| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-20 16:22 UTC | sctp: fix NULL deref on untransmitted RECONF completion | 1 | bestswngs@gmail.com | in progress |
| 2026-08-20 06:27 UTC | net/sched: taprio: fix software schedule livelocks | 2 | junjie.cao@intel.com | finished in 4h2m0s |
| 2026-08-19 06:19 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 15 | tung.quang.nguyen@est.tech | finished in 4h24m0s |
| 2026-08-18 15:45 UTC | xdp: fix zero-copy frame layout | 1 | bestswngs@gmail.com | finished in 4h31m0s |
| 2026-08-18 07:17 UTC | net/sched: taprio: fix software schedule livelocks | 1 | junjie.cao@intel.com | finished in 3h57m0s |
| 2026-08-17 13:26 UTC | ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() | 3 | andrea.mayer@uniroma2.it | finished in 4h42m0s |
| 2026-08-17 06:09 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 14 | tung.quang.nguyen@est.tech | finished in 4h36m0s |
| 2026-08-14 09:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 13 | tung.quang.nguyen@est.tech | finished in 4h5m0s |
| 2026-08-12 21:53 UTC | vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes | 1 | xmei5@asu.edu | finished in 4h43m0s |
| 2026-08-12 02:55 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 12 | tung.quang.nguyen@est.tech | finished in 4h32m0s |
| 2026-08-07 13:31 UTC | net/sched: sch_teql: restore skb->dev on the slave failure path | 1 | victor@mojatatu.com | finished in 4h22m0s |
| 2026-08-05 16:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 11 | tung.quang.nguyen@est.tech | finished in 4h7m0s |
| 2026-08-04 02:16 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 10 | tung.quang.nguyen@est.tech | finished in 16m0s |
| 2026-07-30 08:34 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 9 | tung.quang.nguyen@est.tech | finished in 4h50m0s |
| 2026-07-29 19:16 UTC | vsock/virtio: fix worker access after virtqueue teardown | 3 | bestswngs@gmail.com | finished in 3h56m0s |
| 2026-07-27 17:17 UTC | KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs | 3 | seanjc@google.com | finished in 4h50m0s |
| 2026-07-27 03:58 UTC | vsock/virtio: prevent workers from using deleted virtqueues | 1 | bestswngs@gmail.com | finished in 5h17m0s |
| 2026-07-26 12:03 UTC | net: flow_offload: serialize driver callback lists | 2 | bestswngs@gmail.com | finished in 5h21m0s |
| 2026-07-23 17:44 UTC | nfc: digital: fix use-after-free in nfc_digital_unregister_device() | 2 | bestswngs@gmail.com | skipped |
| 2026-07-22 21:02 UTC | rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() | 4 | xmei5@asu.edu | finished in 5h19m0s |
| 2026-07-21 16:36 UTC | nfc: digital: fix use-after-free in nfc_digital_unregister_device() | 1 | bestswngs@gmail.com | finished in 1h56m0s |
| 2026-07-19 17:50 UTC | netdevsim: tc: serialize access to nsim_block_cb_list | 1 | bestswngs@gmail.com | finished in 4h55m0s |
| 2026-07-18 09:25 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 8 | bestswngs@gmail.com | finished in 4h19m0s |
| 2026-07-18 09:09 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 7 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-07-17 18:56 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 6 | bestswngs@gmail.com | finished in 4h48m0s |
| 2026-07-17 18:30 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 5 | bestswngs@gmail.com | skipped |
| 2026-07-16 19:02 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 4 | bestswngs@gmail.com | finished in 5h18m0s |
| 2026-07-16 02:52 UTC | tipc: serialize udp bearer replicast list updates | 6 | bestswngs@gmail.com | finished in 5h11m0s |
| 2026-07-14 21:22 UTC | rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() | 3 | xmei5@asu.edu | skipped |
| 2026-07-14 19:21 UTC | tipc: serialize udp bearer replicast list updates | 5 | bestswngs@gmail.com | finished in 5h6m0s |
| 2026-07-14 17:41 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 3 | bestswngs@gmail.com | finished in 4h50m0s |
| 2026-07-13 16:33 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 3 | bestswngs@gmail.com | finished in 5h12m0s |
| 2026-07-13 16:15 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 2 | bestswngs@gmail.com | finished in 55m0s |
