| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-29 09:34 UTC | ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup | 4 | dongchenchen2@huawei.com | finished in 3h58m0s |
| 2026-08-29 09:24 UTC | xfrm: save input state data before secpath resets | 4 | zhilinz@nebusec.ai | finished in 3h57m0s |
| 2026-08-29 08:58 UTC | net: unix: reject negative max_dgram_qlen values | 2 | 1075151112@qq.com | finished in 44m0s |
| 2026-08-29 08:12 UTC | net/sched: clamp quantum/psched_mtu in change paths | 2 | jhs@mojatatu.com | finished in 3h55m0s |
| 2026-08-29 06:24 UTC | ipv4: fib: avoid quadratic table ID lookup | 1 | zihanx@nebusec.ai | finished in 4h29m0s |
| 2026-08-29 05:19 UTC | netfilter: nf_dup: prevent asynchronous duplicate recursion | 1 | zihanx@nebusec.ai | finished in 5h14m0s |
| 2026-08-29 02:00 UTC | bpf, sockmap: Fix self-redirect copied_seq double-counting | 1 | geliang@kernel.org | finished in 4h9m0s |
| 2026-08-28 22:39 UTC | net/rds: own the fastpath locks across connection teardown | 5 | achender@kernel.org | finished in 3h41m0s |
| 2026-08-28 19:23 UTC | Mitigate a side channel in routing exception caches | 2 | idosch@nvidia.com | finished in 4h46m0s |
| 2026-08-28 19:08 UTC | bnxt_en: Bound SW TPA IDs to prevent crashes | 4 | joe@dama.to | skipped |
| 2026-08-28 19:07 UTC | net/iucv: fix the recvmsg window update | 3 | devnull@kernel.org | finished in 1h6m0s |
| 2026-08-28 16:37 UTC | nfsd/sunrpc: harden the netlink listener set interface | 3 | jlayton@kernel.org | finished in 4h8m0s |
| 2026-08-28 15:41 UTC | net: ntb_netdev: Fix statistics races | 2 | den@valinux.co.jp | skipped |
| 2026-08-28 14:17 UTC | ipv6: sr: restore network header before routing and forwarding | 1 | edumazet@google.com | finished in 5h39m0s |
| 2026-08-28 12:19 UTC | net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations | 1 | jhs@mojatatu.com | finished in 5h53m0s |
| 2026-08-28 10:37 UTC | ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit | 1 | edumazet@google.com | finished in 5h6m0s |
| 2026-08-28 10:19 UTC | mac802154: drain mac_wq before unregistering interfaces | 1 | xuanqiang.luo@linux.dev | finished in 6h20m0s |
| 2026-08-28 10:06 UTC | net: bridge: mcast: fix br_multicast_list_adjacent rcu walk of mglist | 1 | razor@blackwall.org | finished in 5h30m0s |
| 2026-08-28 09:17 UTC | net: wwan: t9xx: Add MediaTek T9XX WWAN driver | 7 | devnull@kernel.org | finished in 2h1m0s |
| 2026-08-28 08:56 UTC | net: ethernet: ti: netcp_core: use for_each_available_child_of_node_scoped() in netcp_probe() | 2 | manushprajwal555@gmail.com | finished in 46m0s |
| 2026-08-28 08:45 UTC | ipv6: mcast: RCU and timer fixes | 2 | edumazet@google.com | finished in 4h58m0s |
| 2026-08-28 06:54 UTC | net/smc: fix diag dump lifetime races | 2 | mjambigi@linux.ibm.com | finished in 5h31m0s |
| 2026-08-28 06:52 UTC | ipmr: restore a limit for unresolved cache entries | 1 | zihanx@nebusec.ai | finished in 4h56m0s |
| 2026-08-28 06:08 UTC | page_pool: keep frag_offset aligned for odd-sized requests | 2 | florian@schauer.to | finished in 5h15m0s |
| 2026-08-28 04:55 UTC | Revert "net/mlx5: Add sensor name to temperature event message" | 1 | ben@cressey.dev | skipped |
