| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-24 09:11 UTC | net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() | 1 | edumazet@google.com | finished in 5h35m0s |
| 2026-07-24 07:29 UTC | net: do not send ICMP/NDISC Redirects when peer allocation fails | 1 | edumazet@google.com | finished in 5h9m0s |
| 2026-07-24 03:54 UTC | vlan: fix skb_under_panic and races when toggling HW VLAN offload | 2 | edumazet@google.com | finished in 57m0s |
| 2026-07-23 14:42 UTC | vxlan: fixes for skb header pulling, cloning, and concurrency in TX path | 1 | edumazet@google.com | finished in 5h31m0s |
| 2026-07-23 12:06 UTC | net: ipv4: do not send ICMP Redirect when peer allocation fails | 1 | edumazet@google.com | finished in 5h44m0s |
| 2026-07-22 14:17 UTC | drop_monitor: take care of 32bit kernels | 2 | edumazet@google.com | finished in 5h7m0s |
| 2026-07-22 10:42 UTC | ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup | 2 | edumazet@google.com | finished in 5h3m0s |
| 2026-07-22 10:16 UTC | ppp: annotate data races in ppp_generic | 1 | edumazet@google.com | finished in 5h0m0s |
| 2026-07-21 16:39 UTC | geneve: fix geneve_config leak on register_netdevice() failure | 1 | edumazet@google.com | finished in 5h32m0s |
| 2026-07-21 10:12 UTC | net: hsr: fix memory leak on slave unregistration by removing synced VLANs | 2 | edumazet@google.com | finished in 4h53m0s |
| 2026-07-20 13:51 UTC | gre: fix ERSPAN o_flags race/corruption in xmit and fill_info | 2 | edumazet@google.com | finished in 5h14m0s |
| 2026-07-20 07:26 UTC | vlan: fix skb_under_panic() and races when toggling HW VLAN offload | 1 | edumazet@google.com | finished in 4h55m0s |
| 2026-07-16 02:10 UTC | ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup | 1 | edumazet@google.com | finished in 4h41m0s |
| 2026-07-15 05:55 UTC | ppp: annotate concurrent dev->stats accesses | 1 | edumazet@google.com | skipped |
| 2026-07-10 18:13 UTC | tcp: fix TIME_WAIT socket reference leak on PSP policy failure | 1 | edumazet@google.com | finished in 6h1m0s |
| 2026-07-08 16:04 UTC | vxlan: RCU protect vxlan_config and enable RTNL-less fill_info | 1 | edumazet@google.com | finished in 5h1m0s |
| 2026-07-07 14:53 UTC | geneve: make geneve_fill_info() RTNL-less | 2 | edumazet@google.com | finished in 5h46m0s |
| 2026-07-07 08:23 UTC | net: hsr: fix memory leak on slave unregistration by removing synced VLANs | 1 | edumazet@google.com | finished in 5h3m0s |
| 2026-07-06 16:35 UTC | tun: no longer rely on RTNL in tun_fill_info() | 2 | edumazet@google.com | finished in 5h2m0s |
| 2026-07-05 18:17 UTC | ipv4/ipv6: Fix UAF and memory leak in IGMP/MLD | 2 | edumazet@google.com | finished in 4h40m0s |
| 2026-07-04 19:43 UTC | ipv4/ipv6: Fix UAF and memory leak in IGMP/MLD | 1 | edumazet@google.com | finished in 4h43m0s |
| 2026-07-01 15:51 UTC | sit: prepare for RTNL-less link dumping | 1 | edumazet@google.com | skipped |
| 2026-07-01 12:51 UTC | tun: no longer rely on RTNL in tun_fill_info() | 1 | edumazet@google.com | finished in 5h9m0s |
| 2026-07-01 12:50 UTC | amt: no longer rely on RTNL in amt_fill_info() | 1 | edumazet@google.com | finished in 4h46m0s |
| 2026-07-01 12:23 UTC | amt: fix size calculation in amt_get_size() | 1 | edumazet@google.com | finished in 4h39m0s |
