29 |
2688d |
628bd8594709
loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
|
|
WARNING: ODEBUG bug in tipc_enable_bearer
tipc
|
-1 |
C |
|
|
3 |
2709d |
2712d
|
11/29 |
2688d |
dc4501ff2875
tipc: fix a double free in tipc_enable_bearer()
|
|
kernel BUG at kernel/time/timer.c:LINE! (2)
hams
|
-1 |
C |
|
|
5 |
2701d |
2703d
|
11/29 |
2688d |
202700e30740
net/hamradio/6pack: use mod_timer() to rearm timers
|
|
KASAN: slab-out-of-bounds Read in tun_net_xmit (2)
net
|
17 |
C |
|
|
10 |
2704d |
2872d
|
11/29 |
2688d |
aff6db454599
ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
|
|
KASAN: use-after-free Read in nr_rx_frame
hams
|
19 |
syz |
|
|
2 |
2695d |
2702d
|
11/29 |
2688d |
7314f5480f3e
netrom: fix locking in nr_find_socket()
|
|
possible deadlock in nr_destroy_socket
hams
|
4 |
syz |
|
|
20 |
2691d |
2702d
|
11/29 |
2688d |
7314f5480f3e
netrom: fix locking in nr_find_socket()
|
|
KASAN: use-after-free Read in posix_lock_inode
fs
|
19 |
syz |
|
|
5 |
2702d |
2702d
|
11/29 |
2688d |
bf77ae4c98d7
locks: fix error in locks_move_blocks()
|
|
general protection fault in transparent_hugepage_enabled
mm
|
2 |
C |
|
|
626 |
2702d |
2710d
|
11/29 |
2688d |
7635d9cbe832
mm, thp, proc: report THP eligibility for each vma
|
|
KMSAN: kernel-infoleak in capi_unlocked_ioctl
net
|
9 |
C |
|
|
109 |
2693d |
2703d
|
11/29 |
2688d |
d63967e475ae
isdn: fix kernel-infoleak in capi_unlocked_ioctl
|
|
KASAN: user-memory-access Write in n_tty_set_termios
serial
|
21 |
C |
|
|
85 |
2707d |
2977d
|
11/29 |
2688d |
83d817f41070
tty: Hold tty_ldisc_lock() during tty_reopen()
|
|
KASAN: use-after-free Read in ax25_fillin_cb
hams
|
19 |
syz |
|
|
4 |
2709d |
2706d
|
11/29 |
2688d |
c433570458e4
ax25: fix a use-after-free in ax25_fillin_cb()
|
|
KASAN: use-after-free Read in locks_delete_block
fs
|
19 |
syz |
|
|
4 |
2729d |
2752d
|
11/29 |
2688d |
16306a61d3b7
fs/locks: always delete_block after waiting.
|
|
general protection fault in fdb_find_rcu
bridge
|
2 |
C |
|
|
3 |
2709d |
2705d
|
11/29 |
2688d |
f989d03ef25d
net: rtnetlink: address is mandatory for rtnl_fdb_get
|
|
general protection fault in kvm_arch_vcpu_ioctl_run
kvm-x86
|
2 |
C |
|
|
12 |
2715d |
2731d
|
11/29 |
2693d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
general protection fault in __vb2_queue_free
media
|
2 |
C |
|
|
38 |
2709d |
2765d
|
11/29 |
2693d |
62dcb4f41836
media: vb2: check memory model for VIDIOC_CREATE_BUFS
|
|
WARNING in static_key_disable_cpuslocked
kernel
|
-1 |
syz |
|
|
5 |
2729d |
2748d
|
11/29 |
2693d |
9c48060141bd
udp: fix jump label misuse
|
|
BUG: corrupted list in ___neigh_create
net
|
8 |
C |
|
|
706 |
2722d |
2725d
|
11/29 |
2693d |
8cc196d6ef86
neighbor: gc_list changes should be protected by table lock
|
|
WARNING in __rcu_read_unlock
kernel
|
-1 |
C |
|
|
2 |
2712d |
2719d
|
11/29 |
2693d |
11789039da53
fou: Prevent unbounded recursion in GUE error handler
|
|
BUG: corrupted list in neigh_mark_dead
net
|
8 |
C |
|
|
4117 |
2722d |
2725d
|
11/29 |
2693d |
8cc196d6ef86
neighbor: gc_list changes should be protected by table lock
|
|
KMSAN: kernel-infoleak in sctp_getsockopt
sctp
|
9 |
syz |
|
|
147 |
2693d |
2729d
|
11/29 |
2693d |
4a2eb0c37b47
sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
|
|
KASAN: use-after-free Read in tipc_group_bc_cong
tipc
|
19 |
C |
|
|
280 |
2714d |
2725d
|
11/29 |
2693d |
143ece654f9f
tipc: check tsk->group in tipc_wait_for_cond()
|
|
KASAN: use-after-free Read in tipc_mcast_xmit
tipc
|
19 |
syz |
|
|
7 |
2711d |
2718d
|
11/29 |
2693d |
3c6306d44082
tipc: check group dests after tipc_wait_for_cond()
|
|
KMSAN: uninit-value in __inet6_bind
net
|
7 |
C |
|
|
56 |
2694d |
2724d
|
11/29 |
2693d |
fb2427454631
ipv6: explicitly initialize udp6_addr in udp_sock_create6()
|
|
INFO: task hung in flush_workqueue
media
|
1 |
C |
|
|
293 |
2712d |
2763d
|
11/29 |
2693d |
52117be68b82
media: vim2m: use cancel_delayed_work_sync instead of flush_schedule_work
|
|
KASAN: null-ptr-deref Write in kthread_stop
media
|
12 |
C |
|
|
2527 |
2709d |
2767d
|
11/29 |
2693d |
701f49bc028e
media: vivid: fix error handling of kthread_run
|
|
KASAN: use-after-free Read in kfree_skb (2)
tipc
|
19 |
C |
|
|
66 |
2715d |
2724d
|
11/29 |
2693d |
acb4a33e9856
tipc: fix a double kfree_skb()
|
|
BUG: sleeping function called from invalid context at mm/slab.h:LINE (4)
crypto
|
-1 |
C |
|
|
36 |
2718d |
2878d
|
11/29 |
2693d |
f9c9bdb5131e
crypto: x86/chacha - avoid sleeping under kernel_fpu_begin()
|
|
general protection fault in inet_lhash2_lookup
net
|
2 |
C |
|
|
1137 |
2717d |
2720d
|
11/29 |
2693d |
eedbbb0d98b2
net: dccp: initialize (addr,port) listening hashtable
|
|
KASAN: use-after-free Read in kvm_put_kvm
kvm
|
19 |
C |
|
|
143 |
2715d |
2775d
|
11/29 |
2693d |
987d1149be7d
KVM: fix unregistering coalesced mmio zone from wrong bus
|
|
general protection fault in inet6_lhash2_lookup
net
|
2 |
C |
|
|
718 |
2717d |
2720d
|
11/29 |
2693d |
eedbbb0d98b2
net: dccp: initialize (addr,port) listening hashtable
|
|
KASAN: use-after-free Read in neigh_mark_dead
net
|
19 |
C |
|
|
858 |
2722d |
2725d
|
11/29 |
2693d |
8cc196d6ef86
neighbor: gc_list changes should be protected by table lock
|
|
WARNING in rds_message_alloc_sgs
rds
|
-1 |
C |
|
|
6 |
2731d |
2765d
|
11/29 |
2693d |
ea010070d0a7
net/rds: fix warn in rds_message_alloc_sgs
|
|
WARNING in vkms_plane_duplicate_state
dri
|
-1 |
C |
|
|
108 |
2710d |
2742d
|
11/29 |
2693d |
7cdf33ab02e0
drm/vkms: Fix plane duplicate_state
|
|
divide error in vivid_vid_cap_s_dv_timings
media
|
2 |
C |
|
|
108 |
2709d |
2766d
|
11/29 |
2693d |
9729d6d282a6
media: vivid: set min width/height to a value > 0
|
|
KASAN: use-after-free Read in vb2_mmap
media
|
19 |
C |
|
|
276 |
2709d |
2766d
|
11/29 |
2693d |
cd26d1c4d1bc
media: vb2: vb2_mmap: move lock up
|
|
general protection fault in __ipv6_sock_mc_join
net
|
2 |
C |
|
|
9 |
2720d |
2724d
|
11/29 |
2693d |
fb83ed496b9a
tipc: compare remote and local protocols in tipc_udp_enable()
|
|
BUG: pagefault on kernel address ADDR in non-whitelisted uaccess
media
|
-1 |
C |
|
|
17 |
2718d |
2763d
|
11/29 |
2693d |
560ccb75c2ca
media: vivid: free bitmap_cap when updating std/timings/etc.
|
|
KASAN: global-out-of-bounds Read in tpg_print_str_4
media
|
17 |
C |
|
|
52 |
2731d |
2756d
|
11/29 |
2693d |
e5f71a27fa12
media: v4l2-tpg: array index could become negative
|
|
KASAN: use-after-free Read in ___neigh_create
net
|
19 |
C |
|
|
164 |
2722d |
2725d
|
11/29 |
2693d |
8cc196d6ef86
neighbor: gc_list changes should be protected by table lock
|
|
WARNING in fuse_destroy_inode
fuse
|
-1 |
C |
|
|
7 |
2747d |
2748d
|
11/29 |
2707d |
4fc4bb796b0c
fuse: Add bad inode check in fuse_destroy_inode()
|
|
WARNING in userfaultfd_ioctl
mm
fs
|
-1 |
C |
|
|
11 |
2721d |
2731d
|
11/29 |
2707d |
01e881f5a1fc
userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered
|
|
KASAN: use-after-free Read in vhost_transport_send_pkt
kvm
net
virt
|
19 |
syz |
|
|
36 |
2731d |
2857d
|
11/29 |
2716d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in delayed_uprobe_remove
perf
trace
|
19 |
C |
|
|
2 |
2760d |
2763d
|
11/29 |
2716d |
1aed58e67a6e
Uprobes: Fix kernel oops with delayed_uprobe_remove()
|
|
KMSAN: kernel-infoleak in _copy_to_iter (4)
net
|
9 |
C |
|
|
56 |
2731d |
2735d
|
11/29 |
2716d |
688838934c23
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
|
|
KASAN: use-after-free Read in sctp_epaddr_lookup_transport
sctp
|
19 |
syz |
|
|
5 |
2747d |
2748d
|
11/29 |
2716d |
fb6df5a6234c
sctp: kfree_rcu asoc
|
|
KASAN: use-after-free Read in vhost_work_queue
kvm
net
virt
|
19 |
syz |
|
|
30 |
2729d |
2828d
|
11/29 |
2716d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
KASAN: use-after-free Read in vhost_transport_cancel_pkt
kvm
net
virt
|
19 |
syz |
|
|
17 |
2755d |
2800d
|
11/29 |
2716d |
834e772c8db0
vhost/vsock: fix use-after-free in network stack callers
|
|
WARNING in alloc_pages_vma
mm
|
-1 |
C |
|
|
98 |
2725d |
2728d
|
11/29 |
2716d |
356ff8a9a78f
Revert "mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask"
|
|
WARNING in cttimeout_default_get
netfilter
|
-1 |
C |
|
|
44 |
2728d |
2748d
|
11/29 |
2728d |
89259088c1b7
netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
|
|
WARNING in format_decode (2)
trace
|
-1 |
C |
|
|
16 |
2747d |
2829d
|
11/29 |
2728d |
1efb6ee3edea
bpf: fix check of allowed specifiers in bpf_trace_printk
|
|
KMSAN: uninit-value in linear_transfer (2)
sound
|
7 |
C |
|
|
7 |
2733d |
2756d
|
11/29 |
2728d |
65766ee0bf7f
ALSA: oss: Use kvzalloc() for local buffer allocations
|
|
KMSAN: kernel-infoleak in kvm_write_guest_page
kvm
|
9 |
C |
|
|
36 |
2730d |
2757d
|
11/29 |
2728d |
bcbfbd8ec210
KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
|
|
BUG: GPF in non-whitelisted uaccess (non-canonical address?)
input
|
-1 |
C |
|
|
10 |
2746d |
2753d
|
11/29 |
2728d |
8c01db7619f0
HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
|
|
KASAN: slab-out-of-bounds Write in queue_stack_map_push_elem
bpf
|
21 |
C |
|
|
30 |
2737d |
2739d
|
11/29 |
2728d |
813961de3ee6
bpf: fix integer overflow in queue_stack_map
|
|
WARNING in bpf_check (2)
bpf
|
-1 |
C |
|
|
9 |
2750d |
2750d
|
11/29 |
2728d |
afd594240806
bpf: fix off-by-one error in adjust_subprog_starts
|
|
INFO: task hung in fuse_sb_destroy
fuse
|
1 |
C |
|
|
2 |
2764d |
2764d
|
11/29 |
2728d |
7fabaf303458
fuse: fix leaked notify reply
|
|
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl
kvm-x86
|
9 |
C |
|
|
31 |
2733d |
2748d
|
11/29 |
2728d |
7f9ad1dfa3c7
KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
|
|
general protection fault in icmp_timeout_obj_to_nlattr
netfilter
|
2 |
C |
|
|
13 |
2760d |
2764d
|
11/29 |
2752d |
8866df9264a3
netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattr
|
|
general protection fault in addr_resolve
rdma
|
2 |
C |
|
|
32 |
2788d |
2805d
|
11/29 |
2752d |
fe33507ec38a
RDMA/core: Check error status of rdma_find_ndev_for_src_ip_rcu
|
|
KMSAN: uninit-value in synaptics_detect
input
|
7 |
C |
|
|
137 |
2752d |
2805d
|
11/29 |
2752d |
f39f8688888a
Input: synaptics - avoid using uninitialized variable when probing
|
|
KMSAN: uninit-value in dev_mc_add_excl
net
|
7 |
C |
|
|
13 |
2757d |
2769d
|
11/29 |
2752d |
da71577545a5
rtnetlink: Disallow FDB configuration for non-Ethernet device
|
|
KASAN: stack-out-of-bounds Read in __aa_lookupn_ns
apparmor
|
17 |
C |
|
|
52 |
2768d |
2800d
|
11/29 |
2752d |
250f2da49cb8
apparmor: Fix uninitialized value in aa_split_fqname
|
|
KASAN: slab-out-of-bounds Read in sctp_getsockopt
sctp
|
17 |
C |
|
|
9 |
2770d |
2769d
|
11/29 |
2752d |
713358369382
sctp: check policy more carefully when getting pr status
|
|
WARNING in __put_task_struct (2)
mm
|
-1 |
C |
|
|
17 |
2779d |
2787d
|
11/29 |
2752d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
KASAN: invalid-free in p9stat_free
v9fs
|
24 |
C |
|
|
3 |
2830d |
2830d
|
11/29 |
2752d |
62e3941776fe
9p: clear dangling pointers in p9stat_free
81c99089bce6
v9fs_dir_readdir: fix double-free on p9stat_read error
|
|
BUG: corrupted list in cpu_stop_queue_work
kernel
|
8 |
C |
|
|
24 |
2871d |
2880d
|
11/29 |
2752d |
552446a41661
shmem: Convert shmem_add_to_page_cache to XArray
|
|
KMSAN: uninit-value in dev_uc_add_excl
net
|
7 |
C |
|
|
20 |
2764d |
2805d
|
11/29 |
2752d |
da71577545a5
rtnetlink: Disallow FDB configuration for non-Ethernet device
|
|
general protection fault in rb_erase
integrity
lsm
|
2 |
C |
|
|
79836 |
2759d |
2800d
|
11/29 |
2752d |
18aded174920
ext4: fix EXT4_IOC_SWAP_BOOT
|
|
KASAN: use-after-free Read in tcf_block_find
net
|
19 |
C |
|
|
27 |
2793d |
2799d
|
11/29 |
2752d |
460b360104d5
net_sched: fix a crash in tc_new_tfilter()
|
|
KASAN: use-after-free Read in _copy_from_iter
v9fs
|
19 |
C |
|
|
12 |
2856d |
2868d
|
11/29 |
2752d |
728356dedeff
9p: Add refcount to p9_req_t
|
|
KASAN: use-after-free Read in gfs2_log_flush
gfs2
|
19 |
syz |
|
|
14 |
2773d |
2814d
|
11/29 |
2752d |
4c62bd9cea7b
gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd
|
|
general protection fault in getname_kernel
gfs2
|
2 |
C |
|
|
10 |
2780d |
2788d
|
11/29 |
2752d |
3df629d873f8
gfs2_meta: ->mount() can get NULL dev_name
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE!
overlayfs
|
-1 |
C |
|
|
10 |
2753d |
2785d
|
11/29 |
2752d |
babf4770be0a
ovl: fix error handling in ovl_verify_set_fh()
|
|
general protection fault in __skb_flow_dissect (2)
net
|
2 |
C |
|
|
11 |
2800d |
2808d
|
11/29 |
2752d |
d0e13a1488ad
flow_dissector: lookup netns by skb->sk if skb->dev is NULL
|
|
general protection fault in ctnetlink_alloc_filter
netfilter
|
2 |
C |
|
|
80 |
2802d |
2805d
|
11/29 |
2752d |
9306425b70bf
netfilter: ctnetlink: must check mark attributes vs NULL
|
|
WARNING: kmalloc bug in krealloc
fs
|
-1 |
C |
|
|
2 |
2872d |
2872d
|
11/29 |
2752d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
WARNING: kmalloc bug in __v9fs_get_acl
v9fs
|
-1 |
C |
|
|
212 |
2770d |
2877d
|
11/29 |
2752d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue
block
|
10 |
C |
|
|
8 |
2779d |
2799d
|
11/29 |
2752d |
e01ad46d53b5
blk-mq: fallback to previous nr_hw_queues when updating fails
|
|
WARNING: kmalloc bug in str_read
selinux
|
-1 |
C |
|
|
11 |
2774d |
2818d
|
11/29 |
2752d |
4458bba09788
selinux: Add __GFP_NOWARN to allocation at str_read()
|
|
KMSAN: uninit-value in ip_tunnel_lookup (2)
net
|
7 |
C |
|
|
2 |
2770d |
2771d
|
11/29 |
2752d |
b0350d51f001
ip_gre: fix parsing gre header in ipgre_err
|
|
KASAN: use-after-free Read in sha512_ctx_mgr_resubmit
crypto
|
19 |
C |
|
|
4 |
2791d |
2841d
|
11/29 |
2752d |
ab8085c130ed
crypto: x86 - remove SHA multibuffer routines and mcryptd
|
|
kernel BUG at mm/shmem.c:LINE!
mm
|
-1 |
C |
|
|
30 |
2879d |
2881d
|
11/29 |
2752d |
552446a41661
shmem: Convert shmem_add_to_page_cache to XArray
|
|
KASAN: null-ptr-deref Read in refcount_sub_and_test_checked
media
|
11 |
C |
|
|
31 |
2760d |
2791d
|
11/29 |
2752d |
fda21d46cce2
ipv6: do not leave garbage in rt->fib6_metrics
|
|
WARNING in tcp_cleanup_ulp
net
|
-1 |
syz |
|
|
16 |
2779d |
2779d
|
11/29 |
2752d |
aadd4355918f
tcp, ulp: remove socket lock assertion on ULP cleanup
|
|
WARNING: kmalloc bug in input_mt_init_slots
input
|
-1 |
C |
|
|
54 |
2770d |
2804d
|
11/29 |
2752d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
general protection fault in dev_gro_receive (2)
net
|
2 |
syz |
|
|
4 |
2777d |
2784d
|
11/29 |
2752d |
ece23711dd95
net: Properly unlink GRO packets on overflow.
