| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-29 13:09 UTC | tipc: make sure bc_rcvlink is not dereferenced with NULL value | 1 | markov.gi@npc-ksb.ru | finished in 5h1m0s |
| 2026-06-25 14:38 UTC | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 3 | sam@bynar.io | finished in 4h6m0s |
| 2026-06-24 13:56 UTC | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 2 | sam@bynar.io | finished in 4h4m0s |
| 2026-06-23 17:30 UTC | tipc: syzbot related fixes | 2 | edumazet@google.com | finished in 4h19m0s |
| 2026-06-23 13:54 UTC | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 1 | sam@bynar.io | finished in 4h34m0s |
| 2026-06-17 13:57 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 3 | bestswngs@gmail.com | finished in 4h46m0s |
| 2026-06-17 07:58 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 4 | doruk@0sec.ai | finished in 4h11m0s |
| 2026-06-16 17:53 UTC | tipc: free bearer discoverer via RCU to fix tipc_disc_rcv UAF | 2 | sam@bynar.io | finished in 4h41m0s |
| 2026-06-16 12:22 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 2 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-15 15:00 UTC | tipc: free bearer discoverer via RCU to fix tipc_disc_rcv UAF | 1 | sam@bynar.io | finished in 4h58m0s |
| 2026-06-15 11:46 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 3 | doruk@0sec.ai | finished in 4h42m0s |
| 2026-06-12 13:59 UTC | tipc: fix UAF in tipc_l2_send_msg() | 1 | edumazet@google.com | finished in 5h7m0s |
| 2026-06-11 13:41 UTC | tipc: restrict socket queue dumps in enqueue tracepoints | 1 | lixiasong1@huawei.com | finished in 4h59m0s |
| 2026-06-10 20:03 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 2 | doruk@0sec.ai | finished in 4h53m0s |
| 2026-06-10 15:33 UTC | tipc: fix use-after-free of discoverer in tipc_disc_rcv() | 1 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-10 13:00 UTC | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 1 | doruk@0sec.ai | finished in 4h25m0s |
| 2026-06-10 12:40 UTC | tipc: fix netlink gate and receive-path bugs | 4 | michael.bommarito@gmail.com | finished in 4h39m0s |
| 2026-06-08 12:22 UTC | tipc: fix netlink gate and receive-path bugs | 3 | michael.bommarito@gmail.com | finished in 4h17m0s |
| 2026-06-08 09:55 UTC | net/tipc/bearer: Use strscpy() to copy strings into arrays | 1 | david.laight.linux@gmail.com | finished in 4h37m0s |
| 2026-06-06 19:14 UTC | tipc: fix netlink gate and receive-path bugs | 2 | michael.bommarito@gmail.com | finished in 4h2m0s |
| 2026-06-04 18:38 UTC | tipc: Add SPDX id lines to source files | 1 | tim.bird@sony.com | finished in 4h15m0s |
| 2026-06-04 16:31 UTC | tipc: require admin privileges for TIPCv2 mutators | 1 | dominik.czarnota@trailofbits.com | finished in 5h17m0s |
| 2026-06-02 13:35 UTC | tipc: fix missing netlink admin gate and receive-path bugs | 1 | michael.bommarito@gmail.com | finished in 4h36m0s |
| 2026-05-20 16:53 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 3 | leitao@debian.org | finished in 4h11m0s |
| 2026-05-18 18:34 UTC | Fix race condition between TCP_REPAIR dump and data receive | 2 | sbrivio@redhat.com | finished in 4h24m0s |
| 2026-05-17 18:41 UTC | Fix race condition between TCP_REPAIR dump and data receive | 1 | sbrivio@redhat.com | finished in 4h10m0s |
| 2026-05-15 08:32 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 2 | leitao@debian.org | finished in 4h40m0s |
| 2026-05-13 12:34 UTC | net: convert atm/xdp/af_iucv/l2tp_ppp/rxrpc/tipc to getsockopt_iter | 1 | leitao@debian.org | finished in 4h38m0s |
| 2026-05-06 05:13 UTC | tipc: avoid sending zero-length stream messages | 1 | cassiogabrielcontato@gmail.com | finished in 4h29m0s |
| 2026-05-02 03:12 UTC | udp_tunnel: Speed up UDP tunnel device destruction (Part I) | 1 | kuniyu@google.com | finished in 4h11m0s |
| 2026-04-30 15:26 UTC | tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 3 | kai.aizen.dev@gmail.com | finished in 4h45m0s |
| 2026-04-21 12:45 UTC | tipc: fix double-free in tipc_buf_append() | 2 | lee@kernel.org | finished in 4h34m0s |
