32226 matches found
efivarfs: Rate limit statfs() handler
...
libceph: validate OSD extent maps before cursor advance
...
tracing/user_events: Clear copied tracing state before fork duplication
...
sctp: fix NULL deref on untransmitted RECONF completion
...
jbd2: bound shrinker scans by examined checkpoint buffers
...
HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
...
nfsd: fix clock domain mismatch in clients_still_reclaiming()
...
ceph: cap delegated inode count in ceph_parse_deleg_inos()
...
btrfs: drop recovered reloc root refs on recovery failure
...
usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed
...
platform/x86: int1092: Fix potential memory leak in sar_probe()
...
power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS
...
mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()
...
HID: picolcd: clamp eeprom debugfs read to bytes actually received
...
tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
...
ceph: do not repeat ceph_trim_dentries() if no progress possible
...
net: l2tp: do not propagate multicast notification errors
...
nfsd: gate nfs3 setacl by argp->mask
...
power: supply: lp8727: fix use-after-free in lp8727_release_irq()
...
fbdev: uvesafb: unregister connector callback on init failure
...
dm array: reject an array block whose value size is not the caller's
...
iommu/msm: Unwind probe state on registration failure
...
ocfs2: fix readdir position truncation on 32-bit kernels
...
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
...
net: openvswitch: fix flow mask use-after-free on flow deletion
...
wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
...
hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
...
libceph: reject buckets with mismatched CRUSH ids
...
i3c: master: Fix info leak and UAF in device unregister path
...
ALSA: bcd2000: clear the URB pointers on disconnect
...
platform/x86: ISST: Add a NULL check for sst_inst[]
...
net/smc: fix use-after-free in smc_rx_pipe_buf_release()
...
smb: client: reject a tree connect response whose byte count is too small
...
cpufreq: apple-soc: Fix OPP table cleanup
...
HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
...
xdp: fix zero-copy frame layout
...
apparmor: fix cred UAF caused by begin_current_label_crit_section()
...
fbdev: ssd1307fb: defer I2C transfers from damage callbacks
...
HID: mcp2221: stop device IO before hid_hw_stop
...
sunrpc: init gssp_lock before publishing proc entry
...
ntfs: verify run length exceeding volume boundary
...
regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
...
media: vicodec: fix out-of-bounds write in FWHT encoder
...
power: supply: qcom_battmgr: terminate the strings from firmware
...
orangefs: skip leading spaces before parsing client debug masks
...
SUNRPC: svcauth_gss: enforce krb5 token minimum length
...
nfsd: check client ownership when cancelling a copy-notify stateid
...
orangefs: fix double-free of trailer_buf on readdir copy failure
...