| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-18 10:43 UTC | ipv6: ioam: fix type confusion of dst_entry | 1 | jiayuan.chen@linux.dev | in progress |
| 2026-06-18 10:27 UTC | bpf, sockmap: reject a packet-modifying SK_SKB stream parser | 3 | rhkrqnwk98@gmail.com | in progress |
| 2026-06-17 17:50 UTC | bpf: Fix stack slot index for Spectre v4 nospec checks | 3 | gnq25@mails.tsinghua.edu.cn | finished in 4h39m0s |
| 2026-06-17 16:45 UTC | bpf: Fix stack slot index for Spectre v4 nospec checks | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h35m0s |
| 2026-06-15 02:19 UTC | bpf, skmsg: some fixes for skmsg | 4 | jiayuan.chen@linux.dev | finished in 3h59m0s |
| 2026-06-12 13:07 UTC | bpf, skmsg: some fixes for skmsg | 3 | jiayuan.chen@linux.dev | finished in 4h47m0s |
| 2026-06-12 11:40 UTC | bpf: Fix generic devmap egress skb sharing | 5 | sun.jian.kdev@gmail.com | finished in 4h15m0s |
| 2026-06-12 01:14 UTC | tcp: opportunistic loopback splice for BPF-paired sockets | 1 | xiyou.wangcong@gmail.com |
finished
in 4h30m0s
[2 findings] |
| 2026-06-11 12:34 UTC | bpf, skmsg: some fixes for skmsg | 2 | jiayuan.chen@linux.dev | finished in 4h49m0s |
| 2026-06-11 09:29 UTC | tcp: clear sock_ops cb flags before force-closing a child socket | 3 | rhkrqnwk98@gmail.com | finished in 4h36m0s |
| 2026-06-11 08:08 UTC | bpf: Fix generic devmap egress skb sharing | 4 | sun.jian.kdev@gmail.com | finished in 4h6m0s |
| 2026-06-11 04:33 UTC | bpf: Fix generic devmap egress skb sharing | 3 | sun.jian.kdev@gmail.com | finished in 4h15m0s |
| 2026-06-11 01:35 UTC | bpf, skmsg: some fixes for skmsg | 1 | jiayuan.chen@linux.dev | finished in 4h22m0s |
| 2026-06-10 15:59 UTC | tcp: clear sock_ops cb flags before force-closing a child socket | 2 | rhkrqnwk98@gmail.com | finished in 4h41m0s |
| 2026-06-10 10:28 UTC | bpf: Run generic devmap egress prog on private skb | 2 | sun.jian.kdev@gmail.com | finished in 4h26m0s |
| 2026-06-10 03:02 UTC | netfilter: ebtables: bound num_counters like nentries in do_replace() | 1 | jiayuan.chen@linux.dev | finished in 5h1m0s |
| 2026-06-09 14:09 UTC | rxrpc: Miscellaneous fixes | 1 | dhowells@redhat.com | finished in 4h11m0s |
| 2026-06-08 12:58 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 8 | jiayuan.chen@linux.dev | finished in 4h28m0s |
| 2026-06-05 21:48 UTC | tls: fix use-after-free in tls_sw_sendmsg() cork error path | 1 | rhkrqnwk98@gmail.com | finished in 4h33m0s |
| 2026-06-03 18:08 UTC | rtnetlink: use dev_isalive() in rtnl_getlink() | 2 | edumazet@google.com | finished in 4h59m0s |
| 2026-06-03 10:53 UTC | bpf: fix sysctl new-value handling in __cgroup_bpf_run_filter_sysctl | 3 | dawei.feng@seu.edu.cn | finished in 1h19m0s |
| 2026-06-03 10:11 UTC | net/sched: cls_flower: reject ETH_ADDRS match on devices without L2 header | 1 | yun.zhou@windriver.com | finished in 4h39m0s |
| 2026-06-01 06:13 UTC | macvlan: fix use-after-free of macvlan_port in macvlan_fill_info() | 1 | jiayuan.chen@linux.dev | finished in 4h22m0s |
| 2026-05-29 15:22 UTC | ipv6: anycast: insert aca into global hash under idev->lock | 2 | jiayuan.chen@linux.dev | finished in 4h26m0s |
| 2026-05-29 03:20 UTC | ipv6: anycast: insert aca into global hash under idev->lock | 1 | jiayuan.chen@linux.dev |
finished
in 4h22m0s
[2 findings] |
