| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-11-07 14:50 UTC | usb: sl811-hcd: delete the driver timer on stop to avoid use-after-free | 1 | hj351016@gmail.com | - |
| 2026-11-07 12:46 UTC | usb: gadget: gadgetfs: fix ep0 request lifetime and event counter | 4 | devnull@kernel.org | - |
| 2026-11-07 12:07 UTC | wifi: wfx: validate firmware message body lengths before processing | 3 | tristmd@gmail.com | - |
| 2026-11-07 11:46 UTC | usb: musb: fix use-after-free in musb_remove() | 1 | crofts@kernel.org | - |
| 2026-11-07 11:44 UTC | misc: nsm: keep the device state until the last file is closed | 1 | ca@modelmiser.com | - |
| 2026-11-07 10:06 UTC | usb: typec: tipd: assign partner identity to persistent memory | 1 | devnull@kernel.org | - |
| 2026-11-07 09:56 UTC | usb: gadget: gadgetfs: fix ep0 request lifetime and event counter | 3 | devnull@kernel.org | - |
| 2026-11-07 07:25 UTC | usb: gadget: pch_udc: drain vbus GPIO works before freeing the device | 3 | hj351016@gmail.com | - |
| 2026-11-07 07:02 UTC | usb: gadget: pch_udc: drain vbus GPIO works before freeing the device | 2 | hj351016@gmail.com | - |
| 2026-11-07 06:36 UTC | usb: gadget: pch_udc: drain vbus GPIO works before freeing the device | 1 | hj351016@gmail.com | - |
| 2026-11-07 00:13 UTC | usb: gadget: gadgetfs: dequeue pending ep0 request before freeing | 2 | devnull@kernel.org | - |
| 2026-11-06 17:38 UTC | usb: dwc2: fix low power issues found on stm32mp1 | 3 | fabrice.gasnier@foss.st.com | - |
| 2026-11-06 15:31 UTC | comedi: Fix race condition when updating struct comedi_file | 1 | abbotti@mev.co.uk | - |
| 2026-11-06 11:13 UTC | software node: make swnodes hold their own references on parents | 1 | bartosz.golaszewski@oss.qualcomm.com | - |
| 2026-11-06 09:28 UTC | usb: core: hcd: Skip PHY rollback on failed autoresume | 1 | devnull@kernel.org | - |
| 2026-11-06 08:12 UTC | USB: serial: mct_u232: fix NULL deref in open error path | 1 | zhaofeng2@cmss.chinamobile.com | - |
| 2026-11-06 03:16 UTC | usb: core: hub: Re-guess ep0 maxpacket size on reset | 2 | lvpengfei20@huawei.com | - |
| 2026-11-06 03:06 UTC | usb: gadget: u_ether: fix out-of-bounds read in get_ether_addr | 4 | liuc63@xiaopeng.com | - |
| 2026-11-06 01:49 UTC | char: toshiba: restrict the SMM device to root | 1 | guozh23@xiaopeng.com | - |
| 2026-11-05 21:05 UTC | mm: convert further simple mmap hooks to mmap_prepare | 1 | ljs@kernel.org | - |
| 2026-11-05 11:42 UTC | driver core: Authorize device trust before driver binding | 1 | leon@kernel.org | - |
| 2026-11-05 10:04 UTC | PCI/P2PDMA: Route peer-to-peer DMA by TLP class | 13 | leon@kernel.org | - |
| 2026-11-05 09:27 UTC | usb: gadget: f_printer: clamp GET_DEVICE_ID pnp_string to ep0 buffer | 1 | fangxy@xiaopeng.com | - |
| 2026-11-05 09:22 UTC | driver core: cpu: Fix OF node reference leak in register_cpu() error path | 2 | vulab@iscas.ac.cn | - |
| 2026-11-05 07:21 UTC | usb: gadget: u_ether: fix out-of-bounds read in get_ether_addr | 3 | liuc63@xiaopeng.com | - |
| 2026-11-05 03:49 UTC | usb: dwc2: gadget: fix off-by-one in ep_from_windex bounds check | 2 | fangxy@xiaopeng.com | - |
