28326 matches found
Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling
...
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
...
PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
...
PyJWT: Non-canonical signature segments enable raw-token revocation bypass
...
PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
...
PyJWT: PyJWKClient follows redirects when fetching JWKS
...
One-byte overread in strncasecmp on Power8
...
Out-of-bounds read in libX11's byte-oriented codeset parser
...
ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()
...
Out-of-bounds read in libXtst's RECORD reply parser
...
Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion
...
Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
...
Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
...
wifi: mac80211: ibss: wait for in-flight TX on disconnect
...
SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
...
cxl/region: Validate partition index before array access
...
Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference
...
thermal/drivers/tegra/soctherma: Switch to devm cooling device registration
...
arm64: hibernate: mask DAIF before restoring hibernated kernel
...
RDMA/rtrs-srv: Fix integer underflow in process_read and process_write
...
kasan: fix cache shrink race with CPU hotplug
...
ACPI: bus: Introduce acpi_bus_get_primary_device()
...
ipv6: use RCU iterator to dump route exceptions
...
PCI: altera: Protect root bus removal with rescan lock
...
wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate
...
i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845
...
staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
...
tty: serial: 8250: protect against NULL uart->port.dev in register
...
usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
...
wifi: libipw: fix key index receive bound checks
...
powerpc/irq: Fix missing r2 clobber in PCREL inline assembly
...
ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()
...
drm/gud: validate TV mode names before creating enum property
...
gfs2: move quota_init qc iterator increment
...
vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()
...
wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
...
locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
...
net: dsa: sja1105: flower: reject cross-chip redirect
...
md/raid5-ppl: fix use-after-free in ppl_do_flush()
...
spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM
...
ext4: fix circular lock dependency in ext4_ext_migrate
...
scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
...
mmc: davinci: avoid NULL deref of host->data in IRQ handler
...
apparmor: policy_int make sure list heads are initialized before fail path
...
powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()
...
Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
...
mm/secretmem: properly account locked pages
...
drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id
...