24590 matches found
bpf: Fix a data-race around bpf_jit_limit.
...
bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
...
powerpc/rtas: Fix RTAS MSR[HV] handling for Cell
...
dma-buf/dma-resv: check if the new fence is really later
...
Libvirt: denial of service in xml parsing
...
net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY
...
PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption
...
PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
...
PostgreSQL libpq undersizes allocations, via integer wraparound
...
ipmi: Rework user message limit handling
...
sctp: Fix MAC comparison to be constant-time
...
xtensa: simdisk: add input size check in proc_write_simdisk
...
Revert "ipmi: fix msg stack when IPMI is disconnected"
...
media: mc: Clear minor number before put device
...
netfilter: nft_objref: validate objref and objrefmap expressions
...
btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
...
cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
...
ext4: guard against EA inode refcount underflow in xattr update
...
kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
...
pid: Add a judgment for ns null in pid_nr_ns
...
pwm: berlin: Fix wrong register in suspend/resume
...
net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
...
mount: handle NULL values in mnt_ns_release()
...
Squashfs: reject negative file sizes in squashfs_read_inode()
...
media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
...
ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
...
ext4: verify orphan file size is not too big
...
RGW DoS attack with empty HTTP header in S3 object copy
...
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
...
tracing: Do not let histogram values have some modifiers
...
drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini
...
mptcp: use the workqueue to destroy unaccepted sockets
...
net: usb: lan78xx: Limit packet length to skb->len
...
drm/amd/display: Do not set DRR on pipe Commit
...
scsi: mpi3mr: Bad drive in topology results kernel crash
...
KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace
...
mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
...
IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS
...
Chromium: CVE-2025-13042 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
...
tls: wait for pending async decryptions if tls_strp_msg_hold fails
...
net/ip6_tunnel: Prevent perpetual tunnel growth
...
usbnet: Fix using smp_processor_id() in preemptible code warnings
...
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
...
ipv6: use RCU in ip6_xmit()
...
ext4: detect invalid INLINE_DATA + EXTENTS flag combination
...
drm/vmwgfx: Fix Use-after-free in validation
...
drm/vmwgfx: Fix a null-ptr access in the cursor snooper
...
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
...