|
WARNING in pkcs1pad_verify
|
-1 |
syz, C |
|
done |
13 |
56d |
58d
|
3/3 |
18d |
bf7b8de87559
crypto: rsa-pkcs1pad: Don't WARN on an empty digest
|
|
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
|
17 |
syz, C |
|
done |
1 |
56d |
56d
|
3/3 |
20d |
e814ae925f6f
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
|
|
general protection fault in i915_pci_probe
|
2 |
syz, C |
|
done |
30 |
57d |
70d
|
3/3 |
22d |
2239e6b49d33
drm/i915: Guard against NULL driver_data in i915_pci_probe()
|
|
UBSAN: array-index-out-of-bounds in snd_dummy_probe
|
15 |
syz, C |
|
done |
2 |
65d |
70d
|
3/3 |
30d |
4d0892a90b57
ALSA: dummy: Check card index validity at probe
|
|
WARNING in usb_stor_msg_common/usb_submit_urb
|
-1 |
|
|
|
22 |
33d |
56d
|
3/3 |
30d |
9c261a83131e
usb-storage: ene_ub6250: fix race between scan work and probe
|
|
WARNING in nvmet_fc_alloc_ls_iodlist
|
-1 |
syz, C |
|
done |
1 |
67d |
67d
|
3/3 |
36d |
1a8f007faefe
nvmet-fc: fix invalid free in LS IOD error path
|
|
INFO: task hung in __bread_gfp
origin:lts-only
|
1 |
syz, C |
|
done |
9 |
550d |
621d
|
3/3 |
42d |
aa2ddcc65e85
block: make bio_check_eod work for zero sized devices
|
|
WARNING in firmware_fallback_sysfs
origin:upstream
missing-backport
|
-1 |
syz, C |
|
error |
256 |
82d |
1298d
|
3/3 |
82d |
bbfedc847140
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
|
|
BUG: unable to handle kernel paging request in nilfs_mdt_save_to_shadow_map
|
8 |
syz, C |
|
done |
49 |
135d |
209d
|
3/3 |
105d |
7902b1df1520
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
|
|
inconsistent lock state in __sk_receive_skb
|
4 |
syz, C |
|
done |
12 |
141d |
179d
|
3/3 |
111d |
02c04df84de7
phonet/pep: disable BH around forwarded sk_receive_skb()
|
|
INFO: task hung in ip6gre_exit_batch_net (2)
origin:lts-only
|
1 |
syz, C |
|
done |
1 |
152d |
152d
|
3/3 |
120d |
24a40df79307
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
|
|
KASAN: slab-out-of-bounds Read in drop_buffers (2)
origin:lts-only
|
17 |
syz, C |
|
inconclusive |
18 |
189d |
390d
|
3/3 |
186d |
4a977fcc0d6a
erofs: Fix the slab-out-of-bounds in drop_buffers()
|
|
INFO: task hung in z_erofs_runqueue
origin:lts-only
|
1 |
syz, C |
|
inconclusive |
232 |
191d |
816d
|
3/3 |
186d |
c1172e65aad4
erofs: handle overlapped pclusters out of crafted images properly
|
|
INFO: rcu detected stall in sys_close
origin:lts-only
|
1 |
syz, C |
|
done |
1 |
314d |
345d
|
3/3 |
276d |
f4bf3ca2e5cb
softirq: Add trace points for tasklet entry/exit
|
|
KASAN: slab-out-of-bounds Write in copy_to_urb
origin:lts-only
|
21 |
syz, C |
|
done |
7 |
319d |
323d
|
3/3 |
276d |
2d5ce84a81a7
ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
|
|
KASAN: slab-out-of-bounds Write in stack_map_get_build_id_offset
origin:lts-only
|
21 |
syz, C |
|
done |
3 |
333d |
342d
|
3/3 |
276d |
f4bf3ca2e5cb
softirq: Add trace points for tasklet entry/exit
|
|
BUG: unable to handle kernel paging request in bcsp_recv
origin:upstream
missing-backport
|
8 |
syz, C |
|
done |
19 |
316d |
535d
|
3/3 |
276d |
ca94b2b036c2
Bluetooth: bcsp: receive data only if registered
|
|
KASAN: use-after-free Read in hdm_disconnect
|
19 |
syz, C |
|
done |
153 |
350d |
779d
|
3/3 |
311d |
4b1270902609
most: usb: Fix use-after-free in hdm_disconnect
|
|
WARNING in minix_rmdir
|
-1 |
syz, C |
|
done |
1 |
370d |
370d
|
3/3 |
331d |
73861970938a
minixfs: Verify inode mode when loading from disk
|
|
UBSAN: shift-out-of-bounds in pcl726_attach
|
-1 |
syz, C |
|
done |
16 |
412d |
440d
|
3/3 |
373d |
96cb948408b3
comedi: pcl726: Prevent invalid irq number
|
|
