| 2026-11-04 10:37 UTC |
seccomp: fix user-notification state transitions |
1 |
parri.andrea@gmail.com |
-
|
| 2026-10-07 09:51 UTC |
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute |
3 |
benquike@gmail.com |
skipped
|
| 2026-10-07 09:47 UTC |
serial: core: fix baud rate fallback loop and baud_base overflow |
8 |
benquike@gmail.com |
skipped
|
| 2026-10-01 18:21 UTC |
ipv6: rpl: unclone the skb before modifying the packet |
1 |
andrea.mayer@uniroma2.it |
finished
in 4h24m0s
|
| 2026-09-30 12:59 UTC |
serial: core: fix baud rate fallback loop and baud_base overflow |
7 |
benquike@gmail.com |
skipped
|
| 2026-09-30 08:19 UTC |
fs/qnx6: fix buffer head leaks, double free, and inode validation |
5 |
benquike@gmail.com |
skipped
|
| 2026-09-30 07:59 UTC |
usb: gadget: f_printer: bound PNP string copy length in printer_func_setup() |
4 |
benquike@gmail.com |
finished
in 3h31m0s
|
| 2026-09-30 07:52 UTC |
USB: serial: garmin_gps: validate packet data length in nat_receive() |
4 |
benquike@gmail.com |
finished
in 4h10m0s
|
| 2026-09-30 07:48 UTC |
serial: fix IRQ chain race, baud fallback, and uartclk overflow |
6 |
benquike@gmail.com |
skipped
|
| 2026-09-30 07:19 UTC |
ieee802154: ca8210: fix stack and slab out-of-bounds accesses |
3 |
benquike@gmail.com |
skipped
|
| 2026-09-30 06:59 UTC |
drm/gud: fix probe validation, shadow_buf UAF, and bulk_len divide-by-zero |
2 |
benquike@gmail.com |
skipped
|
| 2026-09-30 04:46 UTC |
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute |
2 |
benquike@gmail.com |
finished
in 4h5m0s
|
| 2026-09-30 04:21 UTC |
isofs: bound empty directory blocks in isofs_read_level3_size() |
2 |
benquike@gmail.com |
skipped
|
| 2026-09-30 04:12 UTC |
serial: fix IRQ chain race, baud fallback, and uartclk overflow |
5 |
benquike@gmail.com |
finished
in 4h33m0s
|
| 2026-09-30 03:15 UTC |
fs/qnx6: fix buffer head leaks, double free, and inode validation |
3 |
benquike@gmail.com |
finished
in 3h51m0s
|
| 2026-09-27 22:50 UTC |
qnx6: keep the top-level pointer index unsigned in qnx6_block_map() |
1 |
matthias.goergens@gmail.com |
finished
in 4h13m0s
|
| 2026-09-26 08:35 UTC |
isofs: bound empty directory blocks in isofs_read_level3_size() |
1 |
matthias.goergens@gmail.com |
finished
in 3h46m0s
|
| 2026-09-25 15:14 UTC |
qnx6: stale superblock #1 use and undefined shifts |
1 |
matthias.goergens@gmail.com |
skipped
|
| 2026-09-24 09:36 UTC |
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST |
4 |
benquike@gmail.com |
skipped
|
| 2026-09-24 07:51 UTC |
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST |
3 |
benquike@gmail.com |
skipped
|
| 2026-09-24 07:16 UTC |
af_unix: fix inq_len accounting and consumed OOB skb handling in unix_stream_read_skb() |
2 |
benquike@gmail.com |
finished
in 3h59m0s
|
| 2026-09-24 07:07 UTC |
hfsplus: validate inline xattr record size against entrylength |
2 |
benquike@gmail.com |
finished
in 4h16m0s
|
| 2026-09-24 07:04 UTC |
hfs: validate allocation block parameters in hfs_mdb_get() |
2 |
benquike@gmail.com |
finished
in 4h1m0s
[1 findings]
|
| 2026-09-24 06:44 UTC |
drm/udl: fix EDID short transfer check and probe USB cleanup |
2 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-24 06:35 UTC |
io_uring: fix CQE32 and CQE_MIXED ring refill handling |
2 |
benquike@gmail.com |
finished
in 4h0m0s
|
| 2026-09-24 06:22 UTC |
ieee802154: ca8210: fix stack and slab out-of-bounds accesses |
3 |
benquike@gmail.com |
skipped
|
| 2026-09-24 06:04 UTC |
