Problems in Linux Kernel Found by BLAST
This section contains information about problems in Linux kernel found within Linux Driver Verification project with BLAST engine.
Click on a problem number for detailed description. Click on a column header to change the sorting order.
There are 179 bugs found by BLAST.
| No. | Type | Brief | Added on | Accepted | Status | Trace |
| L0207 | Crash | staging: r8188eu: _enter_critical_mutex() error handling | 2015-10-28 | https://www.spinics.net/lists/kernel/msg2094451.html commit |
Fixed in kernel 4.4-rc1 | ... |
| L0192 | Deadlock | sound/oss: deadlock in sequencer_ioctl(SNDCTL_SEQ_OUTOFBAND) | 2015-04-18 | https://marc.info/?l=linux-kernel&m=142931483001579&w=2 commit |
Fixed in kernel 4.1-rc1 | ... |
| L0227 | Crash | fbdev: fbmem: implement error handling in fbmem_init() | 2016-05-03 | https://lkml.org/lkml/2016/5/2/1059 commit |
Fixed in kernel 4.7-rc1 | ... |
| L0226 | Leak | mei: do not pin module if cldrv->probe() failed | 2016-04-30 | https://lkml.org/lkml/2016/4/1/642 commit |
Fixed in kernel 4.7-rc1 | ... |
| L0221 | Crash | at76c50x-usb: avoid double usb_put_dev() after downloading internal firmware in at76_probe() | 2016-03-07 | https://lkml.org/lkml/2016/2/20/177 commit |
Fixed in kernel 4.6-rc1 | ... |
| L0206 | Deadlock | usb: gadget: pch-udc: fix deadlock in pch-udc | 2015-09-18 | https://lkml.org/lkml/2015/9/28/256 commit |
Fixed in kernel 4.4-rc1 | ... |
| L0205 | Leak | mcb: leaks in mcb_pci_probe() | 2015-09-16 | https://lkml.org/lkml/2015/7/8/1041 commit |
Fixed in kernel 4.3-rc5 | ... |
| L0197 | Leak | usb: gadget: mv_udc_core: phy_regs I/O memory leak | 2015-07-20 | https://lkml.org/lkml/2015/7/19/92 commit |
Fixed in kernel 4.2-rc4 | ... |
| L0196 | Leak | HID: lenovo: No remove of sysfs group on failure path | 2015-05-29 | https://lkml.org/lkml/2015/5/28/790 commit |
Fixed in kernel 4.2-rc1 | ... |
| L0195 | Deadlock | target: potential double lock in iscsit_get_tpg() | 2015-05-19 | https://lkml.org/lkml/2015/5/19/964 commit |
Fixed in kernel 4.1 | ... |
| L0193 | Crash | pxa168: double deallocation of managed resources | 2015-04-26 | https://lkml.org/lkml/2015/4/24/803 commit |
Fixed in kernel 4.1-rc2 | ... |
| L0190 | Crash | NVMe: Incorrect error handling of class_create("nvme") | 2015-04-07 | https://lkml.org/lkml/2015/3/6/858 commit |
Fixed in kernel 4.1-rc1 | ... |
| L0189 | Crash | staging: ozwpan: absence error handling in ozwpan_init() | 2015-03-26 | https://lkml.org/lkml/2015/3/20/650 commit |
Fixed in kernel 4.1-rc1 | ... |
| L0187 | Leak | EDAC: memory leaks on failure path in edac_init() | 2015-02-26 | https://lkml.org/lkml/2015/2/6/24 commit |
Fixed in kernel 4.1-rc1 | ... |
| L0209 | Crash | sound: fix check for error condition of register_chrdev() | 2015-11-07 | https://lkml.org/lkml/2015/11/6/914 commit |
Fixed in kernel 4.4-rc1 | ... |
| L0208 | Crash | mcb: Do not return zero on error path in mcb_pci_probe() | 2015-10-28 | https://lkml.org/lkml/2015/10/17/238 commit |
Fixed in kernel 4.4-rc1 | ... |
| L0179 | Crash | usb/kaweth: use GFP_ATOMIC under spin_lock in usb_start_wait_urb() | 2015-01-12 | https://lkml.org/lkml/2015/1/9/725 commit |
Fixed in kernel 3.19-rc5 | ... |
| L0178 | Deadlock | drm/radeon: do not leave queue acquired if timeout happens in kgd_hqd_destroy() | 2015-01-04 | https://lkml.org/lkml/2015/1/3/116 commit |
Fixed in kernel 3.19-rc4 | ... |
| L0182 | Leak | [media] cx231xx: usbdev leak on failure paths in cx231xx_usb_probe() | 2015-01-16 | https://lkml.org/lkml/2015/1/16/570 commit |
Fixed in kernel 4.0-rc1 | ... |
| L0181 | Leak | [media] mceusb: fix usbdev leak | 2015-01-12 | https://lkml.org/lkml/2014/9/8/661 commit |
Fixed in kernel 3.19-rc6 | ... |
| L0169 | Inadequacy | ecryptfs: unneeded buggy code in ecryptfs_do_create() | 2014-09-23 | https://lkml.org/lkml/2014/9/22/627 commit |
Fixed in kernel v3.18-rc1 | ... |
| L0180 | Leak | [media] imon: fix usbdev leaks | 2015-01-12 | https://lkml.org/lkml/2014/9/15/920 commit |
