Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
kernel BUG at drivers/android/binder_alloc.c:LINE! -1 syz, C 44 2472d 2720d 1/3 never 5997da82145b FROMGIT: binder: fix BUG_ON found by selinux-testsuite
possible deadlock in seq_read 4 syz, C 56124 2468d 2704d 1/3 never 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
general protection fault in sg_remove_scat 2 syz, C 279 3081d 3263d 3/3 2898d 48ae8484e9fc scsi: sg: don't return bogus Sg_requests
KASAN: stack-out-of-bounds Read in xt_copy_counters_from_user 17 syz, C 18 2908d 2915d 3/3 2900d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
general protection fault in sockfs_setattr 2 syz, C 11 2936d 2955d 3/3 2935d 6d8c50dcb029 UPSTREAM: socket: close race condition between sock_close() and sockfs_setattr()
BUG: unable to handle kernel paging request in page_remove_rmap 8 syz, C 14617 2937d 2943d 3/3 2937d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
BUG: unable to handle kernel paging request in copy_huge_pmd 8 syz, C 433 2937d 2943d 3/3 2937d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
BUG: unable to handle kernel paging request in __split_huge_pmd 8 syz, C 174 2937d 2943d 3/3 2937d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
KASAN: use-after-free Read in __list_del_entry (3) 19 syz, C 9 3099d 3107d 3/3 3015d 7aa135fcf263 UPSTREAM: ANDROID: binder: prevent transactions into own process.
KASAN: use-after-free Read in binder_release_work 19 syz, C 132 3056d 3070d 3/3 3028d 7aa135fcf263 UPSTREAM: ANDROID: binder: prevent transactions into own process.
WARNING in set_precision -1 syz, C 1320 3049d 3171d 3/3 3049d 9c438d7a3a52 KEYS: DNS: limit the length of option strings
possible deadlock in __might_fault 4 syz, C 10264 3092d 3114d 3/3 3056d 740a5759bf22 staging: android: ashmem: Fix possible deadlock in ashmem_ioctl
BUG: using __this_cpu_read() in preemptible code in ipcomp_init_state 4 syz, C 304159 3071d 3190d 2/3 3071d 0dcd7876029b net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
WARNING in binder_send_failed_reply -1 syz, C 74 3106d 3204d 2/3 3104d e46a3b3ba750 UPSTREAM: ANDROID: binder: remove WARN() for redundant txn error
KASAN: use-after-free Read in remove_wait_queue 19 syz, C 6 3119d 3128d 2/3 3107d 5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
WARNING in __alloc_pages_slowpath (3) -1 syz, C 547 3109d 3112d 2/3 3109d f67385227a42 ANDROID: keychord: Check for write data size
KASAN: double-free or invalid-free in relay_open 24 syz, C 64 3123d 3174d 2/3 3119d a1be1f3931bf kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
BUG: Double free or freeing an invalid pointer (2) -1 syz, C 1 3195d 3195d 2/3 3119d a1be1f3931bf kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
KASAN: use-after-free Read in __lock_acquire 19 syz, C 1161 3134d 3205d 2/3 3126d f5cb779ba163 UPSTREAM: ANDROID: binder: remove waitqueue when thread exits.
BUG: bad unlock balance in ipmr_mfc_seq_stop 4 syz, C 7493 3127d 3205d 2/3 3126d 4adfa79fc254 ip6mr: fix stale iterator
WARNING in task_participate_group_stop -1 syz, C 15 3161d 3318d 2/3 3134d 426915796cca kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
kernel BUG at net/key/af_key.c:LINE! -1 syz, C 1 3297d 3297d 2/3 3137d 0e74aa1d79a5 xfrm: Copy policy family in clone_policy
BUG: unable to handle kernel paging request in snd_seq_oss_readq_puts 8 syz, C 3 3274d 3273d 2/3 3174d 132d358b183a ALSA: seq: Fix OSS sysex delivery in OSS emulation
KASAN: stack-out-of-bounds Read in memcmp 17 syz, C 4 3320d 3324d 1/3 3200d 4c86d77743a5 BACKPORT: xfrm: Don't use sk_family for socket policy lookups
WARNING in reuseport_alloc -1 syz, C 106 3214d 3243d 1/3 3204d 1b5f962e71bf soreuseport: fix initialization race
WARNING in skb_warn_bad_offload -1 syz, C 442 3225d 3331d 1/3 3225d net: remove open-coded skb_cow_head.
KASAN: use-after-free Read in fanout_demux_rollover 19 syz, C 5 3267d 3288d 1/3 3225d 008ba2a13f2d packet: hold bind lock when rebinding to fanout hook
WARNING in __alloc_pages_slowpath -1 syz, C 2412 3231d 3306d 1/3 3231d 7682e399485f FROMLIST: ALSA: usx2y: Suppress kernel warning at page allocation failures
KASAN: use-after-free Read in bio_copy_user_iov 19 syz 73 3293d 3324d 1/3 3239d 1bc0eb044615 scsi: sg: protect accesses to 'reserved' page array
BUG: sleeping function called from invalid context at mm/slab.h:LINE -1 syz, C 3 3316d 3330d 1/3 3239d 89e357d83c06 af_key: Add lock to key dump
BUG: unable to handle kernel NULL pointer dereference in __remove_shared_vm_struct 10 syz, C 1 3302d 3301d 1/3 3239d 2b7e8665b4ff fork: fix incorrect fput of ->exe_file causing use-after-free
WARNING in __switch_to -1 syz, C 54 3259d 3327d 1/3 3239d 814fb7bb7db5 x86/fpu: Don't let userspace set bogus xcomp_bv
KASAN: use-after-free Read in parse_ipsecrequests 19 syz, C 7 3331d 3331d 1/3 3301d 096f41d3a8fc UPSTREAM: af_key: Fix sadb_x_ipsecrequest parsing
WARNING in __list_add -1 syz, C 11 3314d 3327d 1/3 3312d 59584701f1e2 ANDROID: keychord: Fix races in keychord_write.
BUG: Double free or freeing an invalid pointer -1 syz 70 3313d 3331d 1/3 3312d 59584701f1e2 ANDROID: keychord: Fix races in keychord_write.
KASAN: slab-out-of-bounds Read in keychord_write 17 syz 2 3333d 3331d 1/3 3326d 913d980e07d8 ANDROID: keychord: Fix a slab out-of-bounds read.