| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-10-30 14:05 UTC | udf: fix double allocation from the unallocated space table | 2 | matthias.goergens@gmail.com | finished in 3h55m0s |
| 2026-10-29 07:37 UTC | block: remove inode lock for buffered write | 1 | eadavis@sina.com | finished in 4h7m0s |
| 2026-10-28 15:27 UTC | md/raid1: Prevent excessively large memory allocations | 1 | gowtham398gs@gmail.com | finished in 4h43m0s |
| 2026-10-28 04:15 UTC | hugetlb: supports unmapping private mappings | 1 | eadavis@sina.com |
finished
in 4h31m0s
[1 findings] |
| 2026-10-23 16:29 UTC | configfs: fix slab-UAF Write in config_item_put | 2 | drifabdelmalekmohamedsaid@gmail.com | finished in 4h17m0s |
| 2026-10-23 02:23 UTC | virtio_balloon: drain update works on probe error paths | 3 | zhaimingbing@cmss.chinamobile.com | skipped |
| 2026-10-22 09:13 UTC | usb: gadget: u_serial: pin ports while TTYs are installed | 2 | krystianmkaniewski@gmail.com | finished in 2h0m0s |
| 2026-10-20 03:57 UTC | virtio_balloon: drain update works on probe error paths | 2 | zhaimingbing@cmss.chinamobile.com | skipped |
| 2026-10-19 12:35 UTC | media: dvb-usb-v2: ec168: Reject zero-length I2C reads | 1 | andi.shyti@kernel.org | finished in 4h6m0s |
| 2026-10-19 08:44 UTC | virtio_balloon: drain update works on probe error paths | 1 | zhaimingbing@cmss.chinamobile.com | finished in 2h7m0s |
| 2026-10-17 12:37 UTC | configfs: fix slab-UAF Write in config_item_put | 1 | drifabdelmalekmohamedsaid@gmail.com | finished in 4h11m0s |
| 2026-10-16 02:54 UTC | virtio_balloon: initialize wakeup_lock before virtqueues are set up | 1 | zhaimingbing@cmss.chinamobile.com | finished in 2h51m0s |
| 2026-10-14 17:05 UTC | blk-mq: fix out-of-bounds read in blk_mq_free_rqs | 2 | krystianmkaniewski@gmail.com | finished in 3h57m0s |
| 2026-10-14 08:40 UTC | media: ttusb-dec: fix buffer overflow in ttusb_dec_send_command() | 1 | syzbot@kernel.org | finished in 3h48m0s |
| 2026-10-13 19:39 UTC | fs/ntfs3: use ni_lock_dir() in ntfs_readdir() | 1 | syzbot@kernel.org | finished in 3h53m0s |
| 2026-10-06 06:12 UTC | sched/core: Do not touch SMT siblings that have not joined the core yet | 1 | snishika@redhat.com | finished in 4h18m0s |
| 2026-10-05 15:12 UTC | netfilter: nft_synproxy: only handle pure SYN and ACK packets | 2 | ngocthang2710.1999@gmail.com | finished in 4h7m0s |
| 2026-10-04 16:06 UTC | netfilter: nft_synproxy: only handle pure SYN and ACK packets | 1 | ngocthang2710.1999@gmail.com | finished in 4h11m0s |
| 2026-10-02 16:30 UTC | nvme: keep the effects log per namespace path, not in the shared head | 1 | ngocthang2710.1999@gmail.com | finished in 4h13m0s |
| 2026-10-02 15:54 UTC | usb: gadget: u_serial: pin ports while TTYs are installed | 1 | syzbot@kernel.org | finished in 3h50m0s |
| 2026-10-02 04:26 UTC | udf: fix double allocation from the unallocated space table | 1 | matthias.goergens@gmail.com | finished in 3h50m0s |
| 2026-09-30 18:45 UTC | srcu: Drop spurious WARN_ON() in cleanup_srcu_struct() | 1 | syzbot@kernel.org | finished in 3h47m0s |
| 2026-09-30 10:25 UTC | jfs: validate dmap start before block allocation | 1 | syzbot@kernel.org | finished in 3h56m0s |
| 2026-09-29 07:39 UTC | Input: yealink - abort URB submission on fatal errors | 1 | syzbot@kernel.org | finished in 3h46m0s |
