32226 matches found
drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()
...
KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
...
net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
...
netfilter: nft_flow_offload: drop flowtable reference on init error path
...
wifi: mac80211: keep fallback association elements alive
...
tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup
...
HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
...
usb: gadget: midi2: Fix the jack descriptor array sizes
...
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST
...
drm/amdgpu: fix ACP MFD device leak on init failure
...
usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC
...
ASoC: codecs: max98363: fix uninitialized stream_config->type
...
of/overlay: only treat a positive changeset id as registered
...
drm/nouveau: Fix bridge reference leak in nv1a_ram_new()
...
net: gue: reject invalid REMCSUM offsets
...
iio: buffer: serialize buffer teardown with mode claims
...
drm/amdgpu: fix IP instance memory leak on kobject add failure
...
drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM
...
writeback: report a Tasks-RCU quiescent state per cgwb drain pass
...
HID: alps: fix use-after-free on input2 registration failure
...
Bluetooth: hci_core: Serialize ACL scheduling with channel deletion
...
Bluetooth: hci_conn: Lock parent access during enhanced SCO setup
...
net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()
...
nvme: fix cdev lifetime
...
usb: gadget: aspeed-vhub: cancel wake work on device removal
...
wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE
...
Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
...
wifi: mac80211: handle empty FILS association request payload
...
tty: tty_port: restore TTY_IO_ERROR on activation failure
...
iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
...
squashfs: Add dictionary size range check to prevent shift-out-of-bounds
...
xsk: Use a 32-bit compare in xsk_map_gen_lookup
...
USB: serial: fix ioctl hangup race
...
wifi: mac80211: validate TX status rate metadata
...
netfilter: flowtable: publish HW_DEAD after worker is done
...
ALSA: seq: Serialize compat port-info ioctls
...
KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure
...
bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk
...
iio: adc: ad_sigma_delta: fix use-after-free on unbind
...
drm/virtio: fix memory leak of fence event on execbuffer failure
...
ALSA: line6: reject oversized playback packets
...
net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621
...
fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
...
wifi: ath9k: reject short WMI command responses
...
tty: vcc: zero-initialize control packet in vcc_send_ctl()
...
Bluetooth: hci_sync: Fix inquiry cache use-after-free
...
nfc: fix use-after-free in nfc_get_local_general_bytes
...
kprobes: Skip disarmed probes when checking optkprobe overlap
...