| 2026-09-19 22:34 UTC |
net: slip: fix out-of-bounds access on short CSLIP packets |
1 |
benquike@gmail.com |
finished
in 2h21m0s
|
| 2026-09-19 22:34 UTC |
atm: br2684, pppoatm: add missing pskb_may_pull() and headroom checks |
1 |
benquike@gmail.com |
finished
in 2h55m0s
|
| 2026-09-19 22:34 UTC |
net/rds: fix incoming message refcount leak and header bounds check in rds_recv.c |
1 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-19 22:34 UTC |
can: j1939: fix transport session leak and socket bind/connect validation |
1 |
benquike@gmail.com |
finished
in 4h8m0s
|
| 2026-09-19 22:26 UTC |
loop: restore lo_backing_file, gfp_mask, and uevent_suppress on loop_configure() error |
1 |
benquike@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 22:26 UTC |
qnx4: validate xblk_num_xtnts and rootdir size in qnx4_block_map() and mount |
1 |
benquike@gmail.com |
finished
in 4h53m0s
|
| 2026-09-19 22:26 UTC |
omfs: fix divide-by-zero on mount and bitmap slab-out-of-bounds accesses |
1 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-19 22:26 UTC |
minix: validate s_imap_blocks and s_zmap_blocks in minix_check_superblock() |
1 |
benquike@gmail.com |
finished
in 4h36m0s
|
| 2026-09-19 22:26 UTC |
hpfs: fix extended attribute bounds checks and get_indirect_ea() overflow |
1 |
benquike@gmail.com |
finished
in 4h55m0s
|
| 2026-09-19 22:26 UTC |
romfs: reject non-advancing nextfh offsets in romfs_lookup() and romfs_readdir() |
1 |
benquike@gmail.com |
finished
in 4h8m0s
|
| 2026-09-19 22:26 UTC |
hfs: validate drAlBlkSiz and fs_ablocks in hfs_mdb_get() |
1 |
benquike@gmail.com |
finished
in 4h7m0s
|
| 2026-09-19 22:26 UTC |
hfsplus: fix xattr entrylength OOB read and NULL hidden_dir on R/W remount |
1 |
benquike@gmail.com |
finished
in 4h13m0s
|
| 2026-09-19 22:26 UTC |
jfs: validate dmap parameters in dbMount() and slot chains in jfs_dtree.c |
1 |
benquike@gmail.com |
finished
in 4h44m0s
|
| 2026-09-19 22:26 UTC |
adfs: validate zone map parameters and clamp dm_endbit in adfs_map_layout() |
1 |
benquike@gmail.com |
finished
in 4h36m0s
|
| 2026-09-19 22:26 UTC |
udf: validate vat20->lengthHeader and VAT inode size in udf_load_vat() |
1 |
benquike@gmail.com |
finished
in 4h0m0s
|
| 2026-09-19 22:25 UTC |
bfs: fix destination block offset in bfs_move_blocks() and check sb_getblk() |
1 |
benquike@gmail.com |
finished
in 4h6m0s
|
| 2026-09-19 22:25 UTC |
ufs: fix cylinder structures slab-OOB write, div-by-zero, and error cleanup |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 22:25 UTC |
qnx6: validate di_filelevels in qnx6_iget() and fix mount error handling |
1 |
benquike@gmail.com |
finished
in 4h55m0s
|
| 2026-09-19 22:25 UTC |
befs: check NULL return from befs_bt_get_key() and fix keysize in befs_btree_read() |
1 |
benquike@gmail.com |
finished
in 4h48m0s
|
| 2026-09-19 22:25 UTC |
isofs: reject short directory records in isofs_read_level3_size() |
1 |
benquike@gmail.com |
finished
in 3h58m0s
|
| 2026-09-19 22:17 UTC |
ipmr: validate IPv4 header length in reg_vif_xmit() and zero iphdr in ipmr_get_route() |
1 |
benquike@gmail.com |
finished
in 4h11m0s
|
| 2026-09-19 22:17 UTC |
af_unix: fix u->inq_len accounting in manage_oob() and unix_stream_read_skb() |
1 |
benquike@gmail.com |
finished
in 4h13m0s
[1 findings]
|
| 2026-09-19 22:17 UTC |
fs/namespace: reject bufsize < sizeof(struct statmount) in prepare_kstatmount() |
1 |
benquike@gmail.com |
finished
in 4h1m0s
|
| 2026-09-19 22:17 UTC |
io_uring: fix cloned compound buffer accounting and R_DISABLED restriction bypass |
1 |
benquike@gmail.com |
