KFENCE: invalid free in __hci_req_sync
bluetooth
|
|
|
|
6 |
3d22h |
6d17h
|
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
|
|
|
1 |
11d |
7d17h
|
|
possible deadlock in hci_dev_close
bluetooth
|
|
|
|
2 |
9d15h |
9d20h
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
syz |
|
|
1 |
17d |
13d
|
|
possible deadlock in hci_unregister_dev (2)
bluetooth
|
|
|
|
6 |
10d |
14d
|
|
possible deadlock in hci_dev_do_close (2)
bluetooth
|
C |
done |
|
10 |
9d00h |
14d
|
💬 1 [11d] |
WARNING in hci_recv_frame
bluetooth
|
|
|
|
1 |
14d |
14d
|
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
5 |
14d |
14d
|
|
KASAN: invalid-free in hci_req_sync_complete
bluetooth
|
|
|
|
50 |
6h05m |
18d
|
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
syz |
|
|
29 |
4h01m |
18d
|
💬 1 [9d08h] |
WARNING in hci_conn_set_handle
bluetooth
|
C |
error |
|
6 |
11d |
26d
|
💬 1 [25d] |
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
3 |
1d12h |
26d
|
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
|
|
|
1 |
38d |
32d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
|
937 |
38m |
33d
|
💬 2 [10h04m] |
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
C |
done |
|
7 |
3d22h |
33d
|
💬 2 [32d] |
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
C |
done |
|
5 |
30d |
35d
|
PATCH [31d] |
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
C |
|
|
8 |
21d |
35d
|
PATCH [31d] |
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
C |
|
|
36 |
25d |
35d
|
💬 2 [34d] |
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
C |
|
|
28 |
22d |
35d
|
PATCH [31d] |
WARNING in msft_do_close
bluetooth
|
|
|
|
1 |
42d |
38d
|
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
|
|
|
1 |
47d |
43d
|
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
2 |
29d |
54d
|
|
possible deadlock in touch_wq_lockdep_map
bluetooth
|
|
|
|
366 |
7m |
55d
|
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
|
|
|
2 |
38d |
55d
|
|
WARNING in hci_conn_del
bluetooth
|
C |
done |
|
2547 |
36m |
72d
|
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
|
|
|
4 |
24d |
74d
|
|
WARNING in ida_free (2)
bluetooth
|
C |
|
|
14 |
86d |
87d
|
💬 2 [86d] |
WARNING in hci_send_cmd
bluetooth
|
|
|
|
3 |
6d15h |
88d
|
|
INFO: task hung in hci_conn_failed
bluetooth
|
C |
done |
|
1 |
60d |
103d
|
💬 12 [100d] |
possible deadlock in __flush_workqueue
bluetooth
|
|
|
|
532 |
1h14m |
114d
|
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
C |
|
|
22 |
68d |
130d
|
|
WARNING in l2cap_do_send (2)
bluetooth
|
syz |
|
|
1 |
122d |
135d
|
💬 2 [134d] |
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
C |
done |
|
236 |
10h18m |
176d
|
PATCH [174d] |
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
|
|
|
5 |
13d |
179d
|
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
C |
done |
|
7 |
58d |
189d
|
💬 2 [82d] |
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
120 |
1h55m |
242d
|
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
C |
done |
done |
3400 |
67d |
311d
|
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
|
|
|
5 |
90d |
317d
|
💬 1 [151d] |
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
C |
done |
|
61 |
1d02h |
346d
|
💬 2 [10h04m] |
possible deadlock in rfcomm_dlc_exists
bluetooth
|
C |
error |
|
12954 |
7d23h |
476d
|
PATCH [3d07h] |
WARNING in call_timer_fn
bluetooth
|
syz |
unreliable |
|
2669 |
13m |
541d
|
💬 8 [10h04m] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
5 |
13d |
820d
|
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
C |
done |
|
21745 |
7d23h |
970d
|
PATCH [3d07h] |
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
syz |
done |
done |
83 |
542d |
1370d
|
💬 1 [1092d] |
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
44 |
50d |
1372d
|
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
syz |
error |
error |
1 |
1375d |
1375d
|
|
WARNING in hci_conn_timeout
bluetooth
|
C |
done |
|
5058 |
57m |
1377d
|
PATCH [267d] |