| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-08-16 16:09 UTC | seg6: reset IP6CB after IPv6 decapsulation | 1 | zhilinz@nebusec.ai | finished in 4h42m0s |
| 2026-08-16 15:22 UTC | ipvs: bound LBLCR cache growth | 1 | zhilinz@nebusec.ai | finished in 4h26m0s |
| 2026-08-14 18:58 UTC | llc: fix listener child socket leaks before passive open completes | 4 | zihanx@nebusec.ai | finished in 3h58m0s |
| 2026-08-13 17:35 UTC | ipv4: fix a non-progressing fragmentation loop from undersized effective MTUs | 2 | weir@nebusec.ai | finished in 4h19m0s |
| 2026-08-13 17:05 UTC | ipv4: fix divide-by-zero from undersized RTAX_ADVMSS | 1 | weir@nebusec.ai | finished in 4h26m0s |
| 2026-08-12 16:36 UTC | ip: orphan prefetched skbs before multicast forwarding | 3 | zhilinz@nebusec.ai | finished in 5h2m0s |
| 2026-08-12 16:22 UTC | net: fix IP6GRE header length before capping tunnel headroom | 4 | zhilinz@nebusec.ai | finished in 4h11m0s |
| 2026-08-12 13:38 UTC | tcp: bound SYN-ACK timers to reqsk timeout range | 5 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-08-12 12:54 UTC | ipv6: fix use-after-free in ip6_finish_output2 | 1 | weir@nebusec.ai | finished in 4h39m0s |
| 2026-08-12 09:59 UTC | openvswitch: Fix CT limit teardown use-after-free | 6 | xuyuqiabc@gmail.com | finished in 3h56m0s |
| 2026-08-12 06:55 UTC | mptcp: fix request migration ownership | 4 | weir@nebusec.ai | finished in 4h40m0s |
| 2026-08-11 13:31 UTC | ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() | 2 | zhilinz@nebusec.ai | finished in 4h28m0s |
| 2026-08-11 12:40 UTC | ipv6: flowlabel: cap duplicate leases per socket | 2 | zhilinz@nebusec.ai | finished in 4h6m0s |
| 2026-08-11 09:55 UTC | openvswitch: Fix CT limit teardown use-after-free | 5 | xuyuqiabc@gmail.com | finished in 4h1m0s |
| 2026-08-10 16:43 UTC | net/sched: add get_fill_size callbacks for actions missing them | 1 | victor@mojatatu.com | finished in 4h45m0s |
| 2026-08-10 14:42 UTC | net/sched: act_ife: use mac_len for ingress header offset | 1 | victor@mojatatu.com | finished in 4h16m0s |
| 2026-08-09 09:44 UTC | net/sched: cls_bpf: reject dev-bound programs bound to a different device | 1 | jhs@mojatatu.com | finished in 4h10m0s |
| 2026-08-09 09:16 UTC | net: sched: gred: fix 32-bit backlog wrap in gred_enqueue | 1 | jhs@mojatatu.com | finished in 4h19m0s |
| 2026-08-09 09:09 UTC | net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain | 1 | jhs@mojatatu.com | finished in 4h34m0s |
| 2026-08-09 09:07 UTC | net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain | 1 | jhs@mojatatu.com | finished in 4h23m0s |
| 2026-08-08 08:40 UTC | ip6_tunnel: snapshot encap in xmit | 2 | weir@nebusec.ai | finished in 4h34m0s |
| 2026-08-08 08:01 UTC | ipv4: fix a non-progressing fragmentation loop from undersized RTAX_MTU | 1 | weir@nebusec.ai | finished in 4h12m0s |
| 2026-08-07 16:28 UTC | net/nfc: Fix Use-After-Free in nfc_llcp_general_bytes() | 1 | weir@nebusec.ai | finished in 4h55m0s |
| 2026-08-06 15:18 UTC | ip: orphan prefetched skbs before multicast forwarding | 2 | zhilinz@nebusec.ai | finished in 4h15m0s |
