| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-23 13:33 UTC | nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() | 1 | qwe.aldo@gmail.com | - |
| 2026-09-23 13:27 UTC | Input: s6sy761 - fix resume ordering and restore sensing | 1 | devnull@kernel.org | - |
| 2026-09-22 22:38 UTC | misc: fastrpc: Don't fail probe when the SDSP memory assign fails | 1 | devnull@kernel.org | - |
| 2026-09-22 20:03 UTC | net: pcs: add basic support for RK3568 XPCS | 10 | coiaprant@gmail.com | - |
| 2026-09-22 10:21 UTC | nfc: nci: ignore unexpected CORE_RESET_NTF and CORE_RESET_RSP | 2 | ndaugoing@gmail.com | in progress |
| 2026-09-22 08:07 UTC | nfc: nci: ignore unexpected CORE_RESET_NTF and CORE_RESET_RSP | 2 | ndaugoing@gmail.com | finished in 4h26m0s |
| 2026-09-20 17:01 UTC | net: pcs: add basic support for RK3568 XPCS | 9 | coiaprant@gmail.com | skipped |
| 2026-09-19 12:51 UTC | net: pcs: add basic support for RK3568 XPCS | 8 | coiaprant@gmail.com | skipped |
| 2026-09-18 18:54 UTC | nfc: nci: avoid unbounded skb allocation when max_pkt_payload_len is zero | 2 | liuc63@xiaopeng.com | finished in 4h37m0s |
| 2026-09-18 03:39 UTC | nfc: llcp: reject connect() on sockets not in LLCP_CLOSED state | 1 | ndaugoing@gmail.com | finished in 4h10m0s |
| 2026-09-18 02:04 UTC | nfc: nci: do not process unexpected or invalid CORE_CONN_CREATE_RSP | 1 | ndaugoing@gmail.com | finished in 4h11m0s |
| 2026-09-18 01:33 UTC | nfc: nci: ignore unexpected CORE_RESET_NTF | 1 | ndaugoing@gmail.com | finished in 4h14m0s |
| 2026-09-18 00:04 UTC | wifi: ath10k: skip completion wait for pairwise key removal | 1 | devnull@kernel.org | skipped |
| 2026-09-17 20:46 UTC | net: pcs: add basic support for RK3568 XPCS | 7 | coiaprant@gmail.com | skipped |
| 2026-09-17 16:38 UTC | nfc: llcp: Fix local use-after-free in nfc_llcp_general_bytes() | 1 | vulab@iscas.ac.cn | finished in 4h6m0s |
| 2026-09-17 14:08 UTC | media: v4l2: Clear subdev devnode before calling release() | 1 | devnull@kernel.org | skipped |
| 2026-09-17 12:25 UTC | NFC: trf7970a: Fix runtime PM leak in trf7970a_switch_rf_on() | 1 | vulab@iscas.ac.cn | skipped |
| 2026-09-16 07:34 UTC | nfc: llcp: Fix socket reference leak in nfc_llcp_recv_ui() | 1 | vulab@iscas.ac.cn | finished in 4h19m0s |
| 2026-09-15 22:25 UTC | arm64: dts: qcom: sdm845-xiaomi: Recent firmware needs bigger XBL | 1 | devnull@kernel.org | skipped |
| 2026-09-15 18:54 UTC | nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() | 2 | elb12345@hotmail.co.uk | finished in 4h20m0s |
| 2026-09-15 12:37 UTC | net: pcs: add basic support for RK3568 XPCS | 6 | coiaprant@gmail.com | skipped |
| 2026-09-14 12:11 UTC | nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure | 1 | congnt264@gmail.com | finished in 5h27m0s |
| 2026-09-13 20:24 UTC | nfc: digital: check DEP_REQ length before reading DID byte | 3 | elb12345@hotmail.co.uk | finished in 1h49m0s |
| 2026-09-13 18:58 UTC | net: pcs: add basic support for RK3568 XPCS | 5 | coiaprant@gmail.com | skipped |
| 2026-09-13 10:13 UTC | nfc: nci: avoid unbounded skb allocation when max_pkt_payload_len is zero | 1 | liuc63@xiaopeng.com | finished in 3h58m0s |
