KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (4)
bluetooth
|
C |
|
|
8 |
1d16h |
1d03h
|
💬 1 [20h35m] |
KASAN: slab-use-after-free Read in btusb_disconnect
bluetooth
usb
|
C |
|
|
4 |
5d03h |
4d13h
|
💬 1 [4d05h] |
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
|
|
|
1 |
20d |
15d
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
syz |
|
|
5 |
30d |
27d
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
65d |
61d
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
8 |
12d |
62d
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
76d |
71d
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
186 |
13h49m |
99d
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
1081 |
10h58m |
99d
|
PATCH [24d] |
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
12 |
7d11h |
113d
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
71d |
132d
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
22 |
10h14m |
133d
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
488 |
1h53m |
143d
|
PATCH [8d18h] |
general protection fault in h5_recv
bluetooth
|
C |
done |
|
896 |
54m |
149d
|
💬 1 [15d] |
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
147d |
151d
|
💬 1 [150d] |
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
27 |
13d |
179d
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
17 |
30d |
194d
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
C |
|
|
358 |
2d10h |
195d
|
💬 4 [4d06h] |
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
8 |
36d |
202d
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
536 |
4h39m |
203d
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
23 |
14d |
234d
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
12 |
4d11h |
241d
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
12 |
49d |
243d
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
41058 |
10m |
249d
|
💬 1 [15d] |
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
68 |
2d05h |
260d
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
56 |
11h21m |
260d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
47 |
3d12h |
260d
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
51 |
6d01h |
280d
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
syz |
error |
|
20 |
8d15h |
284d
|
💬 1 [12d] |
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
307 |
14h18m |
349d
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
57d |
384d
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
144 |
19h26m |
421d
|
💬 2 [109d] |
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
done |
39 |
51d |
431d
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
139 |
30d |
437d
|
💬 2 [141d] |
WARNING in hci_recv_frame
bluetooth
|
C |
error |
|
75 |
2d03h |
438d
|
💬 1 [50d] |
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
67d |
438d
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
44 |
16d |
450d
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
328d |
457d
|
💬 2 [362d] |
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
270 |
2d21h |
478d
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2868 |
8h46m |
666d
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
7072 |
16h04m |
965d
|
💬 8 [15d] |
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
44 |
11h51m |
1244d
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
98d |
1763d
|
|