kernel panic: stack is corrupted in __schedule (3)
origin:upstream
missing-backport
|
2 |
syz, C |
|
done |
5 |
416d |
521d
|
3/3 |
379d |
7375f22495e7
fs/buffer: fix use-after-free when call bh_read() helper
|
|
WARNING in udf_process_sequence
origin:lts-only
|
-1 |
syz, C |
|
done |
4 |
417d |
422d
|
3/3 |
380d |
1a11201668e8
udf: Verify partition map count
|
|
KASAN: use-after-free Read in rose_get_neigh
|
19 |
syz, C |
|
done |
98 |
431d |
576d
|
3/3 |
390d |
34a500caf48c
rose: fix dangling neighbour pointers in rose_rt_device_down()
|
|
BUG: unable to handle kernel paging request in preempt_schedule_irq
|
8 |
syz, C |
|
done |
14 |
438d |
477d
|
3/3 |
400d |
7375f22495e7
fs/buffer: fix use-after-free when call bh_read() helper
|
|
kernel BUG in hpage_collapse_scan_file
origin:lts-only
|
-1 |
syz, C |
|
done |
6 |
437d |
442d
|
3/3 |
405d |
f1897f2f08b2
mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
|
|
UBSAN: shift-out-of-bounds in pcl812_attach
origin:upstream
|
-1 |
syz, C |
|
done |
11 |
448d |
458d
|
3/3 |
412d |
b14b076ce593
comedi: pcl812: Fix bit shift out of bounds
|
|
WARNING in comedi_unlocked_ioctl
origin:upstream
|
-1 |
syz, C |
|
done |
13 |
450d |
460d
|
3/3 |
414d |
08ae4b20f5e8
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
|
|
general protection fault in mcp_i2c_xfer
origin:upstream
missing-backport
|
2 |
syz, C |
|
done |
32 |
451d |
565d
|
3/3 |
419d |
f2d4a5834638
HID: mcp2221: Set driver data before I2C adapter add
|
|
WARNING in format_decode
origin:upstream
|
-1 |
syz, C |
|
done |
314 |
459d |
1061d
|
3/3 |
428d |
f8242745871f
bpf: Reject %p% format string in bprintf-like helpers
|
|
general protection fault in htb_qlen_notify
origin:lts-only
|
2 |
syz, C |
|
done |
4 |
459d |
461d
|
3/3 |
428d |
ffdde7bf5a43
net/sched: Abort __tc_modify_qdisc if parent class does not exist
|
|
WARNING in ath6kl_bmi_get_target_info
|
-1 |
syz, C |
|
done |
20 |
461d |
717d
|
3/3 |
429d |
e7417421d893
wifi: ath6kl: remove WARN on bad firmware input
|
|
WARNING in dib0700_i2c_xfer/usb_submit_urb
origin:upstream
|
-1 |
syz, C |
|
done |
3 |
484d |
490d
|
3/3 |
450d |
270aa0106206
mm/uffd: fix vma operation where start addr cuts part of vma
|
|
WARNING in ext4_iomap_begin (2)
origin:upstream
|
-1 |
syz, C |
|
done |
10 |
485d |
570d
|
3/3 |
455d |
1a77a028a392
ext4: ensure i_size is smaller than maxbytes
|
|
INFO: trying to register non-static key in cfg80211_dev_free
origin:lts-only
|
-1 |
syz, C |
|
done |
5 |
492d |
541d
|
3/3 |
457d |
fc88dee89d7b
wifi: cfg80211: init wiphy_work before allocating rfkill fails
|
|
possible deadlock in ocfs2_finish_quota_recovery
origin:upstream
|
4 |
syz, C |
|
done |
12 |
527d |
621d
|
3/3 |
495d |
fcaf3b2683b0
ocfs2: stop quota recovery before disabling quotas
|
|
KASAN: use-after-free Read in __ocfs2_find_path
|
19 |
syz, C |
|
done |
5 |
553d |
737d
|
3/3 |
519d |
81aba693b129
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
|
|
WARNING in plfxlc_mac_release
origin:upstream
missing-backport
|
-1 |
syz, C |
|
inconclusive |
2 |
528d |
639d
|
3/3 |
523d |
93d646911be1
wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
|
|
UBSAN: array-index-out-of-bounds in txCommit (2)
origin:lts-only
|
15 |
syz, C |
|
done |
152 |
537d |
1074d
|
3/3 |
530d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: shift-out-of-bounds in extAlloc
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
204 |
548d |
1311d
|
3/3 |
530d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in xtSearch (2)
origin:lts-only
|
15 |
syz, C |
|
done |
98 |
594d |
1074d
|
3/3 |
530d |
a779ed754e52
