32226 matches found
binder: fix is_failure flag for superseded transaction cleanup
...
drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
...
bpf: Fix out-of-bounds read of rtt_min in sock_ops
...
KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails
...
Bluetooth: hci_conn: fix CIS hold ownership on reuse
...
serial: core: fix NULL pointer dereference in serial_core_unregister_port()
...
net: ena: fix MMIO read buffer leak on probe failure
...
KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
...
wifi: iwlegacy: 3945: free EEPROM data on remove
...
drm/amdgpu/gfx6: fix firmware leak on teardown
...
nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()
...
net/smc: fix UAF on lgr list traversal in smcr_port_err()
...
s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config
...
iio: imu: adis16400: fix unprotected debugfs reads
...
drm/i915: fix incorrect RCU teardown order
...
fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT
...
smb: client: discard post-EOF pagecache when extending a file via zero range
...
PCI: of_property: Omit bus properties without a subordinate bus
...
nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
...
bpf: Make post-verification instruction rewrites killable
...
bpf: Reject pkt arguments in mutating subprogs
...
serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()
...
USB: dwc2: shut down wakeup timer before freeing HCD state
...
HID: amd_sfh: Validate PCI BAR size before mapping
...
ALSA: caiaq: unregister the input device when probe fails
...
bpf: Reject non-negative offsets in stack_slot_obj_get_spi()
...
autofs: fix sbi->pipe file reference leak in autofs_kill_sb()
...
net/sched: act_ct: avoid modifying shared unconfirmed ct entry
...
bpf: Fix bpf_sock context code generation
...
net/packet: prevent TX_RING byte count overflow
...
sctp: check RCV_SHUTDOWN after the sendmsg connect wait
...
Bluetooth: L2CAP: validate frame length before control and FCS access
...
net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
...
vlan: ensure sufficient headroom in vlan_dev_hard_header()
...
rds: ib: Clear the sg list when mapping an MR fails
...
drm/nouveau: Fix gem reference leak in validate_init()
...
smb: client: fix create context out-of-bounds reads
...
perf: Fix race between perf_event_exit_task() and perf_pending_task()
...
ata: libata-scsi: bound the ATA passthru sense descriptor writes
...
scsi: libiscsi_tcp: Check the data direction of a Data-In PDU
...
serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()
...
Bluetooth: ISO: balance the parent hold in hci_bind_bis()
...
smb: client: clean up failed cached directory opens
...
mtd: core: call _get_device() with the master MTD
...
llc: fix skb UAF and leaks on llc_mac_hdr_init() failure
...
bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()
...
drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach
...
Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough
...