|
KASAN: use-after-free Write in xfs_trans_committed_bulk
origin:lts-only
|
C |
|
done |
42 |
350d |
820d
|
0/3 |
never |
xfs: fix super block buf log item UAF during force shutdown
|
|
KASAN: use-after-free Write in ext4_insert_dentry
origin:upstream
|
C |
|
done |
4 |
42d |
192d
|
3/3 |
7d20h |
2883e9e74f73
ext4: fix off-by-one error in do_split
|
|
possible deadlock in j1939_sk_queue_drop_all
origin:upstream
missing-backport
|
C |
|
done |
7 |
64d |
681d
|
3/3 |
32d |
44f48eb9a605
mm: resolve faulty mmap_region() error path behaviour
|
|
KASAN: use-after-free Read in __ocfs2_find_path
origin:upstream
|
C |
|
done |
11 |
70d |
247d
|
3/3 |
35d |
17c99ab3db2b
ocfs2: validate l_tree_depth to avoid out-of-bounds access
|
|
UBSAN: array-index-out-of-bounds in xtSearch (2)
origin:lts-only
|
C |
|
done |
115 |
85d |
582d
|
3/3 |
39d |
a1166e98d80c
jfs: define xtree root and page independently
|
|
KASAN: use-after-free Read in ocfs2_search_dirblock
|
C |
|
done |
8 |
96d |
125d
|
3/3 |
60d |
03b605ac1e5b
ocfs2: check dir i_size in ocfs2_find_entry
|
|
possible deadlock in team_port_change_check
origin:upstream
|
C |
|
done |
52 |
97d |
434d
|
3/3 |
63d |
bd099a2fa9be
team: prevent adding a device which is already a team device lower
|
|
KASAN: use-after-free Read in ocfs2_lock_global_qf
origin:lts-only
|
C |
|
done |
4 |
147d |
148d
|
3/3 |
115d |
f44e6d70c100
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
|
|
INFO: task hung in do_rmdir
origin:lts-only
|
C |
|
done |
5 |
166d |
190d
|
3/3 |
131d |
28c21f0ac529
exfat: fix the infinite loop in exfat_readdir()
|
|
WARNING in nilfs_rmdir
origin:lts-only
|
C |
|
done |
4 |
169d |
177d
|
3/3 |
131d |
912188316a8c
nilfs2: prevent use of deleted inode
|
|
WARNING in netdev_queue_update_kobjects (2)
origin:upstream
|
C |
|
done |
303 |
177d |
220d
|
3/3 |
136d |
a9584c897d1c
Bluetooth: fix use-after-free in device_for_each_child()
|
|
WARNING: locking bug in ext4_ioctl
|
C |
|
done |
251 |
178d |
731d
|
3/3 |
137d |
48c335245371
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
origin:lts-only
|
C |
|
done |
7 |
178d |
218d
|
3/3 |
138d |
a3d408870bc1
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
possible deadlock in mi_read
origin:upstream
missing-backport
|
C |
|
done |
827 |
213d |
819d
|
3/3 |
169d |
47e8a17491e3
fs/ntfs3: Fix possible deadlock in mi_read
|
|
WARNING in cfg80211_wext_siwgenie
origin:lts-only
|
C |
|
done |
316 |
235d |
278d
|
3/3 |
194d |
e0f67494957f
Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
|
|
WARNING in rcu_sync_dtor
origin:upstream
|
C |
|
done |
157 |
236d |
318d
|
3/3 |
195d |
fbb177bc1d64
ext4: don't set SB_RDONLY after filesystem errors
|
|
UBSAN: array-index-out-of-bounds in dbSplit
|
C |
|
done |
9 |
238d |
249d
|
3/3 |
203d |
25d2a3ff02f2
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
origin:upstream
|
C |
|
done |
4 |
244d |
337d
|
3/3 |
208d |
ead825332785
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
WARNING: bad unlock balance in ocfs2_read_blocks
origin:upstream
|
C |
|
done |
10 |
246d |
265d
|
3/3 |
210d |
f55a33fe0fb5
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
|
|
general protection fault in ima_post_path_mknod
origin:lts-only
|
C |
|
done |
5 |
246d |
246d
|
3/3 |
210d |
4a1d95fc9706
udf: Don't return bh from udf_expand_dir_adinicb()
|
|
KASAN: use-after-free Read in ext4_search_dir
|
C |
|
done |
5 |
246d |
724d
|
3/3 |
213d |
be2e9b111e27
ext4: avoid OOB when system.data xattr changes underneath the filesystem
|
|
KASAN: use-after-free Read in try_to_wake_up
|
C |
|
done |
71 |
263d |
719d
|
3/3 |
231d |
06afce714d87
nilfs2: fix potential hang in nilfs_detach_log_writer()
|
|
WARNING in skb_checksum_help
origin:upstream
missing-backport
|
C |
|
done |
3337 |
289d |
732d
|
3/3 |
245d |
27874ca77bd2
net: missing check virtio
|
|
possible deadlock in rds_wake_sk_sleep
origin:upstream
missing-backport
|
C |
|
done |
1 |
293d |
735d
|
3/3 |
252d |
124f20c5f6e5
net:rds: Fix possible deadlock in rds_message_put
|
|
possible deadlock in hfsplus_file_extend
