| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-05-20 16:00 UTC | tun: free page on short-frame rejection in tun_xdp_one() | 1 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-05-20 07:57 UTC | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | 1 | bestswngs@gmail.com | finished in 1h21m0s |
| 2026-05-18 14:06 UTC | ipv6: rpl: add NULL check for idev in ipv6_rpl_srh_rcv() | 2 | andrea.mayer@uniroma2.it | finished in 4h11m0s |
| 2026-05-15 12:55 UTC | ipv6: rpl: add NULL check for idev in ipv6_rpl_srh_rcv() | 1 | bestswngs@gmail.com | finished in 4h40m0s |
| 2026-05-14 12:38 UTC | net: appletalk: fix NULL pointer dereference in aarp_send_ddp() | 1 | bestswngs@gmail.com | finished in 1h54m0s |
| 2026-05-14 12:25 UTC | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | 2 | bestswngs@gmail.com | finished in 1h26m0s |
| 2026-05-11 12:00 UTC | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | 1 | bestswngs@gmail.com | finished in 1h48m0s |
| 2026-05-11 07:15 UTC | net: hsr: fix NULL deref in hsr_get_node_data | 1 | xmei5@asu.edu | finished in 4h44m0s |
| 2026-05-11 06:21 UTC | net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot | 1 | xmei5@asu.edu | finished in 4h32m0s |
| 2026-05-10 22:26 UTC | net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | 1 | xmei5@asu.edu | finished in 2h3m0s |
| 2026-05-10 16:09 UTC | net: team: fix NULL pointer dereference in team_xmit during mode change | 3 | bestswngs@gmail.com | finished in 4h15m0s |
| 2026-05-09 18:18 UTC | net: team: fix NULL pointer dereference in team_xmit during mode change | 2 | bestswngs@gmail.com | finished in 4h9m0s |
| 2026-05-06 10:11 UTC | net: team: fix NULL pointer dereference in team_xmit during mode change | 1 | bestswngs@gmail.com | finished in 5h1m0s |
| 2026-04-26 16:53 UTC | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 1 | bestswngs@gmail.com | finished in 4h30m0s |
| 2026-04-24 19:16 UTC | bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() | 1 | bestswngs@gmail.com | finished in 4h35m0s |
| 2026-04-24 19:03 UTC | bpf, sockmap: zero-initialize pages allocated in bpf_msg_push_data | 1 | bestswngs@gmail.com | finished in 4h39m0s |
| 2026-04-23 18:38 UTC | bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() | 2 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-23 15:58 UTC | bpf, sockmap: Fix wrong rsge offset in bpf_msg_push_data() | 1 | bestswngs@gmail.com | finished in 4h10m0s |
| 2026-04-23 10:02 UTC | net/smc: fix NULL pointer dereference in smc_clc_wait_msg() | 1 | bestswngs@gmail.com | finished in 4h33m0s |
| 2026-04-22 16:19 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 5 | bestswngs@gmail.com | finished in 4h26m0s |
| 2026-04-22 06:54 UTC | bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths | 3 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-21 15:50 UTC | bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths | 2 | bestswngs@gmail.com | finished in 4h32m0s |
| 2026-04-20 16:14 UTC | bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths | 1 | bestswngs@gmail.com | finished in 4h34m0s |
| 2026-04-19 17:01 UTC | bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() | 1 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-19 10:45 UTC | netfilter: x_tables: add late validate callback for nft_compat sake | 1 | fw@strlen.de | finished in 4h17m0s |
| 2026-04-18 16:30 UTC | netfilter: xt_TCPMSS: check skb_dst before path-MTU clamping | 1 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-04-18 11:41 UTC | vxlan: fix NULL vn6_sock dereference in vxlan_igmp_join() and vxlan_igmp_leave() | 2 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-04-17 05:54 UTC | gtp: disable BH before calling udp_tunnel_xmit_skb() | 1 | devnexen@gmail.com | finished in 4h5m0s |
| 2026-04-16 18:55 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 4 | bestswngs@gmail.com | finished in 4h28m0s |
| 2026-04-16 10:01 UTC | slip: bound decode() reads against the compressed packet length | 1 | bestswngs@gmail.com | finished in 4h29m0s |
| 2026-04-16 02:46 UTC | openvswitch: cap upcall PID array size and pre-size vport replies | 5 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-04-15 21:34 UTC | slip: fix slab-out-of-bounds write in slhc_uncompress() | 1 | bestswngs@gmail.com | finished in 2h17m0s |
