| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-04-04 10:03 UTC | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | 2 | mashiro.chen@mailbox.org | finished in 2h3m0s |
| 2026-04-03 20:44 UTC | net: rose: stop timers before freeing neighbour in rose_neigh_put | 1 | mashiro.chen@mailbox.org | finished in 4h49m0s |
| 2026-04-03 17:49 UTC | l2tp: Drop large packets with UDP encap | 1 | alice.kernel@fastmail.im | finished in 4h29m0s |
| 2026-04-03 10:01 UTC | KVM: x86: Don't leave APF half-enabled on bad APF data GPA | 2 | ethan.yang.kernel@gmail.com | finished in 4h49m0s |
| 2026-04-03 08:05 UTC | exfat: unify FAT chain walking helpers | 3 | chizhiling@163.com | finished in 1h49m0s |
| 2026-04-03 07:52 UTC | mm/vmalloc: fix KMSAN uninit in decay_va_pool_node list handling | 1 | chenyichong@uniontech.com | finished in 2h7m0s |
| 2026-04-03 03:11 UTC | KVM: x86: Don't leave APF half-enabled on bad APF data GPA | 1 | ethan.yang.kernel@gmail.com | finished in 4h17m0s |
| 2026-04-02 20:37 UTC | sockmap: Fix sk_psock_drop() race vs sock_map_{unhash,close,destroy}(). | 1 | kuniyu@google.com | finished in 4h27m0s |
| 2026-04-02 16:45 UTC | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | 1 | mashiro.chen@mailbox.org | finished in 2h9m0s |
| 2026-04-02 16:01 UTC | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 3 | sun.jian.kdev@gmail.com | finished in 4h19m0s |
| 2026-04-02 10:35 UTC | net: lapbether: handle NETDEV_PRE_TYPE_CHANGE | 2 | edumazet@google.com | finished in 4h42m0s |
| 2026-04-02 08:14 UTC | mm/vmalloc: fix KMSAN uninit-value warning in decay_va_pool_node() | 1 | wangqing7171@gmail.com | finished in 4h38m0s |
| 2026-04-02 07:07 UTC | usb: rtl8150: avoid using uninitialized CSCR value | 1 | zhangdandan@uniontech.com | finished in 2h21m0s |
| 2026-04-02 05:09 UTC | udp_bpf: fix use-after-free in udp_bpf_recvmsg() | 1 | kartikey406@gmail.com | finished in 4h10m0s |
| 2026-04-02 01:31 UTC | KVM: x86/xen: Use trylock for fast path event channel delivery | 2 | shaikhkamal2012@gmail.com | finished in 4h18m0s |
| 2026-04-01 13:53 UTC | net: lapbether: handle NETDEV_PRE_TYPE_CHANGE | 1 | edumazet@google.com | finished in 4h36m0s |
| 2026-04-01 13:10 UTC | mm: fix deferred split queue races during migration | 1 | lance.yang@linux.dev | finished in 4h16m0s |
| 2026-04-01 08:41 UTC | mm/migrate: fix stale partially_mapped arg to deferred_split_folio() | 1 | kartikey406@gmail.com | finished in 4h25m0s |
| 2026-04-01 07:11 UTC | exfat: unify FAT chain walking helpers | 2 | chizhiling@163.com | finished in 4h52m0s |
| 2026-04-01 00:54 UTC | sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). | 1 | kuniyu@google.com | finished in 4h34m0s |
| 2026-03-31 05:46 UTC | loop: block changing lo_offset/lo_sizelimit on mounted device | 2 | kartikey406@gmail.com | finished in 4h19m0s |
| 2026-03-30 08:36 UTC | mm, KMSAN: Add missing shadow memory initialization in special allocation paths | 1 | ke.zhao.kernel@gmail.com |
finished
in 1h0m0s
[1 findings] |
| 2026-03-30 04:43 UTC | loop: block loop reconfiguration of offset/sizelimit on mounted device | 1 | kartikey406@gmail.com | finished in 4h18m0s |
| 2026-03-29 20:59 UTC | hfs: Validate CNIDs in hfs_read_inode | 5 | contact@gvernon.com | finished in 4h21m0s |
| 2026-03-29 16:17 UTC | selftests/bpf: Reject malformed IPv4/IPv6 skb test input | 2 | sun.jian.kdev@gmail.com | finished in 4h22m0s |
