Problems in Linux Kernel

This section contains information about problems in Linux kernel found within Linux Driver Verification program as well as within KEDR and Linux File System Verification projects.

Click on a problem number for detailed description. Click on a column header to change the sorting order.

No.TypeBriefAdded onAcceptedStatus
F0009 Crash ext4: Destruction of ext4_groupinfo_caches during one mount causes BUG_ON for other mounted ext4 filesystems 2014-05-12 https://lkml.org/lkml/2014/5/12/147
commit
Fixed in kernel 3.15-rc2
F0008 Crash f2fs: BUG_ON() is triggered in recover_inode_page() when mount valid f2fs filesystem 2014-04-18 https://lkml.org/lkml/2014/4/14/189
L0150 Crash USB: cdc-acm: double usb_autopm_put_interface() in acm_port_activate() 2014-04-12 https://lkml.org/lkml/2014/4/11/627
commit
Fixed in kernel 3.15-rc2
L0149 Crash rtl8187: fix use after free on failure path in rtl8187_probe() 2014-03-29 https://lkml.org/lkml/2014/3/28/425
commit
Fixed in kernel 3.15-rc1
L0148 Leak adv7180: interrupt leak on failure paths in init_device() 2014-03-14 https://lkml.org/lkml/2014/3/14/479
commit
Fixed in kernel 3.15-rc1
L0147 Leak p54usb: fix leaks at failure path in p54u_probe() 2014-03-09 https://lkml.org/lkml/2014/3/7/503
commit
Fixed in kernel 3.15-rc1
L0146 Crash staging: dgap: absence of proper error handling in dgap_start() 2014-03-09 https://lkml.org/lkml/2014/2/23/92
commit
Fixed in kernel 3.15-rc1
L0145 Crash drm/vmwgfx: avoid null pointer dereference at failure paths 2014-03-01 https://lkml.org/lkml/2014/2/28/501
commit
Fixed in kernel 3.14-rc5
F0007 Crash f2fs: f2fs unmount hangs if f2fs_init_acl() fails during mkdir syscall 2014-02-17 https://lkml.org/lkml/2014/2/6/18
commit
Fixed in kernel 3.15-rc1
L0144 Deadlock drivers/message/i2o/i2o_config.c: fix deadlock in compat_ioctl(I2OGETIOPS) 2014-02-11 https://lkml.org/lkml/2014/1/31/468
commit
Fixed in kernel 3.14-rc3
L0143 Leak staging: gdm72xx: fix leaks at failure path in gdm_usb_probe() 2014-02-07 https://lkml.org/lkml/2014/2/5/748
commit
Fixed in kernel 3.14-rc3
L0142 Leak [media] go7007-loader: fix usb_dev leak 2014-02-04 https://lkml.org/lkml/2013/12/20/578
commit
Fixed in kernel 3.14-rc2
L0141 Crash RxRPC: do not unlock unheld spinlock in rxrpc_connect_exclusive() 2014-01-26 https://lkml.org/lkml/2013/12/13/564
commit
Fixed in kernel 3.14-rc1
L0140 Crash RDMA/amso1100: Add check if cache memory was allocated before freeing it 2014-01-23 https://lkml.org/lkml/2014/1/12/29
commit
Fixed in kernel 3.14-rc1
L0139 Leak staging: wlan-ng: fix leaks on failure paths in prism2sta_probe_usb() 2014-01-11 https://lkml.org/lkml/2014/1/10/503
commit
Fixed in kernel 3.14-rc1
L0138 Leak [media] as102: fix leaks at failure paths in as102_usb_probe() 2014-01-07 https://lkml.org/lkml/2013/12/27/199
commit
Fixed in kernel 3.14-rc1
L0137 Leak NFC: port100: Fix device leak 2014-01-04 https://lkml.org/lkml/2014/1/4/98
commit
Fixed in kernel 3.14-rc1
L0136 Leak can: ems_usb: fix urb leaks on failure paths 2013-12-17 https://lkml.org/lkml/2013/12/6/862
commit
Fixed in kernel 3.13-rc5
L0135 Warning libertas sdio: claim device before calling sdio_disable_func() 2013-12-05 https://lkml.org/lkml/2013/11/18/474
commit
Fixed in kernel 3.14-rc1
