28326 matches found
Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
...
fbdev: vfb: defer cleanup until the last reference
...
btrfs: zoned: finish active block group cleanup if call_zone_finish() fails
...
cpufreq: initialize policy rwsem before sysfs publication
...
ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
...
genirq/proc: Size interrupt directory names for 10-digit interrupt numbers
...
SOAP: Unbounded Recursion in Server-Side cleanup_xml_node
...
bonding: do not clear curr_active_slave prematurely when releasing all slaves
...
btrfs: zstd: fix lost wakeup when waiting for a workspace
...
media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
...
net/sched: drr: clamp quantum in change class
...
Cross-origin credential leak in HTTP stream wrapper redirects
...
ipv6: sr: restore network header before routing and forwarding
...
jfs: handle set_blocksize failures
...
drm/sysfb: simpledrm: Improve stride validation
...
ALSA: us122l: Prevent write upgrades for read mappings
...
Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
...
vdpa_sim_net: check TX pull result before RX copy
...
net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
...
accel/ivpu: Limit firmware log name prints to field size
...
mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()
...
configfs: unhash the dentry before dropping the item in rmdir
...
Integer overflow to buffer overflow in soap HTTP parsing
...
vhost-vdpa: protect config_ctx from being freed under the config callback
...
svcrdma: Reject Write/Reply chunks with segcount 0
...
Bluetooth: btusb: Fix UAF of btusb_data by rx_work
...
smb/client: validate new EOF for insert range
...
bpf: Mark syscall helpers as sleepable
...
TLS Hostname Verification Falls Back to CN After SAN Mismatch
...
drm/gud: validate GUD_ROTATION_0 is present in supported rotations
...
ACPICA: Add package limit checks in parser functions
...
Various packet overreads in mysqlnd_writeprotocol.c
...
netfilter: cttimeout: prevent UAF during module unload
...
octeontx2-pf: reset HTB scheduler topology before freeing queues
...
bpf: Preserve inner map identity in callback frames
...
net/sched: fq_pie: clamp quantum in change path
...
driver core: Avoid warning when removing a device while its supplier is unbinding
...
Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
...
tracing: Fix memory corruption from a "STACKTRACE" histogram key
...
Emacs: emacs: arbitrary code execution in flymake mode
...
powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver
...
perf/core: Allow list_del during perf_event_overflow()
...
Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
...
OOB read / info leak in convert.* stream filters when line-break-chars contains NUL
...
blk-cgroup: fix leaks and online flag on radix_tree_insert failure
...
ufs: create the root dentry after loading cylinder metadata
...
nvme-rdma: fix -EIO cleanup order in queue_rq
...
IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
...