serial: core: reject baud_base values that overflow port->uartclk in uart_set_info() |
4 |
benquike@gmail.com |
finished
in 4h17m0s
|
| 2026-09-24 05:46 UTC |
scsi: sg: finish request on error in sg_read() |
2 |
benquike@gmail.com |
finished
in 48m0s
[1 findings]
|
| 2026-09-22 09:30 UTC |
ieee802154: ca8210: fix stack and slab out-of-bounds accesses |
3 |
benquike@gmail.com |
skipped
|
| 2026-09-22 02:32 UTC |
seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted |
5 |
benquike@gmail.com |
finished
in 4h5m0s
|
| 2026-09-21 05:48 UTC |
af_unix: decrement u->inq_len when skipping unread OOB skb in manage_oob() |
2 |
benquike@gmail.com |
finished
in 4h22m0s
|
| 2026-09-21 05:27 UTC |
PCI/VGA: fix inverted vga_tryget() return check in vga_arb_write() |
2 |
benquike@gmail.com |
finished
in 2h19m0s
|
| 2026-09-21 05:10 UTC |
mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() |
2 |
benquike@gmail.com |
finished
in 3h56m0s
|
| 2026-09-21 04:59 UTC |
fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT |
2 |
benquike@gmail.com |
finished
in 4h8m0s
|
| 2026-09-21 04:40 UTC |
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST |
2 |
benquike@gmail.com |
finished
in 4h2m0s
|
| 2026-09-21 04:25 UTC |
qnx6: validate di_filelevels in qnx6_iget() |
2 |
benquike@gmail.com |
finished
in 4h30m0s
|
| 2026-09-21 03:25 UTC |
ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 |
2 |
benquike@gmail.com |
finished
in 4h26m0s
|
| 2026-09-21 03:02 UTC |
USB: serial: garmin_gps: validate packet data length in nat_receive() |
4 |
benquike@gmail.com |
finished
in 1h58m0s
|
| 2026-09-21 02:20 UTC |
char: hpet: prevent hard-IRQ divide-by-zero in hpet_interrupt() via HPET_IRQFREQ |
2 |
benquike@gmail.com |
finished
in 4h7m0s
|
| 2026-09-21 00:33 UTC |
perf/core: fix user->locked_vm leak on secondary mmap() |
2 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-20 23:52 UTC |
certs: x509: duplicate cert->tbs when sig->algo_takes_data is set |
2 |
benquike@gmail.com |
finished
in 4h16m0s
|
| 2026-09-20 23:17 UTC |
usb: core: clear both ep_in and ep_out for non-ep0 control endpoints |
2 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-20 18:59 UTC |
seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted |
4 |
benquike@gmail.com |
finished
in 4h15m0s
|
| 2026-09-20 18:14 UTC |
cgroup/cpuset: return PERR_NOCPUS in remote_partition_enable() |
3 |
benquike@gmail.com |
skipped
|
| 2026-09-19 22:34 UTC |
netlabel: calipso, x509: clean up ADDRSELECT on DOI removal and check AKID len |
1 |
benquike@gmail.com |
finished
in 5h16m0s
|
| 2026-09-19 22:34 UTC |
ieee802154: cc2520, mcr20a: reject invalid RX frame lengths from SPI FIFO |
1 |
benquike@gmail.com |
skipped
|
| 2026-09-19 22:34 UTC |
ieee802154: ca8210: fix SPI RX length validation and FIFO out-of-bounds read |
1 |
benquike@gmail.com |
skipped
|
| 2026-09-19 22:34 UTC |
ieee802154: hwsim: fix edge allocation leak and netlink attribute validation |
1 |
benquike@gmail.com |
finished
in 4h2m0s
|
| 2026-09-19 22:34 UTC |
net: wan: lapbether: validate frame length and headroom in lapbeth_rcv() and xmit |
1 |
benquike@gmail.com |
finished
in 4h11m0s
|
| 2026-09-19 22:34 UTC |
net: slip: fix out-of-bounds access on short CSLIP packets |
1 |
benquike@gmail.com |
finished
in 2h21m0s
|
| 2026-09-19 22:34 UTC |
atm: br2684, pppoatm: add missing pskb_may_pull() and headroom checks |
1 |
benquike@gmail.com |
finished
in 2h55m0s
|
| 2026-09-19 22:34 UTC |
net/rds: fix incoming message refcount leak and header bounds check in rds_recv.c |
