| 2026-10-30 19:32 UTC |
RDMA/rxe: copy send WQE to kernel buffer (TOCTOU hardening) |
10 |
tristmd@gmail.com |
finished
in 4h28m0s
|
| 2026-10-30 18:34 UTC |
RDMA/rxe: copy send WQE to kernel buffer (TOCTOU hardening) |
9 |
tristmd@gmail.com |
finished
in 4h16m0s
|
| 2026-10-30 17:48 UTC |
ASoC: cancel pending delayed works on codec removal |
5 |
tristmd@gmail.com |
skipped
|
| 2026-10-30 17:04 UTC |
ASoC: cancel pending delayed works on codec removal |
4 |
tristmd@gmail.com |
skipped
|
| 2026-10-30 16:50 UTC |
RDMA/rxe: copy send WQE to kernel buffer before processing |
8 |
tristmd@gmail.com |
finished
in 4h1m0s
|
| 2026-10-30 15:41 UTC |
ASoC: cancel pending delayed works on codec removal |
3 |
tristmd@gmail.com |
skipped
|
| 2026-10-30 14:52 UTC |
xfrm: check state validity under lock in xfrm_state_find() |
2 |
tristmd@gmail.com |
finished
in 4h44m0s
|
| 2026-10-30 11:20 UTC |
can: peak_usb: fix use-after-free on PCAN-USB disconnect |
3 |
tristmd@gmail.com |
finished
in 4h8m0s
|
| 2026-10-29 21:25 UTC |
ASoC: cancel pending delayed works on codec removal |
2 |
tristmd@gmail.com |
skipped
|
| 2026-10-29 17:08 UTC |
drm/radeon: validate ATRM return buffer type and length |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-29 16:24 UTC |
nfc: llcp: use disable_work_sync and timer_shutdown_sync in local_cleanup |
2 |
tristmd@gmail.com |
finished
in 4h40m0s
|
| 2026-10-29 14:10 UTC |
HID: intel-thc-hid: validate ACPI buffer lengths |
3 |
tristmd@gmail.com |
skipped
|
| 2026-10-29 10:57 UTC |
ASoC: wm8994: drain delayed works on remove and probe error |
10 |
tristmd@gmail.com |
skipped
|
| 2026-10-29 10:25 UTC |
ASoC: wm8994: drain delayed works on remove and probe error |
9 |
tristmd@gmail.com |
skipped
|
| 2026-10-29 00:55 UTC |
ASoC: rt5659: cancel jack_detect_work on component remove |
9 |
tristmd@gmail.com |
skipped
|
| 2026-10-28 17:09 UTC |
media: saa7164: cancel workcmd after disabling IRQ in saa7164_finidev |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-28 01:26 UTC |
wifi: nxpwifi: validate scan response TLV sizes before indexed access |
2 |
tristmd@gmail.com |
skipped
|
| 2026-10-27 00:29 UTC |
Input: applespi - validate ACPI property buffer length |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-26 23:09 UTC |
iio: adc: pac1934: validate ACPI _DSM return type and bounds |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-26 23:01 UTC |
nfsd: pin client reference across async copy reaper cleanup |
1 |
tristmd@gmail.com |
finished
in 3h53m0s
|
| 2026-10-26 14:20 UTC |
iio: validate ACPI object types before package access |
2 |
tristmd@gmail.com |
skipped
|
| 2026-10-26 11:22 UTC |
ASoC: cancel pending delayed works on component remove |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-26 11:21 UTC |
wifi: carl9170: fix IE parsing loop bounds check |
1 |
tristmd@gmail.com |
finished
in 1h58m0s
|
| 2026-10-25 21:40 UTC |
HID: intel-thc-hid: validate ACPI buffer length before memcpy |
3 |
tristmd@gmail.com |
skipped
|
| 2026-10-25 21:02 UTC |
can: peak_usb: fix use-after-free on PCAN-USB disconnect and init failure |
2 |
tristmd@gmail.com |
finished
in 4h5m0s
|
| 2026-10-25 18:19 UTC |
