Problems in Linux Kernel
This section contains information about problems in Linux kernel found within Linux Driver Verification program as well as within KEDR and Linux File System Verification projects.
Click on a problem number for detailed description. Click on a column header to change the sorting order.
| No. | Type | Brief | Added on | Accepted | Status |
| K0009 | Leak | (ath5k) sc->ah is allocated in ath5k_init_softc() but is not freed | 2011-08-08 | Kernel Bug Tracker, bug #37592 | Fixed in the kernel 3.1-rc1 |
| K0005 | Leak | (ath5k) Not all elements of chinfo[pier].pd_curves[] are freed | 2011-04-05 | Kernel Bug Tracker, bug #32942 | Fixed in the kernel 3.0 |
| K0004 | Leak | (ath5k) Memory kcalloc'ed in ath5k_eeprom_convert_pcal_info_* is not always kfree'd | 2011-04-05 | Kernel Bug Tracker, bug #32722 | Fixed in the kernel 3.0 |
| K0002 | Crash | (ext4) Calling kfree for uninitialized pointer in ext4_mb_init_backend | 2011-03-10 | Kernel Bug Tracker, bug #30872 | Fixed in the kernel 2.6.39-rc1 |
| K0001 | Crash | (ext4) NPD when using sb->s_fs_info during clean-up after a failed mount | 2011-01-14 | Kernel Bug Tracker, bug #26752 | Fixed in the kernel 2.6.39-rc1 |
| K0003 | Crash | (fat) Memory allocation failure is not handled in fat_cache_add | 2010-12-10 | Kernel Bug Tracker, bug #24622 | Fixed in the kernel 3.0 |
| L0282 | Proposal | i2c: simtec: use release_mem_region instead of release_resource | 2017-08-14 | https://www.spinics.net/lists/linux-i2c/msg30831.html commit |
Fixed in kernel 4.13-rc7 |
| L0207 | Crash | staging: r8188eu: _enter_critical_mutex() error handling | 2015-10-28 | https://www.spinics.net/lists/kernel/msg2094451.html commit |
Fixed in kernel 4.4-rc1 |
| L0176 | Crash | m501fb: don't return zero on failure path in sm501fb_probe() | 2014-11-29 | https://www.marc.info/?l=linux-kernel&m=141479528508209&w=2 commit |
Fixed in kernel 3.19-rc1 |
| L0328 | Leak | watchdog: sprd_wdt: incorrect error handling in sprd_wdt_enable | 2019-09-09 | https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1631370.html commit |
Fixed in kernel v4.17-rc1 |
| L0301 | Leak | usb: phy: tahvo: incorrect error handling in tahvo_usb_probe | 2019-08-28 | https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1518946.html commit |
Fixed in kernel v4.15-rc1 |
| L0315 | Leak | rtc: unbalanced clk_prepare_enable/clk_disable_unprepare in omap_rtc_probe | 2019-08-29 | https://patchwork.ozlabs.org/patch/845309/ commit |
Fixed in kernel v4.16-rc1 |
| L0318 | Leak | clk: si5351: absent remove handler | 2019-09-04 | https://patchwork.kernel.org/patch/9953897 commit |
Fixed in kernel v4.16-rc1 |
| L0295 | Crash | serial: sccnxp: sccnxp_probe() returns zero, while device is not properly initialized | 2017-09-18 | https://patchwork.kernel.org/patch/9935805/ commit |
Fixed in kernel 4.14-rc4 |
| L0294 | Contradiction | Input: ucb1400_ts - fix suspend and resume handling | 2017-08-31 | https://patchwork.kernel.org/patch/9933247/ commit |
Fixed in kernel 4.14-rc1 |
| L0293 | Data race | dmaengine: rcar-dmac: initialize all data before registering IRQ handler | 2017-08-28 | https://patchwork.kernel.org/patch/9911633/ commit |
Fixed in kernel 4.14-rc1 |
| L0291 | Contradiction | USB: Gadget core: fix inconsistency in the interface usb_add_gadget_udc_release() | 2017-08-28 | https://patchwork.kernel.org/patch/9906907/ commit |
Fixed in kernel 4.14-rc1 |
| L0296 | Crash | ASoC: samsung: i2s: Null pointer dereference on samsung_i2s_remove | 2017-09-18 | https://patchwork.kernel.org/patch/9897495/ commit |
Fixed in kernel 4.14-rc4 |
| L0292 | Use after free | video: fbdev: udlfb: Fix use after free on dlfb_usb_probe error path | 2017-08-28 | https://patchwork.kernel.org/patch/9895789/ commit |
Fixed in kernel 4.14-rc1 |
| L0281 | Crash | mISDN: Fix null pointer dereference at mISDN_FsmNew() | 2017-08-11 | https://patchwork.kernel.org/patch/9895787/ commit |
Fixed in kernel 4.13-rc6 |
| L0287 | Crash | dmaengine: qcom_hidma: avoid freeing an uninitialized pointer | 2017-08-21 | https://patchwork.kernel.org/patch/9894059/ commit |
Fixed in kernel 4.14-rc1 |
| L0288 | Leak | media: dvb-usb: Add memory free on error path in dw2102_probe() | 2017-08-27 | https://patchwork.kernel.org/patch/9893915/ commit |
Fixed in kernel 4.14-rc1 |
| L0290 | Proposal | parport: use release_mem_region instead of release_resource | 2017-08-28 | https://patchwork.kernel.org/patch/9893889/ commit |
Fixed in kernel 4.14-rc1 |
| L0289 | Crash | wan: dscc4: add checks for dma mapping errors | 2017-08-27 | https://patchwork.kernel.org/patch/9881993/ commit |
Fixed in kernel 4.14-rc1 |
| L0285 | Data race | loop: fix to a race condition due to the early registration of device | 2017-08-15 | https://patchwork.kernel.org/patch/9879301/ commit |
Fixed in kernel 4.14-rc1 |
| L0284 | Leak | drivers/serial: Do not leave sysfs group in case of error in aspeed_vuart_probe() | 2017-08-15 | https://patchwork.kernel.org/patch/9869267/ commit |
Fixed in kernel 4.14-rc1 |
| L0280 | Data race | hysdn: fix to a race condition in put_log_buffer | 2017-08-07 | https://patchwork.kernel.org/patch/9869039/ commit |
Fixed in kernel 4.13-rc5 |
| L0279 | Misprint | platform/x86: wmi: Fix error handling in acpi_wmi_init() | 2017-07-21 | https://patchwork.kernel.org/patch/9857717/ commit |
Fixed in kernel 4.13-rc4 |
| L0283 | Leak | serial: 8250: fix error handling in of_platform_serial_probe() | 2017-08-15 | https://patchwork.kernel.org/patch/9850717/ commit |
Fixed in kernel 4.14-rc1 |
| L0278 | Crash | smsc911x: Add check for ioremap_nocache() return code | 2017-07-12 | https://patchwork.kernel.org/patch/9837373/ commit |
Fixed in kernel 4.13-rc1 |
| L0276 | Misprint | x86/paravirt: Remove unnecessary return from void function | 2017-06-24 | https://patchwork.kernel.org/patch/9807731/ commit |
Fixed in kernel 4.13-rc1 |
| L0277 | Leak | vmlfb: Fix error handling in cr_pll_init() | 2017-07-04 | https://patchwork.kernel.org/patch/9805343/ commit |
Fixed in kernel 4.13-rc1 |
| L0275 | Deadlock | staging: iio: ad7152: Fix deadlock in ad7152_write_raw_samp_freq() | 2017-05-27 | https://patchwork.kernel.org/patch/9751347/ commit |
Fixed in kernel 4.12-rc6 |
| L0274 | Crash | net: atheros: atl2: don't return zero on failure path in atl2_probe() | 2017-05-20 | https://patchwork.kernel.org/patch/9738301/ commit |
Fixed in kernel 4.12-rc3 |
| L0271 | Crash | scsi: mvumi: remove code handling zero scsi_sg_count(scmd) case | 2017-04-24 | https://patchwork.kernel.org/patch/9695327/ commit |
Fixed in kernel 4.12-rc1 |
| L0269 | Crash | usb: gadget: mv_u3d: fix error handling in mv_u3d_probe() | 2017-04-01 | https://patchwork.kernel.org/patch/9657299/ commit |
Fixed in kernel v4.12-rc1 |
| L0267 | Crash | mtd: spi-nor: hisi: do not ignore clk_prepare_enable() failure | 2017-03-25 | https://patchwork.kernel.org/patch/9580835/ commit |
Fixed in kernel 4.12-rc1 |
| L0246 | Leak | usb: gadget: goku_udc: fix memory leak in goku_probe() | 2016-09-20 | https://patchwork.kernel.org/patch/9300735/ commit |
Fixed in kernel 4.9-rc1 |
| L0236 | Proposal | [media] bt8xx: remove needless module refcounting | 2016-07-19 | https://patchwork.kernel.org/patch/8786811/ commit |
Fixed in kernel 4.8-rc1 |
| L0340 | Crash | sc16is7xx: missing check for an error when the clock is enabled | 2019-09-20 | https://patchwork.kernel.org/patch/10360463 commit |
Fixed in kernel v4.18-rc1 |
| L0330 | Leak | spi: jcore: missing disable ref_clk in remove | 2019-09-09 | https://patchwork.kernel.org/patch/10290385/ commit |
Fixed in kernel v4.17-rc1 |
| L0306 | Leak | dma: missed disable of clks on error paths in fsl_edma_probe | 2019-08-28 | https://patchwork.kernel.org/patch/10111935 commit |
Fixed in kernel v4.15-rc4 |
