23530 matches found
mtd: rawnand: fix double free in atmel_pmecc_create_user()
...
tracing: Prevent bad count for tracing_cpumask_write
...
blk-cgroup: Fix UAF in blkcg_unpin_online()
...
bpf, sockmap: Fix race between element replace and close()
...
Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
...
sched/numa: fix memory leak due to the overwritten vma->numab_state
...
net/smc: protect link down work from execute after lgr freed
...
ceph: fix memory leak in ceph_direct_read_write()
...
drm/i915: Fix NULL pointer dereference in capture_engine
...
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
...
wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
...
net: defer final 'struct net' free in netns dismantle
...
Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
...
smb: client: fix use-after-free of signing key
...
btrfs: fix use-after-free in btrfs_encoded_read_endio()
...
netfilter: IDLETIMER: Fix for possible ABBA deadlock
...
powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
...
drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err
...
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
...
net/mlx5e: Skip restore TC rules for vport rep without loaded flag
...
PCI/MSI: Handle lack of irqdomain gracefully
...
btrfs: don't take dev_replace rwsem on task already holding it
...
pinmux: Use sequential access to access desc->pinmux data
...
iio: imu: kmx61: fix information leak in triggered buffer
...
iio: adc: ti-ads8688: fix information leak in triggered buffer
...
riscv: Fix sleeping in invalid context in die()
...
dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
...
drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
...
dlm: fix possible lkb_resource null dereference
...
iio: pressure: zpa2326: fix information leak in triggered buffer
...
exfat: fix the infinite loop in exfat_readdir()
...
gve: guard XSK operations on the existence of queues
...
iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
...
Microsoft Dataverse Elevation of Privilege Vulnerability
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...
soc: qcom: socinfo: Avoid out of bounds read of serial number
...
printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
...
media: uvcvideo: Fix double free in error path
...
usb: xhci: Fix NULL pointer dereference on certain command aborts
...
media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
...
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
...
wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
...
usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
...
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
...
drm/amd/display: Add check for granularity in dml ceil/floor helpers
...
wifi: wcn36xx: fix channel survey memory allocation size
...
platform/x86: int3472: Check for adev == NULL
...
hrtimers: Handle CPU state correctly on hotplug
...
tpm: Change to kvalloc() in eventlog/acpi.c
...