| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-13 10:47 UTC | net/x25: fix use-after-free in x25_kill_by_neigh() | 1 | david.lee@trailofbits.com | finished in 5h51m0s |
| 2026-07-13 10:22 UTC | jbd2: bound j_list_lock hold time in the checkpoint shrinker | 1 | max.kellermann@ionos.com | finished in 4h53m0s |
| 2026-07-13 09:59 UTC | netfilter: ipset: do not update comments from kernel-side hash adds | 1 | david.lee@trailofbits.com | finished in 5h33m0s |
| 2026-07-13 09:48 UTC | ipvs: fix destination overload state updates | 3 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-07-13 09:17 UTC | fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes | 4 | kirill@shutemov.name | skipped |
| 2026-07-13 08:55 UTC | mm: memcg-v1: account vmpressure event allocations | 1 | guopeng.zhang@linux.dev | skipped |
| 2026-07-13 08:50 UTC | wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 | 1 | zaq14760@gmail.com | skipped |
| 2026-07-13 08:50 UTC | mm: memcontrol: update state_local when flushing NMI stats | 1 | guopeng.zhang@linux.dev | finished in 5h55m0s |
| 2026-07-13 08:23 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 2 | 4ncienth@gmail.com | finished in 5h18m0s |
| 2026-07-13 08:18 UTC | tcp: initialize standalone IPv4 ACK options | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 5h2m0s |
| 2026-07-13 07:33 UTC | RISC-V: KVM: Serialize virtual interrupt pending state updates | 4 | xb@ultrarisc.com | finished in 1h37m0s |
| 2026-07-13 06:48 UTC | RISC-V: KVM: Serialize virtual interrupt pending state updates | 3 | xb@ultrarisc.com | finished in 2h23m0s |
| 2026-07-13 06:35 UTC | selftests/bpf: Enable BLK_DEV_NBD for raw_tp_writable_reject_nbd_invalid | 1 | shung-hsi.yu@suse.com | skipped |
| 2026-07-13 02:34 UTC | drbd: reject out-of-range sizes when draining data | 1 | lilinmao@kylinos.cn | finished in 2h39m0s |
| 2026-07-13 01:21 UTC | nfc: llcp: Fix raw socket local ref leak on rebind | 1 | shuangpeng.kernel@gmail.com | finished in 5h0m0s |
| 2026-07-12 16:54 UTC | mm/damon/core: skip aging from repeated aggressive merging | 1 | sj@kernel.org | finished in 4h35m0s |
| 2026-07-12 14:27 UTC | net: hip04: fix RX buffer leak on build_skb failure | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-07-12 13:25 UTC | tcp: reject TIME_WAIT reopens when SYN queue is full | 1 | zhaoyz24@mails.tsinghua.edu.cn | finished in 4h37m0s |
| 2026-07-12 13:22 UTC | igc: remove napi_synchronize() in igc_down() | 1 | devnexen@gmail.com | finished in 3h43m0s |
| 2026-07-12 13:03 UTC | llc: fix SAP refcount leak when creating incoming sockets | 1 | xuanqiang.luo@linux.dev | finished in 5h7m0s |
| 2026-07-12 10:42 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 2 | ljs@kernel.org | finished in 4h56m0s |
| 2026-07-11 20:47 UTC | net: reduce XMIT_RECURSION_LIMIT under KASAN | 2 | tristmd@gmail.com | finished in 4h59m0s |
| 2026-07-11 18:04 UTC | mm/damon: unurgent fixes for infinite loop, NULL de-ref and races | 1 | sj@kernel.org | skipped |
| 2026-07-11 17:15 UTC | mm/damon/core: skip aging from repeated aggressive merging | 1 | sj@kernel.org | finished in 6h1m0s |
| 2026-07-11 15:26 UTC | fs/ntfs3: reject an oversized resident attribute on the inline iomap path | 2 | michael.bommarito@gmail.com | finished in 4h41m0s |