|
|
WARNING: kmalloc bug in get_valid_checkpoint
f2fs
|
-1 |
syz |
|
|
2 |
2938d |
2938d
|
11/29 |
2752d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
WARNING in tcp_close
net
|
-1 |
syz |
|
|
284 |
2773d |
2873d
|
11/29 |
2752d |
8873c064d1de
tcp: do not release socket ownership in tcp_close()
|
|
BUG: corrupted list in p9_read_work
v9fs
|
8 |
syz |
|
|
23 |
2760d |
2872d
|
11/29 |
2752d |
e4ca13f7d075
9p/trans_fd: abort p9_read_work if req status changed
|
|
KASAN: use-after-free Read in fuse_dev_do_read
fuse
|
19 |
syz |
|
|
19 |
2765d |
2813d
|
11/29 |
2752d |
bc78abbd55dd
fuse: Fix use-after-free in fuse_dev_do_read()
|
|
WARNING: kmalloc bug in vfs_getxattr_alloc
fs
|
-1 |
C |
|
|
9 |
2827d |
2870d
|
11/29 |
2752d |
61448479a9f2
mm: don't warn about large allocations for slab
|
|
WARNING: kmalloc bug in bfs_fill_super
bfs
|
-1 |
C |
|
|
147 |
2935d |
2979d
|
11/29 |
2752d |
9f2df09a33aa
bfs: add sanity check at bfs_fill_super()
|
|
INFO: task hung in ext4_fallocate
ext4
|
1 |
C |
|
|
1 |
2795d |
2794d
|
11/29 |
2752d |
f18b2b83a727
ext4: fix argument checking in EXT4_IOC_MOVE_EXT
|
|
KMSAN: uninit-value in vcs_read
serial
|
7 |
C |
|
|
2343 |
2909d |
2933d
|
11/29 |
2756d |
21eff69aaaa0
vt: prevent leaking uninitialized data to userspace via /dev/vcs*
|
|
WARNING in usb_submit_urb (3)
usb
|
-1 |
C |
|
|
58 |
2767d |
2783d
|
11/29 |
2766d |
665c365a77fb
USB: fix the usbfs flag sanitization for control transfers
|
|
KMSAN: kernel-infoleak in _copy_to_iter (3)
net
|
9 |
C |
|
|
36 |
2766d |
2777d
|
11/29 |
2766d |
b06f9d9f1a90
tipc: fix info leak from kernel tipc_event
|
|
KASAN: slab-out-of-bounds Read in fscache_alloc_cookie
fs
|
17 |
C |
|
|
1936 |
2777d |
2879d
|
11/29 |
2766d |
1ff22883b0b2
fscache: Fix incomplete initialisation of inline key space
fa520c47eaa1
fscache: Fix out of bound read in long cookie keys
|
|
KASAN: slab-out-of-bounds Read in vhci_hub_control
usb
|
17 |
C |
|
|
43 |
2776d |
2821d
|
11/29 |
2766d |
81f7567c51ad
usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
|
|
BUG: sleeping function called from invalid context at net/core/dev.c:LINE
bpf
|
-1 |
syz |
|
|
8 |
2779d |
2787d
|
11/29 |
2766d |
cee271678d0e
xsk: do not call synchronize_net() under RCU read lock
|
|
KASAN: slab-out-of-bounds Read in _decode_session6
net
|
17 |
C |
|
|
35 |
2766d |
2824d
|
11/29 |
2766d |
9f7e43da6ae4
net/xfrm: fix out-of-bounds packet access
|
|
kernel BUG at net/core/dev.c:LINE! (2)
net
|
-1 |
syz |
|
|
2 |
2786d |
2786d
|
11/29 |
2777d |
52b5d6f5dcf0
net: make skb_partial_csum_set() more robust against overflows
|
|
KASAN: use-after-free Read in finish_task_switch
kernel
|
19 |
C |
|
|
3047 |
2802d |
2846d
|
11/29 |
2780d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in __skb_flow_dissect
net
|
-1 |
syz |
|
|
3 |
2785d |
2786d
|
11/29 |
2784d |
af3fb24eecb2
tun: napi flags belong to tfile
|
|
general protection fault in dev_gro_receive
net
|
2 |
syz |
|
|
8 |
2786d |
2798d
|
11/29 |
2784d |
af3fb24eecb2
tun: napi flags belong to tfile
|
|
possible deadlock in flush_workqueue
net
|
4 |
C |
|
|
73762 |
2791d |
2834d
|
11/29 |
2784d |
d4859d749aa7
net-backports: bonding: avoid possible dead-lock
|
|
KASAN: use-after-free Read in rawv6_sendmsg
net
|
19 |
C |
|
|
84 |
2786d |
2818d
|
11/29 |
2784d |
a688caa34beb
net-backports: ipv6: take rcu lock in rawv6_send_hdrinc()
|
|
WARNING in pcpu_alloc
bpf
|
-1 |
C |
|
|
4 |
2786d |
2794d
|
11/29 |
2784d |
b0584ea66d73
bpf: don't accept cgroup local storage with zero value size
|
|
KASAN: use-after-free Write in ucma_put_ctx
rdma
|
22 |
syz |
|
|
11 |
2800d |
2819d
|
11/29 |
2784d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
|
general protection fault in usb_find_alt_setting (2)
usb
|
2 |
C |
|
|
53 |
2800d |
2822d
|
11/29 |
2784d |
c9a4cb204e9e
USB: handle NULL config in usb_find_alt_setting()
|
|
KASAN: use-after-free Read in ip_cmsg_recv_offset
net
|
19 |
C |
|
|
9 |
2794d |
2796d
|
11/29 |
2784d |
64199fc0a46b
net-backports: ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
|
|
possible deadlock in team_vlan_rx_add_vid
net
|
4 |
syz |
|
|
5 |
2814d |
2848d
|
11/29 |
2784d |
471b83bd8bbe
team: Forbid enslaving team device to itself
|
|
general protection fault in ubifs_mount
fs
mtd
|
2 |
C |
|
|
216 |
2805d |
2822d
|
11/29 |
2784d |
37f31b6ca431
ubifs: Check for name being NULL while mounting
|
|
KMSAN: uninit-value in ip6_tnl_start_xmit
net
|
7 |
C |
|
|
69 |
2798d |
2808d
|
11/29 |
2784d |
76c0ddd8c3a6
ip6_tunnel: be careful when accessing the inner header
|
|
KASAN: use-after-free Read in destroy_async_on_interface
usb
|
19 |
C |
|
|
134 |
2800d |
2822d
|
11/29 |
2784d |
bd729f9d67aa
USB: fix error handling in usb_driver_claim_interface()
|
|
WARNING in usb_submit_urb (2)
usb
|
-1 |
C |
|
|
259 |
2785d |
2822d
|
11/29 |
2784d |
7a68d9fb8510
USB: usbdevfs: sanitize flags more
|
|
KASAN: use-after-free Read in cma_bind_port
rdma
|
19 |
syz |
|
|
2 |
2814d |
2819d
|
11/29 |
2784d |
5fe23f262e05
ucma: fix a use-after-free in ucma_resolve_ip()
|
|
KMSAN: uninit-value in pppoe_rcv
net
|
7 |
C |
|
|
2 |
2944d |
2814d
|
11/29 |
2784d |
8540827ebac6
pppoe: fix reception of frames with no mac header
|
|
WARNING: suspicious RCU usage in inet_csk_route_req
net
|
4 |
C |
|
|
43 |
2792d |
3026d
|
11/29 |
2784d |
1ad98e9d1bdf
tcp/dccp: fix lockdep issue when SYN is backlogged
|
|
KMSAN: kernel-infoleak in _copy_to_iter (2)
net
|
9 |
C |
|
|
7 |
2793d |
2820d
|
11/29 |
2788d |
45c180bc29ba
xfrm_user: prevent leaking 2 bytes of kernel memory
|
|
general protection fault in rhashtable_walk_start_check
tipc
|
2 |
C |
|
|
112 |
2813d |
2824d
|
10/29 |
2799d |
8f5c5fcf3533
tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
|
|
WARNING in try_charge
xfs
cgroups
mm
|
-1 |
syz |
|
|
649 |
2799d |
2852d
|
10/29 |
2799d |
3100dab2aa09
mm: memcontrol: print proper OOM header when no eligible victim left
|
|
divide error in nbd_ioctl
nbd
|
2 |
C |
|
|
50 |
2814d |
2822d
|
10/29 |
2799d |
bc811f05d77f
nbd: don't allow invalid blocksize settings
|
|
WARNING in apparmor_secid_to_secctx
apparmor
|
-1 |
C |
|
|
3344 |
2812d |
2827d
|
10/29 |
2799d |
edf4e7b7b910
apparmor: fix bad debug check in apparmor_secid_to_secctx()
|
|
general protection fault in ovl_free_fs
overlayfs
exfat
|
2 |
C |
|
|
4 |
2817d |
2819d
|
10/29 |
2799d |
8c25741aaad8
ovl: fix oopses in ovl_fill_super() failure paths
|
|
KMSAN: uninit-value in snd_midi_event_encode_byte
sound
|
7 |
C |
|
|
3 |
2823d |
2823d
|
10/29 |
2799d |
5a7b44a8df82
ALSA: rawmidi: Initialize allocated buffers
|
|
KASAN: use-after-free Read in __rhashtable_lookup (2)
rds
|
19 |
C |
|
|
22 |
2813d |
2833d
|
10/29 |
2799d |
cc4dfb7f70a3
rds: fix two RCU related problems
|
|
general protection fault in rhashtable_walk_exit
tipc
|
2 |
C |
|
|
8 |
2813d |
2816d
|
10/29 |
2799d |
12a78b026f87
tipc: check return value of __tipc_dump_start()
|
|
KASAN: use-after-free Read in sock_i_ino
tipc
|
19 |
syz |
|
|
127 |
2812d |
2822d
|
10/29 |
2799d |
0a3b8b2b215f
tipc: orphan sock in tipc_release()
|
|
BUG: unable to handle kernel paging request in kfree (2)
mm
|
8 |
C |
|
|
297 |
2827d |
2879d
|
10/29 |
2802d |
7913690dcc5e
net/9p/client.c: version pointer uninitialized
|
|
KMSAN: uninit-value in memcmp (2)
net
|
7 |
C |
|
|
131 |
2813d |
2804d
|
10/29 |
2802d |
77d36398d99f
net: fix uninit-value in __hw_addr_add_ex()
|
|
WARNING in wiphy_register (2)
wireless
|
-1 |
C |
|
|
8 |
2840d |
2841d
|
10/29 |
2815d |
484004339d45
mac80211_hwsim: require at least one channel
|
|
KASAN: use-after-free Read in tipc_group_fill_sock_diag
tipc
|
19 |
syz |
|
|
35 |
2820d |
2838d
|
10/29 |
2815d |
9a07efa9aea2
tipc: switch to rhashtable iterator
|
|
WARNING in __fsnotify_recalc_mask
fs
|
-1 |
syz |
|
|
9 |
2837d |
2838d
|
10/29 |
2815d |
d3bc0fa8411c
fsnotify: fix false positive warning on inode delete
|
|
KASAN: use-after-free Read in sctp_transport_get_next
sctp
|
19 |
C |
|
|
6 |
2830d |
2833d
|
10/29 |
2815d |
bab1be79a516
sctp: hold transport before accessing its asoc in sctp_transport_get_next
|
|
KASAN: stack-out-of-bounds Read in __schedule
ext4
|
17 |
syz |
|
|
4 |
2826d |
2828d
|
10/29 |
2815d |
b845c898b2f1
bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
|
|
INFO: task hung in fsnotify_mark_destroy_workfn
fs
|
1 |
syz |
|
|
13 |
2847d |
2961d
|
10/29 |
2818d |
128f38041035
android: binder: Rate-limit debug and userspace triggered err msgs
|
|
WARNING in up_write
ext4
|
-1 |
C |
|
|
725 |
2928d |
2976d
|
8/29 |
2821d |
d7d760efad70
locking/rwsem: Add a new RWSEM_ANONYMOUSLY_OWNED flag
|
|
BUG: soft lockup in d_walk
fs
|
1 |
C |
|
|
163 |
2906d |
2952d
|
8/29 |
2821d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
|
general protection fault in vsscanf
v9fs
|
2 |
C |
|
|
7 |
2847d |
2877d
|
8/29 |
2822d |
10aa14527f45
9p: fix multiple NULL-pointer-dereferences
|
|
WARNING in input_alloc_absinfo
input
|
-1 |
C |
|
|
318 |
2831d |
2903d
|
8/29 |
2828d |
100294cee9a9
Input: do not use WARN() in input_alloc_absinfo()
|
|
KASAN: use-after-free Read in ip6_hold_safe
net
|
19 |
C |
|
|
1 |
2854d |
2854d
|
8/29 |
2828d |
6d37fa49da1e
l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
|
|
general protection fault in process_init_reply
fuse
|
2 |
C |
|
|
24 |
2835d |
2870d
|
8/29 |
2828d |
e8f3bd773d22
fuse: Fix oops at process_init_reply()
|
|
WARNING: suspicious RCU usage in bpf_prog_array_copy_core
bpf
|
4 |
C |
|
|
22873 |
2829d |
2843d
|
8/29 |
2828d |
965931e3a803
bpf: fix a rcu usage warning in bpf_prog_array_copy_core()
|
|
WARNING: lock held when returning to user space in fuse_lock_inode
fuse
|
4 |
C |
|
|
1439 |
2834d |
2875d
|
8/29 |
2828d |
63576c13bd17
fuse: fix initial parallel dirops
|
|
WARNING: refcount bug in llc_sap_find
net
|
13 |
C |
|
|
18 |
2848d |
2849d
|
8/29 |
2828d |
0dcb82254d65
llc: use refcount_inc_not_zero() for llc_sap_find()
|
|
possible deadlock in rhashtable_lookup_insert_fast
net
|
4 |
C |
|
|
28 |
2840d |
2843d
|
8/29 |
2828d |
ff93bca76992
ila: make lockdep happy again
|
|
KASAN: slab-out-of-bounds Write in crypto_dh_encode_key
crypto
|
21 |
C |
|
|
1401 |
2851d |
2878d
|
8/29 |
2828d |
35f7d5225ffc
crypto: dh - fix calculating encoded key size
|
|
KASAN: slab-out-of-bounds Read in _autofs_dev_ioctl
autofs
|
17 |
C |
|
|
5 |
2841d |
2842d
|
8/29 |
2828d |
0633da48f079
autofs: fix autofs_sbi() does not check super block type
|
|
KASAN: use-after-free Write in ip6_hold_safe
net
|
22 |
C |
|
|
25 |
2852d |
2863d
|
8/29 |
2828d |
6d37fa49da1e
l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
|
|
general protection fault in send_sigurg_to_task
fs
|
2 |
C |
|
|
6 |
2840d |
2843d
|
8/29 |
2828d |
84fe4cc09abc
signal: Don't send signals to tasks that don't exist
|
|
KASAN: slab-out-of-bounds Write in eth_header_parse
net
|
21 |
C |
|
|
7 |
2847d |
2860d
|
8/29 |
2828d |
4576cd469d98
packet: refine ring v3 block size test to hold one frame
|
|
WARNING in __snd_rawmidi_transmit_ack (2)
sound
|
-1 |
C |
|
|
6 |
2835d |
2842d
|
8/29 |
2828d |
82fd4b05d704
ALSA: seq: virmidi: Fix discarding the unsubscribed output
|
|
general protection fault in send_sigio_to_task
fs
|
2 |
C |
|
|
176 |
2840d |
2843d
|
8/29 |
2828d |
84fe4cc09abc
signal: Don't send signals to tasks that don't exist
|
|
KMSAN: uninit-value in do_msgrcv
kernel
|
7 |
C |
|
|
8 |
2828d |
2905d
|
8/29 |
2828d |
39cfffd774a2
ipc/util.c: use ipc_rcu_putref() for failues in ipc_addid()
615c999cd8a0
ipc: compute kern_ipc_perm.id under the ipc lock
e2652ae6bd74
ipc: reorganize initialization of kern_ipc_perm.seq
|
|
WARNING: ODEBUG bug in vsock_stream_connect
net
virt
|
-1 |
C |
|
|
42 |
2848d |
2857d
|
8/29 |
2828d |
455f05ecd2b2
vsock: split dwork to avoid reinitializations
|
|
KASAN: slab-out-of-bounds Read in pdu_read
v9fs
|
17 |
C |
|
|
267 |
2844d |
2879d
|
8/29 |
2828d |
f984579a01d8
9p: validate PDU length
7913690dcc5e
net/9p/client.c: version pointer uninitialized
|
|
WARNING in close_fs_devices
btrfs
|
-1 |
C |
|
|
137 |
2869d |
2912d
|
8/29 |
2828d |
81ffd56b5745
btrfs: fix mount and ioctl device scan ioctl race
|
|
general protection fault in p9_fd_create_unix
v9fs
|
2 |
C |
|
|
4 |
2874d |
2878d
|
8/29 |
2828d |
10aa14527f45
9p: fix multiple NULL-pointer-dereferences
|
|
general protection fault in mount_fs
hfs
|
2 |
C |
|
|
1 |
2974d |
2974d
|
8/29 |
2828d |
7464726cb599
hfsplus: don't return 0 when fill_super() failed
|
|
general protection fault in open_fs_devices
btrfs
|
2 |
C |
|
|
8 |
2880d |
2911d
|
8/29 |
2828d |
81ffd56b5745
btrfs: fix mount and ioctl device scan ioctl race
|
|
general protection fault in smc_ioctl (3)
smc
|
2 |
C |
|
|
15 |
2847d |
2849d
|
8/29 |
2828d |
7311d665ca68
net/smc: move sock lock in smc_ioctl()
|
|
KASAN: slab-out-of-bounds Write in vmac_final
crypto
|
21 |
C |
|
|
2 |
2905d |
2902d
|
8/29 |
2828d |
bb2964810233
crypto: vmac - separate tfm and request context
|
|
BUG: corrupted list in p9_fd_cancel
v9fs
|
8 |
C |
|
|
34 |
2864d |
2878d
|
8/29 |
2828d |
9f476d7c540c
net/9p/trans_fd.c: fix race by holding the lock
|
|
general protection fault in smc_tx_prepared_sends
smc
|
2 |
C |
|
|
7 |
2853d |
2854d
|
8/29 |
2828d |
7311d665ca68
net/smc: move sock lock in smc_ioctl()
|
|
KASAN: use-after-free Read in p9_poll_workfn
v9fs
|
19 |
C |
|
|
148 |
2839d |
2878d
|
8/29 |
2828d |
430ac66eb4c5
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
|
|
WARNING: bad usercopy in __kvm_write_guest_page
hardening
mm
|
-1 |
C |
|
|
4 |
2929d |
2922d
|
8/29 |
2832d |
0a06d4256674
KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
|
|
WARNING in refcount_inc (3)
net
|
-1 |
C |
|
|
7 |
2977d |
2978d
|
8/29 |
2832d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
KASAN: use-after-free Write in irq_bypass_register_consumer
kvm
|
22 |
C |
|
|
1632 |
2869d |
3130d
|
8/29 |
2832d |
b5020a8e6b54
KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel.
|
|
KASAN: slab-out-of-bounds Write in process_preds
trace
|
21 |
C |
|
|
6020 |
2892d |
2967d
|
8/29 |
2832d |
70303420b572
tracing: Check for no filter when processing event filters
|
|
kernel BUG at net/ipv6/route.c:LINE!
