Problems in Linux Kernel

This section contains information about problems in Linux kernel found within Linux Driver Verification program.

Click on a problem number for detailed description. Click on a column header to change the sorting order.

No.TypeBriefAdded onAcceptedStatus
L0027 Crash drivers/media/radio/radio-gemtek-pci.c: Double mutex_lock 2010-08-23 commit 3addbb8075c00e2a2408c192bd1002dead26b2aa Fixed in kernel 2.6.32
L0026 Crash drivers/net/3c505.c: Get spin_lock twice 2010-06-08 http://lkml.org/lkml/2010/6/7/139 Recognized as an error
L0025 Crash drivers/mtd/mtd_blkdevs.c: Unsafe use of function module_put 2010-01-26 http://lkml.org/lkml/2010/1/12/246, commit 048d87199566663e4edc4880df3703c04bcf41d9 Fixed in kernel 2.6.35
L0021 Crash drivers/usb/mos7840.c: Null dereference 2009-12-23 http://lkml.org/lkml/2009/12/21/131 Recognized as an error
L0020 Crash drivers/net/hamradio/bpqether.c: Null dereference 2009-12-23 http://kerneltrap.org/mailarchive/linux-netdev/2009/12/15/6264106 Message in LKML
L0019 Crash drivers/net/3c507.c: Null dereference 2009-12-22 http://lkml.org/lkml/2009/12/21/120 Recognized as an error
L0018 Crash drivers/isdn/icn/icn.c: Null dereference 2009-12-22 http://lkml.org/lkml/2009/12/15/219 Recognized as an error
L0017 Crash drivers/message/fusion/mptscsih.c: Null dereference 2009-12-22 http://kerneltrap.org/mailarchive/linux-scsi/2009/12/14/6643693/ Send message to LKML
L0016 Contradiction drivers/ata/sata_mv.c: Null dereference 2009-12-22 http://lkml.org/lkml/2009/12/14/237, commit 0535f2bc170bc0779ac471faff39f633ca19ab59 Fixed in kernel 2.6.33
L0015 Crash drivers/input/input.c: Possible mutex_lock without mutex_unlock 2009-10-14 http://lkml.org/lkml/2009/10/13/353, commit 1572ca2a842a839b78780d9074d2f140b31907cc Fixed in kernel 2.6.32
L0014 Crash drivers/hid/hidraw.c: Double mutex_lock 2009-10-13 http://lkml.org/lkml/2009/10/12/101, commit b0e14951ee0f6c29abc64b92ec7075a159ede37c Fixed in kernel 2.6.32
L0012 Crash drivers/net/irda/ali-ircc.c: Get spin_lock twice 2009-10-08 http://lkml.org/lkml/2009/10/8/113 Message sent
L0011 Crash drivers/net/znet.c: Sleeping function called from invalid context 2009-10-08 http://lkml.org/lkml/2009/10/7/317, commit 879e9304134bb6214fb52377ac1e01e1910f4916 Fixed in kernel 2.6.32
L0010 Crash drivers/media/video/usbvideo/konicawc.c: Possible buffer overflow while use strncat 2009-10-08 http://lkml.org/lkml/2009/10/7/218, commit caac970f91f39f67b5e48680840605e24896ff99 Fixed in kernel 2.6.33
L0009 Crash drivers/char/isicom.c: Sleeping function called from invalid context 2009-10-08 http://lkml.org/lkml/2009/10/7/246, commit 2493c0c166565e36831196446af594eb07892daf Fixed in kernel 2.6.33
L0008 Crash drivers/media/video/usbvideo/quickcam_messenger.c: Possible buffer overflow while use strncat with wrong 3rd parameter. 2009-10-07 http://lkml.org/lkml/2009/10/7/217 Recognized as an error. Patches currently in -mm tree
L0006 Crash drivers/scsi/scsi_lib.c: Function might_sleep used in critical section: spin_lock/spin_unlock 2009-09-22 http://lkml.org/lkml/2009/9/24/537 It is discussed
L0005 Crash drivers/gpu/drm/drm_gem.c: Potential BUG_ON assertion fails in drm_gem_object_free 2009-09-18 http://bugzilla.kernel.org/show_bug.cgi?id=13227 Recognized as an error
L0002 Leak fs/cifs/cifsencrypt.c: Memory leakage 2009-09-14 http://lkml.org/lkml/2009/8/11/210, commit 1b3859bc9e20d764316346665fc93ecea2d2b176 Fixed in kernel 2.6.32
L0003 Crash drivers/media/video/hdpvr/hdpvr-core.c(hdpvr-video.c): Mutex imbalances 2009-09-14 http://lkml.org/lkml/2009/6/19/274, commit 00c1e2167e3163d2e193644b7d768f06d2a8c279 Fixed in kernel 2.6.32
L0004 Leak security/selinux/hooks.c: Memory leak in inode_doinit_with_dentry() 2009-09-14 http://lkml.org/lkml/2009/8/10/119, commit 314dabb83a547ec4da819e8cbc78fac9cec605cd Fixed in kernel 2.6.31
L0001 Crash drivers/media/video/cafe_ccic.c: Mutex lock imbalances in function cafe_pci_probe 2009-09-10 http://lkml.org/lkml/2009/9/10/167, commit 0faf6f6b892aeb25934c9adc7fe328350d2d25cc Fixed in kernel 2.6.34
S0522 Inconsistency The mmap() function returns success instead of cause EINVAL error if len is zero 2006-11-15 Fixed in kernel 2.6.12-rc2