| 2026-07-01 12:04 UTC | geneve: make geneve_fill_info() RTNL-less | 1 | edumazet@google.com | finished in 4h40m0s |
| 2026-07-01 09:43 UTC | macsec: no longer rely on RTNL in macsec_fill_info() | 1 | edumazet@google.com | finished in 4h34m0s |
| 2026-07-01 08:22 UTC | macvlan: RTNL-less macvlan_fill_info() | 1 | edumazet@google.com | finished in 4h34m0s |
| 2026-06-29 17:32 UTC | bonding: no longer rely on RTNL in bond_fill_info() | 4 | edumazet@google.com | finished in 4h54m0s |
| 2026-06-25 09:24 UTC | xfrm: fix stack-out-of-bounds in xfrm_tmpl_resolve_one | 1 | edumazet@google.com | finished in 4h24m0s |
| 2026-06-25 06:59 UTC | net: udp_tunnel: fix races and use-after-free | 2 | edumazet@google.com | finished in 4h42m0s |
| 2026-06-24 17:10 UTC | net: udp_tunnel: fix use-after-free by refcounting udp_tunnel_nic | 1 | edumazet@google.com | finished in 4h15m0s |
| 2026-06-24 07:32 UTC | net: clear transport header during tunnel decapsulation | 1 | edumazet@google.com |
finished
in 1h45m0s
[1 findings] |
| 2026-06-23 17:30 UTC | tipc: syzbot related fixes | 2 | edumazet@google.com | finished in 4h19m0s |
| 2026-06-22 18:52 UTC | tcp: make TCP-AO lookups more predictable | 1 | edumazet@google.com | finished in 4h14m0s |
| 2026-06-22 17:10 UTC | tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() | 1 | edumazet@google.com | finished in 4h8m0s |
| 2026-06-22 11:18 UTC | veth: fix NAPI leak in XDP enable error path | 1 | edumazet@google.com | finished in 4h0m0s |
| 2026-06-22 11:01 UTC | net: do not acquire dev->tx_global_lock in netdev_watchdog_up() | 1 | edumazet@google.com | finished in 4h7m0s |
| 2026-06-16 14:13 UTC | net: serialize netif_running() check in enqueue_to_backlog() | 1 | edumazet@google.com | finished in 4h16m0s |
| 2026-06-15 14:03 UTC | gre: fix ERSPAN o_flags race/corruption in xmit and fill_info | 1 | edumazet@google.com | finished in 4h54m0s |
| 2026-06-15 09:02 UTC | xfrm: validate selector family and prefixlen during match | 1 | edumazet@google.com | finished in 4h28m0s |
| 2026-06-13 04:26 UTC | nbd: Reclassify sockets to avoid lockdep circular dependency | 1 | edumazet@google.com | finished in 4h15m0s |
| 2026-06-12 16:25 UTC | tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) | 1 | edumazet@google.com | finished in 4h27m0s |
| 2026-06-12 13:59 UTC | tipc: fix UAF in tipc_l2_send_msg() | 1 | edumazet@google.com | finished in 5h7m0s |
| 2026-06-12 05:56 UTC | xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] | 1 | edumazet@google.com | finished in 4h17m0s |
| 2026-06-11 20:34 UTC | net: bridge: take care of p->flags accesses | 3 | edumazet@google.com | finished in 4h34m0s |
| 2026-06-11 16:52 UTC | ip_tunnel: annotate data-races around t->err_count and t->err_time | 1 | edumazet@google.com | finished in 4h52m0s |
| 2026-06-11 15:27 UTC | net: watchdog: fix refcount tracking races | 3 | edumazet@google.com | finished in 4h44m0s |
| 2026-06-10 17:14 UTC | ip6_tunnel: annotate data-races around t->err_count and t->err_time | 2 | edumazet@google.com | finished in 4h25m0s |
| 2026-06-10 16:18 UTC | net: bridge: take care of p->flags accesses | 2 | edumazet@google.com | finished in 4h44m0s |
