| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-17 00:22 UTC | virtio_balloon: fix Use-After-Free bugs during PM freeze | 2 | linkl@google.com | finished in 4h51m0s |
| 2026-07-16 21:31 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 4 | ljs@kernel.org | finished in 6h21m0s |
| 2026-07-16 20:54 UTC | xfrm: espintcp: fix UAF during close | 2 | sd@queasysnail.net | finished in 2h59m0s |
| 2026-07-16 20:35 UTC | nfc: fix remaining OOB bugs in NCI/LLCP parsing | 5 | snowwlake@icloud.com | finished in 2h34m0s |
| 2026-07-16 20:34 UTC | vxlan, geneve: require CAP_NET_ADMIN in the device netns for changelink | 2 | doruk@0sec.ai | finished in 5h5m0s |
| 2026-07-16 19:34 UTC | mac802154: llsec: reject frames shorter than the authentication tag | 2 | doruk@0sec.ai | finished in 5h23m0s |
| 2026-07-16 19:31 UTC | mac802154: llsec: reject frames shorter than the authentication tag | 2 | doruk@0sec.ai | finished in 5h20m0s |
| 2026-07-16 15:47 UTC | pull-request: can 2026-07-16 | 1 | mkl@pengutronix.de | finished in 4h55m0s |
| 2026-07-16 14:55 UTC | fs: Fix missed inode write during fsync | 4 | jack@suse.cz |
finished
in 1h27m0s
[1 findings] |
| 2026-07-16 13:42 UTC | mm: memcg: initialize *locked in memcg1_oom_prepare() stub | 2 | leitao@debian.org | skipped |
| 2026-07-16 11:39 UTC | sctp: don't free the ASCONF's own transport in DEL-IP processing | 2 | aigbot@tencent.com | finished in 4h40m0s |
| 2026-07-16 10:30 UTC | wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper | 1 | doruk@0sec.ai | finished in 2h1m0s |
| 2026-07-16 10:30 UTC | netfs: Keep track of folios in a segmented bio_vec[] chain | 6 | dhowells@redhat.com | finished in 45m0s |
| 2026-07-16 10:06 UTC | veth: convert frag_list skbs before running XDP | 1 | matt@readmodwrite.com | finished in 4h40m0s |
| 2026-07-16 09:46 UTC | fs/ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() | 1 | alexandro.calo@nozominetworks.com | finished in 2h12m0s |
| 2026-07-16 07:46 UTC | KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state | 1 | pbonzini@redhat.com | finished in 5h2m0s |
| 2026-07-15 23:42 UTC | KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN | 1 | venkateshs@chromium.org | finished in 5h23m0s |
| 2026-07-15 19:29 UTC | block: fix race in blk_time_get_ns() returning 0 | 1 | mike@waychison.com | finished in 5h0m0s |
| 2026-07-15 18:55 UTC | wifi: mwifiex: validate HT/VHT capability and operation IE lengths | 2 | doruk@0sec.ai | finished in 3h43m0s |
| 2026-07-15 18:55 UTC | wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length | 2 | doruk@0sec.ai | finished in 2h4m0s |
| 2026-07-15 14:42 UTC | fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes | 5 | kirill@shutemov.name | skipped |
| 2026-07-15 11:52 UTC | fs/adfs: bound directory entry name length in adfs_fplus_getnext() | 1 | sammiee5311@gmail.com | finished in 3h5m0s |
| 2026-07-15 11:41 UTC | net/sched: serialize qdisc_rtab_list against concurrent get/put | 2 | qwe.aldo@gmail.com | finished in 4h39m0s |
| 2026-07-15 08:25 UTC | iavf: fix two memory leaks | 2 | xuanqiang.luo@linux.dev | finished in 3h17m0s |
| 2026-07-15 08:20 UTC | mctp: serial: handle zero-length frames to prevent rx buffer overflow | 2 | doruk@0sec.ai | finished in 3h29m0s |