Fixed in kernel 3.19-rc6 | ... |
| L0168 | Deadlock | ufs: deadlocks introduced by sb mutex merge | 2014-09-07 | https://lkml.org/lkml/2014/9/1/618 commit |
Fixed in kernel 3.17-rc4 | ... |
| L0167 | Crash | at76c50x-usb: use after free on failure path in at76_probe() | 2014-08-25 | https://lkml.org/lkml/2014/8/14/457 commit |
Fixed in kernel 3.17-rc7 | ... |
| L0162 | Crash | farsync: fix invalid memory accesses in fst_add_one() and fst_init_card() | 2014-07-10 | https://lkml.org/lkml/2014/7/10/676 commit |
Fixed in kernel 3.16-rc6 | ... |
| L0156 | Crash | rsi: Do not return zero in case of usb_register() error | 2014-06-07 | https://lkml.org/lkml/2014/6/6/697 commit |
Fixed in kernel 3.17-rc1 | ... |
| L0157 | Crash | rsi_91x_sdio: add error handling into rsi_module_init() | 2014-06-07 | https://lkml.org/lkml/2014/6/6/695 commit |
Fixed in kernel 3.17-rc1 | ... |
| L0159 | Crash | rsi: fix memory leaks and error handling in rsi_91x_usb() | 2014-06-27 | https://lkml.org/lkml/2014/6/26/527 commit |
Fixed in kernel 3.17-rc1 | ... |
| L0161 | Crash | usb: host: max3421-hcd: unconditionally use GFP_ATOMIC in max3421_urb_enqueue() | 2014-06-29 | https://lkml.org/lkml/2014/6/19/507 commit |
Fixed in 3.17-rc1 | ... |
| L0151 | Deadlock | usb: gadget: gr_udc: unconditionally use GFP_ATOMIC in gr_queue_ext() | 2014-05-08 | https://lkml.org/lkml/2014/5/7/646 commit |
Fixed in kernel 3.16-rc1 | ... |
| L0155 | Leak | [media] usbtv: leak at failure path in usbtv_probe() | 2014-05-23 | https://lkml.org/lkml/2014/5/26/642 commit |
Fixed in kernel 3.17-rc1 | ... |
| L0154 | Crash | w1: do not unlock unheld list_mutex in __w1_remove_master_device() | 2014-05-23 | https://lkml.org/lkml/2014/4/30/591 commit |
Fixed in 3.16-rc1 | ... |
| L0152 | Deadlock | bfa: allocate memory with GFP_ATOMIC in spinlock context | 2014-05-08 | https://lkml.org/lkml/2014/4/18/38 commit |
Fixed in kernel 3.16-rc1 | ... |
| L0147 | Leak | p54usb: fix leaks at failure path in p54u_probe() | 2014-03-09 | https://lkml.org/lkml/2014/3/7/503 commit |
Fixed in kernel 3.15-rc1 | ... |
| L0149 | Crash | rtl8187: fix use after free on failure path in rtl8187_probe() | 2014-03-29 | https://lkml.org/lkml/2014/3/28/425 commit |
Fixed in kernel 3.15-rc1 | ... |
| L0148 | Leak | adv7180: interrupt leak on failure paths in init_device() | 2014-03-14 | https://lkml.org/lkml/2014/3/14/479 commit |
Fixed in kernel 3.15-rc1 | ... |
| L0143 | Leak | staging: gdm72xx: fix leaks at failure path in gdm_usb_probe() | 2014-02-07 | https://lkml.org/lkml/2014/2/5/748 commit |
Fixed in kernel 3.14-rc3 | ... |
| L0145 | Crash | drm/vmwgfx: avoid null pointer dereference at failure paths | 2014-03-01 | https://lkml.org/lkml/2014/2/28/501 commit |
Fixed in kernel 3.14-rc5 | ... |
| L0146 | Crash | staging: dgap: absence of proper error handling in dgap_start() | 2014-03-09 | https://lkml.org/lkml/2014/2/23/92 commit |
Fixed in kernel 3.15-rc1 | ... |
| L0183 | Crash | uio/uio_pci_generic: don't return zero on failure path in probe() | 2015-01-16 | https://lkml.org/lkml/2014/12/5/506 commit |
Fixed in kernel 4.0-rc1 | ... |
| L0184 | Crash | staging: dgnc: improper error handling in dgnc_start() | 2015-01-17 | https://lkml.org/lkml/2014/12/19/368 commit |
Fixed in kernel 4.0-rc1 | ... |
| L0175 | Deadlock | drm/i915: avoid deadlock on failure paths in __intel_framebuffer_create() | 2014-11-29 | https://lkml.org/lkml/2014/11/7/674 commit |
Fixed in kernel 3.19-rc1 | ... |
| L0174 | Leak | usbip: leaks in error handling in stub_probe() | 2014-11-29 | https://lkml.org/lkml/2014/11/28/477 commit |
Fixed in kernel 3.19-rc1 | ... |
| L0173 | Inadequacy | xen-netback: do not report success if backend_create_xenvif() fails | 2014-11-24 | https://lkml.org/lkml/2014/11/24/181 commit |
Fixed in kernel 3.18-rc7 | ... |
| L0171 | Crash | ieee802154: fix error handling in ieee802154fake_probe() | 2014-11-15 | https://lkml.org/lkml/2014/11/14/709 commit |
Fixed in kernel 3.18-rc6 | ... |