wifi: wilc1000: zero-pad SDIO write buffer to block-aligned length |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-25 18:15 UTC |
wifi: nxpwifi: validate scan response TLV sizes before indexed access |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-25 18:11 UTC |
wifi: mwifiex: validate scan response TLV sizes before indexed access |
1 |
tristmd@gmail.com |
finished
in 2h0m0s
|
| 2026-10-25 18:07 UTC |
wifi: rsi: shut down roc_timer before freeing mac80211 hardware |
1 |
tristmd@gmail.com |
finished
in 1h46m0s
|
| 2026-10-25 18:03 UTC |
iio: light: cm32181: validate ACPI object type in cm32181_acpi_get_cpm() |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-25 15:47 UTC |
HID: intel-thc-hid: validate ACPI buffer length before memcpy |
2 |
tristmd@gmail.com |
skipped
|
| 2026-10-24 20:59 UTC |
Bluetooth: btintel: validate PPAG table element types |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-24 20:58 UTC |
HID: intel-thc-hid: validate ACPI buffer length before use |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-24 20:57 UTC |
drm/nouveau/disp/r535: validate ACPI backlight DSM return type |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-24 20:57 UTC |
media: v4l2-mem2mem: cancel job_work in v4l2_m2m_release |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-24 20:55 UTC |
platform/x86: hp-wmi: validate WMI return buffer length |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-23 19:59 UTC |
platform/x86: acer-wmi: validate ACPI object type in acer_gsensor_event() |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-23 19:59 UTC |
media: dvbdev: fix dangling minor pointer in dvb_register_device() error paths |
1 |
tristmd@gmail.com |
finished
in 4h10m0s
|
| 2026-10-23 19:54 UTC |
nfc: llcp: use timer_shutdown_sync to prevent timer rearm |
1 |
tristmd@gmail.com |
finished
in 57m0s
|
| 2026-10-23 19:54 UTC |
can: peak_usb: add missing dev_free callback to cancel restart_timer |
1 |
tristmd@gmail.com |
finished
in 4h30m0s
|
| 2026-10-23 19:53 UTC |
xfrm: fix output state cache TOCTOU in xfrm_state_find() |
1 |
tristmd@gmail.com |
finished
in 4h30m0s
|
| 2026-10-23 19:53 UTC |
ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek |
1 |
tristmd@gmail.com |
finished
in 4h39m0s
|
| 2026-10-23 19:52 UTC |
seg6: fix tun_src RCU lifetime on namespace teardown |
1 |
tristmd@gmail.com |
finished
in 4h0m0s
|
| 2026-10-20 15:41 UTC |
extcon: cancel wq_detcable delayed work on driver unbind |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-19 22:56 UTC |
s390/tape: cancel delayed work on device removal |
2 |
tristmd@gmail.com |
skipped
|
| 2026-10-19 22:26 UTC |
cpufreq: intel_pstate: cancel HWP notify work in driver cleanup |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-19 20:34 UTC |
s390/tape: cancel delayed work before freeing device |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-19 19:33 UTC |
scsi: ppa: cancel delayed work before freeing on detach |
2 |
tristmd@gmail.com |
skipped
|
| 2026-10-19 16:38 UTC |
scsi: ppa: cancel delayed work before freeing on detach |
1 |
tristmd@gmail.com |
skipped
|
| 2026-10-19 10:38 UTC |
USB: serial: sierra: validate URB length in instat callback |
2 |
