| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-11 09:09 UTC | net/smc: fix lgr/lnk lifetime vs diag reader race | 4 | mjambigi@linux.ibm.com | finished in 4h53m0s |
| 2026-09-10 10:44 UTC | net/smc: fix v2 slot clearing and reduce TX slot contention | 1 | alibuda@linux.alibaba.com | finished in 2h2m0s |
| 2026-09-08 09:22 UTC | net/smc: fix lgr/lnk lifetime vs diag reader race | 3 | mjambigi@linux.ibm.com | finished in 4h38m0s |
| 2026-09-07 11:47 UTC | net/smc: fix abort_work termination in smc_conn_free() | 2 | hidayath@linux.ibm.com | finished in 4h15m0s |
| 2026-09-04 09:44 UTC | dibs: Avoid inconsistent lockstate warning in dibs_lo_move_data() | 1 | wintera@linux.ibm.com | finished in 4h38m0s |
| 2026-08-28 06:54 UTC | net/smc: fix diag dump lifetime races | 2 | mjambigi@linux.ibm.com | finished in 5h31m0s |
| 2026-08-24 06:58 UTC | net/smc: serialize clcsock teardown in smc_accept_dequeue | 1 | mjambigi@linux.ibm.com | finished in 4h36m0s |
| 2026-08-24 02:27 UTC | net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure | 4 | chuyf26@linux.alibaba.com | finished in 4h40m0s |
| 2026-08-23 07:19 UTC | net/smc: prevent device removal during connection setup | 2 | marsy12010123@gmail.com | finished in 3h57m0s |
| 2026-08-21 09:17 UTC | net/smc: fix v2 slot clearing and reduce TX slot contention | 2 | alibuda@linux.alibaba.com | finished in 2h46m0s |
| 2026-08-20 14:47 UTC | net/smc: fix socket refcount leak in smc_switch_conns() | 2 | hidayath@linux.ibm.com | finished in 4h30m0s |
| 2026-08-20 08:55 UTC | net/smc: do not credit bytes that splice() did not take | 1 | hidayath@linux.ibm.com | finished in 2h16m0s |
| 2026-08-20 07:46 UTC | net/smc: fix use-after-free in smc_rx_pipe_buf_release() | 2 | hidayath@linux.ibm.com | finished in 4h6m0s |
| 2026-08-19 02:33 UTC | net/smc: fix out-of-bounds and use-after-free in SMC-Rv2 LLC processing | 7 | yhlee@isslab.korea.ac.kr | finished in 1h48m0s |
| 2026-08-18 07:39 UTC | net/smc: free pending qentry in smc_llc_flow_stop() before memset | 1 | mjambigi@linux.ibm.com | finished in 2h2m0s |
| 2026-08-18 07:31 UTC | net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition | 1 | mjambigi@linux.ibm.com | finished in 1h44m0s |
| 2026-08-13 07:43 UTC | net/smc: hash socket only after full initialisation in smc_sk_init() | 1 | mjambigi@linux.ibm.com | finished in 4h4m0s |
| 2026-08-13 06:08 UTC | net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure | 2 | chuyf26@linux.alibaba.com | finished in 4h40m0s |
| 2026-08-12 07:22 UTC | net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure | 1 | chuyf26@linux.alibaba.com | finished in 4h33m0s |
| 2026-08-11 23:19 UTC | net/smc: fix out-of-bounds and use-after-free in SMC-Rv2 LLC processing | 6 | yhlee@isslab.korea.ac.kr | finished in 2h0m0s |
| 2026-08-10 13:01 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 4 | joel.granados@kernel.org | finished in 4h5m0s |
| 2026-08-10 11:14 UTC | net/dibs: Correct freeing of dmb_clientid_arr | 1 | wintera@linux.ibm.com | finished in 4h17m0s |
| 2026-08-10 06:40 UTC | net/smc: fix use-after-free in smc_rx_pipe_buf_release() | 1 | hidayath@linux.ibm.com | finished in 3h50m0s |
| 2026-08-08 07:21 UTC | net/smc: close the SMC-D teardown window around the ghost send buffer | 2 | devnull@kernel.org | finished in 3h45m0s |
| 2026-08-07 08:16 UTC | net/smc: fix clcsock and lgr/lnk races in smc_diag dump path | 3 | mjambigi@linux.ibm.com |
