28423 matches found
ClamAV ZIP File Format Processing Memory Corruption Vulnerability
...
media: pwc: Return queued buffers on start_streaming() failure
...
ClamAV ZIP File Format Processing Memory Corruption Vulnerability
...
ClamAV PESpin File Format Processing Integer Overflow Vulnerability
...
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
...
ClamAV PDF File Format Processing Memory Corruption Vulnerability
...
drm/amdgpu: Fix kernel panic during driver load failure
...
ClamAV Mach-O File Format Processing Memory Corruption Vulnerability
...
Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
...
ClamAV GPT File Format Processing Memory Corruption Vulnerability
...
wifi: wilc1000: validate assoc response length before subtracting header
...
ClamAV XAR File Format Processing Memory Corruption Vulnerability
...
tipc: fix infinite loop in __tipc_nl_compat_dumpit
...
Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler
...
super: fix emergency thaw deadlock on frozen block devices
...
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
...
drm/vc4: Shut down BO cache timer before teardown
...
media: cedrus: skip invalid H.264 reference list entries
...
hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
...
drm/nouveau: fix reversed error cleanup order in ucopy functions
...
drm/amdgpu: fix aperture mapping leak
...
iommu/amd: Bound the early ACPI HID map
...
pppoe: reload header pointer after dev_hard_header()
...
media: sun4i-csi: Return queued buffers on start_streaming() failure
...
wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
...
wan: wanxl: Only reset hardware after BAR mapping
...
sctp: avoid auth_enable sysctl UAF during netns teardown
...
media: rtl2832: fix use-after-free in rtl2832_remove()
...
iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
...
rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
...
staging: vme_user: fix location monitor leak in tsi148 bridge
...
mptcp: pm: userspace: fix use-after-free in get_local_id
...
Bluetooth: btusb: validate Realtek vendor event length
...
libceph: remove debugfs files before client teardown
...
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
...
smb: client: validate DFS referral PathConsumed
...
net/sched: act_tunnel_key: Defer dst_release to RCU callback
...
mctp: serial: handle zero-length frames to prevent rx buffer overflow
...
mac802154: hold an interface reference across the scan worker
...
ftrace: Add global mutex to serialize trace_parser access
...
debugobjects: Plug race against a concurrent OOM disable
...
fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
...
Bluetooth: RFCOMM: Fix session UAF in set_termios
...
hwmon: occ: validate poll response sensor blocks
...
ksmbd: pin conn during async oplock break notification
...
mtd: fix double free and WARN_ON in add_mtd_device() error paths
...
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
...
media: saa7134: Fix a possible memory leak in saa7134_video_init1
...