jfs: define xtree root and page independently
|
|
UBSAN: array-index-out-of-bounds in xtInsert
origin:lts-only
|
15 |
syz, C |
|
done |
1331 |
537d |
1308d
|
3/3 |
530d |
a779ed754e52
jfs: define xtree root and page independently
|
|
BUG: unable to handle kernel NULL pointer dereference in ntfs_sparse_cluster
origin:lts-only
|
10 |
syz, C |
|
done |
375 |
829d |
1308d
|
3/3 |
564d |
406a037d93b7
fs/ntfs3: Change new sparse cluster processing
|
|
WARNING in ar5523_submit_rx_cmd/usb_submit_urb
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
7 |
611d |
1262d
|
3/3 |
576d |
34f7ebff1b96
wifi: ar5523: enable proper endpoint verification
|
|
possible deadlock in team_port_change_check
origin:upstream
|
4 |
syz, C |
|
done |
61 |
609d |
926d
|
3/3 |
576d |
adff6ac889e1
team: prevent adding a device which is already a team device lower
|
|
KASAN: use-after-free Read in ocfs2_get_next_id
origin:lts-only
|
19 |
syz, C |
|
done |
4 |
639d |
639d
|
3/3 |
606d |
2d4311924863
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
|
|
kernel BUG in close_ctree
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
622 |
644d |
1312d
|
3/3 |
611d |
902806baf3c1
drm/bridge: adv7511_audio: Update Audio InfoFrame properly
|
|
INFO: task hung in __fdget_pos (3)
origin:lts-only
|
1 |
syz, C |
|
done |
1 |
650d |
653d
|
3/3 |
616d |
31beabd0f47f
exfat: fix the infinite loop in exfat_readdir()
|
|
divide error in drm_mode_debug_printmodeline
origin:upstream
|
2 |
syz, C |
|
done |
1 |
661d |
1125d
|
3/3 |
623d |
69fbb01e8917
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
|
|
WARNING in nilfs_rmdir
|
-1 |
syz, C |
|
done |
42 |
662d |
684d
|
3/3 |
624d |
ef942d233643
nilfs2: prevent use of deleted inode
|
|
WARNING in inet_sock_destruct
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
631 |
668d |
1281d
|
3/3 |
625d |
ca70b8baf2bd
tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
|
|
WARNING in netdev_queue_update_kobjects (2)
origin:lts-only
|
-1 |
syz, C |
|
done |
344 |
669d |
712d
|
3/3 |
627d |
27aabf27fd01
Bluetooth: fix use-after-free in device_for_each_child()
|
|
WARNING: locking bug in ext4_move_extents
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1248 |
669d |
1223d
|
3/3 |
630d |
be063ffa28bc
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
|
|
KASAN: slab-out-of-bounds Read in ea_get
origin:upstream
missing-backport
|
17 |
syz, C |
|
done |
5 |
672d |
1230d
|
3/3 |
631d |
d9f9d96136cb
jfs: xattr: check invalid xattr size more strictly
|
|
INFO: rcu detected stall in sys_newfstatat
origin:upstream
|
1 |
syz, C |
|
done |
8 |
676d |
1214d
|
3/3 |
633d |
d77278196441
devlink: bump the instance index directly when iterating
|
|
UBSAN: shift-out-of-bounds in dbSplit
|
-1 |
syz, C |
|
done |
18 |
695d |
911d
|
3/3 |
643d |
51a203470f50
jfs: fix shift-out-of-bounds in dbSplit
|
|
INFO: task hung in blkdev_get_by_dev
origin:lts-only
|
1 |
syz, C |
|
done |
25 |
702d |
989d
|
3/3 |
650d |
d77278196441
devlink: bump the instance index directly when iterating
|
|
WARNING in ieee80211_get_max_required_bw
origin:lts-only
|
-1 |
syz, C |
|
done |
25 |
703d |
718d
|
3/3 |
657d |
5cf45281a6ee
Revert "wifi: mac80211: fix RCU list iterations"
|
|
WARNING in media_create_pad_link
origin:upstream
|
-1 |
syz, C |
|
error |
2 |
772d |
1304d
|
3/3 |
669d |
19464d732252
media: uvcvideo: Require entities to have a non-zero unique ID
|
|
kernel BUG in ocfs2_truncate_inline
origin:lts-only
|
-1 |
syz, C |
|
done |
4 |
714d |
717d
|
3/3 |
669d |
2fe5d62e122b
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
|
|
