| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-18 03:39 UTC | sctp: check return value of sctp_get_af_specific in sctp_process_init | 1 | ndaugoing@gmail.com | - |
| 2026-09-17 03:05 UTC | sctp: reject forged cookie peer_addr with unknown address family | 3 | hdthky0@gmail.com | - |
| 2026-09-16 08:09 UTC | sctp: don't re-register a removed transport as last_data_from | 1 | ljp1205831794@gmail.com | finished in 4h37m0s |
| 2026-09-15 21:29 UTC | sctp: reject forged cookie peer_addr with unknown address family | 2 | hdthky0@gmail.com | finished in 4h15m0s |
| 2026-09-15 09:50 UTC | sctp: avoid livelock while updating retransmit path | 3 | sunyiqixm@gmail.com | finished in 4h57m0s |
| 2026-09-14 13:49 UTC | net: introduce QUIC infrastructure and core subcomponents | 15 | lucien.xin@gmail.com | finished in 31m0s |
| 2026-09-13 11:36 UTC | sctp: reject forged cookie peer_addr with unknown address family | 1 | hdthky0@gmail.com | finished in 4h1m0s |
| 2026-09-11 08:59 UTC | sctp: keep the association alive across the sendmsg connect wait | 2 | juny24602@gmail.com | finished in 4h11m0s |
| 2026-09-09 23:31 UTC | neighbour: Small fixes for RTM_{GET,SET}NEIGHTBL. | 3 | kuniyu@google.com | finished in 4h1m0s |
| 2026-09-09 02:46 UTC | sctp: check asoc->base.dead before the RCV_SHUTDOWN break in sctp_wait_for_connect() | 1 | littleddfu@gmail.com | finished in 4h25m0s |
| 2026-09-08 21:12 UTC | neighbour: Small fixes for RTM_{GET,SET}NEIGHTBL. | 2 | kuniyu@google.com | finished in 4h16m0s |
| 2026-09-07 21:57 UTC | neighbour: Small fixes for RTM_{GET,SET}NEIGHTBL. | 1 | kuniyu@google.com | finished in 4h13m0s |
| 2026-09-04 16:55 UTC | ip_tunnel: reserve FOU/GUE headroom before encapsulation | 4 | nicoyip.dev@gmail.com | finished in 2h5m0s |
| 2026-09-02 02:52 UTC | sctp: avoid livelock while updating retransmit path | 2 | sunyiqixm@gmail.com | finished in 4h35m0s |
| 2026-09-01 15:37 UTC | net: Replace %pK output with 0 | 4 | bigeasy@linutronix.de | skipped |
| 2026-08-28 04:24 UTC | sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration | 3 | bsdhenrymartin@gmail.com | finished in 3h57m0s |
| 2026-08-27 21:32 UTC | sctp: validate chunk length in the inqueue parser | 2 | devnull@kernel.org | finished in 3h49m0s |
| 2026-08-27 07:50 UTC | sctp: avoid livelock while updating retransmit path | 1 | sunyiqixm@gmail.com | finished in 4h26m0s |
| 2026-08-27 01:01 UTC | sctp: validate chunk length in the inqueue parser | 1 | devnull@kernel.org | finished in 3h45m0s |
| 2026-08-26 19:49 UTC | sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START | 1 | lucien.xin@gmail.com | finished in 3h58m0s |
| 2026-08-25 08:29 UTC | sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration | 2 | bsdhenrymartin@gmail.com | finished in 4h3m0s |
| 2026-08-24 11:19 UTC | ip_tunnel: reserve FOU/GUE headroom before encapsulation | 3 | nicoyip.dev@gmail.com | finished in 3h57m0s |
| 2026-08-24 08:18 UTC | sctp: handle wrapped and duplicate RECONF responses | 4 | juny24602@gmail.com | finished in 4h26m0s |
| 2026-08-23 17:28 UTC | sctp: fix NULL deref on untransmitted RECONF completion | 3 | bestswngs@gmail.com | finished in 4h28m0s |
| 2026-08-23 13:05 UTC | sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration | 1 | bsdhenrymartin@gmail.com | finished in 3h45m0s |
