| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-05 15:18 UTC | sctp: clear control chunk transport if it is being removed | 1 | lucien.xin@gmail.com | finished in 4h57m0s |
| 2026-08-04 20:00 UTC | sctp: validate cookie AUTH state before use | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h24m0s |
| 2026-08-04 11:37 UTC | sctp: re-point retained control chunks on association migration | 2 | juny24602@gmail.com | skipped |
| 2026-08-04 11:29 UTC | sctp: fix stream->outcnt underflow on duplicate RECONF responses | 2 | juny24602@gmail.com | finished in 4h31m0s |
| 2026-08-04 08:58 UTC | sctp: auth: propagate HMAC calculation errors to callers | 3 | l1138897701@163.com | finished in 2h40m0s |
| 2026-08-04 08:43 UTC | sctp: fix use-after-free in timeout event handling | 1 | l1138897701@163.com | finished in 5h28m0s |
| 2026-08-04 02:55 UTC | sctp: fix addip_serial increment on ASCONF_ACK allocation failure | 2 | l1138897701@163.com | finished in 4h3m0s |
| 2026-07-31 12:05 UTC | sctp: hold shkey across socket migration | 1 | david.lee@trailofbits.com | finished in 4h1m0s |
| 2026-07-30 11:05 UTC | sctp: re-point the GSO head_skb socket on association migration | 1 | juny24602@gmail.com | finished in 4h13m0s |
| 2026-07-30 11:02 UTC | sctp: fix stream->outcnt underflow on duplicate RECONF responses | 1 | juny24602@gmail.com | finished in 4h46m0s |
| 2026-07-30 09:05 UTC | sctp: re-point retained control chunks on association migration | 1 | juny24602@gmail.com | finished in 4h34m0s |
| 2026-07-30 09:01 UTC | sctp: bound the auth_chunks copy length in SCTP_LOCAL_AUTH_CHUNKS | 1 | juny24602@gmail.com | finished in 3h56m0s |
| 2026-07-30 02:33 UTC | sctp: diag: fix uninitialized stack leak via INET_DIAG_LOCALS/PEERS | 2 | omeux327@gmail.com | finished in 4h43m0s |
| 2026-07-29 16:00 UTC | sctp: keep chunk->transport in step with the list it is queued on | 3 | baul.lee@xbow.com | finished in 5h12m0s |
| 2026-07-29 14:53 UTC | sctp: validate Cookie Preservative parameter length | 1 | devnull@kernel.org | finished in 3h55m0s |
| 2026-07-29 12:49 UTC | sctp: keep chunk->transport in step with the list it is queued on | 2 | baul.lee@xbow.com | finished in 5h37m0s |
| 2026-07-27 23:17 UTC | sctp: validate Adaptation Indication parameter length | 1 | devnull@kernel.org | finished in 4h24m0s |
| 2026-07-26 06:04 UTC | sctp: fix transport UAF via the retransmit queue | 1 | baul.lee@xbow.com | finished in 5h31m0s |
| 2026-07-25 03:21 UTC | sctp: prevent peer transport count overflow | 1 | manizada@pm.me | finished in 5h24m0s |
| 2026-07-23 22:56 UTC | sctp: reject stale cookies with mismatched verification tags | 1 | yangyx22@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-23 07:18 UTC | sctp: fix addip_serial increment on ASCONF_ACK allocation failure | 1 | l1138897701@163.com | finished in 5h7m0s |
| 2026-07-23 06:11 UTC | sctp: auth: discard auth_chunk when skb_clone fails | 5 | l1138897701@163.com | finished in 5h4m0s |
| 2026-07-21 13:14 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 3 | 1753810072@qq.com | finished in 39m0s |
| 2026-07-21 02:25 UTC | sctp: socket: set *err = 0 on receive shutdown | 4 | l1138897701@163.com | finished in 5h12m0s |