| 2026-09-13 04:26 UTC | nfc: trf7970a: power down on startup RX gain failure | 1 | mhun512@gmail.com | skipped |
| 2026-09-12 16:52 UTC | nfc: nci: validate CORE_CONN_CREATE response length before reading fields | 2 | elb12345@hotmail.co.uk | finished in 3h45m0s |
| 2026-09-12 13:19 UTC | nfc: digital: check DEP_REQ length before reading DID byte | 2 | elb12345@hotmail.co.uk | finished in 1h38m0s |
| 2026-09-12 13:18 UTC | nfc: digital: fix two bugs in NFC-DEP chaining and frame handling | 1 | liuc63@xiaopeng.com | finished in 1h46m0s |
| 2026-09-12 11:57 UTC | nfc: hci: add bounds checking in nfc_hci_create_pipe() | 1 | liuc63@xiaopeng.com | finished in 2h29m0s |
| 2026-09-09 05:19 UTC | net: nfc: fix use-after-free in nfc_get_local_general_bytes | 3 | weir@nebusec.ai | finished in 4h2m0s |
| 2026-09-08 20:53 UTC | backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe | 1 | devnull@kernel.org | skipped |
| 2026-09-07 15:37 UTC | net: pcs: add basic support for RK3568 XPCS | 4 | coiaprant@gmail.com | skipped |
| 2026-09-07 06:28 UTC | nfc: nci: validate CORE_CONN_CREATE response length before reading fields | 1 | elb12345@hotmail.co.uk | finished in 4h14m0s |
| 2026-09-06 23:36 UTC | nfc: digital: check DEP_REQ length before reading DID byte | 1 | elb12345@hotmail.co.uk | finished in 2h37m0s |
| 2026-09-06 23:36 UTC | nfc: llcp: validate PDU size in nfc_llcp_recv_dm() and nfc_llcp_recv_hdlc() | 1 | elb12345@hotmail.co.uk | finished in 4h31m0s |
| 2026-09-06 00:38 UTC | nfc: llcp: fix slab-out-of-bounds reads when logging service names | 3 | omermetekaya0@gmail.com | skipped |
| 2026-09-05 22:48 UTC | nfc: llcp: fix slab-out-of-bounds read in nfc_llcp_wks_sap() | 2 | omermetekaya0@gmail.com | skipped |
| 2026-09-04 16:42 UTC | nfc: virtual_ncidev: Add missing ioctl compat handler | 1 | christian.gellermann@codasip.com | finished in 1h35m0s |
| 2026-09-04 09:59 UTC | selftests/nci: Fix out-of-bounds store on thread join | 1 | christian.gellermann@codasip.com | skipped |
| 2026-09-03 16:49 UTC | nfc: llcp: fix slab-out-of-bounds read in nfc_llcp_wks_sap() | 1 | omermetekaya0@gmail.com | skipped |
| 2026-09-02 21:22 UTC | nfc: st-nci: Fairphone 5 NFC bring-up (ST21NFCD) | 4 | isyourbrainfoss@proton.me | skipped |
| 2026-09-02 12:30 UTC | nfc: llcp: Fix race condition in accept_queue lifecycle | 3 | lee@kernel.org | finished in 4h52m0s |
| 2026-09-01 15:01 UTC | net: pcs: add basic support for RK3568 XPCS | 3 | coiaprant@gmail.com | skipped |
| 2026-09-01 14:47 UTC | net: nfc: Fix use-after-free in general bytes retrieval | 2 | weir@nebusec.ai | finished in 4h35m0s |
| 2026-09-01 07:06 UTC | selftests: nci: Fix uninitialized family ID on missing attribute | 1 | nagachaithanya9911@gmail.com | finished in 2h29m0s |
| 2026-08-26 07:57 UTC | nfc: llcp: Fix race condition in accept_queue lifecycle | 2 | lee@kernel.org |
finished
in 1h59m0s
[1 findings] |
| 2026-08-21 14:13 UTC | nfc: llcp: fix UAF on socket in nfc_llcp_tx_work() | 1 | edumazet@google.com | finished in 4h26m0s |
| 2026-08-21 10:32 UTC | nfc: llcp: fix NULL pointer dereference race in nfc_llcp_send_ui_frame() | 2 | jdoh.kernel@gmail.com | finished in 4h10m0s |
| 2026-08-19 21:09 UTC | nfc: st-nci: Fairphone 5 NFC bring-up (ST21NFCD) | 2 | isyourbrainfoss@proton.me | skipped |
