| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-15 06:04 UTC | rhashtable: Use separate lockdep keys for each lock | 1 | herbert@gondor.apana.org.au | finished in 4h37m0s |
| 2026-09-14 09:50 UTC | HID: amd_sfh: Validate PCI BAR size before mapping | 2 | sst@poczta.fm | finished in 2h36m0s |
| 2026-09-11 23:57 UTC | macsec: initialize SecY before registering the netdevice | 1 | devnull@kernel.org | finished in 4h4m0s |
| 2026-09-10 10:19 UTC | blk-mq: fix out-of-bounds read in blk_mq_free_rqs | 1 | syzbot@kernel.org | finished in 5h32m0s |
| 2026-09-10 08:04 UTC | wifi: cfg80211: do not support direct add of station to AP_VLAN interfaces | 2 | sst@poczta.fm | finished in 4h59m0s |
| 2026-09-09 09:03 UTC | fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga | 1 | brauner@kernel.org | finished in 3h58m0s |
| 2026-09-08 11:52 UTC | rxrpc: Fix use-after-free in rxrpc_destroy_all_peers() | 3 | elver@google.com | finished in 5h9m0s |
| 2026-09-07 22:21 UTC | rxrpc: Fix use-after-free in rxrpc_destroy_all_peers() | 2 | elver@google.com |
finished
in 5h1m0s
[1 findings] |
| 2026-09-05 13:29 UTC | f2fs: handle NULL kiocb in write_begin | 1 | qwjhust@gmail.com | skipped |
| 2026-09-04 12:24 UTC | Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() | 1 | syzbot@kernel.org | finished in 4h24m0s |
| 2026-09-03 13:48 UTC | xarray: fix index jumping backwards in xas_find() | 1 | syzbot@kernel.org | finished in 4h5m0s |
| 2026-09-03 13:28 UTC | sunrpc: reject socket already in use in svc_addsock() | 1 | syzbot@kernel.org | finished in 1h54m0s |
| 2026-09-01 07:05 UTC | can: j1939: fix memory leaks caused by pending address claim timer | 1 | syzbot@kernel.org | finished in 5h1m0s |
| 2026-08-31 21:26 UTC | KVM: x86/xen: Bug fixes and long_mode cleanup | 3 | dwmw2@infradead.org | finished in 4h13m0s |
| 2026-08-31 14:41 UTC | rxrpc: Fix use-after-free in rxrpc_destroy_all_peers() | 1 | syzbot@kernel.org | finished in 5h3m0s |
| 2026-08-31 14:40 UTC | usb: atm: cxacru: fix NULL pointer dereference on uninitialized atm_dev | 1 | syzbot@kernel.org | finished in 2h52m0s |
| 2026-08-28 08:55 UTC | Bluetooth: hci_core: Fix race condition during device registration | 1 | syzbot@kernel.org | finished in 4h46m0s |
| 2026-08-28 08:45 UTC | usb-storage: alauda: Track media_initialized per port | 1 | syzbot@kernel.org | finished in 4h57m0s |
| 2026-08-27 06:36 UTC | HID: amd_sfh: Validate PCI BAR size before mapping | 1 | syzbot@kernel.org | finished in 2h37m0s |
| 2026-08-25 16:09 UTC | thunderbolt: Validate BAR 0 resource type and size | 1 | syzbot@kernel.org | finished in 3h14m0s |
| 2026-08-25 12:13 UTC | net/sched: act_gate: Limit the max value for cycletime | 3 | eadavis@qq.com | skipped |
| 2026-08-25 12:11 UTC | fat: Fix fat_ent_write() for reverting the value | 1 | hirofumi@mail.parknet.co.jp | finished in 4h26m0s |
| 2026-08-25 12:07 UTC | drm/cirrus-qemu: Validate BAR0 size during probe | 2 | sst@poczta.fm | finished in 3h37m0s |
| 2026-08-25 07:36 UTC | drm/cirrus-qemu: Validate BAR0 size during probe | 1 | syzbot@kernel.org | finished in 2h27m0s |
| 2026-08-23 04:07 UTC | net/sched: act_gate: Limit the max value for cycletime | 2 | eadavis@qq.com | finished in 4h13m0s |
