32226 matches found
af_packet: fix integer overflow in prb_calc_retire_blk_tmo()
...
thunderbolt: Reject oversized XDomain properties responses
...
blk-mq: set RQF_USE_SCHED when the operation is known
...
usb: typec: anx7411 - stop the IRQ before destroying the workqueue
...
bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc
...
vt: skip screen update for DEC alignment test on backgroup consoles
...
Bluetooth: RFCOMM: Fix initial port reference race
...
bpf: Restrict CO-RE poisoning to relocatable instructions
...
net: flush skb_defer_nodes in dev_cpu_dead()
...
bna: prevent IOC timer rearm during teardown
...
ALSA: ua101: reject mismatched capture/playback packet sizes
...
netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
...
iio: trigger: cancel reenable_work before freeing trigger
...
sctp: hold asoc or transport before mod_timer() in timer handlers
...
wifi: mac80211: fix mesh fast xmit path deletion UAF
...
net: stmmac: fix rx Scatter-Gather support
...
bpf: Skip detached progs in trampoline images that are still in use
...
bpf: Fix objects stuck in free_by_rcu_ttrace
...
wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()
...
usb: cdns3: fix use-after-free in cdns3_gadget_exit()
...
KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded
...
net: bcmgenet: fix NULL dereference in set_coalesce before first open
...
vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()
...
scsi: sd_zbc: Reject disks with too many zones
...
writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes
...
xfs: fix cursor and pointer handling when recovering iunlink buckets
...
net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget
...
nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()
...
packet: use ubuf_info completion for TX_RING packets
...
bpf: Fix bounds check for skb-backed dynptrs
...
nfc: st21nfca: validate ISO15693 inventory length
...
KVM: arm64: Transfer the hyp stack pages out of the host stage-2
...
iio: adc: stm32-adc: fix possible division by zero in processed channel
...
drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update
...
Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel
...
of/overlay: don't leak fragment references when changeset init fails
...
iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure
...
mtd: block2mtd: Fix divide error when erase_size is zero
...
ipv6: do not let ipv6_find_hdr() return an offset past the packet end
...
arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems
...
usb: storage: sierra_ms: reject short SWoC info transfers
...
tg3: clean up PHYLIB resources on probe failure
...
usb: dwc3: gadget: fix IRQ storm on invalid event buffer count
...
nvme-multipath: fix underflow in ANA log bounds checks
...
s390/debug: Fix NULL pointer dereference in debug_info_copy()
...
bpf: Fix divide-by-zero in btf_struct_walk()
...
usb: typec: ucsi: glink: fix use-after-free of ucsi on remove
...
net/mlx5: Fix slab-out-of-bounds when handling team device events
...