| L0137 | Leak | NFC: port100: Fix device leak | 2014-01-04 | https://lkml.org/lkml/2014/1/4/98 commit |
Fixed in kernel 3.14-rc1 | ... |
| L0144 | Deadlock | drivers/message/i2o/i2o_config.c: fix deadlock in compat_ioctl(I2OGETIOPS) | 2014-02-11 | https://lkml.org/lkml/2014/1/31/468 commit |
Fixed in kernel 3.14-rc3 | ... |
| L0223 | Leak | Input: gtco - fix usb_dev leak | 2016-03-20 | https://lkml.org/lkml/2014/1/27/399 commit |
Fixed in kernel 4.6-rc1 | ... |
| L0140 | Crash | RDMA/amso1100: Add check if cache memory was allocated before freeing it | 2014-01-23 | https://lkml.org/lkml/2014/1/12/29 commit |
Fixed in kernel 3.14-rc1 | ... |
| L0139 | Leak | staging: wlan-ng: fix leaks on failure paths in prism2sta_probe_usb() | 2014-01-11 | https://lkml.org/lkml/2014/1/10/503 commit |
Fixed in kernel 3.14-rc1 | ... |
| L0127 | Leak | drivers/net/can/usb/peak_usb/pcan_usb_core.c: memory leak on failure paths in peak_usb_start() | 2013-09-20 | https://lkml.org/lkml/2013/9/4/550 commit |
Fixed in kernel 3.12-rc2 | ... |
| L0153 | Leak | carl9170: fix leaks at failure path in carl9170_usb_probe() | 2014-05-22 | https://lkml.org/lkml/2013/9/27/601 commit |
Fixed in kernel 3.16-rc1 | ... |
| L0128 | Leak | drivers/net/wireless/p54/p54usb.c: leak at failure path in p54u_load_firmware() | 2013-09-26 | https://lkml.org/lkml/2013/9/17/380 commit |
Fixed in kernel 3.12-rc2 | ... |
| L0125 | Leak | drivers/net/irda/mcs7780.c: memory leaks in mcs_net_open() | 2013-09-13 | https://lkml.org/lkml/2013/9/12/631 commit |
Fixed in kernel 3.12-rc1 | ... |
| L0122 | Leak | drivers/media/usb/gspca/gspca.c: incorrect error handling in dev_open() | 2013-08-21 | https://lkml.org/lkml/2013/8/5/510 commit |
Fixed in kernel 3.11-rc3 | ... |
| L0119 | Inconsistency | drivers/net/wireless/hostap/hostap_main.c: incorrect return code on failure path in prism2_open() | 2013-08-05 | https://lkml.org/lkml/2013/8/4/181 commit |
Fixed in kernel 3.11-rc2 | ... |
| L0124 | Crash | drivers/net/wireless/rtl818x/rtl8187/dev.c: use after free on failure path in rtl8187_init_urbs() | 2013-09-09 | https://lkml.org/lkml/2013/8/31/190 commit |
Fixed in kernel 3.12-rc1 | ... |
| L0121 | Crash | drivers/net/irda/via-ircc.c: incorrect return code if via_ircc_open() failed | 2013-08-20 | https://lkml.org/lkml/2013/8/16/388 commit |
Fixed in kernel 3.11-rc7 | ... |
| L0120 | Warning | drivers/usb/gadget/amd5536udc.c: possible non atomic memory allocation under spinlock in udc_queue() | 2013-08-09 | https://lkml.org/lkml/2013/8/1/502 commit |
Fixed in kernel 3.11-rc4 | ... |
| L0117 | Leak | drivers/net/can/usb/usb_8dev.c: urb leak on failure path in usb_8dev_start() | 2013-07-19 | https://lkml.org/lkml/2013/7/17/595 commit |
Fixed in kernel 3.11-rc2 | ... |
| L0129 | Leak | drivers/media/usb/ttusb-dec/ttusb_dec.c: incorrect error handling in ttusb_dec_probe() | 2013-10-03 | https://lkml.org/lkml/2013/7/13/135 commit |
Fixed in kernel 3.12-rc3 | ... |
| L0116 | Data race | drivers/net/wireless/ath/ath9k/hif_usb.c: data race between request_firmware_nowait() callback and suspend() | 2013-07-17 | https://lkml.org/lkml/2013/7/1/520 commit |
Fixed in kernel 3.11-rc2 | ... |
| L0118 | Inconsistency | drivers/media/usb/tlg2300/pd-main.c: incorrect error handling in poseidon_probe() | 2013-07-26 | https://lkml.org/lkml/2013/6/24/521 commit |
Fixed in kernel 3.11-rc3 | ... |
| L0112 | Leak | drivers/staging/media/lirc/lirc_imon.c: leaks in imon_probe() | 2013-06-17 | https://lkml.org/lkml/2013/6/2/127 commit |
Fixed in kernel 3.10-rc2 | ... |
| L0114 | Inconsistency | drivers/staging/media/go7007/go7007-usb.c: incorrect return code for unsupported devices in go7007_usb_probe() | 2013-06-21 | https://lkml.org/lkml/2013/6/19/608 commit |
Fixed in kernel 3.10-rc7 | ... |
| L0111 | Leak | drivers/net/wireless/orinoco/orinoco_usb.c: memory leak in ezusb_access_ltv() when device disconnected | 2013-06-14 | https://lkml.org/lkml/2013/6/13/476 commit |
Fixed in kernel 3.10-rc2 | ... |
