| Status |
Subject |
Author |
|
|
|
[PATCH] drm/gud: fix bulk_len divide-by-zero, connector bitmap OOB, and short USB reads
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] drm/vkms: fix empty gamma/degamma LUT divide-by-zero and plane format bounds
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] drm/vmwgfx: fix surface size overflow, execbuf bounds, and cursor/msg leaks
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] drm/virtio: fix vbuf->objs double-free, fence NULL deref, and sgt error path
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] netlabel: calipso, x509: clean up ADDRSELECT on DOI removal and check AKID len
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] ieee802154: cc2520, mcr20a: reject invalid RX frame lengths from SPI FIFO
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] ieee802154: ca8210: fix SPI RX length validation and FIFO out-of-bounds read
|
Hui Peng
|
4 days, 21 hours ago |
|
R
|
[PATCH] ieee802154: hwsim: fix edge allocation leak and netlink attribute validation
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] net: wan: lapbether: validate frame length and headroom in lapbeth_rcv() and xmit
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] atm: br2684, pppoatm: add missing pskb_may_pull() and headroom checks
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] net: slip: fix out-of-bounds access on short CSLIP packets
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] net/rds: fix incoming message refcount leak and header bounds check in rds_recv.c
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] can: j1939: fix transport session leak and socket bind/connect validation
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] drm/sitronix: st7571: fix hwbuf heap buffer overflow from unaligned nlines
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] HID: fix sony Rock Band 3 IRQ sleep and hid_debug_events_read() UAF
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] PCI/VGA: fix inverted vga_tryget() return check and clear removed pci_dev
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] serial: fix 8250 hash_mutex race and uart_get_baud_rate() divide-by-zero
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] scsi: sg, sr: fix stale scatter_elem_sz in sg_build_indirect() and OOB read in sr_is_xa()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] ata: libata-scsi: reject multi-sector taskfile commands when dev->multi_count is 0
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] loop: restore lo_backing_file, gfp_mask, and uevent_suppress on loop_configure() error
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] qnx4: validate xblk_num_xtnts and rootdir size in qnx4_block_map() and mount
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] omfs: fix divide-by-zero on mount and bitmap slab-out-of-bounds accesses
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] minix: validate s_imap_blocks and s_zmap_blocks in minix_check_superblock()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] hpfs: fix extended attribute bounds checks and get_indirect_ea() overflow
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] romfs: reject non-advancing nextfh offsets in romfs_lookup() and romfs_readdir()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] hfs: validate drAlBlkSiz and fs_ablocks in hfs_mdb_get()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] hfsplus: fix xattr entrylength OOB read and NULL hidden_dir on R/W remount
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] jfs: validate dmap parameters in dbMount() and slot chains in jfs_dtree.c
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] adfs: validate zone map parameters and clamp dm_endbit in adfs_map_layout()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] udf: validate vat20->lengthHeader and VAT inode size in udf_load_vat()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] bfs: fix destination block offset in bfs_move_blocks() and check sb_getblk()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] ufs: fix cylinder structures slab-OOB write, div-by-zero, and error cleanup
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] qnx6: validate di_filelevels in qnx6_iget() and fix mount error handling
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] befs: check NULL return from befs_bt_get_key() and fix keysize in befs_btree_read()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] isofs: reject short directory records in isofs_read_level3_size()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] KEYS: asymmetric: fix out_len bounds check and in2_len union clobber in keyctl_pkey
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] Bluetooth: hidp: fix out-of-bounds reads on short frames and report_return skb leak
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] Bluetooth: hci_sock: fix negative cookie IDA free and short event OOB read
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] ipmr: validate IPv4 header length in reg_vif_xmit() and zero iphdr in ipmr_get_route()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] af_unix: fix u->inq_len accounting in manage_oob() and unix_stream_read_skb()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] 9p: reject RERROR/RLERROR with zero errcode and guard 0-link drop_nlink()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] fuse: validate folio state before pipe_buf_try_steal() in fuse_try_move_folio()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] fs/namespace: reject bufsize < sizeof(struct statmount) in prepare_kstatmount()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] signal: re-arm ignored periodic POSIX timers when handler is installed in do_sigaction()
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] futex: fix hb lock mismatch in futex_wait_requeue_pi() and CLONE_VFORK hash init
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] perf/core: fix locked_vm leak on alias mmap() and cross-MM pinned_vm underflow
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] cgroup/cpuset: prevent overlapping local and remote partition creation
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH] io_uring: fix cloned compound buffer accounting and R_DISABLED restriction bypass
|
Hui Peng
|
4 days, 21 hours ago |
|
|
[PATCH v2] vfio/type1: avoid walking reserved-only mappings while unpinning
|
Samuel Crossley
|
4 days, 21 hours ago |