| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-19 06:19 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 15 | tung.quang.nguyen@est.tech | finished in 4h24m0s |
| 2026-08-18 16:35 UTC | tipc: limit the memory pinned by incomplete fragment chains | 1 | chuyf26@linux.alibaba.com | finished in 4h30m0s |
| 2026-08-18 16:35 UTC | tipc: validate the size of discovery messages before parsing | 1 | chuyf26@linux.alibaba.com | finished in 2h45m0s |
| 2026-08-17 06:09 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 14 | tung.quang.nguyen@est.tech | finished in 4h36m0s |
| 2026-08-14 09:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 13 | tung.quang.nguyen@est.tech | finished in 4h5m0s |
| 2026-08-13 10:22 UTC | tipc: replace deprecated strcpy with strscpy in tipc_bearer_get_name() | 3 | ajithpv.linux@gmail.com | skipped |
| 2026-08-12 13:22 UTC | net: tipc: replace deprecated strcpy with strscpy | 2 | ajithpv.linux@gmail.com | skipped |
| 2026-08-12 13:12 UTC | net: tipc: replace deprecated strcpy with strscpy | 2 | ajithpv.linux@gmail.com | finished in 4h22m0s |
| 2026-08-12 13:00 UTC | tipc: defer local Nagle backlog xmit from receive path | 1 | syzbot@kernel.org | finished in 4h1m0s |
| 2026-08-12 02:55 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 12 | tung.quang.nguyen@est.tech | finished in 4h32m0s |
| 2026-08-11 07:03 UTC | net: tipc: replace deprecated strcpy with strscpy | 1 | ajithpv.linux@gmail.com | finished in 4h9m0s |
| 2026-08-10 18:01 UTC | MAINTAINERS: make Tung an official TIPC maintainer | 1 | kuba@kernel.org | skipped |
| 2026-08-10 10:21 UTC | tipc: read le->link under the node lock in tipc_node_link_down() | 2 | juny24602@gmail.com | finished in 4h34m0s |
| 2026-08-05 16:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 11 | tung.quang.nguyen@est.tech | finished in 4h7m0s |
| 2026-08-04 02:16 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 10 | tung.quang.nguyen@est.tech | finished in 16m0s |
| 2026-07-31 10:20 UTC | tipc: read le->link under the node lock in tipc_node_link_down() | 1 | juny24602@gmail.com | finished in 4h35m0s |
| 2026-07-31 10:18 UTC | tipc: purge cong_links under the socket lock in tipc_release() | 1 | juny24602@gmail.com | finished in 4h29m0s |
| 2026-07-31 10:16 UTC | tipc: reject name table updates with invalid origin node | 1 | juny24602@gmail.com | finished in 4h37m0s |
| 2026-07-30 08:34 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 9 | tung.quang.nguyen@est.tech | finished in 4h50m0s |
| 2026-07-23 16:38 UTC | tipc: avoid use-after-free in poll trace queue dumps | 3 | enjou1224z@gmail.com | skipped |
| 2026-07-23 02:29 UTC | tipc: validate Gap ACK blocks header before parsing | 1 | kudo3228@gmail.com | finished in 5h55m0s |
| 2026-07-21 16:24 UTC | tipc: avoid use-after-free in poll trace queue dumps | 2 | enjou1224z@gmail.com | skipped |
| 2026-07-20 21:41 UTC | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | 1 | blbllhy@gmail.com | finished in 5h30m0s |
| 2026-07-20 06:45 UTC | tipc: avoid UAF in trace queue dumps | 1 | enjou1224z@gmail.com | skipped |
| 2026-07-18 09:25 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 8 | bestswngs@gmail.com | finished in 4h19m0s |
| 2026-07-18 09:09 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 7 | bestswngs@gmail.com | finished in 4h27m0s |
| 2026-07-17 18:56 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 6 | bestswngs@gmail.com | finished in 4h48m0s |
| 2026-07-17 18:30 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 5 | bestswngs@gmail.com | skipped |
| 2026-07-16 19:02 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 4 | bestswngs@gmail.com | finished in 5h18m0s |
| 2026-07-16 02:52 UTC | tipc: serialize udp bearer replicast list updates | 6 | bestswngs@gmail.com | finished in 5h11m0s |
| 2026-07-14 19:21 UTC | tipc: serialize udp bearer replicast list updates | 5 | bestswngs@gmail.com | finished in 5h6m0s |
| 2026-07-14 17:41 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 3 | bestswngs@gmail.com | finished in 4h50m0s |
| 2026-07-14 13:19 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 3 | 4ncienth@gmail.com | finished in 5h12m0s |