| 2026-08-20 06:55 UTC | nfsd: prevent hung task in nfsd_nl_listener_set_doit() | 1 | syzbot@kernel.org | finished in 3h48m0s |
| 2026-08-20 04:21 UTC | gfs2: valid the length of rgrp header | 1 | eadavis@qq.com | finished in 4h29m0s |
| 2026-08-18 10:44 UTC | net/sched: act_gate: Limit the max value for cycletime | 1 | eadavis@qq.com | finished in 5h16m0s |
| 2026-08-17 14:09 UTC | media: usbtv: fix null-pointer dereference on disconnect | 1 | syzbot@kernel.org | finished in 3h54m0s |
| 2026-08-14 12:05 UTC | ALSA: core: Fix use-after-free in snd_card_do_free() | 1 | syzbot@kernel.org | finished in 4h15m0s |
| 2026-08-14 12:00 UTC | usb: gadget: uvc: check endpoint enabled state in uvcg_video_enable() | 1 | syzbot@kernel.org | finished in 4h15m0s |
| 2026-08-14 08:21 UTC | nullb: free zones when device is power-off | 1 | eadavis@qq.com | finished in 4h34m0s |
| 2026-08-14 02:16 UTC | netfs: break unbuffered write when netfs_alloc_subrequest() fails | 1 | eadavis@qq.com | finished in 2h17m0s |
| 2026-08-13 09:04 UTC | wifi: cfg80211: do not support direct add of station to AP_VLAN interfaces | 1 | sst@poczta.fm | finished in 4h20m0s |
| 2026-08-13 06:50 UTC | futex: Fix might_sleep() warning in futex_pivot_pending() | 1 | syzbot@kernel.org | finished in 3h44m0s |
| 2026-08-13 02:15 UTC | net/sched: taprio: enforce minimum software scheduling interval | 1 | syzbot@kernel.org | finished in 3h43m0s |
| 2026-08-12 13:00 UTC | tipc: defer local Nagle backlog xmit from receive path | 1 | syzbot@kernel.org | finished in 4h1m0s |
| 2026-08-12 10:05 UTC | drm/client: Avoid warning on vblank timeout during modeset client waits | 1 | syzbot@kernel.org | finished in 3h54m0s |
| 2026-08-12 08:16 UTC | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | 4 | krystianmkaniewski@gmail.com | finished in 4h11m0s |
| 2026-08-11 20:59 UTC | wifi: mac80211: guard drv_net_setup_tc() against unbound AP_VLAN sdata | 1 | ayushmanrout27@gmail.com |
finished
in 4h16m0s
[1 findings] |
| 2026-08-11 12:49 UTC | KVM: x86/xen: Fix Xen/GPC/PREEMPT_RT issues with rwlock_t | 4 | dwmw2@infradead.org | skipped |
| 2026-08-11 09:37 UTC | KVM: x86/xen: Clean up shared info / vcpu info handling | 2 | dwmw2@infradead.org | finished in 4h42m0s |
| 2026-08-10 13:31 UTC | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | 3 | krystianmkaniewski@gmail.com | finished in 4h22m0s |
| 2026-08-10 08:57 UTC | netdevsim: drop the ability to change max_vfs via debugfs | 2 | sst@poczta.fm | finished in 4h0m0s |
| 2026-08-07 14:25 UTC | firewire: ohci: fix NULL pointer dereference in ar_context_release | 1 | syzbot@kernel.org | finished in 2h46m0s |
| 2026-08-06 07:45 UTC | wifi: mac80211: prevent destroying non-TDLS stations in TDLS operations | 1 | syzbot@kernel.org | finished in 3h54m0s |
| 2026-08-05 20:35 UTC | wifi: cfg80211: fix BSS RB tree collision during channel switch | 1 | syzbot@kernel.org | finished in 4h30m0s |
| 2026-08-05 18:35 UTC | configfs: fix UAF race between rmdir and symlink | 1 | marcelomspessoto@gmail.com | finished in 5h21m0s |
| 2026-08-05 14:15 UTC | usb: gadgetfs: fix unbalanced refcount in gadgetfs_bind() error path | 1 | syzbot@kernel.org | finished in 4h19m0s |
| 2026-08-05 13:24 UTC | io_uring/zcrx: reject netdevices without ops lock support | 1 | pavankumaryalagada@gmail.com | finished in 2h27m0s |
