| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-01 12:52 UTC | net: core: propagate unreadable flag in skb_zerocopy | 1 | almasrymina@google.com | finished in 4h22m0s |
| 2026-08-01 10:26 UTC | bpf, sockmap: fix forward allocation accounting in strparser self-pass path | 2 | zirajs7@gmail.com | finished in 4h27m0s |
| 2026-07-31 21:08 UTC | net: skbuff: reject skb header offset updates that truncate | 2 | zihanx@nebusec.ai | finished in 4h44m0s |
| 2026-07-31 18:54 UTC | net: gro: coalesce padded small IPv4 TCP segments | 1 | gmj@meta.com | finished in 4h7m0s |
| 2026-07-30 22:32 UTC | bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() | 3 | jose.fernandez@linux.dev | finished in 3h50m0s |
| 2026-07-29 18:40 UTC | net: skbuff: reject skb header offset updates that truncate | 1 | zihanx@nebusec.ai | finished in 4h14m0s |
| 2026-07-28 12:56 UTC | netdevsim: add TLS device offload emulation and test | 1 | jiayuan.chen@linux.dev | finished in 4h57m0s |
| 2026-07-28 06:05 UTC | bpf: arena: fix mmap_lock deadlock on arena lock failure | 1 | jiayuan.chen@linux.dev | finished in 5h6m0s |
| 2026-07-27 09:54 UTC | mm/damon/core: cover discrete System RAM areas with per-range regions | 1 | jiayuan.chen@linux.dev | finished in 5h18m0s |
| 2026-07-27 06:24 UTC | bpf: arena: handle memory.max on fault-in with reclaim/OOM | 1 | jiayuan.chen@linux.dev | finished in 5h8m0s |
| 2026-07-24 10:38 UTC | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() | 4 | nicoyip.dev@gmail.com | finished in 5h34m0s |
| 2026-07-23 16:26 UTC | bpf, sockmap: Fix cork ownership in tcp_bpf_sendmsg() | 3 | nicoyip.dev@gmail.com | finished in 4h50m0s |
| 2026-07-23 15:51 UTC | Guard against gso_segs overflows | 1 | alice.kernel@fastmail.im | finished in 4h38m0s |
| 2026-07-23 15:34 UTC | bpf, sockmap: Fix cork ownership in tcp_bpf_sendmsg() | 2 | nicoyip.dev@gmail.com | finished in 27m0s |
| 2026-07-23 11:33 UTC | bpf: Fix socket leaks around connect(AF_UNSPEC)+listen() | 1 | mhal@rbox.co | finished in 5h7m0s |
| 2026-07-23 06:52 UTC | bpf, sockmap: fix page_counter underflow in strparser SK_PASS | 1 | zirajs7@gmail.com | finished in 5h50m0s |
| 2026-07-23 06:13 UTC | selftests/bpf: Report the real error from libarena parallel workers | 2 | jiayuan.chen@linux.dev | skipped |
| 2026-07-22 06:47 UTC | selftests/bpf: Report the real error from libarena parallel workers | 1 | jiayuan.chen@linux.dev | skipped |
| 2026-07-21 22:38 UTC | bpf, sockmap: handle spurious tcp_msg_wait_data() wakeup | 7 | nnamdio@gmail.com | finished in 5h8m0s |
| 2026-07-20 17:15 UTC | bpf, sockmap: handle spurious tcp_msg_wait_data() wakeup | 6 | nnamdio@gmail.com | finished in 4h57m0s |
| 2026-07-20 07:15 UTC | bpftool: Skip prog/map that disappears while looking it up by name | 1 | jiayuan.chen@linux.dev | finished in 34m0s |
| 2026-07-19 16:16 UTC | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() | 1 | nicoyip.dev@gmail.com | finished in 4h46m0s |
| 2026-07-19 15:22 UTC | bpf, sockmap: Fix sk_redir use-after-free in send verdict | 1 | nicoyip.dev@gmail.com | finished in 4h36m0s |
| 2026-07-17 15:53 UTC | bpf, sockmap: handle spurious tcp_msg_wait_data() wakeup | 5 | nnamdio@gmail.com | finished in 5h0m0s |
| 2026-07-17 11:37 UTC | bpf: Add memory usage for arena and selftest | 2 | jiayuan.chen@linux.dev | finished in 5h12m0s |
