|
KASAN: slab-use-after-free Read in mgmt_remove_adv_monitor_complete (3)
bluetooth
|
C |
|
|
1 |
7d01h |
3d01h
|
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
12d |
8d07h
|
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
5 |
4d20h |
10d
|
|
|
KASAN: slab-out-of-bounds Read in hci_cmd_sync_alloc
bluetooth
|
C |
|
|
4 |
2d20h |
12d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
23d |
18d
|
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
122 |
2d10h |
46d
|
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
619 |
6h12m |
46d
|
💬 1 [23d] |
|
BUG: soft lockup in hci_cmd_timeout (2)
bluetooth
usb
|
syz |
|
|
1 |
61d |
57d
|
|
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
5 |
37d |
60d
|
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
18d |
79d
|
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
13 |
1h20m |
80d
|
|
|
WARNING: refcount bug in sco_conn_put
bluetooth
|
|
|
|
1 |
88d |
84d
|
|
|
general protection fault in h5_close
bluetooth
|
C |
done |
|
5 |
82d |
85d
|
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
250 |
1h14m |
90d
|
|
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
367 |
6h50m |
96d
|
💬 1 [24d] |
|
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
94d |
98d
|
💬 1 [97d] |
|
general protection fault in qca_close
bluetooth
|
C |
done |
|
94 |
80d |
99d
|
PATCH [99d] |
|
KASAN: null-ptr-deref Write in l2cap_sock_resume_cb (3)
bluetooth
|
|
|
|
8 |
63d |
108d
|
|
|
KASAN: slab-use-after-free Read in sock_def_readable
bluetooth
net
|
|
|
|
3 |
93d |
109d
|
|
|
KASAN: slab-use-after-free Read in force_suspend_read
bluetooth
|
|
|
|
8 |
91d |
118d
|
|
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
26 |
6d23h |
126d
|
|
|
WARNING in hci_devcd_register
bluetooth
|
|
|
|
3 |
53d |
131d
|
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
15 |
23d |
141d
|
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
345 |
2d14h |
143d
|
💬 1 [24d] |
|
WARNING in sco_conn_put
bluetooth
|
|
|
|
2 |
86d |
145d
|
|
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
4 |
15d |
149d
|
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
428 |
1h24m |
150d
|
|
|
KASAN: slab-use-after-free Write in sco_conn_put
bluetooth
|
|
|
|
95 |
52d |
165d
|
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
17 |
44d |
181d
|
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
5 |
6d00h |
188d
|
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
11 |
18d |
190d
|
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
37507 |
1h16m |
196d
|
💬 1 [24d] |
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
34 |
4h51m |
207d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
32 |
23h47m |
207d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
35 |
2d05h |
207d
|
|
|
KASAN: slab-use-after-free Read in cmd_complete_rsp
bluetooth
|
|
|
|
18 |
64d |
207d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
45 |
20d |
227d
|
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
|
|
|
15 |
7d07h |
231d
|
|
|
BUG: corrupted list in mgmt_pending_remove
bluetooth
|
C |
error |
|
43 |
2d05h |
257d
|
💬 1 [169d] |
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
247 |
4d05h |
296d
|
|
|
possible deadlock in sco_connect_cfm
bluetooth
|
|
|
|
21 |
66d |
312d
|
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
4d09h |
331d
|
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
141 |
51d |
368d
|
💬 2 [57d] |
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
|
39 |
29d |
379d
|
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
137 |
16d |
384d
|
💬 2 [88d] |
|
WARNING in hci_recv_frame
bluetooth
|
syz |
error |
|
59 |
15d |
385d
|
💬 1 [177d] |
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
14d |
386d
|
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
43 |
26d |
398d
|
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
276d |
404d
|
💬 2 [309d] |
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
215 |
12h46m |
425d
|
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2277 |
56m |
613d
|
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
6704 |
2h17m |
912d
|
💬 8 [24d] |
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
33 |
10d |
1191d
|
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
46d |
1710d
|
|