| 2026-08-23 13:04 UTC | sctp: fix slab OOB read from oversized AUTH parameters in COOKIE-ECHO | 1 | bsdhenrymartin@gmail.com | finished in 3h47m0s |
| 2026-08-22 17:23 UTC | sctp: fix NULL deref on untransmitted RECONF completion | 2 | bestswngs@gmail.com | finished in 4h1m0s |
| 2026-08-21 09:14 UTC | sctp: handle wrapped and duplicate RECONF responses | 3 | juny24602@gmail.com | finished in 4h26m0s |
| 2026-08-20 16:22 UTC | sctp: fix NULL deref on untransmitted RECONF completion | 1 | bestswngs@gmail.com | finished in 4h26m0s |
| 2026-08-19 01:38 UTC | sctp: drop a chunk if its transport was removed | 2 | imv4bel@gmail.com | finished in 4h32m0s |
| 2026-08-18 09:22 UTC | sctp: fix possible out-of-bounds read in SCTP_PARAM_SUPPORTED_ADDRESS_TYPES | 1 | l1138897701@163.com | finished in 4h5m0s |
| 2026-08-14 23:43 UTC | sctp: drop a backlogged chunk if its transport was removed | 1 | imv4bel@gmail.com | finished in 4h6m0s |
| 2026-08-14 22:36 UTC | sctp: stop processing a packet once its association is deleted | 1 | imv4bel@gmail.com | finished in 5h4m0s |
| 2026-08-12 11:05 UTC | net: Replace %pK output with 0 | 3 | bigeasy@linutronix.de | skipped |
| 2026-08-11 15:28 UTC | sctp: clear new_transport when removing a peer | 1 | a0yami@mailbox.org | finished in 4h43m0s |
| 2026-08-10 13:01 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 4 | joel.granados@kernel.org | finished in 4h5m0s |
| 2026-08-09 04:38 UTC | sctp: fix use-after-free of cached ASCONF chunk | 3 | yangyx22@mails.tsinghua.edu.cn | finished in 3h57m0s |
| 2026-08-08 00:57 UTC | sctp: fix use-after-free of cached ASCONF chunk | 2 | yangyx22@mails.tsinghua.edu.cn | finished in 3h59m0s |
| 2026-08-07 06:43 UTC | sctp: auth: propagate HMAC calculation errors to callers | 4 | l1138897701@163.com | finished in 4h33m0s |
| 2026-08-06 17:16 UTC | sctp: fix use-after-free of cached ASCONF chunk | 1 | yangyx22@mails.tsinghua.edu.cn | finished in 4h31m0s |
| 2026-08-05 15:18 UTC | sctp: clear control chunk transport if it is being removed | 1 | lucien.xin@gmail.com | finished in 4h57m0s |
| 2026-08-04 20:00 UTC | sctp: validate cookie AUTH state before use | 1 | jeremy.jean@oss.cyber.gouv.fr | finished in 4h24m0s |
| 2026-08-04 11:37 UTC | sctp: re-point retained control chunks on association migration | 2 | juny24602@gmail.com | skipped |
| 2026-08-04 11:29 UTC | sctp: fix stream->outcnt underflow on duplicate RECONF responses | 2 | juny24602@gmail.com | finished in 4h31m0s |
| 2026-08-04 08:58 UTC | sctp: auth: propagate HMAC calculation errors to callers | 3 | l1138897701@163.com | finished in 2h40m0s |
| 2026-08-04 08:43 UTC | sctp: fix use-after-free in timeout event handling | 1 | l1138897701@163.com | finished in 5h28m0s |
| 2026-08-04 02:55 UTC | sctp: fix addip_serial increment on ASCONF_ACK allocation failure | 2 | l1138897701@163.com | finished in 4h3m0s |
| 2026-08-01 06:01 UTC | fou: ensure GUE headers have enough headroom | 1 | nicoyip.dev@gmail.com | finished in 4h41m0s |
| 2026-07-31 12:05 UTC | sctp: hold shkey across socket migration | 1 | david.lee@trailofbits.com | finished in 4h1m0s |
