24590 matches found
smb: client: fix use-after-free in cifs_oplock_break
...
tls: always refresh the queue when reading sock
...
usb: xhci: Apply the link chain quirk on NEC isoc endpoints
...
GNU Binutils ld ldelfgen.c link_order_scan memory leak
...
wifi: prevent A-MSDU attacks in mesh networks
...
drm/amdgpu: csa unmap use uninterruptible lock
...
tracing/osnoise: Fix crash in timerlat_dump_stack()
...
riscv: uprobes: Add missing fence.i after building the XOL buffer
...
comedi: aio_iiro_16: Fix bit shift out of bounds
...
mptcp: make fallback action and fallback decision atomic
...
drm/sched: Increment job count before swapping tail spsc queue
...
comedi: pcl812: Fix bit shift out of bounds
...
io_uring: drop any code related to SCM_RIGHTS
...
iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
...
parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.
...
rxrpc: Fix oops due to non-existence of prealloc backlog struct
...
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
...
Command 'go get' may unexpectedly fallback to insecure git in cmd/go
...
vfio/pci: Create persistent INTx handler
...
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
...
dm-bufio: fix sched in atomic context
...
rxrpc: Fix bug due to prealloc collision
...
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
...
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
...
nfsd: don't ignore the return code of svc_proc_register()
...
PCI/ASPM: Fix link state exit during switch upstream function removal
...
rxrpc: Fix recv-recv race of completed call
...
bpf: copy_verifier_state() should copy 'loop_entry' field
...
Panic on large handshake records in crypto/tls
...
HID: core: ensure the allocated report buffer can contain the reserved report ID
...
tracing: Add down_write(trace_event_sem) when adding trace event
...
Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service
...
HID: core: do not bypass hid_hw_raw_request
...
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
...
HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow
...
ksmbd: fix use-after-free in __smb2_lease_break_noti()
...
kasan: remove kasan_find_vm_area() to prevent possible deadlock
...
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
...
Potential iSCSI R2T PDU Vulnerability
...
net/sched: sch_qfq: Fix race condition on qfq_aggregate
...
netfilter: nf_tables: reject duplicate device on updates
...
firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)
...
rseq: Fix segfault on registration when rseq_cs is non-zero
...
bpf: Fix oob access in cgroup local storage
...
net: appletalk: Fix device refcount leak in atrtr_create()
...
firmware: cs_dsp: Fix OOB memory read access in KUnit test
...
Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c
...
Incorrect detection of reserved device names on Windows in path/filepath
...
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition.
...