| 2026-09-28 07:49 UTC | mm/filemap: queue non-exclusive folio waiters ahead of exclusive | 1 | clkernel@pm.me | skipped |
| 2026-09-28 03:00 UTC | rxrpc: Put aborted conn for challenge packet | 2 | eadavis@sina.com | finished in 2h31m0s |
| 2026-09-25 09:29 UTC | SUNRPC: Use TASK_FREEZABLE_UNSAFE in __rpc_execute() | 1 | syzbot@kernel.org | finished in 3h51m0s |
| 2026-09-24 20:41 UTC | memstick: core: wait for request completion before freeing card | 1 | rajojha047@gmail.com | skipped |
| 2026-09-24 19:29 UTC | memstick: core: wait for request completion before freeing card | 1 | rajojha047@gmail.com | skipped |
| 2026-09-24 08:49 UTC | ring-buffer: Fix false warning in ring_buffer_map_get_reader() | 2 | krystianmkaniewski@gmail.com | finished in 3h5m0s |
| 2026-09-23 04:10 UTC | rxrpc: add missing unbundle old conn | 1 | eadavis@sina.com | finished in 4h22m0s |
| 2026-09-22 18:17 UTC | ublk: hold RCU read lock in ublk_try_buf_match() | 1 | paolobertinetti200f4@proton.me | finished in 1h48m0s |
| 2026-09-21 20:40 UTC | macsec: initialize SecY before registering the netdevice | 3 | devnull@kernel.org | finished in 4h2m0s |
| 2026-09-21 15:55 UTC | ipv4: guard inetdev_event() against a NULL from inetdev_init() | 1 | yunseong.kim@est.tech | finished in 4h20m0s |
| 2026-09-20 15:50 UTC | mm/shmem: don't release a swapin-error marker as a swap entry | 1 | devnexen@gmail.com | finished in 4h27m0s |
| 2026-09-18 19:01 UTC | macsec: initialize SecY before registering the netdevice | 2 | devnull@kernel.org | finished in 3h55m0s |
| 2026-09-18 14:34 UTC | ring-buffer: Fix false warning in ring_buffer_map_get_reader() | 1 | syzbot@kernel.org | finished in 4h2m0s |
| 2026-09-17 08:04 UTC | scsi: sg: Fix shift-out-of-bounds in sg_build_indirect() | 1 | syzbot@kernel.org | finished in 3h57m0s |
| 2026-09-15 06:04 UTC | rhashtable: Use separate lockdep keys for each lock | 1 | herbert@gondor.apana.org.au | finished in 4h37m0s |
| 2026-09-14 09:50 UTC | HID: amd_sfh: Validate PCI BAR size before mapping | 2 | sst@poczta.fm | finished in 2h36m0s |
| 2026-09-11 23:57 UTC | macsec: initialize SecY before registering the netdevice | 1 | devnull@kernel.org | finished in 4h4m0s |
| 2026-09-10 10:19 UTC | blk-mq: fix out-of-bounds read in blk_mq_free_rqs | 1 | syzbot@kernel.org | finished in 5h32m0s |
| 2026-09-10 08:04 UTC | wifi: cfg80211: do not support direct add of station to AP_VLAN interfaces | 2 | sst@poczta.fm | finished in 4h59m0s |
| 2026-09-09 09:03 UTC | fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga | 1 | brauner@kernel.org | finished in 3h58m0s |
| 2026-09-08 11:52 UTC | rxrpc: Fix use-after-free in rxrpc_destroy_all_peers() | 3 | elver@google.com | finished in 5h9m0s |
| 2026-09-07 22:21 UTC | rxrpc: Fix use-after-free in rxrpc_destroy_all_peers() | 2 | elver@google.com |
finished
in 5h1m0s
[1 findings] |
| 2026-09-05 13:29 UTC | f2fs: handle NULL kiocb in write_begin | 1 | qwjhust@gmail.com | skipped |
| 2026-09-04 12:24 UTC | Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() | 1 | syzbot@kernel.org | finished in 4h24m0s |
| 2026-09-03 13:48 UTC | xarray: fix index jumping backwards in xas_find() | 1 | syzbot@kernel.org | finished in 4h5m0s |
| 2026-09-03 13:28 UTC | sunrpc: reject socket already in use in svc_addsock() | 1 | syzbot@kernel.org | finished in 1h54m0s |
