| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-08 12:22 UTC | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 3 | michael.bommarito@gmail.com | finished in 4h34m0s |
| 2026-06-08 12:22 UTC | tipc: fix netlink gate and receive-path bugs | 3 | michael.bommarito@gmail.com | finished in 4h17m0s |
| 2026-06-07 12:48 UTC | virtio-blk: clamp zone report to the report buffer capacity | 2 | michael.bommarito@gmail.com | finished in 1h40m0s |
| 2026-06-07 06:41 UTC | partitions: aix: bound the pp_count scan to the ppe array | 1 | hexlabsecurity@proton.me | finished in 1h50m0s |
| 2026-06-07 01:18 UTC | isofs: bound Rock Ridge symlink components to the SL record | 2 | hexlabsecurity@proton.me | finished in 4h3m0s |
| 2026-06-06 22:29 UTC | isofs: bound Rock Ridge symlink components to the SL record | 1 | hexlabsecurity@proton.me | finished in 4h23m0s |
| 2026-06-06 19:14 UTC | tipc: fix netlink gate and receive-path bugs | 2 | michael.bommarito@gmail.com | finished in 4h2m0s |
| 2026-06-06 18:38 UTC | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 2 | michael.bommarito@gmail.com | finished in 4h6m0s |
| 2026-06-06 17:07 UTC | partitions: aix: bound the lvd scan to one sector | 1 | michael.bommarito@gmail.com | finished in 1h41m0s |
| 2026-06-06 17:04 UTC | virtio-blk: clamp zone report to the report buffer capacity | 1 | michael.bommarito@gmail.com | finished in 1h52m0s |
| 2026-06-04 17:58 UTC | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 1 | michael.bommarito@gmail.com | skipped |
| 2026-06-04 11:46 UTC | rxrpc: Fix the ACK parser to extract the SACK table for parsing | 2 | dhowells@redhat.com | finished in 2h32m0s |
| 2026-06-02 13:35 UTC | tipc: fix missing netlink admin gate and receive-path bugs | 1 | michael.bommarito@gmail.com | finished in 4h36m0s |
| 2026-05-27 18:47 UTC | userfaultfd: verify VMA state across UFFDIO_COPY retry | 2 | rppt@kernel.org | finished in 4h40m0s |
| 2026-05-23 14:24 UTC | wifi: iwlwifi: mvm: handle SEC_UNKNOWN in non-AMPDU rx path | 1 | michael.bommarito@gmail.com | finished in 1h4m0s |
| 2026-05-23 02:34 UTC | l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname | 1 | michael.bommarito@gmail.com | finished in 4h16m0s |
| 2026-05-22 20:13 UTC | libbpf: harden parse_vma_segs() path parsing | 4 | michael.bommarito@gmail.com | finished in 1h48m0s |
| 2026-05-22 12:56 UTC | libbpf: harden parse_vma_segs() path parsing | 3 | michael.bommarito@gmail.com | finished in 1h24m0s |
| 2026-05-22 00:29 UTC | libbpf: harden parse_vma_segs() path parsing | 2 | michael.bommarito@gmail.com | finished in 1h16m0s |
| 2026-05-21 22:17 UTC | libbpf: bound /proc/<pid>/maps scansets in parse_vma_segs() | 1 | michael.bommarito@gmail.com | finished in 2h5m0s |
| 2026-05-21 00:13 UTC | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 3 | michael.bommarito@gmail.com | finished in 5h9m0s |
| 2026-05-21 00:05 UTC | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 3 | michael.bommarito@gmail.com | finished in 5h12m0s |
| 2026-05-20 15:41 UTC | octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify | 1 | michael.bommarito@gmail.com | finished in 2h1m0s |
| 2026-05-20 14:16 UTC | ieee802154: admin-gate legacy LLSEC dumps + un-deaden ADD/DEL | 1 | michael.bommarito@gmail.com | finished in 4h52m0s |
