22103 matches found
containerd has an integer overflow in User ID handling
...
usb: gadget: f_tcm: Don't free command immediately
...
rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
...
wifi: rtlwifi: fix memory leaks and invalid access at probe error path
...
net: davicom: fix UAF in dm9000_drv_remove
...
pps: Fix a use-after-free
...
net: sched: Disallow replacing of child qdisc from one parent to another
...
nilfs2: protect access to buffers with no active references
...
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
...
net: atm: fix use after free in lec_send()
...
proc: fix UAF in proc_get_inode()
...
iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
...
xsk: fix an integer overflow in xp_create_and_assign_umem()
...
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
...
sched: address a potential NULL pointer dereference in the GRED scheduler.
...
Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
...
dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
...
cifs: Fix integer overflow while processing acdirmax mount option
...
cifs: Fix integer overflow while processing closetimeo mount option
...
bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
...
HID: appleir: Fix potential NULL dereference at raw event handle
...
ppp: Fix KMSAN uninit-value warning with bpf
...
drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
...
rapidio: fix an API misues when rio_add_net() fails
...
cifs: Fix integer overflow while processing acregmax mount option
...
drm/sched: Fix fence reference count leak
...
accel/qaic: Fix integer overflow in qaic_validate_req()
...
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
...
gpio: aggregator: protect driver attr handlers against module unload
...
vlan: enforce underlying device type
...
usb: renesas_usbhs: Flush the notify_hotplug_work
...
ext4: fix OOB read when checking dotdot dir
...
soc: qcom: pdr: Fix the potential deadlock
...
netfilter: nft_tunnel: fix geneve_opt type confusion addition
...
RDMA/hns: Fix soft lockup during bt pages loop
...
jfs: fix slab-out-of-bounds read in ea_get()
...
remoteproc: core: Clear table_sz when rproc_shutdown
...
thermal: int340x: Add NULL check for adev
...
wifi: cfg80211: cancel wiphy_work before freeing wiphy
...
clk: samsung: Fix UBSAN panic in samsung_clk_init()
...
ksmbd: fix use-after-free in smb2_lock
...
drm/amd/display: Fix slab-use-after-free on hdcp_work
...
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
...
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
...
can: ucan: fix out of bound read in strscpy() source
...
ice: fix memory leak in aRFS after reset
...
scsi: qla1280: Fix kernel oops when debug level > 2
...
ksmbd: fix type confusion via race condition when using ipc_msg_send_request
...
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
...
caif_virtio: fix wrong pointer check in cfv_probe()
...