| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-07 16:28 UTC | net/nfc: Fix Use-After-Free in nfc_llcp_general_bytes() | 1 | weir@nebusec.ai | finished in 4h55m0s |
| 2026-08-07 02:09 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 4 | jorijnvdgraaf@catcrafts.net | skipped |
| 2026-08-03 12:39 UTC | wifi: ath10k: make in-order rx amsdu buffers persistent | 3 | devnull@kernel.org | skipped |
| 2026-08-01 14:22 UTC | net-next: add basic support for RK3568 XPCS | 2 | coiaprant@gmail.com | finished in 2h19m0s |
| 2026-08-01 05:10 UTC | nfc: trf7970a: fix lifetime ordering around IRQ setup and teardown | 3 | fanwu01@zju.edu.cn | finished in 2h7m0s |
| 2026-07-31 02:43 UTC | nfc: st-nci: drain SE timers before NCI teardown | 2 | fanwu01@zju.edu.cn | finished in 4h39m0s |
| 2026-07-29 07:24 UTC | selftests: nci: Correct pthread_create return value check | 2 | zhulei_szu@163.com | skipped |
| 2026-07-29 01:15 UTC | nfc: nci: fix u8 underflow in nci_store_general_bytes_nfc_dep | 1 | snowwlake@icloud.com | finished in 2h35m0s |
| 2026-07-28 13:28 UTC | nfc: nci: fix use of uninitialized memory in NFC-DEP general bytes | 3 | meatuni001@gmail.com | finished in 5h12m0s |
| 2026-07-28 03:10 UTC | nfc: trf7970a: initialize lock and timeout_work before requesting the IRQ | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-07-28 03:07 UTC | nfc: trf7970a: drain timeout_work and keep trf->lock valid across teardown | 2 | fanwu01@zju.edu.cn | skipped |
| 2026-07-27 03:15 UTC | selftests: nci: Correct pthread_create return value check | 1 | zhulei_szu@163.com | skipped |
| 2026-07-26 22:24 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 3 | jorijnvdgraaf@catcrafts.net | finished in 2h54m0s |
| 2026-07-25 11:55 UTC | nfc: llcp: fix NULL pointer dereference race in nfc_llcp_send_ui_frame() | 1 | jdoh.kernel@gmail.com | finished in 5h17m0s |
| 2026-07-24 11:22 UTC | nfc: fdp: bound the device-reported read length and fix an skb leak | 3 | devnull@kernel.org | finished in 3h6m0s |
| 2026-07-23 17:44 UTC | nfc: digital: fix use-after-free in nfc_digital_unregister_device() | 2 | bestswngs@gmail.com | skipped |
| 2026-07-23 02:24 UTC | nfc: nci: Fix conn_info use-after-free | 4 | sanghyun.park.cnu@gmail.com | finished in 5h30m0s |
| 2026-07-21 20:55 UTC | MAINTAINERS: add nci tests to nfc | 1 | kuba@kernel.org | skipped |
| 2026-07-21 16:36 UTC | nfc: digital: fix use-after-free in nfc_digital_unregister_device() | 1 | bestswngs@gmail.com | finished in 1h56m0s |
| 2026-07-21 02:35 UTC | nfc: nci: free destination parameters when closing a connection | 1 | lilinmao@kylinos.cn | finished in 2h10m0s |
| 2026-07-20 19:37 UTC | nfc: llcp: Fix nfc_dev refcount leak in connect | 2 | shuangpeng.kernel@gmail.com | finished in 5h42m0s |
| 2026-07-20 10:13 UTC | MAINTAINERS: Add Matrix channel to the NFC subsystem | 1 | devnull@kernel.org | skipped |
| 2026-07-19 21:45 UTC | wifi: ath10k: make in-order rx amsdu buffers persistent | 2 | devnull@kernel.org | finished in 1h40m0s |
| 2026-07-16 23:26 UTC | nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() | 1 | qwe.aldo@gmail.com | finished in 5h22m0s |
| 2026-07-16 20:35 UTC | nfc: fix remaining OOB bugs in NCI/LLCP parsing | 5 | snowwlake@icloud.com | finished in 2h34m0s |
