| 2026-07-05 11:59 UTC |
tipc: fix NULL deref in tipc_named_node_up() on empty publication list |
1 |
bestswngs@gmail.com |
finished
in 4h35m0s
|
| 2026-07-05 05:04 UTC |
KVM: x86/ioapic: Cancel eoi_inject work before destroying vCPUs |
1 |
bestswngs@gmail.com |
finished
in 4h8m0s
|
| 2026-07-05 01:40 UTC |
vfio/pci: clear vdev->msi_perm after freeing it on init failure |
1 |
xmei5@asu.edu |
finished
in 1h42m0s
|
| 2026-07-05 00:30 UTC |
sctp: validate the body of a STALE_COOKIE error before reading it |
1 |
xmei5@asu.edu |
finished
in 4h32m0s
|
| 2026-07-04 22:22 UTC |
vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes |
1 |
xmei5@asu.edu |
finished
in 4h5m0s
|
| 2026-07-04 21:03 UTC |
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full |
1 |
xmei5@asu.edu |
finished
in 4h23m0s
|
| 2026-07-04 17:14 UTC |
ipv4: fib: free fib_alias with kfree_rcu() on insert error path |
1 |
bestswngs@gmail.com |
finished
in 4h35m0s
|
| 2026-07-04 06:22 UTC |
netfilter: ipset: skip extension destroy on hash resize replay |
1 |
bestswngs@gmail.com |
finished
in 4h51m0s
|
| 2026-07-04 03:35 UTC |
sctp: validate STALE_COOKIE cause length before reading staleness |
1 |
bestswngs@gmail.com |
finished
in 4h14m0s
|
| 2026-06-30 18:32 UTC |
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket |
2 |
xmei5@asu.edu |
finished
in 2h36m0s
|
| 2026-06-30 17:41 UTC |
net: qualcomm: rmnet: validate MAP frame length before ingress parsing |
2 |
xmei5@asu.edu |
finished
in 2h13m0s
|
| 2026-06-30 04:51 UTC |
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup |
2 |
xmei5@asu.edu |
finished
in 2h44m0s
|
| 2026-06-28 07:52 UTC |
net: qualcomm: rmnet: validate MAP frame length before ingress parsing |
1 |
xmei5@asu.edu |
finished
in 1h19m0s
|
| 2026-06-28 00:05 UTC |
wifi: p54: validate RX frame length in p54_rx_eeprom_readback() |
1 |
xmei5@asu.edu |
finished
in 1h33m0s
|
| 2026-06-27 21:28 UTC |
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup |
1 |
xmei5@asu.edu |
finished
in 2h15m0s
|
| 2026-06-27 20:53 UTC |
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() |
1 |
xmei5@asu.edu |
finished
in 2h17m0s
|
| 2026-06-27 01:49 UTC |
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket |
1 |
xmei5@asu.edu |
finished
in 2h7m0s
|
| 2026-06-25 16:47 UTC |
netfilter: nf_log: validate MAC header was set before dumping it |
2 |
alexevgmart@gmail.com |
skipped
|
| 2026-06-25 01:00 UTC |
netfilter: ipset: fix race between dump and ip_set_list resize |
1 |
xmei5@asu.edu |
finished
in 4h33m0s
|
| 2026-06-21 09:35 UTC |
wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure |
1 |
xmei5@asu.edu |
finished
in 4h1m0s
|
| 2026-06-20 20:15 UTC |
net, bpf: check master for NULL in xdp_master_redirect() |
1 |
xmei5@asu.edu |
finished
in 4h14m0s
|
| 2026-06-19 04:53 UTC |
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). |
1 |
xmei5@asu.edu |
finished
in 4h18m0s
|
| 2026-06-18 03:26 UTC |
geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
3 |
xmei5@asu.edu |
finished
in 4h23m0s
|
| 2026-06-17 13:57 UTC |
tipc: fix use-after-free of the discoverer in tipc_disc_rcv() |
3 |
bestswngs@gmail.com |
finished
in 4h46m0s
|
| 2026-06-17 06:55 UTC |
ipv6: ndisc: fix NULL deref in accept_untracked_na() |
1 |
bestswngs@gmail.com |
