| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-20 17:07 UTC | net/smc: validate peer CDC cursor against RMBE size before accepting it | 1 | security@auditcode.ai | finished in 3h13m0s |
| 2026-07-20 16:04 UTC | vxlan: mdb: Fix source list corruption on a failed replace | 1 | jamestiotio@gmail.com | finished in 5h27m0s |
| 2026-07-20 14:41 UTC | pull request: fixes for ovpn 2026-07-20 | 1 | antonio@openvpn.net | finished in 2h56m0s |
| 2026-07-20 14:05 UTC | veth: convert frag_list skbs before running XDP | 2 | matt@readmodwrite.com | finished in 5h30m0s |
| 2026-07-20 13:51 UTC | gre: fix ERSPAN o_flags race/corruption in xmit and fill_info | 2 | edumazet@google.com | finished in 5h14m0s |
| 2026-07-20 13:36 UTC | block/blk-stat: fix use-after-free on callback timer teardown | 1 | cui.tao@linux.dev | finished in 2h5m0s |
| 2026-07-20 12:36 UTC | binfmt_misc: set have_execfd only once the interpreter is opened | 1 | brauner@kernel.org | finished in 5h30m0s |
| 2026-07-20 11:14 UTC | md: do overflow check for sb->bblog_shift in super_1_load() | 1 | colyli@fygo.io | finished in 4h30m0s |
| 2026-07-20 09:47 UTC | mm/damon/reclaim: fix typo in damon_reclaim_timer_fn() | 1 | aethernet65535@gmail.com | skipped |
| 2026-07-20 09:33 UTC | binfmt_misc: transparent interpreters and PT_INTERP loader substitution | 1 | brauner@kernel.org | skipped |
| 2026-07-20 09:27 UTC | x86/mm/pat: allocate split page tables as kernel page tables | 1 | ljs@kernel.org | finished in 4h40m0s |
| 2026-07-20 08:53 UTC | bpf: Disable preemption in stack map code | 1 | jolsa@kernel.org | finished in 6h4m0s |
| 2026-07-20 03:23 UTC | scsi: bsg: fix io_uring passthrough issues | 1 | yangxiuwei@kylinos.cn | finished in 2h45m0s |
| 2026-07-19 20:18 UTC | KVM: x86/mmu: Skip rmap aging when the rmap lock was elided | 1 | devnull@kernel.org | finished in 4h55m0s |
| 2026-07-19 17:50 UTC | netdevsim: tc: serialize access to nsim_block_cb_list | 1 | bestswngs@gmail.com | finished in 4h55m0s |
| 2026-07-19 16:16 UTC | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() | 1 | nicoyip.dev@gmail.com | finished in 4h46m0s |
| 2026-07-19 16:11 UTC | mm/damon/ops-common: use nr_accesses moving sum for quota score | 1 | sj@kernel.org | finished in 4h45m0s |
| 2026-07-19 15:22 UTC | bpf, sockmap: Fix sk_redir use-after-free in send verdict | 1 | nicoyip.dev@gmail.com | finished in 4h36m0s |
| 2026-07-19 14:57 UTC | net: pktgen: fix proc entry use-after-free | 1 | nicoyip.dev@gmail.com | finished in 4h39m0s |
| 2026-07-19 13:45 UTC | ublk: wait on ublk_dev_ready() instead of ub->completion | 1 | tom.leiming@gmail.com | finished in 2h54m0s |
| 2026-07-19 05:56 UTC | fscrypt: Avoid dynamic allocation in fscrypt_get_devices() | 1 | ebiggers@kernel.org | finished in 4h28m0s |
| 2026-07-19 03:31 UTC | fscrypt: Add missing superblock check in find_or_insert_direct_key() | 1 | ebiggers@kernel.org | finished in 4h26m0s |
| 2026-07-18 19:03 UTC | ufs: use u64 for directory size in ufs_last_byte | 1 | fadouse@pm.me | finished in 2h26m0s |
| 2026-07-18 18:01 UTC | mm/damon/ops-common: use nr_accesses moving sum for quota score | 1 | sj@kernel.org | finished in 4h59m0s |
| 2026-07-18 16:50 UTC | KVM: x86/mmu: Fix use-after-free on vendor module reload | 3 | devnull@kernel.org | finished in 4h53m0s |
