| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-28 20:23 UTC | amt: send the relay's General Query directly from the receive path | 4 | omar@blockcast.net | finished in 3h55m0s |
| 2026-09-28 18:16 UTC | amt: send the relay's General Query directly from the receive path | 3 | omar@blockcast.net | finished in 3h57m0s |
| 2026-09-25 02:44 UTC | wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() | 1 | cenzhang@linux.microsoft.com | finished in 3h51m0s |
| 2026-09-25 01:52 UTC | sunrpc: reject AUTH_TLS on backchannel to prevent NULL-deref in svcauth_tls_accept | 1 | cenzhang@linux.microsoft.com | finished in 4h28m0s |
| 2026-09-23 04:17 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 4 | cenzhang@linux.microsoft.com | finished in 3h45m0s |
| 2026-09-22 21:41 UTC | amt: do not store tunnel pointer in skb control block | 2 | cenzhang@linux.microsoft.com | finished in 4h20m0s |
| 2026-09-11 14:03 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 2 | cenzhang@linux.microsoft.com | finished in 3h43m0s |
| 2026-09-10 14:25 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 3 | cenzhang@linux.microsoft.com | finished in 3h50m0s |
| 2026-09-10 13:50 UTC | can: kvaser_usb: validate command format before parsing in hydra receive path | 4 | cenzhang@linux.microsoft.com | finished in 2h22m0s |
| 2026-09-09 15:34 UTC | KEYS: encrypted: fix integer overflow of datablob_len | 3 | cenzhang@linux.microsoft.com | finished in 3h54m0s |
| 2026-09-09 13:53 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 2 | cenzhang@linux.microsoft.com | finished in 4h9m0s |
| 2026-09-01 18:31 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 1 | cenzhang@linux.microsoft.com | finished in 4h21m0s |
| 2026-09-01 18:06 UTC | ufs: validate cylinder group free bitmap offset | 1 | cenzhang@linux.microsoft.com | finished in 1h37m0s |
| 2026-08-27 23:55 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 3 | blbllhy@gmail.com | finished in 3h52m0s |
| 2026-08-27 05:18 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 1 | blbllhy@gmail.com | finished in 3h55m0s |
| 2026-08-26 20:17 UTC | xfrm: hold net_device reference under RCU in bundle creation | 2 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-26 17:13 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 2 | blbllhy@gmail.com |
finished
in 1h6m0s
[1 findings] |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 05:24 UTC | gtp: fix sk_created race conditions | 2 | blbllhy@gmail.com | finished in 3h42m0s |
| 2026-08-22 04:54 UTC | amt: fix tunnel list corruption on device stop | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-21 18:24 UTC | tcp: fix congestion control UAFs in do_tcp_getsockopt() | 1 | blbllhy@gmail.com | finished in 3h46m0s |
| 2026-08-20 20:02 UTC | xfrm: hold net_device reference under RCU in bundle creation | 1 | blbllhy@gmail.com | finished in 4h1m0s |
| 2026-08-20 02:07 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 2 | blbllhy@gmail.com | finished in 4h25m0s |
| 2026-08-20 01:06 UTC | netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-19 01:48 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 1 | blbllhy@gmail.com | finished in 4h20m0s |
| 2026-08-18 16:48 UTC | amt: do not store tunnel pointer in skb control block | 1 | blbllhy@gmail.com | finished in 4h32m0s |
| 2026-08-17 01:32 UTC | ipv6: avoid divide by zero in rt6_multipath_rebalance | 1 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-16 03:52 UTC | gtp: fix NULL pointer dereference in gtp0_handle_echo_resp() | 1 | blbllhy@gmail.com | finished in 4h23m0s |
| 2026-08-14 04:09 UTC | reboot: fix cad_pid use-after-free race | 4 | blbllhy@gmail.com | finished in 3h46m0s |
| 2026-08-13 21:53 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 4 | blbllhy@gmail.com | finished in 4h12m0s |
| 2026-08-06 20:47 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 3 | blbllhy@gmail.com | finished in 4h9m0s |
| 2026-07-30 22:20 UTC | net/openvswitch: check Ethernet header length in key_extract() | 5 | blbllhy@gmail.com | finished in 5h32m0s |
| 2026-07-29 20:06 UTC | macvlan: require init-userns CAP_NET_ADMIN to raise bc_queue_len | 2 | xmei5@asu.edu | finished in 4h17m0s |
| 2026-07-28 21:54 UTC | seg6: check lwtunnel state after nf hooks in seg6local | 2 | xmei5@asu.edu | finished in 4h35m0s |
| 2026-07-25 23:39 UTC | bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor | 2 | xmei5@asu.edu | finished in 6h40m0s |
| 2026-07-25 04:31 UTC | net/openvswitch: check Ethernet header length in key_extract() | 4 | blbllhy@gmail.com | finished in 3h23m0s |
| 2026-07-25 03:42 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 2 | blbllhy@gmail.com | finished in 5h10m0s |
| 2026-07-24 16:47 UTC | xsk: fix NULL pointer dereference in __xsk_rcv() | 1 | blbllhy@gmail.com | finished in 5h10m0s |
| 2026-07-23 23:37 UTC | net/openvswitch: check Ethernet header length in key_extract() | 3 | blbllhy@gmail.com | finished in 3h54m0s |
| 2026-07-23 04:49 UTC | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 2 | blbllhy@gmail.com | finished in 5h19m0s |