finished
in 4h10m0s
|
| 2026-09-19 22:13 UTC |
vfio/type1: avoid walking reserved-only mappings while unpinning |
2 |
samuelcrossley@gmail.com |
finished
in 1h26m0s
|
| 2026-09-19 21:52 UTC |
netlabel: cipso_v4: reject empty MLS level/cat lists and zero tail in cipso_v4_delopt() |
1 |
benquike@gmail.com |
finished
in 5h2m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nf_nat: fix unsigned range_size underflow for ICMP and GRE when max < min |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 21:52 UTC |
netfilter: nfnetlink_log: fix config error handling, SIT headroom OOB read, and nlmsg rollback |
1 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-19 21:52 UTC |
xfrm: validate protocol for XFRM_MODE_ROUTEOPTIMIZATION in verify_newsa_info() |
1 |
benquike@gmail.com |
finished
in 4h13m0s
|
| 2026-09-19 21:52 UTC |
fou: reject FOU_ENCAP_DIRECT with protocol 0 to prevent sk_buff leak |
1 |
benquike@gmail.com |
finished
in 4h15m0s
|
| 2026-09-19 21:52 UTC |
net/packet: zero-pad spkt_device and preserve sa.origlen across MSG_PEEK |
1 |
benquike@gmail.com |
finished
in 4h27m0s
|
| 2026-09-19 21:52 UTC |
tcp: drain out_of_order_queue and update SACKs in tcp_send_rcvq() |
1 |
benquike@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 21:52 UTC |
ipv6: tcp: restore ipv6_specific icsk_af_ops when reconnecting IPv6 after v4-mapped |
1 |
benquike@gmail.com |
finished
in 4h1m0s
|
| 2026-09-19 21:52 UTC |
ppp: fix bsd_decompress() OOB read and ppp_decompress_frame() headroom check |
1 |
benquike@gmail.com |
finished
in 4h21m0s
|
| 2026-09-19 21:39 UTC |
initramfs: Reduce hardlink hash allocation sizes |
1 |
blum@kernel.org |
skipped
|
| 2026-09-19 21:36 UTC |
net: lapb: fix uninitialized stack frame fields in lapb_decode() |
1 |
benquike@gmail.com |
finished
in 4h14m0s
|
| 2026-09-19 21:36 UTC |
6lowpan: add missing pskb_may_pull() checks in IPHC and NHC compression |
1 |
benquike@gmail.com |
finished
in 2h50m0s
|
| 2026-09-19 21:36 UTC |
mac802154: rx: fix beacon/mac_cmd skb leak and short skb_trim underflow |
1 |
benquike@gmail.com |
finished
in 4h14m0s
|
| 2026-09-19 21:36 UTC |
net: llc: clean up unaccepted child sockets in llc_ui_release() |
1 |
benquike@gmail.com |
finished
in 4h18m0s
|
| 2026-09-19 21:36 UTC |
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute |
1 |
benquike@gmail.com |
finished
in 4h8m0s
|
| 2026-09-19 21:36 UTC |
can: j1939: return 0 instead of user value in j1939_sk_setsockopt_flag() |
1 |
benquike@gmail.com |
finished
in 4h27m0s
|
| 2026-09-19 21:36 UTC |
net/tcp: check rnext_key for NULL in tcp_ao_prepare_reset() |
1 |
benquike@gmail.com |
finished
in 4h18m0s
|
| 2026-09-19 21:28 UTC |
tipc: fix TLV out-of-bounds read in tipc_nl_compat_net_set() and depth mask |
1 |
benquike@gmail.com |
finished
in 4h41m0s
|
| 2026-09-19 21:28 UTC |
ppp: pptp: fix out-of-bounds read on short payload_len in pptp_rcv_core() |
1 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-19 21:28 UTC |
ieee802154: socket: fix shared skb BUG_ON and double header subtraction in dgram_ioctl() |
1 |
benquike@gmail.com |
finished
in 4h13m0s
|
| 2026-09-19 21:28 UTC |
kcm: fix socket memory accounting leak on TX completion, error, and close |
1 |
benquike@gmail.com |
finished
in 4h7m0s
|
| 2026-09-19 21:28 UTC |
phonet: pep: fix out-of-bounds reads in pep_ctrlreq_error() and pep_sock_accept() |
1 |
benquike@gmail.com |
finished
in 4h40m0s
|
| 2026-09-19 21:28 UTC |
mctp: route: verify socket ownership in mctp_lookup_prealloc_tag() |
1 |
benquike@gmail.com |
finished
in 3h52m0s
|