| 2026-07-17 02:33 UTC | bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() | 2 | jose.fernandez@linux.dev | finished in 5h13m0s |
| 2026-07-16 14:24 UTC | bpf: Add memory usage for arena | 1 | jiayuan.chen@linux.dev | finished in 5h0m0s |
| 2026-07-15 21:35 UTC | bpf, sockmap: handle spurious tcp_msg_wait_data() wakeup | 4 | nnamdio@gmail.com | finished in 5h16m0s |
| 2026-07-15 14:53 UTC | tcp: Add net.ipv4.tcp_purge_receive_queue sysctl | 2 | leon.hwang@linux.dev | finished in 4h30m0s |
| 2026-07-14 20:39 UTC | bpf, sockmap: handle spurious tcp_msg_wait_data() wakeup | 3 | nnamdio@gmail.com | finished in 4h46m0s |
| 2026-07-14 08:06 UTC | net: hsr: clean up the slave VLAN filters when deleting a port | 1 | jiayuan.chen@linux.dev | finished in 5h4m0s |
| 2026-07-08 16:55 UTC | bpf, sockmap: Fix FIONREAD for sockets without a verdict program | 3 | devnull@kernel.org | finished in 4h57m0s |
| 2026-07-08 13:40 UTC | bpf, sockmap: Fix FIONREAD for sockets without a verdict program | 2 | devnull@kernel.org | finished in 4h54m0s |
| 2026-07-08 05:54 UTC | net: skbuff: optimization of net_zcopy_get() call in pskb_carve helpers | 2 | luyun_611@163.com | skipped |
| 2026-07-07 16:15 UTC | bpf, sockmap: Account for receive queue in FIONREAD without a verdict program | 1 | devnull@kernel.org | finished in 5h25m0s |
| 2026-07-07 04:23 UTC | bpf, sockmap: Fix sockmap leaking UDP socks | 4 | mhal@rbox.co | finished in 4h47m0s |
| 2026-07-06 10:02 UTC | net: skbuff: use net_zcopy_get() instead of refcount_inc() | 1 | luyun_611@163.com | skipped |
| 2026-07-03 06:38 UTC | mm: memcg: reset zswap settings in css_reset | 3 | jiayuan.chen@linux.dev | finished in 4h38m0s |
| 2026-07-02 14:09 UTC | bpf, sockmap: fix copied_seq after partial TCP read | 1 | dongchenchen2@huawei.com | finished in 4h49m0s |
| 2026-07-01 23:28 UTC | bpf, sockmap: Fix sockmap leaking UDP socks | 3 | mhal@rbox.co | finished in 4h38m0s |
| 2026-07-01 07:14 UTC | selftests/bpf: Fix test_maps sockmap failure | 1 | jiayuan.chen@linux.dev | skipped |
| 2026-07-01 00:27 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 5 | eadavis@qq.com | finished in 4h40m0s |
| 2026-06-30 20:50 UTC | bpf, sockmap: fix copied_seq left behind when a stream parser is removed | 1 | rhkrqnwk98@gmail.com | finished in 1h41m0s |
| 2026-06-30 14:54 UTC | bpf, sockmap: disallow sockmap mutation from tc, xdp, socket_filter and flow_dissector | 4 | rhkrqnwk98@gmail.com | finished in 1h38m0s |
| 2026-06-30 14:11 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 4 | eadavis@qq.com | finished in 4h19m0s |
| 2026-06-30 13:09 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 3 | eadavis@qq.com | finished in 4h45m0s |
| 2026-06-30 10:08 UTC | mm: memcg: reset zswap settings in css_reset | 1 | jiayuan.chen@linux.dev | finished in 4h42m0s |
| 2026-06-30 01:29 UTC | memcg: bail out reclaim when memcg is dying | 2 | jiayuan.chen@linux.dev | finished in 4h8m0s |
| 2026-06-29 17:27 UTC | bpf, sockmap: disallow sockmap mutation from tc, xdp and flow_dissector | 3 | rhkrqnwk98@gmail.com | finished in 4h53m0s |
| 2026-06-29 14:56 UTC | mm/damon/core: detect internal variation above max_nr_regions/2 | 3 | sj@kernel.org | finished in 4h42m0s |
