|
KASAN: slab-out-of-bounds Write in enqueue_timer
bluetooth
|
|
|
|
1 |
14d |
9d05h
|
|
|
INFO: task hung in hci_conn_failed (4)
bluetooth
|
syz |
|
|
5 |
24d |
21d
|
|
|
WARNING in hci_conn_drop (2)
bluetooth
|
|
|
|
1 |
58d |
54d
|
|
|
INFO: task hung in hci_remote_features_evt (2)
bluetooth
|
syz |
error |
|
8 |
6d02h |
56d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_dequeue (2)
bluetooth
|
|
|
|
1 |
69d |
65d
|
|
|
possible deadlock in l2cap_conn_del
bluetooth
|
syz |
error |
|
181 |
2h16m |
92d
|
|
|
KASAN: vmalloc-out-of-bounds Read in hci_devcd_dump
bluetooth
|
C |
|
|
956 |
5h27m |
92d
|
PATCH [18d] |
|
KASAN: wild-memory-access Read in l2cap_connect_cfm
bluetooth
|
|
|
|
12 |
1d02h |
106d
|
|
|
WARNING in hci_send_cmd (2)
bluetooth
|
|
|
|
2 |
65d |
126d
|
|
|
possible deadlock in l2cap_info_timeout
bluetooth
|
|
|
|
19 |
11d |
126d
|
|
|
general protection fault in bcsp_recv
bluetooth
|
C |
error |
|
444 |
2h18m |
136d
|
PATCH [2d09h] |
|
general protection fault in h5_recv
bluetooth
|
C |
done |
|
789 |
1h52m |
142d
|
💬 1 [9d05h] |
|
general protection fault in __timer_delete_sync
bluetooth
|
C |
done |
|
3 |
141d |
144d
|
💬 1 [144d] |
|
general protection fault in hci_devcd_register
bluetooth
|
|
|
|
27 |
6d23h |
172d
|
|
|
KASAN: slab-use-after-free Read in msft_opcode_get
bluetooth
|
|
|
|
17 |
23d |
187d
|
|
|
KASAN: slab-use-after-free Read in force_devcd_write
bluetooth
|
syz |
|
|
353 |
1d02h |
189d
|
💬 1 [9d05h] |
|
WARNING: held lock freed in bt_accept_dequeue
bluetooth
|
|
|
|
8 |
30d |
196d
|
|
|
WARNING in hci_conn_timeout (2)
bluetooth
|
C |
error |
|
521 |
7h16m |
196d
|
|
|
KMSAN: uninit-value in hci_cmd_complete_evt
bluetooth
|
C |
|
|
23 |
8d07h |
227d
|
|
|
INFO: task hung in hci_cmd_sync_clear (3)
bluetooth
|
syz |
done |
|
11 |
3d07h |
235d
|
|
|
KASAN: slab-use-after-free Read in l2cap_register_user
bluetooth
|
|
|
|
12 |
42d |
236d
|
|
|
KASAN: slab-use-after-free Read in l2cap_unregister_user
bluetooth
|
syz |
done |
|
40717 |
45m |
242d
|
💬 1 [9d05h] |
|
BUG: corrupted list in hci_cmd_sync_dequeue_once
bluetooth
|
|
|
|
66 |
2d02h |
254d
|
|
|
KASAN: slab-use-after-free Read in bt_accept_unlink
bluetooth
|
|
|
|
54 |
6h34m |
254d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_new_connection_cb
bluetooth
|
|
|
|
43 |
2d12h |
254d
|
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
bluetooth
|
|
|
|
50 |
5d20h |
274d
|
|
|
BUG: corrupted list in _hci_cmd_sync_cancel_entry
bluetooth
|
syz |
error |
|
20 |
2d06h |
277d
|
💬 1 [6d11h] |
|
WARNING: ODEBUG bug in hci_release_dev (2)
bluetooth
|
C |
error |
|
291 |
2h57m |
342d
|
|
|
KASAN: slab-use-after-free Read in hci_sock_get_cookie (2)
bluetooth
|
|
|
|
47 |
50d |
377d
|
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (3)
bluetooth
|
C |
inconclusive |
error |
142 |
1d19h |
414d
|
💬 2 [103d] |
|
possible deadlock in mgmt_remove_adv_monitor_complete
bluetooth
|
C |
unreliable |
done |
39 |
45d |
425d
|
|
|
KASAN: slab-use-after-free Read in l2cap_recv_frame
bluetooth
|
C |
inconclusive |
inconclusive |
139 |
24d |
431d
|
💬 2 [135d] |
|
WARNING in hci_recv_frame
bluetooth
|
C |
error |
|
74 |
2d15h |
432d
|
💬 1 [43d] |
|
KASAN: slab-use-after-free Read in hci_disconnect
bluetooth
|
|
|
|
27 |
61d |
432d
|
|
|
WARNING in l2cap_chan_send
bluetooth
|
|
|
|
44 |
10d |
444d
|
|
|
KASAN: slab-use-after-free Read in __hci_req_sync
bluetooth
|
C |
error |
error |
3383 |
322d |
450d
|
💬 2 [356d] |
|
WARNING in l2cap_chan_del
bluetooth
|
|
|
|
267 |
2d01h |
471d
|
|
|
general protection fault in lock_sock_nested
bluetooth
|
C |
done |
done |
2807 |
3h29m |
660d
|
|
|
WARNING in call_timer_fn
bluetooth
|
C |
unreliable |
|
7036 |
1h28m |
958d
|
💬 8 [9d05h] |
|
general protection fault in l2cap_chan_timeout (3)
bluetooth
|
C |
inconclusive |
inconclusive |
43 |
6d07h |
1237d
|
|
|
general protection fault in skb_release_data (2)
net
bluetooth
|
C |
done |
error |
703 |
92d |
1757d
|
|