| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-06 09:59 UTC | hfs: validate catalog CNIDs before instantiating inodes | 3 | davemadmaxxx@gmail.com | - |
| 2026-07-06 03:58 UTC | ext4: validate readdir offset before accessing dirent | 2 | yaokai34@huawei.com | finished in 4h46m0s |
| 2026-07-03 20:52 UTC | KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock | 1 | clopez@suse.de | finished in 4h31m0s |
| 2026-07-03 04:54 UTC | ext4: use fsdata to track inline data write state and fix race | 4 | aditya.ansh182@gmail.com | finished in 4h21m0s |
| 2026-07-03 04:24 UTC | ext4: use fsdata to track inline data write state and fix race | 3 | aditya.ansh182@gmail.com | finished in 4h5m0s |
| 2026-07-03 01:51 UTC | ext4: validate readdir offset before accessing dirent | 1 | yaokai34@huawei.com | finished in 4h4m0s |
| 2026-07-02 18:38 UTC | hfs: validate catalog CNIDs before instantiating inodes | 1 | davemadmaxxx@gmail.com | finished in 5h13m0s |
| 2026-07-02 14:09 UTC | bpf, sockmap: fix copied_seq after partial TCP read | 1 | dongchenchen2@huawei.com | finished in 4h49m0s |
| 2026-07-02 05:07 UTC | ext4: use fsdata to track inline data write state and fix race | 2 | aditya.ansh182@gmail.com | finished in 4h53m0s |
| 2026-07-01 16:42 UTC | mac802154: remove interfaces with RCU list deletion | 2 | alhouseenyousef@gmail.com | finished in 4h43m0s |
| 2026-06-30 22:56 UTC | KVM: x86/hyperv: Fix racy usage of vcpu->arch.hyperv | 4 | seanjc@google.com | finished in 4h32m0s |
| 2026-06-30 21:18 UTC | ublk: snapshot batch commands before preparing I/O | 1 | alhouseenyousef@gmail.com | finished in 2h26m0s |
| 2026-06-30 21:18 UTC | mac802154: wait for RCU readers when removing interfaces | 1 | alhouseenyousef@gmail.com | finished in 4h40m0s |
| 2026-06-30 15:28 UTC | ext4: fix race conditions and clean up locking of inline data writes | 1 | aditya.ansh182@gmail.com | finished in 4h14m0s |
| 2026-06-30 12:02 UTC | mm/shmem: Fix data-race in shmem_fault | 4 | yahia.a.abdrabou@gmail.com | finished in 4h35m0s |
| 2026-06-30 10:12 UTC | net: usb: rtl8150: handle link status read failures | 4 | alhouseenyousef@gmail.com | finished in 2h27m0s |
| 2026-06-30 08:41 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 1 | eadavis@qq.com | finished in 4h50m0s |
| 2026-06-30 04:17 UTC | usb: atm: ueagle: fix use-after-free in uea_upload_pre_firmware() | 1 | kartikey406@gmail.com | finished in 3h34m0s |
| 2026-06-30 04:10 UTC | mm: pgtable: free kernel page tables via RCU to fix ptdump UAF | 1 | devnexen@gmail.com | finished in 5h13m0s |
| 2026-06-29 12:59 UTC | Wireguard: Fix data-race in rx/tx counter | 2 | rafael@rcpassos.me | finished in 4h25m0s |
| 2026-06-29 04:03 UTC | mm/shmem: Fix data-race in shmem_fault | 3 | yahia.a.abdrabou@gmail.com | skipped |
| 2026-06-29 03:35 UTC | mm/shmem: Fix data-race in shmem_fault | 2 | yahia.a.abdrabou@gmail.com | finished in 4h7m0s |
| 2026-06-28 20:38 UTC | Wireguard: Fix data-race in rx/tx counter | 1 | rafael@rcpassos.me | finished in 4h1m0s |
| 2026-06-28 16:50 UTC | net: usb: rtl8150: handle link status read failures | 3 | alhouseenyousef@gmail.com | finished in 1h56m0s |
| 2026-06-28 16:25 UTC | net: usb: rtl8150: handle link status read failures | 2 | alhouseenyousef@gmail.com | finished in 1h53m0s |