| 2026-04-15 20:41 UTC | slip: reject VJ receive packets on instances with no rstate array | 2 | bestswngs@gmail.com | finished in 4h40m0s |
| 2026-04-15 12:51 UTC | openvswitch: cap upcall PID array size and pre-size vport replies | 4 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-04-14 22:14 UTC | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 2 | xmei5@asu.edu | finished in 4h39m0s |
| 2026-04-14 10:43 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 3 | bestswngs@gmail.com | finished in 4h23m0s |
| 2026-04-13 03:55 UTC | openvswitch: limit vport upcall portids to the number of CPUs | 3 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-04-12 18:15 UTC | sctp: disable BH before calling udp_tunnel_xmit_skb() | 1 | lucien.xin@gmail.com | finished in 4h24m0s |
| 2026-04-12 15:42 UTC | slip: reject VJ frames when no receive slots are allocated | 1 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-04-12 02:27 UTC | bpf: Fix arena VMA use-after-free on fork | 4 | bestswngs@gmail.com | finished in 3h58m0s |
| 2026-04-11 20:08 UTC | bpf: Fix arena VMA use-after-free on fork | 3 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-04-11 14:14 UTC | openvswitch: fix vport netlink reply size for large upcall PID arrays | 2 | bestswngs@gmail.com | finished in 4h10m0s |
| 2026-04-11 11:29 UTC | bpf: Fix arena VMA use-after-free on fork | 2 | bestswngs@gmail.com | finished in 4h14m0s |
| 2026-04-11 11:20 UTC | bpf: Fix arena VMA use-after-free on fork | 1 | bestswngs@gmail.com | finished in 4h30m0s |
| 2026-04-11 05:59 UTC | openvswitch: fix kernel panic from oversized vport upcall PID arrays | 1 | bestswngs@gmail.com | finished in 4h5m0s |
| 2026-04-10 20:48 UTC | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 1 | xmei5@asu.edu | finished in 4h5m0s |
| 2026-04-10 15:39 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 2 | bestswngs@gmail.com | finished in 1h10m0s |
| 2026-04-10 15:36 UTC | net: fix reference tracker mismanagement in netdev_put_lock() | 1 | kuba@kernel.org | finished in 4h25m0s |
| 2026-04-10 10:13 UTC | netfilter: nf_tables: use RCU-safe list primitives for basechain hook list | 1 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-04-10 02:06 UTC | net: fix __this_cpu_add() in preemptible code in dev_xmit_recursion_inc/dec | 2 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-04-09 10:49 UTC | netfilter: nft_fwd_netdev: use recursion counter in neigh egress path | 2 | bestswngs@gmail.com | finished in 4h38m0s |
| 2026-04-09 09:50 UTC | netfilter: nf_conntrack_sip: fix OOB read in epaddr_len and ct_sip_parse_header_uri | 1 | bestswngs@gmail.com | finished in 2h32m0s |
| 2026-04-09 05:36 UTC | netfilter: nft_fwd_netdev: use recursion counter in neigh egress path | 1 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-04-09 03:53 UTC | net: fix __this_cpu_add() in preemptible code in dev_xmit_recursion_inc/dec | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-04-08 18:28 UTC | ipv4: nexthop: update has_v4 flag for any family change in replace_nexthop_single() | 1 | xmei5@asu.edu | finished in 4h27m0s |
| 2026-04-08 07:35 UTC | netfilter: arp_tables: fix IEEE1394 ARP payload parsing in arp_packet_match() | 1 | bestswngs@gmail.com | finished in 4h30m0s |
| 2026-04-05 00:03 UTC | bridge: cfm: reject invalid CCM interval at configuration time | 2 | xmei5@asu.edu | finished in 4h1m0s |
| 2026-04-04 16:12 UTC | bpf: reject negative CO-RE accessor indices | 3 | bestswngs@gmail.com | finished in 2h7m0s |
| 2026-04-03 13:29 UTC | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 2 | bestswngs@gmail.com | finished in 1h26m0s |
| 2026-04-03 10:41 UTC | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 2 | bestswngs@gmail.com | finished in 2h58m0s |
| 2026-04-03 03:51 UTC | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 1 | bestswngs@gmail.com | finished in 2h40m0s |
| 2026-04-02 22:23 UTC | net: increase IP_TUNNEL_RECURSION_LIMIT to 5 | 1 | carges@cloudflare.com | finished in 4h13m0s |
| 2026-04-01 21:20 UTC | netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator | 2 | xmei5@asu.edu | finished in 4h16m0s |
| 2026-04-01 19:57 UTC | netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator | 1 | xmei5@asu.edu | finished in 4h28m0s |
| 2026-04-01 19:26 UTC | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 1 | bestswngs@gmail.com | finished in 1h32m0s |
