28326 matches found
ALSA: usbusx2y: validate URB actual_length in interrupt callback
...
LoongArch: Add DIRECT_MAP_PHYSMEM_END definition
...
drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction
...
Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
...
usb: xusbatm: don't rely on id table pointer arithmetic
...
omfs: handle set_blocksize failures
...
vdpa_sim_blk: reject out-of-range sector starts
...
ipvs: reject invalid states in connection template sync records
...
thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()
...
perf/x86/intel/pt: Fix stop/start with no update
...
smb: client: reject userspace cifs.idmap descriptions
...
tick/broadcast: Plug clockevents replacement race
...
drm/amdkfd: Fix OOB memory exposure in get_wave_state()
...
bpf: reject BPF_PSEUDO_FUNC reference to the main program
...
drm/xe: Fix null pointer dereference in devcoredump cleanup
...
ipv6: flowlabel: cap duplicate leases per socket
...
netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
...
btrfs: restore active device pointers after failed sprout
...
netfilter: nfnetlink_log: cope with concurrent instance destruction
...
perf/x86/intel: Prevent drain_pebs() reentry
...
bootconfig: Fix integer overflow in initrd size check
...
net: ipv6: Fix UDP length overflow with PMTU discover and big MTU
...
af_unix: Update last skb marker in manage_oob().
...
smb: client: avoid leaking refcount in cifs_queue_oplock_break()
...
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
...
media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer
...
net: mpls: clear inner_protocol when the last label is popped
...
io_uring/rw: end write accounting from ->ki_complete
...
ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)
...
watchdog: msc313e: Fix NULL pointer dereference in PM callbacks
...
fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib
...
net: reject oversized tx_queue_len at netlink parse time
...
nexthop: Initialize extack in remove_nh_grp_entry()
...
media: chips-media: wave5: Fix Reports from Kernel Lock Validator
...
inet: frags: invalidate queues before flushing them
...
ppp_synctty: ensure a writeable skb header
...
vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()
...
ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
...
net/sched: cls_route: free emptied bucket on filter move
...
dpaa2-switch: rework FDB management on the bridge leave path
...
nfsd: convert nfsd_net boolean flags to unsigned long flags word
...
vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx
...
cpufreq: zero-initialize policy cpumask before sysfs publication
...
sunvdc: unmap LDC cookies when the descriptor send fails
...
scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown
...
wifi: iwlwifi: mvm: validate sta_id in BA window status notif
...
ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()
...
f2fs: accurately adjust free_sections during free_segment_range
...