28326 matches found
bpf: Clear buf on error in __bpf_get_task_stack
...
null_blk: serialize configfs attribute updates with device setup
...
gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection
...
libceph: validate banner payload length
...
fbdev: kyro: Validate overlay viewport coordinates
...
ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
...
drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
...
btrfs: always wait for ordered extents to avoid OE races
...
Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers
...
uio: Fix stale info pointer in failed registration path
...
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow
...
cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active
...
RDMA/cma: Fix WARNING in res_to_rt
...
ocfs2: validate orphan slot during inode read
...
dmaengine: dw-edma: Terminate all descriptors without callbacks
...
RDMA/erdma: Hold CQ references when processing EQ events
...
usb: fix UAF when probe runs concurrent to dyn ID removal
...
serial: qcom-geni: do not advance stale DMA completions
...
ocfs2: synchronize heartbeat callbacks with o2net teardown
...
IB/isert: reject login PDUs declaring more data than was received
...
scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
...
Bluetooth: hci_conn: fix the SCO setup context lifetime
...
lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone
...
ocfs2: o2hb: quiesce negotiate handlers and timeout work
...
RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking
...
cuse: wait for pending RCU callbacks on module exit
...
HID: logitech-hidpp: Fix FF device cleanup on init failure
...
HID: synchronize input before cleaning up a failed probe
...
samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
...
NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
...
firmware: arm_scmi: Clean up channels on setup failure
...
nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
...
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration
...
net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
...
clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()
...
phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend
...
power: supply: isp1704_charger: cancel work on remove
...
net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
...
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
...
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser
...
blk-iocost: clear delay state when freeing policy data
...
cpufreq: imx6q: fix out-of-bounds write when probed more than once
...
net/sched: act_ife: Only operate on Ethernet frames
...
misc: ad525x_dpot: use driver core groups for sysfs files
...
net/rds: use wq_has_sleeper() in rds_cong_map_updated()
...
null_blk: free global tag_set on init error path
...
ksmbd: free preauth sessions on connection teardown
...
ext4: fix buffer_head leak in ext4_init_orphan_info
...