| 2026-03-29 13:15 UTC | KVM: x86/xen: Fix sleeping lock in hard IRQ context on PREEMPT_RT | 1 | shaikhkamal2012@gmail.com | finished in 4h11m0s |
| 2026-03-29 12:50 UTC | selftests/bpf: Reject malformed IPv4/IPv6 skb test input | 1 | sun.jian.kdev@gmail.com | finished in 4h1m0s |
| 2026-03-28 15:00 UTC | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | 2 | kartikey406@gmail.com | finished in 4h7m0s |
| 2026-03-28 06:55 UTC | mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch | 1 | kartikey406@gmail.com | finished in 4h23m0s |
| 2026-03-27 15:35 UTC | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 7 | yss2813483011xxl@gmail.com | finished in 4h31m0s |
| 2026-03-26 12:18 UTC | net: use skb_header_pointer() for TCPv4 GSO frag_off | 6 | yss2813483011xxl@gmail.com | finished in 4h12m0s |
| 2026-03-26 10:45 UTC | netfs: Keep track of folios in a segmented bio_vec[] chain | 1 | dhowells@redhat.com | finished in 4h24m0s |
| 2026-03-25 06:38 UTC | nbd: Fix deadlock during fs reclaim under lock_sock(). | 1 | kuniyu@google.com | finished in 4h8m0s |
| 2026-03-24 13:45 UTC | iomap: don't invalidate folios after writeback errors | 1 | driz2t@qq.com | skipped |
| 2026-03-24 08:06 UTC | net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak | 1 | jiayuan.chen@linux.dev | finished in 4h23m0s |
| 2026-03-24 01:58 UTC | ext4: skip split extent recovery on corruption | 2 | hongao@uniontech.com | finished in 4h13m0s |
| 2026-03-23 01:57 UTC | ext4: skip split extent recovery on corruption | 1 | hongao@uniontech.com | finished in 4h10m0s |
| 2026-03-22 19:03 UTC | mm: fix data race in __filemap_remove_folio / folio_mapping | 1 | abhishek_sts8@yahoo.com | finished in 4h4m0s |
| 2026-03-22 05:18 UTC | blktrace: reject buf_size smaller than blk_io_trace | 1 | kartikey406@gmail.com | finished in 4h9m0s |
| 2026-03-22 02:35 UTC | block: fix bio_alloc_bioset slowpath GFP handling | 1 | gor@linux.ibm.com | finished in 4h18m0s |
| 2026-03-21 08:36 UTC | block: mempool alloc fail due to insufficient memory | 1 | eadavis@qq.com | finished in 4h20m0s |
| 2026-03-21 06:24 UTC | fs/namespace: fix double hlist_del_init of mnt_mp_list in get_detached_copy() | 1 | kartikey406@gmail.com | finished in 4h25m0s |
| 2026-03-20 14:14 UTC | net: use skb_header_pointer() only for DODGY TCPv4 GSO skbs | 5 | yss2813483011xxl@gmail.com | finished in 4h13m0s |
| 2026-03-20 13:06 UTC | splice: prevent deadlock when splicing a file to itself | 1 | kartikey406@gmail.com | finished in 4h6m0s |
| 2026-03-20 12:29 UTC | fs: allow backing file code to open an O_PATH file with negative dentry | 2 | amir73il@gmail.com | finished in 4h27m0s |
| 2026-03-20 10:03 UTC | xfs: defer lazytime timestamp updates to inodegc during eviction | 1 | zhangdandan@uniontech.com | finished in 4h35m0s |
| 2026-03-20 07:21 UTC | team: fix header_ops type confusion and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-03-19 12:46 UTC | fs: allow vfs code to open an O_PATH file with negative dentry | 1 | amir73il@gmail.com | finished in 4h11m0s |
| 2026-03-19 00:54 UTC | net: use skb_header_pointer() only for DODGY TCPv4 GSO skbs | 4 | yss2813483011xxl@gmail.com | finished in 4h23m0s |
| 2026-03-18 07:38 UTC | hfsplus: prevent b-tree allocator corruption | 7 | shardul.b@mpiricsoftware.com | finished in 4h33m0s |