| 2026-07-11 15:15 UTC | wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO | 1 | security@auditcode.ai | finished in 4h59m0s |
| 2026-07-11 15:07 UTC | virtio_net: validate device stats reply records before use | 1 | michael.bommarito@gmail.com | finished in 2h33m0s |
| 2026-07-11 15:07 UTC | ceph: bound copied dentry name length in NFS export get_name | 1 | michael.bommarito@gmail.com | finished in 3h26m0s |
| 2026-07-11 15:06 UTC | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 1 | michael.bommarito@gmail.com | finished in 5h58m0s |
| 2026-07-11 15:06 UTC | net: mana: cap HWC init max message size to HW_CHANNEL_MAX_REQUEST_SIZE | 1 | michael.bommarito@gmail.com | skipped |
| 2026-07-11 15:06 UTC | wifi: iwlwifi: mvm: bound BA-window station ID | 1 | michael.bommarito@gmail.com | finished in 2h4m0s |
| 2026-07-11 13:47 UTC | ipvlan: add xmit recursion protection | 1 | tristmd@gmail.com | finished in 5h34m0s |
| 2026-07-11 12:36 UTC | nfc: port100: reject frames whose declared length exceeds the received data | 1 | doruk@0sec.ai | finished in 2h59m0s |
| 2026-07-11 12:36 UTC | nfc: fdp: bound the device-supplied read size in fdp_nci_i2c_read() | 1 | doruk@0sec.ai | finished in 3h47m0s |
| 2026-07-11 08:46 UTC | mm: huge_memory: Fix kobject cleanup in thpsize_create error | 1 | zenghongling@kylinos.cn | skipped |
| 2026-07-11 07:30 UTC | nfc: llcp: guard against short PDUs in nfc_llcp_rx_skb() | 1 | doruk@0sec.ai | finished in 5h17m0s |
| 2026-07-11 07:27 UTC | nfc: llcp: reject PDUs shorter than the LLCP header | 1 | doruk@0sec.ai | finished in 4h53m0s |
| 2026-07-11 07:13 UTC | net: wwan: t7xx: validate control-message data_length against the skb | 1 | doruk@0sec.ai | finished in 3h12m0s |
| 2026-07-11 07:13 UTC | wifi: ath6kl: validate assoc info lengths in the WMI connect event | 1 | doruk@0sec.ai | finished in 4h3m0s |
| 2026-07-11 07:13 UTC | wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length | 1 | doruk@0sec.ai | finished in 2h48m0s |
| 2026-07-11 07:13 UTC | nfc: st21nfca: validate ATR_REQ length against the received frame | 1 | doruk@0sec.ai | finished in 4h6m0s |
| 2026-07-11 05:29 UTC | net: hip04: fix tx coalesce timer and IRQ teardown races | 3 | fanwu01@zju.edu.cn | skipped |
| 2026-07-11 04:19 UTC | mm: shrinker: Fix double-free in alloc_shrinker_info error path | 1 | zenghongling@kylinos.cn |
finished
in 2h30m0s
[1 findings] |
| 2026-07-11 04:18 UTC | mm: shrinker: fix double-free in alloc_shrinker_info error path | 1 | zenghongling@kylinos.cn |
finished
in 2h20m0s
[1 findings] |
| 2026-07-11 04:15 UTC | mm: shrinker: fix double-free in alloc_shrinker_info error path | 1 | zenghongling@kylinos.cn |
finished
in 3h1m0s
[1 findings] |
| 2026-07-10 15:43 UTC | mm: mglru: fix stale batch updates after memcg reparenting | 5 | qi.zheng@linux.dev | finished in 4h39m0s |
| 2026-07-10 15:03 UTC | tipc: cap number of nodes per net namespace | 1 | security@auditcode.ai | finished in 5h51m0s |
| 2026-07-10 14:34 UTC | mm/page_alloc: avoid direct compaction for costly __GFP_NORETRY allocations | 3 | dipiets@amazon.it | finished in 5h4m0s |
| 2026-07-10 14:09 UTC | mac802154: hold an interface reference across the scan worker | 1 | security@auditcode.ai | finished in 4h41m0s |
