KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
|
|
|
1 |
12d |
7d16h
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
syz |
|
|
5 |
22d |
19d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
57d |
53d
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
8 |
4d13h |
54d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
68d |
63d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
177 |
1d12h |
91d
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
924 |
11h33m |
91d
|
PATCH [16d] |
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
11 |
8h35m |
105d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
63d |
124d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
19 |
9d12h |
125d
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
438 |
3h08m |
135d
|
PATCH [20h41m] |
general protection fault in h5_recv
bluetooth
|
C |
done |
|
755 |
1h02m |
141d
|
💬 1 [7d16h] |
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
139d |
143d
|
💬 1 [142d] |
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
27 |
5d10h |
171d
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
3 |
98d |
176d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
17 |
22d |
186d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
352 |
5d15h |
187d
|
💬 1 [7d16h] |
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
8 |
28d |
194d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
519 |
8h44m |
195d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
23 |
6d18h |
226d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
11 |
1d18h |
233d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
12 |
41d |
235d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
40625 |
7m |
241d
|
💬 1 [7d16h] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
66 |
14h10m |
252d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
50 |
20h50m |
252d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
43 |
23h42m |
252d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
50 |
4d08h |
272d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
syz |
error |
|
20 |
17h56m |
276d
|
💬 1 [4d23h] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
288 |
34m |
341d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
49d |
376d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
142 |
7h09m |
413d
|
💬 2 [102d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
done |
39 |
43d |
423d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
139 |
22d |
429d
|
💬 2 [133d] |
WARNING in hci_recv_frame
bluetooth
|
C |
error |
|
74 |
1d02h |
430d
|
💬 1 [42d] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
59d |
430d
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
44 |
8d11h |
442d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
321d |
449d
|
💬 2 [354d] |
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
267 |
12h44m |
470d
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2786 |
7h53m |
658d
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
7030 |
1h57m |
957d
|
💬 8 [7d16h] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
43 |
4d18h |
1236d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
90d |
1755d
|
|