bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 116
Parent subsystem(s): kernel (118)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
possible deadlock in rfcomm_run bluetooth prio:high 4 1 4d19h 19h01m
general protection fault in rfcomm_dev_shutdown bluetooth prio:low 2 9 9h41m 19h44m PATCH [8h37m]
KASAN: slab-use-after-free Read in l2cap_le_flowctl_send bluetooth prio:high actionable 19 1 10d 5d22h
KASAN: slab-use-after-free Read in hci_sent_cmd_data prio:high actionable bluetooth 19 1 57d 51d
kernel panic: kernel: panic_on_warn set ... (3) prio:high bluetooth 2 syz, C error 103 3h55m 55d 💬 1 [32d]
KASAN: slab-use-after-free Read in skb_dequeue (2) actionable prio:high bluetooth 19 2 83d 136d PATCH [136d]
WARNING in hci_send_cmd (4) prio:high bluetooth -1 7 31d 160d 💬 1 [28d]
WARNING in l2cap_conn_start prio:low bluetooth -1 6 62d 204d
WARNING in hci_connect_sco prio:low bluetooth -1 syz 6 52d 281d 💬 2 [242d]
INFO: task hung in get_signal (2) prio:low bluetooth 1 syz 1 304d 300d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth prio:high 19 syz error error 78 229d 445d 💬 3 [437d]
INFO: task hung in hci_remote_features_evt (2) prio:high bluetooth 1 syz error inconclusive 9 369d 514d
KASAN: wild-memory-access Read in l2cap_connect_cfm prio:high bluetooth 19 syz, C error inconclusive 345 96d 564d PATCH [34d]
WARNING in hci_conn_timeout (2) prio:low bluetooth -1 syz, C error 31280 1h28m 654d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 250 31d 711d 💬 1 [28d]
KASAN: slab-use-after-free Read in l2cap_recv_frame prio:high bluetooth 19 syz, C inconclusive inconclusive 140 168d 888d 💬 2 [373d]
WARNING in l2cap_chan_del prio:high bluetooth -1 393 18d 929d
general protection fault in lock_sock_nested prio:high bluetooth 19 syz, C done done 4503 111d 1117d
INFO: task hung in synchronize_rcu (4) prio:high fs bluetooth 1 syz, C done error 4825 now 1247d 💬 8 [38d]
WARNING in call_timer_fn bluetooth prio:high -1 syz, C unreliable 9890 1h48m 1416d 💬 8 [28d]