| 2026-07-10 13:29 UTC | mm/ptdump: always stabilise against page table freeing using init_mm | 1 | ljs@kernel.org | finished in 5h43m0s |
| 2026-07-10 11:56 UTC | x86/mm/pat: acquire mmap lock on page table free to avoid ptdump UAF | 1 | ljs@kernel.org | finished in 4h47m0s |
| 2026-07-10 11:13 UTC | mac802154: flush rx_mac_cmd_list before freeing sdata | 1 | security@auditcode.ai | finished in 5h6m0s |
| 2026-07-10 10:55 UTC | mm: handle device-private PMDs in walk callbacks | 3 | usama.arif@linux.dev | finished in 5h59m0s |
| 2026-07-10 10:49 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 1 | ljs@kernel.org | finished in 4h35m0s |
| 2026-07-10 10:42 UTC | mm/page_alloc: couple of followups for recent cleanups | 1 | jackmanb@google.com | skipped |
| 2026-07-10 09:33 UTC | binfmt_misc: write access fixes, RCU handler lookup and cleanups | 3 | brauner@kernel.org | finished in 5h10m0s |
| 2026-07-10 09:05 UTC | net: fix stale TX skb pointers on DMA map failure | 1 | xuanqiang.luo@linux.dev | finished in 3h49m0s |
| 2026-07-10 04:47 UTC | Docs/ABI/damon: sysfs ABI document fixes and additions | 1 | husong@kylinos.cn | skipped |
| 2026-07-10 03:52 UTC | KVM: TDX: Reject concurrent change to CPUID entry count | 2 | binbin.wu@linux.intel.com | finished in 2h50m0s |
| 2026-07-10 02:30 UTC | fs/ntfs3: reject an oversized resident attribute on the inline iomap path | 1 | michael.bommarito@gmail.com | finished in 4h48m0s |
| 2026-07-10 01:57 UTC | net: hip04: fix tx coalesce timer and IRQ teardown races | 2 | fanwu01@zju.edu.cn | skipped |
| 2026-07-10 01:44 UTC | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 1 | 4ncienth@gmail.com | finished in 4h53m0s |
| 2026-07-09 22:29 UTC | binfmt_misc: write access fixes, RCU handler lookup and cleanups | 2 | brauner@kernel.org | finished in 5h8m0s |
| 2026-07-09 22:18 UTC | ieee802154: hwsim: serialize pib updates to fix double-free | 1 | devnexen@gmail.com | finished in 5h47m0s |
| 2026-07-09 21:19 UTC | gve: fix Rx queue stall on alloc failure | 2 | hramamurthy@google.com | finished in 2h36m0s |
| 2026-07-09 19:03 UTC | net: stmmac: intel: gate SerDes reconfig on rate | 2 | bre@breiti.cc | skipped |
| 2026-07-09 16:41 UTC | can: esd_usb: kill anchored URBs before freeing netdevs | 2 | fanwu01@zju.edu.cn | finished in 4h8m0s |
| 2026-07-09 14:47 UTC | tipc: fix NULL deref in tipc_lxc_xmit() on node up | 3 | bestswngs@gmail.com | finished in 4h42m0s |
| 2026-07-09 13:54 UTC | KVM: s390: pci: Fix handling of AIF enable without AISB | 1 | mjrosato@linux.ibm.com | finished in 1h47m0s |
| 2026-07-09 13:19 UTC | badblocks: fix infinite loop and validate sector range/shift | 6 | adhikari.resume@gmail.com | finished in 3h38m0s |
| 2026-07-09 13:12 UTC | mac802154: llsec: reject frames shorter than the authentication tag | 1 | doruk@0sec.ai | finished in 4h56m0s |
| 2026-07-09 13:12 UTC | nfc: llcp: bound the connect_sn TLV walk to the skb | 2 | doruk@0sec.ai | finished in 4h55m0s |
| 2026-07-09 12:16 UTC | fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes | 3 | kirill@shutemov.name | skipped |
| 2026-07-09 10:46 UTC | can: esd_usb: kill anchored URBs before freeing netdevs | 1 | fanwu01@zju.edu.cn | finished in 2h31m0s |
| 2026-07-09 10:34 UTC | rtase: Workaround for TX hang caused by hardware packet parsing | 5 | justinlai0215@realtek.com | skipped |