| 2026-07-15 06:49 UTC | wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 | 2 | zaq14760@gmail.com | skipped |
| 2026-07-15 06:36 UTC | KVM: SEV: drop FOLL_WRITE for encrypted region registration | 2 | pankaj.gupta@amd.com | finished in 2h18m0s |
| 2026-07-15 06:11 UTC | iavf: fix two memory leaks | 1 | xuanqiang.luo@linux.dev | finished in 2h33m0s |
| 2026-07-15 05:56 UTC | vxlan, geneve: require CAP_NET_ADMIN in the device netns for changelink | 1 | doruk@0sec.ai | finished in 5h7m0s |
| 2026-07-15 03:35 UTC | sctp: diag: fix uninitialized stack leak via INET_DIAG_LOCALS/PEERS | 1 | omeux327@gmail.com | finished in 6h4m0s |
| 2026-07-15 02:33 UTC | wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb | 1 | lucid_duck@justthetip.ca | finished in 40m0s |
| 2026-07-15 02:03 UTC | RISC-V: KVM: Serialize virtual interrupt pending state updates | 5 | xb@ultrarisc.com | finished in 2h22m0s |
| 2026-07-14 23:22 UTC | s390/vfio_ccw fixes | 1 | farman@linux.ibm.com | finished in 2h19m0s |
| 2026-07-14 17:54 UTC | KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode | 5 | amachhiw@linux.ibm.com | finished in 1h53m0s |
| 2026-07-14 17:24 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 3 | ljs@kernel.org | finished in 4h55m0s |
| 2026-07-14 16:46 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 3 | doruk@0sec.ai | finished in 5h7m0s |
| 2026-07-14 14:52 UTC | fs/ntfs: Fix min_len for compressed/sparse attributes in ntfs_non_resident_attr_value_is_valid() | 1 | alexandro.calo@nozominetworks.com | finished in 2h45m0s |
| 2026-07-14 14:01 UTC | Docs/ABI/damon: sysfs ABI document fixes and additions | 2 | sj@kernel.org | skipped |
| 2026-07-14 13:52 UTC | mm/damon: unurgent fixes for infinite loop, NULL de-ref and races | 1 | sj@kernel.org | finished in 6h9m0s |
| 2026-07-14 13:19 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 3 | 4ncienth@gmail.com | finished in 5h12m0s |
| 2026-07-14 13:03 UTC | mctp: serial: reject zero-length frames to prevent rx buffer overflow | 1 | doruk@0sec.ai | finished in 3h24m0s |
| 2026-07-14 12:26 UTC | ipv4: require matching source address for route hint reuse | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h22m0s |
| 2026-07-14 12:23 UTC | mm: fix inode UAF when splitting a file folio past EOF | 2 | kirill@shutemov.name |
finished
in 5h41m0s
[3 findings] |
| 2026-07-14 11:49 UTC | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 2 | michael.bommarito@gmail.com | finished in 5h28m0s |
| 2026-07-14 09:38 UTC | bpf: Reject negative const offsets for buffer pointers | 5 | sun.jian.kdev@gmail.com | finished in 5h15m0s |
| 2026-07-14 09:17 UTC | wifi: wilc1000: validate assoc response length before subtracting header | 1 | hhhuang@smu.edu.sg | skipped |
| 2026-07-14 08:15 UTC | mm/zswap: Fixes and improves the zswap global shrinker | 1 | jiahao.kernel@gmail.com | finished in 5h20m0s |
| 2026-07-14 07:27 UTC | amt: fix use-after-free in AMT delayed works | 1 | shlomojune6@gmail.com | finished in 4h59m0s |
| 2026-07-14 07:25 UTC | LoongArch: KVM: Harden interrupt injection | 5 | maobibo@loongson.cn | finished in 2h2m0s |
| 2026-07-14 06:39 UTC | ice: fix use-after-free in dynamic port cleanup | 1 | xuanqiang.luo@linux.dev | skipped |
