22107 matches found
vt: fix unicode buffer corruption when deleting characters
...
usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
...
drm/vmwgfx: Fix the lifetime of the bo cursor memory
...
x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
...
dm-raid: really frozen sync_thread during suspend
...
md/md-bitmap: fix incorrect usage for sb_index
...
ALSA: usb-audio: Stop parsing channels bits when all channels are found.
...
wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
...
drm/amdkfd: Fix memory leak in create_process failure
...
crypto: qat - resolve race condition during AER recovery
...
clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays
...
wireguard: netlink: access device through ctx instead of peer
...
nouveau/dmem: handle kcalloc() allocation failure
...
drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed
...
drm/i915/vma: Fix UAF on destroy against retire race
...
powerpc/pseries: Fix potential memleak in papr_get_attr()
...
drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()
...
drm/vmwgfx: Unmap the surface before resetting it on a plane state
...
x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type
...
drm/tegra: dsi: Add missing check for of_find_device_by_node
...
s390/bpf: Fix bpf_plt pointer arithmetic
...
io_uring/net: fix overflow check in io_recvmsg_mshot_prep()
...
firewire: ohci: prevent leak of left-over IRQ on unbind
...
md/dm-raid: don't call md_reap_sync_thread() directly
...
drm/amdgpu: fix deadlock while reading mqd from debugfs
...
crypto: rk3288 - Fix use after free in unprepare
...
drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf
...
scsi: ufs: core: Fix ufshcd_abort_one racing issue
...
netrom: Fix a memory leak in nr_heartbeat_expiry()
...
net: ethernet: lantiq_etop: fix double free in detach
...
crypto: hisilicon/sec - Fix memory leak for sec resource release
...
cpufreq: amd-pstate: fix memory leak on CPU EPP exit
...
bpf: Avoid splat in pskb_pull_reason
...
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
...
ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
...
ipv6: prevent possible NULL deref in fib6_nh_init()
...
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
...
xfs: fix log recovery buffer allocation for the legacy h_size fixup
...
drm/amdgpu/mes: fix use-after-free issue
...
drm/amd/display: Fix division by zero in setup_dsc_config
...
remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
...
Cupsd Listen arbitrary chmod 0140777
...
KEYS: trusted: Fix memory leak in tpm2_key_encode()
...
drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
...
rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
...
Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input
...
In FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).
...
Buildah: full container escape at build time
...
nvme: fix reconnection fail due to reserved tag allocation
...
net: openvswitch: Fix Use-After-Free in ovs_ct_exit
...