| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-10-31 17:34 UTC | gve: leave refcount headroom in the RX page bias | 1 | amaan.cheval@gmail.com | skipped |
| 2026-10-27 05:05 UTC | ipset: ignore port ranges for portless protocols | 2 | zhilinz@nebusec.ai | finished in 4h37m0s |
| 2026-10-27 04:58 UTC | tcp_bpf: update copied_seq from current value | 2 | zhilinz@nebusec.ai | finished in 4h31m0s |
| 2026-10-27 04:46 UTC | tcp: check congestion control restriction first | 2 | zhilinz@nebusec.ai | finished in 4h2m0s |
| 2026-10-23 05:55 UTC | SUNRPC: reject AUTH_TLS on backchannel requests | 1 | zhilinz@nebusec.ai | finished in 4h9m0s |
| 2026-10-23 05:46 UTC | tcp_bpf: sync copied_seq after pre-accept data | 1 | zhilinz@nebusec.ai | finished in 3h53m0s |
| 2026-10-23 05:26 UTC | netfilter: ebtables: validate compat nentries | 1 | zhilinz@nebusec.ai | finished in 4h7m0s |
| 2026-10-22 18:47 UTC | rxrpc: fix null-security challenge leak | 1 | zhilinz@nebusec.ai | finished in 4h12m0s |
| 2026-10-22 18:32 UTC | xfrm: ipcomp: account full fragment pages in truesize | 1 | zhilinz@nebusec.ai | finished in 4h10m0s |
| 2026-10-22 18:29 UTC | rxrpc: release IPv6 dst on route error | 1 | zhilinz@nebusec.ai | finished in 4h40m0s |
| 2026-10-22 07:58 UTC | xsk: validate fill-ring producer index | 1 | zhilinz@nebusec.ai | finished in 4h38m0s |
| 2026-10-22 02:26 UTC | xfrm4: use a full socket for local errors | 2 | littleddfu@gmail.com | finished in 4h46m0s |
| 2026-10-21 19:09 UTC | ipset: ignore port ranges for portless protocols | 1 | zhilinz@nebusec.ai | finished in 4h7m0s |
| 2026-10-21 19:01 UTC | ipmr: drop packets with unknown ingress VIF | 3 | zhilinz@nebusec.ai | finished in 4h40m0s |
| 2026-10-21 18:57 UTC | tcp: release congestion control reference on rejection | 1 | zhilinz@nebusec.ai | finished in 4h5m0s |
| 2026-10-21 10:18 UTC | xfrm4: use a full socket for local errors | 1 | littleddfu@gmail.com | finished in 4h22m0s |
| 2026-10-20 06:43 UTC | ipmr: validate VIF indexes before offload lookup | 2 | zhilinz@nebusec.ai | finished in 4h7m0s |
| 2026-10-20 06:39 UTC | ipmr: only copy pktinfo to cache reports | 6 | zhilinz@nebusec.ai | finished in 4h42m0s |
| 2026-10-20 06:35 UTC | bpf: reject raw iteration over managed map fields | 2 | zhilinz@nebusec.ai | finished in 4h9m0s |
| 2026-10-17 05:39 UTC | ipmr: only copy pktinfo to cache reports | 5 | zhilinz@nebusec.ai | finished in 4h3m0s |
| 2026-10-14 12:24 UTC | bpf: reject raw iteration over managed sk_storage values | 1 | zhilinz@nebusec.ai | finished in 4h18m0s |
| 2026-10-14 11:57 UTC | bpf: reject unsafe pointers in TCP congestion control access | 1 | zhilinz@nebusec.ai | finished in 2h12m0s |
| 2026-10-14 11:44 UTC | init: distinguish compressed ramdisks from image size | 1 | zhilinz@nebusec.ai | skipped |
| 2026-10-13 14:33 UTC | ipmr: validate VIF indexes before offload lookup | 1 | zhilinz@nebusec.ai | skipped |
| 2026-10-12 01:24 UTC | ieee802154: 6lowpan: Hold wpan reference until lowpan destruction | 1 | zzzccc427@gmail.com | finished in 4h29m0s |
| 2026-09-12 13:56 UTC | SUNRPC: hold a reference while tracing accepted transports | 1 | zhilinz@nebusec.ai | finished in 2h31m0s |
| 2026-09-12 13:22 UTC | openvswitch: avoid reallocating confirmed conntrack labels | 1 | zhilinz@nebusec.ai | finished in 4h7m0s |
| 2026-09-10 16:18 UTC | xsk: use a 32-bit compare in xsk_map_gen_lookup | 1 | zhilinz@nebusec.ai | finished in 4h29m0s |
| 2026-09-10 10:08 UTC | ipvs: fix LBLC and LBLCR cache growth | 4 | ja@ssi.bg | finished in 3h54m0s |
| 2026-09-07 12:27 UTC | wifi: mac80211: reset default-key debugfs after netdev recreate | 1 | zhilinz@nebusec.ai | finished in 5h0m0s |
| 2026-09-07 12:03 UTC | netfilter: xt_IDLETIMER: restrict to init_net | 1 | zhilinz@nebusec.ai | finished in 4h53m0s |
