| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-03 01:11 UTC | netfilter: validate L4 headers after userspace packet writes | 4 | zhilinz@nebusec.ai | finished in 4h28m0s |
| 2026-08-03 00:29 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 5 | zhilinz@nebusec.ai | finished in 4h29m0s |
| 2026-08-02 18:49 UTC | net: ip_tunnel: reject excessive tunnel stacking headroom | 3 | zihanx@nebusec.ai | finished in 4h18m0s |
| 2026-08-02 09:23 UTC | mac802154: Fix beacon worker UAF | 1 | zihanx@nebusec.ai | finished in 2h23m0s |
| 2026-08-01 14:27 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 4 | zihanx@nebusec.ai | finished in 5h6m0s |
| 2026-08-01 13:59 UTC | bpf: Fix out-of-bounds read in bpf_tcp_gen_syncookie | 1 | enjou1224z@gmail.com | finished in 4h24m0s |
| 2026-08-01 13:42 UTC | net/sched: fix qdisc graft hierarchy validation | 2 | enjou1224z@gmail.com | finished in 4h39m0s |
| 2026-08-01 12:10 UTC | netfilter: ipset: serialize kernel-side put-byindex with swap | 1 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-08-01 11:25 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 4 | zhilinz@nebusec.ai |
finished
in 1h21m0s
[1 findings] |
| 2026-07-31 21:08 UTC | net: skbuff: reject skb header offset updates that truncate | 2 | zihanx@nebusec.ai | finished in 4h44m0s |
| 2026-07-31 16:46 UTC | xsk: account uncharged AF_XDP ring allocations to memcg | 3 | zihanx@nebusec.ai | finished in 4h40m0s |
| 2026-07-31 13:44 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 3 | zihanx@nebusec.ai | finished in 4h31m0s |
| 2026-07-31 06:36 UTC | netfilter: bridge: release template ct on non-IP path | 1 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-31 06:21 UTC | net: cap advertised device headroom | 2 | zhilinz@nebusec.ai | finished in 4h16m0s |
| 2026-07-31 03:48 UTC | netfilter: validate L4 headers after userspace packet writes | 3 | zhilinz@nebusec.ai | finished in 4h30m0s |
| 2026-07-31 03:22 UTC | mm: shmem: reject page-aligned fallocate end overflow | 3 | zhilinz@nebusec.ai | finished in 4h31m0s |
| 2026-07-30 15:38 UTC | xsk: fix unaccounted ring allocations causing memory exhaustion | 2 | zihanx@nebusec.ai | finished in 4h20m0s |
| 2026-07-30 14:55 UTC | net: smc: smc_rx_splice() can underflow VM page refcounts | 2 | enjou1224z@gmail.com | finished in 2h16m0s |
| 2026-07-30 13:55 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 2 | zihanx@nebusec.ai | finished in 4h44m0s |
| 2026-07-30 12:59 UTC | ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops | 2 | zihanx@nebusec.ai | finished in 4h28m0s |
| 2026-07-30 07:30 UTC | netfilter: validate L4 headers after userspace packet writes | 2 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-07-30 07:00 UTC | llc: fix listener child socket leaks | 2 | zihanx@nebusec.ai | finished in 4h24m0s |
| 2026-07-30 03:17 UTC | ipmr: only copy pktinfo to cache reports | 2 | zhilinz@nebusec.ai | finished in 4h48m0s |
| 2026-07-29 19:50 UTC | rxrpc: fix encap_rcv skb accounting exhaustion | 2 | zihanx@nebusec.ai | finished in 4h23m0s |
| 2026-07-29 18:40 UTC | net: skbuff: reject skb header offset updates that truncate | 1 | zihanx@nebusec.ai | finished in 4h14m0s |
| 2026-07-29 15:40 UTC | net/sched: fix qdisc graft hierarchy validation | 1 | enjou1224z@gmail.com | finished in 4h21m0s |
| 2026-07-29 14:35 UTC | xsk: prevent AF_XDP ring resource exhaustion | 1 | zihanx@nebusec.ai | finished in 4h47m0s |
| 2026-07-29 14:07 UTC | mm: shmem: reject page-aligned fallocate end overflow | 2 | zhilinz@nebusec.ai | finished in 4h20m0s |
| 2026-07-29 13:56 UTC | ipvs: stop estimator after disabled calc phase | 3 | zhilinz@nebusec.ai | finished in 4h34m0s |
| 2026-07-29 13:53 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 3 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-29 13:48 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 1 | zihanx@nebusec.ai | skipped |
| 2026-07-29 11:28 UTC | tcp: diag: fix unbounded bucket lock hold in diag dump paths | 1 | zihanx@nebusec.ai | finished in 4h35m0s |
| 2026-07-29 09:16 UTC | packet: fix stale ring mode race | 3 | zihanx@nebusec.ai | finished in 4h20m0s |
| 2026-07-29 02:11 UTC | xfrm: save input state data before secpath resets | 2 | zhilinz@nebusec.ai | finished in 4h27m0s |
| 2026-07-28 15:17 UTC | ip6_tunnel: avoid racing encap setup | 1 | enjou1224z@gmail.com | finished in 5h17m0s |