| 2026-11-04 21:03 UTC | 7.3.2-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h46m0s |
| 2026-11-04 20:55 UTC | 6.18.61-rc1 review | 1 | gregkh@linuxfoundation.org |
finished
in 3h53m0s
[1 findings] |
| 2026-11-04 16:40 UTC | USB: core: Add RESET_RESUME quirk for Keychron Ultra-Link 8K receiver | 1 | daniel.quolke@mailbox.org | skipped |
| 2026-11-04 14:04 UTC | staging: rtl8723bs: fix heap buffer overflow in cfg80211_rtw_add_key() | 7 | feng@innora.ai | skipped |
| 2026-11-04 13:20 UTC | usb: dwc2: fix fifo reinit and workaround for isoc tx packet | 2 | fabrice.gasnier@foss.st.com | skipped |
| 2026-11-04 12:53 UTC | usb: gadget: f_uac1_legacy: fix copy_buf lifetime on queue handoff and free | 4 | tristmd@gmail.com | finished in 2h10m0s |
| 2026-11-04 12:44 UTC | usb: core: hub: Re-guess ep0 maxpacket size on reset | 1 | lvpengfei20@huawei.com | finished in 4h24m0s |
| 2026-11-04 11:45 UTC | usb: gadget: f_uac1_legacy: cancel playback work and drain buffers on free | 3 | tristmd@gmail.com | finished in 1h48m0s |
| 2026-11-04 11:42 UTC | usb: mtu3: disable bottom halves in the threaded interrupt handler | 2 | ryanbrue.dev@gmail.com | skipped |
| 2026-11-04 11:04 UTC | wifi: wfx: validate num_tx_confs in rx_helper before use | 2 | tristmd@gmail.com | skipped |
| 2026-11-04 10:27 UTC | serial: core: two fixes for the port removal path | 1 | tapio.reijonen@vaisala.com | skipped |
| 2026-11-04 05:44 UTC | mmc: core: clear MQRQ_XFER_SINGLE_BLOCK for new requests | 2 | kernel@picomail.one | finished in 2h53m0s |
| 2026-11-04 03:56 UTC | usb: xhci: Fix use-after-free race in xhci_stop_device() | 5 | 25031212351@stu.xidian.edu.cn | finished in 1h57m0s |
| 2026-11-04 02:50 UTC | usb: gadget: u_ether: fix out-of-bounds read in get_ether_addr | 2 | liuc63@xiaopeng.com | finished in 1h50m0s |
| 2026-11-04 01:32 UTC | usb: xhci: Fix use-after-free race in xhci_stop_device() | 4 | 25031212351@stu.xidian.edu.cn | finished in 2h17m0s |
| 2026-11-04 01:28 UTC | usb: gadget: f_uac1_legacy: cancel playback_work and drain buffers on free | 2 | tristmd@gmail.com | finished in 3h10m0s |
| 2026-11-04 00:02 UTC | usb: gadget: f_uac1_legacy: cancel playback_work before freeing audio | 1 | tristmd@gmail.com | finished in 2h48m0s |
| 2026-11-03 23:41 UTC | serial: 8250: fix use-after-free of IRQ action name on port removal | 1 | devnull@kernel.org | finished in 3h50m0s |
| 2026-11-03 23:26 UTC | wifi: wfx: validate num_tx_confs against message length | 1 | tristmd@gmail.com | skipped |
| 2026-11-03 22:14 UTC | phy: realtek: usb: fix the USB 2.0 PHY's port range check | 1 | joshua.scott@alliedtelesis.co.nz | skipped |
| 2026-11-03 18:29 UTC | usb: dwc3: Increase no-IOC ENDTRANSFER delay | 1 | elson.serrao@oss.qualcomm.com | skipped |
| 2026-11-03 16:10 UTC | usb: typec: ucsi: acpi: Zero version quirk for Lenovo ThinkPad T14 Gen 2a | 2 | devnull@kernel.org | skipped |
| 2026-11-03 16:01 UTC | usb: xhci: Fix use-after-free race in xhci_stop_device() | 3 | 25031212351@stu.xidian.edu.cn | finished in 2h24m0s |
| 2026-11-03 14:57 UTC | kernfs, sysfs: refuse splice on /sys/power/resume | 2 | krystianmkaniewski@gmail.com | finished in 4h26m0s |
