23530 matches found
filemap: Fix bounds checking in filemap_read()
...
mptcp: error out earlier on disconnect
...
mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
...
nommu: pass NULL argument to vma_iter_prealloc()
...
cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
...
HSTS subdomain overwrites parent cache entry
...
mm: krealloc: Fix MTE false alarm in __do_krealloc
...
drm/rockchip: vop: Fix a dereferenced before check warning
...
ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
...
RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
...
usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
...
pinctrl: apple: check devm_kasprintf() returned value
...
rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
...
f2fs: fix to do sanity check on node blkaddr in truncate_node()
...
media: amphion: Set video drvdata before register video device
...
cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
...
Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
...
ALSA: pcm: Add sanity NULL check for the default mmap fault handler
...
scsi: bfa: Fix use-after-free in bfad_im_module_exit()
...
svcrdma: Address an integer overflow
...
wifi: ath12k: fix crash when unbinding
...
media: mtk-jpeg: Fix null-ptr-deref during unload module
...
cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
...
net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
...
ocfs2: fix uninitialized value in ocfs2_file_read_iter()
...
um: Fix potential integer overflow during physmem setup
...
sctp: fix possible UAF in sctp_v6_available()
...
Bluetooth: MGMT: Fix possible deadlocks
...
firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
...
RDMA/bnxt_re: Fix out of bound check
...
NFSD: Prevent a potential integer overflow
...
sched/numa: Fix the potential null pointer dereference in task_numa_work()
...
nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
...
iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
...
EDAC/igen6: Avoid segmentation fault on module unload
...
CVE-2024-50086
...
Chromium: CVE-2025-0611 Object corruption in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-0612 Out of bounds memory access in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Cert-manager: potential dos when parsing specially crafted pem inputs
...
Heap-buffer-overflow in extractimagesection()
...
Newline confusion in credential helpers can lead to credential exfiltration in git
...
Git does not sanitize URLs when asking for credentials interactively
...
Rsync: heap buffer overflow in rsync due to improper checksum length handling
...
Rsync: race condition in rsync handling symbolic links
...
Rsync: path traversal vulnerability in rsync
...
Rsync: --safe-links option bypass leads to path traversal
...
Rsync: info leak via uninitialized stack contents
...