BUG: unable to handle kernel NULL pointer dereference in lookup_one_unlocked
origin:upstream
|
10 |
syz, C |
|
|
2 |
696d |
696d
|
3/3 |
669d |
ff43d008bbf9
ovl: Filter invalid inodes with missing lookup function
|
|
SYZFAIL: tun: can't open /dev/net/tun
origin:upstream
|
-1 |
syz |
|
done |
1 |
744d |
1049d
|
3/3 |
712d |
d77278196441
devlink: bump the instance index directly when iterating
|
|
kernel BUG in jbd2_cleanup_journal_tail
origin:upstream
|
-1 |
syz, C |
|
done |
9 |
746d |
757d
|
3/3 |
716d |
82dfdd1e31e7
ocfs2: fix null-ptr-deref when journal load failed.
|
|
INFO: task hung in ext4_quota_write
origin:upstream
missing-backport
|
1 |
syz, C |
|
done |
9 |
782d |
1022d
|
3/3 |
736d |
0752e7fb549d
ext4: do not create EA inode under buffer lock
|
|
UBSAN: shift-out-of-bounds in dbDiscardAG (2)
origin:lts-only
|
-1 |
syz, C |
|
done |
5 |
787d |
791d
|
3/3 |
751d |
7063b80268e2
jfs: Fix shift-out-of-bounds in dbDiscardAG
|
|
WARNING in cset_cgroup_from_root
origin:lts-only
|
-1 |
syz, C |
|
done |
139 |
786d |
802d
|
3/3 |
751d |
d23b5c577715
cgroup: Make operations on the cgroup root_list RCU safe
|
|
possible deadlock in hfsplus_file_extend
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
2760 |
802d |
1311d
|
3/3 |
766d |
c11c3a4524be
hfsplus: fix to avoid false alarm of circular locking
|
|
WARNING in skb_checksum_help
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
2523 |
806d |
1224d
|
3/3 |
771d |
e269d79c7d35
net: missing check virtio
|
|
possible deadlock in rds_wake_sk_sleep
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1 |
808d |
1220d
|
3/3 |
771d |
2c66293a452c
net:rds: Fix possible deadlock in rds_message_put
|
|
KASAN: stack-out-of-bounds Read in profile_pc
|
17 |
syz, C |
|
done |
690 |
831d |
1248d
|
3/3 |
790d |
093d9603b600
x86: stop playing stack games in profile_pc()
|
|
WARNING in __xdp_reg_mem_model
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
839d |
911d
|
3/3 |
799d |
7e9f79428372
xdp: Remove WARN() from __xdp_reg_mem_model()
|
|
WARNING in skb_ensure_writable
|
-1 |
syz, C |
|
done |
496 |
839d |
914d
|
3/3 |
799d |
dacc15e9cb24
bpf: Avoid splat in pskb_pull_reason
|
|
possible deadlock in console_emit_next_record
origin:upstream
|
4 |
syz, C |
|
done |
38 |
841d |
1043d
|
3/3 |
800d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in ieee80211_check_rate_mask
origin:lts-only
|
-1 |
syz, C |
|
done |
10 |
803d |
1065d
|
3/3 |
802d |
139faad888ef
wifi: mac80211: check basic rates validity
|
|
BUG: unable to handle kernel paging request in bpf_dispatcher_xdp
origin:lts-only
|
8 |
syz, C |
|
done |
16 |
986d |
1291d
|
3/3 |
802d |
d0d2df38f5d0
bpf: Synchronize dispatcher update with bpf_dispatcher_xdp_func
|
|
WARNING: lock held when returning to user space in f2fs_write_single_data_page
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1 |
1029d |
1233d
|
3/3 |
809d |
f2ba11ba9325
f2fs: avoid dead loop in f2fs_issue_checkpoint()
|
|
kernel BUG in create_pending_snapshot
origin:lts-only
|
-1 |
syz, C |
|
done |
4 |
1088d |
1270d
|
3/3 |
809d |
588df4829d7f
btrfs: do not BUG_ON on failure to get dir index for new snapshot
|
|
KASAN: use-after-free Read in try_to_wake_up
origin:upstream
missing-backport
|
19 |
syz, C |
|
done |
44 |
859d |
1291d
|
3/3 |
814d |
1c3844c5f4ea
nilfs2: fix potential hang in nilfs_detach_log_writer()
|
|
kernel BUG in submit_bh_wbc
origin:lts-only
|
-1 |
syz, C |
|
done |
19 |
860d |
1288d
|
3/3 |
816d |
f2f26b4a84a0
nilfs2: fix failure to detect DAT corruption in btree and direct mappings
|
|
possible deadlock in scheduler_tick
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
