32226 matches found
wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
...
locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
...
net: dsa: sja1105: flower: reject cross-chip redirect
...
md/raid5-ppl: fix use-after-free in ppl_do_flush()
...
spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM
...
ext4: fix circular lock dependency in ext4_ext_migrate
...
scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
...
mmc: davinci: avoid NULL deref of host->data in IRQ handler
...
apparmor: policy_int make sure list heads are initialized before fail path
...
powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()
...
Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
...
mm/secretmem: properly account locked pages
...
drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id
...
i3c: master: Fix device_register() error path
...
RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()
...
arm64: mm: Fix the lockless page-table walk in show_pte()
...
rds: filter RDS_INFO_* getsockopt by caller's netns
...
RDMA/efa: Fix PBL chunk length computation
...
smb/client: zero-initialize stack-allocated cifs_open_info_data
...
media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
...
smb: client: fix races in cifsd thread creation
...
wifi: rtw89: fix HE extended capability length check
...
drm/amdgpu: Bound GPIO I2C table entry count from VBIOS
...
ocfs2: fix circular locking dependency in ocfs2_init_acl()
...
regulator: tps6594: Fix device node reference leaks in multiphase loop
...
ipv6: addrconf: fix temp address generation after prefix deprecation
...
signal: avoid shared siginfo namespace rewrites
...
gfs2: fix quota init duplicate scan
...
wifi: rsi: validate beacon length before fixed buffer copy
...
of: fix out-of-bounds read in of_alias_scan() stem parser
...
Containerd has image-pull DoS via crafted OCI index graph amplification
...
ACPICA: validate byte_count in acpi_ps_get_next_package_length()
...
pinctrl: bcm2835: Don't remove an unregistered GPIO chip
...
s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
...
drm/amdgpu: harden FRU PIA parsing with bounded helpers
...
Out-of-bounds read in libXi's XQueryDeviceState()
...
wifi: iwlwifi: pcie: null RX pointers after free
...
Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing
...
wifi: iwlwifi: acpi: validate WGDS table revision index
...
Out-of-bounds read in libXi's XI2 class parser
...
Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()
...
net: qrtr: fix node refcount leak on ctrl packet alloc failure
...
Out-of-bounds read in libXi's XListInputDevices() class parsing
...
wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()
...
Out-of-bounds read in libXi's XListInputDevices()
...
wifi: cfg80211: validate assoc response length before status and IE access
...
affs: handle set_blocksize failures
...
staging: media: tegra-video: fix of_node_put() on VIP parse errors
...