| 2026-10-26 12:07 UTC |
netfilter: x_tables: check target name before accessing verdict |
1 |
fmancera@suse.de |
in progress
|
| 2026-10-26 07:24 UTC |
nfc: digital: fix use-after-free in unregister |
1 |
xuyuqiabc@gmail.com |
finished
in 4h6m0s
|
| 2026-10-26 07:24 UTC |
nfc: llcp: fix use-after-free when purging local |
1 |
xuyuqiabc@gmail.com |
finished
in 4h8m0s
|
| 2026-10-26 02:49 UTC |
KEYS: Account for asymmetric key payload data in the quota |
4 |
xuyuqiabc@gmail.com |
finished
in 4h15m0s
|
| 2026-10-24 07:23 UTC |
seg6: validate state in netfilter continuations |
3 |
weir@nebusec.ai |
finished
in 4h11m0s
|
| 2026-10-23 05:55 UTC |
SUNRPC: reject AUTH_TLS on backchannel requests |
1 |
zhilinz@nebusec.ai |
finished
in 4h9m0s
|
| 2026-10-23 05:46 UTC |
tcp_bpf: sync copied_seq after pre-accept data |
1 |
zhilinz@nebusec.ai |
finished
in 3h53m0s
|
| 2026-10-23 05:26 UTC |
netfilter: ebtables: validate compat nentries |
1 |
zhilinz@nebusec.ai |
finished
in 4h7m0s
|
| 2026-10-22 18:47 UTC |
rxrpc: fix null-security challenge leak |
1 |
zhilinz@nebusec.ai |
finished
in 4h12m0s
|
| 2026-10-22 18:32 UTC |
xfrm: ipcomp: account full fragment pages in truesize |
1 |
zhilinz@nebusec.ai |
finished
in 4h10m0s
|
| 2026-10-22 18:29 UTC |
rxrpc: release IPv6 dst on route error |
1 |
zhilinz@nebusec.ai |
finished
in 4h40m0s
|
| 2026-10-22 07:58 UTC |
xsk: validate fill-ring producer index |
1 |
zhilinz@nebusec.ai |
finished
in 4h38m0s
|
| 2026-10-21 19:09 UTC |
ipset: ignore port ranges for portless protocols |
1 |
zhilinz@nebusec.ai |
finished
in 4h7m0s
|
| 2026-10-21 19:01 UTC |
ipmr: drop packets with unknown ingress VIF |
3 |
zhilinz@nebusec.ai |
finished
in 4h40m0s
|
| 2026-10-21 18:57 UTC |
tcp: release congestion control reference on rejection |
1 |
zhilinz@nebusec.ai |
finished
in 4h5m0s
|
| 2026-10-20 06:43 UTC |
ipmr: validate VIF indexes before offload lookup |
2 |
zhilinz@nebusec.ai |
finished
in 4h7m0s
|
| 2026-10-20 06:39 UTC |
ipmr: only copy pktinfo to cache reports |
6 |
zhilinz@nebusec.ai |
finished
in 4h42m0s
|
| 2026-10-20 06:35 UTC |
bpf: reject raw iteration over managed map fields |
2 |
zhilinz@nebusec.ai |
finished
in 4h9m0s
|
| 2026-10-18 06:27 UTC |
seg6: validate state in netfilter continuations |
2 |
weir@nebusec.ai |
finished
in 3h59m0s
|
| 2026-10-18 05:44 UTC |
bpf: Reject packet dynptr slices in mutating helpers and subprograms |
2 |
weir@nebusec.ai |
finished
in 4h4m0s
|
| 2026-10-17 05:39 UTC |
ipmr: only copy pktinfo to cache reports |
5 |
zhilinz@nebusec.ai |
finished
in 4h3m0s
|
| 2026-10-16 19:59 UTC |
rxrpc: fix encap_rcv skb accounting exhaustion |
10 |
zihanx@nebusec.ai |
finished
in 4h14m0s
|
| 2026-10-16 16:14 UTC |
netfilter: nf_dup: preserve guard across NFQUEUE reinjection |
9 |
zihanx@nebusec.ai |
finished
in 4h7m0s
|
| 2026-10-15 07:43 UTC |
netfilter: bound asynchronous packet duplication |
8 |
zihanx@nebusec.ai |
finished
in 4h8m0s
|
| 2026-10-14 16:58 UTC |
rxrpc: fix encap_rcv skb accounting exhaustion |
9 |
zihanx@nebusec.ai |
finished
in 4h27m0s
|
| 2026-10-14 12:24 UTC |