| 2026-07-16 03:16 UTC | NFC: trf7970a: Remove redundant dev_err() | 1 | panchuang@vivo.com | skipped |
| 2026-07-14 16:46 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 3 | doruk@0sec.ai | finished in 5h7m0s |
| 2026-07-13 21:59 UTC | nfc: microread: validate CARD_FOUND event length before parsing targets | 1 | doruk@0sec.ai | finished in 1h55m0s |
| 2026-07-13 15:58 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 2 | doruk@0sec.ai | finished in 5h27m0s |
| 2026-07-13 01:21 UTC | nfc: llcp: Fix raw socket local ref leak on rebind | 1 | shuangpeng.kernel@gmail.com | finished in 5h0m0s |
| 2026-07-11 12:36 UTC | nfc: port100: reject frames whose declared length exceeds the received data | 1 | doruk@0sec.ai | finished in 2h59m0s |
| 2026-07-11 12:36 UTC | nfc: fdp: bound the device-supplied read size in fdp_nci_i2c_read() | 1 | doruk@0sec.ai | finished in 3h47m0s |
| 2026-07-11 07:30 UTC | nfc: llcp: guard against short PDUs in nfc_llcp_rx_skb() | 1 | doruk@0sec.ai | finished in 5h17m0s |
| 2026-07-11 07:27 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 1 | doruk@0sec.ai | finished in 4h53m0s |
| 2026-07-11 07:13 UTC | nfc: st21nfca: validate ATR_REQ length against the received frame | 1 | doruk@0sec.ai | finished in 4h6m0s |
| 2026-07-10 17:55 UTC | nfc: llcp: validate TLV length before parsing to fix OOB read | 1 | bestswngs@gmail.com | finished in 5h39m0s |
| 2026-07-10 06:12 UTC | nfc: digital: Do not dump a NULL response in command completion | 1 | lilinmao@kylinos.cn | skipped |
| 2026-07-09 13:12 UTC | nfc: llcp: bound the connect_sn TLV walk to the skb | 2 | doruk@0sec.ai | finished in 4h55m0s |
| 2026-07-08 11:51 UTC | nfc: llcp: Move to .getsockopt_iter | 1 | leitao@debian.org | finished in 4h51m0s |
| 2026-07-07 18:35 UTC | nfc: llcp: Fix nfc_dev refcount leak in connect | 1 | shuangpeng.kernel@gmail.com | finished in 4h52m0s |
| 2026-07-06 07:57 UTC | nfc: trf7970a: Use NULL when no response is expected | 1 | lilinmao@kylinos.cn | skipped |
| 2026-07-05 19:06 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 2 | jorijnvdgraaf@catcrafts.net | finished in 2h28m0s |
| 2026-07-05 11:56 UTC | nfc: llcp: bound the remaining LLCP TLV parsers to their buffers | 1 | doruk@0sec.ai | finished in 4h46m0s |
| 2026-07-03 20:26 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 1 | jorijnvdgraaf@catcrafts.net | finished in 2h16m0s |
| 2026-07-01 15:22 UTC | nfc: st-nci: align frame buffers for typed length load | 2 | runyu.xiao@seu.edu.cn | finished in 1h38m0s |
| 2026-06-30 07:17 UTC | nfc: nci: Fix conn_info use-after-free | 3 | sanghyun.park.cnu@gmail.com | finished in 4h33m0s |
| 2026-06-28 21:49 UTC | nfc: nci: fix use of uninitialized memory in NFC-DEP general bytes | 2 | meatuni001@gmail.com | skipped |
| 2026-06-28 21:45 UTC | nfc: nci: fix use of uninitialized memory in NFC-DEP general bytes | 2 | meatuni001@gmail.com | skipped |
| 2026-06-28 21:16 UTC | nfc: nci: fix use of uninitialized memory in NFC-DEP general bytes | 1 | meatuni001@gmail.com | finished in 4h10m0s |
| 2026-06-28 21:00 UTC | nfc: nci: fix out-of-bounds read in activation parameter parsing | 1 | meatuni001@gmail.com | finished in 4h8m0s |
