32226 matches found
tracing: Fix memory corruption from the histogram stacktrace modifier
...
tipc: Dont send random pad bytes in RESET/ACTIVATE messages
...
cifs: validate idmap key payload length
...
i2c: smbus: reject oversized block transfers in the common path
...
ksmbd: safely drain sessions during logoff
...
ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()
...
btrfs: do not force reloc root creation during qgroup_account_snapshot()
...
net: macb: fix NULL pointer dereference on unbind with fixed-link
...
PCI: iproc: Protect root bus removal with rescan lock
...
btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
...
net: ethernet: cortina: Count dropped frames as NAPI work
...
bonding: alb: fix uninitialized transport header access in alb_determine_nd()
...
net: ibm: emac: mal: fix potential system hang in mal_remove()
...
media: v4l2-ctrls: validate HEVC tile counts
...
coresight: perf: Retrieve path and source from event data
...
Bluetooth: btintel: validate version TLV value lengths
...
mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0
...
wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
...
ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()
...
net/mlx5e: Fix use-after-free race in sample_restore_put()
...
Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev
...
clocksource/drivers/timer-sun4i: Advertise a real minimum delta
...
mptcp: prevent race between disconnect() and rtx
...
bpf: Fix NULL-ptr-deref when showing a void BTF type
...
drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
...
drm/amdkfd: Check bounds on allocate_doorbell
...
ieee802154: hwsim: serialize pib updates to fix double-free
...
ALSA: usbusx2y: validate URB actual_length in interrupt callback
...
LoongArch: Add DIRECT_MAP_PHYSMEM_END definition
...
drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction
...
btrfs: fix reloc root cleanup in merge_reloc_roots()
...
Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
...
usb: xusbatm: don't rely on id table pointer arithmetic
...
omfs: handle set_blocksize failures
...
vdpa_sim_blk: reject out-of-range sector starts
...
ipvs: reject invalid states in connection template sync records
...
thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()
...
perf/x86/intel/pt: Fix stop/start with no update
...
smb: client: reject userspace cifs.idmap descriptions
...
tick/broadcast: Plug clockevents replacement race
...
drm/amdkfd: Fix OOB memory exposure in get_wave_state()
...
bpf: reject BPF_PSEUDO_FUNC reference to the main program
...
drm/xe: Fix null pointer dereference in devcoredump cleanup
...
ipv6: flowlabel: cap duplicate leases per socket
...
netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
...
btrfs: restore active device pointers after failed sprout
...
netfilter: nfnetlink_log: cope with concurrent instance destruction
...
perf/x86/intel: Prevent drain_pebs() reentry
...