| 2026-09-03 06:56 UTC | net: bridge: use option bits for CFM/MRP frame handlers | 3 | zhilinz@nebusec.ai | finished in 4h14m0s |
| 2026-09-03 06:38 UTC | ipmr: only copy pktinfo to cache reports | 4 | zhilinz@nebusec.ai | finished in 4h27m0s |
| 2026-09-03 06:23 UTC | ipv6: flowlabel: cap duplicate leases per socket | 4 | zhilinz@nebusec.ai | finished in 4h29m0s |
| 2026-09-03 06:18 UTC | tcp: bound SYN-ACK timers to reqsk timeout range | 7 | zhilinz@nebusec.ai | finished in 4h57m0s |
| 2026-08-31 11:20 UTC | net: bridge: use option bits for CFM/MRP frame handlers | 2 | zhilinz@nebusec.ai | finished in 3h58m0s |
| 2026-08-29 10:23 UTC | net: tun: reject addr_len changes with active lists | 1 | zhilinz@nebusec.ai | finished in 3h55m0s |
| 2026-08-29 09:24 UTC | xfrm: save input state data before secpath resets | 4 | zhilinz@nebusec.ai | finished in 3h57m0s |
| 2026-08-29 05:36 UTC | wifi: mac80211: fix fragment length overflow | 1 | zhilinz@nebusec.ai | finished in 3h56m0s |
| 2026-08-25 13:11 UTC | netfilter: ip6_tables: set F_PROTO when proto value is nonzero | 1 | fw@strlen.de | finished in 5h37m0s |
| 2026-08-21 13:41 UTC | netfilter: x_tables: reject missing '-p' flag and check for INV flag | 1 | fw@strlen.de | finished in 4h7m0s |
| 2026-08-21 09:48 UTC | pull request: batman-adv 2026-08-21 | 1 | sw@simonwunderlich.de | finished in 4h2m0s |
| 2026-08-17 07:14 UTC | ipvs: bound LBLCR and LBLC cache growth | 2 | zhilinz@nebusec.ai | finished in 4h8m0s |
| 2026-08-16 16:09 UTC | seg6: reset IP6CB after IPv6 decapsulation | 1 | zhilinz@nebusec.ai | finished in 4h42m0s |
| 2026-08-16 15:22 UTC | ipvs: bound LBLCR cache growth | 1 | zhilinz@nebusec.ai | finished in 4h26m0s |
| 2026-08-12 16:36 UTC | ip: orphan prefetched skbs before multicast forwarding | 3 | zhilinz@nebusec.ai | finished in 5h2m0s |
| 2026-08-12 16:22 UTC | net: fix IP6GRE header length before capping tunnel headroom | 4 | zhilinz@nebusec.ai | finished in 4h11m0s |
| 2026-08-12 13:38 UTC | tcp: bound SYN-ACK timers to reqsk timeout range | 5 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-08-11 13:31 UTC | ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() | 2 | zhilinz@nebusec.ai | finished in 4h28m0s |
| 2026-08-11 12:40 UTC | ipv6: flowlabel: cap duplicate leases per socket | 2 | zhilinz@nebusec.ai | finished in 4h6m0s |
| 2026-08-06 15:18 UTC | ip: orphan prefetched skbs before multicast forwarding | 2 | zhilinz@nebusec.ai | finished in 4h15m0s |
| 2026-08-06 13:21 UTC | net: cap advertised IP tunnel headroom | 3 | zhilinz@nebusec.ai | finished in 5h13m0s |
| 2026-08-03 13:28 UTC | ipv6: xfrm: use full sockets in local error paths | 1 | zhilinz@nebusec.ai | finished in 5h18m0s |
| 2026-08-03 12:15 UTC | xdp: reject clones that overrun skb_shared_info tailroom | 1 | zhilinz@nebusec.ai | finished in 4h16m0s |
| 2026-08-03 11:22 UTC | ipv6: flowlabel: enforce the per-socket lease cap on reused labels | 1 | zhilinz@nebusec.ai | finished in 4h11m0s |
| 2026-08-03 06:12 UTC | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() | 1 | zhilinz@nebusec.ai | finished in 3h52m0s |
| 2026-08-03 05:34 UTC | ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() | 1 | zhilinz@nebusec.ai | finished in 3h57m0s |
| 2026-08-03 04:35 UTC | wifi: mac80211: keep paired old chanctx alive | 1 | zhilinz@nebusec.ai | finished in 4h14m0s |
| 2026-08-03 04:07 UTC | wifi: mac80211: serialize debugfs netdev rename with recreate | 1 | zhilinz@nebusec.ai | finished in 4h40m0s |
| 2026-08-03 03:28 UTC | wifi: mac80211: count only matching reservations in reserved switch | 1 | zhilinz@nebusec.ai | finished in 4h16m0s |
| 2026-08-03 02:47 UTC | ipv6: orphan prefetched skb before ip6_mr_input | 1 | zhilinz@nebusec.ai | finished in 4h36m0s |
