| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-28 16:12 UTC | tipc: hold a reference to nodes found by link name | 2 | nicoyip.dev@gmail.com | finished in 4h22m0s |
| 2026-09-28 08:24 UTC | tipc: fix connection lifetime during netns teardown | 3 | xuyuqiabc@gmail.com | finished in 3h57m0s |
| 2026-09-27 06:40 UTC | tipc: hold a reference to nodes found by link name | 1 | nicoyip.dev@gmail.com | finished in 5h2m0s |
| 2026-09-21 09:41 UTC | tipc: fix connection lifetime during netns teardown | 2 | xuyuqiabc@gmail.com | finished in 3h52m0s |
| 2026-09-18 09:21 UTC | tipc: fix connection lifetime during netns teardown | 1 | xuyuqiabc@gmail.com | finished in 3h46m0s |
| 2026-09-18 01:35 UTC | tipc: refuse to attach a second bearer to a netdevice | 1 | xujiakai24@mails.ucas.ac.cn | finished in 4h41m0s |
| 2026-09-02 11:18 UTC | tipc: purge cong_links under the socket lock in tipc_release() | 2 | juny24602@gmail.com | finished in 4h12m0s |
| 2026-08-24 12:29 UTC | tipc: protect node reset trace dump with node lock | 2 | nicoyip.dev@gmail.com | skipped |
| 2026-08-22 16:40 UTC | tipc: protect node reset trace dump with node lock | 1 | nicoyip.dev@gmail.com | skipped |
| 2026-08-18 16:35 UTC | tipc: limit the memory pinned by incomplete fragment chains | 1 | chuyf26@linux.alibaba.com | finished in 4h30m0s |
| 2026-08-18 16:35 UTC | tipc: validate the size of discovery messages before parsing | 1 | chuyf26@linux.alibaba.com | finished in 2h45m0s |
| 2026-08-10 10:21 UTC | tipc: read le->link under the node lock in tipc_node_link_down() | 2 | juny24602@gmail.com | finished in 4h34m0s |
| 2026-07-31 10:20 UTC | tipc: read le->link under the node lock in tipc_node_link_down() | 1 | juny24602@gmail.com | finished in 4h35m0s |
| 2026-07-31 10:18 UTC | tipc: purge cong_links under the socket lock in tipc_release() | 1 | juny24602@gmail.com | finished in 4h29m0s |
| 2026-07-23 16:38 UTC | tipc: avoid use-after-free in poll trace queue dumps | 3 | enjou1224z@gmail.com | skipped |
| 2026-07-23 02:29 UTC | tipc: validate Gap ACK blocks header before parsing | 1 | kudo3228@gmail.com | finished in 5h55m0s |
| 2026-07-21 16:24 UTC | tipc: avoid use-after-free in poll trace queue dumps | 2 | enjou1224z@gmail.com | skipped |
| 2026-07-20 06:45 UTC | tipc: avoid UAF in trace queue dumps | 1 | enjou1224z@gmail.com | skipped |
| 2026-07-14 07:06 UTC | tipc: prevent node timer rearm after peer removal | 1 | david.lee@trailofbits.com | finished in 1h35m0s |
| 2026-07-13 20:49 UTC | tipc: fix infinite loop in __tipc_nl_compat_dumpit | 1 | koike@igalia.com | finished in 4h46m0s |
| 2026-06-17 13:57 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 3 | bestswngs@gmail.com | finished in 4h46m0s |
| 2026-06-16 12:22 UTC | tipc: fix use-after-free of the discoverer in tipc_disc_rcv() | 2 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-11 13:41 UTC | tipc: restrict socket queue dumps in enqueue tracepoints | 1 | lixiasong1@huawei.com | finished in 4h59m0s |
| 2026-06-10 15:33 UTC | tipc: fix use-after-free of discoverer in tipc_disc_rcv() | 1 | bestswngs@gmail.com | finished in 5h15m0s |
| 2026-06-10 12:40 UTC | tipc: fix netlink gate and receive-path bugs | 4 | michael.bommarito@gmail.com | finished in 4h39m0s |
| 2026-06-08 12:22 UTC | tipc: fix netlink gate and receive-path bugs | 3 | michael.bommarito@gmail.com | finished in 4h17m0s |
| 2026-06-06 19:14 UTC | tipc: fix netlink gate and receive-path bugs | 2 | michael.bommarito@gmail.com | finished in 4h2m0s |
| 2026-06-04 16:31 UTC | tipc: require admin privileges for TIPCv2 mutators | 1 | dominik.czarnota@trailofbits.com | finished in 5h17m0s |
| 2026-06-02 13:35 UTC | tipc: fix missing netlink admin gate and receive-path bugs | 1 | michael.bommarito@gmail.com | finished in 4h36m0s |
| 2026-05-06 05:13 UTC | tipc: avoid sending zero-length stream messages | 1 | cassiogabrielcontato@gmail.com | finished in 4h29m0s |
| 2026-04-30 15:26 UTC | tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 3 | kai.aizen.dev@gmail.com | finished in 4h45m0s |
| 2026-04-21 12:45 UTC | tipc: fix double-free in tipc_buf_append() | 2 | lee@kernel.org | finished in 4h34m0s |
| 2026-04-20 13:05 UTC | tipc: fix double-free in tipc_buf_append() | 1 | lee@kernel.org | finished in 4h21m0s |
| 2026-04-15 06:12 UTC | [PATCH net] tipc: fix UAF race in tipc_mon_peer_up/down/remove_peer vs bearer teardown | 1 | kai.aizen.dev@gmail.com |
finished
in 4h37m0s
[1 findings] |
| 2026-04-10 15:53 UTC | tipc: validate Gap ACK blocks in STATE message | 1 | n05ec@lzu.edu.cn | finished in 4h14m0s |
| 2026-04-05 04:54 UTC | tipc: validate Gap ACK blocks in STATE message | 1 | n05ec@lzu.edu.cn | finished in 3h59m0s |
| 2026-03-10 17:07 UTC | tipc: fix divide-by-zero in tipc_sk_filter_connect() | 3 | mehulrao@gmail.com | finished in 4h1m0s |
| 2026-03-06 18:50 UTC | tipc: fix divide-by-zero in tipc_sk_filter_connect() | 2 | mehulrao@gmail.com | finished in 4h6m0s |
| 2026-02-03 14:56 UTC | tipc: fix RCU dereference race in tipc_aead_users_dec() | 1 | git@danielhodges.dev | finished in 3h57m0s |
| 2025-07-02 01:43 UTC | tipc: Fix use-after-free in tipc_conn_close(). | 1 | kuniyu@google.com | finished in 3h38m0s |