KASAN: slab-use-after-free Read in hci_uart_write_work
bluetooth
bcachefs
|
19 |
syz |
|
|
2 |
2d20h |
1d17h
|
💬 3 [1d01h] |
KASAN: slab-use-after-free Read in btusb_disconnect
bluetooth
usb
|
19 |
C |
|
|
4 |
12d |
12d
|
💬 1 [11d] |
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
23 |
|
|
|
1 |
28d |
23d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
5 |
38d |
34d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
72d |
68d
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
1 |
syz |
error |
|
8 |
19d |
70d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
83d |
79d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
|
195 |
4h55m |
106d
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
17 |
C |
|
|
1197 |
3h26m |
106d
|
PATCH [7h17m] |
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
19 |
|
|
|
13 |
3d22h |
120d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
79d |
140d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
4 |
|
|
|
27 |
1d09h |
140d
|
|
general protection fault in bcsp_recv
bluetooth
|
8 |
C |
error |
|
540 |
3h30m |
150d
|
PATCH [16d] |
general protection fault in h5_recv
bluetooth
|
10 |
C |
done |
|
1000 |
4h00m |
156d
|
💬 1 [23d] |
general protection fault in __timer_delete_sync
bluetooth
|
2 |
C |
done |
|
3 |
154d |
158d
|
💬 1 [157d] |
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
27 |
20d |
186d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
17 |
37d |
201d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
C |
|
|
363 |
1d19h |
203d
|
💬 4 [11d] |
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
4 |
|
|
|
8 |
43d |
210d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
-1 |
C |
error |
|
554 |
14h39m |
210d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
7 |
C |
|
|
23 |
22d |
241d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
1 |
syz |
done |
|
12 |
11d |
249d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
56d |
250d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
24 |
syz |
done |
|
41586 |
4h06m |
256d
|
💬 1 [23d] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
71 |
1d10h |
268d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
19 |
|
|
|
60 |
2d07h |
268d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
19 |
|
|
|
50 |
1d00h |
268d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
19 |
|
|
|
53 |
5d18h |
288d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
|
21 |
4d18h |
291d
|
💬 1 [20d] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
-1 |
C |
error |
|
312 |
21h10m |
356d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
64d |
391d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
C |
inconclusive |
error |
144 |
8d07h |
428d
|
💬 2 [117d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
C |
unreliable |
done |
39 |
59d |
439d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
19 |
C |
inconclusive |
inconclusive |
139 |
6d18h |
445d
|
💬 2 [148d] |
WARNING in hci_recv_frame
bluetooth
|
-1 |
C |
error |
|
75 |
9d16h |
445d
|
💬 1 [57d] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
75d |
446d
|
|
WARNING in l2cap_chan_send
bluetooth
|
-1 |
|
|
|
44 |
23d |
458d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
C |
error |
error |
3383 |
336d |
464d
|
💬 2 [370d] |
WARNING in l2cap_chan_del
bluetooth
|
-1 |
|
|
|
277 |
1d05h |
485d
|
|
general protection fault in lock_sock_nested
bluetooth
|
19 |
C |
done |
done |
2975 |
32m |
674d
|
|
WARNING in call_timer_fn
bluetooth
|
-1 |
C |
unreliable |
|
7112 |
13m |
972d
|
💬 8 [23d] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
19 |
C |
inconclusive |
inconclusive |
47 |
2d05h |
1251d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
24 |
C |
done |
error |
703 |
106d |
1771d
|
|