BUG: corrupted list in mgmt_pending_remove
bluetooth
|
|
|
|
6 |
7d21h |
9d12h
|
|
KASAN: slab-use-after-free Read in l2cap_conn_unreliable
bluetooth
|
|
|
|
1 |
41d |
18d
|
|
KASAN: slab-use-after-free Read in hci_cmd_work
bluetooth
|
|
|
|
1 |
56d |
18d
|
|
WARNING in hci_conn_del (2)
bluetooth
|
|
|
|
17 |
27d |
24d
|
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
|
|
|
20 |
1d02h |
48d
|
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb
bluetooth
|
|
|
|
1 |
51d |
48d
|
|
WARNING in l2cap_send_cmd
bluetooth
|
|
|
|
1 |
50d |
48d
|
|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_sync
bluetooth
|
|
|
|
12 |
4d00h |
48d
|
|
KMSAN: uninit-value in hci_rx_work
bluetooth
|
|
|
|
16 |
19d |
49d
|
|
WARNING in hci_send_acl (3)
bluetooth
|
|
|
|
1 |
55d |
51d
|
|
KASAN: slab-use-after-free Read in set_powered_sync
bluetooth
|
C |
done |
|
38 |
10h21m |
57d
|
|
BUG: workqueue leaked atomic, lock or RCU: kworker/u9:NUM[NUM]
bluetooth
|
C |
|
|
28 |
36d |
63d
|
💬 1 [61d] |
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
8 |
16d |
64d
|
|
WARNING: locking bug in sco_conn_del (2)
bluetooth
|
|
|
|
1 |
72d |
68d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_acldata
bluetooth
|
|
|
|
1 |
73d |
68d
|
|
KASAN: slab-use-after-free Read in l2cap_connect (2)
bluetooth
|
C |
done |
|
8 |
3d06h |
78d
|
PATCH [21m] |
KASAN: slab-use-after-free Read in __sock_queue_rcv_skb
bluetooth
|
|
|
|
7 |
71d |
78d
|
|
KASAN: slab-use-after-free Read in sk_skb_reason_drop
bluetooth
|
syz |
error |
error |
412 |
26d |
78d
|
💬 2 [61d] |
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
4 |
4d06h |
83d
|
|
general protection fault in l2cap_publish_rx_avail
bluetooth
|
C |
|
|
6 |
84d |
85d
|
💬 1 [84d] |
WARNING in l2cap_send_disconn_req
bluetooth
|
|
|
|
1 |
90d |
86d
|
|
KASAN: slab-use-after-free Read in __lock_sock (2)
bluetooth
|
C |
|
|
5 |
72d |
86d
|
💬 1 [85d] |
KASAN: slab-use-after-free Read in hci_req_sync_complete
bluetooth
|
|
|
|
8 |
70d |
94d
|
|
possible deadlock in mgmt_set_connectable_complete
bluetooth
|
|
|
|
2 |
52d |
114d
|
|
KASAN: slab-use-after-free Read in skb_queue_purge_reason (2)
bluetooth
|
|
|
|
36 |
3d16h |
116d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
|
50 |
4d17h |
120d
|
💬 2 [73d] |
WARNING in sco_chan_del
bluetooth
|
|
|
|
6 |
52d |
122d
|
|
KFENCE: invalid free in __hci_req_sync
bluetooth
|
|
|
|
35 |
68d |
129d
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
|
|
|
3 |
50d |
130d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
|
106 |
6d04h |
136d
|
💬 2 [9d08h] |
WARNING in hci_recv_frame
bluetooth
|
|
|
|
5 |
17d |
137d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
15 |
35d |
137d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
syz |
error |
|
134 |
12d |
141d
|
💬 1 [28d] |
WARNING in hci_conn_set_handle
bluetooth
|
C |
error |
done |
7 |
97d |
149d
|
💬 1 [46d] |
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
29 |
15h35m |
149d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
27d |
156d
|
💬 2 [61d] |
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
C |
done |
|
134 |
1d09h |
156d
|
💬 2 [28d] |
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
17 |
23h20m |
177d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
|
|
|
28 |
31d |
178d
|
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
|
|
|
24 |
2d18h |
197d
|
|
WARNING in hci_send_cmd
bluetooth
|
|
|
|
6 |
51d |
211d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
syz |
|
|
1 |
245d |
258d
|
💬 2 [257d] |
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
C |
done |
|
268 |
2d09h |
299d
|
PATCH [297d] |
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
289 |
7h58m |
365d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
|
|
|
8 |
67d |
440d
|
💬 1 [274d] |
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
C |
done |
|
77 |
23d |
469d
|
💬 2 [28d] |
possible deadlock in rfcomm_dlc_exists
bluetooth
|
C |
error |
|
13277 |
4h13m |
599d
|
PATCH [126d] |
WARNING in call_timer_fn
bluetooth
|
syz |
unreliable |
|
3866 |
48m |
664d
|
💬 8 [28d] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
6 |
2d00h |
943d
|
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
C |
done |
|
22237 |
4h23m |
1093d
|
PATCH [126d] |
general protection fault in skb_release_data (2)
bluetooth
net
|
C |
done |
error |
683 |
50d |
1462d
|
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
45 |
27d |
1495d
|
|
WARNING in hci_conn_timeout
bluetooth
|
C |
done |
|
5694 |
4h30m |
1501d
|
PATCH [390d] |