| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-07 16:42 UTC | tipc: serialize udp bearer replicast list updates | 2 | bestswngs@gmail.com | finished in 4h57m0s |
| 2026-07-06 18:00 UTC | KVM: x86: Destroy the PIC and IOAPIC before destroying vCPUs | 2 | bestswngs@gmail.com |
finished
in 4h56m0s
[1 findings] |
| 2026-07-06 16:30 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 2 | bestswngs@gmail.com | finished in 5h22m0s |
| 2026-07-06 13:47 UTC | tipc: serialize udp bearer replicast list updates | 1 | bestswngs@gmail.com | finished in 5h5m0s |
| 2026-07-05 23:36 UTC | netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag | 1 | xmei5@asu.edu | finished in 4h55m0s |
| 2026-07-05 21:58 UTC | netfilter: ebtables: terminate table name before find_table_lock() | 1 | xmei5@asu.edu | finished in 4h26m0s |
| 2026-07-05 11:59 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 1 | bestswngs@gmail.com | finished in 4h35m0s |
| 2026-07-05 05:04 UTC | KVM: x86/ioapic: Cancel eoi_inject work before destroying vCPUs | 1 | bestswngs@gmail.com | finished in 4h8m0s |
| 2026-07-05 01:40 UTC | vfio/pci: clear vdev->msi_perm after freeing it on init failure | 1 | xmei5@asu.edu | finished in 1h42m0s |
| 2026-07-05 00:30 UTC | sctp: validate the body of a STALE_COOKIE error before reading it | 1 | xmei5@asu.edu | finished in 4h32m0s |
| 2026-07-04 22:22 UTC | vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes | 1 | xmei5@asu.edu | finished in 4h5m0s |
| 2026-07-04 21:03 UTC | xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full | 1 | xmei5@asu.edu | finished in 4h23m0s |
| 2026-07-04 17:14 UTC | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | 1 | bestswngs@gmail.com | finished in 4h35m0s |
| 2026-07-04 06:22 UTC | netfilter: ipset: skip extension destroy on hash resize replay | 1 | bestswngs@gmail.com | finished in 4h51m0s |
| 2026-07-04 03:35 UTC | sctp: validate STALE_COOKIE cause length before reading staleness | 1 | bestswngs@gmail.com | finished in 4h14m0s |
| 2026-06-30 18:32 UTC | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket | 2 | xmei5@asu.edu | finished in 2h36m0s |
| 2026-06-30 17:41 UTC | net: qualcomm: rmnet: validate MAP frame length before ingress parsing | 2 | xmei5@asu.edu | finished in 2h13m0s |
| 2026-06-30 04:51 UTC | net: usb: net1080: validate packet_len before pad-byte access in rx_fixup | 2 | xmei5@asu.edu | finished in 2h44m0s |
| 2026-06-28 07:52 UTC | net: qualcomm: rmnet: validate MAP frame length before ingress parsing | 1 | xmei5@asu.edu | finished in 1h19m0s |
| 2026-06-28 00:05 UTC | wifi: p54: validate RX frame length in p54_rx_eeprom_readback() | 1 | xmei5@asu.edu | finished in 1h33m0s |
| 2026-06-27 21:28 UTC | net: usb: net1080: validate packet_len before pad-byte access in rx_fixup | 1 | xmei5@asu.edu | finished in 2h15m0s |
| 2026-06-27 20:53 UTC | usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() | 1 | xmei5@asu.edu | finished in 2h17m0s |
| 2026-06-27 01:49 UTC | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket | 1 | xmei5@asu.edu | finished in 2h7m0s |
| 2026-06-25 16:47 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 2 | alexevgmart@gmail.com | skipped |
| 2026-06-25 01:00 UTC | netfilter: ipset: fix race between dump and ip_set_list resize | 1 | xmei5@asu.edu | finished in 4h33m0s |
| 2026-06-21 09:35 UTC | wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure | 1 | xmei5@asu.edu | finished in 4h1m0s |
| 2026-06-20 20:15 UTC | net, bpf: check master for NULL in xdp_master_redirect() | 1 | xmei5@asu.edu | finished in 4h14m0s |
| 2026-06-19 04:53 UTC | ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). | 1 | xmei5@asu.edu | finished in 4h18m0s |
| 2026-06-18 03:26 UTC | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint | 3 | xmei5@asu.edu | finished in 4h23m0s |
| 2026-06-17 13:57 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 3 | bestswngs@gmail.com | finished in 4h46m0s |
| 2026-06-17 06:55 UTC | ipv6: ndisc: fix NULL deref in accept_untracked_na() | 1 | bestswngs@gmail.com | finished in 4h21m0s |
| 2026-06-16 12:22 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 2 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-16 04:28 UTC | virtio-net: fix len check in receive_big() | 4 | xmei5@asu.edu | finished in 1h52m0s |