L0134 Deadlock [media] dvb_demux: fix deadlock in dmx_section_feed_release_filter() 2013-11-29 http://lkml.org/lkml/2013/8/17/68
commit
Fixed in kernel 3.13-rc4
L0133 Leak staging: gdm724x: fix leak at failure path in gdm_usb_probe() 2013-11-26 https://lkml.org/lkml/2013/11/15/403
commit
Fixed in kernel 3.14-rc1
F0006 Deadlock f2fs: a deadlock in mkdir if ACL is enabled 2013-10-28 https://lkml.org/lkml/2013/10/26/163
commit
Fixed in kernel 3.12-rc3
L0132 Leak drivers/usb/wusbcore/cbaf.c: usb_dev leaks 2013-10-19 https://lkml.org/lkml/2013/10/18/492
commit
Fixed in kernel 3.12-rc7
L0131 Leak drivers/media/usb/cx231xx/cx231xx-cards.c: double free and leaks on failure path in cx231xx_usb_probe() 2013-10-17 https://lkml.org/lkml/2013/10/7/569
commit
Fixed in kernel 3.12-rc3
L0130 Leak drivers/staging/gdm724x/gdm_mux.c: memory leak on failure path 2013-10-11 https://lkml.org/lkml/2013/10/8/645
commit
Fixed in kernel 3.12-rc5
L0129 Leak drivers/media/usb/ttusb-dec/ttusb_dec.c: incorrect error handling in ttusb_dec_probe() 2013-10-03 https://lkml.org/lkml/2013/7/13/135
commit
Fixed in kernel 3.12-rc3
L0128 Leak drivers/net/wireless/p54/p54usb.c: leak at failure path in p54u_load_firmware() 2013-09-26 https://lkml.org/lkml/2013/9/17/380
commit
Fixed in kernel 3.12-rc2
L0127 Leak drivers/net/can/usb/peak_usb/pcan_usb_core.c: memory leak on failure paths in peak_usb_start() 2013-09-20 https://lkml.org/lkml/2013/9/4/550
commit
Fixed in kernel 3.12-rc2
L0126 Crash drivers/usb/gadget/mv_u3d_core.c: violation of locking discipline in mv_u3d_ep_disable() 2013-09-17 https://groups.google.com/forum/#!topic/linux.kernel/4fDCBFQPjPA
commit
Fixed in kernel 3.12-rc2
L0125 Leak drivers/net/irda/mcs7780.c: memory leaks in mcs_net_open() 2013-09-13 https://lkml.org/lkml/2013/9/12/631
commit
Fixed in kernel 3.12-rc1
L0124 Crash drivers/net/wireless/rtl818x/rtl8187/dev.c: use after free on failure path in rtl8187_init_urbs() 2013-09-09 https://lkml.org/lkml/2013/8/31/190
commit
Fixed in kernel 3.12-rc1
L0123 Crash drivers/media/usb/hdpvr/hdpvr-core.c: iteration over uninitialized lists in hdpvr_probe() 2013-09-03 https://linuxtv.org/patch/19152/
commit
Fixed in kernel 3.11-rc3
L0122 Leak drivers/media/usb/gspca/gspca.c: incorrect error handling in dev_open() 2013-08-21 https://lkml.org/lkml/2013/8/5/510
commit
Fixed in kernel 3.11-rc3
L0121 Crash drivers/net/irda/via-ircc.c: incorrect return code if via_ircc_open() failed 2013-08-20 https://lkml.org/lkml/2013/8/16/388
commit
Fixed in kernel 3.11-rc7
L0120 Warning drivers/usb/gadget/amd5536udc.c: possible non atomic memory allocation under spinlock in udc_queue() 2013-08-09 https://lkml.org/lkml/2013/8/1/502
commit
Fixed in kernel 3.11-rc4
L0119 Inconsistency drivers/net/wireless/hostap/hostap_main.c: incorrect return code on failure path in prism2_open() 2013-08-05 https://lkml.org/lkml/2013/8/4/181
commit
Fixed in kernel 3.11-rc2
L0118 Inconsistency drivers/media/usb/tlg2300/pd-main.c: incorrect error handling in poseidon_probe() 2013-07-26 https://lkml.org/lkml/2013/6/24/521
commit
Fixed in kernel 3.11-rc3
L0117 Leak drivers/net/can/usb/usb_8dev.c: urb leak on failure path in usb_8dev_start() 2013-07-19 https://lkml.org/lkml/2013/7/17/595
commit
Fixed in kernel 3.11-rc2
L0116 Data race drivers/net/wireless/ath/ath9k/hif_usb.c: data race between request_firmware_nowait() callback and suspend() 2013-07-17 https://lkml.org/lkml/2013/7/1/520