| L0323 | Leak | fpga: socfpga-a10: missing disable of clk on error in socfpga_a10_fpga_probe | 2019-09-04 | https://patchwork.kernel.org/patch/10103063/ commit |
Fixed in kernel v4.16-rc1 |
| L0316 | Leak | tty: serial: mxs-auart: missing disable of clocks in mxs_auart_probe | 2019-08-29 | https://patchwork.kernel.org/patch/10098927 commit |
Fixed in kernel v4.16-rc1 |
| L0307 | Leak | usb: dwc3: missing clk_disable_unprepare in dwc3_of_simple_clk_init | 2019-08-29 | https://patchwork.kernel.org/patch/10098333 commit |
Fixed in kernel v4.15-rc4 |
| L0321 | Leak | media: pxa_camera: missing disable and unprepare of the clock on the error path | 2019-09-04 | https://patchwork.kernel.org/patch/10096485/ commit |
Fixed in kernel v4.16-rc1 |
| L0311 | Leak | SoC: rockchip: missing disable of a clock on error paths in rk_spdif_probe | 2019-08-29 | https://patchwork.kernel.org/patch/10096223/ commit |
Fixed in kernel v4.15-rc6 |
| L0324 | Leak | rtc: brcmstb-waketimer: missing disable of clocks on errors in brcmstb_waketmr_probe | 2019-09-04 | https://patchwork.kernel.org/patch/10064043/ commit |
Fixed in kernel v4.16-rc1 |
| L0192 | Deadlock | sound/oss: deadlock in sequencer_ioctl(SNDCTL_SEQ_OUTOFBAND) | 2015-04-18 | https://marc.info/?l=linux-kernel&m=142931483001579&w=2 commit |
Fixed in kernel 4.1-rc1 |
| L0341 | Deadlock | sample: vfio-mdev: deadlock in mdev_access | 2019-09-20 | https://lkml.org/lkml/2018/7/6/915 commit |
Fixed in kernel v4.18-rc5 |
| L0345 | Leak | uwb: hwa-rc: memory leak at hwarc_probe | 2019-09-20 | https://lkml.org/lkml/2018/7/6/412 commit |
Fixed in kernel v4.19-rc1 |
| L0343 | Leak | net: mdio-mux: bcm-iproc: wrong getter and setter pair | 2019-09-20 | https://lkml.org/lkml/2018/7/27/772 commit |
Fixed in kernel v4.18-rc8 |
| L0342 | Leak | can: ems_usb: memory leak on ems_usb_disconnect | 2019-09-20 | https://lkml.org/lkml/2018/7/27/769 commit |
Fixed in kernel v4.18-rc8 |
| L0351 | Crash | regulator: tps65217: NULL pointer dereference on probe | 2019-09-26 | https://lkml.org/lkml/2018/7/27/661 commit |
Fixed in kernel v4.19-rc1 |
| L0350 | Crash | scsi: 3ware: fix return 0 on the error path of probe | 2019-09-25 | https://lkml.org/lkml/2018/7/27/655 commit |
Fixed in kernel v4.19-rc1 |
| L0344 | Crash | tty: rocket: possible buffer overwrite on register_PCI | 2019-09-20 | https://lkml.org/lkml/2018/7/27/644 commit |
Fixed in kernel v4.19-rc1 |
| L0346 | Leak | media: dw2102: memleak in dw2102_probe | 2019-09-20 | https://lkml.org/lkml/2018/7/23/964 commit |
Fixed in kernel v4.19-rc1 |
| L0349 | Crash | gpio: ml-ioh: buffer underwrite on probe error path | 2019-09-24 | https://lkml.org/lkml/2018/7/23/949 commit |
Fixed in kernel v4.19-rc1 |
| L0348 | Crash | firmware: vpd: incorrect section enabled flag on vpd_section_destroy | 2019-09-20 | https://lkml.org/lkml/2018/7/23/944 commit |
Fixed in kernel v4.19-rc1 |
| L0347 | Leak | mtd: spi-nor: nxp-spifi: missing release of flash_np in nxp_spifi_probe | 2019-09-20 | https://lkml.org/lkml/2018/5/9/579 commit |
Fixed in kernel v4.19-rc1 |
| L0332 | Leak | watchdog: davinci_wdt: missing clk_disable_unprepare in the error path of davinci_wdt_probe | 2019-09-16 | https://lkml.org/lkml/2018/5/28/731 commit |
Fixed in kernel v4.17-rc1 |
| L0339 | Crash | i2c: axxia: clock should be enabled before calling clk_get_rate | 2019-09-20 | https://lkml.org/lkml/2018/4/30/433 commit |
Fixed in kernel v4.18-rc1 |
| L0336 | Leak | spi: pxa2xx: the return value of clk_prepare_enable should be checked | 2019-09-20 | https://lkml.org/lkml/2018/4/30/421 commit |
Fixed in kernel v4.18-rc1 |
| L0338 | Leak | spi: meson-spicc: incorrect error handling in meson_spicc_probe | 2019-09-20 | https://lkml.org/lkml/2018/4/28/191 commit |
Fixed in kernel v4.18-rc1 |
| L0334 | Crash | spi/bcm63xx-hspi: clock should be enabled before calling clk_get_rate | 2019-09-16 | https://lkml.org/lkml/2018/4/26/115 commit |
Fixed in kernel v4.18-rc1 |
| L0337 | Crash | w1: in mxc_w1_probe clock should be enabled before calling clk_get_rate on it | 2019-09-20 | https://lkml.org/lkml/2018/4/19/363 commit |
Fixed in kernel v4.18-rc1 |
| L0317 | Crash | RDMA/ocrdma: wrong permissions for OCRDMA_RESET_STATS | 2019-09-04 | https://lkml.org/lkml/2018/3/7/1290 commit |
Fixed in kernel v4.16-rc1 |
| L0335 | Leak | spi: stm32: Missing disable on the error path in stm32_spi_probe | 2019-09-16 | https://lkml.org/lkml/2018/3/30/524 commit |
Fixed in kernel v4.18-rc1 |
| L0320 | Leak | serial: 8250_dw: missing disable clock on the error path | 2019-09-04 | https://lkml.org/lkml/2018/3/23/714 commit |
Fixed in kernel v4.16-rc1 |
| L0309 | Leak | net: phy: xgene: missing disable clk on error paths in xgene_mdio_probe | 2019-08-29 | https://lkml.org/lkml/2018/3/2/249 commit |
Fixed in kernel v4.15-rc5 |
| L0331 | Leak | serial: mxs-auart: missing disable of clks in Alphascale ASM9260 | 2019-09-16 | https://lkml.org/lkml/2018/3/2/1041 commit |
Fixed in kernel v4.17-rc1 |
| L0326 | Leak | phy: lpc18xx-usb-otg: leak on the error path in lpc18xx_usb_otg_phy_power_on | 2019-09-09 | https://lkml.org/lkml/2018/2/22/829 commit |
Fixed in kernel v4.17-rc1 |
| L0327 | Leak | mtd: nand: vf610: missing check of mtd_device_register() return code | 2019-09-09 | https://lkml.org/lkml/2018/2/12/858 commit |
Fixed in kernel v4.17-rc1 |
| L0329 | Leak | watchdog: asm9260_wdt: incorrect error handling in asm9260_wdt_probe | 2019-09-09 | https://lkml.org/lkml/2018/2/10/54 commit |
Fixed in kernel v4.17-rc1 |
| L0310 | Leak | spi: sun4i: missing disable clocks in the sun4i_spi_remove | 2019-08-29 | https://lkml.org/lkml/2018/1/28/259 commit |
Fixed in kernel v4.15-rc5 |
| L0333 | Leak | ir-hix5hd2: missing clk_disable_unprepare on the error paths | 2019-09-16 | https://lkml.org/lkml/2018/1/26/674 commit |
Fixed in kernel v4.17-rc1 |
| L0325 | Leak | crypto: picoxcell leak on the error path in spacc_probe | 2019-09-09 | https://lkml.org/lkml/2018/1/24/356 commit |
Fixed in kernel v4.16-rc2 |
| L0303 | Data race | w1: improper unlocking of mutex and decrement of refcnts | 2019-08-28 | https://lkml.org/lkml/2017/9/29/450 commit |
Fixed in kernel v4.15-rc1 |
| L0298 | Data race | loop: fix to a race condition due to the early registration of device | 2017-09-16 | https://lkml.org/lkml/2017/8/7/390 commit |
Fixed in kernel v4.14-rc1 |
| L0302 | Leak | mtd: plat-ram: Replace unsuitable manual resource management | 2019-08-26 | https://lkml.org/lkml/2017/8/16/493 commit |
Fixed in kernel v4.15-rc1 |
| L0299 | Crash | misc: ibmasm: return error on error path | 2019-08-27 | https://lkml.org/lkml/2017/8/1/446 commit |
Fixed in kernel v4.15-rc1 |
| L0273 | Leak | serial: altera_jtaguart: adding iounmap() | 2017-05-18 | https://lkml.org/lkml/2017/5/12/612 commit |
Fixed in kernel 4.12-rc3 |
| L0270 | Crash | m2m-deinterlace: don't return zero on failure paths in deinterlace_probe() | 2017-04-07 | https://lkml.org/lkml/2017/4/7/713 commit |
Fixed in kernel 4.12-rc1 |
| L0272 | Crash | sm501fb: don't return zero on failure path in sm501fb_start() | 2017-05-02 | https://lkml.org/lkml/2017/4/29/94 commit |
Fixed in kernel 4.12-rc1 |
| L0265 | Proposal | net/sched: act_skbmod: unneeded rcu_read_unlock() in tcf_skbmod_dump() | 2017-03-16 | https://lkml.org/lkml/2017/3/4/264 commit |
Fixed in kernel 4.11-rc3 |
| L0266 | Crash | irda: vlsi_ir: incorrect for DMA mapping errors | 2017-03-25 | https://lkml.org/lkml/2017/3/24/946 commit |
Fixed in kernel 4.11-rc6 |
| L0264 | Deadlock | z3fold: spinlock left locked in page reclaim | 2017-03-16 | https://lkml.org/lkml/2017/3/10/1475 commit |
Fixed in kernel 4.11-rc3 |
| L0268 | Crash | mmc: sdhci-pxav2: add error handling of clk_prepare_enable() | 2017-03-28 | https://lkml.org/lkml/2017/2/10/701 commit |
Fixed in kernel v4.12-rc1 |