| 2026-07-21 01:55 UTC | sctp: auth: break when skb_clone fails for auth_chunk | 4 | l1138897701@163.com | finished in 5h16m0s |
| 2026-07-20 14:40 UTC | net: Replace %pK output with 0 | 2 | bigeasy@linutronix.de | skipped |
| 2026-07-20 09:31 UTC | sctp: auth: do not set auth flag when skb_clone fails | 3 | l1138897701@163.com | finished in 4h53m0s |
| 2026-07-20 08:21 UTC | sctp: socket: refactor sctp_skb_recv_datagram to use ERR_PTR | 4 | l1138897701@163.com |
finished
in 4h58m0s
[1 findings] |
| 2026-07-17 08:20 UTC | sctp: socket: remove unused 'err' parameter from sctp_skb_recv_datagram | 3 | l1138897701@163.com | finished in 4h49m0s |
| 2026-07-16 11:39 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 2 | aigbot@tencent.com | finished in 4h40m0s |
| 2026-07-16 10:04 UTC | net: sctp: socket: Fix uninitialized error on socket shutdown | 2 | l1138897701@163.com | finished in 4h47m0s |
| 2026-07-16 09:12 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 1 | aigbot@tencent.com | finished in 4h36m0s |
| 2026-07-16 06:52 UTC | sctp: socket: Fix uninitialized error on socket shutdown | 1 | l1138897701@163.com | finished in 5h25m0s |
| 2026-07-15 03:35 UTC | sctp: diag: fix uninitialized stack leak via INET_DIAG_LOCALS/PEERS | 1 | omeux327@gmail.com | finished in 6h4m0s |
| 2026-07-14 01:39 UTC | net: Use synchronous wakeups selectively | 1 | srikar@linux.ibm.com | finished in 5h6m0s |
| 2026-07-13 11:07 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 3 | joel.granados@kernel.org | finished in 5h22m0s |
| 2026-07-13 03:20 UTC | sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid | 2 | eilaimemedsnaimel@gmail.com | finished in 4h44m0s |
| 2026-07-10 18:23 UTC | sctp: fix addr_wq_timer race in sctp_free_addr_wq() | 1 | lucien.xin@gmail.com | finished in 5h22m0s |
| 2026-07-10 18:12 UTC | sctp: fix auth_hmacs array size in struct sctp_cookie | 1 | lucien.xin@gmail.com | finished in 5h31m0s |
| 2026-07-10 01:07 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 2 | blbllhy@gmail.com | finished in 5h22m0s |
| 2026-07-09 21:28 UTC | sctp: replace cb->args[4] with a local variable in sctp_diag_dump() | 1 | lucien.xin@gmail.com | finished in 4h58m0s |
| 2026-07-07 20:32 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 1 | blbllhy@gmail.com | finished in 4h19m0s |
| 2026-07-06 07:38 UTC | net: Convert %pK back to %p | 1 | bigeasy@linutronix.de | skipped |
| 2026-07-05 00:30 UTC | sctp: validate the body of a STALE_COOKIE error before reading it | 1 | xmei5@asu.edu | finished in 4h32m0s |
| 2026-07-04 03:35 UTC | sctp: validate STALE_COOKIE cause length before reading staleness | 1 | bestswngs@gmail.com | finished in 4h14m0s |
| 2026-07-03 07:19 UTC | net: sctp: fix AUTH HMAC list overflow into auth_chunks | 1 | enjou1224z@gmail.com | finished in 4h49m0s |
| 2026-06-29 18:31 UTC | sctp: fix addr_wq_timer race in sctp_free_addr_wq() | 1 | lucien.xin@gmail.com | finished in 4h33m0s |
| 2026-06-28 08:39 UTC | sctp: avoid auth_enable sysctl UAF during netns teardown | 1 | n05ec@lzu.edu.cn | finished in 4h4m0s |
| 2026-06-25 14:23 UTC | sctp: fix SCTP_RESET_STREAMS stream list length limit | 2 | alhouseenyousef@gmail.com | finished in 4h8m0s |
| 2026-06-24 22:53 UTC | sctp: add INIT verification after cookie unpacking | 3 | lucien.xin@gmail.com | finished in 3h58m0s |