| L0113 | Leak | drivers/media/usb/usbvision/usbvision-video.c: memory leak of alt_max_pkt_size | 2013-06-21 | https://lkml.org/lkml/2013/6/10/504 commit |
Fixed in kernel 3.10-rc7 | ... |
| L0115 | Leak | drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c: memory leak in ttusb_probe() | 2013-06-21 | https://lkml.org/lkml/2013/6/10/432 commit |
Fixed in kernel 3.10-rc7 | ... |
| L0110 | Leak | drivers/staging/ft1000/ft1000-usb/ft1000_usb.c: memory leak on error path in ft1000_probe() | 2013-06-12 | https://lkml.org/lkml/2013/6/10/412 commit |
Fixed in kernel 3.10-rc6 | ... |
| L0105 | Crash | [media] wl128x: do not call copy_to_user() while holding spinlocks | 2013-05-21 | https://lkml.org/lkml/2013/5/7/682 commit |
Fixed in kernel 3.10-rc2 | ... |
| L0109 | Data race | usb: gadget: r8a66597-udc: unlock of unheld spinlock in r8a66597_sudmac_irq() | 2013-06-10 | https://lkml.org/lkml/2013/5/29/667 commit |
Fixed in kernel 3.10-rc4 | ... |
| L0099 | Crash | NFC: pn533: Add missing usb_put_dev() | 2013-04-11 | https://lkml.org/lkml/2013/5/1/292 commit |
Fixed in kernel 3.10-rc1 | ... |
| L0102 | Crash | hfs: add error checking for hfs_find_init() | 2013-05-01 | https://lkml.org/lkml/2013/4/9/522 commit |
Fixed in kernel 3.10-rc1 | ... |
| L0098 | Crash | staging: dgrp: implement error handling in dgrp_create_class_sysfs_files() | 2013-04-05 | https://lkml.org/lkml/2013/4/5/479 commit |
Fixed in kernel 3.10-rc1 | ... |
| L0104 | Crash | wlags49_h2: fix error handling in pcmcia probe function | 2013-05-13 | https://lkml.org/lkml/2013/4/23/557 commit |
Fixed in kernel 3.10-rc2 | ... |
| L0100 | Crash | [media] cx88: Fix unsafe locking in suspend-resume | 2013-04-22 | https://lkml.org/lkml/2013/4/13/144 commit |
Fixed in kernel 3.10-rc1 | ... |
| L0097 | Crash | SUNRPC/cache: add module_put() on error path in cache_open() | 2013-04-03 | https://lkml.org/lkml/2013/3/22/501 commit |
Fixed in kernel 3.10-rc1 | ... |
| L0094 | Crash | usb: cdc-acm: fix error handling in acm_probe() | 2013-03-21 | https://lkml.org/lkml/2013/3/15/585 commit |
Fixed in kernel 3.9-rc4 | ... |
| L0093 | Leak | isdn: hisax: add missing usb_free_urb | 2013-02-26 | https://lkml.org/lkml/2013/3/10/256 commit |
Fixed in kernel 3.9-rc2 | ... |
| L0089 | Leak | pcmcia: synclink_cs: fix error handling in mgslpc_probe() | 2013-02-08 | https://lkml.org/lkml/2013/2/6/701 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0095 | Crash | [media] stv090x: do not unlock unheld mutex in stv090x_sleep() | 2013-03-24 | https://lkml.org/lkml/2013/2/19/468 commit |
Fixed in kernel 3.10-rc1 | ... |
| L0092 | Leak | tty: mxser: improve error handling in mxser_probe() and mxser_module_init() | 2013-02-18 | https://lkml.org/lkml/2013/2/16/141 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0091 | Crash | ALSA: ali5451: remove irq enabling in pointer callback | 2013-02-11 | https://lkml.org/lkml/2013/2/11/259 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0090 | Crash | ALSA: rme32.c irq enabling after spin_lock_irq | 2013-02-11 | https://lkml.org/lkml/2013/2/11/237 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0088 | Crash | stmmac: don't return zero on failure path in stmmac_pci_probe() | 2013-02-03 | https://lkml.org/lkml/2013/2/1/613 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0136 | Leak | can: ems_usb: fix urb leaks on failure paths | 2013-12-17 | https://lkml.org/lkml/2013/12/6/862 commit |
Fixed in kernel 3.13-rc5 | ... |
| L0138 | Leak | [media] as102: fix leaks at failure paths in as102_usb_probe() | 2014-01-07 | https://lkml.org/lkml/2013/12/27/199 commit |
Fixed in kernel 3.14-rc1 | ... |
| L0142 | Leak | [media] go7007-loader: fix usb_dev leak | 2014-02-04 | https://lkml.org/lkml/2013/12/20/578 commit |
Fixed in kernel 3.14-rc2 | ... |
| L0141 | Crash | RxRPC: do not unlock unheld spinlock in rxrpc_connect_exclusive() | 2014-01-26 | https://lkml.org/lkml/2013/12/13/564 commit |
Fixed in kernel 3.14-rc1 | ... |