commit
Fixed in kernel 3.11-rc2
F0005 Crash ext4: system hangs after failure in ext4_mb_new_preallocation() 2013-07-01 https://lkml.org/lkml/2013/5/5/64
commit
Fixed in kernel 3.10-rc3
L0115 Leak drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c: memory leak in ttusb_probe() 2013-06-21 https://lkml.org/lkml/2013/6/10/432
commit
Fixed in kernel 3.10-rc7
L0114 Inconsistency drivers/staging/media/go7007/go7007-usb.c: incorrect return code for unsupported devices in go7007_usb_probe() 2013-06-21 https://lkml.org/lkml/2013/6/19/608
commit
Fixed in kernel 3.10-rc7
L0113 Leak drivers/media/usb/usbvision/usbvision-video.c: memory leak of alt_max_pkt_size 2013-06-21 https://lkml.org/lkml/2013/6/10/504
commit
Fixed in kernel 3.10-rc7
L0112 Leak drivers/staging/media/lirc/lirc_imon.c: leaks in imon_probe() 2013-06-17 https://lkml.org/lkml/2013/6/2/127
commit
Fixed in kernel 3.10-rc2
L0111 Leak drivers/net/wireless/orinoco/orinoco_usb.c: memory leak in ezusb_access_ltv() when device disconnected 2013-06-14 https://lkml.org/lkml/2013/6/13/476
commit
Fixed in kernel 3.10-rc2
L0110 Leak drivers/staging/ft1000/ft1000-usb/ft1000_usb.c: memory leak on error path in ft1000_probe() 2013-06-12 https://lkml.org/lkml/2013/6/10/412
commit
Fixed in kernel 3.10-rc6
L0109 Data race usb: gadget: r8a66597-udc: unlock of unheld spinlock in r8a66597_sudmac_irq() 2013-06-10 https://lkml.org/lkml/2013/5/29/667
commit
Fixed in kernel 3.10-rc4
L0108 Inconsistency tty/serial/sirf: fix error propagation in sirfsoc_uart_probe() 2013-06-06 https://lkml.org/lkml/2013/6/5/893
commit
Fixed in kernel 3.10-rc4
L0107 Inconsistency USB: fix PTR_ERR translation in init_usb_class() 2013-06-06 https://lkml.org/lkml/2013/6/5/738
commit
Fixed in kernel 3.10-rc4
L0106 Inconsistency GFS2: fix error propagation in init_threads() 2013-06-06 https://lkml.org/lkml/2013/6/5/724
commit
Fixed in kernel 3.10-rc5
F0004 Deadlock ext4: deadlocks after allocation failure in ext4_init_io_end() 2013-06-04 https://lkml.org/lkml/2013/5/13/426
commit
Fixed in kernel 3.10-rc3
F0003 Crash jfs: Several bugs in jfs_freeze() and jfs_unfreeze() 2013-05-24 https://lkml.org/lkml/2013/5/24/76
commit
Fixed in kernel 3.10-rc3
L0105 Crash [media] wl128x: do not call copy_to_user() while holding spinlocks 2013-05-21 https://lkml.org/lkml/2013/5/7/682
commit
Fixed in kernel 3.10-rc2
L0104 Crash wlags49_h2: fix error handling in pcmcia probe function 2013-05-13 https://lkml.org/lkml/2013/4/23/557
commit
Fixed in kernel 3.10-rc2
L0103 Inconsistency inline marking of EXPORT_SYMBOL functions 2013-05-09 https://lkml.org/lkml/2013/5/9/105
commit 1, commit 2, commit 3, commit 4, commit 5, commit 6, commit 7, commit 8, commit 9
Fixed in kernel 3.10, 3.11, 3.13
L0102 Crash hfs: add error checking for hfs_find_init() 2013-05-01 https://lkml.org/lkml/2013/4/9/522
commit
Fixed in kernel 3.10-rc1
L0101 Crash usb: phy: remove exported function from __init section 2013-04-23 https://lkml.org/lkml/2013/4/29/248
commit
Fixed in kernel 3.10-rc1
L0100 Crash [media] cx88: Fix unsafe locking in suspend-resume 2013-04-22 https://lkml.org/lkml/2013/4/13/144
commit
Fixed in kernel 3.10-rc1
L0099 Crash NFC: pn533: Add missing usb_put_dev() 2013-04-11 https://lkml.org/lkml/2013/5/1/292