net
|
-1 |
C |
|
|
197 |
2851d |
2873d
|
8/29 |
2848d |
e873e4b9cc7e
ipv6: use fib6_info_hold_safe() when necessary
|
|
possible deadlock in bond_get_stats
net
|
4 |
C |
|
|
11 |
2854d |
2858d
|
8/29 |
2848d |
7e2556e40026
bonding: avoid lockdep confusion in bond_get_stats()
|
|
WARNING in __ip6_make_skb
net
|
-1 |
C |
|
|
1 |
2873d |
2873d
|
8/29 |
2848d |
e873e4b9cc7e
ipv6: use fib6_info_hold_safe() when necessary
|
|
WARNING in ip6_sk_dst_lookup_flow
net
|
-1 |
C |
|
|
2 |
2854d |
2871d
|
8/29 |
2848d |
e873e4b9cc7e
ipv6: use fib6_info_hold_safe() when necessary
|
|
KMSAN: uninit-value in __nf_conntrack_find_get
netfilter
|
7 |
C |
|
|
67 |
2864d |
2870d
|
8/29 |
2848d |
6613b6173dee
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
|
|
WARNING in ip6_setup_cork
net
|
-1 |
C |
|
|
4 |
2853d |
2873d
|
8/29 |
2848d |
e873e4b9cc7e
ipv6: use fib6_info_hold_safe() when necessary
|
|
KMSAN: kernel-infoleak in put_cmsg
net
|
9 |
C |
|
|
3 |
2881d |
2870d
|
8/29 |
2848d |
2efd4fca703a
ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
|
|
kernel BUG at fs/userfaultfd.c:LINE! (2)
fs
mm
|
-1 |
C |
|
|
8 |
2854d |
2872d
|
8/29 |
2848d |
31e810aa1033
userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
|
|
KASAN: use-after-free Write in dst_release (2)
net
|
22 |
C |
|
|
3 |
2854d |
2855d
|
8/29 |
2848d |
e6aed040eafb
Revert "net/ipv6: fix metrics leak"
|
|
KMSAN: kernel-infoleak in _copy_to_iter
net
|
9 |
C |
|
|
285 |
2864d |
2899d
|
8/29 |
2848d |
45c180bc29ba
xfrm_user: prevent leaking 2 bytes of kernel memory
|
|
general protection fault in __delayacct_blkio_end
kernel
|
2 |
C |
|
|
50 |
2864d |
2959d
|
8/29 |
2848d |
b512719f771a
delayacct: fix crash in delayacct_blkio_end() after delayacct init failure
|
|
unregister_netdevice: waiting for DEV to become free
|
2 |
C |
|
|
170521 |
2848d |
2959d
|
8/29 |
2848d |
8cc88773855f
xfrm: fix missing dst_release() after policy blocking lbcast and multicast
|
|
general protection fault in rds_ib_get_mr
rds
|
2 |
C |
|
|
9 |
2889d |
2988d
|
8/29 |
2848d |
9e630bcb7701
RDS: RDMA: Fix the NULL-ptr deref in rds_ib_get_mr
|
|
KASAN: slab-out-of-bounds Read in ipv6_gso_pull_exthdrs
net
|
17 |
C |
|
|
4 |
2887d |
2903d
|
8/29 |
2849d |
bab2c80e5a6c
nsh: set mac len based on inner packet
|
|
WARNING: refcount bug in smap_release_sock
bpf
|
13 |
C |
|
|
55 |
2866d |
2904d
|
8/29 |
2849d |
7ebc14d507b4
bpf: sockmap, consume_skb in close path
547b3aa451ae
bpf: sockmap, error path can not release psock in multi-map case
|
|
KASAN: stack-out-of-bounds Read in __handle_mm_fault (2)
kernel
|
17 |
C |
|
|
3 |
2867d |
2869d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
WARNING in __snd_rawmidi_transmit_ack
sound
|
-1 |
syz |
|
|
2 |
2872d |
2872d
|
8/29 |
2849d |
39675f7a7c7e
ALSA: rawmidi: Change resized buffers atomically
|
|
general protection fault in scheduler_tick
kernel
|
2 |
C |
|
|
1 |
2879d |
2879d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
BUG: unable to handle kernel NULL pointer dereference in corrupted (2)
kernel
|
10 |
C |
|
|
1 |
2870d |
2870d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: slab-out-of-bounds Read in corrupted
kernel
|
17 |
C |
|
|
1 |
2870d |
2870d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in bpf_tcp_close
bpf
|
17 |
C |
|
|
1 |
2869d |
2869d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KMSAN: uninit-value in af_alg_free_areq_sgls
crypto
|
7 |
C |
|
|
640 |
2864d |
2971d
|
8/29 |
2849d |
2546da99212f
crypto: af_alg - Initialize sg_num_bytes in error code path
|
|
KASAN: stack-out-of-bounds Read in account_system_index_time
kernel
|
17 |
C |
|
|
2 |
2872d |
2879d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
kernel BUG at mm/slab.c:LINE! (2)
hardening
mm
|
-1 |
C |
|
|
701 |
2864d |
2879d
|
8/29 |
2849d |
6e6fddc78323
bpf: fix panic due to oob in bpf_prog_test_run_skb
|
|
KASAN: stack-out-of-bounds Read in locks_remove_posix
fs
|
17 |
C |
|
|
1 |
2867d |
2866d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: stack-out-of-bounds Read in add_wait_queue
kernel
|
17 |
C |
|
|
1 |
2879d |
2879d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
INFO: rcu detected stall in vprintk_emit
net
nfc
|
1 |
syz |
|
|
2 |
2886d |
2892d
|
8/29 |
2849d |
3bc53be9db21
net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
|
|
WARNING in set_precision
net
|
-1 |
C |
|
|
140 |
2868d |
2909d
|
8/29 |
2849d |
c604cb767049
KEYS: DNS: fix parsing multiple options
|
|
BUG: unable to handle kernel paging request in cpuacct_charge
kernel
|
8 |
syz |
|
|
2 |
2871d |
2871d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
KASAN: use-after-free Read in ipv6_gso_pull_exthdrs
net
|
19 |
C |
|
|
5 |
2867d |
2899d
|
8/29 |
2849d |
bab2c80e5a6c
nsh: set mac len based on inner packet
|
|
KASAN: stack-out-of-bounds Read in timerqueue_add
kernel
|
17 |
C |
|
|
4 |
2867d |
2883d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
WARNING in iov_iter_revert
net
|
-1 |
C |
|
|
74 |
2869d |
2935d
|
8/29 |
2849d |
32da12216e46
tls: Stricter error checking in zerocopy sendmsg path
|
|
general protection fault in smc_ioctl (2)
smc
|
2 |
C |
|
|
43 |
2849d |
2872d
|
8/29 |
2849d |
1992d99882af
net/smc: take sock lock in smc_ioctl()
|
|
general protection fault in do_tcp_getsockopt
net
|
2 |
C |
|
|
9 |
2868d |
2880d
|
8/29 |
2849d |
6508b6781be0
tcp: cleanup copied_seq and urg_data in tcp_disconnect
|
|
KASAN: use-after-free Read in bpf_test_finish
bpf
net
|
19 |
C |
|
|
1211 |
2864d |
2879d
|
8/29 |
2849d |
6e6fddc78323
bpf: fix panic due to oob in bpf_prog_test_run_skb
|
|
KASAN: use-after-free Write in skb_release_data
net
|
22 |
C |
|
|
1903 |
2923d |
2976d
|
8/29 |
2849d |
993675a3100b
packet: reset network header if packet shorter than ll reserved space
|
|
KASAN: stack-out-of-bounds Read in rcu_process_callbacks
kernel
|
17 |
C |
|
|
1 |
2873d |
2873d
|
8/29 |
2849d |
99ba2b5aba24
bpf: sockhash, disallow bpf_tcp_close and update in parallel
|
|
WARNING in smc_unhash_sk
smc
|
-1 |
C |
|
|
155731 |
2852d |
3014d
|
8/29 |
2849d |
e1bbdd570474
net/smc: reduce sock_put() for fallback sockets
|
|
kernel BUG at net/packet/af_packet.c:LINE! (3)
net
|
-1 |
syz |
|
|
5 |
2999d |
3046d
|
8/29 |
2858d |
a6361f0ca4b2
packet: fix bitfield update race
|
|
KASAN: slab-out-of-bounds Read in getname_kernel
fs
|
17 |
C |
|
|
8 |
2874d |
2973d
|
8/29 |
2863d |
02f51d45937f
autofs: fix slab out of bounds read in getname_kernel()
|
|
kernel BUG at mm/gup.c:LINE!
mm
|
-1 |
syz |
|
|
4 |
2886d |
2884d
|
8/29 |
2863d |
24962af7e104
fs, elf: make sure to page align bss in load_elf_library
bb177a732c43
mm: do not bug_on on incorrect length in __mm_populate()
|
|
KASAN: global-out-of-bounds Write in string
fs
|
21 |
C |
|
|
7 |
2919d |
2975d
|
8/29 |
2863d |
fe10e398e860
reiserfs: fix buffer overflow with long warning messages
|
|
KMSAN: uninit-value in ip_tunnel_xmit
net
|
7 |
C |
|
|
2594 |
2870d |
2957d
|
8/29 |
2870d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
KMSAN: kernel-infoleak in vcs_read
serial
|
9 |
C |
|
|
531 |
2899d |
2909d
|
8/29 |
2874d |
21eff69aaaa0
vt: prevent leaking uninitialized data to userspace via /dev/vcs*
|
|
WARNING: suspicious RCU usage in fib6_info_alloc
net
|
4 |
syz |
|
|
2 |
2960d |
2960d
|
8/29 |
2878d |
27b10608a2fe
net/ipv6: Fix gfp_flags arg to addrconf_prefix_route
|
|
WARNING in kernfs_add_one
kernfs
|
-1 |
C |
|
|
174 |
2879d |
2943d
|
8/29 |
2878d |
84d0c27d6233
driver core: Don't ignore class_dir_create_and_add() failure.
|
|
BUG: unable to handle kernel paging request in dput
fs
|
8 |
C |
|
|
26 |
2910d |
2912d
|
8/29 |
2878d |
d85b399b64e8
fix proc_fill_cache() in case of d_alloc_parallel() failure
|
|
general protection fault in fuse_ctl_remove_conn
fuse
|
2 |
C |
|
|
16 |
2912d |
2951d
|
8/29 |
2878d |
6becdb601bae
fuse: fix control dir setup and teardown
|
|
WARNING in bpf_int_jit_compile
bpf
net
|
-1 |
syz |
|
|
11 |
2886d |
2923d
|
8/29 |
2878d |
9facc336876f
bpf: reject any prog that failed read-only lock
|
|
possible deadlock in sock_hash_free
bpf
|
4 |
C |
|
|
45 |
2920d |
2920d
|
8/29 |
2878d |
e9db4ef6bf4c
bpf: sockhash fix omitted bucket lock in sock_close
|
|
possible deadlock in __might_fault (2)
net
|
4 |
C |
|
|
20 |
2948d |
2951d
|
8/29 |
2878d |
05255b823a61
tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
|
|
KMSAN: uninit-value in _copy_to_iter (2)
kvm
net
virt
|
7 |
C |
|
|
226 |
2910d |
2955d
|
8/29 |
2878d |
670ae9caaca4
vhost: fix info leak due to uninitialized memory
|
|
kernel BUG at fs/f2fs/inode.c:LINE!
f2fs
|
-1 |
C |
|
|
1 |
2958d |
2958d
|
8/29 |
2878d |
5d64600d4f33
f2fs: avoid bug_on on corrupted inode
|
|
KASAN: slab-out-of-bounds Write in sha512_final
crypto
|
21 |
C |
|
|
21 |
2891d |
2908d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
KASAN: slab-out-of-bounds Write in rmd320_final
crypto
|
21 |
C |
|
|
44 |
2890d |
2910d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
KASAN: slab-out-of-bounds Read in bpf_csum_update
bpf
net
|
17 |
C |
|
|
2 |
2916d |
2914d
|
8/29 |
2878d |
58990d1ff3f7
bpf: reject passing modified ctx to helper functions
|
|
INFO: rcu detected stall in is_bpf_text_address
bpf
|
1 |
C |
|
|
1 |
2929d |
2929d
|
8/29 |
2878d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
KASAN: use-after-free Read in __vfs_write
fs
|
19 |
syz |
|
|
14 |
2907d |
2910d
|
8/29 |
2878d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
general protection fault in pipe_write
fs
|
2 |
syz |
|
|
1 |
2910d |
2909d
|
8/29 |
2878d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
possible deadlock in tcp_mmap
net
|
4 |
C |
|
|
1908 |
2948d |
2951d
|
8/29 |
2878d |
05255b823a61
tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
|
|
KASAN: use-after-free Write in prb_fill_curr_block
net
|
22 |
C |
|
|
2 |
2916d |
2917d
|
8/29 |
2878d |
eb73190f4fbe
net/packet: refine check for priv area size
|
|
kernel BUG at fs/f2fs/node.c:LINE!
f2fs
|
-1 |
C |
|
|
1 |
2957d |
2957d
|
8/29 |
2878d |
a4f843bd004d
f2fs: give message and set need_fsck given broken node id
|
|
WARNING in skb_warn_bad_offload (2)
net
|
-1 |
C |
|
|
6 |
2951d |
2951d
|
8/29 |
2878d |
a8c744a8b437
udp: disable gso with no_check_tx
|
|
BUG: unable to handle kernel NULL pointer dereference in ep_item_poll
fs
|
10 |
C |
|
|
15 |
2888d |
2889d
|
8/29 |
2878d |
e88958e6369a
net: handle NULL ->poll gracefully
|
|
WARNING in bpf_prog_select_runtime
bpf
|
-1 |
syz |
|
|
45 |
2902d |
2904d
|
8/29 |
2878d |
9facc336876f
bpf: reject any prog that failed read-only lock
|
|
KASAN: slab-out-of-bounds Read in bpf_skb_vlan_push
bpf
net
|
17 |
syz |
|
|
2 |
2904d |
2904d
|
8/29 |
2878d |
58990d1ff3f7
bpf: reject passing modified ctx to helper functions
|
|
WARNING: kernel stack regs has bad 'bp' value (3)
|
-1 |
C |
|
|
7971 |
2880d |
3035d
|
8/29 |
2878d |
b7b73cd5d746
crypto: x86/salsa20 - remove x86 salsa20 implementations
|
|
general protection fault in __vfs_write
fs
|
2 |
syz |
|
|
25 |
2907d |
2910d
|
8/29 |
2878d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: use-after-free Read in skb_ensure_writable
net
bpf
|
19 |
C |
|
|
4 |
2907d |
2914d
|
8/29 |
2878d |
58990d1ff3f7
bpf: reject passing modified ctx to helper functions
|
|
KASAN: use-after-free Read in build_segment_manager
f2fs
|
19 |
C |
|
|
5 |
2958d |
2958d
|
8/29 |
2878d |
8a29c1260e24
f2fs: sanity check for total valid node blocks
|
|
KASAN: use-after-free Read in bpf_tcp_close
bpf
|
19 |
C |
|
|
1748 |
2884d |
2923d
|
8/29 |
2878d |
e9db4ef6bf4c
bpf: sockhash fix omitted bucket lock in sock_close
|
|
KMSAN: uninit-value in nfqnl_recv_config (2)
netfilter
|
7 |
C |
|
|
10 |
2891d |
2907d
|
8/29 |
2878d |
ba062ebb2cd5
netfilter: nf_queue: augment nfqa_cfg_policy
|
|
KASAN: use-after-free Read in pipe_read
fs
|
19 |
C |
|
|
3 |
2909d |
2910d
|
8/29 |
2878d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: slab-out-of-bounds Read in crypto_morus640_decrypt_chunk
crypto
|
17 |
C |
|
|
8 |
2898d |
2904d
|
8/29 |
2878d |
a81ae8095712
crypto: morus640 - Fix out-of-bounds access
|
|
WARNING in perf_trace_buf_alloc (2)
trace
|
-1 |
C |
|
|
22 |
3018d |
3123d
|
8/29 |
2878d |
4d220ed0f814
bpf: remove tracepoints from bpf core
|
|
WARNING: kmalloc bug in xdp_umem_create
net
bpf
|
-1 |
C |
|
|
7 |
2902d |
2908d
|
8/29 |
2878d |
a343993c518c
xsk: silence warning on memory allocation failure
|
|
KASAN: use-after-free Write in tls_push_record
net
|
22 |
C |
|
|
24 |
2879d |
2923d
|
8/29 |
2878d |
a447da7d0041
tls: fix use-after-free in tls_push_record
|
|
KASAN: use-after-free Read in __kernel_write
fs
|
19 |
syz |
|
|
7 |
2907d |
2910d
|
8/29 |
2878d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
WARNING in ion_dma_buf_begin_cpu_access
staging
|
-1 |
C |
|
|
62 |
2886d |
2908d
|
8/29 |
2878d |
0a2bc00341dc
staging: android: ion: Return an ERR_PTR in ion_map_kernel
|
|
WARNING: lock held when returning to user space! (2)
net
|
4 |
C |
|
|
9 |
2938d |
2940d
|
8/29 |
2878d |
9e5750106630
net/ipv6: fix lock imbalance in ip6_route_del()
|
|
INFO: rcu detected stall in corrupted
net
|
1 |
syz |
|
|
1 |
2928d |
2927d
|
8/29 |
2878d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
KMSAN: uninit-value in ebt_stp_mt_check (2)
bridge
netfilter
|
7 |
C |
|
|
222 |
2878d |
2910d
|
8/29 |
2878d |
c568503ef020
netfilter: x_tables: initialise match/target check parameter struct
|
|
kernel BUG at fs/f2fs/segment.c:LINE!
f2fs
|
-1 |
syz |
|
|
1 |
2958d |
2957d
|
8/29 |
2878d |
8a29c1260e24
f2fs: sanity check for total valid node blocks
|
|
BUG: unable to handle kernel NULL pointer dereference in corrupted
net
|
10 |
C |
|
|
5 |
2909d |
2909d
|
8/29 |
2878d |
c0129a061442
smc: convert to ->poll_mask
|
|
KASAN: slab-out-of-bounds Write in tgr192_final
crypto
|
21 |
C |
|
|
30 |
2890d |
2909d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
KASAN: slab-out-of-bounds Write in wp384_final
crypto
|
21 |
C |
|
|
27 |
2890d |
2910d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
KASAN: slab-out-of-bounds Write in crypto_sha3_final
crypto
|
21 |
C |
|
|
68 |
2891d |
2910d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
KASAN: slab-out-of-bounds Read in bpf_skb_change_proto
net
bpf
|
17 |
C |
|
|
2 |
2908d |
2907d
|
8/29 |
2878d |
58990d1ff3f7
bpf: reject passing modified ctx to helper functions
|
|
BUG: unable to handle kernel paging request in build_segment_manager
f2fs
|
8 |
C |
|
|
1 |
2958d |
2958d
|
8/29 |
2878d |
b2ca374f33bd
f2fs: sanity check on sit entry
|
|
KASAN: null-ptr-deref Write in simple_write_to_buffer
fs
|
12 |
C |
|
|
5 |
2918d |
2943d
|
8/29 |
2878d |
fc14eebfc208
PM / hibernate: Fix oops at snapshot_write()
|
|
general protection fault in touch_atime
fs
|
2 |
syz |
|
|
6 |
2907d |
2910d
|
8/29 |
2878d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
WARNING: possible circular locking dependency detected (4)
net
|
-1 |
C |
|
|
27 |
2952d |
2959d
|
8/29 |
2878d |
05255b823a61
tcp: add TCP_ZEROCOPY_RECEIVE support for zerocopy receive
|
|
KASAN: slab-out-of-bounds Read in ip6_xmit (3)
net
|
17 |
C |
|
|
69 |
2884d |
2926d
|
8/29 |
2878d |
9901c5d77e96
bpf: sockmap, fix crash when ipv6 sock is added
|
|
KASAN: slab-out-of-bounds Read in skb_ensure_writable
bpf
net
|
17 |
C |
|
|
9 |
2905d |
2914d
|
8/29 |
2878d |
58990d1ff3f7
bpf: reject passing modified ctx to helper functions
|
|
KASAN: use-after-free Read in bpf_csum_update
bpf
net
|
19 |
C |
|
|
1 |
2916d |
2914d
|
8/29 |
2878d |
58990d1ff3f7
bpf: reject passing modified ctx to helper functions
|
|
BUG: unable to handle kernel paging request in bpf_int_jit_compile
bpf
net
|
8 |
syz |
|
|
2 |
2890d |
2894d
|
8/29 |
2878d |
85782e037f8a
bpf: undo prog rejection on read-only lock failure
|
|
KASAN: use-after-free Write in bpf_tcp_close
bpf
|
22 |
C |
|
|
67 |
2885d |
2921d
|
8/29 |
2878d |
e9db4ef6bf4c
bpf: sockhash fix omitted bucket lock in sock_close
|
|
general protection fault in bpf_tcp_close
bpf
|
2 |
C |
|
|
421 |
2879d |
2923d
|
8/29 |
2878d |
e9db4ef6bf4c
bpf: sockhash fix omitted bucket lock in sock_close
54fedb42c653
bpf: sockmap, fix smap_list_map_remove when psock is in many maps
|
|
general protection fault in smc_ioctl
smc
|
2 |
C |
|
|
5214 |
2900d |
2930d
|
8/29 |
2878d |
2351abe6f873
net/smc: return 0 for ioctl calls in states INIT and CLOSED
|
|
WARNING in do_dentry_open
fs
|
-1 |
C |
|
|
26 |
2902d |
2909d
|
8/29 |
2878d |
b16558579576
bpf: implement dummy fops for bpf objects
|
|
KASAN: slab-out-of-bounds Write in prb_fill_curr_block
net
|
21 |
C |
|
|
2 |
2917d |
2917d
|
8/29 |
2878d |
eb73190f4fbe
net/packet: refine check for priv area size
|
|
KASAN: slab-out-of-bounds Read in build_segment_manager
f2fs
|
17 |
C |
|
|
1 |
2958d |
2958d
|
8/29 |
2878d |
8a29c1260e24
f2fs: sanity check for total valid node blocks
|
|
KASAN: use-after-free Read in xfs_inobt_init_key_from_rec
xfs
|
19 |
C |
|
|
1 |
2975d |
2975d
|
8/29 |
2878d |
2e050e648ad6
xfs: fix inobt magic number check
|
|
KMSAN: uninit-value in rtnetlink_put_metrics
net
|
7 |
syz |
|
|
3 |
2912d |
2914d
|
8/29 |
2878d |
5b5e7a0de2bb
net: metrics: add proper netlink validation
|
|
KASAN: slab-out-of-bounds Read in bpf_skb_change_head
net
bpf
|
17 |
C |
|
|
2 |
2904d |
2904d
|
8/29 |
2878d |
58990d1ff3f7
bpf: reject passing modified ctx to helper functions
|
|
KASAN: slab-out-of-bounds Write in sha1_finup
crypto
|
21 |
C |
|
|
119 |
2890d |
2910d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
WARNING: kmalloc bug in map_get_next_key
bpf
|
-1 |
C |
|
|
5 |
2932d |
2932d
|
8/29 |
2878d |
683d2ac3904c
bpf: fix sock hashmap kmalloc warning
|
|
unexpected kernel reboot (2)
kernel
|
-1 |
C |
|
|
2073 |
2878d |
2968d
|
8/29 |
2878d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
BUG: workqueue lockup (3)
|
-1 |
C |
|
|
1215 |
2882d |
2935d
|
8/29 |
2878d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
|
WARNING: kernel stack frame pointer has bad value
|
-1 |
C |
|
|
1108 |
2881d |
2959d
|
8/29 |
2878d |
f044a84e040b
crypto: don't optimize keccakf()
|
|
general protection fault in vfs_read
fs
|
2 |
syz |
|
|
2 |
2908d |
2910d
|
8/29 |
2878d |
66e58e0ef80a
bpfilter: fix race in pipe access
|
|
KASAN: use-after-free Read in ip6_route_mpath_notify
net
|
19 |
C |
|
|
25 |
2911d |
2916d
|
8/29 |
2878d |
f7225172f25a
net/ipv6: prevent use after free in ip6_route_mpath_notify
|
|
BUG: unable to handle kernel NULL pointer dereference in do_sys_poll
fs
|
10 |
C |
|
|
297 |
2888d |
2889d
|
8/29 |
2878d |
e88958e6369a
net: handle NULL ->poll gracefully
|
|
WARNING in ebt_do_table
bridge
netfilter
|
-1 |
C |
|
|
13 |
2887d |
2912d
|
8/29 |
2878d |
11ff7288beb2
netfilter: ebtables: reject non-bridge targets
|
|
WARNING in sysfs_remove_group
fs
|
-1 |
C |
|
|
11125 |
2880d |
3134d
|
8/29 |
2878d |
d3349b6b3c37
loop: remember whether sysfs_create_group() was done
|
|
KASAN: null-ptr-deref Write in xdp_umem_unaccount_pages
bpf
net
|
12 |
C |
|
|
25 |
2907d |
2910d
|
8/29 |
2878d |
c09290c56376
bpf, xdp: fix crash in xdp_umem_unaccount_pages
|
|
WARNING: kernel stack regs at (ptrval) in syzkaller has bad 'bp' value (ptrval)
kernel
|
-1 |
C |
|
|
3 |
2955d |
2956d
|
8/29 |
2878d |
f044a84e040b
crypto: don't optimize keccakf()
|
|
WARNING: suspicious RCU usage in rt6_remove_exception_rt
net
|
4 |
syz |
|
|
1761 |
2954d |
2955d
|
8/29 |
2878d |
091311debcf0
net/ipv6: fix LOCKDEP issue in rt6_remove_exception_rt()
|
|
INFO: task hung in blk_queue_enter
block
|
1 |
C |
|
|
1595 |
2878d |
2950d
|
8/29 |
2878d |
cd4a4ae4683d
block: don't use blocking queue entered for recursive bio submits
|
|
KASAN: use-after-free Read in skb_dequeue
net
|
19 |
C |
|
|
4 |
2897d |
2897d
|
8/29 |
2878d |
945d015ee0c3
net/packet: fix use-after-free
|
|
KASAN: slab-out-of-bounds Write in sha1_final
crypto
|
21 |
C |
|
|
201 |
2890d |
2910d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
KASAN: use-after-free Read in corrupted
mm
|
19 |
C |
|
|
2 |
2933d |
2936d
|
8/29 |
2878d |
543b8f8662fe
fuse: don't keep dead fuse_conn at fuse_fill_super().