| 2026-09-19 21:28 UTC |
net: qrtr: ns: validate msglen and sq_port in qrtr_ns_worker() and ctrl_cmd_bye() |
1 |
benquike@gmail.com |
finished
in 4h33m0s
|
| 2026-09-19 21:28 UTC |
net: qrtr: fix kernel stack infoleak in qrtr_getname() and qrtr_ioctl() |
1 |
benquike@gmail.com |
finished
in 3h55m0s
|
| 2026-09-19 21:28 UTC |
net: qrtr: use u32 for port in qrtr_port_assign() and __qrtr_bind() |
1 |
benquike@gmail.com |
finished
in 4h37m0s
|
| 2026-09-19 21:20 UTC |
SUNRPC: restrict integrity replies to authenticated payload |
1 |
jeremy.jean@oss.cyber.gouv.fr |
finished
in 4h13m0s
|
| 2026-09-19 21:06 UTC |
net/sched: ematch: check nla_put_nohdr() return value in tcf_em_tree_dump() |
1 |
benquike@gmail.com |
finished
in 4h12m0s
|
| 2026-09-19 21:06 UTC |
xfrm: reject sub-32-bit or unaligned alg_trunc_len in attach_auth_trunc() |
1 |
benquike@gmail.com |
finished
in 4h42m0s
|
| 2026-09-19 21:06 UTC |
ipv6: calipso: fix 8-bit hdrlen overflow and missing pskb_may_pull() in hop-by-hop options |
1 |
benquike@gmail.com |
finished
in 5h17m0s
|
| 2026-09-19 21:06 UTC |
ipv6: fix payload_len inflation in ip6_xmit() when IPV6_RTHDRDSTOPTS is set without IPV6_RTHDR |
1 |
benquike@gmail.com |
finished
in 4h25m0s
|
| 2026-09-19 21:06 UTC |
xfrm: input: fix 4-bit iph->ihl overflow and OOB read in xfrm4_remove_beet_encap() |
1 |
benquike@gmail.com |
finished
in 4h1m0s
|
| 2026-09-19 21:06 UTC |
ipv6: exthdrs: copy old IPv6 header before skb_mac_header_rebuild() in ipv6_rpl_srh_rcv() |
1 |
benquike@gmail.com |
finished
in 4h16m0s
|
| 2026-09-19 21:06 UTC |
filelock: prevent FL_LEASE and FL_DELEG flavor confusion in generic_add_lease() |
1 |
benquike@gmail.com |
finished
in 4h53m0s
|
| 2026-09-19 21:06 UTC |
ipc/mqueue: remove pending notification in mqueue_evict_inode() |
1 |
benquike@gmail.com |
finished
in 4h47m0s
|
| 2026-09-19 21:06 UTC |
mm/mremap: account unmoved locked pages in dontunmap_complete() |
1 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-19 20:48 UTC |
ext4: clear EXT4_STATE_MAY_INLINE_DATA in swap_inode_boot_loader() |
1 |
benquike@gmail.com |
finished
in 3h58m0s
|
| 2026-09-19 20:48 UTC |
fat: avoid freeing clusters on failed directory validation or read-only mounts |
1 |
benquike@gmail.com |
finished
in 4h3m0s
|
| 2026-09-19 20:48 UTC |
autofs: fix sbi->pipe file reference leak in autofs_kill_sb() |
1 |
benquike@gmail.com |
finished
in 3h58m0s
|
| 2026-09-19 20:48 UTC |
ipv6: sr: fix 16-byte kernel heap leak in seg6_genl_set_tunsrc() |
1 |
benquike@gmail.com |
finished
in 4h9m0s
|
| 2026-09-19 20:48 UTC |
ethtool: tsinfo: release net_device reference in ethnl_tsinfo_start() |
1 |
benquike@gmail.com |
finished
in 4h4m0s
|
| 2026-09-19 20:44 UTC |
wifi: rtl8xxxu: keep RX requests available across transient errors |
3 |
devnull@kernel.org |
finished
in 1h41m0s
|
| 2026-09-19 20:35 UTC |
bpf: reject unset network_header for SKF_NET_OFF in cBPF load helper |
1 |
benquike@gmail.com |
finished
in 4h0m0s
|
| 2026-09-19 20:35 UTC |
io_uring: fix CQ tail over-commit and CQE32 index corruption in io_cqe_cache_refill() |
1 |
benquike@gmail.com |
finished
in 4h6m0s
|
| 2026-09-19 20:20 UTC |
omfs: fix inverted check and use-after-brelse in omfs_dir_is_empty() |
1 |
benquike@gmail.com |
finished
in 1h43m0s
|
| 2026-09-19 19:52 UTC |
net: dsa: mv88e6xxx: continue without PTP if the TAI period is invalid |
1 |
devnull@kernel.org |
skipped
|
| 2026-09-19 19:22 UTC |
wifi: mm81x: check bytes_remaining before reading delimiter |
1 |
meatuni001@gmail.com |
finished
in 2h14m0s
|
| 2026-09-19 19:20 UTC |