| 2026-05-28 11:09 UTC | netfilter: nft_ct: bail out on template ct in get eval | 2 | jiayuan.chen@linux.dev | finished in 4h51m0s |
| 2026-05-28 04:26 UTC | netfilter: nft_ct: fix OOB in NFT_CT_SRC/DST eval | 1 | jiayuan.chen@linux.dev | finished in 5h3m0s |
| 2026-05-27 05:31 UTC | ipv6: fix possible infinite loop in rt6_fill_node() | 1 | jiayuan.chen@linux.dev | finished in 4h21m0s |
| 2026-05-26 02:55 UTC | net/sched: cls_bpf: prevent unbounded recursion in offload rollback | 2 | jiayuan.chen@linux.dev | finished in 4h7m0s |
| 2026-05-26 02:20 UTC | mm: BPF struct_ops for dynamic memory protection and async reclaim | 7 | hui.zhu@linux.dev | finished in 4h13m0s |
| 2026-05-26 02:02 UTC | netfilter: nft_fib_ipv6: bail out of sibling walk if rt got unlinked | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-05-24 02:24 UTC | ipv6: mcast: annotate data-races around mca_users | 1 | sigefriedhyy@gmail.com | finished in 3h55m0s |
| 2026-05-22 09:39 UTC | ipv4: igmp: annotate data-races around im->users | 2 | sigefriedhyy@gmail.com | finished in 4h20m0s |
| 2026-05-22 02:58 UTC | net/sched: cls_bpf: prevent unbounded recursion in offload rollback | 1 | jiayuan.chen@linux.dev | finished in 4h19m0s |
| 2026-05-22 01:16 UTC | rds: annotate data-race around rs_seen_congestion | 1 | jiayuan.chen@linux.dev | finished in 4h0m0s |
| 2026-05-21 04:52 UTC | mm/damon/core: detect internal variation above max_nr_regions/2 | 1 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-05-20 02:34 UTC | netfilter: nft_fib_ipv6: handle routes via external nexthop | 2 | jiayuan.chen@linux.dev | finished in 4h25m0s |
| 2026-05-19 04:14 UTC | netfilter: nft_fib_ipv6: handle routes via external nexthop | 1 | jiayuan.chen@linux.dev | finished in 4h10m0s |
| 2026-05-15 23:05 UTC | rxrpc: Better fix for DATA/RESPONSE decrypt vs splice() | 4 | dhowells@redhat.com | finished in 4h52m0s |
| 2026-05-15 22:28 UTC | net: skbuff: propagate shared-frag marker through frag-transfer helpers | 5 | imv4bel@gmail.com | finished in 5h12m0s |
| 2026-05-15 07:09 UTC | net: neigh: Rename NEIGH_VAR_INTERVAL_PROBE_TIME_MS to | 2 | qiu.yutan@zte.com.cn | finished in 1h33m0s |
| 2026-05-15 05:55 UTC | net: skbuff: propagate shared-frag marker through frag-transfer helpers | 4 | imv4bel@gmail.com | finished in 3h56m0s |
| 2026-05-14 15:52 UTC | rxrpc: Better fix for DATA/RESPONSE decrypt vs splice() | 3 | dhowells@redhat.com | finished in 4h30m0s |
| 2026-05-14 11:57 UTC | net: skbuff: propagate shared-frag marker through frag-transfer helpers | 3 | imv4bel@gmail.com | finished in 4h31m0s |
| 2026-05-14 05:09 UTC | bpf,net: add missing custom syncookie statistics and add selftest | 4 | jiayuan.chen@linux.dev | finished in 5h20m0s |
| 2026-05-14 03:12 UTC | net/sched: re-enable queue reset on root qdisc graft | 1 | jiayuan.chen@linux.dev | finished in 5h5m0s |
| 2026-05-13 21:07 UTC | net: skbuff: propagate shared-frag marker through frag-transfer helpers | 2 | imv4bel@gmail.com | finished in 4h26m0s |
| 2026-05-13 13:19 UTC | rxrpc: Better fix for DATA/RESPONSE decrypt vs splice() | 2 | dhowells@redhat.com | finished in 4h40m0s |
| 2026-05-13 01:33 UTC | net: pppoe: implement GRO/GSO support | 10 | qingfang.deng@linux.dev | finished in 4h52m0s |
| 2026-05-11 16:07 UTC | rxrpc: Better fix for DATA/RESPONSE decrypt vs splice() | 1 | dhowells@redhat.com | finished in 5h3m0s |