finished
in 4h21m0s
|
| 2026-06-16 12:22 UTC |
tipc: fix use-after-free of the discoverer in tipc_disc_rcv() |
2 |
bestswngs@gmail.com |
finished
in 5h15m0s
|
| 2026-06-16 04:28 UTC |
virtio-net: fix len check in receive_big() |
4 |
xmei5@asu.edu |
finished
in 1h52m0s
|
| 2026-06-16 00:30 UTC |
net: psample: fix info leak in PSAMPLE_ATTR_DATA |
1 |
kuba@kernel.org |
finished
in 4h24m0s
|
| 2026-06-15 19:05 UTC |
ext4: fix out-of-bounds read in ext4_read_inline_dir() |
4 |
xmei5@asu.edu |
finished
in 5h6m0s
|
| 2026-06-14 03:49 UTC |
psample: use nla_reserve() for PSAMPLE_ATTR_DATA |
2 |
xmei5@asu.edu |
finished
in 4h54m0s
|
| 2026-06-13 22:18 UTC |
ext4: fix out-of-bounds read in ext4_read_inline_dir() |
3 |
xmei5@asu.edu |
finished
in 4h49m0s
|
| 2026-06-12 13:07 UTC |
bpf, skmsg: some fixes for skmsg |
3 |
jiayuan.chen@linux.dev |
finished
in 4h47m0s
|
| 2026-06-11 16:38 UTC |
atm: fix skb leak in sigd_send() on a closing listen socket |
1 |
bestswngs@gmail.com |
finished
in 2h6m0s
|
| 2026-06-11 12:34 UTC |
bpf, skmsg: some fixes for skmsg |
2 |
jiayuan.chen@linux.dev |
finished
in 4h49m0s
|
| 2026-06-11 02:46 UTC |
virtio-net: fix len check in receive_big() |
3 |
xmei5@asu.edu |
finished
in 2h38m0s
|
| 2026-06-10 23:29 UTC |
virtio-net: fix len check in receive_big() |
2 |
xmei5@asu.edu |
finished
in 2h25m0s
|
| 2026-06-10 22:16 UTC |
virtio-net: fix len check in receive_big() |
1 |
xmei5@asu.edu |
finished
in 2h37m0s
|
| 2026-06-10 15:33 UTC |
tipc: fix use-after-free of discoverer in tipc_disc_rcv() |
1 |
bestswngs@gmail.com |
finished
in 5h15m0s
|
| 2026-06-09 22:55 UTC |
netfilter: nf_log: validate MAC header was set before dumping it |
2 |
xmei5@asu.edu |
finished
in 4h18m0s
|
| 2026-06-09 16:21 UTC |
atm: fix use-after-free in sigd_put_skb() |
2 |
bestswngs@gmail.com |
finished
in 2h32m0s
|
| 2026-06-09 06:51 UTC |
bridge: cfm: reject invalid CCM interval at configuration time |
4 |
xmei5@asu.edu |
finished
in 4h28m0s
|
| 2026-06-09 04:13 UTC |
geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
2 |
xmei5@asu.edu |
finished
in 5h17m0s
|
| 2026-06-09 01:07 UTC |
ext4: fix out-of-bounds read in ext4_read_inline_dir() |
2 |
xmei5@asu.edu |
finished
in 4h49m0s
|
| 2026-06-08 21:07 UTC |
ext4: fix out-of-bounds read in ext4_read_inline_dir() |
1 |
xmei5@asu.edu |
finished
in 4h48m0s
|
| 2026-06-08 00:11 UTC |
netfilter: nf_log: validate MAC header was set before dumping it |
1 |
xmei5@asu.edu |
finished
in 4h5m0s
|
| 2026-06-07 14:06 UTC |
SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 |
1 |
bestswngs@gmail.com |
finished
in 4h6m0s
|
| 2026-06-07 08:56 UTC |
geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
1 |
xmei5@asu.edu |
finished
in 4h13m0s
|
| 2026-06-07 05:44 UTC |
tun: zero the whole vnet header in tun_put_user() |
1 |
xmei5@asu.edu |
finished
in 3h58m0s
|
| 2026-06-07 03:16 UTC |
psample: zero the netlink attribute padding in PSAMPLE_ATTR_DATA |
1 |
xmei5@asu.edu |
finished
in 4h0m0s
|
| 2026-06-06 21:58 UTC |
bridge: cfm: reject invalid CCM interval at configuration time |
3 |
xmei5@asu.edu |
finished
in 4h25m0s
|
| 2026-06-06 19:24 UTC |
net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion |
1 |
bestswngs@gmail.com |
finished
in 1h49m0s
|
| 2026-06-04 16:49 UTC |