| 2026-06-10 03:19 UTC | bonding: no longer rely on RTNL in bond_fill_info() | 3 | edumazet@google.com | finished in 4h46m0s |
| 2026-06-09 16:13 UTC | net: watchdog: fix refcount tracking races | 2 | edumazet@google.com | finished in 4h46m0s |
| 2026-06-09 09:31 UTC | ip6_tunnel: annotate data-races around t->err_count and t->err_time | 1 | edumazet@google.com | finished in 4h31m0s |
| 2026-06-09 09:13 UTC | ip6_tunnel: do not use dst6_mtu() in ip4ip6_err() and ip6erspan_tunnel_xmit() | 1 | edumazet@google.com | finished in 4h25m0s |
| 2026-06-09 08:08 UTC | net: bridge: take care of p->flags accesses | 1 | edumazet@google.com |
finished
in 1h33m0s
[1 findings] |
| 2026-06-08 16:46 UTC | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 1 | edumazet@google.com | finished in 4h29m0s |
| 2026-06-08 15:59 UTC | ip6_vti: set netns_immutable on the fallback device. | 1 | edumazet@google.com | finished in 5h4m0s |
| 2026-06-08 15:14 UTC | tcp: refine tcp_sequence() for the FIN exception | 1 | edumazet@google.com | finished in 5h3m0s |
| 2026-06-08 13:50 UTC | bonding: no longer rely on RTNL in bond_fill_info() | 2 | edumazet@google.com | finished in 4h7m0s |
| 2026-06-08 12:39 UTC | net: watchdog: fix refcount tracking races | 1 | edumazet@google.com | finished in 4h45m0s |
| 2026-06-05 15:50 UTC | bonding: no longer rely on RTNL in bond_fill_info() | 1 | edumazet@google.com | finished in 4h3m0s |
| 2026-06-05 11:21 UTC | tcp: restrict SO_ATTACH_FILTER to priv users | 1 | edumazet@google.com | finished in 4h47m0s |
| 2026-06-05 07:34 UTC | neighbour: remove obsolete EXPORT_SYMBOL() | 1 | edumazet@google.com | finished in 4h30m0s |
| 2026-06-04 17:45 UTC | ipv6: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL() | 1 | edumazet@google.com | finished in 4h26m0s |
| 2026-06-04 17:34 UTC | ipv4: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL() | 1 | edumazet@google.com | finished in 4h34m0s |
| 2026-06-04 14:13 UTC | bridge: prepare lockless br_port_fill_attrs() (I) | 3 | edumazet@google.com | finished in 4h19m0s |
| 2026-06-03 18:08 UTC | rtnetlink: use dev_isalive() in rtnl_getlink() | 2 | edumazet@google.com | finished in 4h59m0s |
| 2026-06-03 12:35 UTC | bonding: annotate data-races arcound churn variables | 1 | edumazet@google.com | finished in 4h20m0s |
| 2026-06-03 07:29 UTC | ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() | 1 | edumazet@google.com | finished in 2h19m0s |
| 2026-06-03 06:20 UTC | bridge: prepare lockless br_port_fill_attrs() (I) | 2 | edumazet@google.com | finished in 4h24m0s |
| 2026-06-02 16:50 UTC | ipv4: raw: remove six obsolete EXPORT_SYMBOL_GPL() | 1 | edumazet@google.com | finished in 4h34m0s |
| 2026-06-02 16:15 UTC | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 2 | edumazet@google.com | finished in 4h43m0s |
| 2026-06-02 15:27 UTC | bonding: annotate data-races in sysfs and procfs | 1 | edumazet@google.com | finished in 4h39m0s |
| 2026-06-02 12:51 UTC | mptcp: change mptcp_established_options() to return opt_size | 2 | edumazet@google.com | finished in 4h11m0s |
| 2026-06-02 09:13 UTC | rtnetlink: use dev_isalive() in rtnl_getlink() | 1 | edumazet@google.com | finished in 2h41m0s |
