24507 matches found
wifi: brcmsmac: Fix dma_free_coherent() size
...
EDAC/mc: Fix error path ordering in edac_mc_alloc()
...
Chromium: CVE-2026-6920 Out of bounds read in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
...
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
...
ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
...
NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
...
xfrm: clear trailing padding in build_polexpire()
...
af_unix: read UNIX_DIAG_VFS data under unix_state_lock
...
batman-adv: reject oversized global TT response buffers
...
openvswitch: validate MPLS set/set_masked payload length
...
HID: alps: fix NULL pointer dereference in alps_raw_event()
...
netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
...
rxrpc: fix reference count leak in rxrpc_server_keyring()
...
bridge: br_nd_send: linearize skb before parsing ND options
...
media: as102: fix to not free memory after the device is registered in as102_usb_probe()
...
net: sched: act_csum: validate nested VLAN headers
...
mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
...
netfilter: xt_multiport: validate range encoding in checkentry
...
PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
...
openvswitch: defer tunnel netdev_put to RCU release
...
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
...
KVM: x86: Use scratch field in MMIO fragment to hold small write values
...
net: stmmac: fix integer underflow in chain mode
...
rxrpc: only handle RESPONSE during service challenge
...
net/sched: sch_netem: fix out-of-bounds access in packet corruption
...
mptcp: fix slab-use-after-free in __inet_lookup_established
...
netfilter: ip6t_eui64: reject invalid MAC header for all packets
...
pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
...
x86/CPU: Fix FPDSS on Zen1
...
nfc: llcp: add missing return after LLCP_CLOSED checks
...
KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish
...
rxrpc: Fix key reference count leak from call->key
...
seg6: separate dst_cache for input and output paths in seg6 lwtunnel
...
batman-adv: hold claim backbone gateways by reference
...
vfio/xe: Reorganize the init to decouple migration from reset
...
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
...
ASoC: qcom: q6apm: move component registration to unmanaged version
...
smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()
...
ksmbd: validate EaNameLength in smb2_get_ea()
...
net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
...
PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
...
xfrm_user: fix info leak in build_report()
...
i2c: s3c24xx: check the size of the SMBUS message before using it
...
arm64: mm: Handle invalid large leaf mappings correctly
...
SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT
...
rxrpc: Fix call removal to use RCU safe deletion
...
ksmbd: require 3 sub-authorities before reading sub_auth[2]
...