block: z2ram: fix dangling gendisk pointer on add_disk() failure |
1 |
meatuni001@gmail.com |
skipped
|
| 2026-09-19 19:19 UTC |
net: spacemit: clear TX descriptor on fragment mapping failure |
1 |
meatuni001@gmail.com |
skipped
|
| 2026-09-19 19:15 UTC |
drm/panel: tdo-tl070wsh30: Remove panel on attach failure |
1 |
meatuni001@gmail.com |
skipped
|
| 2026-09-19 18:51 UTC |
test_sysctl: unregister tables before freeing bitmap |
1 |
lhfff@tju.edu.cn |
skipped
|
| 2026-09-19 18:10 UTC |
siox: fix master memory leak on registration failure |
1 |
lgs201920130244@gmail.com |
skipped
|
| 2026-09-19 18:09 UTC |
affs: fix out-of-bounds bitmap access on crafted images |
1 |
benquike@gmail.com |
finished
in 3h45m0s
|
| 2026-09-19 18:09 UTC |
drm/panel: tdo-tl070wsh30: Remove panel on attach failure |
1 |
meatuni001@gmail.com |
skipped
|
| 2026-09-19 17:59 UTC |
dca: fix provider device memory leak on domain allocation failure |
1 |
lgs201920130244@gmail.com |
skipped
|
| 2026-09-19 17:48 UTC |
scsi: elx: efct: fix Scsi_Host memory leaks on add failure |
1 |
lgs201920130244@gmail.com |
skipped
|
| 2026-09-19 17:42 UTC |
net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails |
1 |
coiaprant@gmail.com |
skipped
|
| 2026-09-19 17:41 UTC |
vboxsf: fix endless write loop and data corruption on short copy |
1 |
k.shiomi@techhowto.blog |
skipped
|
| 2026-09-19 17:34 UTC |
scsi: libfc: fix directory server rport memory leak |
1 |
lgs201920130244@gmail.com |
finished
in 3h6m0s
|
| 2026-09-19 17:20 UTC |
net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure |
1 |
coiaprant@gmail.com |
skipped
|
| 2026-09-19 17:17 UTC |
drm/i915: fix mock ring memory leak on context allocation failure |
1 |
lgs201920130244@gmail.com |
skipped
|
| 2026-09-19 17:14 UTC |
mm: restrict can_spin_trylock() to preemptible context on PREEMPT_RT |
1 |
kmehltretter@gmail.com |
finished
in 4h0m0s
|
| 2026-09-19 16:55 UTC |
drm/amdgpu: fix IP instance memory leak on kobject add failure |
1 |
lgs201920130244@gmail.com |
skipped
|
| 2026-09-19 16:42 UTC |
fsi: i2cr: fix memory leak on registration failure |
1 |
lgs201920130244@gmail.com |
skipped
|
| 2026-09-19 16:35 UTC |
fsi: master-hub: fix memory leak on registration failure |
1 |
lgs201920130244@gmail.com |
skipped
|
| 2026-09-19 16:31 UTC |
clk: rockchip: Unregister notifier on multi-PLL registration failure |
1 |
lhfff@tju.edu.cn |
skipped
|
| 2026-09-19 16:27 UTC |
media: v4l2-subdev: fix NULL deref in subdev_open() racing with unbind |
1 |
ngocthang2710.1999@gmail.com |
finished
in 4h17m0s
|
| 2026-09-19 15:41 UTC |
module: Validate the __version_ext_names section type |
3 |
fangxy@xiaopeng.com |
finished
in 3h48m0s
|
| 2026-09-19 13:58 UTC |
extcon: rtk-type-c: Stop IRQ before cancelling delayed work |
1 |
lhfff@tju.edu.cn |
skipped
|
| 2026-09-19 13:53 UTC |
memblock: Remove unused exact nid allocation API |
2 |
kaitao.cheng@linux.dev |
skipped
|
| 2026-09-19 13:17 UTC |
vhost: keep vring addresses stable while the backend is attached |
1 |
physicalmtea@gmail.com |
finished
in 4h30m0s
|
| 2026-09-19 12:54 UTC |
net: stmmac: remove software VLAN tag stripping |
8 |
peilinhe2020@163.com |
skipped
|
| 2026-09-19 12:51 UTC |
net: pcs: add basic support for RK3568 XPCS |
8 |
coiaprant@gmail.com |
skipped
|
| 2026-09-19 12:31 UTC |
vsock/vmci: make the cached_peer dgram decision race-safe |
2 |
bartlomiej.dmitruk@isec.pl |
finished
in 4h56m0s
|
| 2026-09-19 12:31 UTC |
vsock/hv_sock: don't finish a connection on a socket being released |
2 |
bartlomiej.dmitruk@isec.pl |
skipped
|