23108 matches found
ipv6: Fix a potential NPD in cleanup_prefix_route()
...
bpf, sockmap: Fix af_unix iter deadlock
...
crypto: jitterentropy - replace long-held spinlock with mutex
...
gpio: mvebu: fix NULL pointer dereference in suspend/resume
...
Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
...
thunderbolt: Clamp XDomain response data copy to allocation size
...
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
...
sctp: stream: fully roll back denied add-stream state
...
batman-adv: dat: handle forward allocation error
...
bpf: Fix NULL deref in map_kptr_match_type for scalar regs
...
wifi: brcmfmac: Fix error pointer dereference
...
dm cache policy smq: check allocation under invalidate lock
...
pppoe: drop PFC frames
...
Bluetooth: MGMT: validate advertising TLV before type checks
...
batman-adv: fix tp_meter counter underflow during shutdown
...
dm cache policy smq: fix missing locks in invalidating cache blocks
...
bpf: Fix OOB in pcpu_init_value
...
KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
...
net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
...
RDMA/umem: Fix truncation for block sizes >= 4G
...
netfilter: xt_policy: fix strict mode inbound policy matching
...
net: tls: fix strparser anchor skb leak on offload RX setup failure
...
Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
...
Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
...
dm cache: fix write hang in passthrough mode
...
ipv6: mcast: Fix use-after-free when processing MLD queries
...
dm cache metadata: fix memory leak on metadata abort retry
...
netfilter: nf_log: validate MAC header was set before dumping it
...
netfilter: nft_ct: bail out on template ct in get eval
...
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
...
drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11
...
bnxt_en: Fix NULL pointer dereference
...
ipc: limit next_id allocation to the valid ID range
...
udp: clear skb->dev before running a sockmap verdict
...
net: skbuff: fix missing zerocopy reference in pskb_carve helpers
...
batman-adv: tvlv: reject oversized TVLV packets
...
rxrpc: Fix the ACK parser to extract the SACK table for parsing
...
Bluetooth: serialize accept_q access
...
concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity
...
misc: fastrpc: Fix NULL pointer dereference in rpmsg callback
...
concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
...
libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c
...
vsock/vmci: fix sk_ack_backlog leak on failed handshake
...
libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c
...
locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
...
net: bcmgenet: fix racing timeout handler
...
platform/x86: dell-wmi-sysman: bound enumeration string aggregation
...
radvdump's Route Information Option Parser has a Stack Buffer Overflow
...