| L0135 | Warning | libertas sdio: claim device before calling sdio_disable_func() | 2013-12-05 | https://lkml.org/lkml/2013/11/18/474 commit |
Fixed in kernel 3.14-rc1 | ... |
| L0133 | Leak | staging: gdm724x: fix leak at failure path in gdm_usb_probe() | 2013-11-26 | https://lkml.org/lkml/2013/11/15/403 commit |
Fixed in kernel 3.14-rc1 | ... |
| L0130 | Leak | drivers/staging/gdm724x/gdm_mux.c: memory leak on failure path | 2013-10-11 | https://lkml.org/lkml/2013/10/8/645 commit |
Fixed in kernel 3.12-rc5 | ... |
| L0131 | Leak | drivers/media/usb/cx231xx/cx231xx-cards.c: double free and leaks on failure path in cx231xx_usb_probe() | 2013-10-17 | https://lkml.org/lkml/2013/10/7/569 commit |
Fixed in kernel 3.12-rc3 | ... |
| L0132 | Leak | drivers/usb/wusbcore/cbaf.c: usb_dev leaks | 2013-10-19 | https://lkml.org/lkml/2013/10/18/492 commit |
Fixed in kernel 3.12-rc7 | ... |
| L0087 | Crash | mwifiex: don't return zero on failure paths in mwifiex_pcie_init() | 2013-01-30 | https://lkml.org/lkml/2013/1/25/611 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0086 | Crash | iwlegacy: don't return zero on failure paths in il4965_pci_probe() | 2013-01-22 | https://lkml.org/lkml/2013/1/19/76 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0085 | Crash | mwl8k: zero return on failure paths in mwl8k_probe[_hw]() | 2013-01-22 | https://lkml.org/lkml/2013/1/18/525 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0078 | Crash | jffs2: erase_completion_lock is unlocked too early | 2012-11-05 | https://lkml.org/lkml/2013/1/15/940 commit |
Fixed in kernel 3.8-rc1 | ... |
| L0084 | Crash | staging: ced1401: GFP_KERNEL in spinlock context | 2013-01-11 | https://lkml.org/lkml/2013/1/11/100 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0083 | Crash | p54pci: p54p_probe() returns zero in case of failure | 2013-01-07 | https://lkml.org/lkml/2013/1/1/36 commit |
Fixed in kernel 3.9-rc1 | ... |
| L0072 | Crash | staging: sbe-2t3e3: fix error handling in t3e3_init_channel() | 2012-10-01 | https://lkml.org/lkml/2012/9/25/296 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0073 | Crash | pcmcia: synclink_cs: fix potential tty NULL dereference | 2012-10-01 | https://lkml.org/lkml/2012/9/13/556 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0071 | Crash | USB: omninet: fix potential tty NULL dereference | 2012-10-01 | https://lkml.org/lkml/2012/9/13/497 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0067 | Leak | staging: bcm: fix error handling in bcm_init() | 2012-10-01 | https://lkml.org/lkml/2012/9/1/97 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0068 | Crash | ppdev: ppdev_init: do not return zero in case of failure | 2012-10-01 | https://lkml.org/lkml/2012/9/1/94 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0069 | Leak | virtio: console: fix error handling in init() function | 2012-10-01 | https://lkml.org/lkml/2012/9/1/85 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0061 | Crash | bio: Fix potential memory leak in bio_find_or_create_slab() | 2012-09-01 | https://lkml.org/lkml/2012/8/9/29 commit |
Fixed in kernel 3.6-rc4 | ... |
| L0064 | Crash | exofs: check for allocation failure in uri_store() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/369 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0056 | Leak | rndis_wlan: Fix potential memory leak in update_pmkid() | 2012-08-12 | https://lkml.org/lkml/2012/8/8/336 commit |
Fixed in kernel 3.6-rc2 | ... |
| L0066 | Crash | can: softing: Fix potential memory leak in softing_load_fw() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/316 commit |
Fixed in kernel 3.6-rc5 | ... |
| L0062 | Crash | wusb: fix potential memory leak in wusb_dev_sec_add() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/213 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0053 | Leak | net/core: Fix potential memory leak in dev_set_alias() | 2012-08-08 | https://lkml.org/lkml/2012/8/8/171 commit |
Fixed in kernel 3.6-rc2 | ... |
