KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3)
bluetooth
|
C |
|
|
1 |
13d |
9d14h
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
18d |
14d
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
5 |
11d |
16d
|
|
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc
bluetooth
|
C |
|
|
4 |
9d09h |
19d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
30d |
25d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
129 |
8h37m |
52d
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
690 |
1d00h |
53d
|
💬 1 [1d05h] |
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
syz |
|
|
1 |
68d |
64d
|
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
5 |
43d |
67d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
25d |
86d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
14 |
5d15h |
86d
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
|
|
|
1 |
95d |
91d
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
284 |
2h18m |
97d
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
408 |
47m |
103d
|
💬 1 [1d05h] |
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
101d |
104d
|
💬 1 [104d] |
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
|
|
|
8 |
69d |
115d
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
|
|
|
3 |
99d |
116d
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
|
|
|
8 |
97d |
125d
|
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
26 |
13d |
133d
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
3 |
60d |
138d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
15 |
29d |
147d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
347 |
5d13h |
149d
|
💬 1 [1d05h] |
WARNING in sco_conn_put
bluetooth
|
|
|
|
2 |
92d |
152d
|
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
4 |
22d |
156d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
444 |
7h36m |
157d
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
|
|
|
95 |
58d |
172d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
21 |
5h52m |
188d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
5 |
12d |
195d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
12 |
2d21h |
197d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
37992 |
18m |
202d
|
💬 1 [1d05h] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
36 |
2d13h |
214d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
40 |
2d18h |
214d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
38 |
1d23h |
214d
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
|
|
|
18 |
70d |
214d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
45 |
26d |
234d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
15 |
13d |
238d
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
C |
error |
|
43 |
8d18h |
264d
|
💬 1 [10h05m] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
249 |
2d02h |
303d
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
21 |
73d |
319d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
10d |
338d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
141 |
57d |
375d
|
💬 2 [63d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
|
39 |
5d13h |
385d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
137 |
23d |
391d
|
💬 2 [95d] |
WARNING in hci_recv_frame
bluetooth
|
C |
error |
|
64 |
4d01h |
392d
|
💬 1 [4d01h] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
21d |
392d
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
43 |
32d |
404d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
282d |
411d
|
💬 2 [316d] |
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
221 |
19h48m |
432d
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2381 |
43m |
620d
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
6744 |
1h46m |
919d
|
💬 8 [1d05h] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
35 |
3d13h |
1198d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
52d |
1717d
|
|