24507 matches found
HID: wacom: stop hardware after post-start probe failures
...
rbd: Reset positive result codes to zero in object map update path
...
wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
...
comedi: comedi_parport: deal with premature interrupt
...
ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
...
dpaa2-eth: put MAC endpoint device on disconnect
...
media: radio-si476x: Unregister v4l2_device on probe failure
...
drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
...
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
...
media: msi2500: Return queued buffers on start_streaming() failure
...
KVM: x86/mmu: Fix use-after-free on vendor module reload
...
wifi: cfg80211: cancel sched scan results work on unregister
...
drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
...
Bluetooth: hci_qca: Clear memdump state on invalid dump size
...
ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
...
libceph: Fix multiplication overflow in decode_new_up_state_weight()
...
drm/dp/mst: fix buffer overflows in sideband chunk accumulation
...
drm/virtio: bound EDID block reads to the response buffer
...
wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
...
media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
...
mac802154: llsec: reject frames shorter than the authentication tag
...
usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
...
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
...
net: slip: serialize receive against buffer reallocation
...
media: v4l2-ctrls: validate HEVC active reference counts
...
drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
...
wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
...
wifi: brcmfmac: initialize SDIO data work before cleanup
...
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
...
net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
...
drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
...
audit: fix recursive locking deadlock in audit_dupe_exe()
...
tipc: fix u16 MTU truncation in media and bearer MTU validation
...
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
...
net/packet: avoid fanout hook re-registration after unregister
...
ksmbd: defer destroy_previous_session() until after NTLM authentication
...
wifi: carl9170: fix OOB read from off-by-two in TX status handler
...
wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()
...
net/iucv: take a reference on the socket found in afiucv_hs_rcv()
...
fscrypt: Add missing superblock check in find_or_insert_direct_key()
...
wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper
...
drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
...
Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch
...
sctp: validate stream count in sctp_process_strreset_inreq()
...
wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
...
dpaa2-switch: put MAC endpoint device on disconnect
...
amt: re-read skb header pointers after every pull
...
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
...