| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-04-26 14:43 UTC | rose: fix use-after-free and reference counting bugs | 1 | bernard.f6bvp@gmail.com | finished in 4h23m0s |
| 2026-04-21 05:48 UTC | ax25: fix OOB read after address header strip in ax25_rcv() | 5 | ashutoshdesai993@gmail.com | finished in 4h28m0s |
| 2026-04-21 05:46 UTC | ax25: fix OOB read after address header strip in ax25_rcv() | 5 | ashutoshdesai993@gmail.com | finished in 4h39m0s |
| 2026-04-20 01:57 UTC | net: rose: use pskb_may_pull() in CLEAR_REQUEST length check | 1 | ashutoshdesai993@gmail.com | finished in 2h0m0s |
| 2026-04-17 11:01 UTC | net/rose: hold listener socket during call request handling | 1 | n05ec@lzu.edu.cn | finished in 4h21m0s |
| 2026-04-17 06:54 UTC | ax25: fix OOB read after address header strip in ax25_rcv() | 4 | ashutoshdesai993@gmail.com | finished in 4h28m0s |
| 2026-04-15 06:36 UTC | ax25: fix OOB read after address header strip in ax25_rcv() | 3 | ashutoshdesai993@gmail.com | finished in 4h53m0s |
| 2026-04-15 05:57 UTC | rose: fix OOB reads on short CLEAR REQUEST frames | 3 | ashutoshdesai993@gmail.com | finished in 2h25m0s |
| 2026-04-14 06:04 UTC | rose: fix OOB reads on short CLEAR REQUEST frames | 2 | ashutoshdesai993@gmail.com | finished in 1h13m0s |
| 2026-04-13 20:49 UTC | net: ax25: fix integer overflow in ax25_rx_fragment() | 4 | mashiro.chen@mailbox.org | finished in 4h36m0s |
| 2026-04-13 17:42 UTC | rose: fix race between loopback timer and module removal | 1 | bernard.f6bvp@gmail.com | finished in 4h31m0s |
| 2026-04-13 11:14 UTC | net: ax25: fix integer overflow in ax25_rx_fragment() | 3 | mashiro.chen@mailbox.org | skipped |
| 2026-04-09 15:23 UTC | ax25: fix OOB read after address header strip in ax25_rcv(). | 2 | ashutoshdesai993@gmail.com | finished in 4h16m0s |
| 2026-04-09 15:19 UTC | rose: fix OOB reads on short CLEAR REQUEST frames. | 2 | ashutoshdesai993@gmail.com | finished in 2h26m0s |
| 2026-04-09 02:50 UTC | net: ax25: fix integer overflow in ax25_rx_fragment() | 2 | mashiro.chen@mailbox.org | finished in 4h12m0s |
| 2026-04-09 02:49 UTC | net: hamradio: fix missing input validation in bpqether and scc | 2 | mashiro.chen@mailbox.org | finished in 4h11m0s |
| 2026-04-09 01:32 UTC | rose: fix OOB read on short CLEAR REQUEST frames. | 1 | ashutoshdesai993@gmail.com | finished in 2h23m0s |
| 2026-04-09 01:22 UTC | ax25: fix OOB read after address header strip in ax25_rcv(). | 1 | ashutoshdesai993@gmail.com | finished in 4h29m0s |
| 2026-04-08 17:25 UTC | net: rose: reject truncated CLEAR_REQUEST frames in state machines | 1 | mashiro.chen@mailbox.org | finished in 2h59m0s |
| 2026-04-08 17:25 UTC | net: ax25: fix integer overflow in ax25_rx_fragment() | 1 | mashiro.chen@mailbox.org | finished in 4h17m0s |
| 2026-04-08 17:23 UTC | net: hamradio: fix missing input validation in bpqether and scc | 1 | mashiro.chen@mailbox.org | finished in 4h54m0s |
| 2026-04-07 17:31 UTC | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | 2 | mashiro.chen@mailbox.org | finished in 2h38m0s |
| 2026-04-07 17:15 UTC | net: fix three security bugs in NET/ROM and ROSE stacks | 1 | mashiro.chen@mailbox.org | finished in 4h35m0s |
| 2026-04-07 08:45 UTC | netrom: do some basic forms of validation on incoming frames | 1 | gregkh@linuxfoundation.org | finished in 4h26m0s |
| 2026-04-06 17:01 UTC | net: rose: defer rose_neigh cleanup to workqueue to fix UAF | 3 | mashiro.chen@mailbox.org | finished in 4h34m0s |
| 2026-04-06 11:49 UTC | net: netrom: fix lock order inversion in nr_add_node, nr_del_node and nr_dec_obs | 2 | mashiro.chen@mailbox.org | finished in 4h11m0s |
| 2026-04-06 11:06 UTC | net: netrom: fix lock order inversion in nr_add_node, nr_del_node and nr_dec_obs | 1 | mashiro.chen@mailbox.org |
finished
in 54m0s
[1 findings] |
| 2026-04-05 12:58 UTC | net: rose: stop timers before freeing neighbour in rose_neigh_put | 2 | mashiro.chen@mailbox.org | finished in 4h8m0s |
| 2026-04-04 10:03 UTC | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | 2 | mashiro.chen@mailbox.org | finished in 2h3m0s |
| 2026-04-03 20:44 UTC | net: rose: stop timers before freeing neighbour in rose_neigh_put | 1 | mashiro.chen@mailbox.org | finished in 4h49m0s |
| 2026-04-02 16:45 UTC | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | 1 | mashiro.chen@mailbox.org | finished in 2h9m0s |
| 2026-03-29 14:34 UTC | hamradio: mkiss: modernize and clean up mkiss driver | 1 | mashiro.chen@mailbox.org | finished in 1h53m0s |
