22107 matches found
Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
...
firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
...
ocfs2: fix uninitialized value in ocfs2_file_read_iter()
...
virtio/vsock: Fix accept_queue memory leak
...
nvme-multipath: defer partition scanning
...
mm/thp: fix deferred split unqueue naming and locking
...
x86/bugs: Use code segment selector for VERW operand
...
net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
...
btrfs: fix uninitialized pointer free in add_inode_ref()
...
Bluetooth: ISO: Fix multiple init when debugfs is disabled
...
xhci: tegra: fix checked USB2 port number
...
Azure AI Face Service Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network...
vt: prevent kernel-infoleak in con_font_get()
...
pinctrl: stm32: check devm_kasprintf() returned value
...
btrfs: fix uninitialized pointer free on read_alloc_one_name() error
...
pinctrl: apple: check devm_kasprintf() returned value
...
Bluetooth: SCO: Fix UAF on sco_sock_timeout
...
nvme-pci: fix race condition between reset and nvme_dev_disable()
...
sched/core: Disable page allocation in task_tick_mm_cid()
...
Bluetooth: ISO: Fix UAF on iso_sock_timeout
...
LoongArch: Don't crash in stack_top() for tasks without vDSO
...
Bluetooth: Call iso_exit() on module unload
...
Microsoft Account Elevation of Privilege Vulnerability
Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network...
Apache Xerces C++: Use-after-free on external DTD scan
...
LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
...
ublk: don't allow user copy for unprivileged device
...
tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
...
mm/mremap: fix move_normal_pmd/retract_page_tables race
...
USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
...
macsec: Fix use-after-free while sending the offloading packet
...
mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
...
iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
...
drm/sti: avoid potential dereference of error pointers
...
bpf: Check validity of link->type in bpf_link_show_fdinfo()
...
media: ar0521: don't overflow when checking PLL values
...
fsdax: dax_unshare_iter needs to copy entire blocks
...
netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
...
RDMA/bnxt_re: Fix out of bound check
...
net/mlx5: Unregister notifier on eswitch init failure
...
netfilter: bpf: must hold reference on net namespace
...
platform/x86/amd/pmc: Detect when STB is not available
...
bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
...
firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
...
mm: resolve faulty mmap_region() error path behaviour
...
fs/ntfs3: Additional check in ntfs_file_release
...
net: vertexcom: mse102x: Fix possible double free of TX skb
...
scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
...
ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
...
fs/ntfs3: Add rough attr alloc_size check
...
wifi: cfg80211: clear wdev->cqm_config pointer on free
...