| 2026-06-27 13:13 UTC | nfc: pn533: fix use-after-free in pn533_recv_frame | 1 | dddddd@hust.edu.cn | finished in 1h56m0s |
| 2026-06-26 09:03 UTC | nfc: nci: fix uninit-value in the RF discover/activated NTF handlers | 2 | sam@bynar.io | finished in 4h29m0s |
| 2026-06-26 07:34 UTC | nfc: pn533: hold a reference to the request skb during send_frame | 1 | dddddd@hust.edu.cn | finished in 2h29m0s |
| 2026-06-25 11:18 UTC | nfc: clear active_target when the target list is replaced | 1 | dddddd@hust.edu.cn | finished in 5h8m0s |
| 2026-06-24 22:44 UTC | nfc: nci: fix uninit-value in nci_core_init_rsp_packet() | 2 | sam@bynar.io | finished in 4h27m0s |
| 2026-06-23 23:41 UTC | nfc: nci: fix uninit-value in the RF discover/activated NTF handlers | 1 | sam@bynar.io | finished in 3h55m0s |
| 2026-06-23 22:24 UTC | nfc: nci: fix uninit-value in nci_core_init_rsp_packet() | 1 | sam@bynar.io |
finished
in 3h57m0s
[1 findings] |
| 2026-06-22 14:52 UTC | nfc: nci: fix out-of-bounds write in nci_target_auto_activated() | 1 | sam@bynar.io | finished in 4h4m0s |
| 2026-06-22 13:18 UTC | nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers | 2 | meatuni001@gmail.com | finished in 5h1m0s |
| 2026-06-17 04:33 UTC | nfc: fdp: bound the device-reported read length and fix an skb leak | 2 | devnull@kernel.org | finished in 54m0s |
| 2026-06-15 10:35 UTC | nfc: pn533: prevent division by zero in the listen mode timer | 1 | dddddd@hust.edu.cn | finished in 2h9m0s |
| 2026-06-15 08:04 UTC | nfc: fdp: reject an oversized device-reported packet length | 1 | devnull@kernel.org | finished in 1h13m0s |
| 2026-06-12 17:50 UTC | nfc: nci: add data_len bound checks to activation parameter extractors | 3 | devnull@kernel.org | finished in 4h39m0s |
| 2026-06-11 16:27 UTC | nfc: nci: validate packet length when parsing NCI 2.x RF interfaces | 1 | yzjaurora@gmail.com | finished in 4h32m0s |
| 2026-06-10 06:41 UTC | nfc: nci: add data_len bound checks to activation parameter extractors | 2 | hexlabsecurity@proton.me | finished in 4h39m0s |
| 2026-06-09 20:25 UTC | nfc: llcp: bound SNL TLV parsing to the skb and add length checks | 4 | doruk@0sec.ai | finished in 42m0s |
| 2026-06-07 09:48 UTC | nfc: nci: add data_len bound checks to activation parameter extractors | 1 | hexlabsecurity@proton.me | finished in 4h1m0s |
| 2026-06-04 15:22 UTC | nfc: llcp: bound SNL TLV parsing to the skb and add length checks | 3 | doruk@0sec.ai | finished in 4h16m0s |
| 2026-06-03 14:13 UTC | nfc: digital: clamp SENSF_RES length to the destination buffer | 2 | doruk@0sec.ai | finished in 2h31m0s |
| 2026-06-03 13:59 UTC | nfc: llcp: bound SNL TLV parsing to the skb and add length checks | 2 | doruk@0sec.ai | finished in 4h24m0s |
| 2026-06-01 14:09 UTC | nfc: llcp: Fix race condition in accept_queue lifecycle | 1 | lee@kernel.org | finished in 4h45m0s |
| 2026-05-27 05:26 UTC | nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing | 3 | yun.zhou@windriver.com | finished in 4h35m0s |
| 2026-05-26 10:31 UTC | nfc: nci: fix double completion race in nci_data_exchange_complete | 1 | kipreyyy@gmail.com | finished in 4h44m0s |
| 2026-05-25 20:24 UTC | nfc: llcp: fix integer underflow and missing bounds checks in TLV parsing | 1 | doruk@0sec.ai | skipped |