| 2026-05-20 13:50 UTC | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 2 | michael.bommarito@gmail.com | finished in 4h34m0s |
| 2026-05-19 11:04 UTC | ocfs2: harden inode validators against forged metadata | 2 | michael.bommarito@gmail.com | finished in 4h42m0s |
| 2026-05-19 09:51 UTC | fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} | 2 | michael.bommarito@gmail.com | finished in 4h34m0s |
| 2026-05-19 05:25 UTC | userfaultfd: snapshot VMA state across UFFDIO_COPY retry | 1 | rppt@kernel.org | finished in 4h6m0s |
| 2026-05-18 22:44 UTC | rxrpc: Fix the ACK parser to extract the SACK table for parsing | 1 | dhowells@redhat.com | finished in 2h5m0s |
| 2026-05-18 18:34 UTC | l2tp: use list_del_rcu in l2tp_session_unhash | 1 | michael.bommarito@gmail.com | finished in 4h23m0s |
| 2026-05-17 23:49 UTC | xfrm: validate IPv4 header length before output transforms | 1 | michael.bommarito@gmail.com | finished in 4h1m0s |
| 2026-05-17 23:41 UTC | ntfs3: cap RESTART_TABLE free-chain walker at rt->used | 1 | michael.bommarito@gmail.com | finished in 4h5m0s |
| 2026-05-17 21:30 UTC | io_uring: propagate array_index_nospec opcode into req->opcode | 2 | michael.bommarito@gmail.com | finished in 4h1m0s |
| 2026-05-17 15:56 UTC | net: ovpn: refuse TCP socket layering with an active ULP | 1 | michael.bommarito@gmail.com | finished in 1h26m0s |
| 2026-05-17 14:27 UTC | rxrpc: Fix the ACK parser to extract the SACK table for parsing | 1 | dhowells@redhat.com | finished in 2h19m0s |
| 2026-05-17 11:10 UTC | ocfs2: harden inode validators against forged metadata | 1 | michael.bommarito@gmail.com | finished in 4h14m0s |
| 2026-05-16 15:23 UTC | netfilter: disable payload mangling in userns | 1 | tpluszz77@gmail.com | finished in 4h1m0s |
| 2026-05-15 18:24 UTC | [pull request] Intel Wired LAN Driver Updates 2026-05-15 (ice, ixgbevf, igc, e1000e) | 1 | anthony.l.nguyen@intel.com | finished in 2h9m0s |
| 2026-05-15 16:34 UTC | fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} | 1 | michael.bommarito@gmail.com | finished in 4h41m0s |
| 2026-05-15 16:34 UTC | fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass | 1 | michael.bommarito@gmail.com | finished in 4h48m0s |
| 2026-05-15 16:33 UTC | fs/ntfs3: bound attr_off in UpdateResidentValue against data_off | 1 | michael.bommarito@gmail.com | finished in 4h42m0s |
| 2026-05-15 16:33 UTC | fs/ntfs3: bound DeleteIndexEntryAllocation memmove length | 1 | michael.bommarito@gmail.com | finished in 4h21m0s |
| 2026-05-15 15:45 UTC | xfrm: ah: use skb_to_full_sk in async output callbacks | 1 | michael.bommarito@gmail.com | finished in 4h27m0s |
| 2026-05-15 15:17 UTC | wifi: mac80211: negotiated TTLM sparse-map cursor | 1 | michael.bommarito@gmail.com | finished in 4h53m0s |
| 2026-05-15 14:58 UTC | io_uring: propagate array_index_nospec opcode into req->opcode | 1 | michael.bommarito@gmail.com | finished in 4h18m0s |
| 2026-05-15 14:23 UTC | udf: validate free block extents against the partition length | 1 | michael.bommarito@gmail.com | finished in 5h9m0s |
| 2026-05-15 12:10 UTC | wifi: iwlwifi: harden netdetect resume-path parsing against firmware-controlled inputs (mvm + mld) | 1 | michael.bommarito@gmail.com | finished in 2h2m0s |