| 2026-07-14 07:06 UTC | tipc: prevent node timer rearm after peer removal | 1 | david.lee@trailofbits.com | finished in 1h35m0s |
| 2026-07-14 04:15 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 5 | blbllhy@gmail.com | finished in 5h12m0s |
| 2026-07-14 01:39 UTC | net: Use synchronous wakeups selectively | 1 | srikar@linux.ibm.com | finished in 5h6m0s |
| 2026-07-13 20:49 UTC | tipc: fix infinite loop in __tipc_nl_compat_dumpit | 1 | koike@igalia.com | finished in 4h46m0s |
| 2026-07-13 08:23 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 2 | 4ncienth@gmail.com | finished in 5h18m0s |
| 2026-07-10 17:47 UTC | tipc: serialize udp bearer replicast list updates | 4 | bestswngs@gmail.com | finished in 5h7m0s |
| 2026-07-10 15:03 UTC | tipc: cap number of nodes per net namespace | 1 | security@auditcode.ai | finished in 5h51m0s |
| 2026-07-10 03:29 UTC | tipc: serialize udp bearer replicast list updates | 3 | bestswngs@gmail.com | finished in 5h30m0s |
| 2026-07-10 01:44 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 1 | 4ncienth@gmail.com | finished in 4h53m0s |
| 2026-07-09 21:16 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 4 | blbllhy@gmail.com | finished in 5h7m0s |
| 2026-07-09 14:47 UTC | tipc: fix NULL deref in tipc_lxc_xmit() on node up | 3 | bestswngs@gmail.com | finished in 4h42m0s |
| 2026-07-08 18:02 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 3 | blbllhy@gmail.com | finished in 5h29m0s |
| 2026-07-08 17:30 UTC | tipc: fix NULL deref in tipc_lxc_xmit() on node up | 1 | bestswngs@gmail.com | finished in 5h4m0s |
| 2026-07-08 16:13 UTC | tipc: guard against empty buffer list in tipc_node_xmit() | 1 | bestswngs@gmail.com | finished in 4h57m0s |
| 2026-07-07 16:42 UTC | tipc: serialize udp bearer replicast list updates | 2 | bestswngs@gmail.com | finished in 4h57m0s |
| 2026-07-07 15:11 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 2 | blbllhy@gmail.com | finished in 5h21m0s |
| 2026-07-07 15:06 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 2 | blbllhy@gmail.com | finished in 5h16m0s |
| 2026-07-06 18:57 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 1 | blbllhy@gmail.com | finished in 1h17m0s |
| 2026-07-06 16:30 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 2 | bestswngs@gmail.com | finished in 5h22m0s |
| 2026-07-06 13:47 UTC | tipc: serialize udp bearer replicast list updates | 1 | bestswngs@gmail.com | finished in 5h5m0s |
| 2026-07-05 11:59 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 1 | bestswngs@gmail.com | finished in 4h35m0s |
| 2026-06-29 13:09 UTC | tipc: make sure bc_rcvlink is not dereferenced with NULL value | 1 | markov.gi@npc-ksb.ru | finished in 5h1m0s |
| 2026-06-25 14:38 UTC | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 3 | sam@bynar.io | finished in 4h6m0s |
| 2026-06-24 13:56 UTC | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 2 | sam@bynar.io | finished in 4h4m0s |
| 2026-06-23 17:30 UTC | tipc: syzbot related fixes | 2 | edumazet@google.com | finished in 4h19m0s |
| 2026-06-23 13:54 UTC | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 1 | sam@bynar.io | finished in 4h34m0s |
| 2026-06-17 13:57 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 3 | bestswngs@gmail.com | finished in 4h46m0s |
| 2026-06-17 07:58 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 4 | doruk@0sec.ai | finished in 4h11m0s |
| 2026-06-16 17:53 UTC | tipc: free bearer discoverer via RCU to fix tipc_disc_rcv UAF | 2 | sam@bynar.io | finished in 4h41m0s |
| 2026-06-16 12:22 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 2 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-15 15:00 UTC | tipc: free bearer discoverer via RCU to fix tipc_disc_rcv UAF | 1 | sam@bynar.io | finished in 4h58m0s |
| 2026-06-15 11:46 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 3 | doruk@0sec.ai | finished in 4h42m0s |
| 2026-06-12 13:59 UTC | tipc: fix UAF in tipc_l2_send_msg() | 1 | edumazet@google.com | finished in 5h7m0s |
| 2026-06-11 13:41 UTC | tipc: restrict socket queue dumps in enqueue tracepoints | 1 | lixiasong1@huawei.com | finished in 4h59m0s |
