23139 matches found
ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
...
net: qrtr: ns: Limit the total number of nodes
...
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
...
net: qrtr: ns: Limit the maximum number of lookups
...
rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
...
remoteproc: xlnx: Only access buffer information if IPI is buffered
...
net: strparser: fix skb_head leak in strp_abort_strp()
...
LoongArch: Add spectre boundry for syscall dispatch table
...
misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
...
KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
...
netfilter: arp_tables: fix IEEE1394 ARP payload parsing
...
dm mirror: fix integer overflow in create_dirty_log()
...
rxrpc: Fix potential UAF after skb_unshare() failure
...
libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
...
slip: bound decode() reads against the compressed packet length
...
tcp: call sk_data_ready() after listener migration
...
crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
...
KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
...
Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
...
spi: fix resource leaks on device setup failure
...
x86/shstk: Prevent deadlock during shstk sigreturn
...
crypto: atmel-tdes - fix DMA sync direction
...
net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
...
rbd: fix null-ptr-deref when device_add_disk() fails
...
net: caif: clear client service pointer on teardown
...
fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
...
net: bridge: use a stable FDB dst snapshot in RCU readers
...
net/sched: taprio: fix NULL pointer dereference in class dump
...
netfilter: reject zero shift in nft_bitwise
...
ntfs3: add buffer boundary checks to run_unpack()
...
slip: reject VJ receive packets on instances with no rstate array
...
crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
...
rxrpc: Fix re-decryption of RESPONSE packets
...
can: ucan: fix devres lifetime
...
inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
...
spi: imx: fix use-after-free on unbind
...
wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
...
ibmasm: fix OOB reads in command_file_write due to missing size checks
...
RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
...
net: qrtr: ns: Free the node during ctrl_cmd_bye()
...
md/raid5: validate payload size before accessing journal metadata
...
ceph: only d_add() negative dentries when they are unhashed
...
go-git: Improper single-quote escaping in go-git SSH transport
...
ipvs: skip ipv6 extension headers for csum checks
...
go-git: Crafted repositories may modify main and submodule .git directories
...
net: qrtr: ns: Fix use-after-free in driver remove()
...
crypto: ccree - fix a memory leak in cc_mac_digest()
...
PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
...