23105 matches found
btrfs: do not assert we found block group item when creating free space tree
...
drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
...
NFSD: Define a proc_layoutcommit for the FlexFiles layout type
...
smb: client: Fix refcount leak for cifs_sb_tlink
...
ixgbevf: fix mailbox API compatibility by negotiating supported features
...
Unbounded allocation when parsing GNU sparse map in archive/tar
...
ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
...
net/sched: sch_qfq: Fix null-deref in agg_dequeue
...
ksmbd: transport_ipc: validate payload size before reading handle
...
usb: gadget: f_acm: Refactor bind path to use __free()
...
usb: gadget: f_ncm: Refactor bind path to use __free()
...
hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
...
usb: gadget: f_ecm: Refactor bind path to use __free()
...
ksmbd: fix recursive locking in RPC handle list access
...
KVM: arm64: Prevent access to vCPU events before init
...
ALSA: hda: Fix missing pointer check in hda_component_manager_init function
...
usb: gadget: f_rndis: Refactor bind path to use __free()
...
ALPN negotiation error contains attacker controlled information in crypto/tls
...
Panic when validating certificates with DSA public keys in crypto/x509
...
Quadratic complexity when checking name constraints in crypto/x509
...
Quadratic complexity when parsing some invalid inputs in encoding/pem
...
Excessive CPU consumption in Reader.ReadResponse in net/textproto
...
Lack of limit when parsing cookies can cause memory exhaustion in net/http
...
Parsing DER payload can cause memory exhaustion in encoding/asn1
...
Insufficient validation of bracketed IPv6 hostnames in net/url
...
Excessive CPU consumption in ParseAddress in net/mail
...
Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF
...
usb: gadget: core: flush gadget workqueue after device removal
...
PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
...
wifi: brcmfmac: Check the return value of of_property_read_string_index()
...
ata: libata-sff: Ensure that we cannot write outside the allocated buffer
...
misc: fastrpc: Fix copy buffer page size
...
drm/i915: Fix request ref counting during error capture & debugfs dump
...
jfs: add check read-only before truncation in jfs_truncate_nolock()
...
tty: n_gsm: Don't block input queue by waiting MSC
...
fs: ntfs3: Fix integer overflow in run_unpack()
...
net/9p: fix double req put in p9_fd_cancelled
...
Squashfs: fix uninit-value in squashfs_get_parent
...
perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
...
uio_hv_generic: Let userspace take care of interrupt mask
...
nbd: restrict sockets to TCP and UDP
...
mm/ksm: fix flag-dropping behavior in ksm_madvise
...
vhost: vringh: Fix copy_to_iter return value check
...
vhost: vringh: Modify the return value check
...
net: dlink: handle copy_thresh allocation failure
...
Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
...
pinctrl: check the return value of pinmux_ops::get_function_name()
...
smb: client: fix crypto buffers in non-linear memory
...