| 2026-06-10 20:03 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 2 | doruk@0sec.ai | finished in 4h53m0s |
| 2026-06-10 15:33 UTC | tipc: fix use-after-free of discoverer in tipc_disc_rcv() | 1 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-10 13:00 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 1 | doruk@0sec.ai | finished in 4h25m0s |
| 2026-06-10 12:40 UTC | tipc: fix netlink gate and receive-path bugs | 4 | michael.bommarito@gmail.com | finished in 4h39m0s |
| 2026-06-08 12:22 UTC | tipc: fix netlink gate and receive-path bugs | 3 | michael.bommarito@gmail.com | finished in 4h17m0s |
| 2026-06-08 09:55 UTC | net/tipc/bearer: Use strscpy() to copy strings into arrays | 1 | david.laight.linux@gmail.com | finished in 4h37m0s |
| 2026-06-06 19:14 UTC | tipc: fix netlink gate and receive-path bugs | 2 | michael.bommarito@gmail.com | finished in 4h2m0s |
| 2026-06-04 18:38 UTC | tipc: Add SPDX id lines to source files | 1 | tim.bird@sony.com | finished in 4h15m0s |
| 2026-06-04 16:31 UTC | tipc: require admin privileges for TIPCv2 mutators | 1 | dominik.czarnota@trailofbits.com | finished in 5h17m0s |
| 2026-06-02 13:35 UTC | tipc: fix missing netlink admin gate and receive-path bugs | 1 | michael.bommarito@gmail.com | finished in 4h36m0s |
| 2026-05-20 16:53 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 3 | leitao@debian.org | finished in 4h11m0s |
| 2026-05-18 18:34 UTC | Fix race condition between TCP_REPAIR dump and data receive | 2 | sbrivio@redhat.com | finished in 4h24m0s |
| 2026-05-17 18:41 UTC | Fix race condition between TCP_REPAIR dump and data receive | 1 | sbrivio@redhat.com | finished in 4h10m0s |
| 2026-05-15 08:32 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 2 | leitao@debian.org | finished in 4h40m0s |
| 2026-05-13 12:34 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 1 | leitao@debian.org | finished in 4h38m0s |
| 2026-05-06 05:13 UTC | tipc: avoid sending zero-length stream messages | 1 | cassiogabrielcontato@gmail.com | finished in 4h29m0s |
| 2026-05-02 03:12 UTC | udp_tunnel: Speed up UDP tunnel device destruction (Part I) | 1 | kuniyu@google.com | finished in 4h11m0s |
| 2026-04-30 15:26 UTC | tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 3 | kai.aizen.dev@gmail.com | finished in 4h45m0s |
| 2026-04-21 12:45 UTC | tipc: fix double-free in tipc_buf_append() | 2 | lee@kernel.org | finished in 4h34m0s |
| 2026-04-20 13:05 UTC | tipc: fix double-free in tipc_buf_append() | 1 | lee@kernel.org | finished in 4h21m0s |
| 2026-04-17 07:53 UTC | tipc: crypto: require a NUL-terminated AEAD algorithm name | 1 | pengpeng@iscas.ac.cn | finished in 4h26m0s |
| 2026-04-15 06:12 UTC | [PATCH net] tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 1 | kai.aizen.dev@gmail.com |
finished
in 4h37m0s
[1 findings] |
| 2026-04-13 08:58 UTC | tipc: Ensure NUL-termination of remote algorithm name | 1 | phx0fer@gmail.com | finished in 4h24m0s |
| 2026-04-10 15:53 UTC | tipc: validate Gap ACK blocks in STATE message | 1 | n05ec@lzu.edu.cn | finished in 4h14m0s |
| 2026-04-07 15:07 UTC | net: use get_random_u{16,32,64}() where appropriate | 4 | devnexen@gmail.com | finished in 4h22m0s |
| 2026-04-05 15:48 UTC | net: use get_random_u{16,32,64}() where appropriate | 3 | devnexen@gmail.com | finished in 4h11m0s |
| 2026-04-05 04:54 UTC | tipc: validate Gap ACK blocks in STATE message | 1 | n05ec@lzu.edu.cn | finished in 3h59m0s |
| 2026-04-02 09:48 UTC | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 3 | security@1seal.org | finished in 54m0s |
| 2026-04-01 10:24 UTC | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 2 | security@1seal.org | finished in 1h2m0s |
| 2026-03-30 20:53 UTC | tipc: fix UAF in tipc_buf_append via tipc_msg_validate | 1 | nicholas@carlini.com | finished in 4h27m0s |
| 2026-03-30 15:05 UTC | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 1 | security@1seal.org | finished in 1h6m0s |
| 2026-03-30 13:03 UTC | tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 2 | kai.aizen.dev@gmail.com | skipped |
| 2026-03-10 17:07 UTC | tipc: fix divide-by-zero in tipc_sk_filter_connect() | 3 | mehulrao@gmail.com | finished in 4h1m0s |