commit
Fixed in kernel 3.10-rc1
L0098 Crash staging: dgrp: implement error handling in dgrp_create_class_sysfs_files() 2013-04-05 https://lkml.org/lkml/2013/4/5/479
commit
Fixed in kernel 3.10-rc1
L0097 Crash SUNRPC/cache: add module_put() on error path in cache_open() 2013-04-03 https://lkml.org/lkml/2013/3/22/501
commit
Fixed in kernel 3.10-rc1
L0096 Crash drbd: add module_put() on error path in drbd_proc_open() 2013-03-28 https://lkml.org/lkml/2013/3/1/550
commit
Fixed in kernel 3.10-rc1
L0095 Crash [media] stv090x: do not unlock unheld mutex in stv090x_sleep() 2013-03-24 https://lkml.org/lkml/2013/2/19/468
commit
Fixed in kernel 3.10-rc1
L0094 Crash usb: cdc-acm: fix error handling in acm_probe() 2013-03-21 https://lkml.org/lkml/2013/3/15/585
commit
Fixed in kernel 3.9-rc4
L0093 Leak isdn: hisax: add missing usb_free_urb 2013-02-26 https://lkml.org/lkml/2013/3/10/256
commit
Fixed in kernel 3.9-rc2
L0092 Leak tty: mxser: improve error handling in mxser_probe() and mxser_module_init() 2013-02-18 https://lkml.org/lkml/2013/2/16/141
commit
Fixed in kernel 3.9-rc1
L0091 Crash ALSA: ali5451: remove irq enabling in pointer callback 2013-02-11 https://lkml.org/lkml/2013/2/11/259
commit
Fixed in kernel 3.9-rc1
L0090 Crash ALSA: rme32.c irq enabling after spin_lock_irq 2013-02-11 https://lkml.org/lkml/2013/2/11/237
commit
Fixed in kernel 3.9-rc1
L0089 Leak pcmcia: synclink_cs: fix error handling in mgslpc_probe() 2013-02-08 https://lkml.org/lkml/2013/2/6/701
commit
Fixed in kernel 3.9-rc1
L0088 Crash stmmac: don't return zero on failure path in stmmac_pci_probe() 2013-02-03 https://lkml.org/lkml/2013/2/1/613
commit
Fixed in kernel 3.9-rc1
L0087 Crash mwifiex: don't return zero on failure paths in mwifiex_pcie_init() 2013-01-30 https://lkml.org/lkml/2013/1/25/611
commit
Fixed in kernel 3.9-rc1
L0086 Crash iwlegacy: don't return zero on failure paths in il4965_pci_probe() 2013-01-22 https://lkml.org/lkml/2013/1/19/76
commit
Fixed in kernel 3.9-rc1
L0085 Crash mwl8k: zero return on failure paths in mwl8k_probe[_hw]() 2013-01-22 https://lkml.org/lkml/2013/1/18/525
commit
Fixed in kernel 3.9-rc1
L0084 Crash staging: ced1401: GFP_KERNEL in spinlock context 2013-01-11 https://lkml.org/lkml/2013/1/11/100
commit
Fixed in kernel 3.9-rc1
L0083 Crash p54pci: p54p_probe() returns zero in case of failure 2013-01-07 https://lkml.org/lkml/2013/1/1/36
commit
Fixed in kernel 3.9-rc1
L0082 Crash mei: fix mismatch in mutex unlock-lock in mei_amthif_read() 2012-12-21 https://lkml.org/lkml/2012/12/23/9
commit
Fixed in kernel 3.8-rc4
F0002 Crash ext4: NULL dereference in ext4_calculate_overhead() 2012-11-28 https://lkml.org/lkml/2012/11/28/354
commit
Fixed in kernel 3.8-rc1
L0081 Leak mmc: vub300: usb_put_dev() missed in vub300_probe() 2012-11-27 https://lkml.org/lkml/2012/12/10/692
commit
Fixed in kernel 3.8-rc1
L0080 Crash uwb: mismatch in mutex lock-unlock in uwb_rc_cmd_async() 2012-11-26 https://lkml.org/lkml/2012/11/26/729
commit
Fixed in kernel 3.8-rc1
F0001 Crash ext4: NULL pointer dereference in mount_fs() because of ext4_fill_super() wrongly reports success 2012-11-08 https://bugzilla.kernel.org/show_bug.cgi?id=48431
commit
Fixed in kernel 3.8-rc1
L0079 Crash extcon: arizona: mismatch in mutex lock-unlock in arizona_micdet() 2012-11-05 https://lkml.org/lkml/2012/11/4/157