| 2026-07-18 16:37 UTC | mm/damon/core: handle region split failure in apply_min_nr_regions() | 1 | sj@kernel.org | finished in 5h36m0s |
| 2026-07-18 14:51 UTC | KVM: x86/mmu: Fix double-free of mmu_page_header_cache on vendor module reload | 2 | phil@phil.gs | finished in 15m0s |
| 2026-07-18 02:43 UTC | wifi: brcmfmac: fix bus_reset work lifetime and scratch-buffer DMA double-free | 2 | fanwu01@zju.edu.cn | finished in 1h25m0s |
| 2026-07-18 00:43 UTC | mm/damon/core: handle region split failure in apply_min_nr_regions() | 1 | sj@kernel.org | finished in 5h13m0s |
| 2026-07-18 00:14 UTC | mm/damon: fix uninitialized DAMOS field and kunit exec expectation bugs | 1 | sj@kernel.org | finished in 4h51m0s |
| 2026-07-17 19:44 UTC | net: flow_offload: clean up indirect flow block on bind failure | 1 | shuangpeng.kernel@gmail.com | finished in 5h27m0s |
| 2026-07-17 18:53 UTC | [pull request] Intel Wired LAN Driver Updates 2026-07-17 (ice, idpf, iavf) | 1 | anthony.l.nguyen@intel.com | skipped |
| 2026-07-17 17:30 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 5 | ljs@kernel.org | finished in 5h27m0s |
| 2026-07-17 15:16 UTC | usbnet: cap max_mtu for drivers without bind callback | 1 | lvivier@redhat.com | finished in 2h59m0s |
| 2026-07-17 14:26 UTC | block: partitions: of: Fix NULL dereference on partition without reg | 1 | loic.poulain@oss.qualcomm.com | finished in 4h57m0s |
| 2026-07-17 14:22 UTC | vhost-scsi: Prevent OOM from invalid protection SGL count | 1 | physicalmtea@gmail.com | finished in 2h49m0s |
| 2026-07-17 10:58 UTC | mac802154: hold an interface reference across the scan worker | 2 | security@auditcode.ai | finished in 5h20m0s |
| 2026-07-17 10:51 UTC | fs/ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() | 2 | alexandro.calo@nozominetworks.com | finished in 3h15m0s |
| 2026-07-17 09:22 UTC | igc: fix netdev not re-attached after resume if interface is down | 1 | pd-lkml@3b.pm | finished in 3h12m0s |
| 2026-07-17 08:14 UTC | tcp: validate RST sequence in SYN-RECEIVED | 1 | yangyx22@mails.tsinghua.edu.cn | finished in 4h46m0s |
| 2026-07-17 07:43 UTC | net: pcs: xpcs: fix SGMII state reading | 1 | coiaprant@gmail.com | finished in 2h51m0s |
| 2026-07-17 07:41 UTC | ipv4: reject impossible oversized fragments at queue time | 1 | yangyx22@mails.tsinghua.edu.cn | finished in 4h47m0s |
| 2026-07-17 06:05 UTC | KVM: nVMX: Only update last_vpid on a successful nested VM-Enter | 1 | yosry@kernel.org | finished in 5h22m0s |
| 2026-07-17 02:56 UTC | wifi: ath12k: convert scan timeout to wiphy delayed work | 3 | runyu.xiao@seu.edu.cn | skipped |
| 2026-07-17 00:30 UTC | mm/damon: fix uninitialized DAMOS field and kunit exec expectation bugs | 1 | sj@kernel.org | finished in 4h49m0s |
| 2026-07-17 00:22 UTC | virtio_balloon: fix Use-After-Free bugs during PM freeze | 2 | linkl@google.com | finished in 4h51m0s |
| 2026-07-16 21:31 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 4 | ljs@kernel.org | finished in 6h21m0s |
| 2026-07-16 20:54 UTC | xfrm: espintcp: fix UAF during close | 2 | sd@queasysnail.net | finished in 2h59m0s |
| 2026-07-16 20:35 UTC | nfc: fix remaining OOB bugs in NCI/LLCP parsing | 5 | snowwlake@icloud.com | finished in 2h34m0s |