| 2026-07-14 01:24 UTC | LoongArch: KVM: EIOINTC: fix INT_ENCODE ipnum out-of-bounds access | 1 | cui.tao@linux.dev | finished in 2h24m0s |
| 2026-07-13 22:09 UTC | Fix for unintended FUSE ACL cache | 1 | amir73il@gmail.com | finished in 4h50m0s |
| 2026-07-13 21:59 UTC | nfc: microread: validate CARD_FOUND event length before parsing targets | 1 | doruk@0sec.ai | finished in 1h55m0s |
| 2026-07-13 21:32 UTC | wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets | 1 | doruk@0sec.ai | finished in 2h27m0s |
| 2026-07-13 19:40 UTC | net: don't read an unset MAC header on the raw/qdisc-bypass TX path | 1 | doruk@0sec.ai | finished in 3h10m0s |
| 2026-07-13 18:10 UTC | KVM: x86: Fix EFER reserved bits initialization | 3 | yosry@kernel.org | finished in 4h56m0s |
| 2026-07-13 18:01 UTC | KVM: x86: Fix missing EFER validity checks | 3 | yosry@kernel.org | finished in 5h19m0s |
| 2026-07-13 17:16 UTC | net: stmmac: intel: skip SerDes reconfig when rate is unchanged | 3 | bre@breiti.cc | skipped |
| 2026-07-13 17:14 UTC | mm/hugetlb: fix list corruption in allocate_file_region_entries() | 1 | caixiangfeng@bytedance.com | finished in 4h31m0s |
| 2026-07-13 17:09 UTC | mm: thp: pin the inode across a file folio split | 1 | kirill@shutemov.name | finished in 4h23m0s |
| 2026-07-13 15:58 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 2 | doruk@0sec.ai | finished in 5h27m0s |
| 2026-07-13 15:22 UTC | afs: Fix afs_edit_dir_remove() to get, not find, block 0 | 1 | dhowells@redhat.com | finished in 2h29m0s |
| 2026-07-13 14:59 UTC | net: qrtr: ns: Raise node count limit to 512 | 1 | youssef.abdulrahman@oss.qualcomm.com | skipped |
| 2026-07-13 14:11 UTC | ipconfig: bound BOOTP options by UDP datagram length | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 3h11m0s |
| 2026-07-13 13:37 UTC | x86/tdx: Fix port I/O handling bugs | 6 | kirill@shutemov.name | finished in 2h0m0s |
| 2026-07-13 13:20 UTC | net: stmmac: qcom-ethqos: add support for SCMI power domains | 13 | bartosz.golaszewski@oss.qualcomm.com | skipped |
| 2026-07-13 11:54 UTC | wifi: mt76: mt7996: validate default EEPROM firmware size | 1 | acharyalaxman8848@gmail.com | finished in 2h54m0s |
| 2026-07-13 11:50 UTC | mm/hugetlb: restore failed global reservations to subpool in alloc_hugetlb_folio | 1 | husong@kylinos.cn | finished in 5h47m0s |
| 2026-07-13 10:56 UTC | tcp: initialize standalone TCP-AO response padding | 2 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h51m0s |
| 2026-07-13 10:47 UTC | net/x25: fix use-after-free in x25_kill_by_neigh() | 1 | david.lee@trailofbits.com | finished in 5h51m0s |
| 2026-07-13 10:22 UTC | jbd2: bound j_list_lock hold time in the checkpoint shrinker | 1 | max.kellermann@ionos.com | finished in 4h53m0s |
| 2026-07-13 09:59 UTC | netfilter: ipset: do not update comments from kernel-side hash adds | 1 | david.lee@trailofbits.com | finished in 5h33m0s |
| 2026-07-13 09:48 UTC | ipvs: fix destination overload state updates | 3 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-13 09:17 UTC | fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes | 4 | kirill@shutemov.name | skipped |
| 2026-07-13 08:55 UTC | mm: memcg-v1: account vmpressure event allocations | 1 | guopeng.zhang@linux.dev | skipped |