| 2026-08-06 13:21 UTC | net: cap advertised IP tunnel headroom | 3 | zhilinz@nebusec.ai | finished in 5h13m0s |
| 2026-08-06 11:14 UTC | mptcp: fix request migration ownership | 3 | weir@nebusec.ai | finished in 4h0m0s |
| 2026-08-05 17:59 UTC | llc: fix listener child socket leaks before passive open completes | 3 | zihanx@nebusec.ai | finished in 4h25m0s |
| 2026-08-05 16:26 UTC | openvswitch: Fix CT limit teardown use-after-free | 4 | enjou1224z@gmail.com | finished in 4h6m0s |
| 2026-08-05 04:51 UTC | xfrm: avoid lock inversion in nat keepalive work | 2 | zihanx@nebusec.ai | finished in 4h1m0s |
| 2026-08-04 14:29 UTC | bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie | 2 | enjou1224z@gmail.com | skipped |
| 2026-08-03 17:30 UTC | openvswitch: Fix CT limit teardown use-after-free | 3 | enjou1224z@gmail.com | finished in 4h34m0s |
| 2026-08-03 13:28 UTC | ipv6: xfrm: use full sockets in local error paths | 1 | zhilinz@nebusec.ai | finished in 5h18m0s |
| 2026-08-03 12:15 UTC | xdp: reject clones that overrun skb_shared_info tailroom | 1 | zhilinz@nebusec.ai | finished in 4h16m0s |
| 2026-08-03 11:22 UTC | ipv6: flowlabel: enforce the per-socket lease cap on reused labels | 1 | zhilinz@nebusec.ai | finished in 4h11m0s |
| 2026-08-03 06:12 UTC | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() | 1 | zhilinz@nebusec.ai | finished in 3h52m0s |
| 2026-08-03 05:34 UTC | ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() | 1 | zhilinz@nebusec.ai | finished in 3h57m0s |
| 2026-08-03 04:35 UTC | wifi: mac80211: keep paired old chanctx alive | 1 | zhilinz@nebusec.ai | finished in 4h14m0s |
| 2026-08-03 04:07 UTC | wifi: mac80211: serialize debugfs netdev rename with recreate | 1 | zhilinz@nebusec.ai | finished in 4h40m0s |
| 2026-08-03 03:28 UTC | wifi: mac80211: count only matching reservations in reserved switch | 1 | zhilinz@nebusec.ai | finished in 4h16m0s |
| 2026-08-03 02:47 UTC | ipv6: orphan prefetched skb before ip6_mr_input | 1 | zhilinz@nebusec.ai | finished in 4h36m0s |
| 2026-08-03 01:17 UTC | ipmr: only copy pktinfo to cache reports | 3 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-08-03 01:11 UTC | netfilter: validate L4 headers after userspace packet writes | 4 | zhilinz@nebusec.ai | finished in 4h28m0s |
| 2026-08-03 00:29 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 5 | zhilinz@nebusec.ai | finished in 4h29m0s |
| 2026-08-02 18:49 UTC | net: ip_tunnel: reject excessive tunnel stacking headroom | 3 | zihanx@nebusec.ai | finished in 4h18m0s |
| 2026-08-02 09:23 UTC | mac802154: Fix beacon worker UAF | 1 | zihanx@nebusec.ai | finished in 2h23m0s |
| 2026-08-01 14:27 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 4 | zihanx@nebusec.ai | finished in 5h6m0s |
| 2026-08-01 13:59 UTC | bpf: Fix out-of-bounds read in bpf_tcp_gen_syncookie | 1 | enjou1224z@gmail.com | finished in 4h24m0s |
| 2026-08-01 13:42 UTC | net/sched: fix qdisc graft hierarchy validation | 2 | enjou1224z@gmail.com | finished in 4h39m0s |
| 2026-08-01 12:10 UTC | netfilter: ipset: serialize kernel-side put-byindex with swap | 1 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-08-01 11:25 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 4 | zhilinz@nebusec.ai |