237 |
879d |
938d
|
3/3 |
840d |
6693b172f008
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
kernel BUG in ipgre_header
origin:upstream
|
-1 |
syz, C |
|
error |
5 |
901d |
1061d
|
3/3 |
842d |
3cffa2ddc4d3
bonding: stop the device in bond_setup_by_slave()
|
|
WARNING in vmk80xx_write_packet/usb_submit_urb
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
906d |
939d
|
3/3 |
870d |
d1718530e3f6
comedi: vmk80xx: fix incomplete endpoint checking
|
|
WARNING in gre_tap_xmit
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
907d |
908d
|
3/3 |
873d |
42f853b42899
net l2tp: drop flow hash on forward
|
|
possible deadlock in rcu_report_exp_cpu_mult
|
4 |
syz, C |
|
done |
7 |
917d |
941d
|
3/3 |
881d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_unref
|
-1 |
syz, C |
|
done |
18 |
917d |
920d
|
3/3 |
882d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
BUG: soft lockup in sys_sendmsg (2)
origin:upstream
|
1 |
syz, C |
|
done |
1 |
920d |
920d
|
3/3 |
882d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
possible deadlock in swake_up_one
|
4 |
syz, C |
|
done |
1 |
919d |
919d
|
3/3 |
882d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in __hrtimer_run_queues (2)
|
4 |
syz, C |
|
done |
2 |
918d |
925d
|
3/3 |
887d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in unix_notinflight
|
4 |
syz, C |
|
done |
1 |
919d |
919d
|
3/3 |
888d |
b46f4eaa4f0e
af_unix: Clear stale u->oob_skb.
|
|
WARNING in __mod_timer
|
-1 |
syz, C |
|
done |
1 |
929d |
929d
|
3/3 |
898d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in try_to_wake_up
|
4 |
syz, C |
|
done |
1 |
931d |
931d
|
3/3 |
898d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str
origin:upstream
|
8 |
syz, C |
|
done |
1 |
950d |
980d
|
3/3 |
919d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
WARNING in ieee80211_bss_info_change_notify
|
-1 |
syz, C |
|
done |
442 |
954d |
1316d
|
3/3 |
923d |
f78c1375339a
wifi: nl80211: reject iftype change with mesh ID change
|
|
BUG: unable to handle kernel paging request in bit_putcs
|
8 |
syz, C |
|
done |
4 |
955d |
1151d
|
3/3 |
924d |
00d6a284fcf3
fbcon: always restore the old font data in fbcon_do_set_font()
|
|
KASAN: slab-out-of-bounds Read in ntfs_listxattr
|
17 |
syz, C |
|
done |
52 |
958d |
1296d
|
3/3 |
925d |
731ab1f98288
fs/ntfs3: Fix oob in ntfs_listxattr
|
|
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready
origin:upstream
|
10 |
syz, C |
|
done |
1 |
973d |
973d
|
3/3 |
940d |
4588b13abcbd
bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
|
|
UBSAN: array-index-out-of-bounds in diNewExt
origin:lts-only
|
15 |
syz, C |
|
done |
2 |
995d |
995d
|
3/3 |
954d |
58fca355ad37
drm/amd/display: Implement bounds check for stream encoder creation in DCN301
|
|
possible deadlock in hci_rfkill_set_block
|
4 |
syz, C |
|
done |
1032 |
1017d |
1085d
|
3/3 |
979d |
769bf60e17ee
Bluetooth: Fix deadlock in vhci_send_frame
|
|
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1028d |
1028d
|
3/3 |
998d |
4bb7ea946a37
bpf: fix precision backtracking instruction iteration
|
|
general protection fault in __unmap_hugepage_range_final
origin:upstream
|
2 |
syz, C |
|
done |
13 |
1038d |
1077d
|
3/3 |
1007d |
574a6db80f3e
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
|
|
WARNING in fib6_add
|
-1 |
syz, C |
|
done |
2 |
1037d |
1205d
|
3/3 |
1007d |
75475bb51e78
ipv6: fix potential NULL deref in fib6_add()
|
|
WARNING in __kernel_write_iter
origin:upstream
|
-1 |
syz, C |
|
done |
224 |
1046d |
1304d
|
3/3 |
1015d |
0ac1d13a55eb
btrfs: send: ensure send_fd is writable
|
|
