32226 matches found
nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
...
riscv, bpf: Fix memory leak in bpf_jit_free
...
smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
...
firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published
...
RDMA/core: Fix potential use after free in ib_destroy_srq_user()
...
irqchip/renesas-rzg2l: Fix loss of interrupt
...
netfilter: nf_tables: move hardware offload step after building the chain blob
...
smack: fix incorrect task context in smack_msg_queue_msgrcv
...
RDMA/erdma: Fix CEQ tasklet use-after-free on removal
...
firmware_loader: do not queue completed sysfs fallback requests
...
rtc: pcf8563: fix clock provider leak on unbind
...
net: sparx5: fix sleep in atomic context in MAC table access
...
i3c: master: Fix recursive locking during device registration
...
misc: sgi-gru: remove interrupt-context page-table walks
...
net/smc: free pending qentry in smc_llc_flow_stop() before memset
...
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
...
RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
...
crypto: keembay - Initialize completion before requesting IRQ
...
i3c: master: Fix use-after-free of master->this
...
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
...
crypto: atmel-ecc - reject hardware ECDH without a public key
...
netfilter: nft_ct: move custom expectation support to helper
...
wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]
...
net/sched: sch_teql: restore skb->dev on the slave failure path
...
drm/msm: Only fini scheduler after successful init
...
bpf: Reject writes through untrusted BTF pointers
...
platform/surface: acpi-notify: Check ACPI companion before use
...
platform/x86: dell-wmi-base: Fix handling of ultra performance key
...
RDMA/siw: Fix use-after-free in siw_accept()
...
RDMA/core: Fix potential use after free in counter_release()
...
bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
...
Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
...
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
...
cxl/region: Fix use-after-free in find_pos_and_ways() error path
...
ksmbd: defer publishing granted locks to prevent UAF/double-free race
...
rapidio: clear mport->net when rio_add_net() fails
...
tty: clear cdev pointer after cdev_add() failure
...
net/sched: fq_pie: clamp default quantum to avoid signed overflow
...
bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
...
wifi: mt76: mt7915: unwind state on add_interface failure
...
swiotlb: Preserve allocation virtual address for dynamic pools
...
module/dups: Fix use-after-free in kmod_dup_req lifetime handling
...
HID: roccat: bound device-supplied profile index
...
btrfs: check if root is readonly when setting posix acl
...
scsi: ufs: debugfs: Reserve space for a string terminator
...
drm/sun4i: tcon: Drop TCON TOP device reference
...
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
...
firmware: arm_scmi: Fix requested device removal race
...