| 2026-08-05 07:05 UTC | firmware_loader: Reject 0-size firmware in batched requests | 1 | syzbot@kernel.org | finished in 3h51m0s |
| 2026-08-03 15:05 UTC | usbip: fix use-after-free in event_handler() | 1 | syzbot@kernel.org | finished in 4h13m0s |
| 2026-08-03 12:11 UTC | ipvlan: keep lower device alive until private destruction | 2 | krystianmkaniewski@gmail.com | finished in 4h16m0s |
| 2026-07-31 13:24 UTC | usb: gadgetfs: fix use-after-free in ep_open() | 1 | syzbot@kernel.org | finished in 4h10m0s |
| 2026-07-31 10:15 UTC | usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() | 1 | syzbot@kernel.org | finished in 1h55m0s |
| 2026-07-31 10:14 UTC | libceph: validate banner payload length | 1 | syzbot@kernel.org | finished in 4h37m0s |
| 2026-07-31 10:06 UTC | xfrm: add missing RCU read lock in xfrm_send_migrate_state() | 1 | syzbot@kernel.org | finished in 3h53m0s |
| 2026-07-31 09:55 UTC | netdevsim: fix deadlock in nsim_bus_dev_max_vfs_write() | 1 | syzbot@kernel.org | finished in 4h39m0s |
| 2026-07-30 07:42 UTC | ocfs2: fix circular locking dependency in ocfs2_init_acl() | 1 | syzbot@kernel.org | finished in 4h13m0s |
| 2026-07-30 06:52 UTC | wifi: zd1211rw: reject secondary interfaces to prevent conflicts | 2 | sst@poczta.fm | finished in 1h27m0s |
| 2026-07-29 16:00 UTC | usb: gadget: f_uac1, f_uac2: fix invalid free and memory leak | 1 | syzbot@kernel.org | finished in 4h42m0s |
| 2026-07-29 14:55 UTC | jfs: validate BT_ROOT flag in xt_getpage and DT_GETPAGE | 1 | syzbot@kernel.org | finished in 4h15m0s |
| 2026-07-29 12:25 UTC | usb: gadget: dummy_hcd: prevent unbind via sysfs | 1 | syzbot@kernel.org | finished in 4h59m0s |
| 2026-07-29 09:19 UTC | usb: usbtest: fix NULL pointer dereference in usbtest_probe | 1 | syzbot@kernel.org | finished in 4h23m0s |
| 2026-07-29 09:04 UTC | usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs | 1 | syzbot@kernel.org | finished in 4h38m0s |
| 2026-07-29 08:04 UTC | wifi: zd1211rw: reject secondary interfaces to prevent conflicts | 1 | syzbot@kernel.org | finished in 1h29m0s |
| 2026-07-28 10:25 UTC | nbd: skip queue limits update for size-only reconfigure | 1 | syzbot@kernel.org | finished in 5h55m0s |
| 2026-07-28 08:45 UTC | btrfs: commit current transaction in btrfs_relocate_block_group | 1 | syzbot@kernel.org | finished in 5h20m0s |
| 2026-07-28 08:40 UTC | ipvlan: keep lower device alive until private destruction | 1 | syzbot@kernel.org | finished in 5h19m0s |
| 2026-07-27 17:30 UTC | fuse: abort connection on /dev/fuse flush to prevent deadlock | 1 | syzbot@kernel.org | finished in 5h52m0s |
| 2026-07-27 07:45 UTC | mac80211: reject station addition if AP or MLO link is inactive | 2 | sst@poczta.fm | finished in 5h46m0s |
| 2026-07-23 08:11 UTC | wifi: mac80211: reject station association if AP is not started | 1 | syzbot@kernel.org | finished in 5h56m0s |
| 2026-07-17 08:58 UTC | nbd: fix I/O hang on dead socket and rate-limit console error | 1 | syzbot@kernel.org | finished in 4h39m0s |
| 2026-07-15 12:29 UTC | fs/ntfs3: handle partial allocation in attr_data_get_block_locked() | 1 | syzbot@kernel.org | finished in 5h52m0s |
| 2026-07-01 00:27 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 5 | eadavis@qq.com | finished in 4h40m0s |