| 2026-08-28 04:24 UTC | sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration | 3 | bsdhenrymartin@gmail.com | finished in 3h57m0s |
| 2026-08-28 01:29 UTC | raw: annotate disconnect-side IPv4 match writers | 1 | xuanqiang.luo@linux.dev | skipped |
| 2026-08-28 00:12 UTC | net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() | 2 | longli@microsoft.com | skipped |
| 2026-08-27 23:55 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 3 | blbllhy@gmail.com | finished in 3h52m0s |
| 2026-08-27 23:02 UTC | bnxt_en: Prevent queue stop with deferred completions | 1 | joe@dama.to | skipped |
| 2026-08-27 22:13 UTC | mac802154: fix data race and NULL deref on local->assoc_dev | 3 | skwkevin@mail.ustc.edu.cn | finished in 3h50m0s |
| 2026-08-27 21:32 UTC | sctp: validate chunk length in the inqueue parser | 2 | devnull@kernel.org | finished in 3h49m0s |
| 2026-08-27 21:16 UTC | net: fix a stale phylink PHY pointer and a lost PHY interrupt | 3 | f@lex.la | finished in 2h18m0s |
| 2026-08-27 18:56 UTC | bnxt_en: Bound SW TPA IDs to prevent crashes | 3 | joe@dama.to | skipped |
| 2026-08-27 18:25 UTC | ipv4: avoid divide by zero in fib_rebalance | 2 | zihanx@nebusec.ai | finished in 4h4m0s |
| 2026-08-27 16:12 UTC | bnge: add missing ndo_set_features | 2 | vikas.gupta@broadcom.com | skipped |
| 2026-08-27 16:06 UTC | igmp: convert struct ip_sf_list to RCU | 2 | edumazet@google.com | finished in 4h5m0s |
| 2026-08-27 14:07 UTC | inet: frags: strip GSO state from fragments before reassembly | 1 | pabeni@redhat.com | finished in 4h38m0s |
| 2026-08-27 13:28 UTC | net: gso: always scan dodgy frag_list for linear heads | 1 | 2045gemini@gmail.com | finished in 4h37m0s |
| 2026-08-27 12:18 UTC | net: qrtr: Send HELLO message on endpoint register | 3 | pranav.phansalkar@oss.qualcomm.com | finished in 3h46m0s |
| 2026-08-27 11:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 17 | tung.quang.nguyen@est.tech | finished in 4h15m0s |
| 2026-08-27 09:59 UTC | tcp: use GFP_ATOMIC in tcp_send_active_reset() | 2 | edumazet@google.com | skipped |
| 2026-08-27 09:23 UTC | net/sched: sch_frag: reject a negative L2 length in sch_fragment() | 1 | littleddfu@gmail.com | finished in 2h11m0s |
| 2026-08-27 08:49 UTC | llc: fix listener child socket leaks before passive open completes | 6 | zihanx@nebusec.ai | finished in 4h25m0s |
| 2026-08-27 08:24 UTC | octeontx2-af: Fix Rep link state sync up with PF/VFs | 2 | nshettyj@marvell.com | skipped |
| 2026-08-27 07:50 UTC | sctp: avoid livelock while updating retransmit path | 1 | sunyiqixm@gmail.com | finished in 4h26m0s |
| 2026-08-27 06:34 UTC | s390/ctcm: Prevent XID null dereference | 2 | aswin@linux.ibm.com | finished in 1h1m0s |
| 2026-08-27 05:22 UTC | net: fix refcnt_tracker use-after-free on netns creation failure | 1 | jiayuan.chen@linux.dev | finished in 3h56m0s |
| 2026-08-27 05:18 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 1 | blbllhy@gmail.com | finished in 3h55m0s |
| 2026-08-27 01:01 UTC | sctp: validate chunk length in the inqueue parser | 1 | devnull@kernel.org | finished in 3h45m0s |
| 2026-08-26 23:59 UTC | net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() | 1 | longli@microsoft.com | skipped |
