28400 matches found
wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock
...
mm/damon/core: validate ranges in damon_set_regions()
...
media: ti: vpe: unwind v4l2 device registration on probe error
...
media: pci: dm1105: Free allocated workqueue
...
net/sched: serialize qdisc_rtab_list against concurrent get/put
...
drm/amdgpu/vce: fix integer overflow in image size
...
btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()
...
libceph: refresh auth->authorizer_buf{,_len} after authorizer update
...
gve: fix Rx queue stall on alloc failure
...
vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
...
media: airspy: Return queued buffers on start_streaming() failure
...
tcp: challenge ACK for non-exact RST in SYN-RECEIVED
...
media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()
...
tracing: Fix resource leak on mmiotrace trace_pipe close
...
rbd: Reset positive result codes to zero in object map update path
...
HID: wacom: stop hardware after post-start probe failures
...
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
...
wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
...
wifi: ath6kl: fix use-after-free in aggr_reset_state()
...
comedi: comedi_parport: deal with premature interrupt
...
ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
...
dpaa2-eth: put MAC endpoint device on disconnect
...
media: radio-si476x: Unregister v4l2_device on probe failure
...
drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
...
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
...
media: msi2500: Return queued buffers on start_streaming() failure
...
userfaultfd: prevent registration of special VMAs
...
KVM: x86/mmu: Fix use-after-free on vendor module reload
...
wifi: cfg80211: cancel sched scan results work on unregister
...
drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
...
Bluetooth: hci_qca: Clear memdump state on invalid dump size
...
pds_core: fix use-after-free on workqueue during remove
...
ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
...
libceph: Fix multiplication overflow in decode_new_up_state_weight()
...
drm/dp/mst: fix buffer overflows in sideband chunk accumulation
...
drm/virtio: bound EDID block reads to the response buffer
...
wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
...
media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
...
mac802154: llsec: reject frames shorter than the authentication tag
...
iomap: fix out-of-bounds bitmap_set() with zero-length range
...
usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
...
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
...
media: v4l2-ctrls: validate HEVC active reference counts
...
net: slip: serialize receive against buffer reallocation
...
drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()
...
drop_monitor: fix size calculations for 64-bit attributes
...
wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
...
wifi: brcmfmac: initialize SDIO data work before cleanup
...