| 2026-06-28 13:08 UTC | wifi: mac80211: clear beaconing state in ieee80211_do_stop() | 1 | ghwns6743@gmail.com | finished in 3h58m0s |
| 2026-06-28 09:39 UTC | net: usb: rtl8150: handle link status read failures | 1 | alhouseenyousef@gmail.com | finished in 2h1m0s |
| 2026-06-28 09:28 UTC | wifi: carl9170: reject mismatched command response lengths | 1 | alhouseenyousef@gmail.com | finished in 2h7m0s |
| 2026-06-28 00:43 UTC | tmpfs: zero unused folio tail for long symlinks | 1 | alhouseenyousef@gmail.com | finished in 4h16m0s |
| 2026-06-28 00:28 UTC | netdevsim: remove ethtool debugfs files before freeing netdev | 1 | alhouseenyousef@gmail.com | finished in 4h12m0s |
| 2026-06-28 00:25 UTC | wifi: mac80211_hwsim: avoid treating MCS as legacy rate index | 1 | alhouseenyousef@gmail.com | finished in 4h13m0s |
| 2026-06-28 00:13 UTC | wifi: ath9k: avoid device access after async firmware request | 1 | alhouseenyousef@gmail.com | skipped |
| 2026-06-27 23:58 UTC | ieee802154: hwsim: free PIB after unregistering hardware | 1 | alhouseenyousef@gmail.com | finished in 4h16m0s |
| 2026-06-27 22:36 UTC | mm/shmem: Fix data-race in shmem_fault | 1 | yahia.a.abdrabou@gmail.com | finished in 4h0m0s |
| 2026-06-27 08:23 UTC | xfrm: reject optional IPTFS templates in outbound policies | 2 | antony.antony@secunet.com | finished in 4h5m0s |
| 2026-06-25 22:36 UTC | KVM: x86/hyperv: Fix racy usage of vcpu->arch.hyperv | 3 | seanjc@google.com |
finished
in 3h59m0s
[1 findings] |
| 2026-06-25 21:56 UTC | wifi: mac80211_hwsim: avoid division by zero in mac80211_hwsim_write_tsf() | 1 | serhatkumral1@gmail.com | finished in 4h39m0s |
| 2026-06-25 17:25 UTC | xfrm: reject optional IPTFS templates in outbound policies | 1 | antony.antony@secunet.com | finished in 4h2m0s |
| 2026-06-25 14:06 UTC | netfs: Miscellaneous fixes | 3 | dhowells@redhat.com | finished in 4h13m0s |
| 2026-06-25 09:24 UTC | xfrm: fix stack-out-of-bounds in xfrm_tmpl_resolve_one | 1 | edumazet@google.com | finished in 4h24m0s |
| 2026-06-24 18:20 UTC | net: avoid nested UP notifier events | 1 | kuba@kernel.org | finished in 4h5m0s |
| 2026-06-24 11:57 UTC | netfs: Miscellaneous fixes | 2 | dhowells@redhat.com | finished in 30m0s |
| 2026-06-24 07:32 UTC | net: clear transport header during tunnel decapsulation | 1 | edumazet@google.com |
finished
in 1h45m0s
[1 findings] |
| 2026-06-24 05:32 UTC | wifi: carl9170: bail out on invalid command response to fix stack-out-of-bounds write | 1 | skyexpoc@gmail.com | finished in 2h30m0s |
| 2026-06-23 17:30 UTC | tipc: syzbot related fixes | 2 | edumazet@google.com | finished in 4h19m0s |
| 2026-06-23 14:44 UTC | netdevsim: fix use-after-free in nsim_create and __nsim_dev_port_del | 2 | hrushirajg23@gmail.com | finished in 4h23m0s |
| 2026-06-22 22:27 UTC | vsock/virtio: fix msg_iter desync on transmission failure | 3 | tavip@google.com | finished in 4h12m0s |
| 2026-06-22 21:18 UTC | mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access | 3 | ketan.kishore@oss.qualcomm.com | finished in 4h9m0s |
| 2026-06-22 17:17 UTC | hfs, hfsplus: remove WARN_ON when new bnode already hashed | 1 | aditya.ansh182@gmail.com | skipped |
| 2026-06-22 17:10 UTC | tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() | 1 | edumazet@google.com | finished in 4h8m0s |