| 2026-07-16 20:34 UTC | vxlan, geneve: require CAP_NET_ADMIN in the device netns for changelink | 2 | doruk@0sec.ai | finished in 5h5m0s |
| 2026-07-16 19:34 UTC | mac802154: llsec: reject frames shorter than the authentication tag | 2 | doruk@0sec.ai | finished in 5h23m0s |
| 2026-07-16 19:31 UTC | mac802154: llsec: reject frames shorter than the authentication tag | 2 | doruk@0sec.ai | finished in 5h20m0s |
| 2026-07-16 15:47 UTC | pull-request: can 2026-07-16 | 1 | mkl@pengutronix.de | finished in 4h55m0s |
| 2026-07-16 14:55 UTC | fs: Fix missed inode write during fsync | 4 | jack@suse.cz |
finished
in 1h27m0s
[1 findings] |
| 2026-07-16 13:42 UTC | mm: memcg: initialize *locked in memcg1_oom_prepare() stub | 2 | leitao@debian.org | skipped |
| 2026-07-16 11:39 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 2 | aigbot@tencent.com | finished in 4h40m0s |
| 2026-07-16 10:30 UTC | wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper | 1 | doruk@0sec.ai | finished in 2h1m0s |
| 2026-07-16 10:30 UTC | netfs: Keep track of folios in a segmented bio_vec[] chain | 6 | dhowells@redhat.com | finished in 45m0s |
| 2026-07-16 10:06 UTC | veth: convert frag_list skbs before running XDP | 1 | matt@readmodwrite.com | finished in 4h40m0s |
| 2026-07-16 09:46 UTC | fs/ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() | 1 | alexandro.calo@nozominetworks.com | finished in 2h12m0s |
| 2026-07-16 07:46 UTC | KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state | 1 | pbonzini@redhat.com | finished in 5h2m0s |
| 2026-07-15 23:42 UTC | KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN | 1 | venkateshs@chromium.org | finished in 5h23m0s |
| 2026-07-15 19:29 UTC | block: fix race in blk_time_get_ns() returning 0 | 1 | mike@waychison.com | finished in 5h0m0s |
| 2026-07-15 18:55 UTC | wifi: mwifiex: validate HT/VHT capability and operation IE lengths | 2 | doruk@0sec.ai | finished in 3h43m0s |
| 2026-07-15 18:55 UTC | wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length | 2 | doruk@0sec.ai | finished in 2h4m0s |
| 2026-07-15 14:42 UTC | fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes | 5 | kirill@shutemov.name | skipped |
| 2026-07-15 11:52 UTC | fs/adfs: bound directory entry name length in adfs_fplus_getnext() | 1 | sammiee5311@gmail.com | finished in 3h5m0s |
| 2026-07-15 11:41 UTC | net/sched: serialize qdisc_rtab_list against concurrent get/put | 2 | qwe.aldo@gmail.com | finished in 4h39m0s |
| 2026-07-15 08:25 UTC | iavf: fix two memory leaks | 2 | xuanqiang.luo@linux.dev | finished in 3h17m0s |
| 2026-07-15 08:20 UTC | mctp: serial: handle zero-length frames to prevent rx buffer overflow | 2 | doruk@0sec.ai | finished in 3h29m0s |
| 2026-07-15 06:49 UTC | wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 | 2 | zaq14760@gmail.com | skipped |
| 2026-07-15 06:36 UTC | KVM: SEV: drop FOLL_WRITE for encrypted region registration | 2 | pankaj.gupta@amd.com | finished in 2h18m0s |
| 2026-07-15 06:11 UTC | iavf: fix two memory leaks | 1 | xuanqiang.luo@linux.dev | finished in 2h33m0s |
| 2026-07-15 05:56 UTC | vxlan, geneve: require CAP_NET_ADMIN in the device netns for changelink | 1 | doruk@0sec.ai | finished in 5h7m0s |
| 2026-07-15 03:35 UTC | sctp: diag: fix uninitialized stack leak via INET_DIAG_LOCALS/PEERS | 1 | omeux327@gmail.com | finished in 6h4m0s |