1 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-19 22:34 UTC |
can: j1939: fix transport session leak and socket bind/connect validation |
1 |
benquike@gmail.com |
finished
in 4h8m0s
|
| 2026-09-19 22:26 UTC |
loop: restore lo_backing_file, gfp_mask, and uevent_suppress on loop_configure() error |
1 |
benquike@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 22:26 UTC |
qnx4: validate xblk_num_xtnts and rootdir size in qnx4_block_map() and mount |
1 |
benquike@gmail.com |
finished
in 4h53m0s
|
| 2026-09-19 22:26 UTC |
omfs: fix divide-by-zero on mount and bitmap slab-out-of-bounds accesses |
1 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-19 22:26 UTC |
minix: validate s_imap_blocks and s_zmap_blocks in minix_check_superblock() |
1 |
benquike@gmail.com |
finished
in 4h36m0s
|
| 2026-09-19 22:26 UTC |
hpfs: fix extended attribute bounds checks and get_indirect_ea() overflow |
1 |
benquike@gmail.com |
finished
in 4h55m0s
|
| 2026-09-19 22:26 UTC |
romfs: reject non-advancing nextfh offsets in romfs_lookup() and romfs_readdir() |
1 |
benquike@gmail.com |
finished
in 4h8m0s
|
| 2026-09-19 22:26 UTC |
hfs: validate drAlBlkSiz and fs_ablocks in hfs_mdb_get() |
1 |
benquike@gmail.com |
finished
in 4h7m0s
|
| 2026-09-19 22:26 UTC |
hfsplus: fix xattr entrylength OOB read and NULL hidden_dir on R/W remount |
1 |
benquike@gmail.com |
finished
in 4h13m0s
|
| 2026-09-19 22:26 UTC |
jfs: validate dmap parameters in dbMount() and slot chains in jfs_dtree.c |
1 |
benquike@gmail.com |
finished
in 4h44m0s
|
| 2026-09-19 22:26 UTC |
adfs: validate zone map parameters and clamp dm_endbit in adfs_map_layout() |
1 |
benquike@gmail.com |
finished
in 4h36m0s
|
| 2026-09-19 22:26 UTC |
udf: validate vat20->lengthHeader and VAT inode size in udf_load_vat() |
1 |
benquike@gmail.com |
finished
in 4h0m0s
|
| 2026-09-19 22:25 UTC |
bfs: fix destination block offset in bfs_move_blocks() and check sb_getblk() |
1 |
benquike@gmail.com |
finished
in 4h6m0s
|
| 2026-09-19 22:25 UTC |
ufs: fix cylinder structures slab-OOB write, div-by-zero, and error cleanup |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 22:25 UTC |
qnx6: validate di_filelevels in qnx6_iget() and fix mount error handling |
1 |
benquike@gmail.com |
finished
in 4h55m0s
|
| 2026-09-19 22:25 UTC |
befs: check NULL return from befs_bt_get_key() and fix keysize in befs_btree_read() |
1 |
benquike@gmail.com |
finished
in 4h48m0s
|
| 2026-09-19 22:25 UTC |
isofs: reject short directory records in isofs_read_level3_size() |
1 |
benquike@gmail.com |
finished
in 3h58m0s
|
| 2026-09-19 22:17 UTC |
ipmr: validate IPv4 header length in reg_vif_xmit() and zero iphdr in ipmr_get_route() |
1 |
benquike@gmail.com |
finished
in 4h11m0s
|
| 2026-09-19 22:17 UTC |
af_unix: fix u->inq_len accounting in manage_oob() and unix_stream_read_skb() |
1 |
benquike@gmail.com |
finished
in 4h13m0s
[1 findings]
|
| 2026-09-19 22:17 UTC |
fs/namespace: reject bufsize < sizeof(struct statmount) in prepare_kstatmount() |
1 |
benquike@gmail.com |
finished
in 4h1m0s
|
| 2026-09-19 22:17 UTC |
io_uring: fix cloned compound buffer accounting and R_DISABLED restriction bypass |
1 |
benquike@gmail.com |
finished
in 4h10m0s
|
| 2026-09-19 21:52 UTC |
netlabel: cipso_v4: reject empty MLS level/cat lists and zero tail in cipso_v4_delopt() |
1 |
benquike@gmail.com |
finished
in 5h2m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback |
1 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-19 21:52 UTC |