| 2026-06-24 12:22 UTC | sctp: fix SCTP_RESET_STREAMS stream list length limit | 1 | alhouseenyousef@gmail.com | finished in 4h7m0s |
| 2026-06-22 10:02 UTC | sctp: use sctp_auth_shkey_release() in error path for consistency | 2 | vulab@iscas.ac.cn | finished in 1h16m0s |
| 2026-06-20 15:48 UTC | sctp: fix err_chunk memory leaks in INIT handling | 1 | lucien.xin@gmail.com | finished in 4h18m0s |
| 2026-06-20 15:09 UTC | sctp: validate INIT in COOKIE-ECHO when auth disabled | 2 | lucien.xin@gmail.com | finished in 4h2m0s |
| 2026-06-16 00:33 UTC | sctp: validate INIT in COOKIE-ECHO when auth disabled | 1 | lucien.xin@gmail.com | finished in 4h23m0s |
| 2026-06-15 19:36 UTC | sctp: hold socket lock when dumping endpoints in sctp_diag | 2 | lucien.xin@gmail.com | finished in 4h54m0s |
| 2026-06-13 23:37 UTC | sctp: correct CONFIG_SCTP_DBG_OBJCNT macro name in comment | 1 | enelsonmoore@gmail.com | finished in 1h18m0s |
| 2026-06-12 17:59 UTC | sctp: hold socket lock when dumping endpoints in sctp_diag | 1 | lucien.xin@gmail.com | finished in 4h13m0s |
| 2026-06-12 01:25 UTC | sctp: auth: fix inconsistent key release in sctp_auth_set_key error path | 1 | vulab@iscas.ac.cn | finished in 1h42m0s |
| 2026-06-09 22:14 UTC | sctp: validate embedded address parameter length | 1 | lucien.xin@gmail.com | finished in 4h59m0s |
| 2026-06-08 16:22 UTC | sctp: Unwind address notifier registration on failure | 1 | dbgh9129@gmail.com | finished in 4h27m0s |
| 2026-06-08 12:22 UTC | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 3 | michael.bommarito@gmail.com | finished in 4h34m0s |
| 2026-06-07 23:03 UTC | sctp: validate embedded INIT chunk and address list lengths in cookie | 1 | lucien.xin@gmail.com | finished in 4h2m0s |
| 2026-06-06 18:38 UTC | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 2 | michael.bommarito@gmail.com | finished in 4h6m0s |
| 2026-06-05 05:53 UTC | sctp: stream: fully roll back denied add-stream state | 2 | n05ec@lzu.edu.cn | finished in 4h6m0s |
| 2026-06-04 17:58 UTC | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 1 | michael.bommarito@gmail.com | skipped |
| 2026-06-03 18:11 UTC | sctp: purge outqueue on stale COOKIE-ECHO handling | 1 | lucien.xin@gmail.com | finished in 4h43m0s |
| 2026-06-03 10:19 UTC | sctp: stream: fully roll back denied add-stream state | 1 | n05ec@lzu.edu.cn | finished in 4h9m0s |
| 2026-06-02 01:06 UTC | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 1 | lucien.xin@gmail.com | finished in 4h32m0s |
| 2026-05-30 15:57 UTC | sctp: diag: reject stale associations in dump_one path | 1 | n05ec@lzu.edu.cn | finished in 4h7m0s |
| 2026-05-28 08:58 UTC | sctp: stream: clear current stream on stream teardown | 1 | n05ec@lzu.edu.cn | finished in 4h45m0s |
| 2026-05-28 07:51 UTC | sctp: stream: clear out_curr when freeing stream data | 1 | n05ec@lzu.edu.cn | finished in 4h57m0s |
| 2026-05-27 05:42 UTC | net: sctp: clear current outbound stream on stream teardown | 1 | n05ec@lzu.edu.cn | finished in 4h27m0s |
| 2026-05-27 05:28 UTC | sctp: stream: rebind out_curr when updating streams | 1 | n05ec@lzu.edu.cn | finished in 4h41m0s |
| 2026-05-27 03:24 UTC | sctp: fix race between sctp_wait_for_connect and peeloff | 1 | kipreyyy@gmail.com | finished in 4h18m0s |
