21727 matches found
net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
...
Potential denial of service in golang.org/x/crypto/ssh/agent
...
dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
...
net: mctp: Don't access ifa_index when missing
...
ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot
...
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot
...
f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data
...
net: lantiq_xrx200: restore buffer if memory allocation failed
...
USB: gadget: Fix use-after-free Read in usb_udc_uevent()
...
bpf: Fix a data-race around bpf_jit_limit.
...
bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
...
powerpc/rtas: Fix RTAS MSR[HV] handling for Cell
...
dma-buf/dma-resv: check if the new fence is really later
...
Libvirt: denial of service in xml parsing
...
net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY
...
PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption
...
PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
...
PostgreSQL libpq undersizes allocations, via integer wraparound
...
ipmi: Rework user message limit handling
...
sctp: Fix MAC comparison to be constant-time
...
xtensa: simdisk: add input size check in proc_write_simdisk
...
Revert "ipmi: fix msg stack when IPMI is disconnected"
...
media: mc: Clear minor number before put device
...
netfilter: nft_objref: validate objref and objrefmap expressions
...
btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
...
cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
...
ext4: guard against EA inode refcount underflow in xattr update
...
kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
...
pid: Add a judgment for ns null in pid_nr_ns
...
pwm: berlin: Fix wrong register in suspend/resume
...
net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
...
mount: handle NULL values in mnt_ns_release()
...
Squashfs: reject negative file sizes in squashfs_read_inode()
...
media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
...
ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
...
ext4: verify orphan file size is not too big
...
RGW DoS attack with empty HTTP header in S3 object copy
...
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
...
tracing: Do not let histogram values have some modifiers
...
drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini
...
mptcp: use the workqueue to destroy unaccepted sockets
...
net: usb: lan78xx: Limit packet length to skb->len
...
drm/amd/display: Do not set DRR on pipe Commit
...
scsi: mpi3mr: Bad drive in topology results kernel crash
...
KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace
...
mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
...
IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS
...
Chromium: CVE-2025-13042 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
...
tls: wait for pending async decryptions if tls_strp_msg_hold fails
...