28472 matches found
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
...
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
...
powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy
...
efi/capsule-loader: fix incorrect sizeof in phys array reallocation
...
netfilter: revalidate bridge ports
...
net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
...
s390/bpf: Zero-extend bpf prog return values and kfunc arguments
...
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
...
futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
...
drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()
...
vsock/virtio: fix potential unbounded skb queue
...
bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
...
l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
...
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
...
dm cache: fix dirty mapping checking in passthrough mode switching
...
ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size
...
net/rds: Restrict use of RDS/IB to the initial network namespace
...
nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
...
wifi: libertas: don't kill URBs in interrupt context
...
net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
...
netfilter: nat: use kfree_rcu to release ops
...
btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
...
netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
...
fuse: reject fuse_notify() pagecache ops on directories
...
ALSA: usb-audio: Bound MIDI endpoint descriptor scans
...
ipv6: Fix a potential NPD in cleanup_prefix_route()
...
bpf, sockmap: Fix af_unix iter deadlock
...
crypto: jitterentropy - replace long-held spinlock with mutex
...
gpio: mvebu: fix NULL pointer dereference in suspend/resume
...
Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
...
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
...
thunderbolt: Clamp XDomain response data copy to allocation size
...
sctp: stream: fully roll back denied add-stream state
...
batman-adv: dat: handle forward allocation error
...
bpf: Fix NULL deref in map_kptr_match_type for scalar regs
...
wifi: brcmfmac: Fix error pointer dereference
...
staging: rtl8723bs: fix buffer over-read in rtw_update_protection
...
dm cache policy smq: check allocation under invalidate lock
...
pppoe: drop PFC frames
...
Bluetooth: MGMT: validate advertising TLV before type checks
...
erofs: unify lcn as u64 for 32-bit platforms
...
ice: fix double-free of tx_buf skb
...
batman-adv: fix tp_meter counter underflow during shutdown
...
dm cache policy smq: fix missing locks in invalidating cache blocks
...
bpf: Fix OOB in pcpu_init_value
...
bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
...
KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
...
net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
...