23105 matches found
media: mc: Clear minor number before put device
...
netfilter: nft_objref: validate objref and objrefmap expressions
...
btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
...
cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
...
ext4: guard against EA inode refcount underflow in xattr update
...
kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
...
pid: Add a judgment for ns null in pid_nr_ns
...
pwm: berlin: Fix wrong register in suspend/resume
...
net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
...
mount: handle NULL values in mnt_ns_release()
...
Squashfs: reject negative file sizes in squashfs_read_inode()
...
media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
...
ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
...
ext4: verify orphan file size is not too big
...
RGW DoS attack with empty HTTP header in S3 object copy
...
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
...
tracing: Do not let histogram values have some modifiers
...
drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini
...
mptcp: use the workqueue to destroy unaccepted sockets
...
net: usb: lan78xx: Limit packet length to skb->len
...
drm/amd/display: Do not set DRR on pipe Commit
...
scsi: mpi3mr: Bad drive in topology results kernel crash
...
KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace
...
mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
...
IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS
...
Chromium: CVE-2025-13042 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
...
tls: wait for pending async decryptions if tls_strp_msg_hold fails
...
net/ip6_tunnel: Prevent perpetual tunnel growth
...
usbnet: Fix using smp_processor_id() in preemptible code warnings
...
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
...
ipv6: use RCU in ip6_xmit()
...
ext4: detect invalid INLINE_DATA + EXTENTS flag combination
...
drm/vmwgfx: Fix Use-after-free in validation
...
drm/vmwgfx: Fix a null-ptr access in the cursor snooper
...
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
...
ipv6: use RCU in ip6_output()
...
net: use dst_dev_rcu() in sk_setup_caps()
...
media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
...
smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
...
accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
...
blk-mq: fix potential deadlock while nr_requests grown
...
smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
...
crypto: hisilicon/qm - request reserved interrupt for virtual function
...
BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).
...
dm-bufio: don't schedule in atomic context
...
net/mlx5e: Fix cleanup null-ptr deref on encap lock
...
octeontx2-pf: Fix SQE threshold checking
...