21711 matches found
net: usb: kalmia: validate USB endpoints
...
net/sched: ets: fix divide by zero in the offload path
...
wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
...
can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
...
wifi: radiotap: reject radiotap with unknown bits
...
xdp: produce a warning when calculated tailroom is negative
...
drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
...
net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
...
bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
...
can: usb: f81604: correctly anchor the urb in the read bulk callback
...
drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
...
IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
...
Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
...
net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
...
wifi: libertas: fix use-after-free in lbs_free_adapter()
...
net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
...
wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
...
bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
...
can: mcp251x: fix deadlock in error path of mcp251x_open
...
nfc: pn533: properly drop the usb interface reference on disconnect
...
net: annotate data-races around sk->sk_{data_ready,write_space}
...
netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
...
net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
...
can: ucan: Fix infinite loop from zero-length messages
...
net: usb: pegasus: validate USB endpoints
...
ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
...
smb: client: Don't log plaintext credentials in cifs_set_cifscreds
...
can: usb: f81604: handle short interrupt urb messages properly
...
x86/efi: defer freeing of boot services memory
...
can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
...
ksmbd: Compare MACs in constant time
...
scsi: target: Fix recursive locking in __configfs_open_file()
...
tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
...
net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
...
atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
...
scsi: pm8001: Fix use-after-free in pm8001_queue_command()
...
Squashfs: check metadata block offset is within range
...
i40e: Fix preempt count leak in napi poll tracepoint
...
ALSA: usb-audio: Use correct version for UAC3 header validation
...
bpf: Fix stack-out-of-bounds write in devmap
...
netfilter: nf_tables: release flowtable after rcu grace period on error
...
scsi: core: Fix refcount leak for tagset_refcnt
...
drbd: fix null-pointer dereference on local read error
...
netfilter: xt_CT: drop pending enqueued packets on template removal
...
net: usb: kaweth: validate USB endpoints
...
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
...
wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
...
platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
...
systemd: Local unprivileged user can trigger an assert
...
Vim affected by Command injection via newline in glob()
...