finished
in 1h21m0s
[1 findings] |
| 2026-07-31 21:08 UTC | net: skbuff: reject skb header offset updates that truncate | 2 | zihanx@nebusec.ai | finished in 4h44m0s |
| 2026-07-31 16:46 UTC | xsk: account uncharged AF_XDP ring allocations to memcg | 3 | zihanx@nebusec.ai | finished in 4h40m0s |
| 2026-07-31 13:44 UTC | netfilter: nf_conntrack: defer invalid log until after unlock | 3 | zihanx@nebusec.ai | finished in 4h31m0s |
| 2026-07-31 06:36 UTC | netfilter: bridge: release template ct on non-IP path | 1 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-31 06:21 UTC | net: cap advertised device headroom | 2 | zhilinz@nebusec.ai | finished in 4h16m0s |
| 2026-07-31 03:48 UTC | netfilter: validate L4 headers after userspace packet writes | 3 | zhilinz@nebusec.ai | finished in 4h30m0s |
| 2026-07-31 03:22 UTC | mm: shmem: reject page-aligned fallocate end overflow | 3 | zhilinz@nebusec.ai | finished in 4h31m0s |
| 2026-07-30 15:38 UTC | xsk: fix unaccounted ring allocations causing memory exhaustion | 2 | zihanx@nebusec.ai | finished in 4h20m0s |
| 2026-07-30 14:55 UTC | net: smc: smc_rx_splice() can underflow VM page refcounts | 2 | enjou1224z@gmail.com | finished in 2h16m0s |
| 2026-07-30 13:55 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 2 | zihanx@nebusec.ai | finished in 4h44m0s |
| 2026-07-30 12:59 UTC | ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops | 2 | zihanx@nebusec.ai | finished in 4h28m0s |
| 2026-07-30 07:30 UTC | netfilter: validate L4 headers after userspace packet writes | 2 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-07-30 07:00 UTC | llc: fix listener child socket leaks | 2 | zihanx@nebusec.ai | finished in 4h24m0s |
| 2026-07-30 03:17 UTC | ipmr: only copy pktinfo to cache reports | 2 | zhilinz@nebusec.ai | finished in 4h48m0s |
| 2026-07-29 19:50 UTC | rxrpc: fix encap_rcv skb accounting exhaustion | 2 | zihanx@nebusec.ai | finished in 4h23m0s |
| 2026-07-29 18:40 UTC | net: skbuff: reject skb header offset updates that truncate | 1 | zihanx@nebusec.ai | finished in 4h14m0s |
| 2026-07-29 15:40 UTC | net/sched: fix qdisc graft hierarchy validation | 1 | enjou1224z@gmail.com | finished in 4h21m0s |
| 2026-07-29 14:35 UTC | xsk: prevent AF_XDP ring resource exhaustion | 1 | zihanx@nebusec.ai | finished in 4h47m0s |
| 2026-07-29 14:07 UTC | mm: shmem: reject page-aligned fallocate end overflow | 2 | zhilinz@nebusec.ai | finished in 4h20m0s |
| 2026-07-29 13:56 UTC | ipvs: stop estimator after disabled calc phase | 3 | zhilinz@nebusec.ai | finished in 4h34m0s |
| 2026-07-29 13:53 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 3 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-29 13:48 UTC | netfilter: fix TCP conntrack invalid-log deadlock | 1 | zihanx@nebusec.ai | skipped |
| 2026-07-29 11:28 UTC | tcp: diag: fix unbounded bucket lock hold in diag dump paths | 1 | zihanx@nebusec.ai | finished in 4h35m0s |
| 2026-07-29 09:16 UTC | packet: fix stale ring mode race | 3 | zihanx@nebusec.ai | finished in 4h20m0s |
| 2026-07-29 02:11 UTC | xfrm: save input state data before secpath resets | 2 | zhilinz@nebusec.ai | finished in 4h27m0s |
