28400 matches found
net: l2tp: do not propagate multicast notification errors
...
nfsd: gate nfs3 setacl by argp->mask
...
power: supply: lp8727: fix use-after-free in lp8727_release_irq()
...
fbdev: uvesafb: unregister connector callback on init failure
...
dm array: reject an array block whose value size is not the caller's
...
iommu/msm: Unwind probe state on registration failure
...
ocfs2: fix readdir position truncation on 32-bit kernels
...
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
...
net: openvswitch: fix flow mask use-after-free on flow deletion
...
wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
...
hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
...
libceph: reject buckets with mismatched CRUSH ids
...
i3c: master: Fix info leak and UAF in device unregister path
...
ALSA: bcd2000: clear the URB pointers on disconnect
...
platform/x86: ISST: Add a NULL check for sst_inst[]
...
net/smc: fix use-after-free in smc_rx_pipe_buf_release()
...
smb: client: reject a tree connect response whose byte count is too small
...
cpufreq: apple-soc: Fix OPP table cleanup
...
HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
...
xdp: fix zero-copy frame layout
...
apparmor: fix cred UAF caused by begin_current_label_crit_section()
...
fbdev: ssd1307fb: defer I2C transfers from damage callbacks
...
HID: mcp2221: stop device IO before hid_hw_stop
...
sunrpc: init gssp_lock before publishing proc entry
...
ntfs: verify run length exceeding volume boundary
...
regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
...
media: vicodec: fix out-of-bounds write in FWHT encoder
...
power: supply: qcom_battmgr: terminate the strings from firmware
...
orangefs: skip leading spaces before parsing client debug masks
...
SUNRPC: svcauth_gss: enforce krb5 token minimum length
...
nfsd: check client ownership when cancelling a copy-notify stateid
...
orangefs: fix double-free of trailer_buf on readdir copy failure
...
tracing: Fix use-after-free with same-name named triggers
...
ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
...
net: thunderbolt: Mark the connection down when bringing it up fails
...
svcrdma: Reject Read lists that exceed the page budget
...
ALSA: 6fire: bound the MIDI event length from the device
...
smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
...
usb: gadget: f_fs: Prevent deadlock during ep0 read loop
...
nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
...
s390/dasd: Do not complete a failed ESE read as successful
...
auxdisplay: charlcd: cancel backlight work on registration failure
...
ksmbd: fix use-after-free in oplock break notification
...
serial: imx: serialize imx_uart_ports[] lifetime
...
ipip: fix skb leak in collect_md mode when metadata_dst allocation fails
...
nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
...
fs: fix user path of nested backing files
...
SUNRPC: always drain cache_cleaner before destroying a cache_detail
...