KASAN: invalid-free in hci_req_sync_complete
bluetooth
|
|
|
|
4 |
6h32m |
1d00h
|
💬 0 [1d00h]
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
|
|
|
5 |
1d17h |
1d00h
|
💬 0 [1d00h]
|
WARNING in hci_conn_set_handle
bluetooth
|
C |
error |
|
5 |
23h09m |
9d00h
|
💬 1 [7d21h]
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
1 |
13d |
9d06h
|
💬 0 [9d06h]
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
|
|
|
1 |
20d |
14d
|
💬 0 [14d]
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
|
|
200 |
40m |
15d
|
💬 2 [9d21h]
|
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
C |
done |
|
7 |
10h56m |
15d
|
💬 2 [15d]
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
C |
|
|
5 |
13d |
17d
|
PATCH [13d] |
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
C |
|
|
8 |
4d10h |
17d
|
PATCH [13d] |
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
C |
|
|
36 |
7d12h |
17d
|
💬 2 [16d]
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
C |
|
|
28 |
4d18h |
17d
|
PATCH [13d] |
WARNING in msft_do_close
bluetooth
|
|
|
|
1 |
25d |
21d
|
💬 0 [21d]
|
memory leak in corrupted (2)
bluetooth
|
syz |
|
|
419 |
21h53m |
21d
|
💬 0 [14d]
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
|
|
|
1 |
30d |
25d
|
💬 0 [25d]
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
2 |
12d |
36d
|
💬 0 [36d]
|
possible deadlock in touch_wq_lockdep_map
bluetooth
|
|
|
|
108 |
4h25m |
37d
|
💬 0 [37d]
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
|
|
|
2 |
20d |
37d
|
💬 0 [37d]
|
WARNING in hci_conn_del
bluetooth
|
C |
done |
|
1866 |
45m |
55d
|
💬 0 [14d]
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
|
|
|
4 |
6d13h |
56d
|
💬 0 [56d]
|
WARNING in ida_free (2)
bluetooth
|
C |
|
|
14 |
69d |
69d
|
💬 2 [68d]
|
WARNING in hci_send_cmd
bluetooth
|
|
|
|
2 |
2d04h |
70d
|
💬 0 [70d]
|
INFO: task hung in hci_release_dev
bluetooth
|
C |
done |
|
18 |
78d |
76d
|
💬 0 [76d]
|
INFO: task hung in hci_conn_failed
bluetooth
|
C |
done |
|
1 |
42d |
86d
|
💬 12 [82d]
|
possible deadlock in __flush_workqueue
bluetooth
|
|
|
|
184 |
12m |
96d
|
💬 0 [47d]
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
C |
|
|
22 |
51d |
112d
|
💬 0 [47d]
|
WARNING in l2cap_do_send (2)
bluetooth
|
syz |
|
|
1 |
104d |
118d
|
💬 2 [116d]
|
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
C |
done |
|
226 |
8d21h |
158d
|
PATCH [157d] |
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
|
|
|
4 |
68d |
162d
|
💬 0 [162d]
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
C |
done |
|
7 |
41d |
172d
|
💬 2 [64d]
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
87 |
8h57m |
224d
|
💬 0 [14d]
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
C |
done |
done |
3400 |
50d |
293d
|
💬 0 [47d]
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
|
|
|
5 |
72d |
299d
|
💬 1 [133d]
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
C |
done |
|
58 |
2d04h |
328d
|
💬 2 [14d]
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
C |
error |
|
11973 |
55m |
458d
|
💬 0 [14d]
|
WARNING in call_timer_fn
bluetooth
|
syz |
unreliable |
|
2477 |
2h14m |
523d
|
💬 8 [14d]
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
5 |
12d |
802d
|
💬 0 [78d]
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
C |
done |
|
20455 |
31m |
953d
|
PATCH [467d] |
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
syz |
done |
done |
83 |
524d |
1353d
|
💬 1 [1074d]
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
44 |
33d |
1354d
|
💬 0 [296d]
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
syz |
error |
error |
1 |
1358d |
1357d
|
💬 0 [1357d]
|
WARNING in hci_conn_timeout
bluetooth
|
C |
done |
|
4990 |
20h07m |
1360d
|
PATCH [249d] |