32226 matches found
ksmbd: fix maximum allowed access checks
...
landlock: Fix use-after-free of the source's parent directory
...
perf: Fix addr_filter_ranges lifetime
...
s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
...
tracing: Keep the entry count when the histogram stats allocation fails
...
bpf: Mark NULL kptr stores precise
...
ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF
...
netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
...
PCI: plda: Protect root bus removal with rescan lock
...
net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put
...
ipv6: mcast: use rcu_assign_pointer() for __rcu list updates
...
tracing: Free histogram var refs regardless of how often they are referenced
...
tracing: Free histogram the field rejected for a bad modifier
...
ACPICA: validate handler object type in two places
...
bpf: Don't predict JMP32 pointer vs zero comparisons
...
net: hsr: free learned nodes on device setup failure
...
wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
...
staging: fbtft: make dirty_lock IRQ-safe
...
bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks
...
bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
...
net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
...
bpf: Fix NULL-ptr-deref in btf_var_show()
...
EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation
...
vxlan: reject dynamic fdb entries that reference a nexthop id
...
hpfs: handle set_blocksize failures
...
wifi: iwlwifi: mvm: fix a possible underflow
...
netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
...
ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()
...
net/rds: acquire the fastpath locks in rds_conn_shutdown()
...
reboot: fix cad_pid use-after-free race
...
netfilter: nf_log: unregister loggers before per-net teardown
...
wifi: ath9k_htc: don't store usb_device_id
...
staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
...
ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()
...
tracing/probes: Fix use-after-free on field name/type of events with multiple probes
...
net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()
...
Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect
...
smb: client: bound dirent name against end of SMB response in cifs_filldir
...
virtio_console: do not free control-out buffers on remove
...
PCI: rockchip: Protect root bus removal with rescan lock
...
ASoC: sprd: validate compress buffer sizes against fixed allocations
...
wifi: iwlwifi: mei: pass correct argument to function
...
tracing: Free histogram the var ref when its initialization fails
...
scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path
...
usb: core: hcd: fix possible deadlock in rh control transfers
...
net/mlx5e: Move representor vnic reporter to eswitch devlink port
...
usb: typec: ucsi: unregister debugfs entries on teardown
...
tls: reject the combination of TLS and sockmap
...