24590 matches found
x86/mm: Check return value from memblock_phys_alloc_range()
...
ftrace: Fix UAF when lookup kallsym after ftrace disabled
...
ASoC: Intel: avs: Verify content returned by parse_int_array()
...
wifi: ath12k: fix node corruption in ar->arvifs list
...
kernfs: Relax constraint in draining guard
...
phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
...
btrfs: handle csum tree error with rescue=ibadroots correctly
...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).
...
fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
...
wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
...
f2fs: fix to do sanity check on ino and xnid
...
Squashfs: check return result of sb_min_blocksize
...
net: atm: add lec_mutex
...
serial: jsm: fix NPE during jsm_uart_port_init
...
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
...
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
...
jfs: validate AG parameters in dbMount() to prevent crashes
...
media: cxusb: no longer judge rbuf when the write fails
...
media: vidtv: Terminating the subsequent process of initialization failure
...
hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
...
bpf, sockmap: Fix panic when calling skb_linearize
...
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
...
net: phy: clear phydev->devlink when the link is deleted
...
gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
...
net/mlx5: Fix ECVF vports unload on shutdown flow
...
bus: mhi: ep: Update read pointer only after buffer is written
...
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
...
wifi: carl9170: do not ping device which has failed to load firmware
...
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
...
ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
...
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
...
fs/ntfs3: handle hdr_first_de() return value
...
net: phy: mscc: Fix memory leak when using one step timestamping
...
net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
...
Bluetooth: Fix NULL pointer deference on eir_get_service_data
...
bpf: Fix WARN() in get_bpf_raw_tp_regs
...
mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
...
media: vivid: Change the siize of the composing
...
fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
...
fbcon: Make sure modelist not set on unregistered console
...
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
...
crypto: lzo - Fix compression buffer overrun
...
scsi: target: iscsi: Fix timeout on deleted connection
...
Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose
...
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
...
vhost-scsi: protect vq->log_used with vq->mutex
...
powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
...
espintcp: remove encap socket caching to avoid reference leak
...
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.
...