| L0305 | Leak | net: ethernet: arc: undisabled clk during error handling in emac_rockchip_probe | 2019-08-28 | https://lkml.org/lkml/2017/12/9/69 commit 1 commit 2 |
Fixed in kernel v4.15-rc4 |
| L0314 | Leak | spi: sun6i: missing disable/unprepare clocks on remove | 2019-08-29 | https://lkml.org/lkml/2017/12/7/697 commit |
Fixed in kernel v4.16-rc1 |
| L0313 | Leak | spi: missing disable of clock when registering spi conroller failed in jcore_spi_probe | 2019-08-29 | https://lkml.org/lkml/2017/12/7/202 commit |
Fixed in kernel v4.16-rc1 |
| L0322 | Leak | media: s5p-jpeg: missing clk_disable_unprepare | 2019-09-04 | https://lkml.org/lkml/2017/12/6/630 commit |
Fixed in kernel v4.16-rc1 |
| L0304 | Leak | net: mvmdio: missed disable/unprepare clocks in orion_mdio_probe | 2019-08-28 | https://lkml.org/lkml/2017/12/6/399 commit |
Fixed in kernel v4.15-rc3 |
| L0308 | Leak | dma: missing clk_disable_unprepare in jz4740_dma_probe | 2019-08-29 | https://lkml.org/lkml/2017/12/6/341 commit |
Fixed in kernel v4.15-rc4 |
| L0312 | Leak | thermal: int3400_thermal: missing deallocation in int3400_thermal_probe | 2019-08-29 | https://lkml.org/lkml/2017/12/29/413 commit |
Fixed in kernel v4.16-rc1 |
| L0319 | Leak | v4l: mt9v032: Missing disable of clock on error paths | 2019-09-04 | https://lkml.org/lkml/2017/11/24/550 commit |
Fixed in kernel v4.16-rc1 |
| L0260 | Crash | net: adaptec: starfire: no checks for dma mapping errors | 2017-01-28 | https://lkml.org/lkml/2017/1/27/892 commit |
Fixed in kernel 4.10-rc7 |
| L0263 | Crash | mmc: wbsd: unsafe check if dma_addr is valid DMA address | 2017-02-13 | https://lkml.org/lkml/2017/1/13/791 commit |
Fixed in kernel 4.11-rc1 |
| L0245 | Crash | rapidio/rio_cm: avoid GFP_KERNEL in atomic context | 2016-09-19 | https://lkml.org/lkml/2016/9/9/737 commit |
Fixed in kernel 4.8-rc8 |
| L0243 | Data race | dwc_eth_qos: do not register semi-initialized device | 2016-09-09 | https://lkml.org/lkml/2016/9/8/354 commit |
Fixed in kernel 4.8-rc7 |
| L0248 | Data race | speakup: Data race in synth_direct_store | 2016-09-21 | https://lkml.org/lkml/2016/9/5/322 commit |
Fixed in kernel 4.9-rc1 |
| L0250 | Crash | net: mvmdio: do not clk_disable_unprepare() NULL clock | 2016-10-01 | https://lkml.org/lkml/2016/9/30/451 commit |
Fixed in kernel 4.9-rc1 |
| L0251 | Crash | firewire: nosy: do not ignore errors in ioremap_nocache() | 2016-10-09 | https://lkml.org/lkml/2016/9/24/222 commit |
Fixed in kernel 4.9-rc4 |
| L0249 | Crash | i2c: axxia: disable clks in case of failure in probe | 2016-09-23 | https://lkml.org/lkml/2016/9/23/150 commit |
Fixed in kernel 4.9-rc1 |
| L0244 | Crash | IB/rxe: fix GFP_KERNEL in spinlock context | 2016-09-16 | https://lkml.org/lkml/2016/9/2/602 commit |
Fixed in kernel 4.8-rc7 |
| L0240 | Crash | i2c: ocores: missed clk_disable_unprepare() on failure paths | 2016-08-04 | https://lkml.org/lkml/2016/8/3/468 commit |
Fixed in kernel 4.8-rc3 |
| L0247 | Data race | wl3501_cs: Add spinlock to wl3501_reset() | 2016-09-20 | https://lkml.org/lkml/2016/8/2/158 commit |
Fixed in kernel 4.9-rc1 |
| L0261 | Leak | backlight: adp5520: sysfs group left on failure in adp5520_bl_probe() | 2017-01-29 | https://lkml.org/lkml/2016/7/8/756 commit |
Fixed in kernel 4.11-rc1 |
| L0229 | Leak | i2c: efm32: fix a failure path in efm32_i2c_probe() | 2016-07-16 | https://lkml.org/lkml/2016/7/15/760 commit |
Fixed in kernel 4.8-rc1 |
| L0230 | Data race | libertas: Add spinlock to avoid race condition | 2016-07-17 | https://lkml.org/lkml/2016/6/7/299 commit |
Fixed in v4.8-rc1 |
| L0239 | Leak | [media] radio-maxiradio: memory leak when device is removed | 2016-07-28 | https://lkml.org/lkml/2016/6/3/805 commit |
Fixed in kernel 4.8-rc1 |
| L0237 | Inconsistency | drm_aux-dev: fix error handling in drm_dp_aux_dev_init() | 2016-07-19 | https://lkml.org/lkml/2016/6/29/708 commit |
Fixed in kernel 4.8-rc1 |
| L0228 | Crash | act_ife: sleeping functions called in atomic context | 2016-06-20 | https://lkml.org/lkml/2016/6/16/755 commit |
Fixed in kernel 4.7-rc6 |
| L0233 | Data race | rtlwifi: rtl8192ee: Fix potential race condition | 2016-07-18 | https://lkml.org/lkml/2016/6/10/153 commit |
Fixed in 4.8-rc1 |
| L0235 | Data race | rtlwifi: rtl8723ae: Fix potential race condition | 2016-07-18 | https://lkml.org/lkml/2016/6/10/153 commit |
Fixed in v4.8-rc1 |
| L0234 | Data race | rtlwifi: rtl8723be: Fix potential race condition | 2016-07-18 | https://lkml.org/lkml/2016/6/10/153 commit |
Fixed in v4.8-rc1 |
| L0231 | Data race | rtlwifi: rtl8821ae: Fix potential race condition | 2016-07-17 | https://lkml.org/lkml/2016/6/10/153 commit |
Fixed in v4.8-rc1 |
| L0232 | Data race | rtlwifi: rtl8188ee: Fix potential race condition | 2016-07-18 | https://lkml.org/lkml/2016/6/10/153 commit |
Fixed in 4.8-rc1 |
| L0227 | Crash | fbdev: fbmem: implement error handling in fbmem_init() | 2016-05-03 | https://lkml.org/lkml/2016/5/2/1059 commit |
Fixed in kernel 4.7-rc1 |
| L0238 | Inadequacy | ide-tape: fix misprint in failure handling in idetape_init() | 2016-07-26 | https://lkml.org/lkml/2016/4/29/796 commit |
Fixed in kernel 4.8-rc1 |
| L0225 | Crash | mptsas: fix checks for dma mapping errors | 2016-04-16 | https://lkml.org/lkml/2016/4/15/942 commit |
Fixed in kernel 4.7-rc1 |
| L0226 | Leak | mei: do not pin module if cldrv->probe() failed | 2016-04-30 | https://lkml.org/lkml/2016/4/1/642 commit |
Fixed in kernel 4.7-rc1 |
| L0224 | Crash | USB: whci-hcd: add more checks for dma mapping error | 2016-03-26 | https://lkml.org/lkml/2016/3/25/283 commit |
Fixed in kernel 4.7-rc1 |
| L0222 | Crash | mtip32xx: fix checks for dma mapping errors | 2016-03-19 | https://lkml.org/lkml/2016/3/18/669 commit |
Fixed in kernel 4.6-rc1 |
| L0220 | Data race | usb: gadget: bdc_udc: fix race condition in bdc_udc_exit() | 2016-02-27 | https://lkml.org/lkml/2016/2/26/1034 commit |
Fixed in kernel 4.6-rc1 |
| L0221 | Crash | at76c50x-usb: avoid double usb_put_dev() after downloading internal firmware in at76_probe() | 2016-03-07 | https://lkml.org/lkml/2016/2/20/177 commit |
Fixed in kernel 4.6-rc1 |
| L0259 | Proposal | samples/vfio-mdev: mtty_dev_init() returns zero on failure paths | 2016-12-31 | https://lkml.org/lkml/2016/12/30/303 commit |
Fixed in kernel 4.10-rc3 |
| L0262 | Crash | adm80211: add checks for dma mapping errors | 2017-01-29 | https://lkml.org/lkml/2016/12/2/593 commit |
Fixed in kernel 4.11-rc1 |
| L0258 | Leak | uio: pruss: there is no clk_disable() | 2016-12-14 | https://lkml.org/lkml/2016/11/25/785 commit |
Fixed in kernel 4.10-rc1 |
| L0253 | Crash | net: macb: no checks for dma mapping error in start_xmit() | 2016-11-19 | https://lkml.org/lkml/2016/11/18/762 commit |
Fixed in kernel 4.9-rc7 |
| L0255 | Crash | mmc: wbsd: no checks for dma mapping error | 2016-11-20 | https://lkml.org/lkml/2016/11/11/512 commit |
Fixed in kernel 4.10-rc1 |
| L0252 | Crash | vmxnet3: invalid assumption about invalid dma_pa in vmxnet3_set_mc() | 2016-10-15 | https://lkml.org/lkml/2016/10/7/705 commit |
Fixed in kernel 4.9-rc4 |
| L0254 | Crash | usb: gadget: mv_u3d: no checks for dma mapping error | 2016-11-20 | https://lkml.org/lkml/2016/10/28/689 commit |
Fixed in kernel 4.10-rc1 |
| L0256 | Crash | IB/isert: do not ignore errors in dma_map_single() | 2016-12-14 | https://lkml.org/lkml/2016/10/21/926 commit |
Fixed in kernel 4.10-rc1 |
| L0257 | Crash | SoC: mxs-saif: array overflow in mxs_saif_probe() | 2016-12-14 | https://lkml.org/lkml/2016/10/14/524 commit |
Fixed in kernel 4.10-rc1 |
| L0219 | Crash | be2iscsi: add checks for dma mapping errors | 2016-02-23 | https://lkml.org/lkml/2016/1/26/1044 commit |
Fixed in kernel 4.6-rc1 |
| L0216 | Crash | ipw2x00: add checks for dma mapping errors | 2016-01-02 | https://lkml.org/lkml/2016/1/1/182 commit |