| 2026-05-14 01:37 UTC | net: ifb: report ethtool stats over num_tx_queues | 2 | michael.bommarito@gmail.com | finished in 4h50m0s |
| 2026-05-14 00:54 UTC | mm/userfaultfd: fix UFFDIO_COPY retry private/shared VMA panic | 1 | michael.bommarito@gmail.com | finished in 4h58m0s |
| 2026-05-13 23:38 UTC | net: hsr: fix node-table UAF on device teardown | 1 | michael.bommarito@gmail.com | finished in 4h43m0s |
| 2026-05-13 18:09 UTC | rxrpc: Fix read+write past skb_headlen in soft-ACK parser | 1 | michael.bommarito@gmail.com | finished in 3h13m0s |
| 2026-05-12 20:51 UTC | ipv4: harden against ihl < 5 IP_HDRINCL packets | 1 | michael.bommarito@gmail.com | finished in 4h34m0s |
| 2026-05-11 14:34 UTC | Bluetooth: hci_sync: fix TOCTOU UAF in cmd_sync callbacks | 1 | michael.bommarito@gmail.com | finished in 4h41m0s |
| 2026-05-11 12:28 UTC | net: ifb: clamp ethtool stats loops to num_tx_queues | 1 | michael.bommarito@gmail.com | finished in 5h6m0s |
| 2026-04-23 21:28 UTC | netlink: clean up failed initial dump-start state | 2 | michael.bommarito@gmail.com |
finished
in 4h18m0s
[5 findings] |
| 2026-04-22 16:03 UTC | net/ncsi: harden packet parsing against malformed BMC replies | 1 | michael.bommarito@gmail.com | finished in 2h13m0s |
| 2026-04-22 15:58 UTC | exfat: fix potential use-after-free in exfat_find_dir_entry() | 1 | michael.bommarito@gmail.com | finished in 4h25m0s |
| 2026-04-22 00:06 UTC | wifi: mac80211: check ieee80211_rx_data_set_link return in pubsta MLO path | 1 | michael.bommarito@gmail.com | finished in 4h16m0s |
| 2026-04-21 22:45 UTC | wifi: nl80211: require admin perm on SET_PMK / DEL_PMK | 1 | michael.bommarito@gmail.com | finished in 4h30m0s |
| 2026-04-20 16:27 UTC | netlink: clean up failed initial dump-start state | 1 | michael.bommarito@gmail.com | finished in 4h46m0s |
| 2026-04-19 22:35 UTC | xfrm: ah: account for ESN high bits in async callbacks | 1 | michael.bommarito@gmail.com | finished in 4h13m0s |
| 2026-04-19 21:21 UTC | isofs: hardening for crafted CE and NFS-handle paths | 1 | michael.bommarito@gmail.com | finished in 4h6m0s |
| 2026-04-18 14:10 UTC | net/rds: zero per-item info buffer before handing it to visitors | 2 | michael.bommarito@gmail.com | finished in 4h8m0s |
| 2026-04-17 23:33 UTC | ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head | 1 | michael.bommarito@gmail.com | finished in 3h58m0s |
| 2026-04-17 22:57 UTC | ntfs3: validate split-point offset in indx_insert_into_buffer | 1 | michael.bommarito@gmail.com | finished in 3h56m0s |
| 2026-04-17 14:19 UTC | rds: zero per-item info buffer before handing it to visitors | 1 | michael.bommarito@gmail.com | finished in 4h28m0s |
| 2026-04-16 03:19 UTC | sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks | 1 | michael.bommarito@gmail.com | finished in 1h21m0s |
| 2026-04-13 21:12 UTC | udf: reject descriptors with oversized CRC length | 1 | michael.bommarito@gmail.com | finished in 4h18m0s |
| 2026-04-13 18:24 UTC | ixgbevf: fix use-after-free in VEPA multicast source pruning | 1 | michael.bommarito@gmail.com | finished in 1h23m0s |
| 2026-04-13 17:47 UTC | NFC: digital: bound SENSF response copy into nfc_target | 1 | michael.bommarito@gmail.com | finished in 2h11m0s |
| 2026-04-13 13:31 UTC | fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow | 1 | michael.bommarito@gmail.com | finished in 4h26m0s |