28424 matches found
KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active
...
i2c: imx: Cancel hrtimer before clearing slave pointer
...
can: peak_usb: validate uCAN receive record lengths
...
btrfs: zoned: fix deadlock between metadata writeback and transaction commit
...
rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
...
hwmon: (nct6775-core) Prevent access to unsupported weight registers
...
keys: fix out-of-bounds read in keyring_get_key_chunk()
...
pinctrl: devicetree: don't free uninitialized dev_name on error path
...
rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling
...
hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
...
bpf: Guard __get_user acesss with access_ok for uprobe_multi data
...
Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass
...
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
...
can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
...
drm/amdkfd: hold event_mutex while checkpointing CRIU events
...
xprtrdma: Fix ep kref imbalance on ADDR_CHANGE
...
mm/page_reporting: use system_freezable_wq to fix UAF during suspend
...
audit: fix potential use-after-free in audit_del_rule()
...
RDMA/bnxt_re: Proper rollback if the ioremap fails
...
qede: sync udp_tunnel ports outside qede_lock in the recovery path
...
ntfs: detect mapping-pairs LCN accumulator overflow
...
keys: make keyring key-chunk byte order agree with keyring_diff_objects()
...
net: openvswitch: fix skb leak on flow key update failure during ct
...
netfilter: ipset: do not update comments from kernel-side hash adds
...
md/raid1,raid10: fix error-path detection with md_cloned_bio()
...
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
...
RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
...
netfilter: nf_tables: make nft_object rhltable per table
...
vxlan: use pskb_network_may_pull() in route_shortcircuit()
...
net: do not send ICMP/NDISC Redirects when peer allocation fails
...
can: ems_usb: validate CPC message lengths
...
ALSA: usb-audio: Clamp frame size in implicit-feedback mode
...
md/raid10: fix writes_pending and barrier reference leaks on discard failures
...
RDMA/nldev: Fix locking when accessing mr->pd
...
tcp: clear sock_ops cb flags before force-closing a child socket
...
Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
...
bpf: Guard conntrack opts error writes
...
Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
...
net: serialize netif_running() check in enqueue_to_backlog()
...
Bluetooth: HIDP: reject frames without a transaction header
...
OPP: Fix race between OPP addition and lookup
...
veth: convert frag_list skbs before running XDP
...
ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
...
smb: client: fix busy dentry warning on unmount after DIO
...
hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read
...
bpf: Cancel special fields on map value recycle
...
md/raid5: avoid R5_Overlap races while breaking stripe batches
...
net/liquidio: drop cached VF pci_dev LUT
...