32226 matches found
net: thunderbolt: Mark the connection down when bringing it up fails
...
svcrdma: Reject Read lists that exceed the page budget
...
ALSA: 6fire: bound the MIDI event length from the device
...
smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
...
usb: gadget: f_fs: Prevent deadlock during ep0 read loop
...
nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
...
s390/dasd: Do not complete a failed ESE read as successful
...
auxdisplay: charlcd: cancel backlight work on registration failure
...
ksmbd: fix use-after-free in oplock break notification
...
serial: imx: serialize imx_uart_ports[] lifetime
...
ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
...
nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
...
fs: fix user path of nested backing files
...
SUNRPC: always drain cache_cleaner before destroying a cache_detail
...
ceph: bound xattr value length in __build_xattrs()
...
ecryptfs: hold msg ctx list lock when cleaning daemon queue
...
fbdev: omapfb: panel-dsi-cm: initialize lock before registering display
...
Revert "media: v4l2-dev: fix error handling in __video_register_device()"
...
wifi: mt76: mt7996: validate default EEPROM firmware size
...
HID: sensor: custom: Fix field sysfs group cleanup on failure
...
svcrdma: Validate Read chunk positions before reconstruction
...
net: ravb: serialize PTP clock teardown
...
platform/x86: hp-bioscfg: fix heap OOB read on empty password write
...
Bluetooth: RFCOMM: serialize security confirmation handling
...
platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
...
ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
...
rapidio: mport_cdev: fix use-after-free in dma_req_free()
...
nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
...
mm/migrate_device: clear stale mapping after freeing swapcache
...
bnx2x: fix double free in bnx2x_init_firmware() error path
...
RDMA/cxgb4: Cancel reg_work before freeing device on remove
...
sctp: stop processing a packet once its association is deleted
...
ocfs2: validate rl_used against rl_count in refcount block validator
...
power: supply: bq256xx: drain usb_work before freeing the charger
...
nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation
...
lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
...
sctp: fix stream->outcnt underflow on duplicate RECONF responses
...
SUNRPC: Check svc pool percpu counter allocation
...
ocfs2: bound namelen in dlm_migrate_request_handler
...
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2
...
nfsd: fix nfsd_file leak on inter-server COPY setup failure
...
SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
...
ACPI: pfr_update: fix stack buffer overflow in query_capability()
...
forcedeth: fix off-by-one when saving/restoring non-PCI config space
...
ALSA: serial-u16550: Check card index validity at probe
...
RDMA/ucma: Lock the handler in ucma_set_ib_path()
...
usb: gadget: u_audio: Fix use-after-free on sound card disconnect
...
svcrdma: Fix pcl_for_each_segment for empty chunks
...