Fixed in kernel 4.5-rc1 |
| L0204 | Leak | usb: gadget: amd5536udc: leaks in udc_pci_probe() | 2015-09-14 | https://lkml.org/lkml/2015/9/5/225 commit |
Fixed in kernel 4.3-rc3 |
| L0206 | Deadlock | usb: gadget: pch-udc: fix deadlock in pch-udc | 2015-09-18 | https://lkml.org/lkml/2015/9/28/256 commit |
Fixed in kernel 4.4-rc1 |
| L0202 | Deadlock | gpio/grgpio: deadlock in grgpio_irq_unmap() | 2015-08-17 | https://lkml.org/lkml/2015/8/17/117 commit |
Fixed in kernel 4.3-rc1 |
| L0203 | Leak | mtd: nettel: leaks in case of mtd_device_register() failure in nettel_init() | 2015-08-18 | https://lkml.org/lkml/2015/8/13/753 commit |
Fixed in kernel 4.3-rc1 |
| L0205 | Leak | mcb: leaks in mcb_pci_probe() | 2015-09-16 | https://lkml.org/lkml/2015/7/8/1041 commit |
Fixed in kernel 4.3-rc5 |
| L0197 | Leak | usb: gadget: mv_udc_core: phy_regs I/O memory leak | 2015-07-20 | https://lkml.org/lkml/2015/7/19/92 commit |
Fixed in kernel 4.2-rc4 |
| L0201 | Leak | bfa: leak of bfad_im_port_index on module unload | 2015-08-12 | https://lkml.org/lkml/2015/6/11/709 commit |
Fixed in kernel 4.3-rc1 |
| L0194 | Leak | iio: light: hid-sensor-prox: memory leak in probe() | 2015-05-12 | https://lkml.org/lkml/2015/5/6/848 commit |
Fixed in kernel 4.1-rc4 |
| L0196 | Leak | HID: lenovo: No remove of sysfs group on failure path | 2015-05-29 | https://lkml.org/lkml/2015/5/28/790 commit |
Fixed in kernel 4.2-rc1 |
| L0195 | Deadlock | target: potential double lock in iscsit_get_tpg() | 2015-05-19 | https://lkml.org/lkml/2015/5/19/964 commit |
Fixed in kernel 4.1 |
| L0199 | Leak | [media] marvell-ccic: fix memory leak on failure path in cafe_smbus_setup() | 2015-07-21 | https://lkml.org/lkml/2015/4/3/585 commit |
Fixed in kernel 4.2-rc8 |
| L0193 | Crash | pxa168: double deallocation of managed resources | 2015-04-26 | https://lkml.org/lkml/2015/4/24/803 commit |
Fixed in kernel 4.1-rc2 |
| L0191 | Leak | dmaengine: pch_dma: memory leak on failure path in pch_dma_probe() | 2015-04-17 | https://lkml.org/lkml/2015/4/10/833 commit |
Fixed in kernel 4.1-rc1 |
| L0190 | Crash | NVMe: Incorrect error handling of class_create("nvme") | 2015-04-07 | https://lkml.org/lkml/2015/3/6/858 commit |
Fixed in kernel 4.1-rc1 |
| L0189 | Crash | staging: ozwpan: absence error handling in ozwpan_init() | 2015-03-26 | https://lkml.org/lkml/2015/3/20/650 commit |
Fixed in kernel 4.1-rc1 |
| L0187 | Leak | EDAC: memory leaks on failure path in edac_init() | 2015-02-26 | https://lkml.org/lkml/2015/2/6/24 commit |
Fixed in kernel 4.1-rc1 |
| L0186 | Crash | i40e: memory leak at failure path in i40e_dbg_command_write() | 2015-02-26 | https://lkml.org/lkml/2015/2/20/576 commit |
Fixed in kernel 4.0-rc3 |
| L0215 | Crash | prism54: fix checks for dma mapping errors | 2015-12-26 | https://lkml.org/lkml/2015/12/25/57 commit |
Fixed in kernel v4.5-rc1 |
| L0213 | Crash | natsemi: add checks for dma mapping errors | 2015-12-19 | https://lkml.org/lkml/2015/12/19/70 commit |
Fixed in kernel 4.4-rc8 |
| L0212 | Deadlock | nfit: acpi_nfit_notify(): Do not leave device locked | 2015-12-11 | https://lkml.org/lkml/2015/12/11/781 commit |
Fixed in kernel 4.4-rc6 |
| L0209 | Crash | sound: fix check for error condition of register_chrdev() | 2015-11-07 | https://lkml.org/lkml/2015/11/6/914 commit |
Fixed in kernel 4.4-rc1 |
| L0210 | Crash | vmxnet3: fix checks for dma mapping errors | 2015-11-28 | https://lkml.org/lkml/2015/11/27/498 commit |
Fixed in kernel 4.4-rc4 |
| L0214 | Crash | [media] lirc_imon: do not leave imon_probe() with mutex held | 2015-12-20 | https://lkml.org/lkml/2015/11/14/98 commit |
Fixed in kernel 4.5-rc1 |
| L0208 | Crash | mcb: Do not return zero on error path in mcb_pci_probe() | 2015-10-28 | https://lkml.org/lkml/2015/10/17/238 commit |
Fixed in kernel 4.4-rc1 |
| L0179 | Crash | usb/kaweth: use GFP_ATOMIC under spin_lock in usb_start_wait_urb() | 2015-01-12 | https://lkml.org/lkml/2015/1/9/725 commit |
Fixed in kernel 3.19-rc5 |
| L0178 | Deadlock | drm/radeon: do not leave queue acquired if timeout happens in kgd_hqd_destroy() | 2015-01-04 | https://lkml.org/lkml/2015/1/3/116 commit |
Fixed in kernel 3.19-rc4 |
| L0182 | Leak | [media] cx231xx: usbdev leak on failure paths in cx231xx_usb_probe() | 2015-01-16 | https://lkml.org/lkml/2015/1/16/570 commit |
Fixed in kernel 4.0-rc1 |
| K0010 | Inadequacy | kernel/module.c: Free lock-classes if parse_args failed | 2015-02-06 | https://lkml.org/lkml/2015/1/14/15 commit |
Fixed in kernel 4.0-rc1 |
| L0181 | Leak | [media] mceusb: fix usbdev leak | 2015-01-12 | https://lkml.org/lkml/2014/9/8/661 commit |
Fixed in kernel 3.19-rc6 |
| L0169 | Inadequacy | ecryptfs: unneeded buggy code in ecryptfs_do_create() | 2014-09-23 | https://lkml.org/lkml/2014/9/22/627 commit |
Fixed in kernel v3.18-rc1 |
| L0180 | Leak | [media] imon: fix usbdev leaks | 2015-01-12 | https://lkml.org/lkml/2014/9/15/920 commit |
Fixed in kernel 3.19-rc6 |
| L0168 | Deadlock | ufs: deadlocks introduced by sb mutex merge | 2014-09-07 | https://lkml.org/lkml/2014/9/1/618 commit |
Fixed in kernel 3.17-rc4 |
| L0167 | Crash | at76c50x-usb: use after free on failure path in at76_probe() | 2014-08-25 | https://lkml.org/lkml/2014/8/14/457 commit |
Fixed in kernel 3.17-rc7 |
| L0164 | Leak | isdn/bas_gigaset: fix a leak on failure path in gigaset_probe() | 2014-07-26 | https://lkml.org/lkml/2014/7/25/679 commit |
Fixed in kernel 3.16 |
| F0010 | Crash | f2fs: Possible use-after-free when umount filesystem | 2014-07-25 | https://lkml.org/lkml/2014/7/21/198 commit |
Fixed in kernel 3.17-rc1 |
| L0162 | Crash | farsync: fix invalid memory accesses in fst_add_one() and fst_init_card() | 2014-07-10 | https://lkml.org/lkml/2014/7/10/676 commit |
Fixed in kernel 3.16-rc6 |
| L0156 | Crash | rsi: Do not return zero in case of usb_register() error | 2014-06-07 | https://lkml.org/lkml/2014/6/6/697 commit |
Fixed in kernel 3.17-rc1 |
| L0157 | Crash | rsi_91x_sdio: add error handling into rsi_module_init() | 2014-06-07 | https://lkml.org/lkml/2014/6/6/695 commit |
Fixed in kernel 3.17-rc1 |
| L0159 | Crash | rsi: fix memory leaks and error handling in rsi_91x_usb() | 2014-06-27 | https://lkml.org/lkml/2014/6/26/527 commit |
Fixed in kernel 3.17-rc1 |
| L0161 | Crash | usb: host: max3421-hcd: unconditionally use GFP_ATOMIC in max3421_urb_enqueue() | 2014-06-29 | https://lkml.org/lkml/2014/6/19/507 commit |
Fixed in 3.17-rc1 |
| L0158 | Crash | staging: line6: do not return 0 from probe if no initialization done | 2014-06-11 | https://lkml.org/lkml/2014/6/10/587 commit |
Fixed in kernel 3.17-rc1 |
| L0151 | Deadlock | usb: gadget: gr_udc: unconditionally use GFP_ATOMIC in gr_queue_ext() | 2014-05-08 | https://lkml.org/lkml/2014/5/7/646 commit |
Fixed in kernel 3.16-rc1 |
| L0160 | Leak | [media] tlg2300: fix leak at failure path in poseidon_probe() | 2014-06-27 | https://lkml.org/lkml/2014/5/30/643 commit |
Fixed in kernel 3.17-rc1 |
| L0155 | Leak | [media] usbtv: leak at failure path in usbtv_probe() | 2014-05-23 | https://lkml.org/lkml/2014/5/26/642 commit |
Fixed in kernel 3.17-rc1 |
| F0009 | Crash | ext4: Destruction of ext4_groupinfo_caches during one mount causes BUG_ON for other mounted ext4 filesystems | 2014-05-12 | https://lkml.org/lkml/2014/5/12/147 commit |
Fixed in kernel 3.16-rc1 |
| L0154 | Crash | w1: do not unlock unheld list_mutex in __w1_remove_master_device() | 2014-05-23 | https://lkml.org/lkml/2014/4/30/591 commit |
Fixed in 3.16-rc1 |
| L0152 | Deadlock | bfa: allocate memory with GFP_ATOMIC in spinlock context | 2014-05-08 | https://lkml.org/lkml/2014/4/18/38 commit |
Fixed in kernel 3.16-rc1 |
| F0008 | Crash | f2fs: BUG_ON() is triggered in recover_inode_page() when mount valid f2fs filesystem | 2014-04-18 | https://lkml.org/lkml/2014/4/14/189 commit |