|
|
WARNING in ion_buffer_destroy
staging
|
-1 |
C |
|
|
7901 |
2908d |
3059d
|
8/29 |
2878d |
45ad559a2962
staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy
|
|
KASAN: slab-out-of-bounds Write in tgr160_final
crypto
|
21 |
C |
|
|
55 |
2891d |
2910d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
KASAN: use-after-free Read in crypto_morus640_decrypt_chunk
crypto
|
19 |
C |
|
|
3 |
2904d |
2904d
|
8/29 |
2878d |
a81ae8095712
crypto: morus640 - Fix out-of-bounds access
|
|
WARNING: ODEBUG bug in del_timer (2)
smc
|
-1 |
C |
|
|
6 |
2931d |
2932d
|
8/29 |
2878d |
be7f3e59997b
net/smc: init conn.tx_work & conn.send_lock sooner
|
|
INFO: rcu detected stall in n_tty_receive_char_special
serial
|
1 |
C |
|
|
3 |
2950d |
2973d
|
8/29 |
2878d |
3d63b7e4ae0d
n_tty: Fix stall at n_tty_receive_char_special().
|
|
KMSAN: uninit-value in ip_vs_lblc_check_expire
lvs
|
7 |
C |
|
|
1431 |
2878d |
2955d
|
8/29 |
2878d |
8b2ebb6cf064
ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
|
|
KASAN: null-ptr-deref Read in refcount_sub_and_test
net
|
11 |
C |
|
|
4 |
2958d |
2960d
|
8/29 |
2878d |
263243d6c257
net/ipv6: Fix ip6_convert_metrics() bug
|
|
INFO: rcu detected stall in blkdev_ioctl
block
|
1 |
C |
|
|
249 |
2909d |
3084d
|
8/29 |
2878d |
d2ac838e4cd7
loop: add recursion validation to LOOP_CHANGE_FD
|
|
WARNING: kmalloc bug in memdup_user (3)
bpf
|
-1 |
C |
|
|
137 |
2932d |
2932d
|
8/29 |
2878d |
683d2ac3904c
bpf: fix sock hashmap kmalloc warning
|
|
KASAN: slab-out-of-bounds Write in sha512_finup
crypto
|
21 |
C |
|
|
25 |
2891d |
2907d
|
8/29 |
2878d |
3619dec5103d
dh key: fix rounding up KDF output length
|
|
INFO: rcu detected stall in d_walk
fs
|
1 |
C |
|
|
25680 |
2904d |
2966d
|
8/29 |
2878d |
4fb48871409e
restore cond_resched() in shrink_dcache_parent()
|
|
INFO: rcu detected stall in save_stack_trace
sctp
|
1 |
C |
|
|
1 |
2929d |
2927d
|
8/29 |
2878d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
INFO: rcu detected stall in __process_echoes
serial
|
1 |
C |
|
|
326 |
2886d |
2982d
|
8/29 |
2878d |
ebec3f8f5271
n_tty: Access echo_* variables carefully.
|
|
INFO: task hung in blk_freeze_queue
block
|
1 |
C |
|
|
188 |
2880d |
3031d
|
8/29 |
2878d |
d2ac838e4cd7
loop: add recursion validation to LOOP_CHANGE_FD
|
|
possible deadlock in bpf_tcp_close
bpf
|
4 |
C |
|
|
152 |
2920d |
2920d
|
8/29 |
2878d |
e9db4ef6bf4c
bpf: sockhash fix omitted bucket lock in sock_close
|
|
WARNING in arch_uprobe_analyze_insn
trace
|
-1 |
C |
|
|
2 |
2935d |
2934d
|
8/29 |
2878d |
90718e32e1dc
uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn()
|
|
KASAN: use-after-free Read in rds_cong_queue_updates
rds
|
19 |
C |
|
|
18168 |
2884d |
3016d
|
8/29 |
2878d |
f1693c63ab13
rds: avoid unenecessary cong_update in loop transport
c809195f5523
rds: clean up loopback rds_connections on netns deletion
|
|
KASAN: use-after-free Read in iput
fuse
|
19 |
C |
|
|
2 |
2961d |
2961d
|
8/29 |
2880d |
0c92c7a3c5d4
tracing: Fix bad use of igrab in trace_uprobe.c
|
|
INFO: task hung in ucma_destroy_id
rdma
|
1 |
C |
|
|
46 |
2960d |
2997d
|
5/29 |
2883d |
ef95a90ae6f4
RDMA/ucma: ucma_context reference leak in error path
|
|
BUG: corrupted list in tipc_nametbl_unsubscribe
tipc
|
8 |
C |
|
|
40 |
2941d |
3000d
|
5/29 |
2883d |
c3317f4db831
tipc: fix unbalanced reference counter
|
|
general protection fault in kernel_sock_shutdown
smc
|
2 |
C |
|
|
3329 |
2956d |
3014d
|
5/29 |
2883d |
1255fcb2a655
net/smc: fix shutdown in state SMC_LISTEN
|
|
INFO: trying to register non-static key in tun_do_read
net
|
-1 |
C |
|
|
28 |
2934d |
2941d
|
5/29 |
2899d |
7063efd33bb1
tuntap: fix use after free during release
|
|
KASAN: use-after-free Read in iptunnel_handle_offloads
net
|
19 |
C |
|
|
133 |
2924d |
2970d
|
5/29 |
2899d |
9aad13b087ab
packet: fix reserve calculation
|
|
WARNING: suspicious RCU usage in rds_loop_conn_alloc
rds
|
4 |
C |
|
|
34303 |
3018d |
3025d
|
5/29 |
2905d |
d4014d8cc6df
rds: do not call ->conn_alloc with GFP_KERNEL
|
|
kernel BUG at lib/string.c:LINE! (4)
lvs
|
-1 |
C |
|
|
2 |
2932d |
2932d
|
5/29 |
2910d |
52f96757905b
ipvs: fix buffer overflow with sync daemon and service
|
|
WARNING in __mutex_unlock_slowpath
kvm
kvm-x86
|
-1 |
C |
|
|
2 |
2947d |
2949d
|
5/29 |
2910d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
BUG: unable to handle kernel paging request in smc_ib_remember_port_attr
smc
|
8 |
C |
|
|
112 |
2927d |
2984d
|
5/29 |
2910d |
d49baa7e12ee
net/smc: check for missing nlattrs in SMC_PNETID messages
|
|
BUG: soft lockup in _decode_session6
net
|
1 |
C |
|
|
1 |
2937d |
2937d
|
5/29 |
2910d |
d9f92772e8ec
xfrm6: avoid potential infinite loop in _decode_session6()
|
|
KASAN: use-after-free Read in __dev_queue_xmit (2)
net
|
19 |
C |
|
|
2 |
2928d |
2928d
|
5/29 |
2910d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
kernel BUG at net/ipv4/tcp_output.c:LINE! (2)
net
|
-1 |
syz |
|
|
23 |
2942d |
3047d
|
5/29 |
2910d |
7f582b248d0a
tcp: purge write queue in tcp_connect_init()
|
|
KASAN: use-after-free Read in skb_copy_datagram_iter
net
|
19 |
C |
|
|
7 |
2946d |
2984d
|
5/29 |
2910d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
KASAN: use-after-free Read in radix_tree_next_chunk
xfs
|
19 |
C |
|
|
2749 |
2927d |
2978d
|
5/29 |
2910d |
79f546a696bf
fs: don't scan the inode cache before SB_BORN is set
|
|
WARNING in dev_vprintk_emit
kernel
|
-1 |
C |
|
|
77 |
2924d |
3051d
|
5/29 |
2910d |
814596495dd2
cfg80211: further limit wiphy names to 64 bytes
|
|
KMSAN: uninit-value in ebt_stp_mt_check
netfilter
bridge
|
7 |
C |
|
|
211 |
2911d |
2956d
|
5/29 |
2910d |
a4995684a949
netfilter: bridge: stp fix reference to uninitialized data
|
|
general protection fault in kernfs_kill_sb (2)
kernfs
|
2 |
C |
|
|
22 |
2924d |
2936d
|
5/29 |
2910d |
82382acec0c9
kernfs: deal with kernfs_fill_super() failures
|
|
KASAN: use-after-free Read in copyout
net
|
19 |
C |
|
|
11 |
2928d |
2984d
|
5/29 |
2910d |
b84bbaf7a6c8
packet: in packet_snd start writing at link layer allocation
|
|
KASAN: stack-out-of-bounds Write in compat_copy_entries
netfilter
bridge
|
21 |
syz |
|
|
10 |
2915d |
2954d
|
5/29 |
2910d |
94c752f99954
netfilter: ebtables: handle string from userspace with care
|
|
WARNING: ODEBUG bug in hfsplus_fill_super
hfs
|
-1 |
C |
|
|
1 |
2979d |
2978d
|
5/29 |
2910d |
66072c293287
hfsplus: stop workqueue when fill_super() failed
|
|
KASAN: use-after-free Read in nla_strlcpy
netfilter
|
19 |
C |
|
|
59 |
2914d |
2927d
|
5/29 |
2910d |
4b83a9049a98
netfilter: provide correct argument to nla_strlcpy()
|
|
KASAN: use-after-free Read in remove_wait_queue (2)
fs
|
19 |
C |
|
|
4 |
2999d |
3009d
|
5/29 |
2910d |
af8d3c7c001a
ppp: remove the PPPIOCDETACH ioctl
|
|
BUG: spinlock bad magic in tun_do_read
net
|
4 |
syz |
|
|
1 |
2941d |
2941d
|
5/29 |
2910d |
b196d88aba8a
tun: fix use after free for ptr_ring
|
|
KASAN: slab-out-of-bounds Read in nla_strlcpy
netfilter
|
17 |
C |
|
|
34 |
2914d |
2927d
|
5/29 |
2910d |
4b83a9049a98
netfilter: provide correct argument to nla_strlcpy()
|
|
kernel BUG at include/linux/mm.h:LINE!
kernel
|
-1 |
syz |
|
|
68 |
2911d |
2948d
|
5/29 |
2910d |
a466ef76b815
x86/kexec: Avoid double free_page() upon do_kexec_load() failure
|
|
WARNING in kcm_exit_net (3)
net
|
-1 |
syz |
|
|
5 |
2918d |
2918d
|
5/29 |
2910d |
eb7f54b90bd8
kcm: Fix use-after-free caused by clonned sockets
|
|
general protection fault in __radix_tree_delete
kvm
kvm-x86
|
2 |
C |
|
|
38 |
2923d |
2949d
|
5/29 |
2910d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
KASAN: slab-out-of-bounds Read in __ext4_check_dir_entry
ext4
|
17 |
C |
|
|
18 |
2977d |
2978d
|
5/29 |
2919d |
e40ff2138985
ext4: force revalidation of directory pointer after seekdir(2)
|
|
general protection fault in gfn_to_rmap
|
2 |
syz |
|
|
7 |
3020d |
3129d
|
5/29 |
2931d |
b7e31be38558
KVM: x86: fix vcpu initialization with userspace lapic
|
|
KMSAN: uninit-value in move_addr_to_user (2)
net
|
7 |
C |
|
|
44 |
2933d |
2940d
|
5/29 |
2932d |
09c8b9718a7a
tipc: fix one byte leak in tipc_sk_set_orig_addr()
|
|
WARNING in add_uevent_var
wireless
|
-1 |
C |
|
|
5 |
2977d |
2977d
|
5/29 |
2932d |
a7cfebcb7594
cfg80211: limit wiphy names to 128 bytes
|
|
WARNING in xfrm6_tunnel_net_exit
net
|
-1 |
syz |
|
|
14002 |
2934d |
3064d
|
5/29 |
2932d |
b48c05ab5d32
xfrm: Fix warning in xfrm6_tunnel_net_exit.
|
|
KMSAN: uninit-value in strcmp
tipc
|
7 |
C |
|
|
3 |
2943d |
2945d
|
5/29 |
2932d |
94f6a80c0c11
tipc: eliminate KMSAN uninit-value in strcmp complaint
|
|
KASAN: slab-out-of-bounds Read in pfkey_add
net
|
17 |
C |
|
|
835 |
2937d |
3084d
|
5/29 |
2932d |
4b66af2d6356
af_key: Always verify length of provided sadb_key
|
|
KASAN: use-after-free Read in tls_sk_proto_close (2)
net
|
19 |
C |
|
|
297 |
2937d |
2943d
|
5/29 |
2932d |
98f0a39529e5
tls: fix use after free in tls_sk_proto_close
|
|
WARNING in __snd_pcm_lib_xfer
sound
|
-1 |
syz |
|
|
6 |
2945d |
2947d
|
5/29 |
2932d |
f13876e2c33a
ALSA: pcm: Check PCM state at xfern compat ioctl
|
|
KMSAN: uninit-value in __sctp_v6_cmp_addr
sctp
|
7 |
C |
|
|
1109 |
2933d |
2933d
|
5/29 |
2932d |
d625329b06e4
sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
|
|
WARNING in tcp_sacktag_write_queue
net
|
-1 |
C |
|
|
8 |
2949d |
3021d
|
5/29 |
2933d |
bf2acc943a45
tcp: fix TCP_REPAIR_QUEUE bound checking
|
|
BUG: unable to handle kernel NULL pointer dereference in smc_getsockopt
smc
|
10 |
C |
|
|
9 |
2933d |
2938d
|
5/29 |
2933d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
KMSAN: uninit-value in rt6_multipath_hash
net
|
7 |
C |
|
|
3 |
2933d |
2950d
|
5/29 |
2933d |
cea67a2dd6b2
ipv6: fix uninit-value in ip6_multipath_l3_keys()
|
|
general protection fault in smc_getname
smc
|
2 |
C |
|
|
44 |
2945d |
3009d
|
5/29 |
2933d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
KMSAN: uninit-value in put_cmsg
net
|
7 |
C |
|
|
2 |
2946d |
2946d
|
5/29 |
2933d |
eb80ca476ec1
rds: do not leak kernel memory to user land
|
|
general protection fault in smc_set_keepalive
smc
|
2 |
C |
|
|
6 |
2949d |
2954d
|
5/29 |
2933d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
KASAN: slab-out-of-bounds Read in __sctp_v6_cmp_addr
sctp
|
17 |
C |
|
|
3202 |
2944d |
2956d
|
5/29 |
2933d |
d625329b06e4
sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
|
|
WARNING in tracepoint_probe_register_prio (2)
trace
|
-1 |
C |
|
|
849 |
2933d |
2997d
|
5/29 |
2933d |
d66a270be331
tracepoint: Do not warn on ENOMEM
|
|
general protection fault in smc_getsockopt
smc
|
2 |
C |
|
|
577 |
2945d |
3005d
|
5/29 |
2933d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
general protection fault in smc_setsockopt
smc
|
2 |
C |
|
|
504 |
2945d |
3009d
|
5/29 |
2933d |
070204a34884
net/smc: keep clcsock reference in smc_tcp_listen_work()
|
|
WARNING in tcp_mark_head_lost
net
|
-1 |
C |
|
|
18 |
2941d |
3024d
|
5/29 |
2933d |
16ae6aa17052
net-backports: tcp: ignore Fast Open on repair mode
|
|
WARNING: ODEBUG bug in del_timer
smc
|
-1 |
C |
|
|
200 |
2933d |
2949d
|
5/29 |
2933d |
784813aed6ba
net/smc: restrict non-blocking connect finish
|
|
WARNING: suspicious RCU usage in tipc_bearer_find
tipc
|
4 |
C |
|
|
21 |
3028d |
3028d
|
5/29 |
2935d |
ed4ffdfec26d
tipc: Fix missing RTNL lock protection during setting link properties
|
|
KASAN: slab-out-of-bounds Read in clusterip_tg_check
netfilter
|
17 |
C |
|
|
22 |
3034d |
3040d
|
5/29 |
2935d |
1a38956cce5e
netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()
|
|
general protection fault in account_system_index_time
kernel
|
2 |
C |
|
|
2 |
2982d |
2982d
|
5/29 |
2935d |
ae4745730cf8
net: Fix untag for vlan packets without ethernet header
|
|
BUG: unable to handle kernel paging request in memset_erms (2)
sound
|
8 |
C |
|
|
11 |
3034d |
3049d
|
5/29 |
2935d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
INFO: trying to register non-static key in del_timer_sync
netfilter
|
-1 |
C |
|
|
89 |
3014d |
3040d
|
5/29 |
2935d |
10414014bc08
netfilter: x_tables: fix missing timer initialization in xt_LED
|
|
general protection fault in rdma_addr_size
rdma
|
2 |
C |
|
|
2 |
2993d |
2986d
|
5/29 |
2935d |
e8980d67d601
RDMA/ucma: Ensure that CM_ID exists prior to access it
|
|
KASAN: null-ptr-deref Write in linear_transfer
sound
|
12 |
C |
|
|
116 |
2981d |
3064d
|
5/29 |
2935d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
BUG: unable to handle kernel paging request in cgroup_mt_destroy_v1
netfilter
|
8 |
C |
|
|
3 |
3037d |
3037d
|
5/29 |
2935d |
ba7cd5d95f25
netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
|
|
KASAN: use-after-free Write in xt_rateest_put
netfilter
|
22 |
C |
|
|
7 |
3038d |
3039d
|
5/29 |
2936d |
7dc68e98757a
netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
|
|
BUG: workqueue lockup (2)
|
-1 |
C |
|
|
406 |
2938d |
3096d
|
5/29 |
2936d |
966031f34018
n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)
|
|
KASAN: use-after-free Read in __dev_queue_xmit
net
|
19 |
C |
|
|
10 |
2946d |
3065d
|
5/29 |
2940d |
d0c081b49137
flow_dissector: properly cap thoff field
|
|
WARNING: bad unlock balance in xfs_iunlock
xfs
|
4 |
C |
|
|
1 |
2976d |
2976d
|
5/29 |
2940d |
8241f7f983b9
xfs: don't iunlock the quota ip when quota block
|
|
KASAN: use-after-free Read in ip6_xmit
net
|
19 |
C |
|
|
5174 |
2987d |
3065d
|
5/29 |
2940d |
c113187d38ff
tls: Use correct sk->sk_prot for IPV6
|
|
KASAN: use-after-free Read in binder_release_work
kernel
|
19 |
C |
|
|
6 |
2954d |
2975d
|
5/29 |
2940d |
7aa135fcf263
ANDROID: binder: prevent transactions into own process.
