| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-11 14:03 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 2 | cenzhang@linux.microsoft.com | finished in 3h43m0s |
| 2026-09-10 15:17 UTC | net: mana: never hand a non-page_pool buffer to XDP | 1 | devnull@kernel.org | skipped |
| 2026-09-10 14:25 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 3 | cenzhang@linux.microsoft.com | finished in 3h50m0s |
| 2026-09-10 13:50 UTC | can: kvaser_usb: validate command format before parsing in hydra receive path | 4 | cenzhang@linux.microsoft.com | finished in 2h22m0s |
| 2026-09-10 01:44 UTC | net: mana: Use the HWC destination queues reported by the hardware | 2 | mawasthi@linux.microsoft.com | skipped |
| 2026-09-09 22:24 UTC | net: mana: reconfigure by replacing the queue set | 5 | longli@microsoft.com | skipped |
| 2026-09-09 13:53 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 2 | cenzhang@linux.microsoft.com | finished in 4h9m0s |
| 2026-09-09 04:25 UTC | net: mana: fix reset work race with device removal | 3 | fanwu01@zju.edu.cn | skipped |
| 2026-09-08 03:51 UTC | net: mana: concurrent HWC requests and dynamic queue depth | 5 | longli@microsoft.com | skipped |
| 2026-09-08 03:28 UTC | net: mana: reconfigure by replacing the queue set | 4 | longli@microsoft.com | skipped |
| 2026-09-07 21:49 UTC | hv_netvsc: Fix leaking of send/receive buffers after GPADL teardown error | 2 | mhkelley58@gmail.com | skipped |
| 2026-09-05 02:36 UTC | net: mana: fix reset work race with device removal | 2 | fanwu01@zju.edu.cn | skipped |
| 2026-09-05 00:44 UTC | net: mana: do not discard an ethtool-configured RSS table on a queue rebuild | 1 | longli@microsoft.com | skipped |
| 2026-09-04 20:26 UTC | net: mana: restore the XDP program pointer when pre-allocation fails | 1 | longli@microsoft.com | skipped |
| 2026-09-03 18:41 UTC | net: mana: Use the HWC destination queues reported by the hardware | 1 | mawasthi@linux.microsoft.com | skipped |
| 2026-09-03 16:06 UTC | hv_netvsc: Fix leaking of send/receive buffers after GPADL teardown error | 1 | mhkelley58@gmail.com | skipped |
| 2026-09-02 19:37 UTC | Documentation: netvsc: Remove stale "not yet supported" XDP_REDIRECT note | 1 | chrismelnu@gmail.com | skipped |
| 2026-09-02 17:51 UTC | net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() | 3 | longli@microsoft.com | skipped |
| 2026-09-02 09:10 UTC | net: mana: remove unreachable dead code in mana_bpf() | 2 | falakreyaz@gmail.com | skipped |
| 2026-09-01 20:00 UTC | net: mana: concurrent HWC requests and dynamic queue depth | 4 | longli@microsoft.com | skipped |
| 2026-09-01 18:31 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 1 | cenzhang@linux.microsoft.com | finished in 4h21m0s |
| 2026-09-01 18:06 UTC | ufs: validate cylinder group free bitmap offset | 1 | cenzhang@linux.microsoft.com | finished in 1h37m0s |
| 2026-09-01 12:17 UTC | net: mana: Reserve extra CQ slot for the fence completion CQE | 1 | sahilchandna@linux.microsoft.com | skipped |
| 2026-09-01 01:44 UTC | net: mana: reconfigure by replacing the queue set | 3 | longli@microsoft.com | skipped |
| 2026-08-31 13:27 UTC | net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG | 1 | sashal@kernel.org | skipped |
| 2026-08-31 13:26 UTC | vsock: use sk_acceptq_is_full() helper in all transports | 1 | sashal@kernel.org | skipped |
| 2026-08-28 21:23 UTC | hv_netvsc: Advertise the SR-IOV capability for CoCo VMs | 1 | decui@microsoft.com | skipped |
| 2026-08-28 00:12 UTC | net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() | 2 | longli@microsoft.com | skipped |
| 2026-08-27 23:55 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 3 | blbllhy@gmail.com | finished in 3h52m0s |
| 2026-08-27 05:18 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 1 | blbllhy@gmail.com | finished in 3h55m0s |
| 2026-08-26 23:59 UTC | net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() | 1 | longli@microsoft.com | skipped |
| 2026-08-26 20:17 UTC | xfrm: hold net_device reference under RCU in bundle creation | 2 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-26 17:13 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 2 | blbllhy@gmail.com |
finished
in 1h6m0s