xfrm: validate protocol for XFRM_MODE_ROUTEOPTIMIZATION in verify_newsa_info() |
1 |
benquike@gmail.com |
finished
in 4h13m0s
|
| 2026-09-19 21:52 UTC |
fou: reject FOU_ENCAP_DIRECT with protocol 0 to prevent sk_buff leak |
1 |
benquike@gmail.com |
finished
in 4h15m0s
|
| 2026-09-19 21:52 UTC |
net/packet: zero-pad spkt_device and preserve sa.origlen across MSG_PEEK |
1 |
benquike@gmail.com |
finished
in 4h27m0s
|
| 2026-09-19 21:52 UTC |
tcp: drain out_of_order_queue and update SACKs in tcp_send_rcvq() |
1 |
benquike@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 21:52 UTC |
ipv6: tcp: restore ipv6_specific icsk_af_ops when reconnecting IPv6 after v4-mapped |
1 |
benquike@gmail.com |
finished
in 4h1m0s
|
| 2026-09-19 21:52 UTC |
ppp: fix bsd_decompress() OOB read and ppp_decompress_frame() headroom check |
1 |
benquike@gmail.com |
finished
in 4h21m0s
|
| 2026-09-19 21:36 UTC |
net: lapb: fix uninitialized stack frame fields in lapb_decode() |
1 |
benquike@gmail.com |
finished
in 4h14m0s
|
| 2026-09-19 21:36 UTC |
6lowpan: add missing pskb_may_pull() checks in IPHC and NHC compression |
1 |
benquike@gmail.com |
finished
in 2h50m0s
|
| 2026-09-19 21:36 UTC |
mac802154: rx: fix beacon/mac_cmd skb leak and short skb_trim underflow |
1 |
benquike@gmail.com |
finished
in 4h14m0s
|
| 2026-09-19 21:36 UTC |
net: llc: clean up unaccepted child sockets in llc_ui_release() |
1 |
benquike@gmail.com |
finished
in 4h18m0s
|
| 2026-09-19 21:36 UTC |
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute |
1 |
benquike@gmail.com |
finished
in 4h8m0s
|
| 2026-09-19 21:36 UTC |
can: j1939: return 0 instead of user value in j1939_sk_setsockopt_flag() |
1 |
benquike@gmail.com |
finished
in 4h27m0s
|
| 2026-09-19 21:36 UTC |
net/tcp: check rnext_key for NULL in tcp_ao_prepare_reset() |
1 |
benquike@gmail.com |
finished
in 4h18m0s
|
| 2026-09-19 21:28 UTC |
tipc: fix TLV out-of-bounds read in tipc_nl_compat_net_set() and depth mask |
1 |
benquike@gmail.com |
finished
in 4h41m0s
|
| 2026-09-19 21:28 UTC |
ppp: pptp: fix out-of-bounds read on short payload_len in pptp_rcv_core() |
1 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-19 21:28 UTC |
ieee802154: socket: fix shared skb BUG_ON and double header subtraction in dgram_ioctl() |
1 |
benquike@gmail.com |
finished
in 4h13m0s
|
| 2026-09-19 21:28 UTC |
kcm: fix socket memory accounting leak on TX completion, error, and close |
1 |
benquike@gmail.com |
finished
in 4h7m0s
|
| 2026-09-19 21:28 UTC |
phonet: pep: fix out-of-bounds reads in pep_ctrlreq_error() and pep_sock_accept() |
1 |
benquike@gmail.com |
finished
in 4h40m0s
|
| 2026-09-19 21:28 UTC |
mctp: route: verify socket ownership in mctp_lookup_prealloc_tag() |
1 |
benquike@gmail.com |
finished
in 3h52m0s
|
| 2026-09-19 21:28 UTC |
net: qrtr: ns: validate msglen and sq_port in qrtr_ns_worker() and ctrl_cmd_bye() |
1 |
benquike@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 21:28 UTC |
net: qrtr: fix kernel stack infoleak in qrtr_getname() and qrtr_ioctl() |
1 |
benquike@gmail.com |
finished
in 3h55m0s
|
| 2026-09-19 21:28 UTC |
net: qrtr: use u32 for port in qrtr_port_assign() and __qrtr_bind() |
1 |
benquike@gmail.com |
finished
in 4h37m0s
|
| 2026-09-19 21:06 UTC |
net/sched: ematch: check nla_put_nohdr() return value in tcf_em_tree_dump() |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 21:06 UTC |
xfrm: reject sub-32-bit or unaligned alg_trunc_len in attach_auth_trunc() |
1 |
benquike@gmail.com |
finished
in 4h42m0s
|