|
|
BUG: sleeping function called from invalid context at net/core/sock.c:LINE (3)
net
|
-1 |
C |
|
|
234 |
3018d |
3021d
|
5/29 |
2940d |
26736a08ee0f
tipc: don't call sock_release() in atomic context
|
|
KMSAN: uninit-value in fib6_new_table
net
|
7 |
C |
|
|
3 |
2957d |
2957d
|
5/29 |
2940d |
aa8f8778493c
ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
|
|
KMSAN: uninit-value in netlink_sendmsg
net
|
7 |
C |
|
|
2493 |
2940d |
2971d
|
5/29 |
2940d |
6091f09c2f79
netlink: fix uninit-value in netlink_sendmsg
|
|
KMSAN: uninit-value in neigh_dump_info
net
|
7 |
C |
|
|
6 |
2953d |
2967d
|
5/29 |
2940d |
7dd07c143a4b
net: validate attribute sizes in neigh_dump_table()
|
|
KMSAN: uninit-value in alg_bind
crypto
|
7 |
C |
|
|
1950 |
2940d |
2971d
|
5/29 |
2940d |
a466856e0b7a
crypto: af_alg - fix possible uninit-value in alg_bind()
|
|
KMSAN: uninit-value in inet_csk_bind_conflict
net
|
7 |
C |
|
|
446 |
2940d |
2971d
|
5/29 |
2940d |
3099a5291893
soreuseport: initialise timewait reuseport field
|
|
BUG: corrupted list in __dentry_kill
fs
|
8 |
C |
|
|
35 |
2958d |
2978d
|
5/29 |
2940d |
4a3877c4cedd
rpc_pipefs: fix double-dput()
|
|
KMSAN: uninit-value in strlcpy
net
|
7 |
C |
|
|
2 |
2943d |
2943d
|
5/29 |
2940d |
537b361fbcbc
vti6: better validate user provided tunnel names
|
|
KMSAN: uninit-value in packet_set_ring
net
|
7 |
C |
|
|
6 |
2947d |
2964d
|
5/29 |
2940d |
5171b37d9596
net: af_packet: fix race in PACKET_{R|T}X_RING
|
|
WARNING in kill_block_super
fuse
|
-1 |
C |
|
|
51 |
2962d |
2980d
|
5/29 |
2940d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
WARNING: inconsistent lock state
kernel
|
-1 |
C |
|
|
22 |
2952d |
2956d
|
5/29 |
2940d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|
|
WARNING: refcount bug in should_fail
mm
|
13 |
C |
|
|
3 |
2979d |
3010d
|
5/29 |
2940d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
INFO: task hung in stop_sync_thread (2)
lvs
|
1 |
C |
|
|
9 |
2964d |
2981d
|
5/29 |
2940d |
5c64576a7789
ipvs: fix rtnl_lock lockups caused by start_sync_thread
|
|
kernel BUG at drivers/vhost/vhost.c:LINE! (2)
virt
kvm
net
|
-1 |
C |
|
|
139 |
2941d |
2972d
|
5/29 |
2940d |
d14d2b78090c
vhost: fix vhost_vq_access_ok() log check
|
|
KMSAN: uninit-value in sctp_do_bind
sctp
|
7 |
C |
|
|
31 |
2941d |
2971d
|
5/29 |
2940d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
general protection fault in ucma_set_ib_path (2)
rdma
|
2 |
C |
|
|
6 |
2968d |
2975d
|
5/29 |
2940d |
8435168d50e6
RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
|
|
WARNING in strp_done
net
|
-1 |
C |
|
|
2336 |
2975d |
3023d
|
5/29 |
2940d |
dff8baa26117
kcm: Call strp_stop before strp_done in kcm_attach
|
|
general protection fault in rds_sendmsg
rds
|
2 |
C |
|
|
2 |
3015d |
3015d
|
5/29 |
2940d |
79a5b9727a1c
rds: rds_msg_zcopy should return error of null rm->data.op_mmp_znotifier
|
|
inconsistent lock state in fs_reclaim_acquire
kernel
|
4 |
C |
|
|
36235 |
2941d |
2951d
|
5/29 |
2940d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|
|
KASAN: use-after-free Read in sctp_association_free (2)
sctp
|
19 |
C |
|
|
2 |
3000d |
3000d
|
5/29 |
2940d |
0aee4c259849
sctp: Fix double free in sctp_sendmsg_to_asoc
|
|
possible deadlock in rtnl_lock (5)
net
|
4 |
C |
|
|
1009 |
2954d |
2982d
|
5/29 |
2940d |
5c64576a7789
ipvs: fix rtnl_lock lockups caused by start_sync_thread
|
|
general protection fault in __tipc_nl_net_set
tipc
|
2 |
syz |
|
|
4 |
2962d |
2963d
|
5/29 |
2940d |
c6404122cb18
tipc: fix possible crash in __tipc_nl_net_set()
|
|
KASAN: use-after-free Read in tipc_sub_unsubscribe (2)
tipc
|
19 |
C |
|
|
5 |
2960d |
2967d
|
5/29 |
2940d |
c3317f4db831
tipc: fix unbalanced reference counter
|
|
KMSAN: uninit-value in ip6table_mangle_hook
netfilter
|
7 |
C |
|
|
601 |
2940d |
2971d
|
5/29 |
2940d |
b855ff827476
dccp: initialize ireq->ir_mark
|
|
KMSAN: uninit-value in tipc_node_get_mtu
tipc
|
7 |
C |
|
|
139 |
2940d |
2971d
|
5/29 |
2940d |
335b929b28ae
tipc: fix missing initializer in tipc_sendmsg()
|
|
KMSAN: uninit-value in netif_skb_features
net
|
7 |
C |
|
|
119 |
2940d |
2967d
|
5/29 |
2940d |
7ce2367254e8
vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
|
|
WARNING: kobject bug in device_add
kernel
|
-1 |
C |
|
|
563 |
2941d |
2980d
|
5/29 |
2940d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
|
WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
input
|
-1 |
C |
|
|
2126 |
2941d |
2956d
|
5/29 |
2940d |
6c1e851c4edc
random: fix possible sleeping allocation from irq context
|
|
KASAN: use-after-free Read in pppol2tp_connect (3)
net
|
19 |
C |
|
|
22 |
2967d |
2985d
|
5/29 |
2940d |
6b9f34239b00
l2tp: fix races in tunnel creation
|
|
WARNING in __debug_object_init
kernel
|
-1 |
C |
|
|
192 |
2974d |
2984d
|
5/29 |
2940d |
bd03143007eb
alarmtimer: Init nanosleep alarm timer on stack
|
|
KASAN: stack-out-of-bounds Write in ip6gre_tunnel_locate
net
|
21 |
C |
|
|
923 |
2966d |
2974d
|
5/29 |
2940d |
5f42df013b8b
ip6_gre: better validate user provided tunnel names
|
|
KMSAN: uninit-value in inet6_rtm_delroute
net
|
7 |
C |
|
|
9 |
2960d |
2971d
|
5/29 |
2940d |
b1993a2de12c
net: fix rtnh_ok()
|
|
general protection fault in __mem_cgroup_free
cgroups
mm
|
2 |
C |
|
|
22 |
2967d |
2978d
|
5/29 |
2940d |
4eaf431f6f71
memcg: fix per_node_info cleanup
|
|
KMSAN: uninit-value in pppol2tp_connect
net
|
7 |
C |
|
|
13 |
2941d |
2956d
|
5/29 |
2940d |
eb1c28c05894
l2tp: check sockaddr length in pppol2tp_connect()
|
|
WARNING in tty_set_ldisc
serial
|
-1 |
syz |
|
|
177 |
2949d |
3125d
|
5/29 |
2940d |
598c2d41ff44
tty: Avoid possible error pointer dereference at tty_ldisc_restore().
|
|
WARNING: refcount bug in put_pid_ns
fs
|
13 |
syz |
|
|
6 |
2978d |
2978d
|
5/29 |
2940d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
WARNING in ext4_superblock_csum_set
ext4
|
-1 |
C |
|
|
1 |
2977d |
2976d
|
5/29 |
2940d |
a45403b51582
ext4: always initialize the crc32c checksum driver
|
|
KASAN: use-after-free Read in snd_pcm_timer_resolution
sound
|
19 |
C |
|
|
3 |
2980d |
2980d
|
5/29 |
2940d |
a820ccbe21e8
ALSA: pcm: Fix UAF at PCM release via PCM timer access
|
|
general protection fault in loopback_pos_update
sound
|
2 |
C |
|
|
4 |
3048d |
3046d
|
5/29 |
2940d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
KMSAN: uninit-value in move_addr_to_user
net
|
7 |
C |
|
|
74 |
2940d |
2971d
|
5/29 |
2940d |
6780db244d6b
sctp: do not leak kernel memory to user space
|
|
KASAN: stack-out-of-bounds Write in __ip_tunnel_create
net
|
21 |
C |
|
|
29 |
2967d |
2974d
|
5/29 |
2940d |
9cb726a212a8
ip_tunnel: better validate user provided tunnel names
|
|
general protection fault in kernfs_kill_sb
mm
|
2 |
C |
|
|
29 |
2941d |
2977d
|
5/29 |
2940d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
KMSAN: uninit-value in __skb_try_recv_from_queue
net
|
7 |
C |
|
|
108 |
2941d |
2971d
|
5/29 |
2940d |
b13dda9f9aa7
net: initialize skb->peeked when cloning
|
|
KASAN: null-ptr-deref Read in refcount_inc_not_zero
net
|
11 |
C |
|
|
2352 |
2954d |
2956d
|
5/29 |
2940d |
3a04ce7130a7
llc: fix NULL pointer deref for SOCK_ZAPPED
|
|
KASAN: slab-out-of-bounds Write in perf_callchain_user
perf
|
21 |
syz |
|
|
2 |
2967d |
2967d
|
5/29 |
2940d |
5af44ca53d01
perf: Fix sample_max_stack maximum check
|
|
BUG: corrupted list in team_nl_cmd_options_set
net
|
8 |
C |
|
|
2 |
2963d |
2967d
|
5/29 |
2940d |
4fb0534fb7bb
team: avoid adding twice the same option to the event list
|
|
KASAN: use-after-free Read in tipc_nametbl_stop
tipc
|
19 |
C |
|
|
12 |
2959d |
2963d
|
5/29 |
2940d |
be47e41d77fb
tipc: fix use-after-free in tipc_nametbl_stop
|
|
WARNING: kobject bug in netdev_queue_update_kobjects
net
|
-1 |
C |
|
|
27 |
2942d |
3004d
|
5/29 |
2940d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
|
general protection fault in tipc_sk_fill_sock_diag
tipc
|
2 |
C |
|
|
180 |
2966d |
2984d
|
5/29 |
2940d |
4b2e6877b879
tipc: Fix namespace violation in tipc_sk_fill_sock_diag
e41f0548473e
tipc: use the right skb in tipc_sk_fill_sock_diag()
|
|
KMSAN: uninit-value in inet_getpeer
net
|
7 |
C |
|
|
54 |
2940d |
2970d
|
5/29 |
2940d |
b6a37e5e2541
inetpeer: fix uninit-value in inet_getpeer
|
|
WARNING: lock held when returning to user space!
block
|
4 |
C |
|
|
40 |
2957d |
2972d
|
5/29 |
2940d |
bdac616db9bb
loop: fix LOOP_GET_STATUS lock imbalance
|
|
general protection fault in tipc_conn_close
tipc
|
2 |
C |
|
|
3 |
3018d |
3019d
|
5/29 |
2940d |
96c252bf1c5c
tipc: fix bug on error path in tipc_topsrv_kern_subscr()
|
|
WARNING in format_decode
fs
|
-1 |
C |
|
|
1 |
2978d |
2978d
|
5/29 |
2940d |
9ad553abe66f
fs/reiserfs/journal.c: add missing resierfs_warning() arg
|
|
KMSAN: uninit-value in memcmp
net
|
7 |
C |
|
|
30 |
2942d |
2971d
|
5/29 |
2940d |
77d36398d99f
net: fix uninit-value in __hw_addr_add_ex()
|
|
KASAN: use-after-free Read in alloc_pid
kernel
|
19 |
C |
|
|
7 |
2968d |
2978d
|
5/29 |
2940d |
8e04944f0ea8
mm,vmscan: Allow preallocating memory for register_shrinker().
|
|
WARNING in snd_pcm_hw_params
sound
|
-1 |
C |
|
|
56 |
2968d |
2973d
|
5/29 |
2940d |
e1a3a981e320
ALSA: pcm: Remove WARN_ON() at snd_pcm_hw_params() error
|
|
WARNING: kobject bug in gfs2_sys_fs_add
gfs2
|
-1 |
C |
|
|
49 |
2951d |
2978d
|
5/29 |
2940d |
3e14c6abbfb5
kobject: don't use WARN for registration failures
|
|
INFO: task hung in __blkdev_get
fs
|
1 |
C |
|
|
662 |
2965d |
3091d
|
5/29 |
2940d |
1e047eaab3bb
block/loop: fix deadlock after loop_set_status
|
|
INFO: rcu detected stall in __snd_pcm_lib_xfer (2)
sound
|
1 |
C |
|
|
1064 |
2968d |
2973d
|
5/29 |
2940d |
e15dc99dbb9c
ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
|
|
KMSAN: uninit-value in sctp_sendmsg
sctp
|
7 |
syz |
|
|
27 |
2941d |
2970d
|
5/29 |
2940d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
KASAN: stack-out-of-bounds Read in __free_filter
trace
|
17 |
C |
|
|
41 |
2958d |
2967d
|
5/29 |
2940d |
0b3dec05dbbc
tracing: Enforce passing in filter=NULL to create_filter()
|
|
kernel panic: n_tty: init_tty
serial
|
2 |
C |
|
|
141 |
2940d |
3125d
|
5/29 |
2940d |
903f9db10f18
tty: Don't call panic() at tty_ldisc_init()
|
|
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence
sound
|
8 |
syz |
|
|
11 |
2941d |
2967d
|
5/29 |
2940d |
02a5d6925cd3
ALSA: pcm: Avoid potential races between OSS ioctls and read/write
|
|
general protection fault in __list_del_entry_valid (3)
tipc
|
2 |
C |
|
|
40 |
2978d |
2978d
|
5/29 |
2940d |
b714295abc59
tipc: Fix missing list initializations in struct tipc_subscription
|
|
KASAN: use-after-free Write in dst_release
net
|
22 |
C |
|
|
832 |
2966d |
2976d
|
5/29 |
2940d |
bfacfb457b36
pptp: remove a buggy dst release in pptp_connect()
|
|
KMSAN: uninit-value in tcp_parse_options
net
|
7 |
C |
|
|
38 |
2941d |
2968d
|
5/29 |
2940d |
721230326891
tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
|
|
KASAN: stack-out-of-bounds Write in ipip6_tunnel_locate
net
|
21 |
C |
|
|
33 |
2966d |
2973d
|
5/29 |
2940d |
b95211e066fc
ipv6: sit: better validate user provided tunnel names
|
|
KMSAN: uninit-value in fib_create_info
net
|
7 |
C |
|
|
19 |
2965d |
2971d
|
5/29 |
2940d |
b1993a2de12c
net: fix rtnh_ok()
|
|
KMSAN: uninit-value in iptable_mangle_hook
netfilter
|
7 |
C |
|
|
1134 |
2940d |
2971d
|
5/29 |
2940d |
b855ff827476
dccp: initialize ireq->ir_mark
|
|
kernel BUG at fs/ext4/extents.c:LINE!
ext4
|
-1 |
C |
|
|
1 |
2978d |
2977d
|
5/29 |
2940d |
349fa7d6e193
ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS
|
|
possible deadlock in smc_close_non_accepted
smc
|
4 |
C |
|
|
4 |
3008d |
3008d
|
5/29 |
2944d |
3d502067599f
net/smc: simplify wait when closing listen socket
|
|
BUG: unable to handle kernel paging request in compat_copy_entries
netfilter
bridge
|
8 |
syz |
|
|
5 |
3006d |
3005d
|
5/29 |
2954d |
b71812168571
netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
|
|
KASAN: slab-out-of-bounds Write in tcp_v6_syn_recv_sock
net
|
21 |
C |
|
|
1063 |
3049d |
3066d
|
5/29 |
2954d |
d91c3e17f75f
net/tls: Only attach to sockets in ESTABLISHED state
|
|
KASAN: use-after-free Read in perf_trace_lock_acquire (2)
kvm
net
virt
|
19 |
C |
|
|
188 |
3036d |
3107d
|
5/29 |
2954d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
possible deadlock in ftrace_profile_set_filter (2)
trace
|
4 |
C |
|
|
1007 |
3037d |
3096d
|
5/29 |
2954d |
43fa87f7deed
perf/core: Fix another perf,trace,cpuhp lock inversion
|
|
possible deadlock in perf_trace_destroy (2)
trace
|
4 |
C |
|
|
2006 |
3037d |
3122d
|
5/29 |
2954d |
82d94856fa22
perf/core: Fix lock inversion between perf,trace,cpuhp
|
|
WARNING in binder_send_failed_reply
kernel
|
-1 |
C |
|
|
206 |
3015d |
3098d
|
5/29 |
2970d |
e46a3b3ba750
ANDROID: binder: remove WARN() for redundant txn error
|
|
KASAN: use-after-free Read in disk_unblock_events
block
|
19 |
C |
|
|
65 |
3024d |
3130d
|
5/29 |
2970d |
897366537fb6
genhd: Fix use after free in __blkdev_get()
|
|
WARNING in skb_warn_bad_offload
net
|
-1 |
C |
|
|
6527 |
3004d |
3128d
|
5/29 |
2970d |
8d74e9f88d65
net: avoid skb_warn_bad_offload on IS_ERR
|
|
KASAN: use-after-free Read in worker_thread (2)
net
|
19 |
syz |
|
|
6 |
3112d |
3121d
|
5/29 |
2972d |
581e7226a5d4
kcm: Only allow TCP sockets to be attached to a KCM mux
|
|
BUG: unable to handle kernel (2)
net
|
-1 |
syz |
|
|
1 |
2982d |
2982d
|
5/29 |
2972d |
c769accdf3d8
vlan: Fix vlan insertion for packets without ethernet header
|
|
general protection fault in rdma_init_qp_attr (2)
rdma
|
2 |
C |
|
|
753 |
2980d |
2986d
|
5/29 |
2972d |
4b658d1bbc16
RDMA/ucma: Check that device is connected prior to access it
|
|
general protection fault in native_write_cr4
kvm-x86
|
2 |
C |
|
|
132300 |
2975d |
3080d
|
5/29 |
2972d |
8eb3f87d9031
KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
|
|
general protection fault in try_to_wake_up
kernel
|
2 |
syz |
|
|
1 |
2984d |
2980d
|
5/29 |
2972d |
c769accdf3d8
vlan: Fix vlan insertion for packets without ethernet header
|
|
WARNING in xt_cluster_mt
netfilter
|
-1 |
C |
|
|
4 |
3010d |
3010d
|
5/29 |
2972d |
aebfa52a925d
netfilter: drop template ct when conntrack is skipped.
|
|
BUG: unable to handle kernel paging request in netdev_queue_update_kobjects
net
|
8 |
syz |
|
|
1 |
2983d |
2983d
|
5/29 |
2972d |
c769accdf3d8
vlan: Fix vlan insertion for packets without ethernet header
|
|
kernel BUG at ./include/linux/skbuff.h:LINE! (2)
net
|
-1 |
C |
|
|
5 |
3009d |
2987d
|
5/29 |
2972d |
10b8a3de603d
ipv6: the entire IPv6 header chain must fit the first fragment
|
|
kernel BUG at drivers/vhost/vhost.c:LINE!