| 2026-08-26 22:59 UTC | mac802154: fix data race and NULL deref on local->assoc_dev | 2 | skwkevin@mail.ustc.edu.cn | finished in 3h45m0s |
| 2026-08-26 22:03 UTC | net: pse-pd: decouple controller lookup from MDIO probe | 5 | github@szelinsky.de | finished in 3h45m0s |
| 2026-08-26 22:01 UTC | netlink: specs: fixes for conntrack dump filtering | 2 | i.maximets@ovn.org | skipped |
| 2026-08-26 20:20 UTC | net: hash uncached route lists by device | 1 | carges@cloudflare.com | finished in 3h44m0s |
| 2026-08-26 20:17 UTC | xfrm: hold net_device reference under RCU in bundle creation | 2 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-26 19:49 UTC | sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START | 1 | lucien.xin@gmail.com | finished in 3h58m0s |
| 2026-08-26 17:50 UTC | inet: backport of RAW sockets dropping incoming ICMP | 1 | juhandre.knoetze@windriver.com | skipped |
| 2026-08-26 17:47 UTC | xsk: Fix circular locking dependency between &net->xdp.lock, &xs->mutex, and netdev_lock_ops | 4 | ahemadkhawar123@gmail.com | finished in 4h45m0s |
| 2026-08-26 17:30 UTC | xsk: Fix circular locking dependency between &net->xdp.lock, &xs->mutex, and netdev_lock_ops | 3 | ahemadkhawar123@gmail.com | skipped |
| 2026-08-26 17:15 UTC | net: dsa: b53: fix 8021q uppers on standalone ports | 2 | strst.gs@gmail.com | skipped |
| 2026-08-26 17:13 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 2 | blbllhy@gmail.com |
finished
in 1h6m0s
[1 findings] |
| 2026-08-26 16:21 UTC | xsk: Fix circular locking dependency in xsk_notifier | 2 | ahemadkhawar123@gmail.com | finished in 4h22m0s |
| 2026-08-26 14:37 UTC | Mitigate a side channel in routing exception caches | 1 | idosch@nvidia.com | finished in 4h12m0s |
| 2026-08-26 14:33 UTC | net/sched: sch_htb: limit htb_classify inner-class filter hops | 2 | victor@mojatatu.com | finished in 4h14m0s |
| 2026-08-26 14:11 UTC | tcp: fix corruption of urgent data on multi-segment retransmit | 1 | jiayuan.chen@linux.dev | finished in 4h6m0s |
| 2026-08-26 13:52 UTC | page_pool: keep frag_offset aligned for odd-sized requests | 1 | florian@schauer.to | finished in 3h44m0s |
| 2026-08-26 13:32 UTC | usb: atm: usbatm: fix invalid ci_range initialization | 2 | kartikey406@gmail.com | finished in 2h14m0s |
| 2026-08-26 13:03 UTC | net: stmmac: fix dma mapping leak in stmmac_tso_xmit() | 1 | lorenzo.bianconi@oss.qualcomm.com | finished in 1h25m0s |
| 2026-08-26 11:59 UTC | igmp: convert struct ip_sf_list to RCU | 1 | edumazet@google.com | finished in 4h21m0s |
| 2026-08-26 10:52 UTC | slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() | 1 | edumazet@google.com | finished in 2h22m0s |
| 2026-08-26 10:37 UTC | ipv6: mcast: RCU and timer fixes | 1 | edumazet@google.com | finished in 3h59m0s |
| 2026-08-26 09:12 UTC | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context | 2 | norbert@doyensec.com | finished in 4h28m0s |
| 2026-08-26 07:57 UTC | nfc: llcp: Fix race condition in accept_queue lifecycle | 2 | lee@kernel.org |
finished
in 1h59m0s
[1 findings] |
| 2026-08-26 07:40 UTC | net/sched: clamp quantum and psched_mtu in change paths and missed siblings | 1 | jhs@mojatatu.com | finished in 4h0m0s |
