| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-04-04 10:30 UTC | nfc: nci: fix OOB heap read in nci_core_init_rsp_packet_v1() | 1 | snowwlake@icloud.com | finished in 4h27m0s |
| 2026-03-31 08:00 UTC | net/sched: sch_netem: fix out-of-bounds access in packet corruption | 2 | kanolyc@gmail.com | finished in 4h25m0s |
| 2026-03-31 07:43 UTC | net/x25: Fix overflow and double free | 4 | ms@dev.tdt.de | finished in 4h6m0s |
| 2026-03-31 07:34 UTC | netfilter: ip6t_eui64: validate MAC header before using it | 1 | n05ec@lzu.edu.cn | finished in 2h38m0s |
| 2026-03-30 21:39 UTC | netfilter: ipset: drop logically empty buckets in mtype_del | 1 | yuantan098@gmail.com | finished in 4h20m0s |
| 2026-03-30 08:46 UTC | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 1 | n05ec@lzu.edu.cn | finished in 4h22m0s |
| 2026-03-30 06:36 UTC | net/x25: Fix overflow when accumulating packets | 3 | ms@dev.tdt.de | finished in 4h1m0s |
| 2026-03-30 04:02 UTC | rxrpc: fix reference count leak in rxrpc_server_keyring() | 1 | n05ec@lzu.edu.cn | finished in 4h42m0s |
| 2026-03-29 09:54 UTC | rxrpc: reject undecryptable rxkad response tickets | 1 | n05ec@lzu.edu.cn | finished in 1h54m0s |
| 2026-03-28 21:14 UTC | net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak | 1 | echelonh@gmail.com | finished in 4h7m0s |
| 2026-03-28 14:51 UTC | netfilter: xt_multiport: reject trailing range markers | 2 | n05ec@lzu.edu.cn | finished in 4h8m0s |
| 2026-03-27 08:49 UTC | net/x25: Fix overflow when accumulating packets | 2 | ms@dev.tdt.de | finished in 24m0s |
| 2026-03-27 08:30 UTC | net/x25: Fix overflow when accumulating packets | 1 | ms@dev.tdt.de | finished in 22m0s |
| 2026-03-26 20:43 UTC | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 3 | xmei5@asu.edu | finished in 4h27m0s |
| 2026-03-26 07:58 UTC | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 2 | xmei5@asu.edu | finished in 4h10m0s |
| 2026-03-26 07:55 UTC | net: bonding: fix use-after-free in bond_xmit_broadcast() | 3 | xmei5@asu.edu | finished in 4h15m0s |
| 2026-03-24 22:49 UTC | net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak | 1 | echelonh@gmail.com | finished in 4h24m0s |
| 2026-03-24 22:46 UTC | wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free | 1 | alex.popov@linux.com | finished in 4h24m0s |
| 2026-03-22 07:59 UTC | ethtool: don't touch the parent device of a net device being unregistered | 1 | alex.popov@linux.com | finished in 4h8m0s |
| 2026-03-19 07:32 UTC | nfnetlink_osf: validate individual option lengths in fingerprints | 1 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-03-18 23:23 UTC | net: bonding: fix use-after-free in bond_xmit_broadcast() | 1 | xmei5@asu.edu | finished in 4h13m0s |
| 2026-03-18 13:06 UTC | icmp: fix NULL pointer dereference in icmp_tag_validation() | 1 | bestswngs@gmail.com | finished in 4h15m0s |
| 2026-03-18 03:42 UTC | wifi: mac80211: fix NULL deref in mesh_matches_local() | 1 | xmei5@asu.edu | finished in 4h11m0s |
| 2026-03-15 15:54 UTC | net/sched: teql: Fix double-free in teql_master_xmit | 1 | jhs@mojatatu.com | finished in 4h15m0s |
| 2026-03-09 15:44 UTC | io_uring/register.c: fix NULL pointer dereference in io_register_resize_rings | 2 | naup96721@gmail.com | finished in 4h17m0s |
| 2026-03-09 06:27 UTC | io_uring/register.c: fix NULL pointer dereference in io_register_resize_rings | 1 | naup96721@gmail.com | finished in 56m0s |
| 2026-03-07 21:20 UTC | net/sched: Mark qdisc for deletion if graft cannot delete | 1 | jhs@mojatatu.com | finished in 4h11m0s |
| 2026-03-06 16:01 UTC | net: add xmit recursion limit to tunnel xmit functions | 4 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-03-05 18:18 UTC | net: add xmit recursion limit to tunnel xmit functions | 3 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-03-04 04:42 UTC | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 1 | bestswngs@gmail.com | finished in 1h47m0s |
| 2026-03-03 16:43 UTC | net: add xmit recursion limit to tunnel drivers | 2 | bestswngs@gmail.com | finished in 4h16m0s |
| 2026-03-03 02:29 UTC | net/core: add xmit recursion limit to qdisc transmit path | 1 | bestswngs@gmail.com | finished in 4h47m0s |
