bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 110
Parent subsystem(s): kernel (113)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
KASAN: slab-use-after-free Read in hci_sent_cmd_data bluetooth prio:high actionable 19 1 16d 10d
INFO: trying to register non-static key in bt_accept_unlink prio:high bluetooth -1 2 64d 70d
WARNING in hci_send_acl (4) prio:low bluetooth -1 1 97d 93d
KASAN: slab-use-after-free Read in skb_dequeue (2) actionable prio:high bluetooth 19 2 42d 95d PATCH [95d]
WARNING in hci_conn_drop (4) prio:high bluetooth -1 4 85d 99d
WARNING in l2cap_send_conn_req prio:low bluetooth -1 3 74d 108d PATCH [94d]
WARNING in hci_send_cmd (4) prio:high bluetooth -1 6 32d 118d 💬 1 [49d]
KASAN: slab-use-after-free Read in process_one_work (2) bluetooth prio:high 19 3 92d 122d
WARNING in l2cap_conn_start prio:low bluetooth -1 6 21d 163d
WARNING in hci_connect_sco prio:low bluetooth -1 syz 6 11d 240d 💬 2 [201d]
INFO: task hung in get_signal (2) prio:low bluetooth 1 syz 1 263d 259d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth prio:high 19 syz error error 78 188d 404d 💬 3 [396d]
INFO: task hung in hci_remote_features_evt (2) prio:high bluetooth 1 syz error inconclusive 9 328d 472d
KASAN: wild-memory-access Read in l2cap_connect_cfm prio:high bluetooth 19 syz, C error inconclusive 345 54d 523d 💬 1 [49d]
WARNING: held lock freed in bt_accept_dequeue prio:high bluetooth 4 34 75d 612d
WARNING in hci_conn_timeout (2) prio:low bluetooth -1 syz, C error 26266 27m 613d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 244 21h06m 670d 💬 1 [18d]
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb prio:high bluetooth 19 syz error 203 54d 670d 💬 3 [49d]
WARNING: ODEBUG bug in hci_release_dev (2) prio:high bluetooth -1 syz, C error 595 1d00h 759d PATCH [147d]
KASAN: slab-use-after-free Read in l2cap_recv_frame prio:high bluetooth 19 syz, C inconclusive inconclusive 140 127d 847d 💬 2 [332d]
WARNING in hci_recv_frame prio:low bluetooth -1 syz, C error 266 53d 848d 💬 1 [112d]
WARNING in l2cap_chan_send prio:high bluetooth -1 C 62 1d01h 860d
WARNING in l2cap_chan_del prio:high bluetooth -1 390 2h07m 888d
general protection fault in lock_sock_nested prio:high bluetooth 19 syz, C done done 4503 70d 1076d
WARNING in call_timer_fn bluetooth prio:high -1 syz, C unreliable 9654 3h28m 1375d 💬 8 [18d]
general protection fault in l2cap_chan_timeout (3) bluetooth 19 syz, C inconclusive inconclusive 92 70d 1654d