Fixed in kernel 3.17-rc1 |
| L0150 | Crash | USB: cdc-acm: double usb_autopm_put_interface() in acm_port_activate() | 2014-04-12 | https://lkml.org/lkml/2014/4/11/627 commit |
Fixed in kernel 3.15-rc2 |
| L0147 | Leak | p54usb: fix leaks at failure path in p54u_probe() | 2014-03-09 | https://lkml.org/lkml/2014/3/7/503 commit |
Fixed in kernel 3.15-rc1 |
| L0149 | Crash | rtl8187: fix use after free on failure path in rtl8187_probe() | 2014-03-29 | https://lkml.org/lkml/2014/3/28/425 commit |
Fixed in kernel 3.15-rc1 |
| L0148 | Leak | adv7180: interrupt leak on failure paths in init_device() | 2014-03-14 | https://lkml.org/lkml/2014/3/14/479 commit |
Fixed in kernel 3.15-rc1 |
| F0007 | Crash | f2fs: f2fs unmount hangs if f2fs_init_acl() fails during mkdir syscall | 2014-02-17 | https://lkml.org/lkml/2014/2/6/18 commit |
Fixed in kernel 3.15-rc1 |
| L0143 | Leak | staging: gdm72xx: fix leaks at failure path in gdm_usb_probe() | 2014-02-07 | https://lkml.org/lkml/2014/2/5/748 commit |
Fixed in kernel 3.14-rc3 |
| L0145 | Crash | drm/vmwgfx: avoid null pointer dereference at failure paths | 2014-03-01 | https://lkml.org/lkml/2014/2/28/501 commit |
Fixed in kernel 3.14-rc5 |
| L0146 | Crash | staging: dgap: absence of proper error handling in dgap_start() | 2014-03-09 | https://lkml.org/lkml/2014/2/23/92 commit |
Fixed in kernel 3.15-rc1 |
| L0183 | Crash | uio/uio_pci_generic: don't return zero on failure path in probe() | 2015-01-16 | https://lkml.org/lkml/2014/12/5/506 commit |
Fixed in kernel 4.0-rc1 |
| L0184 | Crash | staging: dgnc: improper error handling in dgnc_start() | 2015-01-17 | https://lkml.org/lkml/2014/12/19/368 commit |
Fixed in kernel 4.0-rc1 |
| L0185 | Leak | rsi: memory leak in rsi_load_ta_instructions() | 2015-01-17 | https://lkml.org/lkml/2014/12/12/709 commit |
Fixed in kernel 4.0-rc1 |
| L0175 | Deadlock | drm/i915: avoid deadlock on failure paths in __intel_framebuffer_create() | 2014-11-29 | https://lkml.org/lkml/2014/11/7/674 commit |
Fixed in kernel 3.19-rc1 |
| L0174 | Leak | usbip: leaks in error handling in stub_probe() | 2014-11-29 | https://lkml.org/lkml/2014/11/28/477 commit |
Fixed in kernel 3.19-rc1 |
| L0173 | Inadequacy | xen-netback: do not report success if backend_create_xenvif() fails | 2014-11-24 | https://lkml.org/lkml/2014/11/24/181 commit |
Fixed in kernel 3.18-rc7 |
| L0171 | Crash | ieee802154: fix error handling in ieee802154fake_probe() | 2014-11-15 | https://lkml.org/lkml/2014/11/14/709 commit |
Fixed in kernel 3.18-rc6 |
| L0172 | Leak | can: esd_usb2: memory leak on disconnect | 2014-11-18 | https://lkml.org/lkml/2014/10/10/348 commit |
Fixed in kernel 3.18-rc6 |
| L0137 | Leak | NFC: port100: Fix device leak | 2014-01-04 | https://lkml.org/lkml/2014/1/4/98 commit |
Fixed in kernel 3.14-rc1 |
| L0144 | Deadlock | drivers/message/i2o/i2o_config.c: fix deadlock in compat_ioctl(I2OGETIOPS) | 2014-02-11 | https://lkml.org/lkml/2014/1/31/468 commit |
Fixed in kernel 3.14-rc3 |
| L0223 | Leak | Input: gtco - fix usb_dev leak | 2016-03-20 | https://lkml.org/lkml/2014/1/27/399 commit |
Fixed in kernel 4.6-rc1 |
| L0140 | Crash | RDMA/amso1100: Add check if cache memory was allocated before freeing it | 2014-01-23 | https://lkml.org/lkml/2014/1/12/29 commit |
Fixed in kernel 3.14-rc1 |
| L0139 | Leak | staging: wlan-ng: fix leaks on failure paths in prism2sta_probe_usb() | 2014-01-11 | https://lkml.org/lkml/2014/1/10/503 commit |
Fixed in kernel 3.14-rc1 |
| L0127 | Leak | drivers/net/can/usb/peak_usb/pcan_usb_core.c: memory leak on failure paths in peak_usb_start() | 2013-09-20 | https://lkml.org/lkml/2013/9/4/550 commit |
Fixed in kernel 3.12-rc2 |
| L0153 | Leak | carl9170: fix leaks at failure path in carl9170_usb_probe() | 2014-05-22 | https://lkml.org/lkml/2013/9/27/601 commit |
Fixed in kernel 3.16-rc1 |
| L0128 | Leak | drivers/net/wireless/p54/p54usb.c: leak at failure path in p54u_load_firmware() | 2013-09-26 | https://lkml.org/lkml/2013/9/17/380 commit |
Fixed in kernel 3.12-rc2 |
| L0125 | Leak | drivers/net/irda/mcs7780.c: memory leaks in mcs_net_open() | 2013-09-13 | https://lkml.org/lkml/2013/9/12/631 commit |
Fixed in kernel 3.12-rc1 |
| L0122 | Leak | drivers/media/usb/gspca/gspca.c: incorrect error handling in dev_open() | 2013-08-21 | https://lkml.org/lkml/2013/8/5/510 commit |
Fixed in kernel 3.11-rc3 |
| L0119 | Inconsistency | drivers/net/wireless/hostap/hostap_main.c: incorrect return code on failure path in prism2_open() | 2013-08-05 | https://lkml.org/lkml/2013/8/4/181 commit |
Fixed in kernel 3.11-rc2 |
| L0124 | Crash | drivers/net/wireless/rtl818x/rtl8187/dev.c: use after free on failure path in rtl8187_init_urbs() | 2013-09-09 | https://lkml.org/lkml/2013/8/31/190 commit |
Fixed in kernel 3.12-rc1 |
| L0121 | Crash | drivers/net/irda/via-ircc.c: incorrect return code if via_ircc_open() failed | 2013-08-20 | https://lkml.org/lkml/2013/8/16/388 commit |
Fixed in kernel 3.11-rc7 |
| L0120 | Warning | drivers/usb/gadget/amd5536udc.c: possible non atomic memory allocation under spinlock in udc_queue() | 2013-08-09 | https://lkml.org/lkml/2013/8/1/502 commit |
Fixed in kernel 3.11-rc4 |
| L0117 | Leak | drivers/net/can/usb/usb_8dev.c: urb leak on failure path in usb_8dev_start() | 2013-07-19 | https://lkml.org/lkml/2013/7/17/595 commit |
Fixed in kernel 3.11-rc2 |
| L0129 | Leak | drivers/media/usb/ttusb-dec/ttusb_dec.c: incorrect error handling in ttusb_dec_probe() | 2013-10-03 | https://lkml.org/lkml/2013/7/13/135 commit |
Fixed in kernel 3.12-rc3 |
| L0116 | Data race | drivers/net/wireless/ath/ath9k/hif_usb.c: data race between request_firmware_nowait() callback and suspend() | 2013-07-17 | https://lkml.org/lkml/2013/7/1/520 commit |
Fixed in kernel 3.11-rc2 |
| L0108 | Inconsistency | tty/serial/sirf: fix error propagation in sirfsoc_uart_probe() | 2013-06-06 | https://lkml.org/lkml/2013/6/5/893 commit |
Fixed in kernel 3.10-rc4 |
| L0107 | Inconsistency | USB: fix PTR_ERR translation in init_usb_class() | 2013-06-06 | https://lkml.org/lkml/2013/6/5/738 commit |
Fixed in kernel 3.10-rc4 |
| L0106 | Inconsistency | GFS2: fix error propagation in init_threads() | 2013-06-06 | https://lkml.org/lkml/2013/6/5/724 commit |
Fixed in kernel 3.10-rc5 |
| L0118 | Inconsistency | drivers/media/usb/tlg2300/pd-main.c: incorrect error handling in poseidon_probe() | 2013-07-26 | https://lkml.org/lkml/2013/6/24/521 commit |
Fixed in kernel 3.11-rc3 |
| L0112 | Leak | drivers/staging/media/lirc/lirc_imon.c: leaks in imon_probe() | 2013-06-17 | https://lkml.org/lkml/2013/6/2/127 commit |
Fixed in kernel 3.10-rc2 |
| L0114 | Inconsistency | drivers/staging/media/go7007/go7007-usb.c: incorrect return code for unsupported devices in go7007_usb_probe() | 2013-06-21 | https://lkml.org/lkml/2013/6/19/608 commit |
Fixed in kernel 3.10-rc7 |
| L0111 | Leak | drivers/net/wireless/orinoco/orinoco_usb.c: memory leak in ezusb_access_ltv() when device disconnected | 2013-06-14 | https://lkml.org/lkml/2013/6/13/476 commit |
Fixed in kernel 3.10-rc2 |
| L0113 | Leak | drivers/media/usb/usbvision/usbvision-video.c: memory leak of alt_max_pkt_size | 2013-06-21 | https://lkml.org/lkml/2013/6/10/504 commit |
Fixed in kernel 3.10-rc7 |
| L0115 | Leak | drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c: memory leak in ttusb_probe() | 2013-06-21 | https://lkml.org/lkml/2013/6/10/432 commit |
Fixed in kernel 3.10-rc7 |
| L0110 | Leak | drivers/staging/ft1000/ft1000-usb/ft1000_usb.c: memory leak on error path in ft1000_probe() | 2013-06-12 | https://lkml.org/lkml/2013/6/10/412 commit |
Fixed in kernel 3.10-rc6 |
| L0103 | Inconsistency | inline marking of EXPORT_SYMBOL functions | 2013-05-09 | https://lkml.org/lkml/2013/5/9/105 commit 1, commit 2, commit 3, commit 4, commit 5, commit 6, commit 7, commit 8, commit 9 |