| 2026-06-30 14:11 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 4 | eadavis@qq.com | finished in 4h19m0s |
| 2026-06-30 13:09 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 3 | eadavis@qq.com | finished in 4h45m0s |
| 2026-06-30 09:11 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 2 | eadavis@qq.com | finished in 4h58m0s |
| 2026-06-30 08:41 UTC | bpf: Fix smp_processor_id() call trace for preemptible kernels | 1 | eadavis@qq.com | finished in 4h50m0s |
| 2026-06-29 12:59 UTC | Wireguard: Fix data-race in rx/tx counter | 2 | rafael@rcpassos.me | finished in 4h25m0s |
| 2026-06-28 20:38 UTC | Wireguard: Fix data-race in rx/tx counter | 1 | rafael@rcpassos.me | finished in 4h1m0s |
| 2026-06-27 11:20 UTC | netdevsim: remove debugfs files before freeing net_device | 1 | syzbot@kernel.org | finished in 4h4m0s |
| 2026-06-25 21:10 UTC | KVM: x86: Exempt in-kernel PIC from "disappearing" interrupt warning | 2 | syzbot@kernel.org | finished in 4h40m0s |
| 2026-06-24 13:15 UTC | KVM: x86: Drop WARN_ON_ONCE() for concurrently disappearing interrupts | 1 | syzbot@kernel.org | skipped |
| 2026-06-19 12:52 UTC | locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() | 1 | tglx@kernel.org | finished in 1h9m0s |
| 2026-06-12 06:05 UTC | wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create() | 2 | wuyankun@uniontech.com | finished in 2h29m0s |
| 2026-06-11 01:55 UTC | wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create() | 2 | wuyankun@uniontech.com | finished in 2h19m0s |
| 2026-06-10 09:22 UTC | wifi: ath6kl: fix invalid workqueue flags in ath6kl_usb_create() | 1 | wuyankun@uniontech.com | finished in 2h35m0s |
| 2026-06-05 15:32 UTC | wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request | 1 | teel4res@gmail.com | finished in 2h0m0s |
| 2026-06-01 08:26 UTC | mm/userfaultfd: clear uffd-wp PTE state when re-registering without WP | 1 | jianhuizzzzz@gmail.com | finished in 4h8m0s |
| 2026-05-29 14:25 UTC | eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list | 1 | zhanwei919@gmail.com | finished in 4h16m0s |
| 2026-05-27 20:18 UTC | ieee802154: fix kernel-infoleak in dgram_recvmsg() | 1 | syzbot@kernel.org | finished in 4h36m0s |
| 2026-05-27 09:58 UTC | drm/lease: Limit amount of maximum objects per lease. | 1 | maarten.lankhorst@linux.intel.com | finished in 4h21m0s |
| 2026-05-26 05:53 UTC | drm/lease: cap object_count to avoid order > MAX_PAGE_ORDER warning | 1 | devnexen@gmail.com | finished in 4h7m0s |
| 2026-05-24 10:27 UTC | eventpoll: delay file list memory deallocation until unlisting | 1 | eadavis@qq.com | finished in 4h8m0s |
| 2026-05-16 14:00 UTC | RDMA/rxe: add mutual exclusion in rxe_net_del() | 2 | eadavis@qq.com | skipped |
| 2026-05-07 12:50 UTC | RDMA/nldev: add mutual exclusion in nldev_dellink() | 1 | eadavis@qq.com | finished in 5h8m0s |
| 2026-04-30 15:26 UTC | tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 3 | kai.aizen.dev@gmail.com | finished in 4h45m0s |
| 2026-04-23 01:05 UTC | net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind | 2 | zhangdandan@uniontech.com | finished in 4h19m0s |
| 2026-04-23 00:49 UTC | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() | 2 | zhangdandan@uniontech.com | finished in 2h9m0s |