| 2026-11-03 13:50 UTC | usb: typec: ucsi: Leave the mux to the altmode driver for alt mode partners | 1 | 26rote@gmail.com | finished in 2h50m0s |
| 2026-11-03 08:29 UTC | PCI/P2PDMA: Route peer-to-peer DMA by TLP class | 12 | leon@kernel.org | finished in 2h39m0s |
| 2026-11-03 06:29 UTC | usb: gadget: uvc: fix dwFrameInterval array leak on frame removal | 1 | priyankamani2100@gmail.com | finished in 2h59m0s |
| 2026-11-03 04:50 UTC | mm/list_lru: Account node removals in isolation helpers | 1 | kaitao.cheng@linux.dev | finished in 5h32m0s |
| 2026-11-03 02:45 UTC | HID: bpf: fix device destruction races | 2 | yfzhang23@stu.pku.edu.cn | finished in 1h20m0s |
| 2026-11-03 01:14 UTC | speakup: fix hang and use-after-free around synth removal | 3 | xiehongyu1@kylinos.cn | finished in 56m0s |
| 2026-11-02 16:29 UTC | usb: mtu3: don't run gadget completion callbacks with interrupts disabled | 1 | ryanbrue.dev@gmail.com | skipped |
| 2026-11-02 15:46 UTC | spmi: pmic-arb: Fix the driver data used by non-data commands | 1 | abel.vesa@oss.qualcomm.com | skipped |
| 2026-11-02 15:17 UTC | speakup: Serialize synth clearing against locked readers | 2 | xiehongyu1@kylinos.cn |
finished
in 48m0s
[1 findings] |
| 2026-11-02 11:58 UTC | HID: bpf: close device teardown races | 1 | yfzhang23@stu.pku.edu.cn | finished in 1h6m0s |
| 2026-11-02 11:31 UTC | serial: 8250: restore FIFO in serial8250_console_restore() | 2 | fuzheng.meng@semidrive.com | finished in 4h0m0s |
| 2026-11-02 09:36 UTC | serial: 8250: restore FIFO in serial8250_console_restore() | 1 | fuzheng.meng@semidrive.com | finished in 4h5m0s |
| 2026-11-02 08:30 UTC | driver core: fix memory leak in physical location error path | 1 | johan@kernel.org | finished in 4h20m0s |
| 2026-11-02 08:28 UTC | driver core: platform: fix fwnode leak on registration failure | 1 | johan@kernel.org | finished in 4h14m0s |
| 2026-11-02 08:25 UTC | devcoredump: fix double free on device registration failure | 1 | johan@kernel.org | finished in 4h40m0s |
| 2026-11-01 17:29 UTC | USB: quirks: add NO_LPM for Kingston DataTraveler Duo | 1 | bram@vandenheuvel.online | skipped |
| 2026-11-01 17:06 UTC | netfilter: nf_conntrack_reasm: restore IPv6 nhoff after reassembly | 2 | ryosuke@ikotaslabs.com | finished in 4h27m0s |
| 2026-11-01 07:06 UTC | usb: usbfs: clamp actual_length to transfer_buffer_length | 2 | teel4res@gmail.com | finished in 4h17m0s |
| 2026-11-01 06:23 UTC | stm class: clear output->pdrv_private when the output is freed | 1 | yuz08559@gmail.com | finished in 3h22m0s |
| 2026-11-01 06:23 UTC | stm class: drop the source link after the source device is gone | 1 | yuz08559@gmail.com | skipped |
| 2026-11-01 06:22 UTC | stm class: fail stm_lookup_protocol() when the protocol module is going away | 1 | yuz08559@gmail.com | finished in 3h33m0s |
| 2026-10-31 21:40 UTC | usb: typec: ucsi: acpi: Assume UCSI 1.0 on Lenovo ThinkPad T14 Gen 2a | 1 | devnull@kernel.org | skipped |
| 2026-10-31 03:01 UTC | MAINTAINERS: Fix Intel TDX kernel file patterns | 1 | bp@alien8.de | skipped |