net: atm: fix use-after-free in sigd_put_skb() |
1 |
bestswngs@gmail.com |
finished
in 4h40m0s
|
| 2026-06-03 07:38 UTC |
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister |
1 |
bestswngs@gmail.com |
finished
in 4h25m0s
|
| 2026-05-31 06:39 UTC |
wifi: mac80211: fix NULL dereference of eht_oper in ieee80211_start_ap() |
1 |
bestswngs@gmail.com |
finished
in 4h6m0s
|
| 2026-05-21 16:33 UTC |
tun: free page on build_skb failure in tun_xdp_one() |
1 |
bestswngs@gmail.com |
finished
in 4h40m0s
|
| 2026-05-21 16:32 UTC |
tap: free page on error paths in tap_get_user_xdp() |
1 |
bestswngs@gmail.com |
finished
in 4h24m0s
|
| 2026-05-21 08:12 UTC |
net: team: fix NULL pointer dereference in team_xmit during mode change |
4 |
bestswngs@gmail.com |
finished
in 4h22m0s
|
| 2026-05-20 16:00 UTC |
tun: free page on short-frame rejection in tun_xdp_one() |
1 |
bestswngs@gmail.com |
finished
in 4h22m0s
|
| 2026-05-20 07:57 UTC |
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR |
1 |
bestswngs@gmail.com |
finished
in 1h21m0s
|
| 2026-05-18 14:06 UTC |
ipv6: rpl: add NULL check for idev in ipv6_rpl_srh_rcv() |
2 |
andrea.mayer@uniroma2.it |
finished
in 4h11m0s
|
| 2026-05-15 12:55 UTC |
ipv6: rpl: add NULL check for idev in ipv6_rpl_srh_rcv() |
1 |
bestswngs@gmail.com |
finished
in 4h40m0s
|
| 2026-05-14 12:38 UTC |
net: appletalk: fix NULL pointer dereference in aarp_send_ddp() |
1 |
bestswngs@gmail.com |
finished
in 1h54m0s
|
| 2026-05-14 12:25 UTC |
net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() |
2 |
bestswngs@gmail.com |
finished
in 1h26m0s
|
| 2026-05-11 12:00 UTC |
net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() |
1 |
bestswngs@gmail.com |
finished
in 1h48m0s
|
| 2026-05-11 07:15 UTC |
net: hsr: fix NULL deref in hsr_get_node_data |
1 |
xmei5@asu.edu |
finished
in 4h44m0s
|
| 2026-05-11 06:21 UTC |
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot |
1 |
xmei5@asu.edu |
finished
in 4h32m0s
|
| 2026-05-10 22:26 UTC |
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint |
1 |
xmei5@asu.edu |
finished
in 2h3m0s
|
| 2026-05-10 16:09 UTC |
net: team: fix NULL pointer dereference in team_xmit during mode change |
3 |
bestswngs@gmail.com |
finished
in 4h15m0s
|
| 2026-05-09 18:18 UTC |
net: team: fix NULL pointer dereference in team_xmit during mode change |
2 |
bestswngs@gmail.com |
finished
in 4h9m0s
|
| 2026-05-06 10:11 UTC |
net: team: fix NULL pointer dereference in team_xmit during mode change |
1 |
bestswngs@gmail.com |
finished
in 5h1m0s
|
| 2026-04-26 16:53 UTC |
bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() |
1 |
bestswngs@gmail.com |
finished
in 4h30m0s
|
| 2026-04-24 19:16 UTC |
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() |
1 |
bestswngs@gmail.com |
finished
in 4h35m0s
|
| 2026-04-24 19:03 UTC |
bpf, sockmap: zero-initialize pages allocated in bpf_msg_push_data |
1 |
bestswngs@gmail.com |
finished
in 4h39m0s
|
| 2026-04-23 18:38 UTC |
bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() |
2 |
bestswngs@gmail.com |
finished
in 4h11m0s
|
| 2026-04-23 15:58 UTC |
bpf, sockmap: Fix wrong rsge offset in bpf_msg_push_data() |
1 |
bestswngs@gmail.com |
finished
in 4h10m0s
|
| 2026-04-23 10:02 UTC |
net/smc: fix NULL pointer dereference in smc_clc_wait_msg() |