| 2026-07-09 10:16 UTC | wifi: brcmfmac: drain bus_reset work on device removal | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-07-09 10:08 UTC | wifi: mwifiex: validate HT/VHT capability and operation IE lengths | 1 | doruk@0sec.ai | finished in 2h5m0s |
| 2026-07-09 09:50 UTC | amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN | 1 | prashanthkumar.k.r@amd.com | skipped |
| 2026-07-09 08:27 UTC | net: mvneta: bm: fix device reference leak on failed lookup | 1 | johan@kernel.org | skipped |
| 2026-07-09 06:38 UTC | block/blk-mq: use atomic_t for quiesce_depth to avoid lock contention on RT | 8 | ionut.nechita@windriver.com | finished in 5h40m0s |
| 2026-07-09 05:57 UTC | KVM: PPC: Book3S HV: Set irqfd->producer only on success | 1 | leixiang@kylinos.cn | finished in 2h51m0s |
| 2026-07-09 04:47 UTC | qede: Fix NULL pointer dereference in TPA fragment processing | 1 | nagarevaibhav@gmail.com | skipped |
| 2026-07-09 02:53 UTC | bpf: fix UAF in sock clone early bailouts | 1 | mattbobrowski@google.com | finished in 5h30m0s |
| 2026-07-09 02:44 UTC | wifi: mac80211: Fix cryptographic MAC comparison to be constant-time | 1 | ebiggers@kernel.org | skipped |
| 2026-07-09 01:46 UTC | net: gro: fix double aggregation of flush-marked skbs | 7 | shiming.cheng@mediatek.com | finished in 5h31m0s |
| 2026-07-08 22:46 UTC | ovpn: prevent UAF re-add to by_transp_addr on float-vs-delete race | 1 | security@auditcode.ai | finished in 3h3m0s |
| 2026-07-08 22:22 UTC | Reproducers for hugetlb allocation failure issues | 1 | ackerleytng@google.com | finished in 1h5m0s |
| 2026-07-08 22:12 UTC | Fix bugs on HugeTLB folio allocation failure paths | 2 | devnull@kernel.org | finished in 5h28m0s |
| 2026-07-08 20:19 UTC | mm/util: don't read __page_2 for order-1 folios in snapshot_page() | 2 | aboorvad@linux.ibm.com | finished in 5h10m0s |
| 2026-07-08 19:59 UTC | wifi: fix PMSR lifetime and frame validation issues | 1 | enderaoelyther@gmail.com | finished in 4h48m0s |
| 2026-07-08 18:11 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 2 | xmei5@asu.edu | finished in 2h42m0s |
| 2026-07-08 17:30 UTC | tipc: fix NULL deref in tipc_lxc_xmit() on node up | 1 | bestswngs@gmail.com | finished in 5h4m0s |
| 2026-07-08 12:57 UTC | ext4: clear error before retrying inode xattr space fallback | 1 | 3497809730@qq.com | finished in 5h13m0s |
| 2026-07-08 12:20 UTC | mm: handle device-private PMDs in walk callbacks | 2 | usama.arif@linux.dev | finished in 5h28m0s |
| 2026-07-08 10:34 UTC | fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes | 2 | kirill@shutemov.name | finished in 5h45m0s |
| 2026-07-08 10:29 UTC | vsock/virtio: collapse receive queue under memory pressure | 2 | sgarzare@redhat.com | finished in 4h57m0s |
| 2026-07-08 09:34 UTC | fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes | 1 | kirill@shutemov.name | finished in 5h48m0s |
| 2026-07-08 09:18 UTC | pull request: batman-adv 2026-07-08 | 1 | sw@simonwunderlich.de | finished in 6h19m0s |
| 2026-07-08 09:01 UTC | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() | 2 | kirill@shutemov.name | finished in 4h39m0s |
| 2026-07-08 08:12 UTC | ext4: propagate errors from fast commit range replay | 1 | 3497809730@qq.com | finished in 5h13m0s |