commit
Fixed in kernel 3.8-rc1
L0078 Crash jffs2: erase_completion_lock is unlocked too early 2012-11-05 https://lkml.org/lkml/2013/1/15/940
commit
Fixed in kernel 3.8-rc1
L0077 Crash ath6kl: usb_register() return value check missed 2012-10-14 https://lkml.org/lkml/2012/8/14/50
commit
Fixed in kernel 3.8-rc1
L0076 Warning md/linear: rcu_dereference outside read-lock section 2012-10-11 https://lkml.org/lkml/2012/8/13/674
commit
Fixed in kernel 3.7-rc1
L0075 Deadlock mpt2sas: fix double mutex lock in NON_BLOCKING state 2012-10-02 https://lkml.org/lkml/2011/4/18/331
commit
Fixed in kernel 3.7-rc1
L0074 Crash usb: gadget: mv_udc: use GFP_ATOMIC in build_dtd() 2012-10-01 https://lkml.org/lkml/2012/7/5/567
commit
Fixed in kernel 3.7-rc1
L0073 Crash pcmcia: synclink_cs: fix potential tty NULL dereference 2012-10-01 https://lkml.org/lkml/2012/9/13/556
commit
Fixed in kernel 3.7-rc1
L0072 Crash staging: sbe-2t3e3: fix error handling in t3e3_init_channel() 2012-10-01 https://lkml.org/lkml/2012/9/25/296
commit
Fixed in kernel 3.7-rc1
L0071 Crash USB: omninet: fix potential tty NULL dereference 2012-10-01 https://lkml.org/lkml/2012/9/13/497
commit
Fixed in kernel 3.7-rc1
L0070 Leak ddbridge: fix error handling in module_init_ddbridge() 2012-10-01 https://lkml.org/lkml/2012/8/15/475
commit
Fixed in kernel 3.7-rc1
L0069 Leak virtio: console: fix error handling in init() function 2012-10-01 https://lkml.org/lkml/2012/9/1/85
commit
Fixed in kernel 3.7-rc1
L0068 Crash ppdev: ppdev_init: do not return zero in case of failure 2012-10-01 https://lkml.org/lkml/2012/9/1/94
commit
Fixed in kernel 3.7-rc1
L0067 Leak staging: bcm: fix error handling in bcm_init() 2012-10-01 https://lkml.org/lkml/2012/9/1/97
commit
Fixed in kernel 3.7-rc1
L0066 Crash can: softing: Fix potential memory leak in softing_load_fw() 2012-10-01 https://lkml.org/lkml/2012/8/8/316
commit
Fixed in kernel 3.6-rc5
L0065 Crash HID: hidraw: improve error handling in hidraw_init() 2012-10-01 https://lkml.org/lkml/2012/8/15/407
commit
Fixed in kernel 3.7-rc1
L0064 Crash exofs: check for allocation failure in uri_store() 2012-10-01 https://lkml.org/lkml/2012/8/8/369
commit
Fixed in kernel 3.7-rc1
L0063 Crash USB: whci-hcd: fix potential memory leak in qset_add_urb_sg() 2012-10-01 https://lkml.org/lkml/2012/8/8/120
commit
Fixed in kernel 3.7-rc1
L0062 Crash wusb: fix potential memory leak in wusb_dev_sec_add() 2012-10-01 https://lkml.org/lkml/2012/8/8/213
commit
Fixed in kernel 3.7-rc1
L0061 Crash bio: Fix potential memory leak in bio_find_or_create_slab() 2012-09-01 https://lkml.org/lkml/2012/8/9/29
commit
Fixed in kernel 3.6-rc4
L0060 Crash drivers/rtc/rtc-pcf2123.c: initialize dynamic sysfs attributes 2012-08-21 https://lkml.org/lkml/2012/8/8/167
commit
Fixed in kernel 3.6-rc3
L0059 Crash tcm_fc: rcu_deref outside rcu lock/unlock section 2012-08-20 https://lkml.org/lkml/2012/8/18/57
commit
Fixed in kernel 3.6-rc3
L0058 Leak iio/adjd_s311: Fix potential memory leak in adjd_s311_update_scan_mode() 2012-08-16 https://lkml.org/lkml/2012/8/8/153
commit
Fixed in kernel 3.6-rc2
L0057 Crash bridge: fix rcu dereference outside of rcu_read_lock 2012-08-15 https://lkml.org/lkml/2012/8/13/598
commit
Fixed in kernel 3.6-rc2
L0056 Leak rndis_wlan: Fix potential memory leak in update_pmkid() 2012-08-12 https://lkml.org/lkml/2012/8/8/336
