32226 matches found
bpf: mark a NULL call argument precise
...
wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
...
ALSA: ump: do not touch legacy_rmidi before it exists
...
Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
...
bpf: Don't infer non-NULL from a pointer with an unbounded offset
...
vhost/vdpa: reject VRING_NUM larger than device max
...
mptcp: close race between scheduler and state change
...
net: stmmac: fix TX descriptor availability check for TSO traffic
...
net: stmmac: xgmac2: disable RBUE in default RX interrupt mask
...
ALSA: caiaq: Fix potential double-free at error path
...
net: bridge: mcast: properly convert mglist to rcu
...
net/rds: use wq_has_sleeper() in release_in_xmit()
...
scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size
...
ipvs: fix reversed sequence option serialization
...
hsr: broadcast netlink notifications in the device's net namespace
...
virtio_input: reset device if input_register_device() fails
...
bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge
...
tracing: Take trace_array reference when opening a tracer options file
...
net: au1000: move free_irq out of the close-time spinlocked section
...
drm/amdgpu: fix buffer overflow during vBIOS update
...
smb/client: validate new EOF for zero range
...
accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
...
net/mlx5: E-Switch, prevent mc_list repopulation during vport disable
...
wifi: cfg80211: reject duplicate wiphy cipher suite entries
...
thunderbolt: Set tb->root_switch to NULL when domain is stopped
...
smb/server: fix tree connection leak in smb2_tree_connect()
...
net/sched: sfq: clamp quantum in change path
...
net: hinic: fix mailbox segment buffer overflow
...
wifi: iwlwifi: mvm: fix P2P-Device binding handling
...
smb: client: pin DFS superblock in iterator callback
...
smb/client: invalidate fscache for fallocate range operations
...
smb: client: reject short READ responses in CIFSSMBRead()
...
ksmbd: rate limit unmapped SID errors
...
erofs: preserve LZMA decoders on resize failure
...
drm/amdkfd: fix SMI event cross-process information leak
...
ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
...
net/sched: act_api: release all action references on NEWACTION failure
...
greybus: audio: bound the topology section sizes against the fetched size
...
bpf: Mark bpf_btf_find_by_name_kind() as sleepable
...
s390/ism: folio_put() after error
...
nvme: remove stale namespaces by NSID range during scan
...
btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()
...
scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
...
iommu/amd: Do not reallocate GA log buffers on resume
...
vduse: validate virtqueue alignment
...
net/rds: Don't sleep inside rds_ib_conn_path_shutdown
...
tipc: fix NULL deref in tipc_named_node_up() on empty publication list
...
nvdimm: pmem: keep PREFLUSH before data writes
...