| L0060 | Crash | drivers/rtc/rtc-pcf2123.c: initialize dynamic sysfs attributes | 2012-08-21 | https://lkml.org/lkml/2012/8/8/167 commit |
Fixed in kernel 3.6-rc3 | ... |
| L0058 | Leak | iio/adjd_s311: Fix potential memory leak in adjd_s311_update_scan_mode() | 2012-08-16 | https://lkml.org/lkml/2012/8/8/153 commit |
Fixed in kernel 3.6-rc2 | ... |
| L0063 | Crash | USB: whci-hcd: fix potential memory leak in qset_add_urb_sg() | 2012-10-01 | https://lkml.org/lkml/2012/8/8/120 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0059 | Crash | tcm_fc: rcu_deref outside rcu lock/unlock section | 2012-08-20 | https://lkml.org/lkml/2012/8/18/57 commit |
Fixed in kernel 3.6-rc3 | ... |
| L0070 | Leak | ddbridge: fix error handling in module_init_ddbridge() | 2012-10-01 | https://lkml.org/lkml/2012/8/15/475 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0065 | Crash | HID: hidraw: improve error handling in hidraw_init() | 2012-10-01 | https://lkml.org/lkml/2012/8/15/407 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0077 | Crash | ath6kl: usb_register() return value check missed | 2012-10-14 | https://lkml.org/lkml/2012/8/14/50 commit |
Fixed in kernel 3.8-rc1 | ... |
| L0076 | Warning | md/linear: rcu_dereference outside read-lock section | 2012-10-11 | https://lkml.org/lkml/2012/8/13/674 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0057 | Crash | bridge: fix rcu dereference outside of rcu_read_lock | 2012-08-15 | https://lkml.org/lkml/2012/8/13/598 commit |
Fixed in kernel 3.6-rc2 | ... |
| L0055 | Crash | macvtap: rcu_dereference outside read-lock section | 2012-08-12 | https://lkml.org/lkml/2012/8/12/13 commit |
Fixed in kernel 3.6-rc2 | ... |
| L0074 | Crash | usb: gadget: mv_udc: use GFP_ATOMIC in build_dtd() | 2012-10-01 | https://lkml.org/lkml/2012/7/5/567 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0052 | Crash | forcedeth: spin_unlock_irq in interrupt handler fix | 2012-07-20 | https://lkml.org/lkml/2012/7/20/409 commit |
Fixed in kernel 3.6-rc1 | ... |
| L0051 | Crash | drxk: unlock of an unheld mutex in scu_command() | 2012-04-05 | https://lkml.org/lkml/2012/4/5/373 commit |
Fixed in kernel 3.4-rc4 | ... |
| L0050 | Crash | dib9000: implement error handling for DibAcquireLock | 2012-03-19 | https://lkml.org/lkml/2012/3/6/446 commit |
Fixed in kernel 3.5-rc5 | ... |
| L0049 | Crash | dib9000: fix explicit lock mismatches | 2012-03-19 | https://lkml.org/lkml/2012/3/6/444 commit |
Fixed in kernel 3.5-rc5 | ... |
| L0082 | Crash | mei: fix mismatch in mutex unlock-lock in mei_amthif_read() | 2012-12-21 | https://lkml.org/lkml/2012/12/23/9 commit |
Fixed in kernel 3.8-rc4 | ... |
| L0081 | Leak | mmc: vub300: usb_put_dev() missed in vub300_probe() | 2012-11-27 | https://lkml.org/lkml/2012/12/10/692 commit |
Fixed in kernel 3.8-rc1 | ... |
| L0079 | Crash | extcon: arizona: mismatch in mutex lock-unlock in arizona_micdet() | 2012-11-05 | https://lkml.org/lkml/2012/11/4/157 commit |
Fixed in kernel 3.8-rc1 | ... |
| L0080 | Crash | uwb: mismatch in mutex lock-unlock in uwb_rc_cmd_async() | 2012-11-26 | https://lkml.org/lkml/2012/11/26/729 commit |
Fixed in kernel 3.8-rc1 | ... |
| L0041 | Crash | serqt_usb2: fix sleeping with spinlock held | 2011-08-23 | https://lkml.org/lkml/2011/8/9/23 commit |
Fixed in kernel 3.2-rc1 | ... |
| L0046 | Crash | staging: sep: call to sep_ioctl() may leave driver in unusable state | 2011-09-06 | https://lkml.org/lkml/2011/8/30/391 commit |
Fixed in kernel 3.2-rc1 | ... |
| L0045 | Crash | mei: missed unlock dev->device_lock mutex on error path in mei_open() | 2011-09-06 | https://lkml.org/lkml/2011/8/30/367 commit |
Fixed in kernel 3.2-rc1 | ... |
| L0043 | Crash | lirc: mismatch in mutex lock-unlock in imon_probe | 2011-09-06 | https://lkml.org/lkml/2011/8/29/395 commit |
Fixed in kernel 3.2-rc1 | ... |
| L0042 | Crash | staging/easycap: mismatch in easycap_poll() mutex lock-unlock | 2011-08-29 | https://lkml.org/lkml/2011/8/29/334 commit |
Fixed in kernel 3.2-rc1 | ... |
