28424 matches found
agp/amd64: Fix broken error propagation in agp_amd64_probe()
...
Global Buffer Overflow in GNU gzip
...
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
...
Nmap - Integer Underflow in IPv6 Extension Header Parsing
...
libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
...
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
...
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
...
ip6_vti: set netns_immutable on the fallback device.
...
bpf: Free reuseport cBPF prog after RCU grace period.
...
WebOb: Location header normalization during redirect leads to open redirect
...
mailbox: add sanity check for channel array
...
padata: Put CPU offline callback in ONLINE section to allow failure
...
ALSA: hda/conexant: Fix missing error check for jack detection
...
audit: fix incorrect inheritable capability in CAPSET records
...
ice: fix NULL pointer dereference in ice_reset_all_vfs()
...
drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
...
net: mana: Guard mana_remove against double invocation
...
drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths
...
btrfs: only release the dirty pages io tree after successful writes
...
net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
...
scsi: sg: Resolve soft lockup issue when opening /dev/sgX
...
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase
...
sched/psi: fix race between file release and pressure write
...
Bluetooth: fix memory leak in error path of hci_alloc_dev()
...
6lowpan: fix off-by-one in multicast context address compression
...
mm/hugetlb: restore reservation on error in hugetlb folio copy paths
...
Vim: Out-of-bounds Read with Text Properties
...
net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
...
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
...
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure
...
Vim: Out-of-bounds Read in Text Property Count
...
nvmem: core: fix use-after-free bugs in error paths
...
Vim: Out-of-bounds Write in Spell File Prefix Dump
...
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
...
net: mvpp2: refill RX buffers before XDP or skb use
...
ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE
...
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
...
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
...
USB: serial: io_ti: fix heap overflow in get_manuf_info()
...
Vim: Out-of-bounds Write in Spell File Word Count
...
sctp: disable BH before calling udp_tunnel_xmit_skb()
...
Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
...
ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
...
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
...
Bluetooth: bnep: reject short frames before parsing
...
xfrm: espintcp: do not reuse an in-progress partial send
...
net/sched: netem: fix queue limit check to include reordered packets
...
Vim: Out-of-bounds Read with libsodium-encrypted Files
...