| 2026-03-17 14:23 UTC | ext4: reject mount if bigalloc with s_first_data_block != 0 | 1 | koike@igalia.com | finished in 4h10m0s |
| 2026-03-17 12:45 UTC | team: fix header_ops type confusion and add selftest | 2 | jiayuan.chen@linux.dev | finished in 4h21m0s |
| 2026-03-17 11:12 UTC | net/ipv6: mcast: fix circular locking dependency in __ipv6_dev_mc_inc() | 1 | jiayuan.chen@linux.dev | finished in 4h29m0s |
| 2026-03-16 22:56 UTC | fuse: check for NULL file returned by fget | 1 | avagin@google.com | finished in 2h32m0s |
| 2026-03-16 17:38 UTC | userfaultfd: fix lock leak in mfill_get_vma() | 1 | avagin@google.com | finished in 4h11m0s |
| 2026-03-16 15:19 UTC | kernel/fork: validate exit_signal in kernel_clone() | 3 | kartikey406@gmail.com | finished in 4h12m0s |
| 2026-03-16 10:45 UTC | kernel/fork: validate exit_signal in kernel_clone() | 2 | kartikey406@gmail.com | finished in 4h12m0s |
| 2026-03-16 07:03 UTC | blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() | 2 | ytohnuki@amazon.com | finished in 4h25m0s |
| 2026-03-16 07:00 UTC | mm/userfaultfd: re-validate vma in mfill_atomic() loop under CONFIG_PER_VMA_LOCK | 1 | kartikey406@gmail.com | finished in 4h22m0s |
| 2026-03-16 03:11 UTC | userfaultfd: unassigned vma leads to a potential unreleased locks | 1 | eadavis@qq.com | finished in 4h0m0s |
| 2026-03-15 17:20 UTC | hfsplus: prevent b-tree allocator corruption | 6 | shardul.b@mpiricsoftware.com | finished in 4h22m0s |
| 2026-03-15 14:31 UTC | blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() | 1 | ytohnuki@amazon.com | finished in 4h3m0s |
| 2026-03-14 18:44 UTC | fs: fix use-after-free in peer group traversal during mount release | 1 | ytohnuki@amazon.com | finished in 4h22m0s |
| 2026-03-14 17:02 UTC | af_key: validate families in pfkey_send_migrate() | 1 | edumazet@google.com | finished in 4h22m0s |
| 2026-03-14 06:23 UTC | team: fix header_ops type confusion with non-Ethernet ports | 1 | jiayuan.chen@linux.dev | finished in 4h17m0s |
| 2026-03-13 21:27 UTC | wifi: libertas: add USB anchors for TX/RX paths | 1 | halves@igalia.com | finished in 53m0s |
| 2026-03-13 17:07 UTC | ext4: fix partial cluster handling when s_first_data_block != 0 | 2 | koike@igalia.com | finished in 3h51m0s |
| 2026-03-13 15:18 UTC | ext4: fix bigalloc cluster arithmetic when s_first_data_block != 0 | 1 | koike@igalia.com | finished in 4h6m0s |
| 2026-03-13 14:16 UTC | net: usb: aqc111: Do not perform PM inside suspend callback | 2 | zlatistiv@gmail.com | finished in 2h2m0s |
| 2026-03-13 09:24 UTC | wifi: mac80211: check tdls flag in ieee80211_tdls_oper | 2 | kartikey406@gmail.com | finished in 1h58m0s |
| 2026-03-12 10:43 UTC | net: use skb_header_pointer() only for DODGY TCPv4 GSO skbs | 3 | yss2813483011xxl@gmail.com | finished in 4h30m0s |
| 2026-03-12 09:29 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 5 | jiayuan.chen@linux.dev | finished in 5h20m0s |
| 2026-03-11 21:13 UTC | hfs: Validate CNIDs in hfs_read_inode | 4 | contact@gvernon.com | finished in 4h25m0s |
| 2026-03-11 07:06 UTC | net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect | 2 | jiayuan.chen@linux.dev | finished in 4h6m0s |
| 2026-03-11 02:24 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 4 | jiayuan.chen@linux.dev | finished in 5h4m0s |
