24507 matches found
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
...
media: cedrus: skip invalid H.264 reference list entries
...
hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
...
drm/nouveau: fix reversed error cleanup order in ucopy functions
...
drm/amdgpu: fix aperture mapping leak
...
iommu/amd: Bound the early ACPI HID map
...
pppoe: reload header pointer after dev_hard_header()
...
media: sun4i-csi: Return queued buffers on start_streaming() failure
...
wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
...
wan: wanxl: Only reset hardware after BAR mapping
...
media: rtl2832: fix use-after-free in rtl2832_remove()
...
iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
...
staging: vme_user: fix location monitor leak in tsi148 bridge
...
Bluetooth: btusb: validate Realtek vendor event length
...
libceph: remove debugfs files before client teardown
...
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
...
smb: client: validate DFS referral PathConsumed
...
net/sched: act_tunnel_key: Defer dst_release to RCU callback
...
mctp: serial: handle zero-length frames to prevent rx buffer overflow
...
mac802154: hold an interface reference across the scan worker
...
ftrace: Add global mutex to serialize trace_parser access
...
debugobjects: Plug race against a concurrent OOM disable
...
fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
...
Bluetooth: RFCOMM: Fix session UAF in set_termios
...
hwmon: occ: validate poll response sensor blocks
...
ksmbd: pin conn during async oplock break notification
...
mtd: fix double free and WARN_ON in add_mtd_device() error paths
...
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
...
media: saa7134: Fix a possible memory leak in saa7134_video_init1
...
binfmt_elf_fdpic: only honour the first PT_INTERP
...
KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug
...
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
...
fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
...
wifi: mwifiex: bound uAP association event IEs to the event buffer
...
wifi: libertas: fix memory leak in helper_firmware_cb()
...
tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
...
drm/amdgpu: fix division by zero with invalid uvd dimensions
...
wifi: carl9170: fix buffer overflow in rx_stream failover path
...
drm/amdgpu: reject mapping a reserved doorbell to a new queue
...
sctp: fix auth_hmacs array size in struct sctp_cookie
...
net: qrtr: restrict socket creation to the initial network namespace
...
media: vivid: check for vb2_is_busy() when toggling caps
...
drm/i915/gem: Add missing nospec on parallel submit slot
...
net: hip04: fix RX buffer leak on build_skb failure
...
drm/amd/display: set new_stream to NULL after release
...
net: hsr: fix memory leak on slave unregistration by removing synced VLANs
...
rds: drop incoming messages that cross network namespace boundaries
...
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
...