| 2026-08-03 01:17 UTC | ipmr: only copy pktinfo to cache reports | 3 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-08-03 01:11 UTC | netfilter: validate L4 headers after userspace packet writes | 4 | zhilinz@nebusec.ai | finished in 4h28m0s |
| 2026-08-03 00:29 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 5 | zhilinz@nebusec.ai | finished in 4h29m0s |
| 2026-08-01 12:10 UTC | netfilter: ipset: serialize kernel-side put-byindex with swap | 1 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-08-01 11:25 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 4 | zhilinz@nebusec.ai |
finished
in 1h21m0s
[1 findings] |
| 2026-07-31 06:36 UTC | netfilter: bridge: release template ct on non-IP path | 1 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-31 06:21 UTC | net: cap advertised device headroom | 2 | zhilinz@nebusec.ai | finished in 4h16m0s |
| 2026-07-31 03:48 UTC | netfilter: validate L4 headers after userspace packet writes | 3 | zhilinz@nebusec.ai | finished in 4h30m0s |
| 2026-07-31 03:22 UTC | mm: shmem: reject page-aligned fallocate end overflow | 3 | zhilinz@nebusec.ai | finished in 4h31m0s |
| 2026-07-30 07:30 UTC | netfilter: validate L4 headers after userspace packet writes | 2 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-07-30 03:17 UTC | ipmr: only copy pktinfo to cache reports | 2 | zhilinz@nebusec.ai | finished in 4h48m0s |
| 2026-07-29 19:14 UTC | net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter | 1 | toke@toke.dk | skipped |
| 2026-07-29 14:07 UTC | mm: shmem: reject page-aligned fallocate end overflow | 2 | zhilinz@nebusec.ai | finished in 4h20m0s |
| 2026-07-29 13:56 UTC | ipvs: stop estimator after disabled calc phase | 3 | zhilinz@nebusec.ai | finished in 4h34m0s |
| 2026-07-29 13:53 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 3 | zhilinz@nebusec.ai | finished in 4h25m0s |
| 2026-07-29 02:11 UTC | xfrm: save input state data before secpath resets | 2 | zhilinz@nebusec.ai | finished in 4h27m0s |
| 2026-07-28 04:35 UTC | net: openvswitch: reallocate update replies for mismatched IDs | 2 | zhilinz@nebusec.ai | finished in 4h51m0s |
| 2026-07-28 04:21 UTC | ipvs: stop estimator after disabled calc phase | 2 | zhilinz@nebusec.ai | finished in 4h41m0s |
| 2026-07-27 18:03 UTC | net: reject IP sends with excessive headroom | 1 | enjou1224z@gmail.com | finished in 5h53m0s |
| 2026-07-27 17:58 UTC | netfilter: h323: fix helper NAT mangling | 1 | enjou1224z@gmail.com | finished in 3h30m0s |
| 2026-07-27 17:44 UTC | xfrm: hold input state around secpath resets | 1 | enjou1224z@gmail.com | finished in 5h20m0s |
| 2026-07-27 17:38 UTC | mm: shmem: reject impossible fallocate ranges | 1 | enjou1224z@gmail.com | finished in 6h1m0s |
| 2026-07-27 17:23 UTC | inet: frags: publish queues before arming timer | 1 | enjou1224z@gmail.com | finished in 5h50m0s |
| 2026-07-27 17:03 UTC | net/sched: sch_cake: validate 6in4 inner headers | 1 | enjou1224z@gmail.com | finished in 5h58m0s |
| 2026-07-27 16:58 UTC | ipvs: guard estimator enqueue until limits are set | 1 | enjou1224z@gmail.com | finished in 5h52m0s |
| 2026-07-27 16:52 UTC | openvswitch: reject mismatched flow ID updates | 1 | enjou1224z@gmail.com | finished in 5h8m0s |
| 2026-07-27 16:44 UTC | ipmr: only copy pktinfo to cache reports | 1 | enjou1224z@gmail.com | finished in 4h46m0s |
| 2026-07-27 16:31 UTC | tcp: bound SYN-ACK timers to reqsk timeout range | 4 | enjou1224z@gmail.com | finished in 6h3m0s |
| 2026-07-23 16:52 UTC | net: bridge: fix fast-leave use-after-free | 1 | enjou1224z@gmail.com | finished in 5h49m0s |
| 2026-07-23 16:48 UTC | net: ipv6: clear suppressed fib6 rule result | 1 | enjou1224z@gmail.com | finished in 5h36m0s |
| 2026-07-22 16:48 UTC | mm/page_table_check: skip special zero mappings | 3 | enjou1224z@gmail.com | finished in 6h31m0s |