commit
Fixed in kernel 3.6-rc2
L0055 Crash macvtap: rcu_dereference outside read-lock section 2012-08-12 https://lkml.org/lkml/2012/8/12/13
commit
Fixed in kernel 3.6-rc2
L0054 Leak drm/edid: Fix potential memory leak in edid_load() 2012-08-10 http://lkml.org/lkml/2012/8/7/216
commit
Fixed in kernel 3.6-rc2
L0053 Leak net/core: Fix potential memory leak in dev_set_alias() 2012-08-08 https://lkml.org/lkml/2012/8/8/171
commit
Fixed in kernel 3.6-rc2
L0052 Crash forcedeth: spin_unlock_irq in interrupt handler fix 2012-07-20 https://lkml.org/lkml/2012/7/20/409
commit
Fixed in kernel 3.6-rc1
L0051 Crash drxk: unlock of an unheld mutex in scu_command() 2012-04-05 https://lkml.org/lkml/2012/4/5/373
commit
Fixed in kernel 3.4-rc4
L0050 Crash dib9000: implement error handling for DibAcquireLock 2012-03-19 https://lkml.org/lkml/2012/3/6/446
commit
Fixed in kernel 3.5-rc5
L0049 Crash dib9000: fix explicit lock mismatches 2012-03-19 https://lkml.org/lkml/2012/3/6/444
commit
Fixed in kernel 3.5-rc5
L0048 Deadlock staging: go7007: mismatch in mutex lock-unlock in [read|write]_reg_fp 2012-03-08 https://lkml.org/lkml/2012/2/13/201
commit
Fixed in kernel 3.5-rc5
L0047 Crash mpt2sas: Fix mismatch in mpt2sas_base_hard_reset_handler() mutex lock-unlock 2012-02-13 https://lkml.org/lkml/2011/8/25/577
commit
Fixed in kernel 3.3-rc5
L0046 Crash staging: sep: call to sep_ioctl() may leave driver in unusable state 2011-09-06 https://lkml.org/lkml/2011/8/30/391
commit
Fixed in kernel 3.2-rc1
L0045 Crash mei: missed unlock dev->device_lock mutex on error path in mei_open() 2011-09-06 https://lkml.org/lkml/2011/8/30/367
commit
Fixed in kernel 3.2-rc1
L0044 Crash lirc_sasem: NULL pointer dereference in sasem_probe() 2011-09-06 https://lkml.org/lkml/2011/10/26/104
commit
Fixed in kernel 3.2-rc1
L0043 Crash lirc: mismatch in mutex lock-unlock in imon_probe 2011-09-06 https://lkml.org/lkml/2011/8/29/395
commit
Fixed in kernel 3.2-rc1
L0042 Crash staging/easycap: mismatch in easycap_poll() mutex lock-unlock 2011-08-29 https://lkml.org/lkml/2011/8/29/334
commit
Fixed in kernel 3.2-rc1
L0041 Crash serqt_usb2: fix sleeping with spinlock held 2011-08-23 https://lkml.org/lkml/2011/8/9/23
commit
Fixed in kernel 3.2-rc1
L0040 Crash carl9170: unlock of unheld mutex in carl9170_op_set_key 2011-08-23 https://lkml.org/lkml/2011/8/23/380
commit
Fixed in kernel 3.1-rc5
S0842 Inconsistency readlink() sets errno EINVAL instead of ENOENT 2011-08-21 Fixed in kernel 3.2-rc1
K0009 Leak (ath5k) sc->ah is allocated in ath5k_init_softc() but is not freed 2011-08-08 Kernel Bug Tracker, bug #37592 Fixed in the kernel 3.1-rc1
L0039 Crash hfsplus: Fix double iput of the same inode in hfsplus_fill_super() 2011-06-24 https://lkml.org/lkml/2011/6/23/675
commit
Fixed in kernel 3.0
L0038 Crash hfsplus: add error checking for hfs_find_init() 2011-06-24 https://lkml.org/lkml/2011/7/5/500
commit
Fixed in kernel 3.1-rc1
L0037 Leak drivers/video/hecubafb.c: absence of module_put on an error path in hecubafb_probe() 2011-06-20 https://lkml.org/lkml/2011/6/17/267
commit
Fixed in kernel 3.0-rc6
L0036 Leak gigaset: absence of call module_put before restart of if_open() 2011-06-20 https://lkml.org/lkml/2011/6/17/321 commit 2f9381e Fixed in kernel 3.0-rc4