| 2026-05-22 02:13 UTC | nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing | 2 | yun.zhou@windriver.com | finished in 4h33m0s |
| 2026-05-21 14:32 UTC | nfc: llcp: two fixes for nfc_llcp_getsockopt() | 2 | leitao@debian.org | finished in 5h10m0s |
| 2026-05-20 16:53 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 3 | leitao@debian.org | finished in 4h11m0s |
| 2026-05-19 09:32 UTC | nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems | 5 | devnull@kernel.org | finished in 1h25m0s |
| 2026-05-19 09:06 UTC | nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems | 4 | devnull@kernel.org | finished in 1h16m0s |
| 2026-05-19 01:30 UTC | nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing | 1 | yun.zhou@windriver.com | finished in 4h41m0s |
| 2026-05-19 01:19 UTC | nfc: llcp: fix OOB reads and integer bugs in TLV parsers | 1 | meatuni001@gmail.com | finished in 4h31m0s |
| 2026-05-16 11:55 UTC | nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems | 3 | devnull@kernel.org | finished in 1h11m0s |
| 2026-05-15 08:32 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 2 | leitao@debian.org | finished in 4h40m0s |
| 2026-05-13 12:34 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 1 | leitao@debian.org | finished in 4h38m0s |
| 2026-05-13 10:57 UTC | nfc: llcp: avoid userspace overflow on invalid optlen | 1 | leitao@debian.org | finished in 4h27m0s |
| 2026-05-10 20:12 UTC | NFC: nci: uart: Constify struct tty_ldisc_ops | 1 | christophe.jaillet@wanadoo.fr | finished in 1h18m0s |
| 2026-05-05 17:07 UTC | nfc: hci: fix out-of-bounds read in HCP header parsing | 7 | ashutoshdesai993@gmail.com | finished in 4h34m0s |
| 2026-05-01 00:35 UTC | nfc: trf7970a: fix comment typos | 1 | mileskrause5200@gmail.com | finished in 1h15m0s |
| 2026-04-28 14:24 UTC | MAINTAINERS: Add myself as NFC subsystem maintainer | 1 | devnull@kernel.org | finished in 1h18m0s |
| 2026-04-07 06:43 UTC | ath10k: Introduce a devicetree quirk to skip host cap QMI requests | 5 | devnull@kernel.org | finished in 37m0s |
| 2026-04-03 13:58 UTC | NFC support for five Qualcomm SDM845 phones | 3 | devnull@kernel.org | finished in 1h15m0s |
| 2026-03-25 17:57 UTC | ath10k: Introduce a devicetree quirk to skip host cap QMI requests | 4 | devnull@kernel.org | finished in 1h1m0s |
| 2026-03-25 16:41 UTC | ath10k: Introduce a devicetree quirk to skip host cap QMI requests | 3 | devnull@kernel.org | finished in 1h9m0s |
| 2026-03-23 23:20 UTC | NFC support for two Qualcomm SDM845 phones | 2 | devnull@kernel.org | finished in 1h7m0s |
| 2026-03-22 14:24 UTC | NFC support in Linux (and support for Qualcomm SDM845 devices) | 1 | devnull@kernel.org | finished in 1h2m0s |
| 2025-11-18 11:37 UTC | mm/vmalloc: warn only once when vmalloc detect invalid gfp flags | 2 | devnull@kernel.org | finished in 4h23m0s |
| 2025-11-18 00:05 UTC | mm/vmalloc: warn only once when vmalloc detect invalid gfp flags | 1 | devnull@kernel.org | finished in 41m0s |
| 2025-11-11 12:34 UTC | ath10k: Introduce a firmware quirk to skip host cap QMI requests | 1 | devnull@kernel.org | finished in 1h36m0s |
| 2025-11-10 14:26 UTC | ath10k: Introduce a devicetree quirk to skip host cap QMI requests | 2 | devnull@kernel.org | finished in 1h0m0s |