| L0047 | Crash | mpt2sas: Fix mismatch in mpt2sas_base_hard_reset_handler() mutex lock-unlock | 2012-02-13 | https://lkml.org/lkml/2011/8/25/577 commit |
Fixed in kernel 3.3-rc5 | ... |
| L0040 | Crash | carl9170: unlock of unheld mutex in carl9170_op_set_key | 2011-08-23 | https://lkml.org/lkml/2011/8/23/380 commit |
Fixed in kernel 3.1-rc5 | ... |
| L0038 | Crash | hfsplus: add error checking for hfs_find_init() | 2011-06-24 | https://lkml.org/lkml/2011/7/5/500 commit |
Fixed in kernel 3.1-rc1 | ... |
| L0039 | Crash | hfsplus: Fix double iput of the same inode in hfsplus_fill_super() | 2011-06-24 | https://lkml.org/lkml/2011/6/23/675 commit |
Fixed in kernel 3.0 | ... |
| L0036 | Leak | gigaset: absence of call module_put before restart of if_open() | 2011-06-20 | https://lkml.org/lkml/2011/6/17/321 commit 2f9381e | Fixed in kernel 3.0-rc4 | ... |
| L0035 | Leak | drivers/net/wan/farsync.c: module_get() without module_put() on an error path in fst_open() | 2011-06-20 | https://lkml.org/lkml/2011/6/17/320 commit d0fd64c | Fixed in kernel 3.0-rc4 | ... |
| L0037 | Leak | drivers/video/hecubafb.c: absence of module_put on an error path in hecubafb_probe() | 2011-06-20 | https://lkml.org/lkml/2011/6/17/267 commit |
Fixed in kernel 3.0-rc6 | ... |
| L0031 | Deadlock | drivers/net/usb/catc.c: potential deadlock in catc_ctrl_run() | 2011-06-07 | https://lkml.org/lkml/2011/5/31/504 commit |
Fixed in kernel 3.0-rc2 | ... |
| L0032 | Leak | drivers/media/radio/si470x/radio-si470x-usb.c: memory leak in si470x_usb_driver_probe() | 2011-06-08 | https://lkml.org/lkml/2011/5/31/483 commit |
Fixed in kernel 3.1-rc1 | ... |
| L0034 | Crash | drivers/usb/gadget/inode.c: lack of unlock data->lock mutex on error path in ep_write() | 2011-06-08 | https://lkml.org/lkml/2011/5/26/58 commit |
Fixed in kernel 3.0-rc3 | ... |
| L0075 | Deadlock | mpt2sas: fix double mutex lock in NON_BLOCKING state | 2012-10-02 | https://lkml.org/lkml/2011/4/18/331 commit |
Fixed in kernel 3.7-rc1 | ... |
| L0030 | Crash | drivers/media/dvb/dvb-usb/lmedm04.c: Do not unlock mutex if mutex_lock_interruptible failed | 2011-06-01 | https://lkml.org/lkml/2011/4/15/306 commit |
Fixed in kernel 3.0-rc1 | ... |
| L0029 | Crash | drivers/usb/gadget/inode.c: lack of unlock data->lock mutex on error path in ep_read() | 2011-03-22 | https://lkml.org/lkml/2011/3/9/37 commit |
Fixed in kernel 2.6.39-rc4 | ... |
| L0028 | Crash | drivers/input/tablet/wacom_sys.c: lack of usb_free_urb() at error path | 2011-02-09 | https://lkml.org/lkml/2011/2/9/21 commit |
Fixed in kernel 2.6.38-rc5 | ... |
| L0044 | Crash | lirc_sasem: NULL pointer dereference in sasem_probe() | 2011-09-06 | https://lkml.org/lkml/2011/10/26/104 commit |
Fixed in kernel 3.2-rc1 | ... |
| L0026 | Crash | drivers/rtc/rtc-proc.c: have no module_put after module get on error path | 2011-02-04 | https://lkml.org/lkml/2011/1/28/103 commit |
Fixed in kernel 2.6.38-rc5 | ... |
| L0027 | Crash | drivers/media/video/tlg2300/pd-video.c: double mutex_unlock | 2011-02-04 | https://lkml.org/lkml/2011/1/25/478 commit |
Fixed in kernel 2.6.39-rc1 | ... |
| L0025 | Crash | drivers/media/radio/si470x/radio-si470x-common.c: double mutex_lock in si470x_fops_read() | 2011-01-24 | https://lkml.org/lkml/2011/1/23/11 commit |
Fixed in kernel 2.6.39-rc1 | ... |
| L0024 | Crash | pohmelfs/dir.c: unneeded mutex_unlock() in pohmelfs_rename() | 2011-01-21 | https://lkml.org/lkml/2011/1/19/334 commit |
Fixed in kernel 2.6.39-rc1 | ... |
| L0023 | Crash | return from function without mutex_unlock in drivers/media/video/cx231xx/cx231xx-core.c | 2010-12-13 | https://lkml.org/lkml/2010/12/13/343 commit |
Fixed in kernel 2.6.37-rc1 | ... |
| L0021 | Crash | drivers/media/radio/radio-gemtek-pci.c: Double mutex_lock | 2010-08-23 | https://lkml.org/lkml/2009/10/8/179 commit |
Fixed in kernel 2.6.32 | ... |
| L0123 | Crash | drivers/media/usb/hdpvr/hdpvr-core.c: iteration over uninitialized lists in hdpvr_probe() | 2013-09-03 | https://linuxtv.org/patch/19152/ commit |
