28424 matches found
bpf, sockmap: Fix af_unix null-ptr-deref in proto update
...
drm/msm/dpu: fix mismatch between power and frequency
...
net: phonet: free phonet_device after RCU grace period
...
drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()
...
powerpc/64s: Fix unmap race with PMD migration entries
...
bpf, arm64: Fix off-by-one in check_imm signed range check
...
net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
...
net/sched: cls_fw: fix NULL dereference of "old" filters before change()
...
netfilter: x_tables: avoid leaking percpu counter pointers
...
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`
...
drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
...
Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247
...
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
...
quota: Fix race of dquot_scan_active() with quota deactivation
...
Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type
...
libceph: Fix potential out-of-bounds access in osdmap_decode()
...
batman-adv: clear current gateway during teardown
...
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes
...
net: pull headers in qdisc_pkt_len_segs_init()
...
Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime
...
RDMA/srp: bound SRP_RSP sense copy by the received length
...
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
...
Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception
...
net: mvpp2: sync RX data at the hardware packet offset
...
crypto: af_alg - Cap AEAD AD length to 0x80000000
...
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`
...
ipc/shm: serialize orphan cleanup with shm_nattch updates
...
hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
...
Nokogiri: Possible Use-After-Free in XInclude Processing
...
af_unix: Reject SIOCATMARK on non-stream sockets
...
netfilter: ebtables: fix OOB read in compat_mtw_from_user
...
netfilter: conntrack_irc: fix possible out-of-bounds read
...
smb/client: fix possible infinite loop and oob read in symlink_data()
...
bpf: Do not allow deleting local storage in NMI
...
bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
...
iommu/amd: Fix clone_alias() to use the original device's devid
...
netfilter: nft_ct: fix missing expect put in obj eval
...
gpio: rockchip: fix generic IRQ chip leak on remove
...
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
...
fs/ntfs3: terminate the cached volume label after UTF-8 conversion
...
netfilter: conntrack: remove sprintf usage
...
drbd: Balance RCU calls in drbd_adm_dump_devices()
...
ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
...
HID: usbhid: fix deadlock in hid_post_reset()
...
drm/komeda: fix integer overflow in AFBC framebuffer size check
...
mptcp: allow subflow rcv wnd to shrink
...
misc: fastrpc: fix use-after-free race in fastrpc_map_create
...
vrf: Fix a potential NPD when removing a port from a VRF
...