28314 matches found
greybus: audio: bound the topology section sizes against the fetched size
...
bpf: Mark bpf_btf_find_by_name_kind() as sleepable
...
s390/ism: folio_put() after error
...
nvme: remove stale namespaces by NSID range during scan
...
btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()
...
scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
...
iommu/amd: Do not reallocate GA log buffers on resume
...
vduse: validate virtqueue alignment
...
net/rds: Don't sleep inside rds_ib_conn_path_shutdown
...
tipc: fix NULL deref in tipc_named_node_up() on empty publication list
...
nvdimm: pmem: keep PREFLUSH before data writes
...
net/sched: defer qdisc freeing after failed creation
...
vxlan: initialize _md in vxlan_xmit_one()
...
ksmbd: fix maximum allowed access checks
...
landlock: Fix use-after-free of the source's parent directory
...
perf: Fix addr_filter_ranges lifetime
...
s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
...
tracing: Keep the entry count when the histogram stats allocation fails
...
bpf: Mark NULL kptr stores precise
...
ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF
...
netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
...
PCI: plda: Protect root bus removal with rescan lock
...
net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put
...
ipv6: mcast: use rcu_assign_pointer() for __rcu list updates
...
tracing: Free histogram var refs regardless of how often they are referenced
...
tracing: Free histogram the field rejected for a bad modifier
...
bpf: Don't predict JMP32 pointer vs zero comparisons
...
net: hsr: free learned nodes on device setup failure
...
wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
...
staging: fbtft: make dirty_lock IRQ-safe
...
bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks
...
bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
...
net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
...
bpf: Fix NULL-ptr-deref in btf_var_show()
...
EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation
...
vxlan: reject dynamic fdb entries that reference a nexthop id
...
hpfs: handle set_blocksize failures
...
wifi: iwlwifi: mvm: fix a possible underflow
...
netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
...
ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()
...
net/rds: acquire the fastpath locks in rds_conn_shutdown()
...
reboot: fix cad_pid use-after-free race
...
netfilter: nf_log: unregister loggers before per-net teardown
...
wifi: ath9k_htc: don't store usb_device_id
...
staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
...
ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()
...
tracing/probes: Fix use-after-free on field name/type of events with multiple probes
...
net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()
...