KASAN: slab-use-after-free Read in btusb_disconnect
bluetooth
usb
|
19 |
C |
|
|
4 |
6d17h |
6d03h
|
💬 1 [5d19h] |
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
23 |
|
|
|
1 |
22d |
17d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
1 |
syz |
|
|
5 |
32d |
28d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
-1 |
|
|
|
1 |
66d |
62d
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
1 |
syz |
error |
|
8 |
14d |
64d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
19 |
|
|
|
1 |
77d |
73d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
4 |
syz |
error |
|
189 |
8h03m |
100d
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
17 |
C |
|
|
1129 |
3h43m |
100d
|
PATCH [26d] |
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
19 |
|
|
|
12 |
9d01h |
114d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
-1 |
|
|
|
2 |
73d |
134d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
4 |
|
|
|
22 |
1d23h |
134d
|
|
general protection fault in bcsp_recv
bluetooth
|
8 |
C |
error |
|
494 |
6h28m |
144d
|
PATCH [10d] |
general protection fault in h5_recv
bluetooth
|
10 |
C |
done |
|
925 |
41m |
150d
|
💬 1 [17d] |
general protection fault in __timer_delete_sync
bluetooth
|
2 |
C |
done |
|
3 |
149d |
152d
|
💬 1 [151d] |
general protection fault in hci_devcd_register
bluetooth
|
17 |
|
|
|
27 |
14d |
180d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
19 |
|
|
|
17 |
31d |
195d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
19 |
C |
|
|
360 |
1d12h |
197d
|
💬 4 [5d20h] |
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
4 |
|
|
|
8 |
38d |
204d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
-1 |
C |
error |
|
542 |
6h14m |
204d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
7 |
C |
|
|
23 |
16d |
235d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
1 |
syz |
done |
|
12 |
6d00h |
243d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
19 |
|
|
|
12 |
50d |
244d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
24 |
syz |
done |
|
41167 |
43m |
250d
|
💬 1 [17d] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
8 |
|
|
|
68 |
3d18h |
262d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
19 |
|
|
|
57 |
8h06m |
262d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
19 |
|
|
|
49 |
5h34m |
262d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
19 |
|
|
|
51 |
7d14h |
282d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
8 |
syz |
error |
|
20 |
10d |
285d
|
💬 1 [14d] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
-1 |
C |
error |
|
310 |
4h08m |
350d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
19 |
|
|
|
47 |
58d |
385d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
19 |
C |
inconclusive |
error |
144 |
2d08h |
422d
|
💬 2 [111d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
4 |
C |
unreliable |
done |
39 |
53d |
433d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
19 |
C |
inconclusive |
inconclusive |
139 |
20h00m |
439d
|
💬 2 [142d] |
WARNING in hci_recv_frame
bluetooth
|
-1 |
C |
error |
|
75 |
3d17h |
439d
|
💬 1 [51d] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
19 |
|
|
|
27 |
69d |
440d
|
|
WARNING in l2cap_chan_send
bluetooth
|
-1 |
|
|
|
44 |
17d |
452d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
19 |
C |
error |
error |
3383 |
330d |
458d
|
💬 2 [364d] |
WARNING in l2cap_chan_del
bluetooth
|
-1 |
|
|
|
272 |
1h41m |
479d
|
|
general protection fault in lock_sock_nested
bluetooth
|
19 |
C |
done |
done |
2884 |
41m |
668d
|
|
WARNING in call_timer_fn
bluetooth
|
-1 |
C |
unreliable |
|
7080 |
2h55m |
966d
|
💬 8 [17d] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
19 |
C |
inconclusive |
inconclusive |
45 |
22h16m |
1245d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
24 |
C |
done |
error |
703 |
100d |
1765d
|
|