28854 matches found
ksmbd: require 3 sub-authorities before reading sub_auth[2]
...
smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()
...
tls: Purge async_hold in tls_decrypt_async_wait()
...
staging: sm750fb: fix division by zero in ps_to_hz()
...
smb: server: make use of smbdirect_socket.send_io.bcredits
...
nvme: fix admin queue leak on controller reset
...
net: rfkill: prevent unlimited numbers of rfkill events from being created
...
ocfs2: fix possible deadlock between unlink and dio_end_io_write
...
Vim: Command injection via backtick expansion in tag filenames
...
net: lan966x: fix page pool leak in error paths
...
ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
...
usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
...
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
...
netfilter: nft_ct: fix use-after-free in timeout object destroy
...
Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
...
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
...
media: vidtv: fix nfeeds state corruption on start_streaming failure
...
xfrm: hold dev ref until after transport_finish NF_HOOK
...
wifi: rtw88: fix device leak on probe failure
...
staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
...
xen/privcmd: restrict usage in unprivileged domU
...
bnge: return after auxiliary_device_uninit() in error path
...
RDMA/irdma: Fix deadlock during netdev reset with active connections
...
wifi: rt2x00usb: fix devres lifetime
...
mmc: vub300: fix NULL-deref on disconnect
...
HID: core: clamp report_size in s32ton() to avoid undefined shift
...
can: gw: fix OOB heap access in cgw_csum_crc8_rel()
...
rxrpc: reject undecryptable rxkad response tickets
...
ALSA: ctxfi: Limit PTP to a single page
...
media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
...
drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
...
fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
...
ocfs2: handle invalid dinode in ocfs2_group_extend
...
nfc: pn533: allocate rx skb before consuming bytes
...
clockevents: Add missing resets of the next_event_forced flag
...
mm: call ->free_folio() directly in folio_unmap_invalidate()
...
rxrpc: Only put the call ref if one was acquired
...
usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
...
media: em28xx: fix use-after-free in em28xx_v4l2_open()
...
smb: server: let send_done handle a completion without IB_SEND_SIGNALED
...
fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
...
KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
...
Input: uinput - fix circular locking dependency with ff-core
...
KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU
...
ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0
...
usbip: validate number_of_packets in usbip_pack_ret_submit()
...
net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
...
usb: gadget: f_hid: don't call cdev_init while cdev in use
...