tristmd@gmail.com |
finished
in 4h1m0s
|
| 2026-10-18 22:54 UTC |
media: USB: validate transfer lengths in URB callbacks |
1 |
tristmd@gmail.com |
finished
in 1h58m0s
|
| 2026-10-18 22:33 UTC |
USB: serial: sierra: validate URB length in instat callback |
1 |
tristmd@gmail.com |
finished
in 4h29m0s
|
| 2026-10-13 23:43 UTC |
netfilter: pin file with get_file_rcu() before reading f_cred |
1 |
tristmd@gmail.com |
finished
in 5h1m0s
[7 findings]
|
| 2026-10-08 09:37 UTC |
RDMA/rxe: fix send-path TOCTOU races on shared WQEs |
5 |
tristmd@gmail.com |
finished
in 4h1m0s
|
| 2026-10-07 21:27 UTC |
RDMA/rxe: Fix TOCTOU races on mmap'd send queue |
3 |
tristmd@gmail.com |
finished
in 4h9m0s
|
| 2026-10-07 16:28 UTC |
HID: core: fix device cleanup on allocation failure |
2 |
tristmd@gmail.com |
finished
in 1h15m0s
|
| 2026-10-07 16:17 UTC |
wifi: rtw89: fix IE length passed to cfg80211_find_ie() |
2 |
tristmd@gmail.com |
skipped
|
| 2026-09-04 08:49 UTC |
wifi: rtlwifi: fix OOB reads in IE parsing functions |
1 |
tristmd@gmail.com |
skipped
|
| 2026-09-04 08:05 UTC |
HID: core: fix device cleanup on allocation failure |
1 |
tristmd@gmail.com |
finished
in 1h18m0s
|
| 2026-09-02 12:30 UTC |
net: reduce XMIT_RECURSION_LIMIT under KASAN |
4 |
tristmd@gmail.com |
skipped
|
| 2026-08-30 14:31 UTC |
wifi: rtw89: fix OOB read in rtw89_core_cancel_6ghz_probe_tx() |
1 |
tristmd@gmail.com |
finished
in 1h40m0s
|
| 2026-08-30 14:23 UTC |
net: devmem: add missing permission check for bind-tx |
1 |
tristmd@gmail.com |
finished
in 2h49m0s
|
| 2026-08-16 13:55 UTC |
ice: fix metadata_dst refcount handling on representor teardown |
1 |
tristmd@gmail.com |
skipped
|
| 2026-08-15 13:52 UTC |
wifi: mwifiex: validate scan response extents |
2 |
pengpeng@iscas.ac.cn |
finished
in 46m0s
|
| 2026-07-27 20:04 UTC |
net: reduce XMIT_RECURSION_LIMIT under KASAN |
3 |
tristmd@gmail.com |
skipped
|
| 2026-07-11 20:47 UTC |
net: reduce XMIT_RECURSION_LIMIT under KASAN |
2 |
tristmd@gmail.com |
finished
in 4h59m0s
|
| 2026-07-11 13:47 UTC |
ipvlan: add xmit recursion protection |
1 |
tristmd@gmail.com |
finished
in 5h34m0s
|
| 2026-07-02 00:50 UTC |
wifi: ath6kl: fix OOB access from firmware ADDBA window size |
5 |
tristmd@gmail.com |
finished
in 1h41m0s
|
| 2026-06-26 00:04 UTC |
wifi: ath6kl: fix OOB access from firmware ADDBA window size |
4 |
tristmd@gmail.com |
finished
in 55m0s
|
| 2026-06-22 23:01 UTC |
Fix stale register bounds on LSM retval context load |
3 |
tristmd@gmail.com |
finished
in 4h7m0s
|
| 2026-06-19 12:00 UTC |
fuse: check fi is not NULL before calling fuse_passthrough_release() |
1 |
tristmd@gmail.com |
finished
in 4h25m0s
|
| 2026-06-19 11:02 UTC |
bpf: Reset register bounds before narrowing retval range in check_mem_access() |
2 |
tristmd@gmail.com |
finished
in 4h2m0s
|
| 2026-06-17 12:08 UTC |
bpf: Reset register bounds before narrowing retval range in check_mem_access() |
1 |
tristmd@gmail.com |
finished
in 5h2m0s
|
| 2026-06-02 17:16 UTC |
xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() |
2 |
tristmd@gmail.com |
finished
in 1h47m0s
|
| 2026-05-28 16:08 UTC |
net: shaper: use kfree_rcu() in net_shaper_flush() |
1 |
tristmd@gmail.com |
