32226 matches found
drm/vc4: Use managed KMS polling to fix UAF on unbind
...
RDMA/ucma: Serialize join and leave on copy_to_user failure
...
smb: client: cancel reconnect work in clean_demultiplex_info()
...
netfilter: nf_nat: unregister and release hooks on error
...
wifi: wilc1000: fix out-of-bounds read in P2P public action frames
...
wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
...
xfrm: save input state data before secpath resets
...
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
...
x86/kprobes: Fix crash when probing CS CALL instructions
...
Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access
...
tcp: exclude old ACKs from tcp fast path
...
openvswitch: avoid reallocating confirmed conntrack labels
...
drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown
...
wifi: mac80211: unlist vifs when their netdev is unregistered
...
exec: Cleanup POSIX timers right after de_thread()
...
net: ethernet: cortina: Ack RX overrun interrupt correctly
...
Bluetooth: hci_qca: Do not write to the serial port after it is closed
...
Input: cyttsp5 - clamp the HID report size before memcpy
...
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
...
smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
...
clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate
...
net: fddi: skfp: fix NULL deref when setting the MAC address while down
...
smb: client: fix server->total_read for compound encrypted PDUs
...
neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.
...
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
...
arm64: percpu: Fix LSE operations on {8,16}-bit types
...
xfrm: fix compat ALLOCSPI request use-after-free
...
wifi: mac80211: refuse to make a monitor active when it has no queue
...
ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
...
xfrm: serialize state GC with device state flush
...
dmaengine: wait for RCU readers before releasing dma_device
...
ALSA: hda: trace PCM open only after assigning a stream
...
mmc: spi: reset bytes_xfered before retrying CRC failures
...
wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
...
wifi: p54: validate curve data length in the calibration curve converters
...
pppoatm: ensure a writable skb header and linear data
...
smb: client: fix potential OOB read in smb3_enum_snapshots()
...
esp: downgrade zerocopy managed frags before mutating skb frags
...
wifi: mac80211: set up the TX info early to fix failure paths
...
tcp: do not let tcp_rmem be set below 4096
...
wifi: cfg80211: check IP header size in cfg80211_classify8021d()
...
net: lock the socket in sock_gettstamp()
...
KEYS: trusted: Fix tpm2_load_cmd() boundary check
...
wifi: libipw: reject too-short beacon and probe responses
...
btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()
...
memstick: ms_block: destroy io_queue workqueue on removal
...
scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()
...
Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length
...