Fixed in kernel 3.11-rc3 | ... |
| L0126 | Crash | drivers/usb/gadget/mv_u3d_core.c: violation of locking discipline in mv_u3d_ep_disable() | 2013-09-17 | https://groups.google.com/forum/#!topic/linux.kernel/4fDCBFQPjPA commit |
Fixed in kernel 3.12-rc2 | ... |
| L0163 | Leak | staging: gdm724x: fix leak at failure path in init_usb() | 2014-07-10 | http://permalink.gmane.org/53550 commit |
Fixed in kernel 3.17-rc1 | ... |
| L0054 | Leak | drm/edid: Fix potential memory leak in edid_load() | 2012-08-10 | http://lkml.org/lkml/2012/8/7/216 commit |
Fixed in kernel 3.6-rc2 | ... |
| L0019 | Crash | drivers/mtd/mtd_blkdevs.c: Unsafe use of function module_put | 2010-01-26 | http://lkml.org/lkml/2010/1/12/246 commit |
Fixed in kernel 2.6.35 | ... |
| L0001 | Crash | drivers/media/video/cafe_ccic.c: Mutex lock imbalances in function cafe_pci_probe | 2009-09-10 | http://lkml.org/lkml/2009/9/10/167 commit |
Fixed in kernel 2.6.34 | ... |
| L0003 | Crash | drivers/media/video/hdpvr/hdpvr-core.c(hdpvr-video.c): Mutex imbalances | 2009-09-14 | http://lkml.org/lkml/2009/6/19/274 commit |
Fixed in kernel 2.6.32 | ... |
| L0010 | Crash | drivers/net/irda/ali-ircc.c: Get spin_lock twice | 2009-10-08 | http://lkml.org/lkml/2009/10/8/113 https://lkml.org/lkml/2015/9/11/613 commit |
Fixed in kernel 4.3-rc3 | ... |
| L0009 | Crash | drivers/net/znet.c: Sleeping function called from invalid context | 2009-10-08 | http://lkml.org/lkml/2009/10/7/317 commit |
Fixed in kernel 2.6.32 | ... |
| L0007 | Crash | drivers/char/isicom.c: Sleeping function called from invalid context | 2009-10-08 | http://lkml.org/lkml/2009/10/7/246 commit |
Fixed in kernel 2.6.33-rc1 | ... |
| L0008 | Crash | drivers/media/video/usbvideo/konicawc.c: Possible buffer overflow while use strncat | 2009-10-08 | http://lkml.org/lkml/2009/10/7/218 commit |
Fixed in kernel 2.6.33-rc1 | ... |
| L0006 | Crash | drivers/media/video/usbvideo/quickcam_messenger.c: Possible buffer overflow while use strncat with wrong 3rd parameter. | 2009-10-07 | http://lkml.org/lkml/2009/10/7/217 commit |
Fixed in kernel 2.6.33-rc1 | ... |
| L0012 | Crash | drivers/input/input.c: Possible mutex_lock without mutex_unlock | 2009-10-14 | http://lkml.org/lkml/2009/10/13/353 commit |
Fixed in kernel 2.6.32 | ... |
| L0011 | Crash | drivers/hid/hidraw.c: Double mutex_lock | 2009-10-13 | http://lkml.org/lkml/2009/10/12/101 commit |
Fixed in kernel 2.6.35 | ... |
| L0177 | Crash | ath6kl: double free because of incorrect reset_resume handler | 2014-11-29 | http://lists.openwall.net/netdev/2014/10/24/102 commit |
Fixed in kernel 3.19-rc1 | ... |
| L0188 | Crash | staging: vt6656: don't return zero on failure path in vt6656_probe() | 2015-03-20 | http://lists.openwall.net/linux-kernel/2015/03/13/908 commit |
Fixed in kernel 4.1-rc1 | ... |
| L0242 | Crash | USB: serial: mos7840: fix non-atomic allocation in write path | 2016-08-15 | http://linuxtesting.org/pipermail/ldv-project/2016-August/000677.html commit |
Fixed in kernel 4.8-rc5 | ... |
| L0241 | Crash | USB: serial: mos7720: fix non-atomic allocation in write path | 2016-08-15 | http://linuxtesting.org/pipermail/ldv-project/2016-August/000676.html commit |
Fixed in kernel 4.8-rc5 | ... |
| L0200 | Leak | [media] usbvision: fix leak of usb_dev on failure paths in usbvision_probe() | 2015-07-21 | http://linuxtesting.org/pipermail/ldv-project/2015-March/000482.html commit |
Fixed in kernel 4.2-rc8 | ... |
| L0165 | Crash | NFS: add checks for returned value of try_module_get() | 2014-08-03 | https://lkml.org/lkml/2014/7/17/688 commit |
Fixed in kernel 3.17-rc1 | ... |
| L0166 | Crash | usb: dbgp gadget: fix use after free in dbgp_unbind() | 2014-08-19 | http://linuxtesting.org/pipermail/ldv-project/2014-August/000359.html commit |
Fixed in kernel 3.17-rc3 | ... |
| L0005 | Crash | drivers/gpu/drm/drm_gem.c: Potential BUG_ON assertion fails in drm_gem_object_free | 2009-09-18 | http://bugzilla.kernel.org/show_bug.cgi?id=13227 commit |
Fixed in kernel 2.6.34-rc1 | ... |