|
KASAN: slab-use-after-free Read in btusb_disconnect
bluetooth
usb
|
C |
|
|
4 |
1d21h |
1d07h
|
💬 1 [23h37m] |
|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
|
|
|
1 |
17d |
12d
|
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
syz |
|
|
5 |
27d |
24d
|
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
61d |
57d
|
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
8 |
9d05h |
59d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
72d |
68d
|
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
183 |
2h00m |
95d
|
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
1050 |
2h21m |
96d
|
PATCH [21d] |
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
12 |
4d05h |
109d
|
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
68d |
129d
|
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
19 |
14d |
129d
|
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
462 |
4h36m |
139d
|
PATCH [5d12h] |
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
831 |
3h39m |
146d
|
💬 1 [12d] |
|
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
144d |
147d
|
💬 1 [147d] |
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
27 |
10d |
176d
|
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
17 |
27d |
190d
|
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
C |
|
|
356 |
23h37m |
192d
|
💬 4 [1d00h] |
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
8 |
33d |
199d
|
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
530 |
5h16m |
199d
|
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
23 |
11d |
231d
|
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
12 |
1d04h |
238d
|
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
12 |
45d |
240d
|
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
40883 |
20m |
245d
|
💬 1 [12d] |
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
66 |
5d05h |
257d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
54 |
3d09h |
257d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
47 |
6h42m |
257d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
51 |
2d18h |
277d
|
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
syz |
error |
|
20 |
5d09h |
281d
|
💬 1 [9d14h] |
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
298 |
3h48m |
346d
|
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
53d |
380d
|
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
143 |
12h52m |
418d
|
💬 2 [106d] |
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
done |
39 |
48d |
428d
|
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
139 |
27d |
434d
|
💬 2 [138d] |
|
WARNING in hci_recv_frame
bluetooth
|
C |
error |
|
74 |
5d18h |
435d
|
💬 1 [46d] |
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
64d |
435d
|
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
44 |
13d |
447d
|
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
325d |
454d
|
💬 2 [359d] |
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
269 |
20h24m |
475d
|
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2832 |
43m |
663d
|
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
7054 |
14m |
962d
|
💬 8 [12d] |
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
43 |
9d10h |
1240d
|
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
95d |
1760d
|
|