| 2026-10-30 21:10 UTC | mm/hugetlb_vmemmap: Fix usemap overrun on nodes with multiple ranges | 2 | tim.c.chen@linux.intel.com | skipped |
| 2026-10-30 19:36 UTC | usb: pci-quirks: always assert xHCI OS ownership | 6 | rishabh.jain1198@gmail.com | skipped |
| 2026-10-30 12:36 UTC | tty: sysrq: clear the old reset sequence when reset_seq changes | 5 | zhanxusheng1024@gmail.com | finished in 3h58m0s |
| 2026-10-30 12:15 UTC | 7.2.15-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h59m0s |
| 2026-10-30 02:33 UTC | MAINTAINERS: Fix Intel TDX kernel file patterns | 1 | bp@alien8.de | skipped |
| 2026-10-29 22:29 UTC | dmaengine: dw: serialize completion and termination | 4 | james.hilliard1@gmail.com | skipped |
| 2026-10-29 16:30 UTC | PM: runtime: change stub pm_runtime_get_if_active() return 1 when !CONFIG_PM | 1 | frank.li@oss.nxp.com | finished in 1h13m0s |
| 2026-10-29 11:47 UTC | usb: core: hcd: flush giveback work on stop | 4 | igorpetindev@gmail.com | skipped |
| 2026-10-29 10:18 UTC | USB: serial: garmin_gps: fix deadlock on reset request | 1 | johan@kernel.org | finished in 3h55m0s |
| 2026-10-29 03:06 UTC | usb: gadget: configfs: NUL-terminate extended property data | 1 | 1075151112@qq.com | finished in 1h2m0s |
| 2026-10-28 16:59 UTC | 7.3.1-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h46m0s |
| 2026-10-28 16:59 UTC | 6.18.60-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h46m0s |
| 2026-10-28 16:59 UTC | 7.2.14-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h50m0s |
| 2026-10-28 16:58 UTC | 6.6.161-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h42m0s |
| 2026-10-28 16:56 UTC | 6.12.115-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h51m0s |
| 2026-10-28 16:52 UTC | 5.10.273-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h58m0s |
| 2026-10-28 16:52 UTC | 5.15.224-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 3h37m0s |
| 2026-10-28 16:34 UTC | 6.1.191-rc1 review | 1 | gregkh@linuxfoundation.org | finished in 4h5m0s |
| 2026-10-28 09:46 UTC | rust_binder: push BR_TRANSACTION_COMPLETE before BR_FAILED_REPLY | 1 | aliceryhl@google.com | finished in 4h9m0s |
| 2026-10-28 07:48 UTC | usb: gadget: f_midi: fix UAF race during IN request handling | 2 | sonalipradhan@google.com | finished in 1h56m0s |
| 2026-10-28 04:57 UTC | usb: host: fhci: drain completion tasklet during removal | 1 | yaojiale02@163.com | skipped |
| 2026-10-28 04:48 UTC | Initialize device state before userspace registration | 1 | yaojiale02@163.com | finished in 1h49m0s |
| 2026-10-27 22:38 UTC | Add __must_init and require explicit kobj_type::release | 2 | irogers@google.com | finished in 3h52m0s |
| 2026-10-27 21:00 UTC | drm/amdgpu/gfx11: set KMD_QUEUE for kernel gfx queues | 1 | alexander.deucher@amd.com | skipped |
| 2026-10-27 17:10 UTC | serial: 8250_dw: preserve BUSY-safe fractional divisor programming | 4 | james.hilliard1@gmail.com | skipped |
| 2026-10-27 15:09 UTC | misc: bcm-vk: fix DMA allocation memory leak | 1 | lgs201920130244@gmail.com | skipped |
| 2026-10-27 11:41 UTC | landlock: Add READ_METADATA and WRITE_METADATA access rights | 3 | caixinchen1@huawei.com | finished in 4h32m0s |