finished
in 4h38m0s
|
| 2026-05-28 16:03 UTC |
xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() |
1 |
tristmd@gmail.com |
finished
in 1h52m0s
|
| 2026-05-27 13:57 UTC |
netfilter: nft_tunnel: fix use-after-free on object destroy |
1 |
tristmd@gmail.com |
finished
in 1h43m0s
|
| 2026-05-05 11:12 UTC |
hfs/hfsplus: fix OOB access and uninit-value in bnode operations |
2 |
tristmd@gmail.com |
finished
in 4h8m0s
|
| 2026-05-04 19:14 UTC |
wifi: libertas: fix two OOB reads from firmware fields |
4 |
tristmd@gmail.com |
skipped
|
| 2026-05-04 18:22 UTC |
netfilter: xtables: fix module load and teardown races |
2 |
fw@strlen.de |
finished
in 4h47m0s
|
| 2026-05-02 07:56 UTC |
netfilter: xtables: fix module unload and teardown races |
1 |
fw@strlen.de |
finished
in 4h13m0s
|
| 2026-05-01 11:02 UTC |
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length |
1 |
tristmd@gmail.com |
finished
in 4h26m0s
|
| 2026-04-29 23:19 UTC |
netfilter: fix NULL ops dereference in iptable lazy init |
2 |
tristmd@gmail.com |
finished
in 4h50m0s
|
| 2026-04-29 17:56 UTC |
netfilter: fix NULL ops race in iptable lazy init |
1 |
tristmd@gmail.com |
finished
in 5h17m0s
|
| 2026-04-21 13:50 UTC |
wifi: libertas: firmware trust boundary hardening |
3 |
tristmd@gmail.com |
finished
in 1h42m0s
|
| 2026-04-21 13:50 UTC |
wifi: wcn36xx: firmware trust boundary hardening |
3 |
tristmd@gmail.com |
finished
in 1h43m0s
|
| 2026-04-21 13:50 UTC |
wifi: ath6kl: firmware trust boundary hardening |
3 |
tristmd@gmail.com |
finished
in 2h26m0s
|
| 2026-04-21 13:50 UTC |
wifi: wilc1000: firmware trust boundary hardening |
3 |
tristmd@gmail.com |
finished
in 1h43m0s
|
| 2026-04-21 13:49 UTC |
wifi: wlcore/wl18xx: firmware trust boundary hardening |
3 |
tristmd@gmail.com |
finished
in 1h33m0s
|
| 2026-04-21 13:49 UTC |
wifi: mwifiex: firmware trust boundary hardening |
3 |
tristmd@gmail.com |
finished
in 1h22m0s
|
| 2026-04-21 13:49 UTC |
wifi: carl9170: firmware trust boundary hardening |
3 |
tristmd@gmail.com |
finished
in 2h10m0s
|
| 2026-04-21 11:14 UTC |
wifi: rtw89: add bounds check on firmware mac_id in link lookup |
3 |
tristmd@gmail.com |
finished
in 1h41m0s
|
| 2026-04-21 11:14 UTC |
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer |
3 |
tristmd@gmail.com |
finished
in 1h45m0s
|
| 2026-04-21 11:01 UTC |
wifi: rtw89: add bounds check on firmware mac_id in link lookup |
3 |
tristmd@gmail.com |
skipped
|
| 2026-04-21 11:00 UTC |
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer |
3 |
tristmd@gmail.com |
skipped
|
| 2026-04-21 10:44 UTC |
wifi: rtw89: add bounds check on firmware mac_id in link lookup |
3 |
tristmd@gmail.com |
skipped
|
| 2026-04-21 10:35 UTC |
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer |
3 |
tristmd@gmail.com |
skipped
|
| 2026-04-18 13:40 UTC |
hfsplus: zero-initialize buffer in hfs_bnode_read |
1 |
tristmd@gmail.com |
finished
in 4h11m0s
|
| 2026-04-18 13:39 UTC |
hfs: validate bitmap record offset in hfs_bmap_alloc |
1 |
tristmd@gmail.com |
finished
in 4h13m0s
|
| 2026-04-17 19:39 UTC |
hfsplus: zero-initialize data buffer in hfs_bnode_read_u16 and hfs_bnode_read_u8 |
1 |
tristmd@gmail.com |
finished
in 1h36m0s
|