23108 matches found
Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type
...
batman-adv: clear current gateway during teardown
...
libceph: Fix potential out-of-bounds access in osdmap_decode()
...
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes
...
Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime
...
RDMA/srp: bound SRP_RSP sense copy by the received length
...
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
...
Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception
...
net: mvpp2: sync RX data at the hardware packet offset
...
crypto: af_alg - Cap AEAD AD length to 0x80000000
...
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`
...
ipc/shm: serialize orphan cleanup with shm_nattch updates
...
hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
...
Nokogiri: Possible Use-After-Free in XInclude Processing
...
af_unix: Reject SIOCATMARK on non-stream sockets
...
netfilter: ebtables: fix OOB read in compat_mtw_from_user
...
netfilter: conntrack_irc: fix possible out-of-bounds read
...
smb/client: fix possible infinite loop and oob read in symlink_data()
...
bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
...
netfilter: nft_ct: fix missing expect put in obj eval
...
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
...
fs/ntfs3: terminate the cached volume label after UTF-8 conversion
...
netfilter: conntrack: remove sprintf usage
...
drbd: Balance RCU calls in drbd_adm_dump_devices()
...
ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
...
HID: usbhid: fix deadlock in hid_post_reset()
...
drm/komeda: fix integer overflow in AFBC framebuffer size check
...
mptcp: allow subflow rcv wnd to shrink
...
misc: fastrpc: fix use-after-free race in fastrpc_map_create
...
vrf: Fix a potential NPD when removing a port from a VRF
...
ipv6: fix possible UAF in icmpv6_rcv()
...
drm/sun4i: backend: fix error pointer dereference
...
dm cache: fix null-deref with concurrent writes in passthrough mode
...
ipv6: sit: reload inner IPv6 header after GSO offloads
...
KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
...
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
...
efi/capsule-loader: fix incorrect sizeof in phys array reallocation
...
net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
...
s390/bpf: Zero-extend bpf prog return values and kfunc arguments
...
futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
...
drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()
...
bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
...
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
...
dm cache: fix dirty mapping checking in passthrough mode switching
...
net/rds: Restrict use of RDS/IB to the initial network namespace
...
nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
...
net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
...
netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
...