28540 matches found
drm/amdgpu: Add bounds checking to ib_{get,set}_value
...
ipmi:si: Return state to normal if message allocation fails
...
Bluetooth: virtio_bt: clamp rx length before skb_put
...
RDMA/mana: Validate rx_hash_key_len
...
drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
...
mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
...
mptcp: pm: ADD_ADDR rtx: free sk if last
...
btrfs: fix double free in create_space_info() error path
...
f2fs: fix fsck inconsistency caused by FGGC of node block
...
wifi: mt76: mt7921: fix a potential clc buffer length underflow
...
smb/client: fix out-of-bounds read in smb2_compound_op()
...
ipmi: Add limits to event and receive message requests
...
net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
...
tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
...
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
...
media: rc: xbox_remote: heed DMA restrictions
...
btrfs: fix double free in create_space_info_sub_group() error path
...
spi: rspi: fix controller deregistration
...
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
...
batman-adv: stop tp_meter sessions during mesh teardown
...
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
...
RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
...
dm-thin: fix metadata refcount underflow
...
riscv: kvm: fix vector context allocation leak
...
vsock: fix buffer size clamping order
...
staging: media: atomisp: Disallow all private IOCTLs
...
drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
...
drm/amdkfd: validate SVM ioctl nattr against buffer size
...
mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
...
batman-adv: bla: prevent use-after-free when deleting claims
...
openvswitch: vport: fix self-deadlock on release of tunnel ports
...
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
...
spi: fsl: fix controller deregistration
...
smb/client: fix out-of-bounds read in symlink_data()
...
btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
...
fbcon: Avoid OOB font access if console rotation fails
...
block: add pgmap check to biovec_phys_mergeable
...
wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
...
Off-by-One Leading to Out-of-Bounds Write in bzip2
...
btrfs: fix missing last_unlink_trans update when removing a directory
...
exit: prevent preemption of oopsing TASK_DEAD task
...
ipmi: Check event message buffer response for bad data
...
drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
...
usb: ulpi: fix memory leak on ulpi_register() error paths
...
net: stmmac: Prevent NULL deref when RX memory exhausted
...
smb: client: validate dacloffset before building DACL pointers
...
KVM: x86: check for nEPT/nNPT in slow flush hypercalls
...
Bluetooth: hci_conn: fix potential UAF in create_big_sync
...