28326 matches found
drm/v3d: Clear queue->active_job when v3d_fence_create() fails
...
power: supply: sc2731_charger: cancel work on remove
...
ocfs2: validate inline xattrs during inode block validation
...
fs/resctrl: Fix UAF from worker threads when domains are removed
...
md/raid5: round bitmap stripes with sector division
...
Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
...
firmware: arm_scmi: Unregister device notifier before IDR teardown
...
wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
...
RDMA/nldev: validate dynamic counter attribute length
...
ACPI: processor: validate MADT IOAPIC entry bounds
...
nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
...
riscv, bpf: Fix memory leak in bpf_jit_free
...
smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
...
firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published
...
RDMA/core: Fix potential use after free in ib_destroy_srq_user()
...
irqchip/renesas-rzg2l: Fix loss of interrupt
...
netfilter: nf_tables: move hardware offload step after building the chain blob
...
smack: fix incorrect task context in smack_msg_queue_msgrcv
...
RDMA/erdma: Fix CEQ tasklet use-after-free on removal
...
firmware_loader: do not queue completed sysfs fallback requests
...
rtc: pcf8563: fix clock provider leak on unbind
...
net: sparx5: fix sleep in atomic context in MAC table access
...
i3c: master: Fix recursive locking during device registration
...
misc: sgi-gru: remove interrupt-context page-table walks
...
net/smc: free pending qentry in smc_llc_flow_stop() before memset
...
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
...
RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
...
crypto: keembay - Initialize completion before requesting IRQ
...
i3c: master: Fix use-after-free of master->this
...
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
...
crypto: atmel-ecc - reject hardware ECDH without a public key
...
netfilter: nft_ct: move custom expectation support to helper
...
wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]
...
net/sched: sch_teql: restore skb->dev on the slave failure path
...
drm/msm: Only fini scheduler after successful init
...
bpf: Reject writes through untrusted BTF pointers
...
platform/surface: acpi-notify: Check ACPI companion before use
...
platform/x86: dell-wmi-base: Fix handling of ultra performance key
...
RDMA/siw: Fix use-after-free in siw_accept()
...
RDMA/core: Fix potential use after free in counter_release()
...
bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
...
Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
...
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
...
cxl/region: Fix use-after-free in find_pos_and_ways() error path
...
ksmbd: defer publishing granted locks to prevent UAF/double-free race
...
rapidio: clear mport->net when rio_add_net() fails
...
tty: clear cdev pointer after cdev_add() failure
...
net/sched: fq_pie: clamp default quantum to avoid signed overflow
...