| 2026-06-29 09:51 UTC | net/smc: fix out-of-bounds read when sk_user_data holds a sk_psock | 3 | rhkrqnwk98@gmail.com | finished in 4h13m0s |
| 2026-06-26 20:36 UTC | bpf, sockmap: Fix sockmap leaking UDP socks | 2 | mhal@rbox.co | finished in 4h10m0s |
| 2026-06-26 08:58 UTC | mm/damon/core: detect internal variation above max_nr_regions/2 | 2 | jiayuan.chen@linux.dev | finished in 4h21m0s |
| 2026-06-26 08:39 UTC | e1000e: fix IRQ leak when request_irq() fails in e1000_request_msix() | 1 | jiayuan.chen@linux.dev | finished in 2h16m0s |
| 2026-06-23 18:03 UTC | bpf, sockmap: Fix sockmap leaking UDP socks | 1 | mhal@rbox.co | finished in 4h23m0s |
| 2026-06-23 11:20 UTC | bpf, unix: Guard sk_msg-dependent code behind CONFIG_NET_SOCK_MSG | 2 | jakub@cloudflare.com | finished in 4h26m0s |
| 2026-06-23 06:27 UTC | memcg: bail out reclaim when memcg is dying | 1 | jiayuan.chen@linux.dev | finished in 4h11m0s |
| 2026-06-22 12:58 UTC | bpf, unix: Guard sk_msg-dependent code behind CONFIG_NET_SOCK_MSG | 1 | jakub@cloudflare.com | skipped |
| 2026-06-20 20:15 UTC | net, bpf: check master for NULL in xdp_master_redirect() | 1 | xmei5@asu.edu | finished in 4h14m0s |
| 2026-06-20 03:46 UTC | bpf, sockmap: disallow update and delete from tc, xdp and flow_dissector | 2 | rhkrqnwk98@gmail.com | finished in 4h4m0s |
| 2026-06-20 02:44 UTC | bpf, sockmap: reject a packet-modifying SK_SKB stream parser | 5 | rhkrqnwk98@gmail.com | finished in 4h3m0s |
| 2026-06-19 06:29 UTC | bpf, sockmap: reject a packet-modifying SK_SKB stream parser | 4 | rhkrqnwk98@gmail.com | finished in 4h32m0s |
| 2026-06-18 18:20 UTC | bpf: bpf_redirect_peer egress redirection | 2 | jordan@jrife.io | finished in 4h8m0s |
| 2026-06-18 10:43 UTC | ipv6: ioam: fix type confusion of dst_entry | 1 | jiayuan.chen@linux.dev | finished in 1h10m0s |
| 2026-06-18 10:27 UTC | bpf, sockmap: reject a packet-modifying SK_SKB stream parser | 3 | rhkrqnwk98@gmail.com | finished in 4h33m0s |
| 2026-06-17 17:50 UTC | bpf: Fix stack slot index for Spectre v4 nospec checks | 3 | gnq25@mails.tsinghua.edu.cn | finished in 4h39m0s |
| 2026-06-17 16:45 UTC | bpf: Fix stack slot index for Spectre v4 nospec checks | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h35m0s |
| 2026-06-15 02:19 UTC | bpf, skmsg: some fixes for skmsg | 4 | jiayuan.chen@linux.dev | finished in 3h59m0s |
| 2026-06-12 13:07 UTC | bpf, skmsg: some fixes for skmsg | 3 | jiayuan.chen@linux.dev | finished in 4h47m0s |
| 2026-06-12 11:40 UTC | bpf: Fix generic devmap egress skb sharing | 5 | sun.jian.kdev@gmail.com | finished in 4h15m0s |
| 2026-06-12 01:14 UTC | tcp: opportunistic loopback splice for BPF-paired sockets | 1 | xiyou.wangcong@gmail.com |
finished
in 4h30m0s
[2 findings] |
| 2026-06-11 12:34 UTC | bpf, skmsg: some fixes for skmsg | 2 | jiayuan.chen@linux.dev | finished in 4h49m0s |
| 2026-06-11 09:29 UTC | tcp: clear sock_ops cb flags before force-closing a child socket | 3 | rhkrqnwk98@gmail.com | finished in 4h36m0s |
| 2026-06-11 08:08 UTC | bpf: Fix generic devmap egress skb sharing | 4 | sun.jian.kdev@gmail.com | finished in 4h6m0s |
| 2026-06-11 04:33 UTC | bpf: Fix generic devmap egress skb sharing | 3 | sun.jian.kdev@gmail.com | finished in 4h15m0s |
| 2026-06-11 01:35 UTC | bpf, skmsg: some fixes for skmsg | 1 | jiayuan.chen@linux.dev | finished in 4h22m0s |