[1 findings] |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 05:24 UTC | gtp: fix sk_created race conditions | 2 | blbllhy@gmail.com | finished in 3h42m0s |
| 2026-08-24 07:09 UTC | net: mana: remove unreachable dead code in mana_bpf() | 1 | falakreyaz@gmail.com | skipped |
| 2026-08-22 04:54 UTC | amt: fix tunnel list corruption on device stop | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-21 18:37 UTC | net: mana: Cap MSI-X vectors to the device MSI-X table size | 1 | longli@microsoft.com | skipped |
| 2026-08-21 18:24 UTC | tcp: fix congestion control UAFs in do_tcp_getsockopt() | 1 | blbllhy@gmail.com | finished in 3h46m0s |
| 2026-08-20 20:02 UTC | xfrm: hold net_device reference under RCU in bundle creation | 1 | blbllhy@gmail.com | finished in 4h1m0s |
| 2026-08-20 02:07 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 2 | blbllhy@gmail.com | finished in 4h25m0s |
| 2026-08-20 01:06 UTC | netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-19 01:48 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 1 | blbllhy@gmail.com | finished in 4h20m0s |
| 2026-08-18 16:48 UTC | amt: do not store tunnel pointer in skb control block | 1 | blbllhy@gmail.com | finished in 4h32m0s |
| 2026-08-17 01:32 UTC | ipv6: avoid divide by zero in rt6_multipath_rebalance | 1 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-16 03:52 UTC | gtp: fix NULL pointer dereference in gtp0_handle_echo_resp() | 1 | blbllhy@gmail.com | finished in 4h23m0s |
| 2026-08-14 04:09 UTC | reboot: fix cad_pid use-after-free race | 4 | blbllhy@gmail.com | finished in 3h46m0s |
| 2026-08-13 21:53 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 4 | blbllhy@gmail.com | finished in 4h12m0s |
| 2026-08-13 17:42 UTC | net: mana: HW channel reliability and hardening fixes | 7 | longli@microsoft.com | skipped |
| 2026-08-13 05:04 UTC | net: mana: reconfigure by replacing the queue set | 2 | longli@microsoft.com | skipped |
| 2026-08-11 16:04 UTC | Drivers: hv: decrypt netvsc buffers on contiguous direct-map addresses | 4 | kameroncarr@linux.microsoft.com | finished in 1h49m0s |
| 2026-08-11 02:38 UTC | net: mana: HW channel reliability and hardening fixes | 6 | longli@microsoft.com | skipped |
| 2026-08-09 19:00 UTC | net: mana: HW channel reliability and hardening fixes | 5 | longli@microsoft.com | skipped |
| 2026-08-07 20:56 UTC | net: mana: Avoid DMA queue allocation failure under memory fragmentation | 1 | gargaditya@linux.microsoft.com | skipped |
| 2026-08-06 23:35 UTC | x86: Try to wrangle PV clocks vs. TSC | 6 | seanjc@google.com | finished in 3h54m0s |
| 2026-08-06 21:33 UTC | Drivers: hv: decrypt netvsc buffers on contiguous direct-map addresses | 3 | kameroncarr@linux.microsoft.com | finished in 2h2m0s |
| 2026-08-06 20:47 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 3 | blbllhy@gmail.com | finished in 4h9m0s |
| 2026-08-05 18:53 UTC | net: mana: Extend RX CQE coalescing up to 8 packets | 3 | haiyangz@linux.microsoft.com | skipped |
| 2026-08-05 14:38 UTC | net: mana: fix reset work race with device removal | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-08-05 14:19 UTC | net: mana: fix reset work race with device removal | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-08-04 07:15 UTC | locking/qspinlock: Add contended_release tracepoint | 1 | d@ilvokhin.com | finished in 1h57m0s |
| 2026-08-03 23:43 UTC | net: mana: HW channel reliability and hardening fixes | 3 | longli@microsoft.com | skipped |
| 2026-07-31 21:22 UTC | net: mana: Extend RX CQE coalescing up to 8 packets | 2 | haiyangz@linux.microsoft.com | skipped |
| 2026-07-30 23:33 UTC | Drivers: hv: decrypt netvsc buffers on contiguous direct-map addresses | 2 | kameroncarr@linux.microsoft.com |
finished
in 1h4m0s
[1 findings] |
| 2026-07-30 22:20 UTC | net/openvswitch: check Ethernet header length in key_extract() | 5 | blbllhy@gmail.com | finished in 5h32m0s |
| 2026-07-30 20:11 UTC | Remove support for Windows Server 2012/2012R2 & Win8/Win8.1 versions of Hyper-V | 1 | mhkelley58@gmail.com | finished in 1h24m0s |
| 2026-07-29 22:52 UTC | net: mana: Extend RX CQE coalescing up to 8 packets | 1 | haiyangz@linux.microsoft.com | skipped |
| 2026-07-29 20:06 UTC | macvlan: require init-userns CAP_NET_ADMIN to raise bc_queue_len | 2 | xmei5@asu.edu | finished in 4h17m0s |
