| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-04-10 15:17 UTC | Direct Map Removal Support for guest_memfd | 12 | kalyazin@amazon.co.uk | finished in 4h7m0s |
| 2026-04-01 07:17 UTC | mm/vmscan: add tracepoint for changes in min_seq and max_seq | 1 | wangzhen5@honor.com | finished in 4h53m0s |
| 2026-03-27 13:38 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 3 | jiayuan.chen@linux.dev | finished in 4h28m0s |
| 2026-03-26 06:26 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 2 | jiayuan.chen@linux.dev | finished in 4h33m0s |
| 2026-03-24 08:06 UTC | net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak | 1 | jiayuan.chen@linux.dev | finished in 4h23m0s |
| 2026-03-23 10:54 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 1 | jiayuan.chen@linux.dev | finished in 4h30m0s |
| 2026-03-20 07:21 UTC | team: fix header_ops type confusion and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-03-20 02:22 UTC | selftests: bonding: add test for stacked bond header_parse recursion | 4 | jiayuan.chen@linux.dev | finished in 1h10m0s |
| 2026-03-19 12:03 UTC | ext4: fix use-after-free in update_super_work when racing with umount | 3 | jiayuan.chen@linux.dev | finished in 5h15m0s |
| 2026-03-19 07:36 UTC | ext4: fix use-after-free in update_super_work when racing with umount | 2 | jiayuan.chen@linux.dev |
finished
in 4h23m0s
[1 findings] |
| 2026-03-19 03:58 UTC | selftests: bonding: add test for stacked bond header_parse recursion | 3 | jiayuan.chen@linux.dev | finished in 1h10m0s |
| 2026-03-17 14:10 UTC | Direct Map Removal Support for guest_memfd | 11 | kalyazin@amazon.co.uk | finished in 4h7m0s |
| 2026-03-17 12:45 UTC | team: fix header_ops type confusion and add selftest | 2 | jiayuan.chen@linux.dev | finished in 4h21m0s |
| 2026-03-17 11:12 UTC | net/ipv6: mcast: fix circular locking dependency in __ipv6_dev_mc_inc() | 1 | jiayuan.chen@linux.dev | finished in 4h29m0s |
| 2026-03-17 03:14 UTC | selftests: bonding: add test for stacked bond header_parse recursion | 2 | jiayuan.chen@linux.dev | finished in 1h27m0s |
| 2026-03-15 10:41 UTC | bonding: prevent potential infinite loop in bond_header_parse() | 2 | edumazet@google.com | finished in 4h0m0s |
| 2026-03-14 13:42 UTC | selftests: bonding: add test for stacked bond header_parse recursion | 1 | jiayuan.chen@linux.dev | finished in 1h20m0s |
| 2026-03-14 11:56 UTC | bonding: prevent potential infinite loop in bond_header_parse() | 1 | edumazet@google.com | finished in 4h15m0s |
| 2026-03-14 06:23 UTC | team: fix header_ops type confusion with non-Ethernet ports | 1 | jiayuan.chen@linux.dev | finished in 4h17m0s |
| 2026-03-12 09:29 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 5 | jiayuan.chen@linux.dev | finished in 5h20m0s |
| 2026-03-12 08:35 UTC | selftests/bpf: Improve tc_tunnel test reliability | 1 | jiayuan.chen@linux.dev | finished in 1h18m0s |
| 2026-03-12 07:25 UTC | selftests/bpf: Fix sockmap_multi_channels reliability | 1 | jiayuan.chen@linux.dev | finished in 1h17m0s |
| 2026-03-12 06:20 UTC | selftests/bpf: Improve connect_force_port test reliability | 1 | jiayuan.chen@linux.dev | finished in 1h20m0s |
| 2026-03-11 10:03 UTC | IB/core: Fix use-after-free of ipvlan phy_dev in ib_get_eth_speed | 1 | jiayuan.chen@linux.dev | finished in 4h13m0s |
| 2026-03-11 07:06 UTC | net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect | 2 | jiayuan.chen@linux.dev | finished in 4h6m0s |
| 2026-03-11 02:24 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 4 | jiayuan.chen@linux.dev | finished in 5h4m0s |