| 2026-06-16 00:30 UTC | net: psample: fix info leak in PSAMPLE_ATTR_DATA | 1 | kuba@kernel.org | finished in 4h24m0s |
| 2026-06-15 19:05 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 4 | xmei5@asu.edu | finished in 5h6m0s |
| 2026-06-14 03:49 UTC | psample: use nla_reserve() for PSAMPLE_ATTR_DATA | 2 | xmei5@asu.edu | finished in 4h54m0s |
| 2026-06-13 22:18 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 3 | xmei5@asu.edu | finished in 4h49m0s |
| 2026-06-12 13:07 UTC | bpf, skmsg: some fixes for skmsg | 3 | jiayuan.chen@linux.dev | finished in 4h47m0s |
| 2026-06-11 16:38 UTC | atm: fix skb leak in sigd_send() on a closing listen socket | 1 | bestswngs@gmail.com | finished in 2h6m0s |
| 2026-06-11 12:34 UTC | bpf, skmsg: some fixes for skmsg | 2 | jiayuan.chen@linux.dev | finished in 4h49m0s |
| 2026-06-11 02:46 UTC | virtio-net: fix len check in receive_big() | 3 | xmei5@asu.edu | finished in 2h38m0s |
| 2026-06-10 23:29 UTC | virtio-net: fix len check in receive_big() | 2 | xmei5@asu.edu | finished in 2h25m0s |
| 2026-06-10 22:16 UTC | virtio-net: fix len check in receive_big() | 1 | xmei5@asu.edu | finished in 2h37m0s |
| 2026-06-10 15:33 UTC | tipc: fix use-after-free of discoverer in tipc_disc_rcv() | 1 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-09 22:55 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 2 | xmei5@asu.edu | finished in 4h18m0s |
| 2026-06-09 16:21 UTC | atm: fix use-after-free in sigd_put_skb() | 2 | bestswngs@gmail.com | finished in 2h32m0s |
| 2026-06-09 06:51 UTC | bridge: cfm: reject invalid CCM interval at configuration time | 4 | xmei5@asu.edu | finished in 4h28m0s |
| 2026-06-09 04:13 UTC | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint | 2 | xmei5@asu.edu | finished in 5h17m0s |
| 2026-06-09 01:07 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 2 | xmei5@asu.edu | finished in 4h49m0s |
| 2026-06-08 21:07 UTC | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 1 | xmei5@asu.edu | finished in 4h48m0s |
| 2026-06-08 00:11 UTC | netfilter: nf_log: validate MAC header was set before dumping it | 1 | xmei5@asu.edu | finished in 4h5m0s |
| 2026-06-07 14:06 UTC | SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 | 1 | bestswngs@gmail.com | finished in 4h6m0s |
| 2026-06-07 08:56 UTC | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint | 1 | xmei5@asu.edu | finished in 4h13m0s |
| 2026-06-07 05:44 UTC | tun: zero the whole vnet header in tun_put_user() | 1 | xmei5@asu.edu | finished in 3h58m0s |
| 2026-06-07 03:16 UTC | psample: zero the netlink attribute padding in PSAMPLE_ATTR_DATA | 1 | xmei5@asu.edu | finished in 4h0m0s |
| 2026-06-06 21:58 UTC | bridge: cfm: reject invalid CCM interval at configuration time | 3 | xmei5@asu.edu | finished in 4h25m0s |
| 2026-06-06 19:24 UTC | net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion | 1 | bestswngs@gmail.com | finished in 1h49m0s |
| 2026-06-04 16:49 UTC | net: atm: fix use-after-free in sigd_put_skb() | 1 | bestswngs@gmail.com | finished in 4h40m0s |
| 2026-06-03 07:38 UTC | netfilter: nf_conntrack: destroy stale expectfn expectations on unregister | 1 | bestswngs@gmail.com | finished in 4h25m0s |
| 2026-05-31 06:39 UTC | wifi: mac80211: fix NULL dereference of eht_oper in ieee80211_start_ap() | 1 | bestswngs@gmail.com | finished in 4h6m0s |
| 2026-05-21 16:33 UTC | tun: free page on build_skb failure in tun_xdp_one() | 1 | bestswngs@gmail.com | finished in 4h40m0s |
| 2026-05-21 16:32 UTC | tap: free page on error paths in tap_get_user_xdp() | 1 | bestswngs@gmail.com | finished in 4h24m0s |
| 2026-05-21 08:12 UTC | net: team: fix NULL pointer dereference in team_xmit during mode change | 4 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-05-20 16:00 UTC | tun: free page on short-frame rejection in tun_xdp_one() | 1 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-05-20 07:57 UTC | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | 1 | bestswngs@gmail.com | finished in 1h21m0s |
| 2026-05-18 14:06 UTC | ipv6: rpl: add NULL check for idev in ipv6_rpl_srh_rcv() | 2 | andrea.mayer@uniroma2.it | finished in 4h11m0s |
| 2026-05-15 12:55 UTC | ipv6: rpl: add NULL check for idev in ipv6_rpl_srh_rcv() | 1 | bestswngs@gmail.com | finished in 4h40m0s |
| 2026-05-14 12:38 UTC | net: appletalk: fix NULL pointer dereference in aarp_send_ddp() | 1 | bestswngs@gmail.com | finished in 1h54m0s |
