KASAN: invalid-free in hci_req_sync_complete
bluetooth
|
|
|
|
4 |
1d17h |
2d10h
|
💬 0 [2d10h]
|
KASAN: slab-use-after-free Read in skb_release_head_state
bluetooth
|
|
|
|
5 |
3d03h |
2d10h
|
💬 0 [2d10h]
|
WARNING in hci_conn_set_handle
bluetooth
|
C |
error |
|
5 |
2d09h |
10d
|
💬 1 [9d07h]
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
1 |
14d |
10d
|
💬 0 [10d]
|
KASAN: global-out-of-bounds Read in __timer_delete
bluetooth
|
|
|
|
1 |
22d |
16d
|
💬 0 [16d]
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
|
|
247 |
22m |
17d
|
💬 2 [11d]
|
BUG: sleeping function called from invalid context in hci_le_create_big_complete_evt
bluetooth
|
C |
done |
|
7 |
1d21h |
17d
|
💬 2 [16d]
|
KASAN: slab-out-of-bounds Read in hci_sock_setsockopt
bluetooth
|
C |
|
|
5 |
14d |
19d
|
PATCH [14d] |
KASAN: slab-out-of-bounds Read in rfcomm_sock_setsockopt
bluetooth
|
C |
|
|
8 |
5d21h |
19d
|
PATCH [14d] |
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt
bluetooth
|
C |
|
|
36 |
8d23h |
19d
|
💬 2 [18d]
|
KASAN: slab-out-of-bounds Read in sco_sock_setsockopt
bluetooth
|
C |
|
|
28 |
6d05h |
19d
|
PATCH [14d] |
WARNING in msft_do_close
bluetooth
|
|
|
|
1 |
26d |
22d
|
💬 0 [22d]
|
memory leak in corrupted (2)
bluetooth
|
syz |
|
|
419 |
2d08h |
22d
|
💬 0 [16d]
|
KASAN: slab-use-after-free Read in mgmt_pending_foreach
bluetooth
|
|
|
|
1 |
31d |
27d
|
💬 0 [27d]
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
2 |
13d |
38d
|
💬 0 [38d]
|
possible deadlock in touch_wq_lockdep_map
bluetooth
|
|
|
|
140 |
9m |
39d
|
💬 0 [39d]
|
KASAN: slab-use-after-free Read in hci_cmd_timeout
bluetooth
|
|
|
|
2 |
22d |
39d
|
💬 0 [39d]
|
WARNING in hci_conn_del
bluetooth
|
C |
done |
|
2030 |
23m |
56d
|
💬 0 [16d]
|
KASAN: slab-use-after-free Read in l2cap_send_cmd
bluetooth
|
|
|
|
4 |
7d23h |
58d
|
💬 0 [58d]
|
WARNING in ida_free (2)
bluetooth
|
C |
|
|
14 |
70d |
71d
|
💬 2 [70d]
|
WARNING in hci_send_cmd
bluetooth
|
|
|
|
2 |
3d14h |
72d
|
💬 0 [72d]
|
INFO: task hung in hci_release_dev
bluetooth
|
C |
done |
|
18 |
80d |
77d
|
💬 0 [77d]
|
INFO: task hung in hci_conn_failed
bluetooth
|
C |
done |
|
1 |
44d |
87d
|
💬 12 [84d]
|
possible deadlock in __flush_workqueue
bluetooth
|
|
|
|
206 |
1h03m |
98d
|
💬 0 [48d]
|
KMSAN: uninit-value in eir_get_service_data
bluetooth
|
C |
|
|
22 |
52d |
114d
|
💬 0 [48d]
|
WARNING in l2cap_do_send (2)
bluetooth
|
syz |
|
|
1 |
106d |
119d
|
💬 2 [118d]
|
KASAN: slab-use-after-free Write in sco_sock_timeout
bluetooth
|
C |
done |
|
226 |
10d |
160d
|
PATCH [158d] |
INFO: trying to register non-static key in sco_sock_timeout (2)
bluetooth
|
|
|
|
4 |
69d |
163d
|
💬 0 [163d]
|
KASAN: slab-use-after-free Write in hci_conn_drop (2)
bluetooth
|
C |
done |
|
7 |
42d |
173d
|
💬 2 [66d]
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
89 |
9h33m |
226d
|
💬 0 [16d]
|
BUG: sleeping function called from invalid context in hci_cmd_sync_submit
bluetooth
|
C |
done |
done |
3400 |
51d |
295d
|
💬 0 [48d]
|
WARNING: refcount bug in sco_sock_timeout (2)
bluetooth
|
|
|
|
5 |
74d |
301d
|
💬 1 [135d]
|
KASAN: slab-use-after-free Write in sco_conn_del
bluetooth
|
C |
done |
|
58 |
3d15h |
330d
|
💬 2 [16d]
|
possible deadlock in rfcomm_dlc_exists
bluetooth
|
C |
error |
|
12015 |
3h06m |
460d
|
💬 0 [16d]
|
WARNING in call_timer_fn
bluetooth
|
syz |
unreliable |
|
2485 |
2h00m |
525d
|
💬 8 [16d]
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
5 |
13d |
803d
|
💬 0 [80d]
|
possible deadlock in rfcomm_sk_state_change
bluetooth
|
C |
done |
|
20494 |
3h03m |
954d
|
PATCH [468d] |
KASAN: use-after-free Read in __queue_work (3)
bluetooth
|
syz |
done |
done |
83 |
526d |
1354d
|
💬 1 [1076d]
|
WARNING: ODEBUG bug in put_device
bluetooth
|
syz |
done |
error |
44 |
34d |
1356d
|
💬 0 [298d]
|
KASAN: use-after-free Read in __sco_sock_close
bluetooth
|
syz |
error |
error |
1 |
1359d |
1359d
|
💬 0 [1359d]
|
WARNING in hci_conn_timeout
bluetooth
|
C |
done |
|
4994 |
5m |
1361d
|
PATCH [251d] |