| 2026-06-21 23:52 UTC | nbd: don't warn when reclassifying a busy socket lock | 1 | kartikey406@gmail.com | skipped |
| 2026-06-21 09:04 UTC | hfsplus: fix duplicate bnode creation in hfs_bnode_create | 1 | sainathmanda777@gmail.com | finished in 4h8m0s |
| 2026-06-21 01:29 UTC | io_uring/memmap: bound io_pin_pages() by page array byte size | 1 | kartikey406@gmail.com | finished in 4h8m0s |
| 2026-06-20 06:49 UTC | netdevsim: fix use-after-free in __nsim_dev_port_del | 1 | hrushirajg23@gmail.com | finished in 4h3m0s |
| 2026-06-19 12:52 UTC | locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() | 1 | tglx@kernel.org | finished in 1h9m0s |
| 2026-06-18 22:19 UTC | fscrypt: Replace mk_users keyring with simple list | 1 | ebiggers@kernel.org | skipped |
| 2026-06-18 17:43 UTC | KVM: x86: Fix VM-Entry fail due to stale CR8 intercept | 3 | seanjc@google.com | finished in 4h0m0s |
| 2026-06-17 11:53 UTC | mm: pgtable: free kernel page tables via RCU to fix ptdump UAF | 5 | devnexen@gmail.com | finished in 4h33m0s |
| 2026-06-16 19:13 UTC | ipv4: fib_rule: Move fib4_rules_exit() to ->exit(). | 1 | kuniyu@google.com | finished in 5h11m0s |
| 2026-06-16 14:13 UTC | net: serialize netif_running() check in enqueue_to_backlog() | 1 | edumazet@google.com | finished in 4h16m0s |
| 2026-06-16 14:08 UTC | fs: support freeze/thaw/mark_dead/sync with shared devices | 2 | brauner@kernel.org | skipped |
| 2026-06-15 10:03 UTC | wifi: mac80211_hwsim: skip sta_add rc update on sub-20 chanctx | 2 | meihaipeng@uniontech.com | finished in 4h28m0s |
| 2026-06-15 09:02 UTC | xfrm: validate selector family and prefixlen during match | 1 | edumazet@google.com | finished in 4h28m0s |
| 2026-06-13 19:35 UTC | mm: pgtable: free kernel page tables via RCU to fix ptdump UAF | 4 | devnexen@gmail.com | finished in 4h25m0s |
| 2026-06-13 04:26 UTC | nbd: Reclassify sockets to avoid lockdep circular dependency | 1 | edumazet@google.com | finished in 4h15m0s |
| 2026-06-13 00:09 UTC | vsock/virtio: fix msg_iter desync on transmission failure | 2 | tavip@google.com | finished in 4h20m0s |
| 2026-06-12 23:06 UTC | KVM: x86/hyperv: Fix racy usage of vcpu->arch.hyperv | 2 | seanjc@google.com |
finished
in 4h34m0s
[1 findings] |
| 2026-06-12 17:23 UTC | mm: pgtable: protect lockless kernel page table walks with RCU | 3 | devnexen@gmail.com | finished in 4h44m0s |
| 2026-06-12 16:25 UTC | tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) | 1 | edumazet@google.com | finished in 4h27m0s |
| 2026-06-12 13:59 UTC | tipc: fix UAF in tipc_l2_send_msg() | 1 | edumazet@google.com | finished in 5h7m0s |
| 2026-06-12 13:07 UTC | bpf, skmsg: some fixes for skmsg | 3 | jiayuan.chen@linux.dev | finished in 4h47m0s |
| 2026-06-12 06:05 UTC | wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create() | 2 | wuyankun@uniontech.com | finished in 2h29m0s |
| 2026-06-12 05:56 UTC | xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] | 1 | edumazet@google.com | finished in 4h17m0s |
| 2026-06-12 05:05 UTC | mm: pgtable: protect lockless kernel page table walks with RCU | 2 | devnexen@gmail.com | finished in 4h48m0s |
| 2026-06-12 04:38 UTC | mm: pgtable: protect lockless kernel page table walks with RCU | 1 | devnexen@gmail.com | finished in 4h38m0s |