| 2026-06-10 15:59 UTC | tcp: clear sock_ops cb flags before force-closing a child socket | 2 | rhkrqnwk98@gmail.com | finished in 4h41m0s |
| 2026-06-10 10:28 UTC | bpf: Run generic devmap egress prog on private skb | 2 | sun.jian.kdev@gmail.com | finished in 4h26m0s |
| 2026-06-10 03:02 UTC | netfilter: ebtables: bound num_counters like nentries in do_replace() | 1 | jiayuan.chen@linux.dev | finished in 5h1m0s |
| 2026-06-09 14:09 UTC | rxrpc: Miscellaneous fixes | 1 | dhowells@redhat.com | finished in 4h11m0s |
| 2026-06-08 12:58 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 8 | jiayuan.chen@linux.dev | finished in 4h28m0s |
| 2026-06-05 21:48 UTC | tls: fix use-after-free in tls_sw_sendmsg() cork error path | 1 | rhkrqnwk98@gmail.com | finished in 4h33m0s |
| 2026-06-03 18:08 UTC | rtnetlink: use dev_isalive() in rtnl_getlink() | 2 | edumazet@google.com | finished in 4h59m0s |
| 2026-06-03 10:53 UTC | bpf: fix sysctl new-value handling in __cgroup_bpf_run_filter_sysctl | 3 | dawei.feng@seu.edu.cn | finished in 1h19m0s |
| 2026-06-03 10:11 UTC | net/sched: cls_flower: reject ETH_ADDRS match on devices without L2 header | 1 | yun.zhou@windriver.com | finished in 4h39m0s |
| 2026-06-01 06:13 UTC | macvlan: fix use-after-free of macvlan_port in macvlan_fill_info() | 1 | jiayuan.chen@linux.dev | finished in 4h22m0s |
| 2026-05-29 15:22 UTC | ipv6: anycast: insert aca into global hash under idev->lock | 2 | jiayuan.chen@linux.dev | finished in 4h26m0s |
| 2026-05-29 03:20 UTC | ipv6: anycast: insert aca into global hash under idev->lock | 1 | jiayuan.chen@linux.dev |
finished
in 4h22m0s
[2 findings] |
| 2026-05-28 11:09 UTC | netfilter: nft_ct: bail out on template ct in get eval | 2 | jiayuan.chen@linux.dev | finished in 4h51m0s |
| 2026-05-28 04:26 UTC | netfilter: nft_ct: fix OOB in NFT_CT_SRC/DST eval | 1 | jiayuan.chen@linux.dev | finished in 5h3m0s |
| 2026-05-27 05:31 UTC | ipv6: fix possible infinite loop in rt6_fill_node() | 1 | jiayuan.chen@linux.dev | finished in 4h21m0s |
| 2026-05-26 02:55 UTC | net/sched: cls_bpf: prevent unbounded recursion in offload rollback | 2 | jiayuan.chen@linux.dev | finished in 4h7m0s |
| 2026-05-26 02:20 UTC | mm: BPF struct_ops for dynamic memory protection and async reclaim | 7 | hui.zhu@linux.dev | finished in 4h13m0s |
| 2026-05-26 02:02 UTC | netfilter: nft_fib_ipv6: bail out of sibling walk if rt got unlinked | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-05-24 02:24 UTC | ipv6: mcast: annotate data-races around mca_users | 1 | sigefriedhyy@gmail.com | finished in 3h55m0s |
| 2026-05-22 09:39 UTC | ipv4: igmp: annotate data-races around im->users | 2 | sigefriedhyy@gmail.com | finished in 4h20m0s |
| 2026-05-22 02:58 UTC | net/sched: cls_bpf: prevent unbounded recursion in offload rollback | 1 | jiayuan.chen@linux.dev | finished in 4h19m0s |
| 2026-05-22 01:16 UTC | rds: annotate data-race around rs_seen_congestion | 1 | jiayuan.chen@linux.dev | finished in 4h0m0s |
| 2026-05-21 04:52 UTC | mm/damon/core: detect internal variation above max_nr_regions/2 | 1 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-05-20 02:34 UTC | netfilter: nft_fib_ipv6: handle routes via external nexthop | 2 | jiayuan.chen@linux.dev | finished in 4h25m0s |