| 2026-08-26 06:48 UTC | 9p: dynamically allocate directory entry names | 1 | 853555@gmail.com | finished in 1h29m0s |
| 2026-08-26 02:51 UTC | net/sched: cls_flower: validate mask pointer after nla_next() | 1 | ljp1205831794@gmail.com | finished in 4h9m0s |
| 2026-08-26 01:41 UTC | net: bridge: mcast: don't truncate the port group walk on teardown | 2 | littleddfu@gmail.com | finished in 4h26m0s |
| 2026-08-26 01:20 UTC | xsk: set network header on skb at generic transmit | 1 | kerneljasonxing@gmail.com | finished in 4h31m0s |
| 2026-08-26 00:39 UTC | vsock: validate packet sources after bound lookup fallback | 4 | 4ncienth@gmail.com | finished in 3h46m0s |
| 2026-08-26 00:02 UTC | bnxt_en: Write doorbell when linearizing skb fails | 1 | joe@dama.to | skipped |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 20:02 UTC | Fix UDP length overflow in edge cases | 4 | alice.kernel@fastmail.im | finished in 4h4m0s |
| 2026-08-25 19:01 UTC | tipc: protect node reset trace dump with node lock | 3 | nicoyip.dev@gmail.com | skipped |
| 2026-08-25 18:53 UTC | net: pktgen: return bool from __pktgen_NN_threads() | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-25 17:23 UTC | net: pin protocol module before inet socket allocation | 2 | nicoyip.dev@gmail.com | finished in 4h43m0s |
| 2026-08-25 16:01 UTC | net/sched: act_sample: reset truncation settings on action replace | 1 | ahemadkhawar123@gmail.com | finished in 4h44m0s |
| 2026-08-25 15:58 UTC | netlink: specs: fix the conntrack filter type | 1 | i.maximets@ovn.org | skipped |
| 2026-08-25 15:27 UTC | net: netfilter: report NLM_F_DUMP_FILTERED when all is filtered out | 1 | i.maximets@ovn.org | finished in 4h31m0s |
| 2026-08-25 12:37 UTC | net: iptunnel: fix stale transport header during tunnel decapsulation | 3 | dongchenchen2@huawei.com | finished in 4h12m0s |
| 2026-08-25 12:13 UTC | net/sched: act_gate: Limit the max value for cycletime | 3 | eadavis@qq.com | skipped |
| 2026-08-25 12:01 UTC | net/rds: fix out-of-bounds write in rds_conn_peer_gen_update() | 2 | paula@bynar.io | finished in 4h2m0s |
| 2026-08-25 10:50 UTC | net: fix spurious TX timeout after dev_activate() | 2 | leitao@debian.org | finished in 3h57m0s |
| 2026-08-25 09:54 UTC | Convert barrier pairs to acquire/release for better performance | 1 | ruanjinjie@huawei.com | finished in 4h8m0s |
| 2026-08-25 09:50 UTC | net: iptunnel: fix stale transport header during tunnel decapsulation | 2 | dongchenchen2@huawei.com | finished in 4h21m0s |
| 2026-08-25 09:45 UTC | ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup | 3 | dongchenchen2@huawei.com | finished in 4h38m0s |
| 2026-08-25 09:07 UTC | selftests: drv-net: pp_alloc_fail: restore ring size after timeout | 1 | noren@nvidia.com | skipped |
| 2026-08-25 08:45 UTC | net: icmp: avoid invalid transport header access in icmp_send tracepoint | 1 | edumazet@google.com | skipped |
| 2026-08-25 08:29 UTC | sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration | 2 | bsdhenrymartin@gmail.com | finished in 4h3m0s |
| 2026-08-25 08:17 UTC | net/sched: pfifo_fast: reject oversized ring and account to memcg | 2 | jhs@mojatatu.com | finished in 4h36m0s |