| 2026-01-31 13:21 UTC | perf/core: Fix refcount bug and potential UAF in perf_mmap | 1 | 3230100410@zju.edu.cn | finished in 3h56m0s |
| 2026-01-14 22:03 UTC | rxrpc: Fix recvmsg() unconditional requeue | 2 | dhowells@redhat.com | finished in 4h6m0s |
| 2026-01-14 16:02 UTC | net/sched: teql: Enforce hierarchy placement | 1 | jhs@mojatatu.com | finished in 4h3m0s |
| 2026-01-13 17:41 UTC | rxrpc: Fix recvmsg() unconditional requeue | 1 | dhowells@redhat.com | finished in 4h2m0s |
| 2026-01-06 03:41 UTC | net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset | 3 | xmei5@asu.edu | finished in 3h57m0s |
| 2026-01-02 01:31 UTC | net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset | 2 | xmei5@asu.edu | finished in 3h52m0s |
| 2025-12-23 20:35 UTC | net: sock: fix hardened usercopy panic in sock_recv_errqueue | 5 | bestswngs@gmail.com | finished in 3h54m0s |
| 2025-12-19 17:36 UTC | ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() | 1 | whrosenb@asu.edu | finished in 4h13m0s |
| 2025-12-16 08:44 UTC | net: skbuff: add usercopy region to skbuff_fclone_cache | 4 | bestswngs@gmail.com | finished in 3h51m0s |
| 2025-12-15 18:29 UTC | net: skbuff: add usercopy region to skbuff_fclone_cache | 3 | bestswngs@gmail.com |
finished
in 48m0s
[1 findings] |
| 2025-12-09 12:27 UTC | ext4: Fix KASAN use-after-free in ext4_find_extent | 1 | 3230100410@zju.edu.cn | skipped |
| 2025-12-05 01:48 UTC | net/sched: sch_qfq: Fix NULL deref when deactivating | 1 | xmei5@asu.edu | finished in 4h1m0s |
| 2025-12-01 15:17 UTC | ext4: Fix KASAN slab-use-after-free in ext4_find_extent due to corrupted eh_entries | 1 | haochengyu@zju.edu.cn | skipped |
| 2025-11-28 15:19 UTC | net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change | 1 | jhs@mojatatu.com | finished in 1h48m0s |
| 2025-11-28 00:14 UTC | net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop | 8 | xmei5@asu.edu | finished in 3h51m0s |
| 2025-11-26 19:45 UTC | net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop | 7 | xmei5@asu.edu | skipped |
| 2025-11-25 22:02 UTC | net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop | 6 | xmei5@asu.edu | finished in 3h52m0s |
| 2025-11-21 23:27 UTC | net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop | 5 | xmei5@asu.edu | finished in 3h58m0s |
| 2025-11-21 22:19 UTC | net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop | 4 | xmei5@asu.edu | finished in 3h52m0s |
| 2025-11-13 03:53 UTC | net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop | 3 | xmei5@asu.edu | finished in 3h48m0s |
| 2025-10-22 08:26 UTC | Fix stale IOTLB entries for kernel address space | 7 | baolu.lu@linux.intel.com | finished in 3h46m0s |
| 2025-10-14 13:04 UTC | Fix stale IOTLB entries for kernel address space | 6 | baolu.lu@linux.intel.com |
finished
in 3h50m0s
[3 findings] |
| 2025-09-19 05:39 UTC | Fix stale IOTLB entries for kernel address space | 5 | baolu.lu@linux.intel.com | finished in 3h39m0s |
| 2025-09-06 01:20 UTC | netrom: linearize and validate lengths in nr_rx_frame() | 4 | stanislav.fort@aisle.com | skipped |
| 2025-09-03 18:19 UTC | netrom: linearize and validate lengths in nr_rx_frame() | 3 | stanislav.fort@aisle.com | finished in 3h50m0s |
| 2025-09-02 11:26 UTC | netrom: fix out-of-bounds read in nr_rx_frame() | 2 | stanislav.fort@aisle.com | finished in 3h45m0s |
| 2025-08-25 18:03 UTC | netrom: validate header lengths in nr_rx_frame() using pskb_may_pull() | 1 | disclosure@aisle.com | skipped |
| 2025-08-19 08:28 UTC | net, hsr: reject HSR frame if skb can't hold tag | 1 | acsjakub@amazon.de | finished in 3h43m0s |
| 2025-07-10 10:09 UTC | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 3 | xmei5@asu.edu | finished in 3h36m0s |
| 2025-07-09 18:06 UTC | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 2 | xmei5@asu.edu | finished in 3h45m0s |
| 2025-07-05 22:39 UTC | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 1 | xmei5@asu.edu | finished in 4h19m0s |
| 2025-07-05 21:21 UTC | net/sched: sch_qfq: Fix null-deref in agg_dequeue | 3 | xmei5@asu.edu | finished in 4h37m0s |
| 2025-07-02 04:02 UTC | net/sched: sch_qfq: Fix null-deref in agg_dequeue | 1 | xmei5@asu.edu | finished in 3h41m0s |