| 2026-05-08 00:14 UTC | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 1 | joycathacker@gmail.com | finished in 4h14m0s |
| 2026-04-26 14:46 UTC | sctp: fix a vtag verification failure caused by stale INITs | 2 | lucien.xin@gmail.com | finished in 4h28m0s |
| 2026-04-17 21:09 UTC | sctp: fix sockets_allocated imbalance after sk_clone() | 1 | lucien.xin@gmail.com | finished in 4h15m0s |
| 2026-04-16 03:19 UTC | sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks | 1 | michael.bommarito@gmail.com | finished in 1h21m0s |
| 2026-04-12 18:15 UTC | sctp: disable BH before calling udp_tunnel_xmit_skb() | 1 | lucien.xin@gmail.com | finished in 4h24m0s |
| 2026-04-12 18:13 UTC | sctp: fix missing encap_port propagation for GSO fragments | 1 | lucien.xin@gmail.com | finished in 4h33m0s |
| 2026-04-10 18:59 UTC | sctp: fix a vtag verification failure caused by stale INITs | 1 | lucien.xin@gmail.com | finished in 4h18m0s |
| 2026-04-07 15:07 UTC | net: use get_random_u{16,32,64}() where appropriate | 4 | devnexen@gmail.com | finished in 4h22m0s |
| 2026-04-05 15:48 UTC | net: use get_random_u{16,32,64}() where appropriate | 3 | devnexen@gmail.com | finished in 4h11m0s |
| 2026-03-10 11:48 UTC | treewide: Use IS_ERR_OR_NULL over manual NULL check - refactor | 1 | phahn-oss@avm.de | finished in 4h4m0s |
| 2026-01-13 17:10 UTC | sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT | 1 | lucien.xin@gmail.com | finished in 3h57m0s |
| 2025-11-13 11:23 UTC | sctp: Remove unused declaration sctp_auth_init_hmacs() | 1 | yuehaibing@huawei.com | finished in 52m0s |
| 2025-11-06 22:34 UTC | sctp: Don't inherit do_auto_asconf in sctp_clone_sock(). | 1 | kuniyu@google.com | finished in 3h43m0s |
| 2025-11-03 02:36 UTC | sctp: make sctp_transport_init() void | 2 | hehuiwen@kylinos.cn | finished in 3h47m0s |
| 2025-11-01 16:36 UTC | sctp: make sctp_transport_init() void | 1 | hehuiwen@kylinos.cn | finished in 3h43m0s |
| 2025-10-28 16:12 UTC | Fix SCTP diag locking issues | 3 | stefan.wiehler@nokia.com | finished in 3h53m0s |
| 2025-10-27 10:25 UTC | sctp: Hold sock lock while iterating over address list | 2 | stefan.wiehler@nokia.com | finished in 3h41m0s |
| 2025-10-27 10:13 UTC | sctp: Prevent TOCTOU out-of-bounds write | 2 | stefan.wiehler@nokia.com | finished in 3h48m0s |
| 2025-10-27 08:50 UTC | sctp: Hold sock lock while iterating over address list | 1 | stefan.wiehler@nokia.com | finished in 3h47m0s |
| 2025-10-27 08:48 UTC | sctp: Prevent TOCTOU out-of-bounds write | 1 | stefan.wiehler@nokia.com | finished in 3h45m0s |
| 2025-10-26 16:33 UTC | net: sctp: fix KMSAN uninit-value in sctp_inq_pop | 3 | vnranganath.20@gmail.com | finished in 3h41m0s |
| 2025-10-25 07:40 UTC | sctp: Constify struct sctp_sched_ops | 1 | christophe.jaillet@wanadoo.fr | finished in 41m0s |
| 2025-10-24 11:44 UTC | net: sctp: fix KMSAN uninit-value in sctp_inq_pop | 2 | vnranganath.20@gmail.com | finished in 3h59m0s |
| 2025-10-23 23:16 UTC | sctp: Avoid redundant initialisation in sctp_accept() and sctp_do_peeloff(). | 3 | kuniyu@google.com | finished in 3h38m0s |
| 2025-10-23 19:18 UTC | sctp: Hold RCU read lock while iterating over address list | 1 | stefan.wiehler@nokia.com | finished in 3h50m0s |