KFENCE: invalid free in __hci_req_sync
bluetooth
|
|
|
|
6 |
2d05h |
5d00h
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
|
|
|
1 |
10d |
5d23h
|
|
possible deadlock in hci_dev_close
bluetooth
|
|
|
|
2 |
7d21h |
8d02h
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
syz |
|
|
1 |
15d |
11d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
|
|
|
6 |
8d08h |
12d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
C |
done |
|
10 |
7d06h |
12d
|
💬 1 [9d06h] |
WARNING in hci_recv_frame
bluetooth
|
|
|
|
1 |
12d |
12d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
5 |
12d |
12d
|
|
KASAN: invalid-free in hci_req_sync_complete
bluetooth
|
|
|
|
40 |
7h20m |
16d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
syz |
|
|
27 |
1d16h |
16d
|
💬 1 [7d14h] |
WARNING in hci_conn_set_handle
bluetooth
|
C |
error |
|
6 |
9d08h |
24d
|
💬 1 [23d] |
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
2 |
2d17h |
25d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
|
|
|
1 |
36d |
30d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
|
|
835 |
now |
31d
|
💬 2 [25d] |
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
C |
done |
|
7 |
2d04h |
31d
|
💬 2 [30d] |
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
C |
done |
|
5 |
28d |
33d
|
PATCH [29d] |
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
C |
|
|
8 |
20d |
33d
|
PATCH [29d] |
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
C |
|
|
36 |
23d |
33d
|
💬 2 [32d] |
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
C |
|
|
28 |
20d |
33d
|
PATCH [29d] |
WARNING in msft_do_close
bluetooth
|
|
|
|
1 |
40d |
36d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
|
|
|
1 |
45d |
41d
|
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
2 |
28d |
52d
|
|
possible deadlock in touch_wq_lockdep_map
bluetooth
|
|
|
|
341 |
21m |
53d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
|
|
|
2 |
36d |
53d
|
|
WARNING in hci_conn_del
bluetooth
|
C |
done |
|
2523 |
20h59m |
70d
|
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
|
|
|
4 |
22d |
72d
|
|
WARNING in ida_free (2)
bluetooth
|
C |
|
|
14 |
85d |
85d
|
💬 2 [84d] |
WARNING in hci_send_cmd
bluetooth
|
|
|
|
3 |
4d21h |
86d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
C |
done |
|
1 |
58d |
102d
|
💬 12 [98d] |
possible deadlock in __flush_workqueue
bluetooth
|
|
|
|
495 |
1h21m |
112d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
C |
|
|
22 |
67d |
128d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
syz |
|
|
1 |
120d |
134d
|
💬 2 [132d] |
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
C |
done |
|
234 |
4d07h |
174d
|
PATCH [172d] |
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
|
|
|
5 |
11d |
177d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
C |
done |
|
7 |
57d |
188d
|
💬 2 [80d] |
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
116 |
37m |
240d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
C |
done |
done |
3400 |
65d |
309d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
|
|
|
5 |
88d |
315d
|
💬 1 [149d] |
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
C |
done |
|
60 |
6d10h |
344d
|
💬 2 [30d] |
possible deadlock in rfcomm_dlc_exists
bluetooth
|
C |
error |
|
12954 |
6d05h |
474d
|
PATCH [1d13h] |
WARNING in call_timer_fn
bluetooth
|
syz |
unreliable |
|
2647 |
2h34m |
539d
|
💬 8 [30d] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
5 |
11d |
818d
|
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
C |
done |
|
21745 |
6d06h |
968d
|
PATCH [1d13h] |
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
syz |
done |
done |
83 |
540d |
1369d
|
💬 1 [1090d] |
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
44 |
49d |
1370d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
syz |
error |
error |
1 |
1373d |
1373d
|
|
WARNING in hci_conn_timeout
bluetooth
|
C |
done |
|
5054 |
6h57m |
1376d
|
PATCH [265d] |