bpf: reject raw iteration over managed sk_storage values |
1 |
zhilinz@nebusec.ai |
finished
in 4h18m0s
|
| 2026-10-14 11:57 UTC |
bpf: reject unsafe pointers in TCP congestion control access |
1 |
zhilinz@nebusec.ai |
finished
in 2h12m0s
|
| 2026-10-14 11:44 UTC |
init: distinguish compressed ramdisks from image size |
1 |
zhilinz@nebusec.ai |
skipped
|
| 2026-10-13 14:33 UTC |
ipmr: validate VIF indexes before offload lookup |
1 |
zhilinz@nebusec.ai |
skipped
|
| 2026-10-13 14:29 UTC |
mptcp: misc fixes for v7.3-rc8 |
1 |
matttbe@kernel.org |
finished
in 3h50m0s
|
| 2026-10-12 00:48 UTC |
net: phonet: ensure headroom for aligned GPRS TX |
1 |
weir@nebusec.ai |
finished
in 4h1m0s
|
| 2026-10-11 11:28 UTC |
netfilter: nf_dup: preserve duplication guard across NFQUEUE |
7 |
zihanx@nebusec.ai |
finished
in 4h0m0s
|
| 2026-10-10 06:25 UTC |
devlink: fix reload error on netns teardown |
2 |
weir@nebusec.ai |
finished
in 3h52m0s
|
| 2026-10-08 16:59 UTC |
net: lwt_bpf: preserve encap header across skb head realloc |
1 |
weir@nebusec.ai |
finished
in 5h6m0s
|
| 2026-10-08 16:52 UTC |
ipv6: defrag: orphan skb before queuing |
3 |
weir@nebusec.ai |
finished
in 4h20m0s
|
| 2026-10-08 10:33 UTC |
netfilter: x_tables: avoid holding mutex over faultable user copies |
5 |
zihanx@nebusec.ai |
finished
in 1h10m0s
|
| 2026-10-08 09:26 UTC |
tcp: fix a few divide-by-zero in congestion control modules |
3 |
jiayuan.chen@linux.dev |
finished
in 4h15m0s
|
| 2026-10-08 07:08 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
6 |
zihanx@nebusec.ai |
finished
in 4h26m0s
|
| 2026-10-08 05:32 UTC |
rxrpc: fix encap_rcv skb accounting exhaustion |
8 |
zihanx@nebusec.ai |
finished
in 4h18m0s
|
| 2026-10-05 13:06 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
6 |
zihanx@nebusec.ai |
finished
in 4h21m0s
|
| 2026-10-05 05:22 UTC |
net: loopback: reject skbs with a short linear Ethernet header |
4 |
weir@nebusec.ai |
finished
in 4h14m0s
|
| 2026-10-03 18:14 UTC |
net: devlink: fix reload error on netns teardown |
1 |
weir@nebusec.ai |
finished
in 3h46m0s
|
| 2026-10-02 09:25 UTC |
ipv6: defrag: orphan skb before queuing |
2 |
weir@nebusec.ai |
finished
in 4h10m0s
|
| 2026-10-01 12:06 UTC |
netfilter: do not assume skb->sk is inet sk |
1 |
fw@strlen.de |
finished
in 4h25m0s
|
| 2026-10-01 11:29 UTC |
tcp: fix a few divide-by-zero in congestion control modules |
2 |
jiayuan.chen@linux.dev |
finished
in 4h7m0s
|
| 2026-10-01 07:54 UTC |
inet: frags: orphan non-wmem skbs before building frag_list |
1 |
weir@nebusec.ai |
finished
in 4h3m0s
|
| 2026-09-30 18:08 UTC |
seg6: validate state in netfilter continuations |
1 |
weir@nebusec.ai |
finished
in 4h4m0s
|
| 2026-09-30 13:29 UTC |
llc: fix listener child socket leaks |
13 |
zihanx@nebusec.ai |
finished
in 4h10m0s
|
| 2026-09-30 10:09 UTC |
tcp: fix a few divide-by-zero in congestion control modules |
1 |
jiayuan.chen@linux.dev |
finished
in 4h33m0s
|
| 2026-09-29 14:59 UTC |
netfilter: nf_tables: switch chain_types array to rcu |
1 |
fw@strlen.de |
finished
in 4h11m0s
|
| 2026-09-29 13:09 UTC |
netfilter: conntrack: fix unlikely UaF in gc worker |