| 2026-07-12 23:42 UTC | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 1 | xmei5@asu.edu | finished in 3h29m0s |
| 2026-07-12 23:41 UTC | isofs: fix out-of-bounds page array access on empty zisofs block | 1 | xmei5@asu.edu | finished in 3h7m0s |
| 2026-07-12 22:09 UTC | mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n | 1 | xmei5@asu.edu | finished in 4h29m0s |
| 2026-07-12 13:34 UTC | fs/ntfs3: do not mark frame pages uptodate on read error | 1 | bestswngs@gmail.com | finished in 5h28m0s |
| 2026-07-11 21:03 UTC | wifi: mac80211: tear down new links on vif update error path | 1 | xmei5@asu.edu | finished in 4h51m0s |
| 2026-07-11 11:50 UTC | mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n | 1 | bestswngs@gmail.com | finished in 4h49m0s |
| 2026-07-10 22:30 UTC | rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() | 2 | xmei5@asu.edu | skipped |
| 2026-07-10 17:55 UTC | nfc: llcp: validate TLV length before parsing to fix OOB read | 1 | bestswngs@gmail.com | finished in 5h39m0s |
| 2026-07-10 17:47 UTC | tipc: serialize udp bearer replicast list updates | 4 | bestswngs@gmail.com | finished in 5h7m0s |
| 2026-07-10 03:29 UTC | tipc: serialize udp bearer replicast list updates | 3 | bestswngs@gmail.com | finished in 5h30m0s |
| 2026-07-09 18:41 UTC | ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() | 1 | xmei5@asu.edu | finished in 6h2m0s |
| 2026-07-09 14:47 UTC | tipc: fix NULL deref in tipc_lxc_xmit() on node up | 3 | bestswngs@gmail.com | finished in 4h42m0s |
| 2026-07-09 07:44 UTC | rds: tcp: hold the net_device across ipv6_chk_addr() in rds_tcp_laddr_check() | 1 | xmei5@asu.edu | finished in 5h29m0s |
| 2026-07-08 17:30 UTC | tipc: fix NULL deref in tipc_lxc_xmit() on node up | 1 | bestswngs@gmail.com | finished in 5h4m0s |
| 2026-07-08 16:13 UTC | tipc: guard against empty buffer list in tipc_node_xmit() | 1 | bestswngs@gmail.com | finished in 4h57m0s |
| 2026-07-07 16:42 UTC | tipc: serialize udp bearer replicast list updates | 2 | bestswngs@gmail.com | finished in 4h57m0s |
| 2026-07-06 18:00 UTC | KVM: x86: Destroy the PIC and IOAPIC before destroying vCPUs | 2 | bestswngs@gmail.com |
finished
in 4h56m0s
[1 findings] |
| 2026-07-06 16:30 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 2 | bestswngs@gmail.com | finished in 5h22m0s |
| 2026-07-06 13:47 UTC | tipc: serialize udp bearer replicast list updates | 1 | bestswngs@gmail.com | finished in 5h5m0s |
| 2026-07-05 23:36 UTC | netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag | 1 | xmei5@asu.edu | finished in 4h55m0s |
| 2026-07-05 21:58 UTC | netfilter: ebtables: terminate table name before find_table_lock() | 1 | xmei5@asu.edu | finished in 4h26m0s |
| 2026-07-05 11:59 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 1 | bestswngs@gmail.com | finished in 4h35m0s |
| 2026-07-05 05:04 UTC | KVM: x86/ioapic: Cancel eoi_inject work before destroying vCPUs | 1 | bestswngs@gmail.com | finished in 4h8m0s |
| 2026-07-05 01:40 UTC | vfio/pci: clear vdev->msi_perm after freeing it on init failure | 1 | xmei5@asu.edu | finished in 1h42m0s |
| 2026-07-05 00:30 UTC | sctp: validate the body of a STALE_COOKIE error before reading it | 1 | xmei5@asu.edu | finished in 4h32m0s |
| 2026-07-04 22:22 UTC | vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes | 1 | xmei5@asu.edu | finished in 4h5m0s |
| 2026-07-04 21:03 UTC | xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full | 1 | xmei5@asu.edu | finished in 4h23m0s |
| 2026-07-04 17:14 UTC | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | 1 | bestswngs@gmail.com | finished in 4h35m0s |
| 2026-07-04 06:22 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 1 | bestswngs@gmail.com | finished in 4h51m0s |
| 2026-07-04 03:35 UTC | sctp: validate STALE_COOKIE cause length before reading staleness | 1 | bestswngs@gmail.com | finished in 4h14m0s |
| 2026-06-30 18:32 UTC | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket | 2 | xmei5@asu.edu | finished in 2h36m0s |
| 2026-06-30 17:41 UTC | net: qualcomm: rmnet: validate MAP frame length before ingress parsing | 2 | xmei5@asu.edu | finished in 2h13m0s |
| 2026-06-30 04:51 UTC | net: usb: net1080: validate packet_len before pad-byte access in rx_fixup | 2 | xmei5@asu.edu | finished in 2h44m0s |