WARNING in lookup_inline_extent_backref
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
1047d |
1215d
|
3/3 |
1017d |
a8892fd71933
btrfs: do not allow non subvolume root targets for snapshot
|
|
WARNING in nilfs_sufile_set_segment_usage
origin:upstream
|
-1 |
syz, C |
|
done |
4 |
1065d |
1311d
|
3/3 |
1031d |
675abf8df135
nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
|
|
KASAN: use-after-free Read in unix_stream_read_actor
origin:lts-only
|
19 |
syz, C |
|
done |
1 |
1064d |
1068d
|
3/3 |
1031d |
4b7b492615cf
af_unix: fix use-after-free in unix_stream_read_actor()
|
|
WARNING in __alloc_skb
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
1070d |
1070d
|
3/3 |
1038d |
c0a2a1b0d631
ppp: limit MRU to 64K
|
|
WARNING in imon_probe
origin:upstream
|
-1 |
syz |
|
done |
2 |
1150d |
1219d
|
3/3 |
1044d |
a1766a4fd83b
media: imon: fix access to invalid resource for the second interface
|
|
WARNING in inet_csk_get_port
origin:upstream
|
-1 |
syz, C |
|
done |
11 |
1092d |
1121d
|
3/3 |
1059d |
8b9c79c0ecd2
tcp: Fix listen() warning with v4-mapped-v6 address.
|
|
KASAN: use-after-free Read in diFree
origin:lts-only
|
19 |
syz, C |
|
done |
7 |
1112d |
1273d
|
3/3 |
1080d |
4de3a603010e
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
|
possible deadlock in f2fs_getxattr
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1043 |
1121d |
1179d
|
3/3 |
1086d |
980b592c6087
f2fs: avoid false alarm of circular locking
|
|
UBSAN: array-index-out-of-bounds in f2fs_iget
origin:upstream
|
15 |
syz, C |
|
done |
1 |
1150d |
1150d
|
3/3 |
1099d |
0d545a8e77cb
Revert "f2fs: fix to do sanity check on extent cache correctly"
|
|
WARNING in bpf_xdp_adjust_tail
|
-1 |
syz, C |
|
done |
238 |
1155d |
1316d
|
3/3 |
1101d |
20acffcdc2b7
net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
|
|
WARNING in sta_info_insert_rcu
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1158d |
1158d
|
3/3 |
1105d |
676a42341013
wifi: cfg80211: reject auth/assoc to AP with our address
|
|
KASAN: null-ptr-deref Write in get_block
origin:upstream
missing-backport
|
12 |
syz, C |
|
done |
4 |
1168d |
1213d
|
3/3 |
1108d |
1416eebaad80
fs/sysv: Null check to prevent null-ptr-deref bug
|
|
UBSAN: shift-out-of-bounds in dbUpdatePMap
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1179d |
1220d
|
3/3 |
1112d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in corrupted
|
-1 |
syz, C |
|
done |
3 |
1186d |
1305d
|
3/3 |
1113d |
6f489a966fbe
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
WARNING in usbnet_start_xmit/usb_submit_urb
origin:lts-only
|
-1 |
syz, C |
|
done |
2 |
1180d |
1250d
|
3/3 |
1113d |
1bebbd9b8037
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
|
WARNING in smsusb_start_streaming
|
-1 |
syz, C |
|
done |
1 |
1183d |
1183d
|
3/3 |
1113d |
6f489a966fbe
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
WARNING in smsusb_term_device
|
-1 |
syz, C |
|
done |
131 |
1184d |
1305d
|
3/3 |
1113d |
6f489a966fbe
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
BUG: unable to handle kernel NULL pointer dereference in indx_find
origin:lts-only
|
10 |
syz, C |
|
done |
3 |
1189d |
1309d
|
3/3 |
1113d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
UBSAN: shift-out-of-bounds in dbFree
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1197d |
1261d
|
3/3 |
1117d |
11509910c599
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
UBSAN: array-index-out-of-bounds in xtSearch
origin:upstream
|
15 |
syz, C |
|
done |
3 |
1193d |
1271d
|
3/3 |
1117d |
f27f759f4cd4
jfs: validate max amount of blocks before allocation.