| 2026-07-30 11:05 UTC | sctp: re-point the GSO head_skb socket on association migration | 1 | juny24602@gmail.com | finished in 4h13m0s |
| 2026-07-30 11:02 UTC | sctp: fix stream->outcnt underflow on duplicate RECONF responses | 1 | juny24602@gmail.com | finished in 4h46m0s |
| 2026-07-30 09:05 UTC | sctp: re-point retained control chunks on association migration | 1 | juny24602@gmail.com | finished in 4h34m0s |
| 2026-07-30 09:01 UTC | sctp: bound the auth_chunks copy length in SCTP_LOCAL_AUTH_CHUNKS | 1 | juny24602@gmail.com | finished in 3h56m0s |
| 2026-07-30 02:33 UTC | sctp: diag: fix uninitialized stack leak via INET_DIAG_LOCALS/PEERS | 2 | omeux327@gmail.com | finished in 4h43m0s |
| 2026-07-29 16:00 UTC | sctp: keep chunk->transport in step with the list it is queued on | 3 | baul.lee@xbow.com | finished in 5h12m0s |
| 2026-07-29 14:53 UTC | sctp: validate Cookie Preservative parameter length | 1 | devnull@kernel.org | finished in 3h55m0s |
| 2026-07-29 12:49 UTC | sctp: keep chunk->transport in step with the list it is queued on | 2 | baul.lee@xbow.com | finished in 5h37m0s |
| 2026-07-27 23:17 UTC | sctp: validate Adaptation Indication parameter length | 1 | devnull@kernel.org | finished in 4h24m0s |
| 2026-07-26 06:04 UTC | sctp: fix transport UAF via the retransmit queue | 1 | baul.lee@xbow.com | finished in 5h31m0s |
| 2026-07-25 03:21 UTC | sctp: prevent peer transport count overflow | 1 | manizada@pm.me | finished in 5h24m0s |
| 2026-07-23 22:56 UTC | sctp: reject stale cookies with mismatched verification tags | 1 | yangyx22@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-23 07:18 UTC | sctp: fix addip_serial increment on ASCONF_ACK allocation failure | 1 | l1138897701@163.com | finished in 5h7m0s |
| 2026-07-23 06:11 UTC | sctp: auth: discard auth_chunk when skb_clone fails | 5 | l1138897701@163.com | finished in 5h4m0s |
| 2026-07-21 13:14 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 3 | 1753810072@qq.com | finished in 39m0s |
| 2026-07-21 02:25 UTC | sctp: socket: set *err = 0 on receive shutdown | 4 | l1138897701@163.com | finished in 5h12m0s |
| 2026-07-21 01:55 UTC | sctp: auth: break when skb_clone fails for auth_chunk | 4 | l1138897701@163.com | finished in 5h16m0s |
| 2026-07-20 14:40 UTC | net: Replace %pK output with 0 | 2 | bigeasy@linutronix.de | skipped |
| 2026-07-20 09:31 UTC | sctp: auth: do not set auth flag when skb_clone fails | 3 | l1138897701@163.com | finished in 4h53m0s |
| 2026-07-20 08:21 UTC | sctp: socket: refactor sctp_skb_recv_datagram to use ERR_PTR | 4 | l1138897701@163.com |
finished
in 4h58m0s
[1 findings] |
| 2026-07-17 14:33 UTC | net: ipv6: fix a potential use-after-free in ip4ip6_err | 1 | lirongqing@baidu.com | finished in 4h48m0s |
| 2026-07-17 08:20 UTC | sctp: socket: remove unused 'err' parameter from sctp_skb_recv_datagram | 3 | l1138897701@163.com | finished in 4h49m0s |
| 2026-07-16 11:39 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 2 | aigbot@tencent.com | finished in 4h40m0s |
| 2026-07-16 10:04 UTC | net: sctp: socket: Fix uninitialized error on socket shutdown | 2 | l1138897701@163.com | finished in 4h47m0s |
| 2026-07-16 09:12 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 1 | aigbot@tencent.com | finished in 4h36m0s |