| 2026-05-11 12:10 UTC | bpf: Add Jiayuan Chen to sockmap maintainers | 1 | jakub@cloudflare.com | finished in 1h35m0s |
| 2026-05-10 18:51 UTC | rxrpc: Use skb_ensure_writable() before in-place decryption | 1 | imv4bel@gmail.com | finished in 2h2m0s |
| 2026-05-09 03:04 UTC | net: pppoe: implement GRO/GSO support | 9 | qingfang.deng@linux.dev | finished in 4h15m0s |
| 2026-05-09 01:18 UTC | mm/damon: replace damon_rand() with a per-ctx lockless PRNG | 3 | sj@kernel.org | finished in 4h28m0s |
| 2026-05-08 08:53 UTC | rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present | 3 | imv4bel@gmail.com | finished in 2h29m0s |
| 2026-05-07 10:46 UTC | net: Validate protocol in skb_steal_sock() for BPF-assigned sockets | 7 | jiayuan.chen@linux.dev | finished in 4h32m0s |
| 2026-05-05 14:52 UTC | mm/damon: replace damon_rand() with a per-ctx lockless PRNG | 2 | jiayuan.chen@linux.dev | finished in 5h20m0s |
| 2026-04-29 22:29 UTC | net: tls: fix a few random bugs | 1 | kuba@kernel.org | finished in 4h36m0s |
| 2026-04-27 00:09 UTC | bpf,net: add missing custom syncookie statistics and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-04-25 10:59 UTC | bpf: prevent offloaded programs from running on host via tcx/netkit | 3 | jiayuan.chen@linux.dev | finished in 4h9m0s |
| 2026-04-24 10:41 UTC | bpf: prevent offloaded programs from running on host via tcx/netkit | 2 | jiayuan.chen@linux.dev | finished in 4h25m0s |
| 2026-04-24 04:00 UTC | selftests/cgroup: improve zswap tests robustness and support large page sizes | 7 | li.wang@linux.dev | finished in 1h14m0s |
| 2026-04-23 12:23 UTC | mm/damon: introduce damon_rand_fast() for per-ctx PRNG | 1 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-04-23 03:36 UTC | bpf: prevent offloaded programs from running on host via tcx/netkit | 1 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-04-22 12:35 UTC | tcp: symmetric challenge ACK for SEG.ACK > SND.NXT | 3 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-04-21 15:58 UTC | bpf: Reject TCP_NODELAY in TCP header option | 4 | kafai.wan@linux.dev | finished in 4h26m0s |
| 2026-04-21 01:41 UTC | tcp: symmetric challenge ACK for SEG.ACK > SND.NXT | 2 | jiayuan.chen@linux.dev | finished in 4h9m0s |
| 2026-04-20 02:54 UTC | tcp: symmetric challenge ACK for SEG.ACK > SND.NXT | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-04-19 09:08 UTC | net: iptunnel: fix stale transport header after GRE/TEB decap | 2 | jiayuan.chen@linux.dev | finished in 4h3m0s |
| 2026-04-17 09:20 UTC | bpf: Reject TCP_NODELAY in TCP header option callbacks | 3 | kafai.wan@linux.dev | finished in 4h16m0s |
| 2026-04-17 02:31 UTC | bpf: fix sock_ops rtt_min OOB read | 3 | werner@verivus.ai | finished in 4h7m0s |
| 2026-04-16 11:23 UTC | bpf: Reject TCP_NODELAY in TCP header option callbacks | 2 | kafai.wan@linux.dev | finished in 4h20m0s |
| 2026-04-16 03:46 UTC | net: tunnel: fix stale transport header after GRE/TEB decap | 1 | jiayuan.chen@linux.dev |
finished
in 1h12m0s
[1 findings] |
| 2026-04-14 14:13 UTC | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 4 | mhal@rbox.co | finished in 3h59m0s |
| 2026-04-14 10:57 UTC | bpf,tcp: avoid infinite recursion in BPF_SOCK_OPS_HDR_OPT_LEN_CB | 1 | jiayuan.chen@linux.dev | finished in 4h27m0s |
| 2026-04-13 11:45 UTC | nexthop: fix IPv6 route referencing IPv4 nexthop | 1 | jiayuan.chen@linux.dev | finished in 4h33m0s |