Fixed in kernel 3.10, 3.11, 3.13 |
| L0105 | Crash | [media] wl128x: do not call copy_to_user() while holding spinlocks | 2013-05-21 | https://lkml.org/lkml/2013/5/7/682 commit |
Fixed in kernel 3.10-rc2 |
| F0005 | Crash | ext4: system hangs after failure in ext4_mb_new_preallocation() | 2013-07-01 | https://lkml.org/lkml/2013/5/5/64 commit |
Fixed in kernel 3.10-rc3 |
| L0109 | Data race | usb: gadget: r8a66597-udc: unlock of unheld spinlock in r8a66597_sudmac_irq() | 2013-06-10 | https://lkml.org/lkml/2013/5/29/667 commit |
Fixed in kernel 3.10-rc4 |
| F0003 | Crash | jfs: Several bugs in jfs_freeze() and jfs_unfreeze() | 2013-05-24 | https://lkml.org/lkml/2013/5/24/76 commit |
Fixed in kernel 3.10-rc3 |
| F0004 | Deadlock | ext4: deadlocks after allocation failure in ext4_init_io_end() | 2013-06-04 | https://lkml.org/lkml/2013/5/13/426 commit |
Fixed in kernel 3.10-rc3 |
| L0099 | Crash | NFC: pn533: Add missing usb_put_dev() | 2013-04-11 | https://lkml.org/lkml/2013/5/1/292 commit |
Fixed in kernel 3.10-rc1 |
| L0102 | Crash | hfs: add error checking for hfs_find_init() | 2013-05-01 | https://lkml.org/lkml/2013/4/9/522 commit |
Fixed in kernel 3.10-rc1 |
| L0098 | Crash | staging: dgrp: implement error handling in dgrp_create_class_sysfs_files() | 2013-04-05 | https://lkml.org/lkml/2013/4/5/479 commit |
Fixed in kernel 3.10-rc1 |
| L0101 | Crash | usb: phy: remove exported function from __init section | 2013-04-23 | https://lkml.org/lkml/2013/4/29/248 commit |
Fixed in kernel 3.10-rc1 |
| L0104 | Crash | wlags49_h2: fix error handling in pcmcia probe function | 2013-05-13 | https://lkml.org/lkml/2013/4/23/557 commit |
Fixed in kernel 3.10-rc2 |
| L0100 | Crash | [media] cx88: Fix unsafe locking in suspend-resume | 2013-04-22 | https://lkml.org/lkml/2013/4/13/144 commit |
Fixed in kernel 3.10-rc1 |
| L0097 | Crash | SUNRPC/cache: add module_put() on error path in cache_open() | 2013-04-03 | https://lkml.org/lkml/2013/3/22/501 commit |
Fixed in kernel 3.10-rc1 |
| L0094 | Crash | usb: cdc-acm: fix error handling in acm_probe() | 2013-03-21 | https://lkml.org/lkml/2013/3/15/585 commit |
Fixed in kernel 3.9-rc4 |
| L0093 | Leak | isdn: hisax: add missing usb_free_urb | 2013-02-26 | https://lkml.org/lkml/2013/3/10/256 commit |
Fixed in kernel 3.9-rc2 |
| L0096 | Crash | drbd: add module_put() on error path in drbd_proc_open() | 2013-03-28 | https://lkml.org/lkml/2013/3/1/550 commit |
Fixed in kernel 3.10-rc1 |
| L0089 | Leak | pcmcia: synclink_cs: fix error handling in mgslpc_probe() | 2013-02-08 | https://lkml.org/lkml/2013/2/6/701 commit |
Fixed in kernel 3.9-rc1 |
| L0095 | Crash | [media] stv090x: do not unlock unheld mutex in stv090x_sleep() | 2013-03-24 | https://lkml.org/lkml/2013/2/19/468 commit |
Fixed in kernel 3.10-rc1 |
| L0092 | Leak | tty: mxser: improve error handling in mxser_probe() and mxser_module_init() | 2013-02-18 | https://lkml.org/lkml/2013/2/16/141 commit |
Fixed in kernel 3.9-rc1 |
| L0091 | Crash | ALSA: ali5451: remove irq enabling in pointer callback | 2013-02-11 | https://lkml.org/lkml/2013/2/11/259 commit |
Fixed in kernel 3.9-rc1 |
| L0090 | Crash | ALSA: rme32.c irq enabling after spin_lock_irq | 2013-02-11 | https://lkml.org/lkml/2013/2/11/237 commit |
Fixed in kernel 3.9-rc1 |
| L0088 | Crash | stmmac: don't return zero on failure path in stmmac_pci_probe() | 2013-02-03 | https://lkml.org/lkml/2013/2/1/613 commit |
Fixed in kernel 3.9-rc1 |
| L0136 | Leak | can: ems_usb: fix urb leaks on failure paths | 2013-12-17 | https://lkml.org/lkml/2013/12/6/862 commit |
Fixed in kernel 3.13-rc5 |
| L0138 | Leak | [media] as102: fix leaks at failure paths in as102_usb_probe() | 2014-01-07 | https://lkml.org/lkml/2013/12/27/199 commit |
Fixed in kernel 3.14-rc1 |
| L0142 | Leak | [media] go7007-loader: fix usb_dev leak | 2014-02-04 | https://lkml.org/lkml/2013/12/20/578 commit |
Fixed in kernel 3.14-rc2 |
| L0141 | Crash | RxRPC: do not unlock unheld spinlock in rxrpc_connect_exclusive() | 2014-01-26 | https://lkml.org/lkml/2013/12/13/564 commit |
Fixed in kernel 3.14-rc1 |
| L0135 | Warning | libertas sdio: claim device before calling sdio_disable_func() | 2013-12-05 | https://lkml.org/lkml/2013/11/18/474 commit |
Fixed in kernel 3.14-rc1 |
| L0133 | Leak | staging: gdm724x: fix leak at failure path in gdm_usb_probe() | 2013-11-26 | https://lkml.org/lkml/2013/11/15/403 commit |
Fixed in kernel 3.14-rc1 |
| L0130 | Leak | drivers/staging/gdm724x/gdm_mux.c: memory leak on failure path | 2013-10-11 | https://lkml.org/lkml/2013/10/8/645 commit |
Fixed in kernel 3.12-rc5 |
| L0131 | Leak | drivers/media/usb/cx231xx/cx231xx-cards.c: double free and leaks on failure path in cx231xx_usb_probe() | 2013-10-17 | https://lkml.org/lkml/2013/10/7/569 commit |
Fixed in kernel 3.12-rc3 |
| L0132 | Leak | drivers/usb/wusbcore/cbaf.c: usb_dev leaks | 2013-10-19 | https://lkml.org/lkml/2013/10/18/492 commit |
Fixed in kernel 3.12-rc7 |
| L0087 | Crash | mwifiex: don't return zero on failure paths in mwifiex_pcie_init() | 2013-01-30 | https://lkml.org/lkml/2013/1/25/611 commit |
Fixed in kernel 3.9-rc1 |
| L0086 | Crash | iwlegacy: don't return zero on failure paths in il4965_pci_probe() | 2013-01-22 | https://lkml.org/lkml/2013/1/19/76 commit |
Fixed in kernel 3.9-rc1 |
| L0085 | Crash | mwl8k: zero return on failure paths in mwl8k_probe[_hw]() | 2013-01-22 | https://lkml.org/lkml/2013/1/18/525 commit |
Fixed in kernel 3.9-rc1 |
| L0078 | Crash | jffs2: erase_completion_lock is unlocked too early | 2012-11-05 | https://lkml.org/lkml/2013/1/15/940 commit |
Fixed in kernel 3.8-rc1 |
| L0084 | Crash | staging: ced1401: GFP_KERNEL in spinlock context | 2013-01-11 | https://lkml.org/lkml/2013/1/11/100 commit |
Fixed in kernel 3.9-rc1 |
| L0083 | Crash | p54pci: p54p_probe() returns zero in case of failure | 2013-01-07 | https://lkml.org/lkml/2013/1/1/36 commit |
Fixed in kernel 3.9-rc1 |
| L0072 | Crash | staging: sbe-2t3e3: fix error handling in t3e3_init_channel() | 2012-10-01 | https://lkml.org/lkml/2012/9/25/296 commit |
Fixed in kernel 3.7-rc1 |
| L0073 | Crash | pcmcia: synclink_cs: fix potential tty NULL dereference | 2012-10-01 | https://lkml.org/lkml/2012/9/13/556 commit |
Fixed in kernel 3.7-rc1 |
| L0071 | Crash | USB: omninet: fix potential tty NULL dereference | 2012-10-01 | https://lkml.org/lkml/2012/9/13/497 commit |
Fixed in kernel 3.7-rc1 |
| L0067 | Leak | staging: bcm: fix error handling in bcm_init() | 2012-10-01 | https://lkml.org/lkml/2012/9/1/97 commit |
Fixed in kernel 3.7-rc1 |
| L0068 | Crash | ppdev: ppdev_init: do not return zero in case of failure | 2012-10-01 | https://lkml.org/lkml/2012/9/1/94 commit |
Fixed in kernel 3.7-rc1 |
| L0069 | Leak | virtio: console: fix error handling in init() function | 2012-10-01 | https://lkml.org/lkml/2012/9/1/85 commit |
Fixed in kernel 3.7-rc1 |
| L0061 | Crash | bio: Fix potential memory leak in bio_find_or_create_slab() | 2012-09-01 | https://lkml.org/lkml/2012/8/9/29 commit |
Fixed in kernel 3.6-rc4 |
| L0064 | Crash | exofs: check for allocation failure in uri_store() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/369 commit |
Fixed in kernel 3.7-rc1 |
| L0056 | Leak | rndis_wlan: Fix potential memory leak in update_pmkid() | 2012-08-12 | https://lkml.org/lkml/2012/8/8/336 commit |
Fixed in kernel 3.6-rc2 |
| L0066 | Crash | can: softing: Fix potential memory leak in softing_load_fw() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/316 commit |
Fixed in kernel 3.6-rc5 |
| L0062 | Crash | wusb: fix potential memory leak in wusb_dev_sec_add() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/213 commit |
Fixed in kernel 3.7-rc1 |
| L0053 | Leak | net/core: Fix potential memory leak in dev_set_alias() | 2012-08-08 | https://lkml.org/lkml/2012/8/8/171 commit |
