KASAN: invalid-free in hci_req_sync_complete
bluetooth
|
|
|
|
5 |
1d00h |
3d20h
|
💬 0 [3d20h]
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
|
|
|
5 |
4d13h |
3d20h
|
💬 0 [3d20h]
|
WARNING in hci_conn_set_handle
bluetooth
|
C |
error |
|
5 |
3d19h |
11d
|
💬 1 [10d]
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
1 |
16d |
12d
|
💬 0 [12d]
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
|
|
|
1 |
23d |
17d
|
💬 0 [17d]
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
|
|
293 |
21m |
18d
|
💬 2 [12d]
|
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
C |
done |
|
7 |
3d07h |
18d
|
💬 2 [18d]
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
C |
|
|
5 |
15d |
20d
|
PATCH [16d] |
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
C |
|
|
8 |
7d07h |
20d
|
PATCH [16d] |
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
C |
|
|
36 |
10d |
20d
|
💬 2 [19d]
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
C |
|
|
28 |
7d14h |
20d
|
PATCH [16d] |
WARNING in msft_do_close
bluetooth
|
|
|
|
1 |
27d |
23d
|
💬 0 [23d]
|
memory leak in corrupted (2)
bluetooth
|
syz |
|
|
421 |
12h46m |
24d
|
💬 0 [17d]
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
|
|
|
1 |
33d |
28d
|
💬 0 [28d]
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
2 |
15d |
39d
|
💬 0 [39d]
|
possible deadlock in touch_wq_lockdep_map
bluetooth
|
|
|
|
158 |
50m |
40d
|
💬 0 [40d]
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
|
|
|
2 |
23d |
40d
|
💬 0 [40d]
|
WARNING in hci_conn_del
bluetooth
|
C |
done |
|
2109 |
1h54m |
57d
|
💬 0 [17d]
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
|
|
|
4 |
9d09h |
59d
|
💬 0 [59d]
|
WARNING in ida_free (2)
bluetooth
|
C |
|
|
14 |
72d |
72d
|
💬 2 [71d]
|
WARNING in hci_send_cmd
bluetooth
|
|
|
|
2 |
5d00h |
73d
|
💬 0 [73d]
|
INFO: task hung in hci_release_dev
bluetooth
|
C |
done |
|
18 |
81d |
79d
|
💬 0 [79d]
|
INFO: task hung in hci_conn_failed
bluetooth
|
C |
done |
|
1 |
45d |
89d
|
💬 12 [85d]
|
possible deadlock in __flush_workqueue
bluetooth
|
|
|
|
226 |
4h15m |
99d
|
💬 0 [50d]
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
C |
|
|
22 |
54d |
115d
|
💬 0 [50d]
|
WARNING in l2cap_do_send (2)
bluetooth
|
syz |
|
|
1 |
107d |
121d
|
💬 2 [119d]
|
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
C |
done |
|
227 |
10h55m |
161d
|
PATCH [159d] |
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
|
|
|
4 |
71d |
165d
|
💬 0 [165d]
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
C |
done |
|
7 |
44d |
175d
|
💬 2 [67d]
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
91 |
1h32m |
227d
|
💬 0 [17d]
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
C |
done |
done |
3400 |
52d |
296d
|
💬 0 [50d]
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
|
|
|
5 |
75d |
302d
|
💬 1 [136d]
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
C |
done |
|
58 |
5d01h |
331d
|
💬 2 [17d]
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
C |
error |
|
12116 |
16m |
461d
|
💬 0 [17d]
|
WARNING in call_timer_fn
bluetooth
|
syz |
unreliable |
|
2503 |
43m |
526d
|
💬 8 [17d]
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
5 |
14d |
805d
|
💬 0 [81d]
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
C |
done |
|
20593 |
13m |
955d
|
PATCH [470d] |
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
syz |
done |
done |
83 |
527d |
1356d
|
💬 1 [1077d]
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
44 |
36d |
1357d
|
💬 0 [299d]
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
syz |
error |
error |
1 |
1360d |
1360d
|
💬 0 [1360d]
|
WARNING in hci_conn_timeout
bluetooth
|
C |
done |
|
4998 |
11h44m |
1363d
|
PATCH [252d] |