| 2026-04-11 16:35 UTC | bpf: Fix Null-Pointer Dereference in kernel_clone() via BPF fmod_ret on security_task_alloc | 3 | yangfeng59949@163.com | finished in 4h7m0s |
| 2026-04-11 01:32 UTC | net: add missing syncookie statistics for BPF custom syncookies | 2 | jiayuan.chen@linux.dev | finished in 4h10m0s |
| 2026-04-11 00:55 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 7 | jiayuan.chen@linux.dev | finished in 4h14m0s |
| 2026-04-10 11:37 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 6 | jiayuan.chen@linux.dev | finished in 4h13m0s |
| 2026-04-10 06:10 UTC | bpf: Fix Null-Pointer Dereference in kernel_clone() via BPF fmod_ret on security_task_alloc | 2 | yangfeng59949@163.com | finished in 4h31m0s |
| 2026-04-10 03:47 UTC | net: skb: clean up dead code after skb_kfree_head() simplification | 1 | jiayuan.chen@linux.dev | finished in 4h26m0s |
| 2026-04-10 02:06 UTC | net: fix __this_cpu_add() in preemptible code in dev_xmit_recursion_inc/dec | 2 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-04-09 12:41 UTC | net: add missing syncookie statistics for BPF custom syncookies | 1 | jiayuan.chen@linux.dev | finished in 4h34m0s |
| 2026-04-09 03:53 UTC | net: fix __this_cpu_add() in preemptible code in dev_xmit_recursion_inc/dec | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-04-09 02:37 UTC | bpf: Fix use-after-free in offloaded map/prog info fill | 2 | jiayuan.chen@linux.dev | finished in 4h20m0s |
| 2026-04-08 10:47 UTC | bpf: Fix use-after-free in offloaded map/prog info fill | 1 | jiayuan.chen@linux.dev | finished in 4h38m0s |
| 2026-04-08 10:04 UTC | bpf: Fix out-of-bounds read in bpf_obj_memcpy | 1 | jiayuan.chen@linux.dev | finished in 4h59m0s |
| 2026-04-07 12:23 UTC | bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks | 1 | jiayuan.chen@linux.dev | finished in 1h23m0s |
| 2026-04-07 08:42 UTC | net: initialize sk_rx_queue_mapping in sk_clone() | 1 | jiayuan.chen@linux.dev | finished in 4h24m0s |
| 2026-04-07 02:26 UTC | bpf: Fix SOCK_OPS_GET_SK same-register OOB read in sock_ops and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h20m0s |
| 2026-04-06 03:15 UTC | mptcp: fix slab-use-after-free in __inet_lookup_established | 2 | jiayuan.chen@linux.dev | finished in 4h7m0s |
| 2026-04-06 03:12 UTC | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | 2 | jiayuan.chen@linux.dev | finished in 4h4m0s |
| 2026-04-04 14:09 UTC | bpf: Fix SOCK_OPS_GET_SK same-register OOB read in sock_ops | 1 | jiayuan.chen@linux.dev | finished in 4h12m0s |
| 2026-04-03 13:07 UTC | net: mptcp: fix slab-use-after-free in __inet_lookup_established | 1 | jiayuan.chen@linux.dev | finished in 4h15m0s |
| 2026-04-03 04:16 UTC | ipv6: add READ_ONCE() annotations to fib6_metrics reader paths | 1 | liuhangbin@gmail.com | finished in 4h15m0s |
| 2026-04-03 01:58 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 6 | jiayuan.chen@linux.dev | finished in 4h16m0s |
| 2026-04-03 01:45 UTC | net: skb: fix cross-cache free of KFENCE-allocated skb head | 2 | jiayuan.chen@linux.dev | finished in 4h33m0s |
| 2026-04-02 03:31 UTC | net: skb: fix cross-cache free of KFENCE-allocated skb head | 1 | jiayuan.chen@linux.dev | finished in 4h42m0s |
| 2026-04-01 11:04 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 5 | jiayuan.chen@linux.dev | finished in 4h24m0s |