| 2026-06-01 12:41 UTC | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 1 | edumazet@google.com | finished in 5h5m0s |
| 2026-06-01 09:38 UTC | tcp: change bpf_skops_hdr_opt_len() signature | 1 | edumazet@google.com | finished in 4h49m0s |
| 2026-06-01 09:18 UTC | mptcp: change mptcp_established_options() to return opt_size | 1 | edumazet@google.com | finished in 4h17m0s |
| 2026-05-26 14:55 UTC | ipv6: frags: adopt __in6_dev_stats_get() a bit more | 2 | edumazet@google.com | finished in 4h19m0s |
| 2026-05-25 20:36 UTC | vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() | 1 | edumazet@google.com | finished in 4h5m0s |
| 2026-05-25 20:13 UTC | tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() | 1 | edumazet@google.com | finished in 4h8m0s |
| 2026-05-25 08:35 UTC | rtnetlink: RTNL avoidance in rtnl_getlink() and rtnl_dump_ifinfo() | 5 | edumazet@google.com | finished in 4h30m0s |
| 2026-05-25 08:25 UTC | ipv6: ifrags: cleanup __IP6_INC_STATS() confusion | 1 | edumazet@google.com | finished in 4h26m0s |
| 2026-05-22 17:29 UTC | rtnetlink: RTNL avoidance in rtnl_getlink() and rtnl_dump_ifinfo() | 4 | edumazet@google.com |
finished
in 2h34m0s
[1 findings] |
| 2026-05-22 14:00 UTC | inet: frags: fix a possible frag_mem_limit drift | 1 | edumazet@google.com | finished in 4h48m0s |
| 2026-05-22 11:55 UTC | tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() | 1 | edumazet@google.com | finished in 4h29m0s |
| 2026-05-22 11:03 UTC | net/sched: sch_ets: make cl->quantum lockless | 1 | edumazet@google.com | finished in 2h45m0s |
| 2026-05-21 17:40 UTC | rtnetlink: do not use RTNL in rtnl_af_register() and rtnl_af_unregister() | 1 | edumazet@google.com | finished in 5h8m0s |
| 2026-05-21 17:14 UTC | dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used | 1 | edumazet@google.com | finished in 1h40m0s |
| 2026-05-21 13:19 UTC | bridge: prepare lockless br_port_fill_attrs() (I) | 1 | edumazet@google.com | finished in 4h43m0s |
| 2026-05-21 12:21 UTC | ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() | 1 | edumazet@google.com | finished in 4h46m0s |
| 2026-05-20 11:42 UTC | net: bridge: prevent too big nested attributes in br_fill_linkxstats() | 2 | edumazet@google.com | finished in 4h43m0s |
| 2026-05-20 10:32 UTC | rtnetlink: RTNL avoidance in rtnl_getlink() | 3 | edumazet@google.com | finished in 4h46m0s |
| 2026-05-20 10:30 UTC | ll_map: add RTEXT_FILTER_NAME_ONLY to ll_link_get() and ll_init_map() | 1 | edumazet@google.com | skipped |
| 2026-05-19 20:08 UTC | ipv4: icmp: reject broadcast/multicast routes | 1 | edumazet@google.com | finished in 4h47m0s |
| 2026-05-19 19:32 UTC | ipv4: use WARN_ON_ONCE() in ip_rt_bug() | 1 | edumazet@google.com | finished in 1h9m0s |
| 2026-05-19 11:43 UTC | rtnetlink: RTNL avoidance in rtnl_getlink() | 2 | edumazet@google.com | finished in 4h58m0s |
| 2026-05-19 09:55 UTC | net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() | 1 | edumazet@google.com | finished in 5h5m0s |
| 2026-05-19 09:46 UTC | net/sched: sch_drr: lockless cl->deficit and cl->quantum | 1 | edumazet@google.com | finished in 4h55m0s |
| 2026-05-19 08:46 UTC | tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction | 4 | edumazet@google.com | finished in 4h21m0s |