23144 matches found
can: hi311x: hi3110_can_ist(): fix potential use-after-free
...
smb: client: fix use-after-free of signing key
...
platform/x86: int3472: Check for adev == NULL
...
wifi: wcn36xx: fix channel survey memory allocation size
...
Microsoft Dataverse Elevation of Privilege Vulnerability
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
PCI/MSI: Handle lack of irqdomain gracefully
...
dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
...
wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
...
iio: pressure: zpa2326: fix information leak in triggered buffer
...
iio: imu: kmx61: fix information leak in triggered buffer
...
mtd: rawnand: fix double free in atmel_pmecc_create_user()
...
btrfs: don't take dev_replace rwsem on task already holding it
...
gve: guard XSK operations on the existence of queues
...
Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop
...
net/mlx5: DR, prevent potential error pointer dereference
...
cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU
...
net: enetc: Do not configure preemptible TCs if SIs do not support
...
blk-cgroup: Fix UAF in blkcg_unpin_online()
...
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
...
bpf, sockmap: Fix race between element replace and close()
...
scsi: sg: Fix slab-use-after-free read in sg_release()
...
drm/i915: Fix NULL pointer dereference in capture_engine
...
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
...
Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
...
sched/numa: fix memory leak due to the overwritten vma->numab_state
...
ceph: fix memory leak in ceph_direct_read_write()
...
wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
...
net: avoid potential UAF in default_operstate()
...
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
...
exfat: fix the infinite loop in exfat_readdir()
...
drm/amd/display: Add check for granularity in dml ceil/floor helpers
...
net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
...
tracing: Prevent bad count for tracing_cpumask_write
...
ipv6: Fix soft lockups in fib6_select_path under high next hop churn
...
soc: qcom: socinfo: Avoid out of bounds read of serial number
...
tpm: Change to kvalloc() in eventlog/acpi.c
...
riscv: Fix sleeping in invalid context in die()
...
drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
...
printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
...
`gh attestation verify` returns incorrect exit code during verification if no attestations are present
...
Heap Overflow in iniparser.c
...
misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
...
powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
...
hrtimers: Handle CPU state correctly on hotplug
...
rdma/cxgb4: Prevent potential integer overflow on 32bit
...
media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
...
ksmbd: fix a missing return value check bug
...
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
...