| 2026-04-01 07:58 UTC | ipvs: fix NULL deref in ip_vs_add_service error path | 2 | bestswngs@gmail.com | finished in 4h54m0s |
| 2026-04-01 04:16 UTC | ipvs: fix NULL deref in ip_vs_add_service error path | 1 | bestswngs@gmail.com | finished in 4h32m0s |
| 2026-03-31 15:01 UTC | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | 1 | pablo@netfilter.org | finished in 4h38m0s |
| 2026-03-31 05:02 UTC | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | 3 | xmei5@asu.edu | finished in 4h13m0s |
| 2026-03-30 16:32 UTC | rds: ib: reject FRMR registration before IB connection is established | 1 | bestswngs@gmail.com | finished in 4h39m0s |
| 2026-03-30 10:29 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 1 | bestswngs@gmail.com | finished in 4h25m0s |
| 2026-03-28 06:30 UTC | bridge: mrp: reject zero test interval to avoid OOM panic | 2 | xmei5@asu.edu | finished in 4h9m0s |
| 2026-03-27 06:55 UTC | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | 2 | xmei5@asu.edu | finished in 4h44m0s |
| 2026-03-27 06:12 UTC | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | 1 | xmei5@asu.edu | finished in 4h17m0s |
| 2026-03-26 20:43 UTC | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 3 | xmei5@asu.edu | finished in 4h27m0s |
| 2026-03-26 07:58 UTC | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 2 | xmei5@asu.edu | finished in 4h10m0s |
| 2026-03-26 07:55 UTC | net: bonding: fix use-after-free in bond_xmit_broadcast() | 3 | xmei5@asu.edu | finished in 4h15m0s |
| 2026-03-26 03:24 UTC | bridge: mrp: reject zero test interval to avoid OOM panic | 1 | xmei5@asu.edu | finished in 4h10m0s |
| 2026-03-26 03:19 UTC | bridge: cfm: do not reschedule TX work when interval is zero | 1 | xmei5@asu.edu | finished in 4h15m0s |
| 2026-03-23 09:55 UTC | vxlan: fix NULL dereference in vxlan_igmp_join() and vxlan_igmp_leave() | 2 | bestswngs@gmail.com | finished in 4h46m0s |
| 2026-03-23 08:07 UTC | netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp | 1 | bestswngs@gmail.com | finished in 2h1m0s |
| 2026-03-20 01:24 UTC | net: sleepable ndo_set_rx_mode | 3 | sdf@fomichev.me |
finished
in 5h11m0s
[1 findings] |
| 2026-03-19 07:32 UTC | nfnetlink_osf: validate individual option lengths in fingerprints | 1 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-03-18 23:23 UTC | net: bonding: fix use-after-free in bond_xmit_broadcast() | 1 | xmei5@asu.edu | finished in 4h13m0s |
| 2026-03-18 15:02 UTC | net: sleepable ndo_set_rx_mode | 2 | sdf@fomichev.me | finished in 5h15m0s |
| 2026-03-18 13:06 UTC | icmp: fix NULL pointer dereference in icmp_tag_validation() | 1 | bestswngs@gmail.com | finished in 4h15m0s |
| 2026-03-18 03:42 UTC | wifi: mac80211: fix NULL deref in mesh_matches_local() | 1 | xmei5@asu.edu | finished in 4h11m0s |
| 2026-03-17 01:02 UTC | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | 2 | xmei5@asu.edu | finished in 1h34m0s |
| 2026-03-17 00:50 UTC | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 2 | xmei5@asu.edu | finished in 1h39m0s |
| 2026-03-16 00:53 UTC | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | 1 | xmei5@asu.edu | finished in 1h4m0s |
| 2026-03-15 19:44 UTC | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 1 | xmei5@asu.edu | finished in 1h18m0s |
| 2026-03-12 04:39 UTC | net: prevent NULL deref in ip[6]tunnel_xmit() | 2 | edumazet@google.com | finished in 4h27m0s |
| 2026-03-12 04:11 UTC | net: prevent NULL deref in ip[6]tunnel_xmit() | 1 | edumazet@google.com | finished in 4h23m0s |
| 2026-03-06 16:01 UTC | net: add xmit recursion limit to tunnel xmit functions | 4 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-03-05 18:18 UTC | net: add xmit recursion limit to tunnel xmit functions | 3 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-03-04 04:42 UTC | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 1 | bestswngs@gmail.com | finished in 1h47m0s |
| 2026-03-03 16:43 UTC | net: add xmit recursion limit to tunnel drivers | 2 | bestswngs@gmail.com | finished in 4h16m0s |
| 2026-03-03 02:29 UTC | net/core: add xmit recursion limit to qdisc transmit path | 1 | bestswngs@gmail.com | finished in 4h47m0s |
| 2025-12-23 20:35 UTC | net: sock: fix hardened usercopy panic in sock_recv_errqueue | 5 | bestswngs@gmail.com | finished in 3h54m0s |
| 2025-12-16 08:44 UTC | net: skbuff: add usercopy region to skbuff_fclone_cache | 4 | bestswngs@gmail.com | finished in 3h51m0s |