23105 matches found
iommufd: Don't overflow during division for dirty tracking
...
9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
...
Bluetooth: SCO: Fix UAF on sco_conn_free
...
exfat: validate cluster allocation bits of the allocation bitmap
...
x86: fix clear_user_rep_good() exception handling annotation
...
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
...
net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
...
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
...
Bluetooth: MGMT: cancel mesh send timer when hdev removed
...
drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
...
ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
...
mm/secretmem: fix use-after-free race in fault handler
...
cifs: client: fix memory leak in smb3_fs_context_parse_param
...
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
...
sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
...
tipc: Fix use-after-free in tipc_mon_reinit_self().
...
drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
...
NFSD: free copynotify stateid in nfs4_free_ol_stateid()
...
smb/server: fix possible memory leak in smb2_read()
...
smb/server: fix possible refcount leak in smb2_sess_setup()
...
net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
...
drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
...
exfat: fix improper check of dentry.stream.valid_size
...
Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
...
Apache HTTP Server: CGI environment variable override
...
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
...
Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF
...
Quadratic complexity in node ID cache clearing
...
KVM: arm64: Check the untrusted offset in FF-A memory share
...
devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
...
net/mlx5: Clean up only new IRQ glue on request_irq() failure
...
ocfs2: clear extent cache after moving/defragmenting extents
...
be2net: pass wrb_params in case of OS2BMC
...
hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
...
most: usb: Fix use-after-free in hdm_disconnect
...
vsock: Ignore signal/timeout on connect() if already established
...
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
...
hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
...
scsi: sg: Do not sleep in atomic context
...
net: openvswitch: remove never-working support for setting nsh fields
...
mptcp: fix race condition in mptcp_schedule_work()
...
nios2: ensure that memblock.current_limit is set when setting pfn limits
...
sctp: avoid NULL dereference when chunk data buffer is missing
...
mptcp: fix a race in mptcp_pm_del_add_timer()
...
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
...
Improper validation of <img> tag size in Text component parser
...
Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
...
Input: cros_ec_keyb - fix an invalid memory access
...