| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-27 05:18 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 1 | blbllhy@gmail.com | in progress |
| 2026-08-26 20:17 UTC | xfrm: hold net_device reference under RCU in bundle creation | 2 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-26 17:13 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 2 | blbllhy@gmail.com |
finished
in 1h6m0s
[1 findings] |
| 2026-08-26 12:02 UTC | pull-request: can 2026-08-26 | 1 | mkl@pengutronix.de | finished in 3h53m0s |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 05:24 UTC | gtp: fix sk_created race conditions | 2 | blbllhy@gmail.com | finished in 3h42m0s |
| 2026-08-22 04:54 UTC | amt: fix tunnel list corruption on device stop | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-21 18:24 UTC | tcp: fix congestion control UAFs in do_tcp_getsockopt() | 1 | blbllhy@gmail.com | finished in 3h46m0s |
| 2026-08-20 20:02 UTC | xfrm: hold net_device reference under RCU in bundle creation | 1 | blbllhy@gmail.com | finished in 4h1m0s |
| 2026-08-20 02:07 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 2 | blbllhy@gmail.com | finished in 4h25m0s |
| 2026-08-20 01:06 UTC | netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-19 01:48 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 1 | blbllhy@gmail.com | finished in 4h20m0s |
| 2026-08-18 16:48 UTC | amt: do not store tunnel pointer in skb control block | 1 | blbllhy@gmail.com | finished in 4h32m0s |
| 2026-08-17 01:32 UTC | ipv6: avoid divide by zero in rt6_multipath_rebalance | 1 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-16 03:52 UTC | gtp: fix NULL pointer dereference in gtp0_handle_echo_resp() | 1 | blbllhy@gmail.com | finished in 4h23m0s |
| 2026-08-14 04:09 UTC | reboot: fix cad_pid use-after-free race | 4 | blbllhy@gmail.com | finished in 3h46m0s |
| 2026-08-13 21:53 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 4 | blbllhy@gmail.com | finished in 4h12m0s |
| 2026-08-06 20:47 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 3 | blbllhy@gmail.com | finished in 4h9m0s |
| 2026-07-30 22:20 UTC | net/openvswitch: check Ethernet header length in key_extract() | 5 | blbllhy@gmail.com | finished in 5h32m0s |
| 2026-07-27 16:19 UTC | xsk: harden TX metadata validation against races | 1 | sdf.kernel@gmail.com | finished in 5h8m0s |
| 2026-07-25 04:31 UTC | net/openvswitch: check Ethernet header length in key_extract() | 4 | blbllhy@gmail.com | finished in 3h23m0s |
| 2026-07-25 03:42 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 2 | blbllhy@gmail.com | finished in 5h10m0s |
| 2026-07-24 16:47 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 1 | blbllhy@gmail.com | finished in 5h10m0s |
| 2026-07-23 23:37 UTC | net/openvswitch: check Ethernet header length in key_extract() | 3 | blbllhy@gmail.com | finished in 3h54m0s |
| 2026-07-23 04:49 UTC | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 2 | blbllhy@gmail.com | finished in 5h19m0s |
| 2026-07-23 04:23 UTC | net/openvswitch: check Ethernet header length before key_extract() | 2 | blbllhy@gmail.com | finished in 3h48m0s |
| 2026-07-22 04:13 UTC | xsk: reject undersized tx_metadata at runtime validation | 2 | blbllhy@gmail.com | finished in 5h37m0s |
| 2026-07-21 14:36 UTC | net/openvswitch: check Ethernet header length before key_extract() | 1 | blbllhy@gmail.com | finished in 2h58m0s |
| 2026-07-20 21:41 UTC | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | 1 | blbllhy@gmail.com | finished in 5h30m0s |
| 2026-07-20 15:52 UTC | xsk: reject tx_metadata_len smaller than struct xsk_tx_metadata | 1 | blbllhy@gmail.com | finished in 5h26m0s |
| 2026-07-20 03:45 UTC | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 1 | blbllhy@gmail.com | finished in 5h15m0s |
| 2026-07-19 21:03 UTC | rds: tcp: unregister sysctl before tearing down listen socket | 2 | blbllhy@gmail.com | finished in 5h2m0s |
| 2026-07-18 18:34 UTC | rds: tcp: unregister sysctl before tearing down listen socket | 1 | blbllhy@gmail.com | finished in 4h31m0s |
| 2026-07-14 04:15 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 5 | blbllhy@gmail.com | finished in 5h12m0s |
| 2026-07-10 01:07 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 2 | blbllhy@gmail.com | finished in 5h22m0s |
| 2026-07-09 21:16 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 4 | blbllhy@gmail.com | finished in 5h7m0s |
| 2026-07-08 18:02 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 3 | blbllhy@gmail.com | finished in 5h29m0s |
| 2026-07-07 20:32 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 1 | blbllhy@gmail.com | finished in 4h19m0s |
| 2026-07-07 15:11 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 2 | blbllhy@gmail.com | finished in 5h21m0s |
| 2026-07-07 15:06 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 2 | blbllhy@gmail.com | finished in 5h16m0s |
| 2026-07-06 18:57 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 1 | blbllhy@gmail.com | finished in 1h17m0s |