L0035 Leak drivers/net/wan/farsync.c: module_get() without module_put() on an error path in fst_open() 2011-06-20 https://lkml.org/lkml/2011/6/17/320 commit d0fd64c Fixed in kernel 3.0-rc4
L0034 Crash drivers/usb/gadget/inode.c: lack of unlock data->lock mutex on error path in ep_write() 2011-06-08 https://lkml.org/lkml/2011/5/26/58
commit
Fixed in kernel 3.0-rc3
L0032 Leak drivers/media/radio/si470x/radio-si470x-usb.c: memory leak in si470x_usb_driver_probe() 2011-06-08 https://lkml.org/lkml/2011/5/31/483
commit
Fixed in kernel 3.1-rc1
L0031 Deadlock drivers/net/usb/catc.c: potential deadlock in catc_ctrl_run() 2011-06-07 https://lkml.org/lkml/2011/5/31/504
commit
Fixed in kernel 3.0-rc2
L0030 Crash drivers/media/dvb/dvb-usb/lmedm04.c: Do not unlock mutex if mutex_lock_interruptible failed 2011-06-01 https://lkml.org/lkml/2011/4/15/306
commit
Fixed in kernel 3.0-rc1
K0005 Leak (ath5k) Not all elements of chinfo[pier].pd_curves[] are freed 2011-04-05 Kernel Bug Tracker, bug #32942 Fixed in the kernel 3.0
K0004 Leak (ath5k) Memory kcalloc'ed in ath5k_eeprom_convert_pcal_info_* is not always kfree'd 2011-04-05 Kernel Bug Tracker, bug #32722 Fixed in the kernel 3.0
L0029 Crash drivers/usb/gadget/inode.c: lack of unlock data->lock mutex on error path in ep_read() 2011-03-22 https://lkml.org/lkml/2011/3/9/37
commit
Fixed in kernel 2.6.39-rc4
K0002 Crash (ext4) Calling kfree for uninitialized pointer in ext4_mb_init_backend 2011-03-10 Kernel Bug Tracker, bug #30872 Fixed in the kernel 2.6.39-rc1
L0028 Crash drivers/input/tablet/wacom_sys.c: lack of usb_free_urb() at error path 2011-02-09 https://lkml.org/lkml/2011/2/9/21
commit
Fixed in kernel 2.6.38-rc5
L0027 Crash drivers/media/video/tlg2300/pd-video.c: double mutex_unlock 2011-02-04 https://lkml.org/lkml/2011/1/25/478
commit
Fixed in kernel 2.6.39-rc1
L0026 Crash drivers/rtc/rtc-proc.c: have no module_put after module get on error path 2011-02-04 https://lkml.org/lkml/2011/1/28/103
commit
Fixed in kernel 2.6.38-rc5
L0025 Crash drivers/media/radio/si470x/radio-si470x-common.c: double mutex_lock in si470x_fops_read() 2011-01-24 https://lkml.org/lkml/2011/1/23/11
commit
Fixed in kernel 2.6.39-rc1
L0024 Crash pohmelfs/dir.c: unneeded mutex_unlock() in pohmelfs_rename() 2011-01-21 https://lkml.org/lkml/2011/1/19/334
commit
Fixed in kernel 2.6.39-rc1
K0001 Crash (ext4) NPD when using sb->s_fs_info during clean-up after a failed mount 2011-01-14 Kernel Bug Tracker, bug #26752 Fixed in the kernel 2.6.39-rc1
L0023 Crash return from function without mutex_unlock in drivers/media/video/cx231xx/cx231xx-core.c 2010-12-13 https://lkml.org/lkml/2010/12/13/343
commit
Fixed in kernel 2.6.37-rc1
L0022 Crash kernel/range.c: clean_sort_range() returns incorrect result for full array 2010-12-10 https://lkml.org/lkml/2010/11/5/264
commit
Fixed in kernel 2.6.37
K0003 Crash (fat) Memory allocation failure is not handled in fat_cache_add 2010-12-10 Kernel Bug Tracker, bug #24622 Fixed in the kernel 3.0
L0021 Crash drivers/media/radio/radio-gemtek-pci.c: Double mutex_lock 2010-08-23 https://lkml.org/lkml/2009/10/8/179
commit 3addbb8075c00e2a2408c192bd1002dead26b2aa
Fixed in kernel 2.6.32
L0020 Crash drivers/net/3c505.c: Get spin_lock twice 2010-06-08 https://lkml.org/lkml/2010/6/17/408 Recognized as an error