| 2026-07-28 15:17 UTC | ip6_tunnel: avoid racing encap setup | 1 | enjou1224z@gmail.com | finished in 5h17m0s |
| 2026-07-28 15:04 UTC | net: loopback: ensure Ethernet header is linear before eth_type_trans | 3 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-28 05:08 UTC | ipv4: fix divide-by-zero from undersized RTAX_ADVMSS | 1 | enjou1224z@gmail.com | finished in 4h59m0s |
| 2026-07-28 04:35 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 2 | zhilinz@nebusec.ai | finished in 4h51m0s |
| 2026-07-28 04:21 UTC | ipvs: stop estimator after disabled calc phase | 2 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-07-27 18:14 UTC | ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops | 1 | enjou1224z@gmail.com | finished in 4h31m0s |
| 2026-07-27 18:09 UTC | netfilter: ebtables: avoid unbounded counter allocations | 1 | enjou1224z@gmail.com | finished in 6h25m0s |
| 2026-07-27 18:03 UTC | net: reject IP sends with excessive headroom | 1 | enjou1224z@gmail.com | finished in 5h53m0s |
| 2026-07-27 17:58 UTC | netfilter: h323: fix helper NAT mangling | 1 | enjou1224z@gmail.com | finished in 3h30m0s |
| 2026-07-27 17:44 UTC | xfrm: hold input state around secpath resets | 1 | enjou1224z@gmail.com | finished in 5h20m0s |
| 2026-07-27 17:38 UTC | mm: shmem: reject impossible fallocate ranges | 1 | enjou1224z@gmail.com | finished in 6h1m0s |
| 2026-07-27 17:30 UTC | xfrm: fix xfrm_state_construct() auth-trunc leak | 1 | enjou1224z@gmail.com | finished in 6h1m0s |
| 2026-07-27 17:23 UTC | inet: frags: publish queues before arming timer | 1 | enjou1224z@gmail.com | finished in 5h50m0s |
| 2026-07-27 17:03 UTC | net/sched: sch_cake: validate 6in4 inner headers | 1 | enjou1224z@gmail.com | finished in 5h58m0s |
| 2026-07-27 16:58 UTC | ipvs: guard estimator enqueue until limits are set | 1 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-27 16:52 UTC | openvswitch: reject mismatched flow ID updates | 1 | enjou1224z@gmail.com | finished in 5h8m0s |
| 2026-07-27 16:44 UTC | ipmr: only copy pktinfo to cache reports | 1 | enjou1224z@gmail.com | finished in 4h46m0s |
| 2026-07-27 16:31 UTC | tcp: bound SYN-ACK timers to reqsk timeout range | 4 | enjou1224z@gmail.com | finished in 6h3m0s |
| 2026-07-27 16:19 UTC | packet: synchronize pressure clearing with ring reconfiguration | 2 | enjou1224z@gmail.com | finished in 5h28m0s |
| 2026-07-23 17:54 UTC | net/sched: act_vlan: pop_eth can strip non-Ethernet skbs and panic loopback | 2 | enjou1224z@gmail.com | finished in 5h2m0s |
| 2026-07-23 17:43 UTC | rxrpc: fix encap_rcv skb accounting exhaustion | 1 | enjou1224z@gmail.com | finished in 5h30m0s |
| 2026-07-23 17:38 UTC | ipv6: ip6mr: fix mr_table lifetime leak | 1 | enjou1224z@gmail.com | finished in 5h33m0s |
| 2026-07-23 17:29 UTC | llc: fix listener child socket leak on non-SABME frames | 1 | enjou1224z@gmail.com | finished in 1h46m0s |
| 2026-07-23 17:21 UTC | vsock: clear stale sk_err before listen() | 1 | enjou1224z@gmail.com | finished in 5h5m0s |
| 2026-07-23 16:52 UTC | net: bridge: fix fast-leave use-after-free | 1 | enjou1224z@gmail.com | finished in 5h49m0s |