21701 matches found
rxrpc: Fix re-decryption of RESPONSE packets
...
can: ucan: fix devres lifetime
...
inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
...
spi: imx: fix use-after-free on unbind
...
wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
...
ibmasm: fix OOB reads in command_file_write due to missing size checks
...
RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
...
net: qrtr: ns: Free the node during ctrl_cmd_bye()
...
md/raid5: validate payload size before accessing journal metadata
...
ceph: only d_add() negative dentries when they are unhashed
...
ipvs: skip ipv6 extension headers for csum checks
...
net: qrtr: ns: Fix use-after-free in driver remove()
...
crypto: ccree - fix a memory leak in cc_mac_digest()
...
PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
...
ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
...
scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
...
crypto: authencesn - reject short ahash digests during instance creation
...
zram: do not forget to endio for partial discard requests
...
bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
...
Mistune Image Directive CSS Injection Vulnerability
...
media: rc: igorplugusb: heed coherency rules
...
Mistune: XSS via unescaped figclass/figwidth in Figure directive
...
bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
...
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
...
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
...
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
...
erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
...
ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
...
net: rds: fix MR cleanup on copy error
...
md/raid5: fix soft lockup in retry_aligned_read()
...
net: ks8851: Reinstate disabling of BHs around IRQ handler
...
ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
...
net/smc: avoid early lgr access in smc_clc_wait_msg
...
udf: fix partition descriptor append bookkeeping
...
media: amphion: Fix race between m2m job_abort and device_run
...
openvswitch: cap upcall PID array size and pre-size vport replies
...
of: unittest: fix use-after-free in testdrv_probe()
...
ocfs2: split transactions in dio completion to avoid credit exhaustion
...
ALSA: ctxfi: Add fallback to default RSR for S/PDIF
...
ALSA: caiaq: Handle probe errors properly
...
rxrpc: Fix rxkad crypto unalignment handling
...
rxrpc: Fix memory leaks in rxkad_verify_response()
...
RDMA/mana_ib: Disable RX steering on RSS QP destroy
...
ipv4: icmp: validate reply type before using icmp_pointers
...
thermal: core: Fix thermal zone governor cleanup issues
...
bpf: fix end-of-list detection in cgroup_storage_get_next_key()
...
net: mctp: ensure our nlmsg responses are initialised
...
xfs: fix a resource leak in xfs_alloc_buftarg()
...
ntfs3: fix integer overflow in run_unpack() volume boundary check
...
crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
...