| 2026-11-12 12:51 UTC |
net: wwan: iosm: validate MUX DL lengths and offsets |
1 |
fangxy@xiaopeng.com |
-
|
| 2026-11-10 07:19 UTC |
ima: fix races when deleting measurement list entries |
3 |
liuwb@xiaopeng.com |
-
|
| 2026-11-09 12:33 UTC |
ima: fix races when deleting measurement list entries |
2 |
liuwb@xiaopeng.com |
finished
in 4h34m0s
|
| 2026-11-09 12:10 UTC |
usb: gadget: lpc32xx_udc: handle interrupts with an empty queue |
1 |
fangxy@xiaopeng.com |
skipped
|
| 2026-11-06 01:49 UTC |
Input: lpc32xx-keys - reject matrices bigger than the hardware has |
3 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-11-05 09:27 UTC |
usb: gadget: f_printer: clamp GET_DEVICE_ID pnp_string to ep0 buffer |
1 |
fangxy@xiaopeng.com |
finished
in 1h54m0s
|
| 2026-11-05 04:01 UTC |
firmware: qcom: uefisecapp: Fix GetNextVariableName overflow |
1 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-11-05 03:49 UTC |
usb: dwc2: gadget: fix off-by-one in ep_from_windex bounds check |
2 |
fangxy@xiaopeng.com |
skipped
|
| 2026-11-05 02:13 UTC |
Input: tegra-kbc - check the pin numbers from the device tree |
2 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-11-04 11:26 UTC |
tpm: eventlog: check the payload size before reading tag events |
2 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-11-04 05:37 UTC |
ima: hold ima_extend_list_mutex while locating the trim position |
1 |
liuwb@xiaopeng.com |
finished
in 4h32m0s
|
| 2026-11-04 03:07 UTC |
Input: lpc32xx-keys - reject matrices bigger than the hardware has |
2 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-11-03 14:59 UTC |
net: wwan: iosm: drop redundant skb->data check in MUX DL decode |
2 |
fangxy@xiaopeng.com |
skipped
|
| 2026-11-03 11:17 UTC |
Input: adi - bound the two-stream packet merge |
2 |
zhugl3@xiaopeng.com |
finished
in 2h38m0s
|
| 2026-11-03 11:11 UTC |
net: wwan: iosm: drop redundant skb->data check in MUX DL decode |
2 |
fangxy@xiaopeng.com |
skipped
|
| 2026-11-03 08:55 UTC |
Input: joydev - avoid signed overflow in the broken-axis correction |
2 |
zhugl3@xiaopeng.com |
finished
in 4h45m0s
|
| 2026-11-03 08:41 UTC |
firmware: qcom: uefisecapp: Fix overflow in GetVariable response check |
1 |
zhugl3@xiaopeng.com |
finished
in 2h33m0s
|
| 2026-11-03 08:41 UTC |
virtio: console: check the control packet size before parsing it |
1 |
zhugl3@xiaopeng.com |
finished
in 3h39m0s
|
| 2026-11-03 08:41 UTC |
tpm: eventlog: check the payload size before reading tag events |
1 |
zhugl3@xiaopeng.com |
finished
in 3h49m0s
|
| 2026-11-03 08:41 UTC |
Input: joydev - avoid an undefined shift in the legacy 0x read |
1 |
zhugl3@xiaopeng.com |
finished
in 5h29m0s
|
| 2026-11-02 08:19 UTC |
net: wwan: iosm: fix potential skb leak in MUX DL decode |
1 |
fangxy@xiaopeng.com |
skipped
|
| 2026-10-29 07:33 UTC |
scsi: mpt3sas: validate data_out size before SMP link-reset check |
2 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-27 03:23 UTC |
usb: gadget: raw_gadget: fix dangling ep->desc on enable failure |
1 |
liuc63@xiaopeng.com |
finished
in 4h12m0s
|
| 2026-10-27 02:40 UTC |
usb: gadget: aspeed_udc: fix u16 truncation of descriptor lengths |
1 |
liuc63@xiaopeng.com |
skipped
|
| 2026-10-26 15:32 UTC |
mfd/spi: sprd: fix ADI transfer length handling |
3 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-26 13:21 UTC |
spi: tegra20-slink: size words with spi_bpw_to_bytes() |
2 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-26 09:07 UTC |
net: sched: em_ipt: validate hook value from netlink |
1 |
fangxy@xiaopeng.com |
finished
in 3h47m0s
|
| 2026-10-26 03:11 UTC |
usb: dwc2: gadget: fix off-by-one in ep_from_windex bounds check |
1 |
fangxy@xiaopeng.com |
skipped
|
| 2026-10-21 07:02 UTC |
vhost/vringh: reject zero-length indirect descriptor tables |
1 |
fangxy@xiaopeng.com |
finished
in 4h45m0s
|
| 2026-10-20 10:11 UTC |
net: wwan: iosm: fix NULL skb deref in ul_td_process |
1 |
liuc63@xiaopeng.com |
skipped
|
| 2026-10-16 07:09 UTC |
scsi: mpt3sas: fix OOB SGE write at the request frame boundary |
2 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-15 12:33 UTC |
mfd/spi: sprd: fix ADI transfer length handling |
2 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-15 02:16 UTC |
spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op |
1 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-15 02:10 UTC |
spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer |
1 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-15 02:07 UTC |
scsi: mpt3sas: validate data_out size before SMP link-reset check |
1 |
liuwb@xiaopeng.com |
finished
in 51m0s
|
| 2026-10-14 14:18 UTC |
spi: jcore: fix divide-by-zero when speed_hz is zero |
1 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-14 14:18 UTC |
spi: tegra20-slink: bound copies to t->len |
1 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-14 12:39 UTC |
spi: amd: fix len==0 underflow and FIFO overflow |
1 |
liuwb@xiaopeng.com |
skipped
|
| 2026-10-12 09:55 UTC |
ovl: reject lowerdir ending with unescaped backslash |
2 |
zhugl3@xiaopeng.com |
finished
in 4h35m0s
|
| 2026-10-12 09:08 UTC |
netfilter: nf_conntrack_h323: fix NULL deref in decode_seqof() |
1 |
zhugl3@xiaopeng.com |
finished
in 2h2m0s
|
| 2026-10-12 06:08 UTC |
ovl: reject lowerdir ending with unescaped backslash |
1 |
zhugl3@xiaopeng.com |
finished
in 4h33m0s
|
| 2026-10-12 06:08 UTC |
ext4: check CAP_SYS_ADMIN in ext4_ioctl_get_tune_sb() |
1 |
zhugl3@xiaopeng.com |
finished
in 4h22m0s
|
| 2026-09-29 02:39 UTC |
net: wwan: t7xx: validate the HS2 message data length |
2 |
zhugl3@xiaopeng.com |
finished
in 1h9m0s
|
| 2026-09-15 06:44 UTC |
ext2: reject xattr value overlapping the entry area |
1 |
zhugl3@xiaopeng.com |
finished
in 4h6m0s
|
| 2026-09-11 04:40 UTC |
partitions: atari: fix overflow in the partition sanity check |
1 |
zhugl3@xiaopeng.com |
finished
in 4h11m0s
|
| 2026-09-11 02:17 UTC |
net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain |
2 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-09-10 03:33 UTC |
net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain |
1 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-09-10 03:00 UTC |
ceph: clamp the inline data length in ceph_fill_inline_data() |
2 |
zhugl3@xiaopeng.com |
skipped
|
| 2026-09-09 05:44 UTC |
net: wwan: t7xx: validate the HS2 message data length |
1 |
zhugl3@xiaopeng.com |
skipped
|