| 2026-06-11 15:27 UTC | net: watchdog: fix refcount tracking races | 3 | edumazet@google.com | finished in 4h44m0s |
| 2026-06-11 12:34 UTC | bpf, skmsg: some fixes for skmsg | 2 | jiayuan.chen@linux.dev | finished in 4h49m0s |
| 2026-06-11 01:55 UTC | wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create() | 2 | wuyankun@uniontech.com | finished in 2h19m0s |
| 2026-06-10 09:22 UTC | wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create() | 1 | wuyankun@uniontech.com | finished in 2h35m0s |
| 2026-06-10 06:17 UTC | net: fib: Fix two use-after-free in drivers during RCU dump. | 1 | kuniyu@google.com | finished in 4h38m0s |
| 2026-06-09 16:13 UTC | net: watchdog: fix refcount tracking races | 2 | edumazet@google.com | finished in 4h46m0s |
| 2026-06-09 06:20 UTC | ext4: fix kernel BUG in ext4_write_inline_data_end | 4 | aditya.ansh182@gmail.com | finished in 4h39m0s |
| 2026-06-09 04:59 UTC | ext4: fix kernel BUG in ext4_write_inline_data_end | 3 | aditya.ansh182@gmail.com | finished in 4h31m0s |
| 2026-06-09 04:17 UTC | ext4: fix kernel BUG in ext4_write_inline_data_end | 2 | aditya.ansh182@gmail.com | finished in 16m0s |
| 2026-06-09 00:48 UTC | vsock/virtio: restore msg_iter on transmission failure | 1 | tavip@google.com | finished in 5h3m0s |
| 2026-06-08 12:39 UTC | net: watchdog: fix refcount tracking races | 1 | edumazet@google.com | finished in 4h45m0s |
| 2026-06-08 06:52 UTC | ext4: fix kernel BUG in ext4_write_inline_data_end | 1 | aditya.ansh182@gmail.com | finished in 4h6m0s |
| 2026-06-07 20:30 UTC | bpf: Fix LRU NMI/tracepoint re-entry deadlock | 3 | mykyta.yatsenko5@gmail.com | finished in 4h16m0s |
| 2026-06-07 03:53 UTC | hfs: return -EFSCORRUPTED instead of BUG() in hfs_write_inode() | 2 | davemadmaxxx@gmail.com | finished in 4h0m0s |
| 2026-06-06 15:58 UTC | hfs: return -EIO instead of BUG() in hfs_write_inode() | 1 | davemadmaxxx@gmail.com | finished in 4h5m0s |
| 2026-06-05 19:19 UTC | vsock/virtio: fix memory leak in virtio_transport_recv_listen | 1 | divyakm@cs.unc.edu |
finished
in 4h20m0s
[1 findings] |
| 2026-06-05 15:32 UTC | wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request | 1 | teel4res@gmail.com | finished in 2h0m0s |
| 2026-06-03 18:55 UTC | bpf: Fix LRU NMI/tracepoint re-entry deadlock | 2 | mykyta.yatsenko5@gmail.com | finished in 4h45m0s |
| 2026-06-03 07:29 UTC | ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() | 1 | edumazet@google.com | finished in 2h19m0s |
| 2026-06-02 22:23 UTC | mm, swap: free the cluster extend table on teardown | 1 | devnexen@gmail.com | finished in 4h9m0s |
| 2026-06-02 12:14 UTC | mptcp: misc fixes for v7.1-rc7 | 2 | matttbe@kernel.org | finished in 4h3m0s |
| 2026-06-02 02:52 UTC | bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs | 2 | kartikey406@gmail.com | finished in 4h12m0s |
| 2026-06-02 00:26 UTC | fs/namei: fix UAF in pick_link() by unlazying before atime check | 1 | kartikey406@gmail.com | finished in 4h35m0s |
| 2026-06-01 18:45 UTC | hpfs: validate in-fnode EA bounds unconditionally | 1 | william@theesfeld.net | finished in 5h19m0s |
| 2026-06-01 18:20 UTC | tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). | 2 | kuniyu@google.com | finished in 4h51m0s |