| 2026-09-01 07:05 UTC | can: j1939: fix memory leaks caused by pending address claim timer | 1 | syzbot@kernel.org | finished in 5h1m0s |
| 2026-08-31 21:26 UTC | KVM: x86/xen: Bug fixes and long_mode cleanup | 3 | dwmw2@infradead.org | finished in 4h13m0s |
| 2026-08-31 14:41 UTC | rxrpc: Fix use-after-free in rxrpc_destroy_all_peers() | 1 | syzbot@kernel.org | finished in 5h3m0s |
| 2026-08-31 14:40 UTC | usb: atm: cxacru: fix NULL pointer dereference on uninitialized atm_dev | 1 | syzbot@kernel.org | finished in 2h52m0s |
| 2026-08-28 08:55 UTC | Bluetooth: hci_core: Fix race condition during device registration | 1 | syzbot@kernel.org | finished in 4h46m0s |
| 2026-08-28 08:45 UTC | usb-storage: alauda: Track media_initialized per port | 1 | syzbot@kernel.org | finished in 4h57m0s |
| 2026-08-27 06:36 UTC | HID: amd_sfh: Validate PCI BAR size before mapping | 1 | syzbot@kernel.org | finished in 2h37m0s |
| 2026-08-25 16:09 UTC | thunderbolt: Validate BAR 0 resource type and size | 1 | syzbot@kernel.org | finished in 3h14m0s |
| 2026-08-25 12:13 UTC | net/sched: act_gate: Limit the max value for cycletime | 3 | eadavis@qq.com | skipped |
| 2026-08-25 12:11 UTC | fat: Fix fat_ent_write() for reverting the value | 1 | hirofumi@mail.parknet.co.jp | finished in 4h26m0s |
| 2026-08-25 12:07 UTC | drm/cirrus-qemu: Validate BAR0 size during probe | 2 | sst@poczta.fm | finished in 3h37m0s |
| 2026-08-25 07:36 UTC | drm/cirrus-qemu: Validate BAR0 size during probe | 1 | syzbot@kernel.org | finished in 2h27m0s |
| 2026-08-23 04:07 UTC | net/sched: act_gate: Limit the max value for cycletime | 2 | eadavis@qq.com | finished in 4h13m0s |
| 2026-08-20 06:55 UTC | nfsd: prevent hung task in nfsd_nl_listener_set_doit() | 1 | syzbot@kernel.org | finished in 3h48m0s |
| 2026-08-20 04:21 UTC | gfs2: valid the length of rgrp header | 1 | eadavis@qq.com | finished in 4h29m0s |
| 2026-08-18 10:44 UTC | net/sched: act_gate: Limit the max value for cycletime | 1 | eadavis@qq.com | finished in 5h16m0s |
| 2026-08-17 14:09 UTC | media: usbtv: fix null-pointer dereference on disconnect | 1 | syzbot@kernel.org | finished in 3h54m0s |
| 2026-08-14 12:05 UTC | ALSA: core: Fix use-after-free in snd_card_do_free() | 1 | syzbot@kernel.org | finished in 4h15m0s |
| 2026-08-14 12:00 UTC | usb: gadget: uvc: check endpoint enabled state in uvcg_video_enable() | 1 | syzbot@kernel.org | finished in 4h15m0s |
| 2026-08-14 08:21 UTC | nullb: free zones when device is power-off | 1 | eadavis@qq.com | finished in 4h34m0s |
| 2026-08-14 02:16 UTC | netfs: break unbuffered write when netfs_alloc_subrequest() fails | 1 | eadavis@qq.com | finished in 2h17m0s |
| 2026-08-13 09:04 UTC | wifi: cfg80211: do not support direct add of station to AP_VLAN interfaces | 1 | sst@poczta.fm | finished in 4h20m0s |
| 2026-08-13 06:50 UTC | futex: Fix might_sleep() warning in futex_pivot_pending() | 1 | syzbot@kernel.org | finished in 3h44m0s |
| 2026-08-13 02:15 UTC | net/sched: taprio: enforce minimum software scheduling interval | 1 | syzbot@kernel.org | finished in 3h43m0s |
| 2026-08-12 13:00 UTC | tipc: defer local Nagle backlog xmit from receive path | 1 | syzbot@kernel.org | finished in 4h1m0s |