| 2026-07-29 06:21 UTC | net: mana: add ethtool private flag for full-page RX buffers | 13 | dipayanroy@linux.microsoft.com | skipped |
| 2026-07-28 21:54 UTC | seg6: check lwtunnel state after nf hooks in seg6local | 2 | xmei5@asu.edu | finished in 4h35m0s |
| 2026-07-27 11:37 UTC | net: mana: Return error code from mana_create_rxq() | 2 | gargaditya@linux.microsoft.com | skipped |
| 2026-07-25 23:39 UTC | bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor | 2 | xmei5@asu.edu | finished in 6h40m0s |
| 2026-07-25 04:31 UTC | net/openvswitch: check Ethernet header length in key_extract() | 4 | blbllhy@gmail.com | finished in 3h23m0s |
| 2026-07-25 03:42 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 2 | blbllhy@gmail.com | finished in 5h10m0s |
| 2026-07-24 16:47 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 1 | blbllhy@gmail.com | finished in 5h10m0s |
| 2026-07-23 23:37 UTC | net/openvswitch: check Ethernet header length in key_extract() | 3 | blbllhy@gmail.com | finished in 3h54m0s |
| 2026-07-23 17:36 UTC | mm/hmm: Add mmap lock-drop support for userfaultfd-backed mappings | 11 | skinsburskii@gmail.com | skipped |
| 2026-07-23 04:49 UTC | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 2 | blbllhy@gmail.com | finished in 5h19m0s |
| 2026-07-23 04:23 UTC | net/openvswitch: check Ethernet header length before key_extract() | 2 | blbllhy@gmail.com | finished in 3h48m0s |
| 2026-07-22 22:38 UTC | netfilter: ipset: fix refcount race between list:set GC and swap | 1 | xmei5@asu.edu | finished in 5h45m0s |
| 2026-07-22 21:44 UTC | mm/hmm: Add mmap lock-drop support for userfaultfd-backed mappings | 10 | skinsburskii@gmail.com | skipped |
| 2026-07-22 04:13 UTC | xsk: reject undersized tx_metadata at runtime validation | 2 | blbllhy@gmail.com | finished in 5h37m0s |
| 2026-07-22 00:29 UTC | nexthop: take nh->lock for f6i_list walks in replace check and notify | 1 | xmei5@asu.edu | finished in 6h1m0s |
| 2026-07-21 23:43 UTC | net: mana: harden the HWC and add dynamic queue depth | 2 | longli@microsoft.com | finished in 3h20m0s |
| 2026-07-21 23:28 UTC | amt: linearize skb in amt_rcv() to fix use-after-free of cached headers | 1 | xmei5@asu.edu | finished in 5h20m0s |
| 2026-07-21 19:56 UTC | Drivers: hv: decrypt netvsc buffers on contiguous direct-map addresses | 1 | kameroncarr@linux.microsoft.com | finished in 2h58m0s |
| 2026-07-21 14:36 UTC | net/openvswitch: check Ethernet header length before key_extract() | 1 | blbllhy@gmail.com | finished in 2h58m0s |
| 2026-07-20 22:34 UTC | bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor | 1 | xmei5@asu.edu | finished in 6h4m0s |
| 2026-07-20 21:41 UTC | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | 1 | blbllhy@gmail.com | finished in 5h30m0s |
| 2026-07-20 20:44 UTC | seg6: fix NULL deref in input_action_end_dx{4,6}_finish() after nf hook | 1 | xmei5@asu.edu | finished in 5h39m0s |
| 2026-07-20 15:52 UTC | xsk: reject tx_metadata_len smaller than struct xsk_tx_metadata | 1 | blbllhy@gmail.com | finished in 5h26m0s |
| 2026-07-20 03:45 UTC | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 1 | blbllhy@gmail.com | finished in 5h15m0s |
| 2026-07-19 23:21 UTC | bonding: fix skb_under_panic in bond_ns_send() over stacked VLANs | 1 | xmei5@asu.edu | finished in 5h23m0s |
| 2026-07-19 22:15 UTC | netfilter: nft_payload: fix mask build for partial field offload | 1 | xmei5@asu.edu | finished in 5h1m0s |
| 2026-07-19 21:03 UTC | rds: tcp: unregister sysctl before tearing down listen socket | 2 | blbllhy@gmail.com | finished in 5h2m0s |
| 2026-07-18 18:34 UTC | rds: tcp: unregister sysctl before tearing down listen socket | 1 | blbllhy@gmail.com | finished in 4h31m0s |
| 2026-07-18 02:48 UTC | net: mana: Return error code from mana_create_rxq() | 1 | gargaditya@linux.microsoft.com | skipped |
| 2026-07-15 18:15 UTC | mm/hmm: Add mmap lock-drop support for userfaultfd-backed mappings | 9 | skinsburskii@gmail.com | finished in 6h14m0s |
| 2026-07-15 03:29 UTC | net: mana: harden the HWC and add dynamic queue depth | 1 | longli@microsoft.com | finished in 1h43m0s |
| 2026-07-14 04:15 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 5 | blbllhy@gmail.com | finished in 5h12m0s |