1 |
fw@strlen.de |
finished
in 4h52m0s
|
| 2026-09-29 12:58 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
5 |
zihanx@nebusec.ai |
finished
in 4h6m0s
|
| 2026-09-28 08:27 UTC |
KEYS: Account for asymmetric key payload data in the quota |
2 |
xuyuqiabc@gmail.com |
finished
in 4h39m0s
|
| 2026-09-28 08:27 UTC |
tpm: reject duplicate PCR banks in tpm2_get_pcr_allocation |
2 |
xuyuqiabc@gmail.com |
finished
in 4h8m0s
|
| 2026-09-28 08:24 UTC |
tipc: fix connection lifetime during netns teardown |
3 |
xuyuqiabc@gmail.com |
finished
in 3h57m0s
|
| 2026-09-27 04:31 UTC |
netfilter: x_tables: avoid holding mutex over faultable user copies |
4 |
zihanx@nebusec.ai |
finished
in 4h6m0s
|
| 2026-09-26 17:04 UTC |
net: bridge: avoid recursive multicast cleanup |
1 |
weir@nebusec.ai |
finished
in 4h17m0s
|
| 2026-09-26 16:02 UTC |
rxrpc: fix encap_rcv skb accounting exhaustion |
7 |
zihanx@nebusec.ai |
finished
in 4h18m0s
|
| 2026-09-26 09:19 UTC |
netfilter: nf_dup: reject TEE and IPv4/IPv6/netdev nft dup in userns |
4 |
zihanx@nebusec.ai |
finished
in 3h59m0s
|
| 2026-09-25 19:36 UTC |
ipvs: wait grace period while reusing dest from trash |
2 |
weir@nebusec.ai |
finished
in 3h56m0s
|
| 2026-09-25 16:40 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
5 |
zihanx@nebusec.ai |
finished
in 3h58m0s
|
| 2026-09-24 16:32 UTC |
llc: fix listener child socket leaks |
12 |
zihanx@nebusec.ai |
finished
in 4h12m0s
|
| 2026-09-24 05:15 UTC |
net: gso: limit recursive IP-in-IP segmentation |
6 |
zihanx@nebusec.ai |
finished
in 3h55m0s
|
| 2026-09-24 01:55 UTC |
net: sock: serialize SO_RESERVE_MEM accounting |
1 |
weir@nebusec.ai |
finished
in 3h50m0s
|
| 2026-09-24 01:26 UTC |
llc: reserve device headroom for allocated frames |
2 |
weir@nebusec.ai |
finished
in 4h11m0s
|
| 2026-09-24 00:32 UTC |
l2tp: bound the reorder queue |
1 |
weir@nebusec.ai |
finished
in 4h11m0s
|
| 2026-09-23 09:54 UTC |
ipvs: avoid stack overflow from recursive connection expiration |
4 |
zihanx@nebusec.ai |
finished
in 4h18m0s
|
| 2026-09-22 19:18 UTC |
netfilter: bpf: reject invalid NAT manipulation types |
1 |
fmancera@suse.de |
finished
in 4h4m0s
|
| 2026-09-22 18:02 UTC |
wifi: mac80211: reject invalid 320 MHz CSA bandwidth |
1 |
weir@nebusec.ai |
finished
in 3h51m0s
|
| 2026-09-22 17:39 UTC |
netfilter: ecache: bound destroy event redelivery |
1 |
weir@nebusec.ai |
finished
in 3h46m0s
|
| 2026-09-22 15:38 UTC |
mac80211: start next ROC after purging an interface |
1 |
weir@nebusec.ai |
finished
in 3h59m0s
|
| 2026-09-22 09:52 UTC |
netfilter: nf_dup: disable duplication in user namespaces |
3 |
zihanx@nebusec.ai |
finished
in 5h23m0s
|
| 2026-09-22 09:41 UTC |
llc: reserve device headroom for allocated frames |
1 |
weir@nebusec.ai |
finished
in 4h10m0s
|
| 2026-09-22 03:40 UTC |
block: partitions: sysv68: validate slice count |
1 |
weir@nebusec.ai |
finished
in 4h11m0s
|
| 2026-09-21 09:41 UTC |
tipc: fix connection lifetime during netns teardown |
2 |
xuyuqiabc@gmail.com |
finished
in 3h52m0s
|
| 2026-09-21 02:52 UTC |