| 2026-08-17 18:46 UTC | selftests: nci: Fix wrong size of status variables in nci_dev test | 2 | thuth@redhat.com | skipped |
| 2026-08-12 09:24 UTC | nfc: nci: fix use of uninitialized memory in NFC-DEP general bytes | 4 | meatuni001@gmail.com | finished in 4h27m0s |
| 2026-08-12 07:38 UTC | nfc: nci: Fix conn_info use-after-free | 5 | sanghyun.park.cnu@gmail.com | finished in 4h3m0s |
| 2026-08-11 22:01 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 5 | jorijnvdgraaf@catcrafts.net | finished in 1h56m0s |
| 2026-08-07 16:28 UTC | net/nfc: Fix Use-After-Free in nfc_llcp_general_bytes() | 1 | weir@nebusec.ai | finished in 4h55m0s |
| 2026-08-07 02:09 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 4 | jorijnvdgraaf@catcrafts.net | skipped |
| 2026-08-03 12:39 UTC | wifi: ath10k: make in-order rx amsdu buffers persistent | 3 | devnull@kernel.org | skipped |
| 2026-08-01 14:22 UTC | net-next: add basic support for RK3568 XPCS | 2 | coiaprant@gmail.com | finished in 2h19m0s |
| 2026-08-01 05:10 UTC | nfc: trf7970a: fix lifetime ordering around IRQ setup and teardown | 3 | fanwu01@zju.edu.cn | finished in 2h7m0s |
| 2026-07-31 02:43 UTC | nfc: st-nci: drain SE timers before NCI teardown | 2 | fanwu01@zju.edu.cn | finished in 4h39m0s |
| 2026-07-29 07:24 UTC | selftests: nci: Correct pthread_create return value check | 2 | zhulei_szu@163.com | skipped |
| 2026-07-29 01:15 UTC | nfc: nci: fix u8 underflow in nci_store_general_bytes_nfc_dep | 1 | snowwlake@icloud.com | finished in 2h35m0s |
| 2026-07-28 13:28 UTC | nfc: nci: fix use of uninitialized memory in NFC-DEP general bytes | 3 | meatuni001@gmail.com | finished in 5h12m0s |
| 2026-07-28 03:10 UTC | nfc: trf7970a: initialize lock and timeout_work before requesting the IRQ | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-07-28 03:07 UTC | nfc: trf7970a: drain timeout_work and keep trf->lock valid across teardown | 2 | fanwu01@zju.edu.cn | skipped |
| 2026-07-27 03:15 UTC | selftests: nci: Correct pthread_create return value check | 1 | zhulei_szu@163.com | skipped |
| 2026-07-26 22:24 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 3 | jorijnvdgraaf@catcrafts.net | finished in 2h54m0s |
| 2026-07-25 11:55 UTC | nfc: llcp: fix NULL pointer dereference race in nfc_llcp_send_ui_frame() | 1 | jdoh.kernel@gmail.com | finished in 5h17m0s |
| 2026-07-24 11:22 UTC | nfc: fdp: bound the device-reported read length and fix an skb leak | 3 | devnull@kernel.org | finished in 3h6m0s |
| 2026-07-23 17:44 UTC | nfc: digital: fix use-after-free in nfc_digital_unregister_device() | 2 | bestswngs@gmail.com | skipped |
| 2026-07-23 02:24 UTC | nfc: nci: Fix conn_info use-after-free | 4 | sanghyun.park.cnu@gmail.com | finished in 5h30m0s |
| 2026-07-21 20:55 UTC | MAINTAINERS: add nci tests to nfc | 1 | kuba@kernel.org | skipped |
| 2026-07-21 16:36 UTC | nfc: digital: fix use-after-free in nfc_digital_unregister_device() | 1 | bestswngs@gmail.com | finished in 1h56m0s |
| 2026-07-21 02:35 UTC | nfc: nci: free destination parameters when closing a connection | 1 | lilinmao@kylinos.cn | finished in 2h10m0s |