| 2026-08-12 10:05 UTC | drm/client: Avoid warning on vblank timeout during modeset client waits | 1 | syzbot@kernel.org | finished in 3h54m0s |
| 2026-08-12 08:16 UTC | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | 4 | krystianmkaniewski@gmail.com | finished in 4h11m0s |
| 2026-08-11 20:59 UTC | wifi: mac80211: guard drv_net_setup_tc() against unbound AP_VLAN sdata | 1 | ayushmanrout27@gmail.com |
finished
in 4h16m0s
[1 findings] |
| 2026-08-11 12:49 UTC | KVM: x86/xen: Fix Xen/GPC/PREEMPT_RT issues with rwlock_t | 4 | dwmw2@infradead.org | skipped |
| 2026-08-11 09:37 UTC | KVM: x86/xen: Clean up shared info / vcpu info handling | 2 | dwmw2@infradead.org | finished in 4h42m0s |
| 2026-08-10 13:31 UTC | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | 3 | krystianmkaniewski@gmail.com | finished in 4h22m0s |
| 2026-08-10 08:57 UTC | netdevsim: drop the ability to change max_vfs via debugfs | 2 | sst@poczta.fm | finished in 4h0m0s |
| 2026-08-07 14:25 UTC | firewire: ohci: fix NULL pointer dereference in ar_context_release | 1 | syzbot@kernel.org | finished in 2h46m0s |
| 2026-08-06 07:45 UTC | wifi: mac80211: prevent destroying non-TDLS stations in TDLS operations | 1 | syzbot@kernel.org | finished in 3h54m0s |
| 2026-08-05 20:35 UTC | wifi: cfg80211: fix BSS RB tree collision during channel switch | 1 | syzbot@kernel.org | finished in 4h30m0s |
| 2026-08-05 18:35 UTC | configfs: fix UAF race between rmdir and symlink | 1 | marcelomspessoto@gmail.com | finished in 5h21m0s |
| 2026-08-05 14:15 UTC | usb: gadgetfs: fix unbalanced refcount in gadgetfs_bind() error path | 1 | syzbot@kernel.org | finished in 4h19m0s |
| 2026-08-05 13:24 UTC | io_uring/zcrx: reject netdevices without ops lock support | 1 | pavankumaryalagada@gmail.com | finished in 2h27m0s |
| 2026-08-05 07:05 UTC | firmware_loader: Reject 0-size firmware in batched requests | 1 | syzbot@kernel.org | finished in 3h51m0s |
| 2026-08-03 15:05 UTC | usbip: fix use-after-free in event_handler() | 1 | syzbot@kernel.org | finished in 4h13m0s |
| 2026-08-03 12:11 UTC | ipvlan: keep lower device alive until private destruction | 2 | krystianmkaniewski@gmail.com | finished in 4h16m0s |
| 2026-07-31 13:24 UTC | usb: gadgetfs: fix use-after-free in ep_open() | 1 | syzbot@kernel.org | finished in 4h10m0s |
| 2026-07-31 10:15 UTC | usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() | 1 | syzbot@kernel.org | finished in 1h55m0s |
| 2026-07-31 10:14 UTC | libceph: validate banner payload length | 1 | syzbot@kernel.org | finished in 4h37m0s |
| 2026-07-31 10:06 UTC | xfrm: add missing RCU read lock in xfrm_send_migrate_state() | 1 | syzbot@kernel.org | finished in 3h53m0s |
| 2026-07-31 09:55 UTC | netdevsim: fix deadlock in nsim_bus_dev_max_vfs_write() | 1 | syzbot@kernel.org | finished in 4h39m0s |
| 2026-07-30 07:42 UTC | ocfs2: fix circular locking dependency in ocfs2_init_acl() | 1 | syzbot@kernel.org | finished in 4h13m0s |
| 2026-07-30 06:52 UTC | wifi: zd1211rw: reject secondary interfaces to prevent conflicts | 2 | sst@poczta.fm | finished in 1h27m0s |
| 2026-07-29 16:00 UTC | usb: gadget: f_uac1, f_uac2: fix invalid free and memory leak | 1 | syzbot@kernel.org | finished in 4h42m0s |
| 2026-07-29 14:55 UTC | jfs: validate BT_ROOT flag in xt_getpage and DT_GETPAGE | 1 | syzbot@kernel.org | finished in 4h15m0s |