missing-backport
origin:lts-only
|
C |
|
done |
3439 |
295d |
821d
|
3/3 |
259d |
603d064d406a
hfsplus: fix to avoid false alarm of circular locking
|
|
UBSAN: array-index-out-of-bounds in diFree
origin:upstream
missing-backport
|
C |
|
done |
13 |
298d |
344d
|
3/3 |
263d |
63f7fdf733ad
jfs: Fix array-index-out-of-bounds in diFree
|
|
possible deadlock in local_lock_acquire
origin:upstream
missing-backport
|
C |
|
done |
54 |
296d |
438d
|
3/3 |
263d |
d240b789dded
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
possible deadlock in __lock_task_sighand
origin:upstream
|
C |
|
done |
108 |
301d |
452d
|
3/3 |
268d |
d240b789dded
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
WARNING in perf_event_release_kernel
origin:upstream
|
C |
|
done |
1 |
303d |
532d
|
3/3 |
270d |
9ad46f1fef42
perf: Fix event leak upon exec and file release
|
|
kernel BUG in __block_write_begin_int
|
C |
|
done |
3 |
327d |
327d
|
3/3 |
285d |
7000b438dda9
nilfs2: fix kernel bug on rename operation of broken directory
|
|
KASAN: use-after-free Read in nilfs_set_link
|
C |
|
done |
1 |
327d |
327d
|
3/3 |
285d |
7000b438dda9
nilfs2: fix kernel bug on rename operation of broken directory
|
|
kernel BUG in f2fs_vm_page_mkwrite
origin:upstream
|
C |
|
done |
3 |
330d |
372d
|
3/3 |
287d |
70f5ef5f33c3
f2fs: fix return value of f2fs_convert_inline_inode()
|
|
WARNING in ieee80211_check_rate_mask
origin:lts-only
|
C |
|
done |
29 |
297d |
408d
|
3/3 |
295d |
badabac392d3
wifi: mac80211: check basic rates validity
|
|
SYZFAIL: clone failed
origin:lts-only
|
syz |
|
done |
1 |
376d |
498d
|
3/3 |
301d |
f0f1bd244a85
perf/core: Fix missing wakeup when waiting for context reference
|
|
WARNING in hid_output_report
origin:lts-only
|
C |
|
done |
8 |
346d |
346d
|
3/3 |
306d |
8bac61934cd5
HID: core: remove unnecessary WARN_ON() in implement()
|
|
possible deadlock in sock_hash_update_common
origin:upstream
|
C |
|
done |
1 |
383d |
383d
|
3/3 |
343d |
11e8ecc5b860
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
WARNING in sock_hash_delete_elem
|
C |
|
done |
987 |
425d |
452d
|
3/3 |
388d |
d1e73fb19a4c
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in scheduler_tick
|
C |
|
done |
162 |
425d |
450d
|
3/3 |
389d |
d1e73fb19a4c
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_delete_elem
|
C |
|
done |
1015 |
425d |
452d
|
3/3 |
390d |
d1e73fb19a4c
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_unref
|
C |
|
done |
18 |
425d |
428d
|
3/3 |
392d |
d1e73fb19a4c
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in hrtimer_run_queues
|
C |
|
done |
20 |
425d |
451d
|
3/3 |
394d |
d1e73fb19a4c
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING: proc registration bug in scsi_host_alloc
origin:lts-only
|
C |
|
inconclusive |
28 |
434d |
799d
|
3/3 |
425d |
cea234bb214b
scsi: core: Fix unremoved procfs host directory regression
|
|
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str
origin:upstream
|
C |
|
done |
1 |
459d |
492d
|
3/3 |
427d |
e8a67fe34b76
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault
origin:upstream
|
C |
|
done |
2 |
469d |
572d
|
3/3 |
438d |
e8a67fe34b76
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
KASAN: use-after-free Read in unix_stream_read_actor
origin:lts-only
|
C |
|
done |
1 |
575d |
577d
|
3/3 |
544d |
75bcfc188abf
af_unix: fix use-after-free in unix_stream_read_actor()
|
|
INFO: task hung in xfs_buf_delwri_pushbuf
origin:lts-only
|
C |
|
done |
30 |
584d |
818d
|
3/3 |
552d |
8d0baec78e8a
xfs: fix intermittent hang during quotacheck
|
|
general protection fault in inherit_task_group
origin:upstream
|
C |
|
done |
4 |
586d |
591d
|
3/3 |
552d |
21b07a2e6095
perf/core: Fix potential NULL deref
|
|
WARNING in isotp_tx_timer_handler
|
C |
|
done |
3 |
586d |
790d
|
3/3 |
554d |
e163ad6a8639
can: isotp: add local echo tx processing and tx without FC
|
|
UBSAN: shift-out-of-bounds in extAlloc
origin:upstream
|
C |
|
done |
217 |
631d |
823d
|
3/3 |
599d |
8f994b830dd0
jfs: validate max amount of blocks before allocation.
