28326 matches found
virtiofs: fix UAF on submount umount
...
apparmor: fix use-after-free in rawdata dedup loop
...
NFSD: Fix SECINFO_NO_NAME decode error cleanup
...
9p: avoid putting oldfid in p9_client_walk() error path
...
media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
...
apparmor: mediate the implicit connect of TCP fast open sendmsg
...
tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
...
vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
...
blk-cgroup: fix UAF in __blkcg_rstat_flush()
...
mac802154: llsec: add skb_cow_data() before in-place crypto
...
ocfs2: reject oversized group bitmap descriptors
...
pNFS: Fix use-after-free in pnfs_update_layout()
...
keys: Pin request_key_auth payload in instantiate paths
...
KEYS: fix overflow in keyctl_pkey_params_get_2()
...
wifi: rtw88: usb: fix memory leaks on USB write failures
...
batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
...
nfsd: fix posix_acl leak on SETACL decode failure
...
KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
...
fuse: re-lock request before replacing page cache folio
...
NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
...
net: skmsg: preserve sg.copy across SG transforms
...
serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
...
batman-adv: tp_meter: restrict number of unacked list entries
...
hdlc_ppp: sync per-proto timers before freeing hdlc state
...
KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level
...
batman-adv: v: prevent OGM aggregation on disabled hardif
...
bpf: use kvfree() for replaced sysctl write buffer
...
nfsd: reset write verifier on deferred writeback errors
...
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
...
netfilter: nf_tables: add hook transactions for device deletions
...
nfsd: release layout stid on setlease failure
...
esp: fix page frag reference leak on skb_to_sgvec failure
...
Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
...
i2c: core: fix adapter registration race
...
drm/msm: always recover the gpu
...
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
...
NFSv4/flexfiles: reject zero filehandle version count
...
block: Avoid mounting the bdev pseudo-filesystem in userspace
...
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
...
drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring
...
gcov: use atomic counter updates to fix concurrent access crashes
...
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
...
NGINX ngx_http_ssi_module vulnerability
...
NGINX Map directive and Regex matching vulnerability
...
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
Excon: redact additional sensitive/risky headers when following redirects
...
Squid: Memory corruption in cache_digest reply handling
...