| 2026-07-23 04:23 UTC | net/openvswitch: check Ethernet header length before key_extract() | 2 | blbllhy@gmail.com | finished in 3h48m0s |
| 2026-07-22 22:38 UTC | netfilter: ipset: fix refcount race between list:set GC and swap | 1 | xmei5@asu.edu | finished in 5h45m0s |
| 2026-07-22 04:13 UTC | xsk: reject undersized tx_metadata at runtime validation | 2 | blbllhy@gmail.com | finished in 5h37m0s |
| 2026-07-22 00:29 UTC | nexthop: take nh->lock for f6i_list walks in replace check and notify | 1 | xmei5@asu.edu | finished in 6h1m0s |
| 2026-07-21 23:28 UTC | amt: linearize skb in amt_rcv() to fix use-after-free of cached headers | 1 | xmei5@asu.edu | finished in 5h20m0s |
| 2026-07-21 14:36 UTC | net/openvswitch: check Ethernet header length before key_extract() | 1 | blbllhy@gmail.com | finished in 2h58m0s |
| 2026-07-20 22:34 UTC | bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor | 1 | xmei5@asu.edu | finished in 6h4m0s |
| 2026-07-20 21:41 UTC | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | 1 | blbllhy@gmail.com | finished in 5h30m0s |
| 2026-07-20 20:44 UTC | seg6: fix NULL deref in input_action_end_dx{4,6}_finish() after nf hook | 1 | xmei5@asu.edu | finished in 5h39m0s |
| 2026-07-20 15:52 UTC | xsk: reject tx_metadata_len smaller than struct xsk_tx_metadata | 1 | blbllhy@gmail.com | finished in 5h26m0s |
| 2026-07-20 03:45 UTC | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 1 | blbllhy@gmail.com | finished in 5h15m0s |
| 2026-07-19 23:21 UTC | bonding: fix skb_under_panic in bond_ns_send() over stacked VLANs | 1 | xmei5@asu.edu | finished in 5h23m0s |
| 2026-07-19 22:15 UTC | netfilter: nft_payload: fix mask build for partial field offload | 1 | xmei5@asu.edu | finished in 5h1m0s |
| 2026-07-19 21:03 UTC | rds: tcp: unregister sysctl before tearing down listen socket | 2 | blbllhy@gmail.com | finished in 5h2m0s |
| 2026-07-18 18:34 UTC | rds: tcp: unregister sysctl before tearing down listen socket | 1 | blbllhy@gmail.com | finished in 4h31m0s |
| 2026-07-14 04:15 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 5 | blbllhy@gmail.com | finished in 5h12m0s |
| 2026-07-13 23:32 UTC | bpf: tcp: fix double sock release on batch realloc | 1 | xmei5@asu.edu | finished in 5h50m0s |
| 2026-07-13 22:15 UTC | nexthop: initialize extack in nh_res_bucket_migrate() | 1 | xmei5@asu.edu | finished in 1h48m0s |
| 2026-07-13 18:36 UTC | netfilter: nft_fib: bail out if input device is missing | 1 | xmei5@asu.edu | finished in 5h11m0s |
| 2026-07-11 00:59 UTC | net: sock: prevent integer overflow in sock_reserve_memory() | 1 | xmei5@asu.edu | finished in 6h45m0s |
| 2026-07-10 23:07 UTC | gtp: check skb_pull_data() return in gtp1u_send_echo_resp() | 1 | xmei5@asu.edu | finished in 4h58m0s |
| 2026-07-10 01:41 UTC | amt: refresh cached IP header pointers after MLD/IGMP checks | 1 | xmei5@asu.edu | finished in 5h1m0s |
| 2026-07-10 01:07 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 2 | blbllhy@gmail.com | finished in 5h22m0s |
| 2026-07-09 21:16 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 4 | blbllhy@gmail.com | finished in 5h7m0s |
| 2026-07-08 18:11 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 2 | xmei5@asu.edu | finished in 2h42m0s |
| 2026-07-08 18:02 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 3 | blbllhy@gmail.com | finished in 5h29m0s |
| 2026-07-07 20:32 UTC | sctp: validate stream count in sctp_process_strreset_inreq() | 1 | blbllhy@gmail.com | finished in 4h19m0s |
| 2026-07-07 15:11 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 2 | blbllhy@gmail.com | finished in 5h21m0s |
| 2026-07-07 15:06 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 2 | blbllhy@gmail.com | finished in 5h16m0s |
| 2026-07-06 23:33 UTC | vxlan: add missing NULL check for vxlan_sock in GRO path | 1 | xmei5@asu.edu | finished in 4h48m0s |
| 2026-07-06 23:28 UTC | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() | 1 | xmei5@asu.edu | finished in 2h51m0s |
| 2026-07-06 21:25 UTC | macvlan: cap IFLA_MACVLAN_BC_QUEUE_LEN to bound broadcast backlog | 1 | xmei5@asu.edu | finished in 5h44m0s |
| 2026-07-06 18:57 UTC | tipc: fix u16 MTU truncation in media and bearer MTU validation | 1 | blbllhy@gmail.com | finished in 1h17m0s |
| 2026-07-03 05:19 UTC | xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert | 2 | xmei5@asu.edu | finished in 4h25m0s |
| 2026-07-02 22:45 UTC | bpf: reject mini-sockets in bpf_sock_destroy() | 1 | xmei5@asu.edu | finished in 4h49m0s |
| 2026-07-02 18:58 UTC | xfrm: policy: use hlist_del_init_rcu in xfrm_hash_rebuild to avoid bydst poison | 1 | xmei5@asu.edu | finished in 4h38m0s |
| 2026-07-02 01:05 UTC | xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() | 1 | xmei5@asu.edu | finished in 1h23m0s |
| 2026-06-27 02:40 UTC | xfrm: fix sk_dst_cache double-free in xfrm_user_policy() | 1 | xmei5@asu.edu | finished in 4h3m0s |
| 2026-06-19 06:23 UTC | reserve_mem: add support for static memory | 2 | shyamsaini@linux.microsoft.com | finished in 4h26m0s |