|
|
possible deadlock in exfat_iterate
origin:upstream
|
C |
|
done |
81 |
669d |
802d
|
3/3 |
612d |
1c33ca1e1974
exfat: release s_lock before calling dir_emit()
|
|
KASAN: null-ptr-deref Write in get_block
origin:upstream
missing-backport
|
C |
|
done |
2 |
678d |
724d
|
3/3 |
616d |
afd9a31b5aa4
fs/sysv: Null check to prevent null-ptr-deref bug
|
|
possible deadlock in hugetlbfs_file_mmap
origin:lts-only
|
C |
|
done |
242 |
684d |
822d
|
3/3 |
620d |
d0eb4917f4d3
sched/cpuset: Bring back cpuset_mutex
|
|
INFO: task hung in drop_current_rng
origin:lts-only
|
C |
|
done |
307 |
688d |
821d
|
3/3 |
621d |
f5634d21541e
hwrng: virtio - don't wait on cleanup
|
|
WARNING in corrupted
|
C |
|
done |
3 |
699d |
813d
|
3/3 |
625d |
784a8027b8ac
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
WARNING in usbnet_start_xmit/usb_submit_urb
|
C |
|
done |
2 |
701d |
757d
|
3/3 |
625d |
27d0f755d649
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
|
UBSAN: shift-out-of-bounds in dbFree
origin:upstream
|
C |
|
done |
1 |
710d |
772d
|
3/3 |
629d |
de984faecddb
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in nilfs_btree_assign
|
C |
|
done |
26 |
721d |
796d
|
3/3 |
669d |
b12011cea56b
nilfs2: fix buffer corruption due to concurrent device reads
|
|
BUG: unable to handle kernel paging request in ext4_acquire_dquot
origin:lts-only
|
C |
|
done |
2 |
722d |
757d
|
3/3 |
675d |
32c2f51fffec
quota: Properly disable quotas when add_dquot_ref() fails
|
|
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e
origin:lts-only
|
C |
|
done |
8 |
725d |
810d
|
3/3 |
678d |
333feb7ba84f
fs/ntfs3: Check fields while reading
|
|
WARNING in nilfs_segctor_do_construct
|
C |
|
done |
2 |
732d |
753d
|
3/3 |
690d |
4357336192ed
nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
|
|
possible deadlock in ext4_xattr_set_handle
|
C |
|
done |
42 |
733d |
825d
|
3/3 |
693d |
bdbfbb7d5057
ext4: add EA_INODE checking to ext4_iget()
|
|
general protection fault in gfs2_evict_inode
|
C |
|
done |
4 |
737d |
788d
|
3/3 |
703d |
fd8b4e28f400
gfs2: Don't deref jdesc in evict
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
origin:lts-only
|
C |
|
done |
5 |
748d |
780d
|
3/3 |
714d |
116b9c002c89
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
|
possible deadlock in sys_quotactl_fd
origin:upstream
|
C |
|
done |
167 |
748d |
797d
|
3/3 |
714d |
1de53f2223eb
ext4: fix lockdep warning when enabling MMP
|
|
WARNING: bad unlock balance in l2cap_recv_frame
origin:lts-only
|
C |
|
done |
5 |
747d |
771d
|
3/3 |
714d |
116b9c002c89
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
|
WARNING in hfsplus_cat_write_inode
origin:lts-only
|
C |
|
done |
9 |
750d |
811d
|
3/3 |
714d |
37cab61a52d6
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
WARNING: ODEBUG bug in __do_softirq
origin:lts-only
|
C |
|
done |
1 |
755d |
757d
|
3/3 |
725d |
cff0af3d1364
net/sched: sch_ingress: Only create under TC_H_INGRESS
|
|
kernel BUG in end_page_writeback
origin:lts-only
|
C |
|
done |
6 |
764d |
814d
|
3/3 |
733d |
9a7f63283af6
f2fs: fix to avoid use-after-free for cached IPU bio
|
|
BUG: unable to handle kernel paging request in sctp_outq_tail
|
C |
|
done |
2 |
792d |
824d
|
3/3 |
761d |
667eb99cf7c1
sctp: check send stream number after wait_for_sndbuf
|
|
BUG: unable to handle kernel paging request in io_arm_poll_handler
|
C |
|
done |
11 |
811d |
821d
|
3/3 |
774d |
f4ba55411cc8
io_uring: avoid null-ptr-deref in io_arm_poll_handler
|
|
WARNING: refcount bug in qrtr_node_lookup
|
C |
|
done |
1 |
816d |
816d
|
3/3 |
784d |
b9ba5906c420
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
|
|
KASAN: use-after-free Read in hfsplus_releasepage
|
C |
|
done |
1 |
823d |
823d
|
3/3 |
790d |
05103d88482d
fs: hfsplus: fix UAF issue in hfsplus_put_super
|
|
possible deadlock in l2tp_tunnel_register
|
C |
|
done |
41 |
822d |
825d
|
3/3 |
790d |
f6df58aa15f7
l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
|