kvm
net
virt
|
-1 |
C |
|
|
152 |
2972d |
2991d
|
5/29 |
2972d |
d65026c6c62e
vhost: validate log when IOTLB is enabled
|
|
BUG: corrupted list in remove_wait_queue
virt
kvm
net
|
8 |
C |
|
|
5 |
2985d |
2988d
|
5/29 |
2972d |
dc6455a71c7f
vhost: correctly remove wait queue during poll failure
|
|
possible deadlock in handle_rx
virt
kvm
net
|
4 |
C |
|
|
4 |
2984d |
2984d
|
5/29 |
2972d |
aaa3149bbee9
vhost_net: add missing lock nesting notation
|
|
kernel BUG at lib/string.c:LINE! (3)
rdma
|
-1 |
C |
|
|
5 |
2981d |
2982d
|
5/29 |
2972d |
84652aefb347
RDMA/ucma: Introduce safer rdma_addr_size() variants
|
|
general protection fault in timerqueue_add
kernel
|
2 |
C |
|
|
2 |
2982d |
2982d
|
5/29 |
2972d |
c769accdf3d8
vlan: Fix vlan insertion for packets without ethernet header
|
|
general protection fault in rdma_notify
rdma
|
2 |
C |
|
|
3 |
2989d |
2986d
|
5/29 |
2972d |
c8d3bcbfc5ea
RDMA/ucma: Check that device exists prior to accessing it
|
|
WARNING in __xlate_proc_name
netfilter
|
-1 |
C |
|
|
11 |
3005d |
3041d
|
4/29 |
2986d |
b1d0a5d0cba4
netfilter: x_tables: add and use xt_check_proc_name
|
|
WARNING: kmalloc bug in xfrm_add_sa
net
|
-1 |
C |
|
|
109 |
2986d |
3025d
|
4/29 |
2986d |
d97ca5d714a5
xfrm_user: uncoditionally validate esn replay attribute struct
|
|
KASAN: use-after-free Read in pfifo_fast_enqueue
net
|
19 |
C |
|
|
20 |
2988d |
3052d
|
4/29 |
2986d |
cce6294cc2ea
net: sched: fix uses after free
|
|
possible deadlock in get_user_pages_unlocked
mm
|
4 |
C |
|
|
5 |
3013d |
3036d
|
4/29 |
2986d |
96312e61282a
mm/gup.c: teach get_user_pages_unlocked to handle FOLL_NOWAIT
|
|
KASAN: use-after-free Read in pppol2tp_connect (2)
net
|
19 |
C |
|
|
10 |
2987d |
3002d
|
4/29 |
2986d |
17cfe79a65f9
l2tp: do not accept arbitrary sockets
|
|
KASAN: use-after-free Read in snd_pcm_oss_get_formats
sound
|
19 |
C |
|
|
3 |
3000d |
3000d
|
4/29 |
2986d |
01c0b4265cc1
ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
|
|
WARNING: kmalloc bug in memdup_user
rdma
|
-1 |
C |
|
|
441 |
2987d |
3003d
|
4/29 |
2986d |
6a21dfc0d0db
RDMA/ucma: Limit possible option size
|
|
general protection fault in rdma_join_multicast
rdma
|
2 |
C |
|
|
258 |
2989d |
3003d
|
4/29 |
2986d |
7688f2c3bbf5
RDMA/ucma: Fix access to non-initialized CM_ID object
|
|
WARNING in __proc_create
netfilter
|
-1 |
C |
|
|
12 |
3007d |
3000d
|
4/29 |
2986d |
b1d0a5d0cba4
netfilter: x_tables: add and use xt_check_proc_name
|
|
general protection fault in lowpan_device_event
wpan
|
2 |
C |
|
|
79 |
2987d |
3004d
|
4/29 |
2986d |
ca0edb131bdf
ieee802154: 6lowpan: fix possible NULL deref in lowpan_device_event()
|
|
KASAN: use-after-free Read in ucma_close
rdma
|
19 |
C |
|
|
176 |
2989d |
3003d
|
4/29 |
2986d |
ed65a4dc2208
RDMA/ucma: Fix use-after-free access in ucma_close
|
|
KASAN: slab-out-of-bounds Read in ip6_xmit (2)
net
|
17 |
C |
|
|
259 |
2989d |
3003d
|
4/29 |
2986d |
b954f94023dc
l2tp: fix races with ipv4-mapped ipv6 addresses
|
|
KASAN: use-after-free Read in get_work_pool
|
19 |
syz |
|
|
8 |
3112d |
3134d
|
4/29 |
2986d |
2cc683e88c0c
kcm: lock lower socket in kcm_attach
|
|
general protection fault in rdma_init_qp_attr
rdma
|
2 |
C |
|
|
2096 |
2986d |
3002d
|
4/29 |
2986d |
a5880b844303
RDMA/ucma: Check that user doesn't overflow QP state
|
|
BUG: unable to handle kernel paging request in ata_bmdma_qc_prep
|
8 |
C |
|
|
13 |
3121d |
3130d
|
4/29 |
2986d |
058f58e235cb
libata: fix length validation of ATAPI-relayed SCSI commands
|
|
possible deadlock in __might_fault
staging
|
4 |
C |
|
|
8978 |
2995d |
3011d
|
4/29 |
2986d |
740a5759bf22
staging: android: ashmem: Fix possible deadlock in ashmem_ioctl
|
|
KASAN: null-ptr-deref Write in rdma_resolve_addr
rdma
|
12 |
C |
|
|
66 |
2989d |
3000d
|
4/29 |
2986d |
2975d5de6428
RDMA/ucma: Check AF family prior resolving address
|
|
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock
net
|
21 |
C |
|
|
4 |
3004d |
3004d
|
4/29 |
2986d |
17cfe79a65f9
l2tp: do not accept arbitrary sockets
|
|
general protection fault in dccp_write_xmit
net
|
2 |
C |
|
|
5 |
3004d |
3040d
|
4/29 |
2986d |
67f93df79aee
dccp: check sk for closed state in dccp_sendmsg()
|
|
BUG: unable to handle kernel paging request in ebt_among_mt_check (2)
netfilter
bridge
|
8 |
C |
|
|
946 |
2986d |
3002d
|
4/29 |
2986d |
c8d70a700a5b
netfilter: bridge: ebt_among: add more missing match size checks
|
|
KASAN: stack-out-of-bounds Read in xfrm_state_find (4)
net
|
17 |
C |
|
|
102 |
2986d |
3037d
|
4/29 |
2986d |
19d7df69fdb2
xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems
|
|
WARNING in ata_bmdma_qc_issue
|
-1 |
C |
|
|
1 |
3210d |
3130d
|
4/29 |
2986d |
2c1ec6fda2d0
libata: don't try to pass through NCQ commands to non-NCQ devices
|
|
WARNING in ata_qc_issue
|
-1 |
C |
|
|
35 |
3115d |
3134d
|
4/29 |
2986d |
9173e5e80729
libata: remove WARN() for DMA or PIO command without data
|
|
general protection fault in ucma_connect
rdma
|
2 |
C |
|
|
2 |
2994d |
2993d
|
4/29 |
2986d |
e8980d67d601
RDMA/ucma: Ensure that CM_ID exists prior to access it
|
|
kernel panic: Out of memory and no killable processes... (2)
mm
|
2 |
C |
|
|
1 |
3040d |
3040d
|
4/29 |
2986d |
0537250fdc6c
netfilter: x_tables: make allocation less aggressive
|
|
kernel BUG at lib/string.c:LINE! (2)
rdma
|
-1 |
syz |
|
|
2 |
2997d |
2997d
|
4/29 |
2986d |
0c81ffc60d52
RDMA/ucma: Don't allow join attempts for unsupported AF family
|
|
possible deadlock in shmem_file_llseek
mm
|
4 |
C |
|
|
4432 |
2995d |
3059d
|
4/29 |
2986d |
cb57469c9573
staging: android: ashmem: Fix lockdep issue during llseek
|
|
WARNING in kvm_arch_vcpu_ioctl_run (2)
kvm-x86
|
-1 |
C |
|
|
61018 |
3040d |
3128d
|
4/29 |
2997d |
c37c28730bb0
KVM: VMX: Fix rflags cache during vCPU reset
|
|
WARNING in refcount_sub_and_test
sctp
|
-1 |
C |
|
|
75150 |
3035d |
3136d
|
4/29 |
2998d |
d04adf1b3551
sctp: reset owner sk for data chunks on out queues when migrating a sock
|
|
WARNING in tracepoint_probe_unregister
block
trace
|
-1 |
C |
|
|
115 |
2998d |
3125d
|
4/29 |
2998d |
a6da0024ffc1
blktrace: fix unlocked registration of tracepoints
|
|
kernel BUG at arch/x86/kvm/x86.c:LINE!
|
-1 |
syz |
|
|
20 |
3101d |
3134d
|
4/29 |
2998d |
61cb57c9ed63
KVM: x86: Exit to user-mode on #UD intercept when emulator requires
|
|
WARNING in tracepoint_probe_register_prio
trace
block
|
-1 |
C |
|
|
830 |
2998d |
3134d
|
4/29 |
2998d |
a6da0024ffc1
blktrace: fix unlocked registration of tracepoints
|
|
KASAN: use-after-free Read in strp_data_ready
net
|
19 |
C |
|
|
204 |
3044d |
3136d
|
4/29 |
2998d |
581e7226a5d4
kcm: Only allow TCP sockets to be attached to a KCM mux
|
|
general protection fault in hrtimer_active (2)
kernel
|
2 |
C |
|
|
10612 |
3006d |
3010d
|
4/29 |
3003d |
b7e31be38558
KVM: x86: fix vcpu initialization with userspace lapic
|
|
KASAN: use-after-free Read in pppol2tp_connect
net
|
19 |
C |
|
|
25 |
3003d |
3053d
|
4/29 |
3003d |
28f5bfb81919
l2tp: fix tunnel lookup use-after-free race
|
|
kernel BUG at arch/x86/kvm/mmu.c:LINE!
kvm-x86
|
-1 |
C |
|
|
695 |
3011d |
3128d
|
4/29 |
3003d |
b28676bb8ae4
KVM: mmu: Fix overlap between public and private memslots
|
|
KASAN: slab-out-of-bounds Read in ip6_xmit
net
|
17 |
C |
|
|
156 |
3005d |
3055d
|
4/29 |
3003d |
c113187d38ff
tls: Use correct sk->sk_prot for IPV6
|
|
KASAN: slab-out-of-bounds Read in ip6_route_me_harder
netfilter
|
17 |
C |
|
|
66 |
3004d |
3012d
|
4/29 |
3003d |
7d98386d55a5
netfilter: use skb_to_full_sk in ip6_route_me_harder
|
|
general protection fault in smc_create
smc
|
2 |
C |
|
|
2 |
3011d |
3011d
|
4/29 |
3003d |
a5dcb73b96a9
net/smc: fix NULL pointer dereference on sock_create_kern() error path
|
|
WARNING in __x86_set_memory_region
kvm-x86
|
-1 |
C |
|
|
716 |
3011d |
3129d
|
4/29 |
3003d |
103c763c72dd
KVM/x86: remove WARN_ON() for when vm_munmap() fails
|
|
KASAN: use-after-free Read in ip6_route_me_harder
netfilter
|
19 |
C |
|
|
44 |
3004d |
3012d
|
4/29 |
3003d |
7d98386d55a5
netfilter: use skb_to_full_sk in ip6_route_me_harder
|
|
KASAN: use-after-free Write in nf_nat_ipv6_manip_pkt
netfilter
|
22 |
C |
|
|
2 |
3019d |
3019d
|
4/29 |
3003d |
b078556aecd7
netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
|
|
WARNING in debug_print_object
net
|
-1 |
C |
|
|
2 |
3036d |
3036d
|
4/29 |
3003d |
28f5bfb81919
l2tp: fix tunnel lookup use-after-free race
|
|
WARNING in compat_copy_entries
netfilter
bridge
|
-1 |
C |
|
|
434 |
3003d |
3019d
|
4/29 |
3003d |
b71812168571
netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
|
|
general protection fault in pppol2tp_connect
net
|
2 |
C |
|
|
1025 |
3004d |
3053d
|
4/29 |
3003d |
28f5bfb81919
l2tp: fix tunnel lookup use-after-free race
|
|
KASAN: use-after-free Read in inet_shutdown
net
|
19 |
C |
|
|
22 |
3005d |
3052d
|
4/29 |
3003d |
28f5bfb81919
l2tp: fix tunnel lookup use-after-free race
|
|
WARNING in handle_ept_misconfig
kvm-x86
|
-1 |
C |
|
|
238 |
3011d |
3134d
|
4/29 |
3003d |
95e057e25892
KVM: X86: Fix SMRAM accessing even if VM is shutdown
|
|
BUG: unable to handle kernel paging request in ebt_among_mt_check
bridge
netfilter
|
8 |
C |
|
|
823 |
3003d |
3019d
|
4/29 |
3003d |
c4585a2823ed
netfilter: bridge: ebt_among: add missing match size checks
|
|
WARNING: ODEBUG bug in __queue_work
netfilter
|
-1 |
C |
|
|
2 |
3021d |
3017d
|
4/29 |
3011d |
cfc2c7405333
netfilter: IDLETIMER: be syzkaller friendly
|
|
WARNING in kvmalloc_node
net
bpf
|
-1 |
C |
|
|
513 |
3018d |
3024d
|
4/29 |
3011d |
7fc17e909edf
bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
|
|
lost connection to test machine (4)
|
-1 |
C |
|
|
1189 |
3011d |
3025d
|
4/29 |
3011d |
9c2d63b843a5
bpf: fix mlock precharge on arraymaps
|
|
BUG: unable to handle kernel NULL pointer dereference in sha512_mb_mgr_get_comp_job_avx2
crypto
|
10 |
syz |
|
|
32 |
3043d |
3096d
|
4/29 |
3011d |
eff84b379089
crypto: sha512-mb - initialize pending lengths correctly
|
|
WARNING in check_flush_dependency
wireless
|
-1 |
C |
|
|
2205 |
3013d |
3046d
|
4/29 |
3011d |
ce162bfbc0b6
mac80211_hwsim: don't use WQ_MEM_RECLAIM
|
|
WARNING: ODEBUG bug in led_tg_destroy
netfilter
|
-1 |
C |
|
|
4 |
3017d |
3025d
|
4/29 |
3011d |
10414014bc08
netfilter: x_tables: fix missing timer initialization in xt_LED
|
|
WARNING: kmalloc bug in cpu_map_update_elem
bpf
net
|
-1 |
C |
|
|
2677 |
3011d |
3023d
|
4/29 |
3011d |
7fc17e909edf
bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
|
|
WARNING in __queue_work
netfilter
|
-1 |
C |
|
|
1 |
3021d |
3021d
|
4/29 |
3011d |
cfc2c7405333
netfilter: IDLETIMER: be syzkaller friendly
|
|
general protection fault in ip6t_do_table
netfilter
|
2 |
C |
|
|
8077 |
3014d |
3041d
|
4/29 |
3011d |
57ebd808a97d
netfilter: add back stackpointer size checks
|
|
WARNING in kmalloc_slab (3)
net
|
-1 |
C |
|
|
1901 |
3012d |
3096d
|
4/29 |
3011d |
88913bd8ea2a
kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE
|
|
general protection fault in binder_poll
kernel
|
2 |
C |
|
|
159 |
3015d |
3098d
|
4/29 |
3011d |
f88982679f54
binder: check for binder_thread allocation failure in binder_poll()
|
|
WARNING: kmalloc bug in relay_open_buf
trace
block
|
-1 |
C |
|
|
10 |
3015d |
3031d
|
4/29 |
3011d |
88913bd8ea2a
kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE
|
|
kernel BUG at kernel/time/timer.c:LINE!
netfilter
|
-1 |
C |
|
|
18 |
3013d |
3025d
|
4/29 |
3011d |
10414014bc08
netfilter: x_tables: fix missing timer initialization in xt_LED
|
|
WARNING: bad unlock balance in hashlimit_mt_common
netfilter
|
4 |
C |
|
|
2059 |
3013d |
3026d
|
4/29 |
3011d |
de526f401284
netfilter: xt_hashlimit: fix lock imbalance
|
|
general protection fault in arpt_do_table
netfilter
|
2 |
C |
|
|
3 |
3016d |
3016d
|
4/29 |
3011d |
57ebd808a97d
netfilter: add back stackpointer size checks
|
|
WARNING: kmalloc bug in bpf_prog_array_copy_info
bpf
|
-1 |
C |
|
|
4424 |
3011d |
3024d
|
4/29 |
3011d |
9c481b908b01
bpf: fix bpf_prog_array_copy_to_user warning from perf event prog query
|
|
divide error in nf_nat_l4proto_unique_tuple
netfilter
|
2 |
C |
|
|
2 |
3026d |
3025d
|
4/29 |
3011d |
db57ccf0f2f4
netfilter: nat: cope with negative port range
|
|
possible deadlock in rtnl_lock (4)
net
|
4 |
C |
|
|
73333 |
3013d |
3030d
|
4/29 |
3011d |
01ea306f2ac2
netfilter: drop outermost socket lock in getsockopt()
|
|
WARNING: proc registration bug in clusterip_tg_check
netfilter
|
-1 |
C |
|
|
779 |
3013d |
3031d
|
4/29 |
3011d |
b3e456fce9f5
netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
|
|
general protection fault in SyS_bpf (2)
bpf
|
2 |
C |
|
|
1065 |
3011d |
3025d
|
4/29 |
3011d |
952fad8e3239
bpf: fix sock_map_alloc() error path
|
|
KASAN: use-after-free Read in remove_wait_queue
fs
|
19 |
C |
|
|
7 |
3016d |
3025d
|
4/29 |
3011d |
5eeb2ca02a2f
ANDROID: binder: synchronize_rcu() when using POLLFREE.
|
|
KASAN: use-after-free Read in __do_page_fault
mm
|
19 |
syz |
|
|
679 |
3119d |
3130d
|
4/29 |
3023d |
cb0631fd3cf9
x86/mm: fix use-after-free of vma during userfaultfd fault
|
|
INFO: rcu detected stall in tty_ioctl
serial
|
1 |
C |
|
|
12 |
3067d |
3079d
|
4/29 |
3023d |
966031f34018
n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)
|
|
KASAN: slab-out-of-bounds Read in string
kernel
|
17 |
C |
|
|
129 |
3034d |
3044d
|
4/29 |
3023d |
da17c73b6eb7
netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}
|
|
KASAN: use-after-free Read in __schedule
kvm-x86
|
19 |
C |
|
|
145 |
3078d |
3079d
|
4/29 |
3023d |
8dbfb2bf1bb3
KVM: x86: don't forget vcpu_put() in kvm_arch_vcpu_ioctl_set_sregs()
|
|
general protection fault in ___bpf_prog_run
bpf
|
2 |
C |
|
|
8 |
3031d |
3038d
|
4/29 |
3025d |
65073a67331d
bpf: fix null pointer deref in bpf_prog_test_run_xdp
|
|
KASAN: use-after-free Write in xt_rateest_tg_checkentry
netfilter
|
22 |
C |
|
|
2 |
3038d |
3039d
|
4/29 |
3025d |
7dc68e98757a
netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
|
|
WARNING in usercopy_warn
hardening
mm
|
-1 |
C |
|
|
171 |
3031d |
3049d
|
4/29 |
3025d |
79a8a642bf05
net: Whitelist the skbuff_head_cache "cb" field
|
|
suspicious RCU usage at ./include/linux/rcupdate.h:LINE (4)
perf
|
-1 |
C |
|
|
7264 |
3031d |
3035d
|
4/29 |
3025d |
0911287ce32b
bpf: fix bpf_prog_array_copy_to_user() issues
|
|
general protection fault in cgroup_mt_destroy_v1
netfilter
|
2 |
C |
|
|
91 |
3028d |
3040d
|
4/29 |
3025d |
ba7cd5d95f25
netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
|
|
KASAN: double-free or invalid-free in relay_open
trace
block
|
24 |
C |
|
|
106 |
3031d |
3129d
|
4/29 |
3025d |
a1be1f3931bf
kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
|
|
WARNING: suspicious RCU usage in bpf_prog_array_copy_info
perf
|
4 |
C |
|
|
17842 |
3025d |
3031d
|
4/29 |
3025d |
0911287ce32b
bpf: fix bpf_prog_array_copy_to_user() issues
|
|
WARNING: kmalloc bug in tun_device_event
net
|
-1 |
C |
|
|
15 |
3029d |
3031d
|
4/29 |
3025d |
6e6e41c31122
ptr_ring: fail early if queue occupies more than KMALLOC_MAX_SIZE
0bf7800f1799
ptr_ring: try vmalloc() when kmalloc() fails
|
|
WARNING in do_debug
kernel
|
-1 |
C |
|
|
905 |
3030d |
3129d
|
4/29 |
3025d |
efdab992813f
KVM: x86: fix escape of guest dr6 to the host
|
|
possible deadlock in rtnl_lock (3)
net
|
4 |
C |
|
|
3633 |
3030d |
3031d
|
4/29 |
3030d |
3f34cfae1238
netfilter: on sockopt() acquire sock lock only in the required scope
|
|
WARNING: bad unlock balance in ipmr_mfc_seq_stop
net
|
4 |
C |
|
|
286 |
3037d |
3084d
|
4/29 |
3031d |
4adfa79fc254
ip6mr: fix stale iterator
|
|
lost connection to test machine (3)
|
-1 |
C |
|
|
4251 |
3033d |
3072d
|
4/29 |
3033d |
889c604fd0b5
netfilter: x_tables: fix int overflow in xt_alloc_table_info()
|
|
WARNING in ion_ioctl
staging
|
-1 |
C |
|
|
8888 |
3036d |
3064d
|
4/29 |
3033d |
e4e179a844f5
staging: android: ion: Switch from WARN to pr_warn
|
|
suspicious RCU usage at ./include/linux/inetdevice.h:LINE (2)
net
|
-1 |
C |
|
|
4 |
3036d |
3036d
|
4/29 |
3033d |
e7aadb27a541
net: igmp: add a missing rcu locking section
|
|
possible deadlock in rtnl_lock (2)
net
|
4 |
C |
|
|
10369 |
3033d |
3036d
|
4/29 |
3033d |
3f34cfae1238
netfilter: on sockopt() acquire sock lock only in the required scope
|
|
WARNING in reuseport_add_sock
net
|
-1 |
C |
|
|
7 |
3046d |
3056d
|
4/29 |
3033d |
4db428a7c9ab
soreuseport: fix mem leak in reuseport_add_sock()
|
|
WARNING in __check_heap_object
hardening
mm
|
-1 |
C |
|
|
5173 |
3050d |
3122d
|
4/29 |
3033d |
ab9ee8e38b29
sctp: Define usercopy region in SCTP proto slab cache
|
|
KASAN: use-after-free Read in __lock_acquire (2)
fs
|
19 |
C |
|
|
589 |
3036d |
3111d
|
4/29 |
3033d |
f5cb779ba163
ANDROID: binder: remove waitqueue when thread exits.
|
|
WARNING in __alloc_pages_slowpath
mm
|
-1 |
C |
|
|
9435 |
3036d |
3064d
|
4/29 |
3033d |
0c75f10312a3
staging: android: ion: Add __GFP_NOWARN for system contig heap
|
|
WARNING in register_lock_class
fs
|
-1 |
C |
|
|
2 |
3080d |
3076d
|
4/29 |
3033d |
f5cb779ba163
ANDROID: binder: remove waitqueue when thread exits.