| 2026-03-10 16:00 UTC | wifi: mac80211: fix WARN_ON_ONCE in ieee80211_tdls_oper | 1 | kartikey406@gmail.com | finished in 1h56m0s |
| 2026-03-10 12:00 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 3 | jiayuan.chen@linux.dev |
finished
in 4h13m0s
[3 findings] |
| 2026-03-10 11:05 UTC | mm/userfaultfd: fix hugetlb fault mutex hash calculation | 4 | jianhuizzzzz@gmail.com | finished in 4h17m0s |
| 2026-03-10 10:13 UTC | net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect | 1 | jiayuan.chen@linux.dev | finished in 4h31m0s |
| 2026-03-10 00:08 UTC | hfs: Validate CNIDs in hfs_read_inode | 3 | contact@gvernon.com | finished in 4h19m0s |
| 2026-03-09 15:59 UTC | atm: lec: fix use-after-free in sock_def_readable() | 2 | kartikey406@gmail.com | finished in 1h44m0s |
| 2026-03-09 12:39 UTC | net: sched: cls_u32: Avoid memcpy() false-positive warning in u32_init_knode() | 2 | jiayuan.chen@linux.dev | finished in 4h24m0s |
| 2026-03-09 09:36 UTC | atm: lec: fix use-after-free in sock_def_readable() | 1 | kartikey406@gmail.com | finished in 2h16m0s |
| 2026-03-09 07:56 UTC | KVM: pfncache: Fix uhva validity check in kvm_gpc_is_valid_len() | 1 | phind.uet@gmail.com | finished in 52m0s |
| 2026-03-09 03:30 UTC | mm/userfaultfd: fix hugetlb fault mutex hash calculation | 3 | jianhuizzzzz@gmail.com | finished in 4h6m0s |
| 2026-03-09 03:06 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 5 | jiayuan.chen@linux.dev | finished in 4h7m0s |
| 2026-03-09 02:38 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 2 | jiayuan.chen@linux.dev | finished in 4h7m0s |
| 2026-03-08 23:42 UTC | md/raid0: use kvzalloc/kvfree for strip_zone and devlist allocations | 1 | gourry@gourry.net | finished in 3h59m0s |
| 2026-03-08 08:33 UTC | net: use skb_header_pointer() in gso_features_check() for TCPv4 GSO | 2 | yss2813483011xxl@gmail.com | finished in 4h10m0s |
| 2026-03-07 16:29 UTC | net: clear mangleid_features for SKB_GSO_DODGY TCPv4 | 1 | yss2813483011xxl@gmail.com | finished in 4h16m0s |
| 2026-03-07 09:00 UTC | netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators | 1 | kartikey406@gmail.com | finished in 1h58m0s |
| 2026-03-07 06:42 UTC | kernel/fork: validate exit_signal in clone() syscall | 1 | kartikey406@gmail.com | finished in 1h21m0s |
| 2026-03-07 04:39 UTC | netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry | 1 | kartikey406@gmail.com | finished in 1h52m0s |
| 2026-03-07 03:21 UTC | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() | 1 | jiayuan.chen@linux.dev | finished in 4h4m0s |
| 2026-03-07 01:03 UTC | hfsplus: fix uninit-value by validating catalog record size | 6 | kartikey406@gmail.com | finished in 4h26m0s |
| 2026-03-06 20:01 UTC | wifi: mac80211: fix static key race condition in aql_enable_write() | 1 | jpoimboe@kernel.org | finished in 4h20m0s |
| 2026-03-06 14:03 UTC | mm/userfaultfd: fix hugetlb fault mutex hash calculation | 1 | jianhuizzzzz@gmail.com | finished in 4h4m0s |
| 2026-03-06 13:59 UTC | mm/userfaultfd: fix hugetlb fault mutex hash calculation | 1 | jianhuizz@qq.com | finished in 4h3m0s |
| 2026-03-06 07:24 UTC | wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. | 2 | kuniyu@google.com | finished in 4h30m0s |
| 2026-03-06 01:31 UTC | ext4: avoid infinite loops caused by residual data | 5 | eadavis@qq.com | finished in 4h18m0s |