28326 matches found
smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
...
scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]
...
scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature
...
mptcp: syncookies: remember the request backup flag
...
pds_core: fix cmd_regs access racing BAR unmap on reset
...
wifi: nl80211: reject beacons with bad HE operation
...
mac802154: fix use-after-free of sdata via queued RX frames
...
ieee802154: cc2520: fix FIFOP work use-after-free
...
dpaa2-switch: fix handling of NAPI on the remove path
...
scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock
...
net: bcmasp: clear txcb->last before writing each descriptor
...
tracing: Undo the registration when enabling the histogram trigger fails
...
vdpa: ifcvf: Put device on unsupported feature error
...
lockd: fix swapped arguments in nlmsvc_match_ip()
...
drm/i915: Fix memory leak in query_perf_config_list()
...
smb: client: fix heap overflow in DACL owner/group rewrite
...
ALSA: usb-audio: caiaq: validate EP1 reply lengths
...
ipmr: account multicast table and route memory
...
smb: client: avoid leaking refcount when cifs_sb_tlink() fails
...
exfat: fix handling of damaged volume in exfat_create_upcase_table()
...
btrfs: tree-checker: validate INODE_REF's namelen
...
watchdog: msc313e: Fix clock leak and spurious timer in settimeout()
...
bpf: mark a NULL call argument precise
...
wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
...
ALSA: ump: do not touch legacy_rmidi before it exists
...
Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
...
bpf: Don't infer non-NULL from a pointer with an unbounded offset
...
vhost/vdpa: reject VRING_NUM larger than device max
...
mptcp: close race between scheduler and state change
...
net: stmmac: fix TX descriptor availability check for TSO traffic
...
ALSA: caiaq: Fix potential double-free at error path
...
net: bridge: mcast: properly convert mglist to rcu
...
net/rds: use wq_has_sleeper() in release_in_xmit()
...
scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size
...
ipvs: fix reversed sequence option serialization
...
hsr: broadcast netlink notifications in the device's net namespace
...
virtio_input: reset device if input_register_device() fails
...
bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge
...
tracing: Take trace_array reference when opening a tracer options file
...
net: au1000: move free_irq out of the close-time spinlocked section
...
drm/amdgpu: fix buffer overflow during vBIOS update
...
smb/client: validate new EOF for zero range
...
accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
...
net/mlx5: E-Switch, prevent mc_list repopulation during vport disable
...
wifi: cfg80211: reject duplicate wiphy cipher suite entries
...
thunderbolt: Set tb->root_switch to NULL when domain is stopped
...
smb/server: fix tree connection leak in smb2_tree_connect()
...
net/sched: sfq: clamp quantum in change path
...