|
|
INFO: trying to register non-static key in pfifo_fast_reset
net
|
-1 |
C |
|
|
4 |
3080d |
3083d
|
4/29 |
3033d |
1df94c3c5dad
net_sched: properly check for empty skb array on error path
|
|
KASAN: use-after-free Read in tipc_group_size
tipc
|
19 |
C |
|
|
8 |
3053d |
3060d
|
4/29 |
3036d |
60c253069632
tipc: fix race between poll() and setsockopt()
|
|
suspicious RCU usage at net/ipv6/ip6_fib.c:LINE
net
|
-1 |
C |
|
|
56 |
3044d |
3066d
|
4/29 |
3036d |
4512c43eac7e
ipv6: remove null_entry before adding default route
|
|
BUG: Bad page state (3)
usb
|
-1 |
C |
|
|
3 |
3061d |
3068d
|
4/29 |
3036d |
46eb14a6e158
USB: fix usbmon BUG trigger
|
|
WARNING in usb_submit_urb
usb
|
-1 |
C |
|
|
2 |
3131d |
3122d
|
4/29 |
3036d |
446f666da9f0
USB: usbfs: Filter flags passed in from user space
|
|
WARNING in task_participate_group_stop
|
-1 |
C |
|
|
29 |
3115d |
3130d
|
4/29 |
3036d |
426915796cca
kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
|
|
general protection fault in trie_get_next_key
bpf
|
2 |
C |
|
|
3 |
3042d |
3043d
|
4/29 |
3036d |
6dd1ec6c7a2c
bpf: fix kernel page fault in lpm map trie_get_next_key
|
|
general protection fault in page_mapping
fs
mm
|
2 |
C |
|
|
46 |
3060d |
3087d
|
4/29 |
3036d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
KASAN: double-free or invalid-free in skb_free_head
net
virt
|
24 |
C |
|
|
13 |
3075d |
3082d
|
4/29 |
3036d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
BUG: unable to handle kernel NULL pointer dereference in page_mapping
fs
mm
|
10 |
C |
|
|
4 |
3080d |
3082d
|
4/29 |
3036d |
7d11f77f84b2
RDS: null pointer dereference in rds_atomic_free_op
|
|
general protection fault in __netlink_ns_capable
net
|
2 |
C |
|
|
74 |
3059d |
3066d
|
4/29 |
3036d |
f428fe4a04cc
rtnetlink: give a user socket to get_target_net()
|
|
BUG: looking up invalid subclass: 8
sound
|
-1 |
C |
|
|
5 |
3123d |
3123d
|
4/29 |
3037d |
3510c7aa069a
ALSA: seq: Avoid invalid lockdep class warning
|
|
general protection fault in nfs_idmap_legacy_upcall
nfs
|
2 |
C |
|
|
4 |
3050d |
3049d
|
4/29 |
3037d |
49686cbbb3eb
NFS: reject request for id_legacy key without auxdata
|
|
BUG: unable to handle kernel paging request in devpts_mntget
fs
|
8 |
C |
|
|
21 |
3050d |
3126d
|
4/29 |
3037d |
c9cc8d01fb04
devpts: fix error handling in devpts_mntget()
|
|
KASAN: slab-out-of-bounds Read in strcmp
selinux
|
17 |
C |
|
|
150 |
3093d |
3102d
|
4/29 |
3037d |
ef28df55ac27
selinux: ensure the context is NUL terminated in security_context_to_sid_core()
|
|
KASAN: use-after-free Read in __xfrm_state_lookup
net
|
19 |
C |
|
|
7 |
3129d |
3128d
|
4/29 |
3037d |
cb79a180f2e7
xfrm: defer daddr pointer assignment after spi parsing
|
|
KASAN: use-after-free Read in map_lookup_elem
bpf
|
19 |
C |
|
|
6 |
3052d |
3056d
|
4/29 |
3037d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
general protection fault in fib6_add (2)
net
|
2 |
C |
|
|
3143 |
3059d |
3066d
|
4/29 |
3037d |
7bbfe00e0252
ipv6: fix general protection fault in fib6_add()
|
|
kernel BUG at drivers/android/binder_alloc.c:LINE!
kernel
|
-1 |
C |
|
|
856 |
3094d |
3098d
|
4/29 |
3037d |
fb2c445277e7
ANDROID: binder: fix transaction leak.
|
|
kernel BUG at fs/userfaultfd.c:LINE!
mm
fs
|
-1 |
C |
|
|
3 |
3080d |
3077d
|
4/29 |
3037d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
|
general protection fault in tun_queue_purge
net
|
2 |
C |
|
|
4 |
3042d |
3044d
|
4/29 |
3037d |
9fb582b67072
Revert "net: ptr_ring: otherwise safe empty checks can overrun array bounds"
|
|
general protection fault in sidtab_search_core
selinux
|
2 |
syz |
|
|
1306 |
3092d |
3098d
|
4/29 |
3037d |
4b14752ec4e0
selinux: skip bounded transition processing if the policy isn't loaded
|
|
WARNING in vhost_dev_cleanup
net
virt
kvm
|
-1 |
C |
|
|
4 |
3038d |
3044d
|
4/29 |
3037d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
KASAN: slab-out-of-bounds Write in sha3_update (2)
crypto
|
21 |
C |
|
|
49 |
3038d |
3077d
|
4/29 |
3037d |
9fa68f620041
crypto: hash - prevent using keyed hashes without setting key
|
|
general protection fault in show_timer
fs
|
2 |
C |
|
|
10 |
3081d |
3100d
|
4/29 |
3037d |
cef31d9af908
posix-timer: Properly check sigevent->sigev_notify
|
|
BUG: unable to handle kernel paging request in check_memory_region
bpf
|
8 |
C |
|
|
10 |
3053d |
3056d
|
4/29 |
3037d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
KASAN: use-after-free Read in __wake_up_common
fs
|
19 |
C |
|
|
888 |
3037d |
3046d
|
4/29 |
3037d |
4cd879515d68
vhost_net: stop device during reset owner
|
|
KASAN: use-after-free Read in sctp_association_free
sctp
|
19 |
C |
|
|
20 |
3113d |
3128d
|
4/29 |
3037d |
ca3af4dd28cf
sctp: do not free asoc when it is already dead in sctp_sendmsg
|
|
WARNING: kernel stack regs has bad 'bp' value (2)
|
-1 |
C |
|
|
16238 |
3037d |
3101d
|
4/29 |
3037d |
d8c7fe9f2a48
crypto: x86/twofish-3way - Fix %rbp usage
|
|
KASAN: stack-out-of-bounds Read in rds_sendmsg
rds
|
17 |
C |
|
|
120 |
3066d |
3091d
|
4/29 |
3037d |
14e138a86f63
RDS: Check cmsg_len before dereferencing CMSG_DATA
|
|
inconsistent lock state in est_fetch_counters
net
|
4 |
C |
|
|
5829 |
3037d |
3041d
|
4/29 |
3037d |
40ca54e3a686
net_sched: gen_estimator: fix lockdep splat
|
|
KASAN: slab-out-of-bounds Read in sctp_send_reset_streams
sctp
|
17 |
C |
|
|
73 |
3079d |
3091d
|
4/29 |
3037d |
2342b8d95bca
sctp: make sure stream nums can match optlen in sctp_setsockopt_reset_streams
|
|
KASAN: slab-out-of-bounds Read in xfrm_hash_rebuild
net
|
17 |
C |
|
|
18 |
3054d |
3122d
|
4/29 |
3037d |
862591bf4f51
xfrm: skip policies marked as dead while rehashing
|
|
general protection fault in copy_verifier_state
bpf
|
2 |
C |
|
|
2 |
3070d |
3066d
|
4/29 |
3037d |
5896351ea936
bpf: fix verifier GPF in kmalloc failure path
|
|
general protection fault in free_verifier_state (2)
bpf
|
2 |
C |
|
|
2 |
3061d |
3061d
|
4/29 |
3037d |
5896351ea936
bpf: fix verifier GPF in kmalloc failure path
|
|
suspicious RCU usage at net/netfilter/ipset/ip_set_core.c:LINE
netfilter
|
-1 |
C |
|
|
38048 |
3058d |
3064d
|
4/29 |
3037d |
f998b6b10144
netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
|
|
WARNING in xdp_rxq_info_unreg
bpf
net
|
-1 |
C |
|
|
198 |
3046d |
3046d
|
4/29 |
3037d |
c13da21cdb80
tun: avoid calling xdp_rxq_info_unreg() twice
|
|
KASAN: use-after-free Read in erspan_xmit
net
|
19 |
C |
|
|
68 |
3044d |
3046d
|
4/29 |
3037d |
b423d13c08a6
net: erspan: fix use-after-free
|
|
KASAN: use-after-free Read in rb_first_postorder
tipc
|
19 |
C |
|
|
17267 |
3050d |
3059d
|
4/29 |
3037d |
febafc8455fd
tipc: fix a potental access after delete in tipc_sk_join()
|
|
suspicious RCU usage at ./include/linux/rcupdate.h:LINE (3)
bpf
|
-1 |
C |
|
|
5087 |
3038d |
3046d
|
4/29 |
3037d |
2310035fa03f
bpf: fix incorrect kmalloc usage in lpm_trie MAP_GET_NEXT_KEY rcu region
|
|
KASAN: slab-out-of-bounds Read in erspan_build_header
net
|
17 |
C |
|
|
30 |
3037d |
3046d
|
4/29 |
3037d |
b423d13c08a6
net: erspan: fix use-after-free
|
|
general protection fault in get_info
netfilter
|
2 |
C |
|
|
760 |
3053d |
3056d
|
4/29 |
3037d |
e3eeacbac4ad
netfilter: x_tables: don't return garbage pointer on modprobe failure
|
|
KASAN: slab-out-of-bounds Read in erspan_xmit
net
|
17 |
C |
|
|
51 |
3044d |
3046d
|
4/29 |
3037d |
b423d13c08a6
net: erspan: fix use-after-free
|
|
possible deadlock in rtnl_lock
net
|
4 |
C |
|
|
15711 |
3037d |
3093d
|
4/29 |
3037d |
124da8f6118b
tuntap: fix possible deadlock when fail to register netdev
|
|
KASAN: use-after-free Read in erspan_build_header
net
|
19 |
C |
|
|
60 |
3037d |
3046d
|
4/29 |
3037d |
b423d13c08a6
net: erspan: fix use-after-free
|
|
KASAN: use-after-free Read in tipc_group_is_open
tipc
|
19 |
C |
|
|
1 |
3053d |
3053d
|
4/29 |
3037d |
60c253069632
tipc: fix race between poll() and setsockopt()
|
|
KASAN: stack-out-of-bounds Read in xfrm_state_find (3)
net
|
17 |
C |
|
|
10353 |
3042d |
3109d
|
4/29 |
3038d |
732706afe1cc
xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.
|
|
general protection fault in __rds_rdma_map
rds
|
2 |
C |
|
|
12 |
3090d |
3102d
|
4/29 |
3038d |
f3069c6d33f6
rds: Fix NULL pointer dereference in __rds_rdma_map
|
|
WARNING in xfrm_state_fini
net
|
-1 |
C |
|
|
2231 |
3053d |
3109d
|
4/29 |
3038d |
6a53b7593233
xfrm: check id proto in validate_tmpl()
|
|
general protection fault in __list_del_entry_valid (2)
tipc
|
2 |
C |
|
|
21 |
3052d |
3109d
|
4/29 |
3038d |
9ee332d99e4d
sget(): handle failures of register_shrinker()
|
|
kernel BUG at net/core/skbuff.c:LINE! (2)
net
|
-1 |
C |
|
|
562 |
3041d |
3130d
|
4/29 |
3040d |
02612bb05e51
pppoe: take ->needed_headroom of lower device into account on xmit
|
|
kernel BUG at net/l2tp/l2tp_ppp.c:LINE!
net
|
-1 |
C |
|
|
22 |
3044d |
3066d
|
4/29 |
3040d |
e5571240236c
kcm: Check if sk_user_data already set in kcm_attach
|
|
KASAN: use-after-free Read in psock_write_space
net
|
19 |
C |
|
|
6 |
3048d |
3060d
|
4/29 |
3040d |
581e7226a5d4
kcm: Only allow TCP sockets to be attached to a KCM mux
|
|
possible deadlock in vhost_chr_write_iter
kvm
net
virt
|
4 |
C |
|
|
25952 |
3044d |
3046d
|
4/29 |
3040d |
e9cb4239134c
vhost: use mutex_lock_nested() in vhost_dev_lock_vqs()
|
|
KASAN: slab-out-of-bounds Read in __dev_queue_xmit
net
|
17 |
C |
|
|
6 |
3062d |
3050d
|
4/29 |
3040d |
7c68d1a6b4db
net: qdisc_pkt_len_init() should be more robust
|
|
general protection fault in skb_segment
sctp
|
2 |
C |
|
|
7 |
3060d |
3070d
|
4/29 |
3040d |
121d57af308d
gso: validate gso_type in GSO handlers
|
|
BUG: unable to handle kernel NULL pointer dereference in proc_flush_task
fs
|
10 |
syz |
|
|
1 |
3084d |
3080d
|
4/29 |
3041d |
c0ee554906c3
pid: Handle failure to allocate the first pid in a pid namespace
|
|
general protection fault in lockdep_invariant_state (2)
kernel
|
2 |
C |
|
|
114 |
3093d |
3122d
|
4/29 |
3041d |
5e351ad10699
locking/lockdep: Fix possible NULL deref
|
|
general protection fault in proc_flush_task
fs
|
2 |
syz |
|
|
2 |
3083d |
3100d
|
4/29 |
3041d |
c0ee554906c3
pid: Handle failure to allocate the first pid in a pid namespace
|
|
general protection fault in __lock_acquire (2)
tipc
|
2 |
C |
|
|
15 |
3042d |
3128d
|
4/29 |
3041d |
672ecbe1c977
tipc: fix a null pointer deref on error path
|
|
KASAN: stack-out-of-bounds Read in write_mmio
kvm-x86
|
17 |
C |
|
|
3 |
3088d |
3098d
|
4/29 |
3041d |
e39d200fa5bf
KVM: Fix stack-out-of-bounds read in write_mmio
|
|
BUG: sleeping function called from invalid context at ./include/linux/uaccess.h:LINE
|
-1 |
C |
|
|
19609 |
3104d |
3129d
|
4/29 |
3042d |
4d772cb85f64
KVM: x86: fix em_fxstor() sleeping while in atomic
|
|
WARNING in free_loaded_vmcs
kvm-x86
|
-1 |
C |
|
|
170 |
3101d |
3109d
|
4/29 |
3044d |
b74558259c51
KVM: VMX: Fix vmx->nested freeing when no SMI handler
|
|
KASAN: use-after-free Read in fib6_add_1
net
|
19 |
C |
|
|
4 |
3053d |
3055d
|
4/29 |
3044d |
591ff9ea51ce
net-backports: ipv6: don't let tb6_root node share routes with other node
|
|
possible deadlock in snd_seq_deliver_event
|
4 |
C |
|
|
6 |
3123d |
3134d
|
4/29 |
3045d |
1f20f9ff57ca
ALSA: seq: Fix nested rwsem annotation for lockdep splat
|
|
KASAN: slab-out-of-bounds Read in map_lookup_elem
bpf
|
17 |
C |
|
|
6 |
3053d |
3056d
|
4/29 |
3045d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
WARNING in rfkill_alloc
wireless
|
-1 |
C |
|
|
6 |
3054d |
3055d
|
4/29 |
3046d |
59b179b48ce2
cfg80211: check dev_set_name() return value
|
|
KASAN: slab-out-of-bounds Read in perf_event_fd_array_release
bpf
|
17 |
C |
|
|
96 |
3052d |
3058d
|
4/29 |
3046d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
KASAN: use-after-free Read in fib6_ifup (2)
net
|
19 |
C |
|
|
18 |
3053d |
3050d
|
4/29 |
3046d |
591ff9ea51ce
ipv6: don't let tb6_root node share routes with other node
|
|
WARNING in ___bpf_prog_run
bpf
|
-1 |
C |
|
|
28 |
3052d |
3058d
|
4/29 |
3046d |
7891a87efc71
bpf: arsh is not supported in 32 bit alu thus reject it
|
|
KASAN: stack-out-of-bounds Read in __nla_put
net
|
17 |
C |
|
|
57 |
3049d |
3052d
|
4/29 |
3046d |
cd443f1e91ca
netlink: reset extack earlier in netlink_rcv_skb
|
|
WARNING: held lock freed!
sctp
|
-1 |
C |
|
|
497 |
3050d |
3061d
|
4/29 |
3046d |
a0ff660058b8
sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf
|
|
WARNING in wiphy_register
wireless
|
-1 |
C |
|
|
15 |
3053d |
3055d
|
4/29 |
3046d |
51a1aaa631c9
mac80211_hwsim: validate number of different channels
|
|
WARNING in adjust_ptr_min_max_vals
bpf
|
-1 |
C |
|
|
252 |
3049d |
3066d
|
4/29 |
3046d |
6f16101e6a8b
bpf: mark dst unknown on inconsistent {s, u}bounds adjustments
|
|
possible deadlock in ppp_dev_uninit
ppp
|
4 |
C |
|
|
6 |
3052d |
3065d
|
4/29 |
3046d |
0171c4183559
ppp: unlock all_ppp_mutex before registering device
|
|
WARNING in can_rcv
can
|
-1 |
C |
|
|
5 |
3053d |
3052d
|
4/29 |
3046d |
8cb68751c115
can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once
|
|
general protection fault in strlen
net
|
2 |
C |
|
|
53 |
3049d |
3050d
|
4/29 |
3046d |
cd443f1e91ca
netlink: reset extack earlier in netlink_rcv_skb
|
|
WARNING in snd_interval_mulkdiv
sound
|
-1 |
C |
|
|
21 |
3052d |
3058d
|
4/29 |
3046d |
23b19b7b50fe
ALSA: pcm: Remove yet superfluous WARN_ON()
|
|
general protection fault in __bpf_prog_put
bpf
|
2 |
C |
|
|
212 |
3052d |
3058d
|
4/29 |
3046d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
KASAN: use-after-free Read in tls_sk_proto_close
net
|
19 |
C |
|
|
9 |
3052d |
3059d
|
4/29 |
3046d |
d91c3e17f75f
net/tls: Only attach to sockets in ESTABLISHED state
|
|
general protection fault in __bpf_map_put
bpf
|
2 |
C |
|
|
331 |
3052d |
3058d
|
4/29 |
3046d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
WARNING in canfd_rcv
can
|
-1 |
C |
|
|
4 |
3054d |
3052d
|
4/29 |
3046d |
d4689846881d
can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once
|
|
general protection fault in cgroup_fd_array_put_ptr
bpf
|
2 |
C |
|
|
219 |
3052d |
3058d
|
4/29 |
3046d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
divide error in ___bpf_prog_run
bpf
|
2 |
C |
|
|
28 |
3049d |
3056d
|
4/29 |
3046d |
68fda450a7df
bpf: fix 32-bit divide by zero
|
|
kernel BUG at ./include/linux/skbuff.h:LINE!
net
|
-1 |
C |
|
|
4502 |
3052d |
3064d
|
4/29 |
3046d |
374d1b5a81f7
esp: Fix GRO when the headers not fully in the linear part of the skb.
