| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-24 13:29 UTC | wifi: ath10k: fix OOB write from unbounded SDIO RX bundle count | 1 | tianchu.chen@linux.dev | finished in 1h7m0s |
| 2026-09-24 10:19 UTC | wifi: libertas: fix RX OOB access from device-controlled pkt_ptr | 1 | tianchu.chen@linux.dev | finished in 48m0s |
| 2026-09-24 09:03 UTC | wifi: cw1200: fix link_id_db OOB access via device-controlled link ID | 1 | tianchu.chen@linux.dev | skipped |
| 2026-09-23 14:43 UTC | wifi: mwifiex: bound SDIO fw dump count by memory table size | 2 | tianchu.chen@linux.dev | skipped |
| 2026-09-04 15:23 UTC | wifi: cw1200: fix TX padding OOB read leaking heap data to device | 1 | tianchu.chen@linux.dev | skipped |
| 2026-09-04 14:24 UTC | wifi: rsi: fix heap OOB write on key removal | 1 | tianchu.chen@linux.dev | finished in 2h23m0s |
| 2026-09-04 13:39 UTC | wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() | 1 | tianchu.chen@linux.dev | skipped |
| 2026-09-04 12:57 UTC | wifi: mwifiex: bound SDIO fw dump count by memory table size | 1 | tianchu.chen@linux.dev | skipped |
| 2026-06-30 10:59 UTC | drbd: reject oversized DataReply before signed conversion | 1 | tianchu.chen@linux.dev | finished in 2h29m0s |
| 2026-06-25 15:32 UTC | net: usb: cx82310_eth: stop parsing reboot marker as packet | 1 | tianchu.chen@linux.dev | finished in 2h10m0s |