23144 matches found
netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
...
net: sched: Disallow replacing of child qdisc from one parent to another
...
nilfs2: protect access to buffers with no active references
...
btrfs: fix use-after-free when attempting to join an aborted transaction
...
pps: Fix a use-after-free
...
padata: fix UAF in padata_reorder
...
Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()
...
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
...
ppp: Fix KMSAN uninit-value warning with bpf
...
sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
...
ubifs: skip dumping tnc tree when zroot is null
...
wifi: iwlwifi: limit printed string from FW file
...
ftrace: Avoid potential division by zero in function_stat_show()
...
rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
...
rapidio: fix an API misues when rio_add_net() fails
...
HID: hid-steam: Fix use-after-free when detaching device
...
usb: typec: ucsi: Fix NULL pointer access
...
NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
...
clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
...
drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
...
team: prevent adding a device which is already a team device lower
...
usb: gadget: f_tcm: Don't free command immediately
...
wifi: rtlwifi: fix memory leaks and invalid access at probe error path
...
TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef.
...
Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss
...
Qemu-kvm: 'qemu-img info' leads to host file read/write
...
Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c.
...
Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c.
...
Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.
...
Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow
...
Shadow-utils: possible password leak during passwd(1) change
...
thermal: int340x: Add NULL check for adev
...
nbd: don't allow reconnect after disconnect
...
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
...
iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
...
cifs: Fix integer overflow while processing acregmax mount option
...
cifs: Fix integer overflow while processing closetimeo mount option
...
nilfs2: do not force clear folio if buffer is referenced
...
memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()
...
KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
...
drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
...
net: atm: fix use after free in lec_send()
...
soc: qcom: pdr: Fix the potential deadlock
...
scsi: qla1280: Fix kernel oops when debug level > 2
...
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
...
RDMA/hns: Fix soft lockup during bt pages loop
...
clk: samsung: Fix UBSAN panic in samsung_clk_init()
...
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
...