| 2026-07-28 15:04 UTC | net: loopback: ensure Ethernet header is linear before eth_type_trans | 3 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-28 05:08 UTC | ipv4: fix divide-by-zero from undersized RTAX_ADVMSS | 1 | enjou1224z@gmail.com | finished in 4h59m0s |
| 2026-07-28 04:35 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 2 | zhilinz@nebusec.ai | finished in 4h51m0s |
| 2026-07-28 04:21 UTC | ipvs: stop estimator after disabled calc phase | 2 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-07-27 18:14 UTC | ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops | 1 | enjou1224z@gmail.com | finished in 4h31m0s |
| 2026-07-27 18:09 UTC | netfilter: ebtables: avoid unbounded counter allocations | 1 | enjou1224z@gmail.com | finished in 6h25m0s |
| 2026-07-27 18:03 UTC | net: reject IP sends with excessive headroom | 1 | enjou1224z@gmail.com | finished in 5h53m0s |
| 2026-07-27 17:58 UTC | netfilter: h323: fix helper NAT mangling | 1 | enjou1224z@gmail.com | finished in 3h30m0s |
| 2026-07-27 17:44 UTC | xfrm: hold input state around secpath resets | 1 | enjou1224z@gmail.com | finished in 5h20m0s |
| 2026-07-27 17:38 UTC | mm: shmem: reject impossible fallocate ranges | 1 | enjou1224z@gmail.com | finished in 6h1m0s |
| 2026-07-27 17:30 UTC | xfrm: fix xfrm_state_construct() auth-trunc leak | 1 | enjou1224z@gmail.com | finished in 6h1m0s |
| 2026-07-27 17:23 UTC | inet: frags: publish queues before arming timer | 1 | enjou1224z@gmail.com | finished in 5h50m0s |
| 2026-07-27 17:03 UTC | net/sched: sch_cake: validate 6in4 inner headers | 1 | enjou1224z@gmail.com | finished in 5h58m0s |
| 2026-07-27 16:58 UTC | ipvs: guard estimator enqueue until limits are set | 1 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-27 16:52 UTC | openvswitch: reject mismatched flow ID updates | 1 | enjou1224z@gmail.com | finished in 5h8m0s |
| 2026-07-27 16:44 UTC | ipmr: only copy pktinfo to cache reports | 1 | enjou1224z@gmail.com | finished in 4h46m0s |
| 2026-07-27 16:31 UTC | tcp: bound SYN-ACK timers to reqsk timeout range | 4 | enjou1224z@gmail.com | finished in 6h3m0s |
| 2026-07-27 16:19 UTC | packet: synchronize pressure clearing with ring reconfiguration | 2 | enjou1224z@gmail.com | finished in 5h28m0s |
| 2026-07-23 17:54 UTC | net/sched: act_vlan: pop_eth can strip non-Ethernet skbs and panic loopback | 2 | enjou1224z@gmail.com | finished in 5h2m0s |
| 2026-07-23 17:43 UTC | rxrpc: fix encap_rcv skb accounting exhaustion | 1 | enjou1224z@gmail.com | finished in 5h30m0s |
| 2026-07-23 17:38 UTC | ipv6: ip6mr: fix mr_table lifetime leak | 1 | enjou1224z@gmail.com | finished in 5h33m0s |
| 2026-07-23 17:29 UTC | llc: fix listener child socket leak on non-SABME frames | 1 | enjou1224z@gmail.com | finished in 1h46m0s |
| 2026-07-23 17:21 UTC | vsock: clear stale sk_err before listen() | 1 | enjou1224z@gmail.com | finished in 5h5m0s |
| 2026-07-23 16:52 UTC | net: bridge: fix fast-leave use-after-free | 1 | enjou1224z@gmail.com | finished in 5h49m0s |
| 2026-07-23 16:48 UTC | net: ipv6: clear suppressed fib6 rule result | 1 | enjou1224z@gmail.com | finished in 5h36m0s |
| 2026-07-23 16:38 UTC | tipc: avoid use-after-free in poll trace queue dumps | 3 | enjou1224z@gmail.com | skipped |
| 2026-07-22 16:48 UTC | mm/page_table_check: skip special zero mappings | 3 | enjou1224z@gmail.com | finished in 6h31m0s |
| 2026-07-22 16:40 UTC | openvswitch: Fix CT limit teardown use-after-free | 2 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-21 16:24 UTC | tipc: avoid use-after-free in poll trace queue dumps | 2 | enjou1224z@gmail.com | skipped |
| 2026-07-21 15:56 UTC | mm/page_table_check: skip zero pages | 2 | enjou1224z@gmail.com | finished in 5h51m0s |
| 2026-07-21 15:25 UTC | xfrm: avoid lock inversion in nat keepalive work | 1 | enjou1224z@gmail.com | finished in 5h10m0s |
| 2026-07-21 14:26 UTC | mm: fix out-of-bounds access in generic_access_phys | 1 | enjou1224z@gmail.com | finished in 5h29m0s |
| 2026-07-20 06:45 UTC | tipc: avoid UAF in trace queue dumps | 1 | enjou1224z@gmail.com | skipped |
| 2026-07-20 05:16 UTC | packet: synchronize pressure clearing with ring reconfiguration | 1 | enjou1224z@gmail.com | finished in 4h40m0s |
| 2026-07-20 02:14 UTC | openvswitch: Fix CT limit teardown use-after-free | 1 | enjou1224z@gmail.com | finished in 5h9m0s |
| 2026-07-18 07:12 UTC | xfrm: drop ESP-in-TCP packets with no ingress device | 1 | enjou1224z@gmail.com | finished in 2h49m0s |
| 2026-07-18 04:27 UTC | mm/page_table_check: widen map counters | 1 | enjou1224z@gmail.com | finished in 5h0m0s |