finished
in 5h15m0s
[1 findings] |
| 2026-08-06 12:04 UTC | dibs: fix double free of dmb_clientid_arr | 2 | hidayath@linux.ibm.com | finished in 4h47m0s |
| 2026-08-06 12:00 UTC | dibs: fix double free of dmb_clientid_arr | 2 | hidayath@linux.ibm.com | finished in 4h40m0s |
| 2026-08-06 08:15 UTC | net/smc: drop the abort_work reference when the work is cancelled | 1 | hidayath@linux.ibm.com | finished in 4h2m0s |
| 2026-08-06 06:42 UTC | net/smc: fix v2 slot clearing and reduce TX slot contention | 1 | alibuda@linux.alibaba.com | finished in 2h10m0s |
| 2026-08-04 21:39 UTC | net/smc: fix sock refcount leak in smc_switch_conns() error path | 1 | gyf161023@gmail.com | finished in 3h59m0s |
| 2026-08-04 14:11 UTC | net/smc: abort the connection when the peer overruns the RMB | 1 | hidayath@linux.ibm.com | finished in 3h20m0s |
| 2026-08-04 12:34 UTC | net/smc: prevent device removal during connection setup | 1 | marsy12010123@gmail.com | finished in 4h5m0s |
| 2026-08-04 08:28 UTC | net/smc: fix socket refcount leak in smc_switch_conns() | 1 | hidayath@linux.ibm.com | finished in 4h24m0s |
| 2026-08-03 07:07 UTC | net/smc: fix TOCTOU race between smc_listen_out() and listener close | 1 | sidraya@linux.ibm.com | finished in 4h3m0s |
| 2026-08-01 09:42 UTC | net/smc: fix out-of-bounds and use-after-free in SMC-Rv2 LLC processing | 5 | yhlee@isslab.korea.ac.kr | finished in 2h24m0s |
| 2026-07-31 07:05 UTC | net/smc: fix out-of-bounds and use-after-free in SMC-Rv2 LLC processing | 4 | yhlee@isslab.korea.ac.kr | finished in 2h24m0s |
| 2026-07-30 14:55 UTC | net: smc: smc_rx_splice() can underflow VM page refcounts | 2 | enjou1224z@gmail.com | finished in 2h16m0s |
| 2026-07-30 12:42 UTC | dibs: initialise dibs->lock in dibs_dev_alloc() | 1 | hidayath@linux.ibm.com | finished in 2h17m0s |
| 2026-07-30 07:56 UTC | dibs: fix double free of dmb_clientid_arr | 1 | hidayath@linux.ibm.com | finished in 4h48m0s |
| 2026-07-29 13:01 UTC | net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() | 1 | mjambigi@linux.ibm.com | finished in 2h16m0s |
| 2026-07-28 16:52 UTC | net/smc: order the CDC receive path against buffer publication | 4 | devnull@kernel.org | finished in 3h39m0s |
| 2026-07-27 09:58 UTC | net/smc: fix out-of-bounds read of rkey array in SMC-Rv2 LLC processing | 3 | yhlee@isslab.korea.ac.kr | finished in 3h49m0s |
| 2026-07-27 09:35 UTC | dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister | 1 | hidayath@linux.ibm.com | finished in 5h14m0s |
| 2026-07-27 04:08 UTC | net/smc: clamp peer supplied CDC cursors to the buffer size | 1 | nguyenlethanhtung555@gmail.com | finished in 3h37m0s |
| 2026-07-27 02:14 UTC | net/smc: drain the rx tasklet before detaching the ghost sndbuf | 1 | devnull@kernel.org | finished in 5h17m0s |
| 2026-07-24 06:16 UTC | net/smc: fix out-of-bounds read of rkey array in SMC-Rv2 LLC processing | 2 | yhlee@isslab.korea.ac.kr | finished in 3h29m0s |
| 2026-07-24 05:37 UTC | MAINTAINERS: Update SHARED MEMORY COMMUNICATIONS (SMC) maintainer entries | 3 | wenjia@linux.ibm.com | skipped |
| 2026-07-24 04:53 UTC | net/smc: fix out-of-bounds read of rkey array in SMC-Rv2 LLC processing | 2 | yhlee@isslab.korea.ac.kr | finished in 3h10m0s |
| 2026-07-24 00:23 UTC | net/smc: bound wire-controlled CDC cursors against the local buffers | 5 | devnull@kernel.org | finished in 5h51m0s |