| 2026-03-11 07:06 UTC | net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect | 2 | jiayuan.chen@linux.dev | finished in 4h6m0s |
| 2026-03-10 10:13 UTC | net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-01-29 08:09 UTC | net: ax25: remove plumbing for never-implemented DAMA Master support | 1 | enelsonmoore@gmail.com | finished in 4h6m0s |
| 2026-01-19 06:33 UTC | netrom: fix double-free in nr_route_frame() | 1 | aha310510@gmail.com | finished in 4h13m0s |
| 2026-01-17 06:39 UTC | rose: Fix use-after-free in rose_timer_expiry | 1 | kartikey406@gmail.com | finished in 3h52m0s |
| 2025-12-22 21:22 UTC | net: rose: fix invalid array index in rose_kill_by_device() | 1 | ritviktanksalkar@gmail.com | finished in 3h51m0s |
| 2025-12-17 12:16 UTC | sysctl: Remove unused ctl_table forward declarations | 2 | joel.granados@kernel.org | finished in 4h1m0s |
| 2025-12-15 15:25 UTC | sysctl: Remove unused ctl_table forward declarations | 1 | joel.granados@kernel.org | finished in 3h51m0s |
| 2025-12-04 09:09 UTC | netrom: fix deadlock and refcount leak in nr_rt_device_down | 2 | junjie.cao@intel.com | finished in 3h54m0s |
| 2025-11-29 03:58 UTC | netrom: Fix memory leak in nr_sendmsg() | 1 | wangliang74@huawei.com | finished in 3h48m0s |
| 2025-11-29 03:42 UTC | net: netrom: fix memory leak in nr_output() | 1 | kartikey406@gmail.com | skipped |
| 2025-11-27 08:41 UTC | netrom: fix possible deadlock between nr_rt_ioctl() and nr_rt_device_down() | 1 | junjie.cao@intel.com | finished in 3h58m0s |
| 2025-10-24 09:39 UTC | net: rose: Prevent the use of freed digipeat | 1 | lizhi.xu@windriver.com | finished in 3h50m0s |
| 2025-10-24 09:06 UTC | net: rose: Prevent the use of freed digipeat | 1 | lizhi.xu@windriver.com | finished in 4h8m0s |
| 2025-10-24 09:05 UTC | net: rose: Prevent the use of freed digipeat | 1 | lizhi.xu@windriver.com | finished in 4h7m0s |
| 2025-10-24 01:31 UTC | net: rose: Prevent the use of freed digipeat | 1 | lizhi.xu@windriver.com | finished in 3h46m0s |
| 2025-10-23 13:50 UTC | netrom: Preventing the use of abnormal neighbor | 1 | lizhi.xu@windriver.com | finished in 3h42m0s |
| 2025-10-21 08:35 UTC | netrom: Prevent race conditions between neighbor operations | 1 | lizhi.xu@windriver.com | finished in 3h51m0s |
| 2025-10-20 13:49 UTC | netrom: Prevent race conditions between multiple add route | 1 | lizhi.xu@windriver.com | skipped |
| 2025-10-20 13:34 UTC | netrom: Prevent race conditions between multiple add route | 1 | lizhi.xu@windriver.com | skipped |
| 2025-10-20 11:02 UTC | netrom: Prevent race conditions between multiple add route | 1 | lizhi.xu@windriver.com | finished in 3h42m0s |
| 2025-10-20 08:13 UTC | netrom: Prevent race conditions between multiple add route | 1 | lizhi.xu@windriver.com | finished in 3h42m0s |
| 2025-10-20 05:27 UTC | Documentation: networking: ax25: update the mailing list info. | 1 | rdunlap@infradead.org | finished in 38m0s |
| 2025-10-17 06:45 UTC | networking docs section headings cleanup | 1 | bagasdotme@gmail.com | finished in 53m0s |
| 2025-09-25 05:10 UTC | 6pack: drop redundant locking and refcounting | 2 | dqfext@gmail.com | finished in 1h32m0s |
| 2025-09-23 06:07 UTC | 6pack: drop redundant locking and refcounting | 1 | dqfext@gmail.com | finished in 1h23m0s |
| 2025-09-12 21:22 UTC | net/rose: Fix uninitialized values in rose_add_node | 1 | rodgepritesh@gmail.com | finished in 3h40m0s |
| 2025-09-09 15:38 UTC | [AX25] fix lack of /proc/net/ax25 labels header | 1 | bernard.pidoux@free.fr | skipped |
| 2025-09-06 01:20 UTC | netrom: linearize and validate lengths in nr_rx_frame() | 4 | stanislav.fort@aisle.com | skipped |
| 2025-09-03 18:19 UTC | netrom: linearize and validate lengths in nr_rx_frame() | 3 | stanislav.fort@aisle.com | finished in 3h50m0s |
| 2025-09-02 12:46 UTC | ax25: properly unshare skbs in ax25_kiss_rcv() | 1 | edumazet@google.com | finished in 3h27m0s |
| 2025-08-23 08:58 UTC | Introduce refcount_t for reference counting of rose_neigh | 2 | takamitz@amazon.co.jp | finished in 3h44m0s |
| 2025-08-20 17:47 UTC | net: rose: introduce refcount_t for reference counting of rose_neigh | 1 | takamitz@amazon.co.jp | finished in 3h52m0s |
| 2025-07-04 08:33 UTC | net/rose: Remove unnecessary if check in rose_dev_first() | 1 | thorsten.blum@linux.dev | finished in 3h38m0s |
| 2025-06-29 03:06 UTC | rose: fix dangling neighbour pointers in rose_rt_device_down() | 2 | enjuk@amazon.com | skipped |