1 |
bestswngs@gmail.com |
finished
in 4h33m0s
|
| 2026-04-22 16:19 UTC |
net/sched: taprio: fix NULL pointer dereference in class dump |
5 |
bestswngs@gmail.com |
finished
in 4h26m0s
|
| 2026-04-22 06:54 UTC |
bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths |
3 |
bestswngs@gmail.com |
finished
in 4h11m0s
|
| 2026-04-21 15:50 UTC |
bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths |
2 |
bestswngs@gmail.com |
finished
in 4h32m0s
|
| 2026-04-20 16:14 UTC |
bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths |
1 |
bestswngs@gmail.com |
finished
in 4h34m0s
|
| 2026-04-19 17:01 UTC |
bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() |
1 |
bestswngs@gmail.com |
finished
in 4h11m0s
|
| 2026-04-19 10:45 UTC |
netfilter: x_tables: add late validate callback for nft_compat sake |
1 |
fw@strlen.de |
finished
in 4h17m0s
|
| 2026-04-18 16:30 UTC |
netfilter: xt_TCPMSS: check skb_dst before path-MTU clamping |
1 |
bestswngs@gmail.com |
finished
in 4h27m0s
|
| 2026-04-18 11:41 UTC |
vxlan: fix NULL vn6_sock dereference in vxlan_igmp_join() and vxlan_igmp_leave() |
2 |
bestswngs@gmail.com |
finished
in 4h22m0s
|
| 2026-04-17 05:54 UTC |
gtp: disable BH before calling udp_tunnel_xmit_skb() |
1 |
devnexen@gmail.com |
finished
in 4h5m0s
|
| 2026-04-16 18:55 UTC |
net/sched: taprio: fix NULL pointer dereference in class dump |
4 |
bestswngs@gmail.com |
finished
in 4h28m0s
|
| 2026-04-16 10:01 UTC |
slip: bound decode() reads against the compressed packet length |
1 |
bestswngs@gmail.com |
finished
in 4h29m0s
|
| 2026-04-16 02:46 UTC |
openvswitch: cap upcall PID array size and pre-size vport replies |
5 |
bestswngs@gmail.com |
finished
in 4h22m0s
|
| 2026-04-15 21:34 UTC |
slip: fix slab-out-of-bounds write in slhc_uncompress() |
1 |
bestswngs@gmail.com |
finished
in 2h17m0s
|
| 2026-04-15 20:41 UTC |
slip: reject VJ receive packets on instances with no rstate array |
2 |
bestswngs@gmail.com |
finished
in 4h40m0s
|
| 2026-04-15 12:51 UTC |
openvswitch: cap upcall PID array size and pre-size vport replies |
4 |
bestswngs@gmail.com |
finished
in 4h27m0s
|
| 2026-04-14 22:14 UTC |
netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO |
2 |
xmei5@asu.edu |
finished
in 4h39m0s
|
| 2026-04-14 10:43 UTC |
net/sched: taprio: fix NULL pointer dereference in class dump |
3 |
bestswngs@gmail.com |
finished
in 4h23m0s
|
| 2026-04-13 03:55 UTC |
openvswitch: limit vport upcall portids to the number of CPUs |
3 |
bestswngs@gmail.com |
finished
in 4h13m0s
|
| 2026-04-12 18:15 UTC |
sctp: disable BH before calling udp_tunnel_xmit_skb() |
1 |
lucien.xin@gmail.com |
finished
in 4h24m0s
|
| 2026-04-12 15:42 UTC |
slip: reject VJ frames when no receive slots are allocated |
1 |
bestswngs@gmail.com |
finished
in 4h13m0s
|
| 2026-04-12 02:27 UTC |
bpf: Fix arena VMA use-after-free on fork |
4 |
bestswngs@gmail.com |
finished
in 3h58m0s
|
| 2026-04-11 20:08 UTC |
bpf: Fix arena VMA use-after-free on fork |
3 |
bestswngs@gmail.com |
finished
in 4h13m0s
|
| 2026-04-11 14:14 UTC |
openvswitch: fix vport netlink reply size for large upcall PID arrays |
2 |
bestswngs@gmail.com |
finished
in 4h10m0s
|
| 2026-04-11 11:29 UTC |
bpf: Fix arena VMA use-after-free on fork |
2 |
bestswngs@gmail.com |
finished
in 4h14m0s
|