| 2026-07-16 06:52 UTC | sctp: socket: Fix uninitialized error on socket shutdown | 1 | l1138897701@163.com | finished in 5h25m0s |
| 2026-07-15 20:27 UTC | net: introduce QUIC infrastructure and core subcomponents | 14 | lucien.xin@gmail.com | skipped |
| 2026-07-15 03:35 UTC | sctp: diag: fix uninitialized stack leak via INET_DIAG_LOCALS/PEERS | 1 | omeux327@gmail.com | finished in 6h4m0s |
| 2026-07-14 01:39 UTC | net: Use synchronous wakeups selectively | 1 | srikar@linux.ibm.com | finished in 5h6m0s |
| 2026-07-13 11:07 UTC | net: sysctl: Const Qualify sysctl ctl_table arrays | 3 | joel.granados@kernel.org | finished in 5h22m0s |
| 2026-07-13 03:20 UTC | sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid | 2 | eilaimemedsnaimel@gmail.com | finished in 4h44m0s |
| 2026-07-10 18:23 UTC | sctp: fix addr_wq_timer race in sctp_free_addr_wq() | 1 | lucien.xin@gmail.com | finished in 5h22m0s |
| 2026-07-10 18:12 UTC | sctp: fix auth_hmacs array size in struct sctp_cookie | 1 | lucien.xin@gmail.com | finished in 5h31m0s |
| 2026-07-10 13:42 UTC | BIG TCP for UDP tunnels | 9 | alice.kernel@fastmail.im | finished in 5h28m0s |
| 2026-07-10 01:07 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 2 | blbllhy@gmail.com | finished in 5h22m0s |
| 2026-07-09 21:28 UTC | sctp: replace cb->args[4] with a local variable in sctp_diag_dump() | 1 | lucien.xin@gmail.com | finished in 4h58m0s |
| 2026-07-07 20:32 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 1 | blbllhy@gmail.com | finished in 4h19m0s |
| 2026-07-07 06:46 UTC | ss: Don't re-print an SCTP listen socket as an assoc | 1 | jamie.bainbridge@gmail.com | skipped |
| 2026-07-06 18:19 UTC | BIG TCP for UDP tunnels | 8 | alice.kernel@fastmail.im | finished in 5h18m0s |
| 2026-07-06 07:38 UTC | net: Convert %pK back to %p | 1 | bigeasy@linutronix.de | skipped |
| 2026-07-05 00:30 UTC | sctp: validate the body of a STALE_COOKIE error before reading it | 1 | xmei5@asu.edu | finished in 4h32m0s |
| 2026-07-04 03:35 UTC | sctp: validate STALE_COOKIE cause length before reading staleness | 1 | bestswngs@gmail.com | finished in 4h14m0s |
| 2026-07-03 07:19 UTC | net: sctp: fix AUTH HMAC list overflow into auth_chunks | 1 | enjou1224z@gmail.com | finished in 4h49m0s |
| 2026-06-29 18:31 UTC | sctp: fix addr_wq_timer race in sctp_free_addr_wq() | 1 | lucien.xin@gmail.com | finished in 4h33m0s |
| 2026-06-28 08:39 UTC | sctp: avoid auth_enable sysctl UAF during netns teardown | 1 | n05ec@lzu.edu.cn | finished in 4h4m0s |
| 2026-06-25 14:23 UTC | sctp: fix SCTP_RESET_STREAMS stream list length limit | 2 | alhouseenyousef@gmail.com | finished in 4h8m0s |
| 2026-06-24 22:53 UTC | sctp: add INIT verification after cookie unpacking | 3 | lucien.xin@gmail.com | finished in 3h58m0s |
| 2026-06-24 12:22 UTC | sctp: fix SCTP_RESET_STREAMS stream list length limit | 1 | alhouseenyousef@gmail.com | finished in 4h7m0s |
| 2026-06-23 17:30 UTC | tipc: syzbot related fixes | 2 | edumazet@google.com | finished in 4h19m0s |
| 2026-06-22 17:10 UTC | tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() | 1 | edumazet@google.com | finished in 4h8m0s |
| 2026-06-22 10:02 UTC | sctp: use sctp_auth_shkey_release() in error path for consistency | 2 | vulab@iscas.ac.cn | finished in 1h16m0s |