KASAN: slab-use-after-free Read in btusb_disconnect
bluetooth
usb
|
C |
|
|
4 |
10d |
10d
|
💬 1 [9d21h] |
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
|
|
|
1 |
26d |
21d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
syz |
|
|
5 |
36d |
33d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
70d |
66d
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
8 |
18d |
68d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
81d |
77d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
191 |
1d04h |
104d
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
1164 |
7h52m |
104d
|
PATCH [30d] |
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
13 |
2d01h |
118d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
77d |
138d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
26 |
9h52m |
138d
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
527 |
2h35m |
148d
|
PATCH [14d] |
general protection fault in h5_recv
bluetooth
|
C |
done |
|
974 |
58m |
154d
|
💬 1 [21d] |
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
153d |
156d
|
💬 1 [156d] |
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
27 |
18d |
184d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
17 |
35d |
199d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
C |
|
|
362 |
1d09h |
201d
|
💬 4 [9d22h] |
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
8 |
42d |
208d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
551 |
38m |
208d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
23 |
20d |
240d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
12 |
10d |
247d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
12 |
54d |
249d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
41464 |
6m |
254d
|
💬 1 [21d] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
70 |
1d17h |
266d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
60 |
10h43m |
266d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
49 |
4d07h |
266d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
53 |
3d22h |
286d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
syz |
error |
|
21 |
2d21h |
289d
|
💬 1 [18d] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
311 |
3d16h |
355d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
62d |
389d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
144 |
6d11h |
427d
|
💬 2 [115d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
done |
39 |
57d |
437d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
139 |
4d22h |
443d
|
💬 2 [147d] |
WARNING in hci_recv_frame
bluetooth
|
C |
error |
|
75 |
7d19h |
444d
|
💬 1 [55d] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
73d |
444d
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
44 |
22d |
456d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
334d |
462d
|
💬 2 [368d] |
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
276 |
2d00h |
483d
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2949 |
3h00m |
672d
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
7107 |
35m |
970d
|
💬 8 [21d] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
47 |
9h02m |
1249d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
104d |
1769d
|
|