|
|
INFO: rcu detected stall in sock_close
origin:upstream
|
1 |
syz, C |
|
done |
1 |
1192d |
1192d
|
3/3 |
1117d |
e739718444f7
net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
|
|
WARNING in btrfs_remove_chunk
origin:lts-only
|
-1 |
syz, C |
|
done |
10 |
1203d |
1293d
|
3/3 |
1121d |
604e6681e114
btrfs: scrub: reject unsupported scrub flags
|
|
KASAN: use-after-free Read in gsm_cleanup_mux
|
19 |
syz, C |
|
done |
4 |
1204d |
1270d
|
3/3 |
1129d |
3c4f8333b582
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
|
|
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e
origin:upstream
missing-backport
|
10 |
syz, C |
|
done |
23 |
1206d |
1302d
|
3/3 |
1132d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
BUG: unable to handle kernel paging request in sctp_outq_tail
origin:lts-only
|
8 |
syz, C |
|
done |
2 |
1209d |
1314d
|
3/3 |
1150d |
d2128636b303
sctp: check send stream number after wait_for_sndbuf
|
|
possible deadlock in static_key_slow_inc
|
4 |
syz, C |
|
done |
1908 |
1204d |
1316d
|
3/3 |
1155d |
0d7a4e6589a0
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
|
|
kernel BUG in btrfs_global_root_insert
|
-1 |
syz, C |
|
done |
5 |
1213d |
1283d
|
3/3 |
1164d |
4389fb6b6a9d
btrfs: do not ASSERT() on duplicated global roots
|
|
kernel BUG in btrfs_global_root_delete
|
-1 |
syz, C |
|
done |
6 |
1214d |
1281d
|
3/3 |
1170d |
4389fb6b6a9d
btrfs: do not ASSERT() on duplicated global roots
|
|
BUG: soft lockup in addrconf_rs_timer
|
1 |
syz, C |
|
done |
26 |
1218d |
1230d
|
3/3 |
1172d |
cd2b8113c2e8
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
|
WARNING in nilfs_segctor_do_construct
|
-1 |
syz, C |
|
done |
2 |
1220d |
1249d
|
3/3 |
1176d |
fee5eaecca86
nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
|
|
BUG: soft lockup in fq_pie_timer
|
1 |
syz, C |
|
done |
7 |
1222d |
1230d
|
3/3 |
1180d |
cd2b8113c2e8
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
|
possible deadlock in ext4_xattr_set_handle
|
4 |
syz, C |
|
done |
15 |
1224d |
1312d
|
3/3 |
1185d |
b3e6bcb94590
ext4: add EA_INODE checking to ext4_iget()
|
|
kernel BUG in __phys_addr
|
-1 |
syz, C |
|
done |
2 |
1223d |
1254d
|
3/3 |
1185d |
98bea253aa28
fs/ntfs3: Validate MFT flags before replaying logs
|
|
BUG: soft lockup in tc_modify_qdisc
origin:upstream
|
1 |
syz, C |
|
done |
1 |
1228d |
1228d
|
3/3 |
1192d |
cd2b8113c2e8
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
|
INFO: task hung in usbdev_open
origin:lts-only
|
1 |
syz, C |
|
done |
3 |
1235d |
1292d
|
3/3 |
1204d |
df05a9b05e46
USB: sisusbvga: Add endpoint checks
|
|
WARNING in hfsplus_cat_write_inode
origin:lts-only
|
-1 |
syz, C |
|
done |
9 |
1240d |
1299d
|
3/3 |
1206d |
81b21c0f0138
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
WARNING in hfsplus_cat_read_inode
origin:lts-only
|
-1 |
syz, C |
|
done |
24 |
1239d |
1280d
