28326 matches found
kprobes: Protect kprobe_blacklist with RCU
...
usb: dwc3: clear forceRM when issuing EndTransfer
...
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
...
usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
...
minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
...
tracing: Take trace_array reference when opening options file
...
drm/amd/display: fix division by zero in get_estimated_bw()
...
drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
...
media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
...
s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
...
media: cx231xx: reject geometry changes while the VBI queue is busy
...
drm/amd/display: avoid divide-by-zero in __is_lut_linear()
...
clk: meson: align gxbb_32k_clk_sel number of parents with actual count
...
media: em28xx: defer audio-only extension registration
...
KVM: s390: Take srcu when importing watchpoint data
...
scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
...
KVM: s390: Free guest debug data on vcpu destroy
...
f2fs: fix dentry folio leak in find_in_level
...
ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
...
USB: gadget: ffs: fix mm lifetime handling
...
nvmet-auth: Synchronize timeout work during SQ teardown
...
HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
...
scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
...
ksmbd: fix tree connection use-after-free in smb2_tree_connect()
...
ASoC: cs35l34: drain threaded IRQ before runtime suspend
...
drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
...
usb-storage: ene_ub6250: fix race between scan work and probe
...
ASoC: cs35l33: drain threaded IRQ before runtime suspend
...
cpuidle: dt_idle_genpd: kfree() the original name allocation
...
PCI: Allow per function PCI slots to fix slot reset on s390
...
Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink
...
ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
...
scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
...
fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2
...
fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2
...
drm/i915: Guard against NULL driver_data in i915_pci_probe()
...
Device-mapper-multipath: local denial of service via blocking ipc send operations
...
iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
...
Possible degradation of service from continuous queries on the same TCP/DoT connection
...
iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
...
Possible heap buffer overflow during DNSSEC canonicalization
...
dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
...
nvdimm/btt: reject an arena whose nfree is below the lane count
...
scsi: qla2xxx: Initialize NVMe abort_work once at submission
...
HID: rmi: fix OOB access with undersized RMI reports
...
media: cec: core: Fix kmemleak due to missed rc_free_device() call
...
gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers
...
containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service
...