Fixed in kernel 3.6-rc2 |
| L0060 | Crash | drivers/rtc/rtc-pcf2123.c: initialize dynamic sysfs attributes | 2012-08-21 | https://lkml.org/lkml/2012/8/8/167 commit |
Fixed in kernel 3.6-rc3 |
| L0058 | Leak | iio/adjd_s311: Fix potential memory leak in adjd_s311_update_scan_mode() | 2012-08-16 | https://lkml.org/lkml/2012/8/8/153 commit |
Fixed in kernel 3.6-rc2 |
| L0063 | Crash | USB: whci-hcd: fix potential memory leak in qset_add_urb_sg() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/120 commit |
Fixed in kernel 3.7-rc1 |
| L0059 | Crash | tcm_fc: rcu_deref outside rcu lock/unlock section | 2012-08-20 | https://lkml.org/lkml/2012/8/18/57 commit |
Fixed in kernel 3.6-rc3 |
| L0070 | Leak | ddbridge: fix error handling in module_init_ddbridge() | 2012-10-01 | https://lkml.org/lkml/2012/8/15/475 commit |
Fixed in kernel 3.7-rc1 |
| L0065 | Crash | HID: hidraw: improve error handling in hidraw_init() | 2012-10-01 | https://lkml.org/lkml/2012/8/15/407 commit |
Fixed in kernel 3.7-rc1 |
| L0077 | Crash | ath6kl: usb_register() return value check missed | 2012-10-14 | https://lkml.org/lkml/2012/8/14/50 commit |
Fixed in kernel 3.8-rc1 |
| L0076 | Warning | md/linear: rcu_dereference outside read-lock section | 2012-10-11 | https://lkml.org/lkml/2012/8/13/674 commit |
Fixed in kernel 3.7-rc1 |
| L0057 | Crash | bridge: fix rcu dereference outside of rcu_read_lock | 2012-08-15 | https://lkml.org/lkml/2012/8/13/598 commit |
Fixed in kernel 3.6-rc2 |
| L0055 | Crash | macvtap: rcu_dereference outside read-lock section | 2012-08-12 | https://lkml.org/lkml/2012/8/12/13 commit |
Fixed in kernel 3.6-rc2 |
| L0074 | Crash | usb: gadget: mv_udc: use GFP_ATOMIC in build_dtd() | 2012-10-01 | https://lkml.org/lkml/2012/7/5/567 commit |
Fixed in kernel 3.7-rc1 |
| L0052 | Crash | forcedeth: spin_unlock_irq in interrupt handler fix | 2012-07-20 | https://lkml.org/lkml/2012/7/20/409 commit |
Fixed in kernel 3.6-rc1 |
| L0051 | Crash | drxk: unlock of an unheld mutex in scu_command() | 2012-04-05 | https://lkml.org/lkml/2012/4/5/373 commit |
Fixed in kernel 3.4-rc4 |
| L0050 | Crash | dib9000: implement error handling for DibAcquireLock | 2012-03-19 | https://lkml.org/lkml/2012/3/6/446 commit |
Fixed in kernel 3.5-rc5 |
| L0049 | Crash | dib9000: fix explicit lock mismatches | 2012-03-19 | https://lkml.org/lkml/2012/3/6/444 commit |
Fixed in kernel 3.5-rc5 |
| L0048 | Deadlock | staging: go7007: mismatch in mutex lock-unlock in [read|write]_reg_fp | 2012-03-08 | https://lkml.org/lkml/2012/2/13/201 commit |
Fixed in kernel 3.5-rc5 |
| L0082 | Crash | mei: fix mismatch in mutex unlock-lock in mei_amthif_read() | 2012-12-21 | https://lkml.org/lkml/2012/12/23/9 commit |
Fixed in kernel 3.8-rc4 |
| L0081 | Leak | mmc: vub300: usb_put_dev() missed in vub300_probe() | 2012-11-27 | https://lkml.org/lkml/2012/12/10/692 commit |
Fixed in kernel 3.8-rc1 |
| L0079 | Crash | extcon: arizona: mismatch in mutex lock-unlock in arizona_micdet() | 2012-11-05 | https://lkml.org/lkml/2012/11/4/157 commit |
Fixed in kernel 3.8-rc1 |
| F0002 | Crash | ext4: NULL dereference in ext4_calculate_overhead() | 2012-11-28 | https://lkml.org/lkml/2012/11/28/354 commit |
Fixed in kernel 3.8-rc1 |
| L0080 | Crash | uwb: mismatch in mutex lock-unlock in uwb_rc_cmd_async() | 2012-11-26 | https://lkml.org/lkml/2012/11/26/729 commit |
Fixed in kernel 3.8-rc1 |
| L0041 | Crash | serqt_usb2: fix sleeping with spinlock held | 2011-08-23 | https://lkml.org/lkml/2011/8/9/23 commit |
Fixed in kernel 3.2-rc1 |
| L0046 | Crash | staging: sep: call to sep_ioctl() may leave driver in unusable state | 2011-09-06 | https://lkml.org/lkml/2011/8/30/391 commit |
Fixed in kernel 3.2-rc1 |
| L0045 | Crash | mei: missed unlock dev->device_lock mutex on error path in mei_open() | 2011-09-06 | https://lkml.org/lkml/2011/8/30/367 commit |
Fixed in kernel 3.2-rc1 |
| L0043 | Crash | lirc: mismatch in mutex lock-unlock in imon_probe | 2011-09-06 | https://lkml.org/lkml/2011/8/29/395 commit |
Fixed in kernel 3.2-rc1 |
| L0042 | Crash | staging/easycap: mismatch in easycap_poll() mutex lock-unlock | 2011-08-29 | https://lkml.org/lkml/2011/8/29/334 commit |
Fixed in kernel 3.2-rc1 |
| L0047 | Crash | mpt2sas: Fix mismatch in mpt2sas_base_hard_reset_handler() mutex lock-unlock | 2012-02-13 | https://lkml.org/lkml/2011/8/25/577 commit |
Fixed in kernel 3.3-rc5 |
| L0040 | Crash | carl9170: unlock of unheld mutex in carl9170_op_set_key | 2011-08-23 | https://lkml.org/lkml/2011/8/23/380 commit |
Fixed in kernel 3.1-rc5 |
| L0038 | Crash | hfsplus: add error checking for hfs_find_init() | 2011-06-24 | https://lkml.org/lkml/2011/7/5/500 commit |
Fixed in kernel 3.1-rc1 |
| L0039 | Crash | hfsplus: Fix double iput of the same inode in hfsplus_fill_super() | 2011-06-24 | https://lkml.org/lkml/2011/6/23/675 commit |
Fixed in kernel 3.0 |
| L0036 | Leak | gigaset: absence of call module_put before restart of if_open() | 2011-06-20 | https://lkml.org/lkml/2011/6/17/321 commit 2f9381e | Fixed in kernel 3.0-rc4 |
| L0035 | Leak | drivers/net/wan/farsync.c: module_get() without module_put() on an error path in fst_open() | 2011-06-20 | https://lkml.org/lkml/2011/6/17/320 commit d0fd64c | Fixed in kernel 3.0-rc4 |
| L0037 | Leak | drivers/video/hecubafb.c: absence of module_put on an error path in hecubafb_probe() | 2011-06-20 | https://lkml.org/lkml/2011/6/17/267 commit |
Fixed in kernel 3.0-rc6 |
| L0031 | Deadlock | drivers/net/usb/catc.c: potential deadlock in catc_ctrl_run() | 2011-06-07 | https://lkml.org/lkml/2011/5/31/504 commit |
Fixed in kernel 3.0-rc2 |
| L0032 | Leak | drivers/media/radio/si470x/radio-si470x-usb.c: memory leak in si470x_usb_driver_probe() | 2011-06-08 | https://lkml.org/lkml/2011/5/31/483 commit |
Fixed in kernel 3.1-rc1 |
| L0034 | Crash | drivers/usb/gadget/inode.c: lack of unlock data->lock mutex on error path in ep_write() | 2011-06-08 | https://lkml.org/lkml/2011/5/26/58 commit |
Fixed in kernel 3.0-rc3 |
| L0075 | Deadlock | mpt2sas: fix double mutex lock in NON_BLOCKING state | 2012-10-02 | https://lkml.org/lkml/2011/4/18/331 commit |
Fixed in kernel 3.7-rc1 |
| L0030 | Crash | drivers/media/dvb/dvb-usb/lmedm04.c: Do not unlock mutex if mutex_lock_interruptible failed | 2011-06-01 | https://lkml.org/lkml/2011/4/15/306 commit |
Fixed in kernel 3.0-rc1 |
| L0029 | Crash | drivers/usb/gadget/inode.c: lack of unlock data->lock mutex on error path in ep_read() | 2011-03-22 | https://lkml.org/lkml/2011/3/9/37 commit |
Fixed in kernel 2.6.39-rc4 |
| L0028 | Crash | drivers/input/tablet/wacom_sys.c: lack of usb_free_urb() at error path | 2011-02-09 | https://lkml.org/lkml/2011/2/9/21 commit |
Fixed in kernel 2.6.38-rc5 |
| L0044 | Crash | lirc_sasem: NULL pointer dereference in sasem_probe() | 2011-09-06 | https://lkml.org/lkml/2011/10/26/104 commit |
Fixed in kernel 3.2-rc1 |
| L0026 | Crash | drivers/rtc/rtc-proc.c: have no module_put after module get on error path | 2011-02-04 | https://lkml.org/lkml/2011/1/28/103 commit |
Fixed in kernel 2.6.38-rc5 |
| L0027 | Crash | drivers/media/video/tlg2300/pd-video.c: double mutex_unlock | 2011-02-04 | https://lkml.org/lkml/2011/1/25/478 commit |
Fixed in kernel 2.6.39-rc1 |
| L0025 | Crash | drivers/media/radio/si470x/radio-si470x-common.c: double mutex_lock in si470x_fops_read() | 2011-01-24 | https://lkml.org/lkml/2011/1/23/11 commit |
Fixed in kernel 2.6.39-rc1 |
| L0024 | Crash | pohmelfs/dir.c: unneeded mutex_unlock() in pohmelfs_rename() | 2011-01-21 | https://lkml.org/lkml/2011/1/19/334 commit |
Fixed in kernel 2.6.39-rc1 |
| L0023 | Crash | return from function without mutex_unlock in drivers/media/video/cx231xx/cx231xx-core.c | 2010-12-13 | https://lkml.org/lkml/2010/12/13/343 commit |
Fixed in kernel 2.6.37-rc1 |
