| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-15 22:26 UTC | KVM: x86: Restrict saved GPA writes to hardware write faults | 3 | kylebot@openai.com | - |
| 2026-09-14 16:58 UTC | netfilter: nf_conntrack: validate skb->_nfct and packet headers | 1 | fw@strlen.de | finished in 1h33m0s |
| 2026-09-08 16:41 UTC | mptcp: fix request migration ownership | 6 | weir@nebusec.ai | finished in 4h34m0s |
| 2026-09-04 03:35 UTC | net: Disallow buggy TCP transitions and IPV6_ADDRFORM. | 1 | kuniyu@google.com | finished in 4h28m0s |
| 2026-09-01 10:33 UTC | mptcp: fix request migration ownership | 5 | weir@nebusec.ai | finished in 3h57m0s |
| 2026-08-28 23:58 UTC | KVM: x86: Restrict saved GPA writes to hardware write faults | 2 | kylebot@openai.com | finished in 3h43m0s |
| 2026-08-28 19:30 UTC | KVM: x86: Restrict saved GPA writes to hardware write faults | 1 | kylebot@openai.com | finished in 3h47m0s |
| 2026-08-19 20:42 UTC | net/sched: reset conntrack after packet munging | 1 | fw@strlen.de | finished in 4h2m0s |
| 2026-08-17 08:58 UTC | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | 4 | david.lee@trailofbits.com | finished in 5h21m0s |
| 2026-08-17 08:49 UTC | batman-adv: reject unrepresentable multicast TVLV offsets | 3 | david.lee@trailofbits.com | finished in 4h24m0s |
| 2026-08-16 23:56 UTC | net/packet: defer vmalloc TX_RING free until skbs finish | 2 | kylebot@openai.com | finished in 3h42m0s |
| 2026-08-12 16:22 UTC | net: fix IP6GRE header length before capping tunnel headroom | 4 | zhilinz@nebusec.ai | finished in 4h11m0s |
| 2026-08-12 06:55 UTC | mptcp: fix request migration ownership | 4 | weir@nebusec.ai | finished in 4h40m0s |
| 2026-08-10 22:17 UTC | netfilter: nft_ct: validate timeout object protocol | 1 | kylebot@openai.com | finished in 5h0m0s |
| 2026-08-10 22:16 UTC | netfilter: nf_conntrack: validate template helper protocol | 1 | kylebot@openai.com | finished in 4h5m0s |
| 2026-08-10 22:13 UTC | ipvs: fix reversed sequence option serialization | 1 | kylebot@openai.com | finished in 4h57m0s |
| 2026-08-10 22:10 UTC | ipvs: reject invalid states in connection template sync records | 1 | kylebot@openai.com | finished in 4h31m0s |
| 2026-08-10 16:07 UTC | netfilter: nf_reject: initialize IPCB at inet ingress | 2 | david.lee@trailofbits.com | finished in 4h54m0s |
| 2026-08-10 15:47 UTC | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | 3 | david.lee@trailofbits.com | finished in 5h21m0s |
| 2026-08-10 15:27 UTC | KVM: pfncache: track all MMU notifier invalidations | 1 | david.lee@trailofbits.com | finished in 4h40m0s |
| 2026-08-10 14:57 UTC | batman-adv: reject unrepresentable multicast TVLV offsets | 2 | david.lee@trailofbits.com | finished in 5h3m0s |
| 2026-08-10 14:41 UTC | vxlan: keep the last remote linked during FDB flush | 3 | david.lee@trailofbits.com | finished in 4h40m0s |
| 2026-08-06 13:21 UTC | net: cap advertised IP tunnel headroom | 3 | zhilinz@nebusec.ai | finished in 5h13m0s |
| 2026-08-06 11:14 UTC | mptcp: fix request migration ownership | 3 | weir@nebusec.ai | finished in 4h0m0s |
| 2026-08-05 10:25 UTC | net/sched: sch_taprio: do not requeue a deactivated qdisc | 1 | david.lee@trailofbits.com | finished in 4h25m0s |
| 2026-08-05 10:25 UTC | net/sched: defer qdisc freeing after failed creation | 1 | david.lee@trailofbits.com | finished in 4h29m0s |
| 2026-08-04 09:51 UTC | netfilter: nf_reject_ipv4: initialize IPCB at inet ingress | 1 | david.lee@trailofbits.com | finished in 1h51m0s |
| 2026-08-04 09:50 UTC | mptcp: hold msk reference when cloning request sockets | 1 | david.lee@trailofbits.com | finished in 4h46m0s |
| 2026-08-04 09:46 UTC | ipv6: seg6: clear IPv4 control block in End.DT4 | 2 | david.lee@trailofbits.com | finished in 5h27m0s |
| 2026-08-04 06:10 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 2 | david.lee@trailofbits.com | finished in 1h24m0s |
| 2026-08-04 06:10 UTC | xfrm: fix compat ALLOCSPI request use-after-free | 2 | david.lee@trailofbits.com | finished in 4h17m0s |