L0019 Crash drivers/mtd/mtd_blkdevs.c: Unsafe use of function module_put 2010-01-26 http://lkml.org/lkml/2010/1/12/246, commit 048d87199566663e4edc4880df3703c04bcf41d9 Fixed in kernel 2.6.35
L0018 Crash drivers/net/hamradio/yam.c: Null dereference 2009-12-23 http://lkml.org/lkml/2009/12/21/140
commit
Fixed in kernel 2.6.35-rc1
L0017 Crash drivers/usb/misc/sisusbvga/sisusb.c: Null dereference 2009-12-23 http://lkml.org/lkml/2009/12/21/135
commit
Fixed in kernel 3.10-rc1
L0016 Crash drivers/usb/mos7840.c: Null dereference 2009-12-23 http://lkml.org/lkml/2009/12/21/131
commit
Fixed in kernel 2.6.35-rc2
L0015 Crash drivers/net/hamradio/bpqether.c: Null dereference 2009-12-23 http://kerneltrap.org/mailarchive/linux-netdev/2009/12/15/6264106
commit
Fixed in kernel 2.6.33-rc4
L0014 Crash drivers/net/3c507.c: Null dereference 2009-12-22 http://lkml.org/lkml/2009/12/21/120
commit
Fixed in kernel 2.6.35-rc1
L0013 Crash drivers/ata/sata_mv.c: Null dereference 2009-12-22 http://lkml.org/lkml/2009/12/14/237, commit 0535f2bc170bc0779ac471faff39f633ca19ab59 Fixed in kernel 2.6.33
L0012 Crash drivers/input/input.c: Possible mutex_lock without mutex_unlock 2009-10-14 http://lkml.org/lkml/2009/10/13/353, commit 1572ca2a842a839b78780d9074d2f140b31907cc Fixed in kernel 2.6.32
L0011 Crash drivers/hid/hidraw.c: Double mutex_lock 2009-10-13 http://lkml.org/lkml/2009/10/12/101, commit b0e14951ee0f6c29abc64b92ec7075a159ede37c Fixed in kernel 2.6.35
L0010 Crash drivers/net/irda/ali-ircc.c: Get spin_lock twice 2009-10-08 http://lkml.org/lkml/2009/10/8/113 Message sent
L0009 Crash drivers/net/znet.c: Sleeping function called from invalid context 2009-10-08 http://lkml.org/lkml/2009/10/7/317, commit 879e9304134bb6214fb52377ac1e01e1910f4916 Fixed in kernel 2.6.32
L0008 Crash drivers/media/video/usbvideo/konicawc.c: Possible buffer overflow while use strncat 2009-10-08 http://lkml.org/lkml/2009/10/7/218, commit caac970f91f39f67b5e48680840605e24896ff99 Fixed in kernel 2.6.33-rc1
L0007 Crash drivers/char/isicom.c: Sleeping function called from invalid context 2009-10-08 http://lkml.org/lkml/2009/10/7/246, commit 2493c0c166565e36831196446af594eb07892daf Fixed in kernel 2.6.33-rc1
L0006 Crash drivers/media/video/usbvideo/quickcam_messenger.c: Possible buffer overflow while use strncat with wrong 3rd parameter. 2009-10-07 http://lkml.org/lkml/2009/10/7/217
commit
Fixed in kernel 2.6.33-rc1
L0005 Crash drivers/gpu/drm/drm_gem.c: Potential BUG_ON assertion fails in drm_gem_object_free 2009-09-18 http://bugzilla.kernel.org/show_bug.cgi?id=13227
commit
Fixed in kernel 2.6.34-rc1
L0004 Leak security/selinux/hooks.c: Memory leak in inode_doinit_with_dentry() 2009-09-14 http://lkml.org/lkml/2009/8/10/119, commit 314dabb83a547ec4da819e8cbc78fac9cec605cd Fixed in kernel 2.6.31
L0003 Crash drivers/media/video/hdpvr/hdpvr-core.c(hdpvr-video.c): Mutex imbalances 2009-09-14 http://lkml.org/lkml/2009/6/19/274, commit 00c1e2167e3163d2e193644b7d768f06d2a8c279 Fixed in kernel 2.6.32
L0002 Leak fs/cifs/cifsencrypt.c: Memory leakage 2009-09-14 http://lkml.org/lkml/2009/8/11/210, commit 1b3859bc9e20d764316346665fc93ecea2d2b176 Fixed in kernel 2.6.32
L0001 Crash drivers/media/video/cafe_ccic.c: Mutex lock imbalances in function cafe_pci_probe 2009-09-10 http://lkml.org/lkml/2009/9/10/167, commit 0faf6f6b892aeb25934c9adc7fe328350d2d25cc Fixed in kernel 2.6.34