wifi: mac80211: validate TX status rate metadata |
4 |
xuyuqiabc@gmail.com |
finished
in 3h46m0s
|
| 2026-09-20 17:36 UTC |
net: arp: fix stack out-of-bounds read via unterminated device name |
2 |
weir@nebusec.ai |
finished
in 4h55m0s
|
| 2026-09-20 17:04 UTC |
net/handshake: Protect request hash lookups |
1 |
weir@nebusec.ai |
finished
in 4h17m0s
|
| 2026-09-20 13:35 UTC |
llc: fix listener child socket leaks |
10 |
zihanx@nebusec.ai |
finished
in 5h41m0s
|
| 2026-09-19 11:14 UTC |
net: gso: limit recursive IP-in-IP segmentation |
3 |
zihanx@nebusec.ai |
finished
in 4h10m0s
|
| 2026-09-19 08:48 UTC |
wifi: mac80211: handle empty FILS association request payload |
1 |
xuyuqiabc@gmail.com |
finished
in 1h42m0s
|
| 2026-09-19 08:47 UTC |
tpm: ignore duplicate PCR banks in tpm2_get_pcr_allocation |
1 |
xuyuqiabc@gmail.com |
finished
in 3h3m0s
|
| 2026-09-19 08:46 UTC |
wifi: mac80211: validate TX status rate metadata |
3 |
xuyuqiabc@gmail.com |
finished
in 3h56m0s
|
| 2026-09-19 08:46 UTC |
wifi: mac80211: minstrel_ht: validate fixed rate index |
1 |
xuyuqiabc@gmail.com |
finished
in 3h45m0s
|
| 2026-09-19 08:45 UTC |
KEYS: Account for asymmetric key payload data in the quota |
1 |
xuyuqiabc@gmail.com |
finished
in 5h19m0s
|
| 2026-09-19 08:45 UTC |
net: ipconfig: bound DHCP option construction |
1 |
xuyuqiabc@gmail.com |
skipped
|
| 2026-09-19 08:45 UTC |
bpf: crypto: check params size before reading reserved fields |
1 |
xuyuqiabc@gmail.com |
finished
in 1h51m0s
|
| 2026-09-19 06:14 UTC |
KEYS: Account for asymmetric key payload data in the quota |
3 |
xuyuqiabc@gmail.com |
finished
in 4h0m0s
|
| 2026-09-18 13:51 UTC |
net/sched: Avoid quadratic handle scan in qdisc_alloc_handle |
3 |
victor@mojatatu.com |
finished
in 3h56m0s
|
| 2026-09-18 09:32 UTC |
net: arp: fix stack out-of-bounds read via unterminated device name |
1 |
weir@nebusec.ai |
finished
in 4h39m0s
|
| 2026-09-18 09:26 UTC |
netfilter: nf_ip6_checksum: validate checksum offset |
1 |
weir@nebusec.ai |
finished
in 4h25m0s
|
| 2026-09-18 09:21 UTC |
tipc: fix connection lifetime during netns teardown |
1 |
xuyuqiabc@gmail.com |
finished
in 3h46m0s
|
| 2026-09-18 05:26 UTC |
wifi: mac80211: fix mesh fast xmit path deletion UAF |
3 |
zihanx@nebusec.ai |
finished
in 22m0s
|
| 2026-09-17 16:33 UTC |
bpf: fix TOCTOU in IPv6 SRH encapsulation |
1 |
weir@nebusec.ai |
finished
in 4h37m0s
|
| 2026-09-17 12:47 UTC |
net/sched: Avoid quadratic handle scan in qdisc_alloc_handle |
2 |
victor@mojatatu.com |
finished
in 4h9m0s
|
| 2026-09-17 10:05 UTC |
rxrpc: fix encap_rcv skb accounting exhaustion |
6 |
zihanx@nebusec.ai |
finished
in 4h4m0s
|
| 2026-09-17 08:11 UTC |
mptcp, bpf: reject bpf_sk_release() on msk |
1 |
jiayuan.chen@linux.dev |
finished
in 4h4m0s
|
| 2026-09-15 02:45 UTC |
net: tcp: account zero-copy receive VMA memory |
1 |
weir@nebusec.ai |
finished
in 57m0s
|
| 2026-09-14 13:09 UTC |
rxrpc: fix encap_rcv skb accounting exhaustion |
5 |
zihanx@nebusec.ai |
finished
in 4h59m0s
|
| 2026-09-13 14:12 UTC |
net: gso: limit recursive IP-in-IP segmentation |
1 |
zihanx@nebusec.ai |
finished
in 4h4m0s
|