| 2026-07-15 02:33 UTC | wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb | 1 | lucid_duck@justthetip.ca | finished in 40m0s |
| 2026-07-15 02:03 UTC | RISC-V: KVM: Serialize virtual interrupt pending state updates | 5 | xb@ultrarisc.com | finished in 2h22m0s |
| 2026-07-14 23:22 UTC | s390/vfio_ccw fixes | 1 | farman@linux.ibm.com | finished in 2h19m0s |
| 2026-07-14 17:54 UTC | KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode | 5 | amachhiw@linux.ibm.com | finished in 1h53m0s |
| 2026-07-14 17:24 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 3 | ljs@kernel.org | finished in 4h55m0s |
| 2026-07-14 16:46 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 3 | doruk@0sec.ai | finished in 5h7m0s |
| 2026-07-14 14:52 UTC | fs/ntfs: Fix min_len for compressed/sparse attributes in ntfs_non_resident_attr_value_is_valid() | 1 | alexandro.calo@nozominetworks.com | finished in 2h45m0s |
| 2026-07-14 14:01 UTC | Docs/ABI/damon: sysfs ABI document fixes and additions | 2 | sj@kernel.org | skipped |
| 2026-07-14 13:52 UTC | mm/damon: unurgent fixes for infinite loop, NULL de-ref and races | 1 | sj@kernel.org | finished in 6h9m0s |
| 2026-07-14 13:19 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 3 | 4ncienth@gmail.com | finished in 5h12m0s |
| 2026-07-14 13:03 UTC | mctp: serial: reject zero-length frames to prevent rx buffer overflow | 1 | doruk@0sec.ai | finished in 3h24m0s |
| 2026-07-14 12:26 UTC | ipv4: require matching source address for route hint reuse | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h22m0s |
| 2026-07-14 12:23 UTC | mm: fix inode UAF when splitting a file folio past EOF | 2 | kirill@shutemov.name |
finished
in 5h41m0s
[3 findings] |
| 2026-07-14 11:49 UTC | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 2 | michael.bommarito@gmail.com | finished in 5h28m0s |
| 2026-07-14 09:38 UTC | bpf: Reject negative const offsets for buffer pointers | 5 | sun.jian.kdev@gmail.com | finished in 5h15m0s |
| 2026-07-14 09:17 UTC | wifi: wilc1000: validate assoc response length before subtracting header | 1 | hhhuang@smu.edu.sg | skipped |
| 2026-07-14 08:15 UTC | mm/zswap: Fixes and improves the zswap global shrinker | 1 | jiahao.kernel@gmail.com | finished in 5h20m0s |
| 2026-07-14 07:27 UTC | amt: fix use-after-free in AMT delayed works | 1 | shlomojune6@gmail.com | finished in 4h59m0s |
| 2026-07-14 07:25 UTC | LoongArch: KVM: Harden interrupt injection | 5 | maobibo@loongson.cn | finished in 2h2m0s |
| 2026-07-14 06:39 UTC | ice: fix use-after-free in dynamic port cleanup | 1 | xuanqiang.luo@linux.dev | skipped |
| 2026-07-14 01:24 UTC | LoongArch: KVM: EIOINTC: fix INT_ENCODE ipnum out-of-bounds access | 1 | cui.tao@linux.dev | finished in 2h24m0s |
| 2026-07-13 22:09 UTC | Fix for unintended FUSE ACL cache | 1 | amir73il@gmail.com | finished in 4h50m0s |
| 2026-07-13 21:59 UTC | nfc: microread: validate CARD_FOUND event length before parsing targets | 1 | doruk@0sec.ai | finished in 1h55m0s |
| 2026-07-13 21:32 UTC | wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets | 1 | doruk@0sec.ai | finished in 2h27m0s |
| 2026-07-13 19:40 UTC | net: don't read an unset MAC header on the raw/qdisc-bypass TX path | 1 | doruk@0sec.ai | finished in 3h10m0s |