| 2026-03-10 12:00 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 3 | jiayuan.chen@linux.dev |
finished
in 4h13m0s
[3 findings] |
| 2026-03-10 10:13 UTC | net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-03-09 15:59 UTC | atm: lec: fix use-after-free in sock_def_readable() | 2 | kartikey406@gmail.com | finished in 1h44m0s |
| 2026-03-09 12:39 UTC | net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode() | 2 | jiayuan.chen@linux.dev | finished in 4h24m0s |
| 2026-03-09 09:36 UTC | atm: lec: fix use-after-free in sock_def_readable() | 1 | kartikey406@gmail.com | finished in 2h16m0s |
| 2026-03-09 03:06 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 5 | jiayuan.chen@linux.dev | finished in 4h7m0s |
| 2026-03-06 03:40 UTC | serial: caif: hold tty->link reference in ldisc_open and ser_release | 5 | shuangpeng.kernel@gmail.com | finished in 1h46m0s |
| 2026-03-06 02:15 UTC | bonding: fix type confusion in bond_setup_by_slave() | 2 | jiayuan.chen@linux.dev | finished in 4h21m0s |
| 2026-03-05 07:33 UTC | net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode() | 1 | jiayuan.chen@linux.dev | finished in 4h8m0s |
| 2026-03-04 11:38 UTC | net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop and add selftest | 4 | jiayuan.chen@linux.dev | finished in 4h6m0s |
| 2026-03-04 07:42 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 4 | jiayuan.chen@linux.dev | finished in 3h59m0s |
| 2026-03-03 03:13 UTC | net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h25m0s |
| 2026-03-02 05:11 UTC | net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop and add selftest | 2 | jiayuan.chen@linux.dev | finished in 4h4m0s |
| 2026-03-01 22:05 UTC | serial: caif: hold tty->link reference in ldisc_open and ser_release | 4 | shuangpeng.kernel@gmail.com | finished in 1h42m0s |
| 2026-02-28 11:13 UTC | net: fix sock compilation error under CONFIG_PREEMPT_RT | 2 | jiayuan.chen@linux.dev | finished in 4h14m0s |
| 2026-02-28 09:58 UTC | bonding: fix type confusion in bond_setup_by_slave() | 1 | jiayuan.chen@linux.dev | finished in 4h4m0s |
| 2026-02-28 09:06 UTC | net: fix sock compilation error under CONFIG_PREEMPT_RT | 1 | jiayuan.chen@linux.dev | finished in 4h23m0s |
| 2026-02-28 03:13 UTC | net: nexthop: fix panic when IPv4 route references IPv6 nexthop | 1 | jiayuan.chen@linux.dev | finished in 4h8m0s |
| 2026-02-28 02:19 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h14m0s |
| 2026-02-27 09:22 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 2 | jiayuan.chen@linux.dev | finished in 4h29m0s |
| 2026-02-27 06:32 UTC | tls: fix hung task in tx_work_handler by using non-blocking sends | 1 | jiayuan.chen@linux.dev | finished in 4h16m0s |
| 2026-02-26 08:40 UTC | mm: annotate data race of f_ra.prev_pos | 1 | jiayuan.chen@linux.dev | finished in 4h0m0s |
| 2026-02-26 08:03 UTC | bonding: fix missing XDP compat check on xmit_hash_policy change | 1 | jiayuan.chen@linux.dev | finished in 4h4m0s |
| 2026-02-25 12:32 UTC | atm: lec: fix null-ptr-deref in lec_arp_clear_vccs | 2 | jiayuan.chen@linux.dev | finished in 2h24m0s |
| 2026-02-25 12:14 UTC | bpf: cpumap/devmap: fix per-CPU bulk queue races on PREEMPT_RT | 4 | jiayuan.chen@linux.dev | finished in 4h29m0s |
| 2026-02-25 07:16 UTC | radix-tree: fix memory leak of intermediate nodes on insert failure | 1 | jiayuan.chen@linux.dev | finished in 4h26m0s |
| 2026-02-24 11:25 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 1 | jiayuan.chen@linux.dev | finished in 4h33m0s |
| 2026-02-24 04:46 UTC | atm: lec: fix null-ptr-deref in lec_arp_clear_vccs | 1 | jiayuan.chen@linux.dev | finished in 2h16m0s |