|
|
WARNING in netlink_ack (2)
net
|
-1 |
C |
|
|
6 |
3058d |
3058d
|
4/29 |
3046d |
cbbdf8433a5f
netlink: extack needs to be reset each time through loop
|
|
KASAN: slab-out-of-bounds Write in array_map_update_elem
bpf
|
21 |
C |
|
|
6 |
3054d |
3053d
|
4/29 |
3046d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
KASAN: use-after-free Write in array_map_update_elem
bpf
|
22 |
C |
|
|
11 |
3052d |
3053d
|
4/29 |
3046d |
bbeb6e4323da
bpf, array: fix overflow in max_entries and undefined behavior in index_mask
|
|
general protection fault in sctp_v6_get_dst
sctp
|
2 |
C |
|
|
6 |
3058d |
3058d
|
4/29 |
3046d |
c5006b8aa745
sctp: do not allow the v4 socket to bind a v4mapped v6 address
|
|
suspicious RCU usage at ./include/linux/rcupdate.h:LINE (2)
net
|
-1 |
C |
|
|
174 |
3048d |
3127d
|
4/29 |
3046d |
2f10a61cee8f
xfrm: fix rcu usage in xfrm_get_type_offload
|
|
WARNING in snd_pcm_hw_param_first
sound
|
-1 |
C |
|
|
2905 |
3058d |
3068d
|
3/29 |
3050d |
fe08f34d066f
ALSA: pcm: Remove incorrect snd_BUG_ON() usages
|
|
kernel BUG at ./include/linux/mm.h:LINE! (3)
usb
|
-1 |
C |
|
|
621 |
3055d |
3072d
|
3/29 |
3050d |
46eb14a6e158
USB: fix usbmon BUG trigger
|
|
KASAN: use-after-free Read in fib6_ifdown
net
|
19 |
C |
|
|
26 |
3053d |
3057d
|
3/29 |
3050d |
4512c43eac7e
ipv6: remove null_entry before adding default route
|
|
general protection fault in crypto_remove_spawns
crypto
|
2 |
C |
|
|
85 |
3064d |
3102d
|
3/29 |
3050d |
9a00674213a3
crypto: algapi - fix NULL dereference in crypto_remove_spawns()
|
|
WARNING in rds_cmsg_rdma_args
rds
|
-1 |
C |
|
|
6 |
3066d |
3066d
|
3/29 |
3050d |
c095508770ae
RDS: Heap OOB write in rds_message_alloc_sgs()
|
|
BUG: unable to handle kernel paging request in memset_erms
sound
|
8 |
C |
|
|
35 |
3050d |
3064d
|
3/29 |
3050d |
b088b53e20c7
ALSA: aloop: Fix inconsistent format due to incomplete rule
|
|
INFO: task hung in snd_pcm_oss_write
sound
|
1 |
syz |
|
|
2 |
3058d |
3058d
|
3/29 |
3050d |
29159a4ed704
ALSA: pcm: Abort properly at pending signal in OSS read/write loops
|
|
general protection fault in nf_tables_dump_obj_done
netfilter
|
2 |
C |
|
|
976 |
3059d |
3064d
|
3/29 |
3050d |
8bea728dce89
netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()
|
|
BUG: soft lockup (2)
sound
|
-1 |
C |
|
|
29 |
3060d |
3089d
|
3/29 |
3050d |
29159a4ed704
ALSA: pcm: Abort properly at pending signal in OSS read/write loops
|
|
WARNING in strp_data_ready
net
|
-1 |
C |
|
|
59034 |
3066d |
3136d
|
3/29 |
3051d |
d66fa9ec53c4
strparser: Call sock_owned_by_user_nocheck
|
|
KASAN: slab-out-of-bounds Read in cap_convert_nscap
lsm
|
17 |
C |
|
|
4148 |
3063d |
3067d
|
3/29 |
3058d |
dc32b5c3e6e2
capabilities: fix buffer overread on very short xattr
|
|
KASAN: use-after-free Read in __list_del_entry_valid (2)
crypto
|
19 |
C |
|
|
11 |
3080d |
3082d
|
3/29 |
3058d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
BUG: unable to handle kernel NULL pointer dereference in scatterwalk_copychunks
crypto
|
10 |
C |
|
|
3 |
3084d |
3086d
|
3/29 |
3058d |
e57121d08c38
crypto: chacha20poly1305 - validate the digest size
|
|
KASAN: wild-memory-access Write in scatterwalk_copychunks
crypto
|
21 |
C |
|
|
15 |
3063d |
3089d
|
3/29 |
3058d |
e57121d08c38
crypto: chacha20poly1305 - validate the digest size
|
|
general protection fault in scatterwalk_copychunks (2)
crypto
|
2 |
C |
|
|
141 |
3064d |
3091d
|
3/29 |
3058d |
e57121d08c38
crypto: chacha20poly1305 - validate the digest size
|
|
KASAN: slab-out-of-bounds Read in cap_inode_getsecurity
lsm
|
17 |
C |
|
|
11 |
3063d |
3064d
|
3/29 |
3058d |
dc32b5c3e6e2
capabilities: fix buffer overread on very short xattr
|
|
BUG: unable to handle kernel NULL pointer dereference in blkcipher_walk_done
crypto
|
10 |
C |
|
|
2 |
3085d |
3085d
|
3/29 |
3058d |
e57121d08c38
crypto: chacha20poly1305 - validate the digest size
|
|
general protection fault in skcipher_walk_done
crypto
|
2 |
C |
|
|
8 |
3060d |
3080d
|
3/29 |
3058d |
e57121d08c38
crypto: chacha20poly1305 - validate the digest size
|
|
KASAN: use-after-free Read in handle_userfault
fs
mm
|
19 |
C |
|
|
151 |
3071d |
3134d
|
3/29 |
3059d |
0cbb4b4f4c44
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
|
|
general protection fault in blkcipher_walk_done
crypto
|
2 |
C |
|
|
47 |
3067d |
3102d
|
3/29 |
3066d |
11edb555966e
crypto: af_alg - wait for data at beginning of recvmsg
|
|
general protection fault in crypto_chacha20_crypt
crypto
|
2 |
C |
|
|
2374 |
3070d |
3101d
|
3/29 |
3066d |
2b4f27c36bcd
crypto: skcipher - set walk.iv for zero-length inputs
|
|
KASAN: global-out-of-bounds Read in crypto_chacha20_crypt
crypto
|
17 |
C |
|
|
74 |
3080d |
3083d
|
3/29 |
3066d |
2b4f27c36bcd
crypto: skcipher - set walk.iv for zero-length inputs
|
|
general protection fault in blkcipher_walk_first
crypto
|
2 |
C |
|
|
7 |
3077d |
3088d
|
3/29 |
3066d |
11edb555966e
crypto: af_alg - wait for data at beginning of recvmsg
|
|
KASAN: use-after-free Write in aead_recvmsg
crypto
|
22 |
C |
|
|
21 |
3078d |
3095d
|
3/29 |
3066d |
d53c51357923
crypto: af_alg - fix race accessing cipher request
|
|
WARNING in netlink_ack
net
|
-1 |
C |
|
|
6 |
3076d |
3077d
|
3/29 |
3073d |
48044eb490be
netlink: fix netlink_ack() extack race
|
|
general protection fault in free_verifier_state
bpf
|
2 |
C |
|
|
2 |
3079d |
3079d
|
3/29 |
3073d |
8c01c4f896aa
bpf: fix verifier NULL pointer dereference
|
|
WARNING in lock_release
fs
|
-1 |
C |
|
|
72 |
3081d |
3114d
|
3/29 |
3077d |
ca0168e8a77c
alloc_super(): do ->s_umount initialization earlier
|
|
KASAN: stack-out-of-bounds Write in sha3_update
crypto
|
21 |
C |
|
|
5 |
3105d |
3101d
|
3/29 |
3079d |
af3ff8045bbf
crypto: hmac - require that the underlying hash algorithm is unkeyed
|
|
general protection fault in af_alg_free_areq_sgls
crypto
|
2 |
C |
|
|
2916 |
3083d |
3102d
|
3/29 |
3079d |
887207ed9e58
crypto: af_alg - fix NULL pointer dereference in
|
|
KASAN: use-after-free Read in aead_recvmsg
crypto
|
19 |
C |
|
|
4338 |
3083d |
3102d
|
3/29 |
3079d |
b32a7dc8aef1
crypto: algif_aead - fix reference counting of null skcipher
|
|
kernel BUG at net/core/dev.c:LINE!
net
|
-1 |
C |
|
|
5 |
3103d |
3108d
|
3/29 |
3092d |
15fe076edea7
net-backports: net/packet: fix a race in packet_bind() and packet_notifier()
|
|
general protection fault in scatterwalk_copychunks
crypto
|
2 |
C |
|
|
414 |
3092d |
3101d
|
3/29 |
3092d |
8e1fa89aa8bc
crypto: algif_aead - skip SGL entries with NULL page
|
|
kernel BUG at net/key/af_key.c:LINE!
|
-1 |
C |
|
|
63 |
3144d |
3136d
|
3/29 |
3096d |
0e74aa1d79a5
xfrm: Copy policy family in clone_policy
|
|
KASAN: use-after-free Read in mpi_free
crypto
|
19 |
C |
|
|
27 |
3112d |
3120d
|
3/29 |
3102d |
12d41a023efb
crypto: dh - Fix double free of ctx->p
|
|
WARNING in free_kthread_struct
mm
|
-1 |
C |
|
|
136405 |
3119d |
3122d
|
3/29 |
3102d |
e10237cc76ef
kthread: zero the kthread data structure
|
|
INFO: trying to register non-static key. (2)
net
|
-1 |
C |
|
|
8624 |
3121d |
3123d
|
3/29 |
3102d |
9eba9353388d
tcp: fix a lockdep issue in tcp_fastopen_reset_cipher()
|
|
KASAN: use-after-free Write in detach_if_pending
net
|
22 |
C |
|
|
4169 |
3139d |
3134d
|
3/29 |
3102d |
ee74d9967b82
tun: do not arm flow_gc_timer in tun_flow_init()
|
|
KASAN: use-after-free Read in tipc_group_self
tipc
|
19 |
C |
|
|
2942 |
3119d |
3136d
|
3/29 |
3102d |
e233df01576b
tipc: fix a dangling pointer
|
|
WARNING in tun_get_user
net
|
-1 |
C |
|
|
17398 |
3119d |
3143d
|
3/29 |
3102d |
010f245b9dd7
net-backports: tun: relax check on eth_get_headlen() return value
|
|
WARNING in snd_timer_user_info_compat
sound
|
-1 |
C |
|
|
174 |
3106d |
3108d
|
3/29 |
3102d |
3d4e8303f2c7
ALSA: timer: Remove kernel warning at compat ioctl error paths
|
|
general protection fault in hrtimer_active
kernel
|
2 |
C |
|
|
669 |
3119d |
3143d
|
3/29 |
3102d |
aec72f3392b1
net-tun: fix panics at dismantle time
|
|
WARNING in fib6_add
net
|
-1 |
C |
|
|
8225 |
3119d |
3143d
|
3/29 |
3102d |
2ea2352ede9d
ipv6: prevent user from adding cached routes
|
|
KASAN: use-after-free Read in free_netdev
net
|
19 |
C |
|
|
42 |
3119d |
3143d
|
3/29 |
3102d |
aec72f3392b1
net-tun: fix panics at dismantle time
|
|
possible deadlock in generic_file_write_iter
|
4 |
C |
|
|
61506 |
3102d |
3125d
|
3/29 |
3102d |
e319e1fbd9d4
block, locking/lockdep: Assign a lock_class per gendisk used for wait_for_completion()
|
|
BUG: unable to handle kernel paging request in vsock_diag_dump
net
virt
|
8 |
C |
|
|
6 |
3133d |
3136d
|
3/29 |
3102d |
c1eef220c176
vsock: always call vsock_init_tables()
|
|
KASAN: slab-out-of-bounds Read in tipc_nametbl_lookup_dst_nodes
|
17 |
C |
|
|
22388 |
3114d |
3136d
|
3/29 |
3102d |
f65163fed0e7
tipc: eliminate KASAN warning
|
|
BUG: sleeping function called from invalid context at net/core/sock.c:LINE
crypto
|
-1 |
C |
|
|
407 |
3103d |
3142d
|
3/29 |
3103d |
829385f08ae9
strparser: Use delayed work instead of timer for msg timeout
|
|
KASAN: use-after-free Read in snd_timer_user_info_compat
sound
|
19 |
syz |
|
|
2 |
3144d |
3134d
|
3/29 |
3108d |
79fb0518fec8
ALSA: timer: Add missing mutex lock for compat ioctls
|
|
general protection fault in asn1_ber_decoder
crypto
keyrings
|
2 |
C |
|
|
5009 |
3119d |
3123d
|
3/29 |
3112d |
624f5ab8720b
KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2]
|
|
KASAN: stack-out-of-bounds Read in xfrm_state_find (2)
net
|
17 |
C |
|
|
93 |
3120d |
3128d
|
3/29 |
3112d |
c9f3f813d462
xfrm: Fix stack-out-of-bounds read in xfrm_state_find.
|
|
BUG: unable to handle kernel paging request in snd_seq_oss_readq_puts
|
8 |
C |
|
|
389 |
3122d |
3128d
|
3/29 |
3112d |
132d358b183a
ALSA: seq: Fix OSS sysex delivery in OSS emulation
|
|
BUG: soft lockup
|
-1 |
C |
|
|
466 |
3115d |
3128d
|
3/29 |
3112d |
9b7d869ee5a7
ALSA: timer: Limit max instances per timer
|
|
KASAN: slab-out-of-bounds Read in asn1_ber_decoder
crypto
keyrings
|
17 |
C |
|
|
17 |
3120d |
3125d
|
3/29 |
3119d |
2eb9eabf1e86
KEYS: fix out-of-bounds read during ASN.1 parsing
|
|
WARNING in get_pi_state
kernel
|
-1 |
C |
|
|
42 |
3128d |
3130d
|
3/29 |
3119d |
153fbd1226fb
futex: Fix more put_pi_state() vs. exit_pi_state_list() races
|
|
general protection fault in __list_del_entry_valid
|
2 |
C |
|
|
72 |
3122d |
3136d
|
3/29 |
3119d |
1137b5e2529a
ipsec: Fix aborted xfrm policy dump crash
|
|
KASAN: use-after-free Read in packet_getsockopt (2)
net
|
19 |
syz |
|
|
12 |
3132d |
3141d
|
3/29 |
3119d |
509c7a1ecc86
packet: avoid panic in packet_getsockopt()
|
|
BUG: workqueue lockup
|
-1 |
C |
|
|
172 |
3119d |
3130d
|
3/29 |
3119d |
93161922c658
tun/tap: sanitize TUNSETSNDBUF input
|
|
WARNING in reuseport_alloc
net
|
-1 |
C |
|
|
408 |
3119d |
3143d
|
3/29 |
3119d |
1b5f962e71bf
soreuseport: fix initialization race
|
|
INFO: rcu detected stall (2)
net
|
-1 |
C |
|
|
56 |
3119d |
3130d
|
3/29 |
3119d |
93161922c658
net-backports: tun/tap: sanitize TUNSETSNDBUF input
|
|
KASAN: use-after-free Read in __lock_acquire
kernel
|
19 |
syz |
|
|
894 |
3119d |
3128d
|
3/29 |
3119d |
153fbd1226fb
futex: Fix more put_pi_state() vs. exit_pi_state_list() races
|
|
KASAN: use-after-free Read in do_raw_spin_unlock
kernel
|
19 |
syz |
|
|
3 |
3128d |
3130d
|
3/29 |
3119d |
153fbd1226fb
futex: Fix more put_pi_state() vs. exit_pi_state_list() races
|
|
WARNING in kmalloc_slab (2)
block
trace
|
-1 |
C |
|
|
2478 |
3119d |
3137d
|
3/29 |
3119d |
864e2a1f8aac
ipv6: flowlabel: do not leave opt->tot_len with garbage
|
|
WARNING in sk_stream_kill_queues
|
-1 |
syz |
|
|
96 |
3206d |
3209d
|
3/29 |
3122d |
7749d4ff88d3
net-backports: dccp: purge write queue in dccp_destroy_sock()
|
|
KASAN: use-after-free Read in dev_queue_xmit_nit
|
19 |
C |
|
|
13 |
3166d |
3178d
|
3/29 |
3124d |
008ba2a13f2d
packet: hold bind lock when rebinding to fanout hook
|
|
KASAN: double-free or invalid-free in selinux_tun_dev_free_security
|
24 |
C |
|
|
12033 |
3200d |
3210d
|
3/29 |
3124d |
ff244c6b29b1
tun: handle register_netdevice() failures properly
|
|
general protection fault in kvm_cpuid
|
2 |
C |
|
|
20 |
3166d |
3185d
|
3/29 |
3136d |
d1cd3ce90044
KVM: MMU: check guest CR3 reserved bits based on its physical address width.
|
|
KASAN: use-after-free Read in __list_add_valid
|
19 |
syz |
|
|
26 |
3140d |
3188d
|
3/29 |
3136d |
008ba2a13f2d
packet: hold bind lock when rebinding to fanout hook
|
|
general protection fault in skb_clone
|
2 |
syz |
|
|
3 |
3205d |
3205d
|
3/29 |
3136d |
0bbd7dad34f8
tun: make tun_build_skb() thread safe
|
|
BUG: unable to handle kernel paging request in skb_release_data
|
8 |
syz |
|
|
15 |
3205d |
3206d
|
3/29 |
3136d |
0bbd7dad34f8
tun: make tun_build_skb() thread safe
|
|
kernel BUG at lib/string.c:LINE!
netfilter
|
-1 |
C |
|
|
73 |
3151d |
3167d
|
3/29 |
3137d |
e466af75c074
netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
|
|
WARNING: kernel stack regs has bad 'bp' value
|
-1 |
C |
|
|
66131 |
3165d |
3210d
|
3/29 |
3137d |
d3dfbfe2e6e7
crypto: x86/sha256-avx2 - Fix RBP usage
|
|
WARNING in __switch_to
kernel
|
-1 |
C |
|
|
535 |
3164d |
3210d
|
3/29 |
3137d |
814fb7bb7db5
x86/fpu: Don't let userspace set bogus xcomp_bv
|
|
general protection fault in fib_dump_info
|
2 |
C |
|
|
428 |
3200d |
3210d
|
3/29 |
3137d |
bc3aae2bbac4
net: check and errout if res->fi is NULL when RTM_F_FIB_MATCH is set
|
|
WARNING in idr_replace
|
-1 |
C |
|
|
1209 |
3177d |
3209d
|
3/29 |
3137d |
a47f68d6a944
idr: remove WARN_ON_ONCE() when trying to replace negative ID
|
|
general protection fault in skb_release_data
|
2 |
syz |
|
|
198 |
3205d |
3206d
|
3/29 |
3137d |
0bbd7dad34f8
tun: make tun_build_skb() thread safe
|
|
general protection fault in perf_trace_block_get_rq
|
2 |
C |
|
|
180 |
3177d |
3186d
|
3/29 |
3137d |
f8e9ec16611b
block: tolerate tracing of NULL bio
|
|
KASAN: wild-memory-access Read in skb_copy_ubufs
|
17 |
C |
|
|
23 |
3205d |
3206d
|
3/29 |
3137d |
0bbd7dad34f8
tun: make tun_build_skb() thread safe
|
|
general protection fault in __ip_options_echo (2)
|
2 |
C |
|
|
2 |
3186d |
3185d
|
3/29 |
3137d |
ca2c1418efe9
udp: drop head states only when all skb references are gone
|
|
general protection fault in SyS_bpf
|
2 |
C |
|
|
10 |
3196d |
3197d
|
3/29 |
3137d |
ae2b27b859a1
bpf: fix a return in sockmap_get_from_fd()
|
|
kernel BUG at mm/slab.c:LINE!
|
-1 |
C |
|
|
860 |
3184d |
3188d
|
3/29 |
3137d |
96e5ae4e76f1
bpf: fix numa_node validation
|
|
KASAN: use-after-free Read in skb_release_data
|
19 |
syz |
|
|
7 |
3206d |
3206d
|
3/29 |
3137d |
0bbd7dad34f8
tun: make tun_build_skb() thread safe
|
|
BUG: Bad page state
|
-1 |
C |
|
|
2 |
3206d |
3207d
|
3/29 |
3137d |
263630e8d176
mm/madvise.c: fix freeing of locked page with MADV_FREE
|
|
KASAN: use-after-free Read in get_mm_exe_file
|
19 |
C |
|
|
2 |
3200d |
3205d
|
3/29 |
3137d |
2b7e8665b4ff
fork: fix incorrect fput of ->exe_file causing use-after-free
|
|
general protection fault in __skb_flow_dissect
|
2 |
C |
|
|
37 |
3207d |
3209d
|
3/29 |
3137d |
7324157b8af1
dsa: fix flow disector null pointer
|
|
possible deadlock in kcm_sendpage
|
4 |
syz |
|
|
14 |
3189d |
3192d
|
3/29 |
3137d |
351050ecd652
kcm: do not attach PF_KCM sockets to avoid deadlock
|
|
WARNING in kmalloc_slab
net
|
-1 |
C |
|
|
22353 |
3137d |
3209d
|
3/29 |
3137d |
81fbfe8adaf3
ptr_ring: use kmalloc_array()
|
|
KASAN: use-after-free Read in free_ldt_struct
|
19 |
C |
|
|
109 |
3194d |
3208d
|
3/29 |
3137d |
ccd5b3235180
x86/mm: Fix use-after-free of ldt_struct
|
|
suspicious RCU usage at ./include/linux/kvm_host.h:LINE
|
-1 |
C |
|
|
103402 |
3165d |
3210d
|
3/29 |
3137d |
021086e383fa
KVM: fix rcu warning on VM_CREATE errors
|
|
BUG: unable to handle kernel NULL pointer dereference at ADDR
|
-1 |
C |
|
|
63 |
3194d |
3208d
|
3/29 |
3137d |
3fd871270732
strparser: initialize all callbacks
|
|
WARNING in kvm_arch_vcpu_ioctl_run
|
-1 |
C |
|
|
20284 |
3165d |
3230d
|
3/29 |
3165d |
bbeac2830f4d
KVM: X86: Fix residual mmio emulation request to userspace
|
|
INFO: task hung
|
-1 |
C |
|
|
13878 |
3165d |
3230d
|
3/29 |
3165d |
bd9dfc54e392
tcp: fix hang in tcp_sendpage_locked()
|
|
inconsistent lock state in sk_clone_lock
|
4 |
C |
|
|
16 |
3207d |
3210d
|
2/29 |
3185d |
d624d276d1dd
tcp: fix possible deadlock in TCP stack vs BPF filter
|
|
BUG: sleeping function called from invalid context at mm/slab.h:LINE
|
-1 |
C |
|
|
8 |
3207d |
3210d
|
2/29 |
3185d |
36f41f8fc6d8
af_key: do not use GFP_KERNEL in atomic contexts
|
|
kernel BUG at mm/usercopy.c:LINE!
|
-1 |
C |
|
|
23 |
3206d |
3210d
|
2/29 |
3185d |
fd851ba9caa9
udp: harden copy_linear_skb()
|