| 2026-07-20 19:37 UTC | nfc: llcp: Fix nfc_dev refcount leak in connect | 2 | shuangpeng.kernel@gmail.com | finished in 5h42m0s |
| 2026-07-20 10:13 UTC | MAINTAINERS: Add Matrix channel to the NFC subsystem | 1 | devnull@kernel.org | skipped |
| 2026-07-19 21:45 UTC | wifi: ath10k: make in-order rx amsdu buffers persistent | 2 | devnull@kernel.org | finished in 1h40m0s |
| 2026-07-16 23:26 UTC | nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() | 1 | qwe.aldo@gmail.com | finished in 5h22m0s |
| 2026-07-16 20:35 UTC | nfc: fix remaining OOB bugs in NCI/LLCP parsing | 5 | snowwlake@icloud.com | finished in 2h34m0s |
| 2026-07-16 03:16 UTC | NFC: trf7970a: Remove redundant dev_err() | 1 | panchuang@vivo.com | skipped |
| 2026-07-14 16:46 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 3 | doruk@0sec.ai | finished in 5h7m0s |
| 2026-07-13 21:59 UTC | nfc: microread: validate CARD_FOUND event length before parsing targets | 1 | doruk@0sec.ai | finished in 1h55m0s |
| 2026-07-13 15:58 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 2 | doruk@0sec.ai | finished in 5h27m0s |
| 2026-07-13 01:21 UTC | nfc: llcp: Fix raw socket local ref leak on rebind | 1 | shuangpeng.kernel@gmail.com | finished in 5h0m0s |
| 2026-07-11 12:36 UTC | nfc: port100: reject frames whose declared length exceeds the received data | 1 | doruk@0sec.ai | finished in 2h59m0s |
| 2026-07-11 12:36 UTC | nfc: fdp: bound the device-supplied read size in fdp_nci_i2c_read() | 1 | doruk@0sec.ai | finished in 3h47m0s |
| 2026-07-11 07:30 UTC | nfc: llcp: guard against short PDUs in nfc_llcp_rx_skb() | 1 | doruk@0sec.ai | finished in 5h17m0s |
| 2026-07-11 07:27 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 1 | doruk@0sec.ai | finished in 4h53m0s |
| 2026-07-11 07:13 UTC | nfc: st21nfca: validate ATR_REQ length against the received frame | 1 | doruk@0sec.ai | finished in 4h6m0s |
| 2026-07-10 17:55 UTC | nfc: llcp: validate TLV length before parsing to fix OOB read | 1 | bestswngs@gmail.com | finished in 5h39m0s |
| 2026-07-10 06:12 UTC | nfc: digital: Do not dump a NULL response in command completion | 1 | lilinmao@kylinos.cn | skipped |
| 2026-07-09 13:12 UTC | nfc: llcp: bound the connect_sn TLV walk to the skb | 2 | doruk@0sec.ai | finished in 4h55m0s |
| 2026-07-08 11:51 UTC | nfc: llcp: Move to .getsockopt_iter | 1 | leitao@debian.org | finished in 4h51m0s |
| 2026-07-07 18:35 UTC | nfc: llcp: Fix nfc_dev refcount leak in connect | 1 | shuangpeng.kernel@gmail.com | finished in 4h52m0s |
| 2026-07-06 07:57 UTC | nfc: trf7970a: Use NULL when no response is expected | 1 | lilinmao@kylinos.cn | skipped |
| 2026-07-05 19:06 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 2 | jorijnvdgraaf@catcrafts.net | finished in 2h28m0s |
| 2026-07-05 11:56 UTC | nfc: llcp: bound the remaining LLCP TLV parsers to their buffers | 1 | doruk@0sec.ai | finished in 4h46m0s |
| 2026-07-03 20:26 UTC | nfc: s3fwrn5: support the S3NRN4V variant | 1 | jorijnvdgraaf@catcrafts.net | finished in 2h16m0s |
| 2026-07-01 15:22 UTC | nfc: st-nci: align frame buffers for typed length load | 2 | runyu.xiao@seu.edu.cn | finished in 1h38m0s |
| 2026-06-30 07:17 UTC | nfc: nci: Fix conn_info use-after-free | 3 | sanghyun.park.cnu@gmail.com | finished in 4h33m0s |