| 2026-07-23 10:54 UTC | net/smc: fix socket use-after-free during link group termination | 1 | xuanqiang.luo@linux.dev | finished in 4h49m0s |
| 2026-07-23 09:40 UTC | net/smc: fix out-of-bounds read of rkey array in SMC-Rv2 LLC processing | 1 | yhlee@isslab.korea.ac.kr | finished in 3h1m0s |
| 2026-07-22 12:27 UTC | MAINTAINERS: Update SHARED MEMORY COMMUNICATIONS (SMC) maintainer entries | 2 | wenjia@linux.ibm.com | skipped |
| 2026-07-22 10:17 UTC | net/smc: validate peer CDC cursor against RMBE size before accepting it | 2 | security@auditcode.ai | finished in 3h12m0s |
| 2026-07-22 08:57 UTC | MAINTAINERS: Update SHARED MEMORY COMMUNICATIONS (SMC) maintainer entries | 1 | wenjia@linux.ibm.com | skipped |
| 2026-07-20 17:07 UTC | net/smc: validate peer CDC cursor against RMBE size before accepting it | 1 | security@auditcode.ai | finished in 3h13m0s |
| 2026-07-16 13:50 UTC | net/smc: order the CDC receive path against buffer publication | 3 | devnull@kernel.org | finished in 4h50m0s |
| 2026-07-16 13:23 UTC | RDMA: Make device names unique per net namespace | 3 | jiri@resnulli.us | finished in 5h10m0s |
| 2026-07-16 11:37 UTC | net/smc: transition to RDMA core CQ pooling | 4 | alibuda@linux.alibaba.com | finished in 4h42m0s |
| 2026-07-15 04:34 UTC | net/smc: order the CDC receive path against buffer publication | 2 | devnull@kernel.org | finished in 5h6m0s |
| 2026-07-14 14:29 UTC | RDMA: Make device names unique per net namespace | 2 | jiri@resnulli.us | finished in 5h12m0s |
| 2026-07-14 01:39 UTC | net: Use synchronous wakeups selectively | 1 | srikar@linux.ibm.com | finished in 5h6m0s |
| 2026-07-13 11:07 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 3 | joel.granados@kernel.org | finished in 5h22m0s |
| 2026-07-11 07:45 UTC | net/smc: guard the CDC receive path against an unset RMB | 1 | devnull@kernel.org | finished in 3h20m0s |
| 2026-07-10 03:33 UTC | net/smc: transition to RDMA core CQ pooling | 3 | alibuda@linux.alibaba.com | finished in 5h2m0s |
| 2026-07-09 09:55 UTC | RDMA: Make device names unique per net namespace | 1 | jiri@resnulli.us | finished in 5h33m0s |
| 2026-07-07 07:43 UTC | dibs: loopback: validate offset and size in move_data() | 1 | dust.li@linux.alibaba.com | finished in 5h9m0s |
| 2026-07-05 07:54 UTC | net/smc: bound wire-controlled CDC cursors against the local buffers | 4 | devnull@kernel.org | finished in 4h11m0s |
| 2026-07-02 17:11 UTC | net/smc: ignore peer-supplied rmbe_idx and dmbe_idx | 1 | dust.li@linux.alibaba.com | finished in 4h29m0s |
| 2026-06-30 18:32 UTC | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket | 2 | xmei5@asu.edu | finished in 2h36m0s |
| 2026-06-30 03:15 UTC | ptp: split non-host-disciplined PHC drivers into a dedicated subdirectory | 3 | guwen@linux.alibaba.com | skipped |
| 2026-06-29 09:51 UTC | net/smc: fix out-of-bounds read when sk_user_data holds a sk_psock | 3 | rhkrqnwk98@gmail.com | finished in 4h13m0s |
| 2026-06-27 01:49 UTC | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket | 1 | xmei5@asu.edu | finished in 2h7m0s |
| 2026-06-19 15:03 UTC | net/smc: fix out-of-bounds read when sk_user_data holds a sk_psock | 2 | rhkrqnwk98@gmail.com | finished in 4h25m0s |
| 2026-06-19 05:48 UTC | net/smc: avoid recursive sk_callback_lock in listen data_ready | 2 | runyu.xiao@seu.edu.cn | finished in 4h10m0s |
| 2026-06-17 15:28 UTC | net/smc: avoid recursive sk_callback_lock in listen data_ready | 1 | runyu.xiao@seu.edu.cn | finished in 4h55m0s |