| L0022 | Crash | kernel/range.c: clean_sort_range() returns incorrect result for full array | 2010-12-10 | https://lkml.org/lkml/2010/11/5/264 commit |
Fixed in kernel 2.6.37 |
| L0021 | Crash | drivers/media/radio/radio-gemtek-pci.c: Double mutex_lock | 2010-08-23 | https://lkml.org/lkml/2009/10/8/179 commit |
Fixed in kernel 2.6.32 |
| L0217 | Crash | mmc: mmc_spi: add checks for dma mapping error | 2016-02-06 | https://lkml.kernel.org/r/1454715395-9462-1-git-send-email-khoroshilov@ispras.ru commit |
Fixed in kernel 4.5-rc4 |
| L0218 | Crash | tty: synclinkmp: do not ignore errors in probe() | 2016-02-06 | https://lkml.kernel.org/r/1445642863-3805-1-git-send-email-khoroshilov@ispras.ru commit |
Fixed in kernel v4.6-rc1 |
| L0123 | Crash | drivers/media/usb/hdpvr/hdpvr-core.c: iteration over uninitialized lists in hdpvr_probe() | 2013-09-03 | https://linuxtv.org/patch/19152/ commit |
Fixed in kernel 3.11-rc3 |
| L0126 | Crash | drivers/usb/gadget/mv_u3d_core.c: violation of locking discipline in mv_u3d_ep_disable() | 2013-09-17 | https://groups.google.com/forum/#!topic/linux.kernel/4fDCBFQPjPA commit |
Fixed in kernel 3.12-rc2 |
| L0300 | Leak | mfd: mxs-lradc: clk left undisabled on the error path in mxs_lradc_probe | 2019-08-28 | commit | Fixed in kernel v4.15-rc1 |
| F0001 | Crash | ext4: NULL pointer dereference in mount_fs() because of ext4_fill_super() wrongly reports success | 2012-11-08 | https://bugzilla.kernel.org/show_bug.cgi?id=48431 commit |
Fixed in kernel 3.8-rc1 |
| F0011 | Crash | ext4: When mounted with backup superblock online resize leads to BUG_ON or causes filesystem corruption | 2014-12-27 | http://www.spinics.net/lists/linux-ext4/msg46743.html commit |
Fixed in kernel 3.19-rc4 |
| L0163 | Leak | staging: gdm724x: fix leak at failure path in init_usb() | 2014-07-10 | http://permalink.gmane.org/53550 commit |
Fixed in kernel 3.17-rc1 |
| L0134 | Deadlock | [media] dvb_demux: fix deadlock in dmx_section_feed_release_filter() | 2013-11-29 | http://lkml.org/lkml/2013/8/17/68 commit |
Fixed in kernel 3.13-rc4 |
| L0054 | Leak | drm/edid: Fix potential memory leak in edid_load() | 2012-08-10 | http://lkml.org/lkml/2012/8/7/216 commit |
Fixed in kernel 3.6-rc2 |
| L0019 | Crash | drivers/mtd/mtd_blkdevs.c: Unsafe use of function module_put | 2010-01-26 | http://lkml.org/lkml/2010/1/12/246 commit |
Fixed in kernel 2.6.35 |
| L0001 | Crash | drivers/media/video/cafe_ccic.c: Mutex lock imbalances in function cafe_pci_probe | 2009-09-10 | http://lkml.org/lkml/2009/9/10/167 commit |
Fixed in kernel 2.6.34 |
| L0002 | Leak | fs/cifs/cifsencrypt.c: Memory leakage | 2009-09-14 | http://lkml.org/lkml/2009/8/11/210 commit |
Fixed in kernel 2.6.32 |
| L0004 | Leak | security/selinux/hooks.c: Memory leak in inode_doinit_with_dentry() | 2009-09-14 | http://lkml.org/lkml/2009/8/10/119 commit |
Fixed in kernel 2.6.31 |
| L0003 | Crash | drivers/media/video/hdpvr/hdpvr-core.c(hdpvr-video.c): Mutex imbalances | 2009-09-14 | http://lkml.org/lkml/2009/6/19/274 commit |
Fixed in kernel 2.6.32 |
| L0018 | Crash | drivers/net/hamradio/yam.c: Null dereference | 2009-12-23 | http://lkml.org/lkml/2009/12/21/140 commit |
Fixed in kernel 2.6.35-rc1 |
| L0017 | Crash | drivers/usb/misc/sisusbvga/sisusb.c: Null dereference | 2009-12-23 | http://lkml.org/lkml/2009/12/21/135 commit |
Fixed in kernel 3.10-rc1 |
| L0016 | Crash | drivers/usb/mos7840.c: Null dereference | 2009-12-23 | http://lkml.org/lkml/2009/12/21/131 commit |
Fixed in kernel 2.6.35-rc2 |
| L0014 | Crash | drivers/net/3c507.c: Null dereference | 2009-12-22 | http://lkml.org/lkml/2009/12/21/120 commit |
Fixed in kernel 2.6.35-rc1 |
| L0013 | Crash | drivers/ata/sata_mv.c: Null dereference | 2009-12-22 | http://lkml.org/lkml/2009/12/14/237 commit |
Fixed in kernel 2.6.33 |
| L0010 | Crash | drivers/net/irda/ali-ircc.c: Get spin_lock twice | 2009-10-08 | http://lkml.org/lkml/2009/10/8/113 https://lkml.org/lkml/2015/9/11/613 commit |
Fixed in kernel 4.3-rc3 |
| L0009 | Crash | drivers/net/znet.c: Sleeping function called from invalid context | 2009-10-08 | http://lkml.org/lkml/2009/10/7/317 commit |
Fixed in kernel 2.6.32 |
| L0007 | Crash | drivers/char/isicom.c: Sleeping function called from invalid context | 2009-10-08 | http://lkml.org/lkml/2009/10/7/246 commit |
Fixed in kernel 2.6.33-rc1 |
| L0008 | Crash | drivers/media/video/usbvideo/konicawc.c: Possible buffer overflow while use strncat | 2009-10-08 | http://lkml.org/lkml/2009/10/7/218 commit |
Fixed in kernel 2.6.33-rc1 |
| L0006 | Crash | drivers/media/video/usbvideo/quickcam_messenger.c: Possible buffer overflow while use strncat with wrong 3rd parameter. | 2009-10-07 | http://lkml.org/lkml/2009/10/7/217 commit |
Fixed in kernel 2.6.33-rc1 |
| L0012 | Crash | drivers/input/input.c: Possible mutex_lock without mutex_unlock | 2009-10-14 | http://lkml.org/lkml/2009/10/13/353 commit |
Fixed in kernel 2.6.32 |
| L0011 | Crash | drivers/hid/hidraw.c: Double mutex_lock | 2009-10-13 | http://lkml.org/lkml/2009/10/12/101 commit |
Fixed in kernel 2.6.35 |
| L0198 | Leak | [media] sh_vou: fix memory leak on error paths in sh_vou_open() | 2015-07-21 | http://lkml.iu.edu/hypermail/linux/kernel/1502.1/03560.html commit |
Fixed in kernel 4.2-rc8 |
| F0006 | Deadlock | f2fs: a deadlock in mkdir if ACL is enabled | 2013-10-28 | https://lkml.org/lkml/2013/10/26/163 commit |
Fixed in kernel 3.12-rc3 |
| L0177 | Crash | ath6kl: double free because of incorrect reset_resume handler | 2014-11-29 | http://lists.openwall.net/netdev/2014/10/24/102 commit |
Fixed in kernel 3.19-rc1 |
| L0188 | Crash | staging: vt6656: don't return zero on failure path in vt6656_probe() | 2015-03-20 | http://lists.openwall.net/linux-kernel/2015/03/13/908 commit |
Fixed in kernel 4.1-rc1 |
| L0286 | Crash | hwmon:(stts751) buffer overread on wrong chip configuration | 2017-08-15 | http://linuxtesting.org/pipermail/ldv-project/2017-August/000894.html commit |
Fixed in kernel 4.14-rc1 |
| L0242 | Crash | USB: serial: mos7840: fix non-atomic allocation in write path | 2016-08-15 | http://linuxtesting.org/pipermail/ldv-project/2016-August/000677.html commit |
Fixed in kernel 4.8-rc5 |
| L0241 | Crash | USB: serial: mos7720: fix non-atomic allocation in write path | 2016-08-15 | http://linuxtesting.org/pipermail/ldv-project/2016-August/000676.html commit |
Fixed in kernel 4.8-rc5 |
| L0211 | Crash | USB: whci-hcd: no check for dma mapping error | 2015-12-01 | http://linuxtesting.org/pipermail/ldv-project/2015-November/000558.html commit |
Fixed in kernel 4.4-rc5 |
| L0200 | Leak | [media] usbvision: fix leak of usb_dev on failure paths in usbvision_probe() | 2015-07-21 | http://linuxtesting.org/pipermail/ldv-project/2015-March/000482.html commit |
Fixed in kernel 4.2-rc8 |
| L0170 | Leak | dm log userspace: memory leak in dm_ulog_tfr_init failure path | 2014-10-01 | http://linuxtesting.org/pipermail/ldv-project/2014-October/000370.html commit |
Fixed in kernel 3.18-rc1 |
| L0165 | Crash | NFS: add checks for returned value of try_module_get() | 2014-08-03 | https://lkml.org/lkml/2014/7/17/688 commit |
Fixed in kernel 3.17-rc1 |
| L0166 | Crash | usb: dbgp gadget: fix use after free in dbgp_unbind() | 2014-08-19 | http://linuxtesting.org/pipermail/ldv-project/2014-August/000359.html commit |
Fixed in kernel 3.17-rc3 |
| L0015 | Crash | drivers/net/hamradio/bpqether.c: Null dereference | 2009-12-23 | http://kerneltrap.org/mailarchive/linux-netdev/2009/12/15/6264106 commit |
Fixed in kernel 2.6.33-rc4 |
| L0005 | Crash | drivers/gpu/drm/drm_gem.c: Potential BUG_ON assertion fails in drm_gem_object_free | 2009-09-18 | http://bugzilla.kernel.org/show_bug.cgi?id=13227 commit |
Fixed in kernel 2.6.34-rc1 |
| S0842 | Inconsistency | readlink() sets errno EINVAL instead of ENOENT | 2011-08-21 | Fixed in kernel 3.2-rc1 |