| 2026-06-28 07:52 UTC | net: qualcomm: rmnet: validate MAP frame length before ingress parsing | 1 | xmei5@asu.edu | finished in 1h19m0s |
| 2026-06-28 00:05 UTC | wifi: p54: validate RX frame length in p54_rx_eeprom_readback() | 1 | xmei5@asu.edu | finished in 1h33m0s |
| 2026-06-27 21:28 UTC | net: usb: net1080: validate packet_len before pad-byte access in rx_fixup | 1 | xmei5@asu.edu | finished in 2h15m0s |
| 2026-06-27 20:53 UTC | usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() | 1 | xmei5@asu.edu | finished in 2h17m0s |
| 2026-06-27 01:49 UTC | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket | 1 | xmei5@asu.edu | finished in 2h7m0s |
| 2026-06-25 16:47 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 2 | alexevgmart@gmail.com | skipped |
| 2026-06-25 01:00 UTC | netfilter: ipset: fix race between dump and ip_set_list resize | 1 | xmei5@asu.edu | finished in 4h33m0s |
| 2026-06-21 09:35 UTC | wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure | 1 | xmei5@asu.edu | finished in 4h1m0s |
| 2026-06-20 20:15 UTC | net, bpf: check master for NULL in xdp_master_redirect() | 1 | xmei5@asu.edu | finished in 4h14m0s |
| 2026-06-19 04:53 UTC | ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). | 1 | xmei5@asu.edu | finished in 4h18m0s |
| 2026-06-18 03:26 UTC | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint | 3 | xmei5@asu.edu | finished in 4h23m0s |
| 2026-06-17 13:57 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 3 | bestswngs@gmail.com | finished in 4h46m0s |
| 2026-06-17 06:55 UTC | ipv6: ndisc: fix NULL deref in accept_untracked_na() | 1 | bestswngs@gmail.com | finished in 4h21m0s |
| 2026-06-16 12:22 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 2 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-16 04:28 UTC | virtio-net: fix len check in receive_big() | 4 | xmei5@asu.edu | finished in 1h52m0s |
| 2026-06-16 00:30 UTC | net: psample: fix info leak in PSAMPLE_ATTR_DATA | 1 | kuba@kernel.org | finished in 4h24m0s |
| 2026-06-15 19:05 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 4 | xmei5@asu.edu | finished in 5h6m0s |
| 2026-06-14 03:49 UTC | psample: use nla_reserve() for PSAMPLE_ATTR_DATA | 2 | xmei5@asu.edu | finished in 4h54m0s |
| 2026-06-13 22:18 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 3 | xmei5@asu.edu | finished in 4h49m0s |
| 2026-06-12 13:07 UTC | bpf, skmsg: some fixes for skmsg | 3 | jiayuan.chen@linux.dev | finished in 4h47m0s |
| 2026-06-11 16:38 UTC | atm: fix skb leak in sigd_send() on a closing listen socket | 1 | bestswngs@gmail.com | finished in 2h6m0s |
| 2026-06-11 12:34 UTC | bpf, skmsg: some fixes for skmsg | 2 | jiayuan.chen@linux.dev | finished in 4h49m0s |
| 2026-06-11 02:46 UTC | virtio-net: fix len check in receive_big() | 3 | xmei5@asu.edu | finished in 2h38m0s |
| 2026-06-10 23:29 UTC | virtio-net: fix len check in receive_big() | 2 | xmei5@asu.edu | finished in 2h25m0s |
| 2026-06-10 22:16 UTC | virtio-net: fix len check in receive_big() | 1 | xmei5@asu.edu | finished in 2h37m0s |
| 2026-06-10 15:33 UTC | tipc: fix use-after-free of discoverer in tipc_disc_rcv() | 1 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-09 22:55 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 2 | xmei5@asu.edu | finished in 4h18m0s |
| 2026-06-09 16:21 UTC | atm: fix use-after-free in sigd_put_skb() | 2 | bestswngs@gmail.com | finished in 2h32m0s |
| 2026-06-09 06:51 UTC | bridge: cfm: reject invalid CCM interval at configuration time | 4 | xmei5@asu.edu | finished in 4h28m0s |
| 2026-06-09 04:13 UTC | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint | 2 | xmei5@asu.edu | finished in 5h17m0s |
| 2026-06-09 01:07 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 2 | xmei5@asu.edu | finished in 4h49m0s |
| 2026-06-08 21:07 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 1 | xmei5@asu.edu | finished in 4h48m0s |
| 2026-06-08 00:11 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 1 | xmei5@asu.edu | finished in 4h5m0s |
| 2026-06-07 14:06 UTC | SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 | 1 | bestswngs@gmail.com | finished in 4h6m0s |