|
3/3 |
1206d |
81b21c0f0138
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
origin:lts-only
|
4 |
syz, C |
|
done |
37 |
1239d |
1273d
|
3/3 |
1206d |
25e97f7b1866
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
|
WARNING: bad unlock balance in l2cap_recv_frame
origin:lts-only
|
4 |
syz, C |
|
done |
22 |
1241d |
1273d
|
3/3 |
1206d |
25e97f7b1866
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
|
KASAN: slab-out-of-bounds Read in xfs_btree_lookup_get_block
origin:lts-only
|
17 |
syz, C |
|
done |
1 |
1242d |
1242d
|
3/3 |
1211d |
22ed903eee23
xfs: verify buffer contents when we skip log replay
|
|
possible deadlock in ext4_multi_mount_protect
origin:upstream
|
4 |
syz, C |
|
done |
165 |
1246d |
1288d
|
3/3 |
1213d |
949f95ff39bf
ext4: fix lockdep warning when enabling MMP
|
|
WARNING in __virt_to_phys
origin:lts-only
|
-1 |
syz, C |
|
done |
1 |
1245d |
1252d
|
3/3 |
1213d |
98bea253aa28
fs/ntfs3: Validate MFT flags before replaying logs
|
|
WARNING in kvfree
|
-1 |
syz, C |
|
done |
3 |
1256d |
1293d
|
3/3 |
1225d |
b87c7cdf2bed
ext4: fix invalid free tracking in ext4_xattr_move_to_block()
|
|
WARNING in ath6kl_htc_pipe_rx_complete
|
-1 |
syz, C |
|
done |
1 |
1263d |
1263d
|
3/3 |
1230d |
75c4a8154cb6
wifi: ath6kl: reduce WARN to dev_dbg() in callback
|
|
WARNING in split_huge_page_to_list
|
-1 |
syz, C |
|
done |
140 |
1267d |
1312d
|
3/3 |
1233d |
e8a7bdb6f76c
mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
|
|
possible deadlock in blkcg_deactivate_policy
|
4 |
syz, C |
|
done |
168 |
1268d |
1314d
|
3/3 |
1233d |
b5dae1cd0d83
Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()"
|
|
general protection fault in io_poll_remove_entries
|
11 |
syz, C |
|
done |
21 |
1291d |
1310d
|
3/3 |
1260d |
005308f7bdac
io_uring/poll: clear single/double poll flags on poll arming
|
|
WARNING in ip6erspan_tunnel_xmit
|
-1 |
syz, C |
|
done |
1 |
1303d |
1303d
|
3/3 |
1272d |
8e50ed774554
erspan: do not use skb_mac_header() in ndo_start_xmit()
|
|
WARNING: refcount bug in qrtr_node_lookup
|
13 |
syz, C |
|
done |
1 |
1308d |
1308d
|
3/3 |
1276d |
aa95efa187b4
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
|
|
possible deadlock in l2tp_tunnel_register
|
4 |
syz, C |
|
done |
44 |
1314d |
1317d
|
3/3 |
1282d |
9ca5e7ecab06
l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
|
|
WARNING in fscrypt_destroy_keyring
|
-1 |
syz, C |
|
done |
1 |
1313d |
1313d
|
3/3 |
1282d |
d77531fac6a1
fscrypt: destroy keyring after security_sb_delete()
|
|
possible deadlock in throtl_pending_timer_fn
|
4 |
syz, C |
|
done |
266 |
1313d |
1314d
|
3/3 |
1282d |
b5dae1cd0d83
Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()"
|
|
KASAN: use-after-free Read in hfsplus_release_folio
|
19 |
syz, C |
|
done |
2 |
1315d |
1315d
|
3/3 |
1282d |
0c80bef0b7d2
fs: hfsplus: fix UAF issue in hfsplus_put_super
|