| 2026-02-19 01:42 UTC | kcm: fix zero-frag skb in frag_list on partial sendmsg error | 2 | jiayuan.chen@linux.dev | finished in 4h6m0s |
| 2026-02-14 03:38 UTC | net: defer __dev_set_promiscuity() to avoid sleeping in atomic context | 1 | jiayuan.chen@linux.dev | finished in 3h52m0s |
| 2026-02-13 12:38 UTC | mm/vmscan: avoid false-positive -Wuninitialized warning | 1 | arnd@kernel.org | finished in 3h53m0s |
| 2026-02-13 07:18 UTC | mm: zswap: add per-memcg stat for incompressible pages | 3 | jiayuan.chen@linux.dev | finished in 4h7m0s |
| 2026-02-13 06:12 UTC | kcm: fix zero-frag skb in frag_list on partial sendmsg error | 1 | jiayuan.chen@linux.dev | finished in 3h57m0s |
| 2026-02-13 03:40 UTC | bpf: cpumap/devmap: fix per-CPU bulk queue races on PREEMPT_RT | 3 | jiayuan.chen@linux.dev | finished in 4h8m0s |
| 2026-02-12 02:36 UTC | bpf: cpumap: fix race in bq_flush_to_queue on PREEMPT_RT | 2 | jiayuan.chen@linux.dev | finished in 4h0m0s |
| 2026-02-11 06:44 UTC | bpf: cpumap: fix race in bq_flush_to_queue on PREEMPT_RT | 1 | jiayuan.chen@linux.dev | finished in 3h51m0s |
| 2026-02-06 07:44 UTC | serial: caif: fix use-after-free in caif_serial ldisc_close() | 2 | jiayuan.chen@linux.dev | finished in 1h46m0s |
| 2026-02-06 07:22 UTC | mm: zswap: add per-memcg stat for incompressible pages | 2 | jiayuan.chen@linux.dev | finished in 4h5m0s |
| 2026-02-06 05:02 UTC | xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path | 4 | jiayuan.chen@linux.dev | finished in 3h53m0s |
| 2026-02-05 09:54 UTC | net: atm: fix crash due to unvalidated vcc pointer in sigd_send() | 1 | jiayuan.chen@linux.dev | finished in 1h56m0s |
| 2026-02-05 07:02 UTC | xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path | 3 | jiayuan.chen@linux.dev | finished in 4h9m0s |
| 2026-02-05 05:30 UTC | mm: zswap: add per-memcg stat for incompressible pages | 1 | jiayuan.chen@linux.dev | finished in 3h58m0s |
| 2026-02-04 08:19 UTC | serial: caif: fix use-after-free in caif_serial ldisc_close() | 1 | jiayuan.chen@linux.dev | finished in 1h49m0s |
| 2026-02-03 06:34 UTC | xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path | 2 | jiayuan.chen@linux.dev | finished in 3h57m0s |
| 2026-02-01 13:59 UTC | linkwatch: use __dev_put() in callers to prevent UAF | 3 | jiayuan.chen@linux.dev | finished in 3h53m0s |
| 2026-01-30 14:14 UTC | linkwatch: use __dev_put() in callers to prevent UAF | 2 | jiayuan.chen@linux.dev | finished in 4h11m0s |
| 2026-01-28 09:05 UTC | icmp: fix ip_rt_bug race in icmp_route_lookup reverse path | 1 | jiayuan.chen@linux.dev | finished in 3h55m0s |
| 2026-01-28 03:10 UTC | linkwatch: hold dev reference to prevent UAF in __linkwatch_run_queue() | 1 | jiayuan.chen@linux.dev | finished in 3h57m0s |
| 2026-01-27 11:38 UTC | xfrm6: fix uninitialized saddr in xfrm6_get_saddr() | 1 | jiayuan.chen@linux.dev | finished in 3h48m0s |
| 2026-01-26 16:46 UTC | Direct Map Removal Support for guest_memfd | 10 | kalyazin@amazon.co.uk | finished in 4h18m0s |
| 2026-01-21 12:39 UTC | mm/lru_gen: add memory.lru_gen interface for cgroup v2 | 1 | jiayuan.chen@linux.dev | finished in 3h58m0s |
| 2026-01-20 02:43 UTC | mm/vmscan: mitigate spurious kswapd_failures reset and add tracepoints | 4 | jiayuan.chen@linux.dev | finished in 3h58m0s |
| 2026-01-14 07:40 UTC | mm/vmscan: mitigate spurious kswapd_failures reset and add tracepoints | 3 | jiayuan.chen@linux.dev | finished in 4h6m0s |
| 2026-01-04 12:35 UTC | kasan,mm: fix incomplete tag reset in change_memory_common() | 1 | jiayuan.chen@linux.dev | finished in 1h6m0s |