| 2026-08-04 06:09 UTC | vxlan: keep the last remote linked during FDB flush | 2 | david.lee@trailofbits.com | finished in 3h14m0s |
| 2026-08-04 00:21 UTC | af_unix: Unlink scc_entry in unix_del_edge(). | 1 | kuniyu@google.com | finished in 4h7m0s |
| 2026-08-03 12:27 UTC | ipv6: prevent in6_dev_get() from resurrecting inet6_dev | 2 | david.lee@trailofbits.com | finished in 4h40m0s |
| 2026-07-31 14:13 UTC | vxlan: keep the last remote linked during FDB flush | 1 | david.lee@trailofbits.com | finished in 4h17m0s |
| 2026-07-31 14:08 UTC | ipv6: seg6: clear IPv4 control block in End.DT4 | 1 | david.lee@trailofbits.com | finished in 5h18m0s |
| 2026-07-31 14:08 UTC | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 1 | david.lee@trailofbits.com | finished in 4h50m0s |
| 2026-07-31 14:08 UTC | netfilter: nf_conntrack: prevent helper extension relocation | 1 | david.lee@trailofbits.com | finished in 4h7m0s |
| 2026-07-31 14:06 UTC | xfrm: fix compat ALLOCSPI request use-after-free | 1 | david.lee@trailofbits.com | finished in 4h34m0s |
| 2026-07-31 14:05 UTC | net/sched: sch_qfq: prevent aggregate self-replacement | 1 | david.lee@trailofbits.com | finished in 4h34m0s |
| 2026-07-31 14:05 UTC | net: inet: prevent lhash2 lookups from escaping into ehash | 1 | david.lee@trailofbits.com | finished in 4h30m0s |
| 2026-07-31 13:52 UTC | ipv6: prevent in6_dev_get() from resurrecting inet6_dev | 1 | david.lee@trailofbits.com | finished in 4h33m0s |
| 2026-07-31 12:05 UTC | sctp: hold shkey across socket migration | 1 | david.lee@trailofbits.com | finished in 4h1m0s |
| 2026-07-21 01:58 UTC | net/packet: defer vmalloc TX_RING free until skbs finish | 1 | kylebot@openai.com | finished in 57m0s |
| 2026-07-09 01:02 UTC | hfsplus: validate thread record before delete key rebuild | 5 | kylebot@openai.com | finished in 5h8m0s |
| 2026-07-07 23:41 UTC | hfsplus: validate thread record before delete key rebuild | 4 | kylebot@openai.com | finished in 5h27m0s |
| 2026-07-07 22:16 UTC | openvswitch: fix GSO userspace truncation underflow | 1 | kylebot@openai.com | finished in 5h35m0s |
| 2026-07-07 19:02 UTC | hfsplus: validate thread record before delete key rebuild | 3 | kylebot@openai.com | finished in 5h9m0s |
| 2026-07-01 06:35 UTC | hfsplus: validate thread record before delete key rebuild | 2 | kylebot@openai.com | finished in 4h38m0s |
| 2026-06-22 03:31 UTC | net: dst: block BH in ipip6_tunnel_xmit | 1 | yuan.gao@ucloud.cn | finished in 4h14m0s |
| 2026-06-18 03:26 UTC | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint | 3 | xmei5@asu.edu | finished in 4h23m0s |
| 2026-06-11 21:27 UTC | hfsplus: terminate xattr names before listing them | 1 | kylebot@openai.com | finished in 4h55m0s |
| 2026-06-11 21:26 UTC | hfsplus: validate thread record before delete key rebuild | 1 | kylebot@openai.com | finished in 4h36m0s |
| 2026-06-11 21:21 UTC | affs: validate blocks before freeing them | 1 | kylebot@openai.com | finished in 4h26m0s |
| 2026-06-10 10:18 UTC | net/sched: cls_flow: Dont expose folded kernel pointers | 1 | jhs@mojatatu.com | finished in 4h53m0s |
| 2026-06-09 04:13 UTC | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint | 2 | xmei5@asu.edu | finished in 5h17m0s |
| 2026-06-08 15:23 UTC | netfilter: add restrictions/validations for packet rewrite | 2 | fw@strlen.de | finished in 4h20m0s |
| 2026-06-07 02:18 UTC | net: guard timestamp cmsgs to real error queue skbs | 1 | kylebot@openai.com | finished in 11m0s |
| 2026-06-07 01:34 UTC | net: geneve: gate GRO completion hints on socket config | 1 | kylebot@openai.com | finished in 4h8m0s |
| 2026-06-05 07:34 UTC | ipv6: sit: reload inner IPv6 header after GSO offloads | 1 | kylebot@openai.com | finished in 4h12m0s |
| 2026-05-31 16:08 UTC | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 2 | jhs@mojatatu.com | finished in 4h2m0s |
| 2026-05-30 11:55 UTC | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 1 | jhs@mojatatu.com |
finished
in 4h10m0s
[2 findings] |
| 2026-05-26 22:08 UTC | net/sched: act_api: use mutex in tcf_idr_check_alloc | 1 | kylebot@openai.com | finished in 4h24m0s |