| 2026-05-14 12:25 UTC | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | 2 | bestswngs@gmail.com | finished in 1h26m0s |
| 2026-05-11 12:00 UTC | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | 1 | bestswngs@gmail.com | finished in 1h48m0s |
| 2026-05-11 07:15 UTC | net: hsr: fix NULL deref in hsr_get_node_data | 1 | xmei5@asu.edu | finished in 4h44m0s |
| 2026-05-11 06:21 UTC | net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot | 1 | xmei5@asu.edu | finished in 4h32m0s |
| 2026-05-10 22:26 UTC | net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | 1 | xmei5@asu.edu | finished in 2h3m0s |
| 2026-05-10 16:09 UTC | net: team: fix NULL pointer dereference in team_xmit during mode change | 3 | bestswngs@gmail.com | finished in 4h15m0s |
| 2026-05-09 18:18 UTC | net: team: fix NULL pointer dereference in team_xmit during mode change | 2 | bestswngs@gmail.com | finished in 4h9m0s |
| 2026-05-06 10:11 UTC | net: team: fix NULL pointer dereference in team_xmit during mode change | 1 | bestswngs@gmail.com | finished in 5h1m0s |
| 2026-04-26 16:53 UTC | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 1 | bestswngs@gmail.com | finished in 4h30m0s |
| 2026-04-24 19:16 UTC | bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() | 1 | bestswngs@gmail.com | finished in 4h35m0s |
| 2026-04-24 19:03 UTC | bpf, sockmap: zero-initialize pages allocated in bpf_msg_push_data | 1 | bestswngs@gmail.com | finished in 4h39m0s |
| 2026-04-23 18:38 UTC | bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() | 2 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-23 15:58 UTC | bpf, sockmap: Fix wrong rsge offset in bpf_msg_push_data() | 1 | bestswngs@gmail.com | finished in 4h10m0s |
| 2026-04-23 10:02 UTC | net/smc: fix NULL pointer dereference in smc_clc_wait_msg() | 1 | bestswngs@gmail.com | finished in 4h33m0s |
| 2026-04-22 16:19 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 5 | bestswngs@gmail.com | finished in 4h26m0s |
| 2026-04-22 06:54 UTC | bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths | 3 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-21 15:50 UTC | bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths | 2 | bestswngs@gmail.com | finished in 4h32m0s |
| 2026-04-20 16:14 UTC | bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths | 1 | bestswngs@gmail.com | finished in 4h34m0s |
| 2026-04-19 17:01 UTC | bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() | 1 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-19 10:45 UTC | netfilter: x_tables: add late validate callback for nft_compat sake | 1 | fw@strlen.de | finished in 4h17m0s |
| 2026-04-18 16:30 UTC | netfilter: xt_TCPMSS: check skb_dst before path-MTU clamping | 1 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-04-18 11:41 UTC | vxlan: fix NULL vn6_sock dereference in vxlan_igmp_join() and vxlan_igmp_leave() | 2 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-04-17 05:54 UTC | gtp: disable BH before calling udp_tunnel_xmit_skb() | 1 | devnexen@gmail.com | finished in 4h5m0s |
| 2026-04-16 18:55 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 4 | bestswngs@gmail.com | finished in 4h28m0s |
| 2026-04-16 10:01 UTC | slip: bound decode() reads against the compressed packet length | 1 | bestswngs@gmail.com | finished in 4h29m0s |
| 2026-04-16 02:46 UTC | openvswitch: cap upcall PID array size and pre-size vport replies | 5 | bestswngs@gmail.com | finished in 4h22m0s |
| 2026-04-15 21:34 UTC | slip: fix slab-out-of-bounds write in slhc_uncompress() | 1 | bestswngs@gmail.com | finished in 2h17m0s |
| 2026-04-15 20:41 UTC | slip: reject VJ receive packets on instances with no rstate array | 2 | bestswngs@gmail.com | finished in 4h40m0s |
| 2026-04-15 12:51 UTC | openvswitch: cap upcall PID array size and pre-size vport replies | 4 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-04-14 22:14 UTC | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 2 | xmei5@asu.edu | finished in 4h39m0s |
| 2026-04-14 10:43 UTC | net/sched: taprio: fix NULL pointer dereference in class dump | 3 | bestswngs@gmail.com | finished in 4h23m0s |
| 2026-04-13 03:55 UTC | openvswitch: limit vport upcall portids to the number of CPUs | 3 | bestswngs@gmail.com | finished in 4h13m0s |