Hall of Fame
Making the world a better place, one finding at a time.
Findings I reported to the projects that own them. A finding goes on this page only after its report is public. A bug is in “Security bugs” only when it has a CVE or the maintainers treat it as a security issue.
4 public findings in 2 projects.
Security bugs
None public yet.
Findings
Linux kernel · btrfs
| Date | Finding | Type | Status | Credit | Links |
|---|---|---|---|---|---|
| 2026-11-02 | A bad sector size in the superblock reaches an assertion at mountFixed by Qu Wenruo's patch "btrfs: return error immediately for btrfs_validate_super()". | CWE-617 Reachable Assertion | fix posted | Reported-by, Tested-by | my reportQu Wenruo's fix |
| 2026-11-02 | A simple-quota status item without the SIMPLE_QUOTA bit causes a BUG at mountPatch 1/2 of "btrfs: tree-checker: reject simple quota metadata without SIMPLE_QUOTA". | CWE-20 Improper Input ValidationCWE-617 Reachable Assertion | patch sent | Author | patch 1/2series |
| 2026-11-02 | The tree-checker accepts an extent owner ref without the SIMPLE_QUOTA bitPatch 2/2 of the same series. syzbot saw both symptoms in 2024, without a reproducer. | CWE-20 Improper Input ValidationCWE-617 Reachable Assertion | patch sent | Author | patch 2/2seriessyzbot (WARNING)syzbot (BUG) |
Rizin
| Date | Finding | Type | Status | Credit | Links |
|---|---|---|---|---|---|
| 2026-10-22 | The winedbg debug plugin passes a file path to a shell command without escaping itNot treated as a security issue by the maintainers: rizin can already run shell commands. | CWE-78 OS Command Injection | patch sent | Reporter, Author | issue #6952PR #6954 |