| 2026-06-14 12:09 UTC | net/smc: fix out-of-bounds read in smc_clcsock_data_ready() | 1 | rhkrqnwk98@gmail.com | finished in 3h54m0s |
| 2026-06-14 08:23 UTC | net/smc: bound wire-controlled CDC cursors against the local buffers | 3 | devnull@kernel.org | finished in 3h54m0s |
| 2026-06-10 17:54 UTC | net: smc: fix splice entry lifetime imbalance in smc_rx_splice | 1 | n05ec@lzu.edu.cn | finished in 2h47m0s |
| 2026-06-10 09:09 UTC | net/smc: bound sndbuf_space on the SMC-D DMB-merge receive path | 1 | hexlabsecurity@proton.me | finished in 2h8m0s |
| 2026-06-10 08:48 UTC | net/smc: bound the peer producer cursor on SMC-D and SMC-R CDC receive | 1 | hexlabsecurity@proton.me | finished in 2h32m0s |
| 2026-06-05 12:13 UTC | net/smc: convert getsockopt to getsockopt_iter | 1 | leitao@debian.org |
finished
in 1h14m0s
[1 findings] |
| 2026-05-28 08:48 UTC | net/smc: transition to RDMA core CQ pooling | 1 | alibuda@linux.alibaba.com | finished in 4h35m0s |
| 2026-05-21 14:56 UTC | net/smc: Do not re-initialize smc hashtables | 1 | wintera@linux.ibm.com | finished in 4h19m0s |
| 2026-05-19 00:52 UTC | smc: Use flexible array for SMCD connections | 1 | rosenp@gmail.com | finished in 4h25m0s |
| 2026-05-14 09:51 UTC | eea: Add basic driver framework for Alibaba Elastic Ethernet Adaptor | 43 | xuanzhuo@linux.alibaba.com | finished in 1h50m0s |
| 2026-05-11 06:21 UTC | net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot | 1 | xmei5@asu.edu | finished in 4h32m0s |
| 2026-05-10 22:26 UTC | net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | 1 | xmei5@asu.edu | finished in 2h3m0s |
| 2026-05-10 16:34 UTC | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | 3 | n.coccia96@gmail.com | finished in 4h24m0s |
| 2026-05-09 11:01 UTC | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | 1 | n.coccia96@gmail.com | finished in 1h2m0s |
| 2026-05-08 19:33 UTC | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | 1 | n.coccia96@gmail.com | skipped |
| 2026-05-08 06:37 UTC | net/smc: transition to RDMA core CQ pooling | 1 | alibuda@linux.alibaba.com | finished in 4h43m0s |
| 2026-05-06 01:41 UTC | net/smc: fix missing sk_err when TCP handshake fails | 1 | alibuda@linux.alibaba.com | finished in 4h56m0s |
| 2026-05-04 14:44 UTC | eea: Add basic driver framework for Alibaba Elastic Ethernet Adaptor | 42 | xuanzhuo@linux.alibaba.com | finished in 2h9m0s |
| 2026-04-29 02:37 UTC | eea: Add basic driver framework for Alibaba Elastic Ethernet Adaptor | 41 | xuanzhuo@linux.alibaba.com | finished in 1h28m0s |
| 2026-04-29 02:16 UTC | net/smc: cap allocation order for SMC-R physically contiguous buffers | 3 | alibuda@linux.alibaba.com | finished in 4h52m0s |
| 2026-04-24 05:23 UTC | Documentation: net/smc: correct old value of smcr_max_recv_wr | 2 | mjambigi@linux.ibm.com | finished in 1h10m0s |
| 2026-04-23 10:02 UTC | net/smc: fix NULL pointer dereference in smc_clc_wait_msg() | 1 | bestswngs@gmail.com | finished in 4h33m0s |
| 2026-04-22 15:40 UTC | net/smc: avoid early lgr access in smc_clc_wait_msg | 1 | n05ec@lzu.edu.cn | finished in 4h27m0s |
| 2026-04-22 08:51 UTC | Documentation: net/smc: correct old value of smcr_max_recv_wr | 1 | mjambigi@linux.ibm.com | finished in 1h24m0s |
| 2026-04-09 12:21 UTC | eea: Add basic driver framework for Alibaba Elastic Ethernet Adaptor | 40 | xuanzhuo@linux.alibaba.com | finished in 1h37m0s |