28424 matches found
serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
...
udp: fix potential use-after-free in tunnel segmentation
...
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
...
Input: evdev - fix information leak in evdev_pass_values()
...
net: atlantic: free stranded TX buffers on ring deinit
...
net/openvswitch: check Ethernet header length in key_extract()
...
net: usb: ipheth: fix carrier_work UAF on disconnect
...
net: openvswitch: reallocate update replies for mismatched IDs
...
netfilter: nf_conntrack: defer invalid log until after unlock
...
ring-buffer: Use current_context for safe per-CPU buffer swap
...
net/sched: act_gact, act_police: range check the fallback control action
...
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
...
sctp: fix use-after-free of cached ASCONF chunk
...
mm/huge_memory: fix huge_zero_pfn race
...
net/packet: reset the MAC header on the packet-socket transmit path
...
smb: client: Fix use-after-free in cifs_try_adding_channels()
...
ovl: don't warn when the mount is completed from another user namespace
...
net: smc: fix splice entry lifetime imbalance in smc_rx_splice
...
net/mlx5: fw_tracer, return NULL on create error
...
tcp: fix TFO max_qlen accounting across reuseport migration
...
xdp: reject clones that overrun skb_shared_info tailroom
...
bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
...
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
...
fbdev: bitblit: bound-check glyph index in bit_cursor()
...
net/sched: reject overly deep qdisc hierarchies
...
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
...
eventfs: Use children field for rcu head and add memory barriers
...
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
...
net/smc: fix TOCTOU race between smc_listen_out() and listener close
...
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
...
net/x25: fix use-after-free of the socket by its timers
...
sctp: clear new_transport when removing a peer
...
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
...
packet: use consistent hard_header_len in TX_RING send path
...
net: atlantic: free RX pages of consumed but not refilled buffers
...
ipvs: stop estimator after disabled calc phase
...
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()
...
ima: Instantiate file_truncate and path_truncate hooks
...
tipc: read le->link under the node lock in tipc_node_link_down()
...
net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()
...
ipv6: prevent in6_dev_get() from resurrecting inet6_dev
...
vxlan: do not arm the ageing timer on a device that is down
...
perf/core: Fix group leader use-after-free after sibling detach
...
veth: fix skb length accounting after XDP frag adjustment
...
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
...
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
...
serial: 8250_dma: Clear stale RX state on shutdown
...
tls: don't leave a full plaintext sk_msg ring unpushed
...