KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
4d23h |
8h35m
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
104 |
23h10m |
27d
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
405 |
3h49m |
28d
|
💬 1 [5d04h] |
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
syz |
|
|
1 |
43d |
39d
|
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
5 |
18d |
42d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
7h24m |
61d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
10 |
2d14h |
61d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
|
|
|
1 |
70d |
66d
|
|
general protection fault in h5_close
bluetooth
|
C |
done |
|
5 |
64d |
66d
|
|
general protection fault in bcsp_close
bluetooth
|
C |
done |
|
3 |
68d |
67d
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
178 |
11h37m |
71d
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
256 |
47m |
78d
|
💬 1 [6d06h] |
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
76d |
79d
|
💬 1 [79d] |
general protection fault in qca_close
bluetooth
|
C |
done |
|
94 |
62d |
81d
|
PATCH [80d] |
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
|
|
|
8 |
44d |
90d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
|
|
|
3 |
74d |
91d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
|
|
|
8 |
72d |
100d
|
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
23 |
1d21h |
108d
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
3 |
35d |
113d
|
|
KASAN: slab-use-after-free Read in full_proxy_write
bluetooth
|
C |
|
|
36 |
52d |
120d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
15 |
4d12h |
122d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
339 |
23h01m |
124d
|
💬 1 [6d06h] |
WARNING in sco_conn_put
bluetooth
|
|
|
|
2 |
67d |
127d
|
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
3 |
28d |
131d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
393 |
17h35m |
131d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
|
|
|
95 |
33d |
147d
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind
bluetooth
|
|
|
|
2 |
86d |
156d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
17 |
25d |
163d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
5 |
2d01h |
170d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
11 |
4h58m |
172d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
36253 |
26m |
177d
|
💬 1 [6d06h] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
28 |
6h45m |
189d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
28 |
5d05h |
189d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
34 |
12d |
189d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
|
|
|
18 |
45d |
189d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
45 |
1d20h |
209d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
12 |
2d08h |
213d
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
C |
error |
|
41 |
9d17h |
239d
|
💬 1 [151d] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
231 |
8h08m |
278d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
21 |
48d |
293d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
45 |
9d14h |
312d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
|
141 |
32d |
350d
|
💬 2 [38d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
|
39 |
10d |
360d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
137 |
68d |
366d
|
💬 2 [70d] |
WARNING in hci_recv_frame
bluetooth
|
syz |
error |
|
57 |
5d08h |
367d
|
💬 1 [159d] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
26 |
23d |
367d
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
43 |
7d12h |
379d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
257d |
386d
|
💬 2 [291d] |
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
202 |
3d13h |
407d
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2000 |
57m |
595d
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
6556 |
6h41m |
894d
|
💬 8 [6d06h] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
33 |
6d04h |
1172d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
27d |
1692d
|
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
61 |
144d |
1725d
|
|