32226 matches found
HID: hidpp: fix potential UAF in hidpp_connect_event()
...
ACPICA: add boundary checks in acpi_ps_get_next_field()
...
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
...
wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed
...
usbip: vhci_hcd: fix NULL deref in status_show_vhci
...
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
...
wifi: mac80211: avoid out-of-bounds access in monitor
...
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
...
Bluetooth: L2CAP: validate connectionless PSM length
...
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
...
ACPICA: add boundary checks in two places
...
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
...
ext4: skip extra isize expansion during mount to prevent deadlock
...
drm/amdkfd: fix UAF race in destroy_queue_cpsch
...
media: chips-media: wave5: Release m2m_ctx after Instance Removed from List
...
watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk
...
bpf: Mark bpf_refcount field as unique
...
drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq
...
staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
...
net: openvswitch: fix use-after-free of the flow table mask array
...
bfs: handle set_blocksize failures
...
scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()
...
crypto: ixp4xx - fix buffer chain unwind on allocation failure
...
vhost-scsi: flush backend after device ioctls
...
spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
...
wifi: mt76: mt7921: validate CLC firmware records
...
ACPICA: Fix condition check in acpi_ps_parse_loop()
...
drm/amd/pm: bound pp_dpm_set_pp_table() memcpy
...
iommu/arm-smmu-v3: Manage teardown with devm
...
ipv6: fix fib6 walker UAF on seq stop
...
wifi: iwlwifi: mld: purge async notifications upon nic error
...
drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
...
bpf: Reject non-scalar bpf_loop iteration counts
...
scsi: qla2xxx: Skip vport under deletion in report ID acquisition
...
RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()
...
ACPICA: Prevent adding invalid references
...
virt: acrn: Fix irqfd use-after-free during eventfd shutdown
...
serial: 8250: fix possible ISR soft lockup
...
smb: client: fail DACL rewrite when the new DACL exceeds 64K
...
f2fs: validate inline dentry name lengths before conversion
...
net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
...
wifi: iwlwifi: mvm: fix an off-by-1 boundary check
...
ACPICA: Add validation for node in acpi_ns_build_normalized_path()
...
btrfs: fix transaction use-after-free in raid stripe insertion
...
wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
...
ppp_async: drop the errored frame instead of resetting its headroom
...
smb/client: flush dirty data before punching a hole
...
net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().
...