| 2026-07-13 08:50 UTC | wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 | 1 | zaq14760@gmail.com | skipped |
| 2026-07-13 08:50 UTC | mm: memcontrol: update state_local when flushing NMI stats | 1 | guopeng.zhang@linux.dev | finished in 5h55m0s |
| 2026-07-13 08:23 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 2 | 4ncienth@gmail.com | finished in 5h18m0s |
| 2026-07-13 08:18 UTC | tcp: initialize standalone IPv4 ACK options | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h2m0s |
| 2026-07-13 07:33 UTC | RISC-V: KVM: Serialize virtual interrupt pending state updates | 4 | xb@ultrarisc.com | finished in 1h37m0s |
| 2026-07-13 06:48 UTC | RISC-V: KVM: Serialize virtual interrupt pending state updates | 3 | xb@ultrarisc.com | finished in 2h23m0s |
| 2026-07-13 06:35 UTC | selftests/bpf: Enable BLK_DEV_NBD for raw_tp_writable_reject_nbd_invalid | 1 | shung-hsi.yu@suse.com | skipped |
| 2026-07-13 02:34 UTC | drbd: reject out-of-range sizes when draining data | 1 | lilinmao@kylinos.cn | finished in 2h39m0s |
| 2026-07-13 01:21 UTC | nfc: llcp: Fix raw socket local ref leak on rebind | 1 | shuangpeng.kernel@gmail.com | finished in 5h0m0s |
| 2026-07-12 16:54 UTC | mm/damon/core: skip aging from repeated aggressive merging | 1 | sj@kernel.org | finished in 4h35m0s |
| 2026-07-12 14:27 UTC | net: hip04: fix RX buffer leak on build_skb failure | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-07-12 13:25 UTC | tcp: reject TIME_WAIT reopens when SYN queue is full | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h37m0s |
| 2026-07-12 13:22 UTC | igc: remove napi_synchronize() in igc_down() | 1 | devnexen@gmail.com | finished in 3h43m0s |
| 2026-07-12 13:03 UTC | llc: fix SAP refcount leak when creating incoming sockets | 1 | xuanqiang.luo@linux.dev | finished in 5h7m0s |
| 2026-07-12 10:42 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 2 | ljs@kernel.org | finished in 4h56m0s |
| 2026-07-11 20:47 UTC | net: reduce XMIT_RECURSION_LIMIT under KASAN | 2 | tristmd@gmail.com | finished in 4h59m0s |
| 2026-07-11 18:04 UTC | mm/damon: unurgent fixes for infinite loop, NULL de-ref and races | 1 | sj@kernel.org | skipped |
| 2026-07-11 17:15 UTC | mm/damon/core: skip aging from repeated aggressive merging | 1 | sj@kernel.org | finished in 6h1m0s |
| 2026-07-11 15:26 UTC | fs/ntfs3: reject an oversized resident attribute on the inline iomap path | 2 | michael.bommarito@gmail.com | finished in 4h41m0s |
| 2026-07-11 15:15 UTC | wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO | 1 | security@auditcode.ai | finished in 4h59m0s |
| 2026-07-11 15:07 UTC | virtio_net: validate device stats reply records before use | 1 | michael.bommarito@gmail.com | finished in 2h33m0s |
| 2026-07-11 15:07 UTC | ceph: bound copied dentry name length in NFS export get_name | 1 | michael.bommarito@gmail.com | finished in 3h26m0s |
| 2026-07-11 15:06 UTC | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 1 | michael.bommarito@gmail.com | finished in 5h58m0s |
| 2026-07-11 15:06 UTC | net: mana: cap HWC init max message size to HW_CHANNEL_MAX_REQUEST_SIZE | 1 | michael.bommarito@gmail.com | skipped |
| 2026-07-11 15:06 UTC | wifi: iwlwifi: mvm: bound BA-window station ID | 1 | michael.bommarito@gmail.com | finished in 2h4m0s |