| 2026-04-20 13:05 UTC | tipc: fix double-free in tipc_buf_append() | 1 | lee@kernel.org | finished in 4h21m0s |
| 2026-04-17 07:53 UTC | tipc: crypto: require a NUL-terminated AEAD algorithm name | 1 | pengpeng@iscas.ac.cn | finished in 4h26m0s |
| 2026-04-15 06:12 UTC | [PATCH net] tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 1 | kai.aizen.dev@gmail.com |
finished
in 4h37m0s
[1 findings] |
| 2026-04-13 08:58 UTC | tipc: Ensure NUL-termination of remote algorithm name | 1 | phx0fer@gmail.com | finished in 4h24m0s |
| 2026-04-10 15:53 UTC | tipc: validate Gap ACK blocks in STATE message | 1 | n05ec@lzu.edu.cn | finished in 4h14m0s |
| 2026-04-07 15:07 UTC | net: use get_random_u{16,32,64}() where appropriate | 4 | devnexen@gmail.com | finished in 4h22m0s |
| 2026-04-05 15:48 UTC | net: use get_random_u{16,32,64}() where appropriate | 3 | devnexen@gmail.com | finished in 4h11m0s |
| 2026-04-05 04:54 UTC | tipc: validate Gap ACK blocks in STATE message | 1 | n05ec@lzu.edu.cn | finished in 3h59m0s |
| 2026-04-02 09:48 UTC | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 3 | security@1seal.org | finished in 54m0s |
| 2026-04-01 10:24 UTC | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 2 | security@1seal.org | finished in 1h2m0s |
| 2026-03-30 20:53 UTC | tipc: fix UAF in tipc_buf_append via tipc_msg_validate | 1 | nicholas@carlini.com | finished in 4h27m0s |
| 2026-03-30 15:05 UTC | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 1 | security@1seal.org | finished in 1h6m0s |
| 2026-03-30 13:03 UTC | tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 2 | kai.aizen.dev@gmail.com | skipped |
| 2026-03-10 17:07 UTC | tipc: fix divide-by-zero in tipc_sk_filter_connect() | 3 | mehulrao@gmail.com | finished in 4h1m0s |
| 2026-03-10 11:48 UTC | treewide: Use IS_ERR_OR_NULL over manual NULL check - refactor | 1 | phahn-oss@avm.de | finished in 4h4m0s |
| 2026-03-09 08:02 UTC | tcp: RFC 7323-compliant window retraction handling | 3 | devnull@kernel.org | finished in 51m0s |
| 2026-03-06 18:50 UTC | tipc: fix divide-by-zero in tipc_sk_filter_connect() | 2 | mehulrao@gmail.com | finished in 4h6m0s |
| 2026-03-05 21:53 UTC | tipc: validate conn_timeout to prevent divide-by-zero | 1 | mehulrao@gmail.com | finished in 4h1m0s |
| 2026-02-26 00:49 UTC | tcp: RFC 7323-compliant window retraction handling | 2 | devnull@kernel.org | finished in 3h59m0s |
| 2026-02-20 05:05 UTC | tipc: fix duplicate publication key in tipc_service_insert_publ() | 1 | tung.quang.nguyen@est.tech | finished in 4h11m0s |
| 2026-02-19 23:55 UTC | tcp: RFC 7323-compliant window retraction handling | 1 | devnull@kernel.org | finished in 4h6m0s |
| 2026-02-03 14:56 UTC | tipc: fix RCU dereference race in tipc_aead_users_dec() | 1 | git@danielhodges.dev | finished in 3h57m0s |
| 2026-01-31 18:01 UTC | tipc: use kfree_sensitive() for session key material | 1 | hodgesd@meta.com | finished in 54m0s |
| 2025-11-07 06:40 UTC | tipc: Fix use-after-free in tipc_mon_reinit_self(). | 2 | kuniyu@google.com | finished in 3h42m0s |
| 2025-11-06 05:32 UTC | tipc: Fix use-after-free in tipc_mon_reinit_self(). | 1 | kuniyu@google.com |
finished
in 3h49m0s
[1 findings] |
| 2025-10-01 10:57 UTC | net: doc: Fix typos in docs | 2 | bhanuseshukumar@gmail.com | finished in 37m0s |
| 2025-10-01 06:41 UTC | net: doc: Fix typos in docs | 1 | bhanuseshukumar@gmail.com | finished in 37m0s |
| 2025-09-26 07:41 UTC | tipc: adjust tipc_nodeid2string() to return string length | 4 | dmantipov@yandex.ru | finished in 3h42m0s |
| 2025-09-25 16:51 UTC | tipc: adjust tipc_nodeid2string() to check the length of the result | 3 | dmantipov@yandex.ru | finished in 3h44m0s |
| 2025-09-24 11:26 UTC | tipc: adjust tipc_nodeid2string() to return string length | 2 | dmantipov@yandex.ru | finished in 3h40m0s |
| 2025-09-23 12:31 UTC | net: tipc: adjust tipc_nodeid2string() to return string length | 1 | dmantipov@yandex.ru | finished in 3h37m0s |
| 2025-07-02 01:43 UTC | tipc: Fix use-after-free in tipc_conn_close(). | 1 | kuniyu@google.com | finished in 3h38m0s |