32226 matches found
Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network...
Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow
...
Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports
...
dm-integrity: fix NULL pointer dereference when the 'R' flag is used
...
ksmbd: fix heap out-of-bounds write in krb5_authenticate()
...
KVM: x86: Use active memslots for the per-vCPU MMIO cache
...
bnxt_en: fix DMA mapping length for padded small packets
...
fs: Free any excess xarray nodes in clear_inode()
...
net/mlx5e: Prevent stale XSK buffer release on refill retry
...
net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
...
ipv4: udp: Create exceptions before socket matching
...
ipv6: udp: Create exceptions before socket matching
...
ipv4: stop route notification sizing when nexthop group shrinks
...
ipv4: do not warn on route notification size race
...
ipv6: do not warn on route notification size race
...
btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
...
dm ioctl: don't let data_start run past the buffer
...
wifi: brcmfmac: fix P2P device removal race in brcmf_detach()
...
wireguard: noise: reject response consumption after intermediate initiation
...
workqueue: Fix NULL current_pwq deref in chained work check
...
xen/netfront: don't leak the skb when xennet_fill_frags() fails
...
strparser: make sure __strp_recv isn't running before tearing down the parser
...
tipc: destroy topsrv workqueues before closing connections
...
tipc: hold a reference to nodes found by link name
...
selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
...
gpio: xilinx: fix runtime PM leak on request error path
...
ibmveth: h_free logical LAN on open-fail after register
...
ice: fix metadata_dst refcount handling on representor teardown
...
ip6_gre: remove obsolete ERSPAN PMTU update
...
KEYS: Fix add_key() race with keyring restriction
...
memstick: core: wait for request completion before freeing card
...
memstick: rtsx_usb_ms: complete requests after eject instead of dropping them
...
dm-crypt: reject the lmk IV mode with AEAD ciphers
...
dm: fix reading free memory in do_resume
...
mmc: mtk-sd: Cancel request timeout work on remove
...
mmc: sdhci-sprd: disable runtime PM on remove
...
net/packet: guard the ll header push in packet_rcv_spkt()
...
net/smc: protect clcsock lifetime in smc_getname
...
net: bridge: avoid recursive multicast port cleanup
...
net: team: stop reusing skb after queue override
...
net: team: free skb when broadcast has no txable port
...
openvswitch: fix soft lockup in the netlink flow dump
...
optee: register TEE devices only once fully initialized
...
regulator: ltc3676: don't read the write-only HRST and CLIRQ registers
...
regulator: of: fill in supply names in of_regulator_bulk_get_all()
...
scsi: ch: Do not keep references to data transfer element devices
...
Bluetooth: hci_sock: Serialize dead-device detachment
...
Bluetooth: ISO: Serialize concurrent connect calls
...