summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
29 hoursLinux 6.1.186v6.1.186linux-6.1.yGreg Kroah-Hartman
29 hoursinet: frags: strip GSO state from fragments before reassemblyXinyang Ge
47 hoursLinux 6.1.185v6.1.185Greg Kroah-Hartman
47 hoursnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet
47 hoursBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
47 hoursHID: hyperv: validate initial device info boundsMichael Bommarito
47 hoursHID: sensor: custom: Fix use-after-free in enable_sensorHaoxiang Li
47 hoursHID: core: fix number/pointer type confusion on long itemsJann Horn
47 hoursHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()Ibrahim Hashimov
47 hoursmisc: fastrpc: Fix double free of 'buf' in error pathSukrut Bellary
47 hourscan: isotp: fix timer drain order, wakeup handling and tx_gen orderingOliver Hartkopp
47 hourscan: use skb hash instead of private variable in headroomOliver Hartkopp
47 hoursInput: atkbd - skip deactivate for HONOR ZQC-PDonglin Lyu
47 hoursInput: atkbd - skip deactivate for HONOR FMB-P's internal keyboardCryolitia PukNgae
47 hourss390/vfio_ccw: Free all memory if cp_init() failsEric Farman
47 hoursxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)
47 hoursHID: core: fix OOB read of field->usage in hid_set_field()Baul Lee
47 hoursHID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_IDLee Jones
47 hoursHID: magicmouse: do not keep a stale msc->input if no input is claimedJose Villaseñor Montfort
47 hoursmptcp: pm: fix data race in add_addr timer callbackQing Luo
47 hoursmptcp: pm: ADD_ADDR rtx: free sk if lastMatthieu Baerts (NGI0)
47 hoursmptcp: pm: ADD_ADDR rtx: always decrease sk refcountMatthieu Baerts (NGI0)
47 hoursASoC: codecs: lpass-tx-macro: Fix enum kcontrol accessesDawid Wróbel
47 hoursInput: byd - synchronize timer deletion before freeing private dataLinmao Li
47 hoursnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsGreg Kroah-Hartman
47 hoursnvmet-fc: fix invalid free in LS IOD error pathJiang HongHui
47 hoursnvmet-auth: zero the AUTH_RECEIVE response bufferBryam Vargas
47 hoursipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu
47 hoursipv4: reject undersized MTUs in ip_do_fragment()Yong Wang
47 hourslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha
47 hoursndisc: ndisc_send_redirect() cleanupEric Dumazet
47 hoursnfc: nci: free destination parameters when closing a connectionLinmao Li
47 hoursnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page
47 hoursnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page
47 hoursnfc: st21nfca: validate ATR_REQ length against the received frameDoruk Tan Ozturk
47 hoursnfc: pn533: purge fragmented skbs during cleanupXu Rao
47 hoursnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk
47 hoursnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal
47 hoursnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk
47 hoursnfc: microread: validate target discovery payload lengthsPengpeng Hou
47 hoursnfc: fdp: bound the device-reported read length and fix an skb leakBryam Vargas
47 hoursnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk
47 hoursiomap: adjust read range correctly for non-block-aligned positionsJoanne Koong
47 hourstls: handle data disappearing from under the TLS ULPJakub Kicinski
47 hourstls: fix lockless read of strp->msg_ready in ->pollSabrina Dubroca
47 hoursgpio: ml-ioh: use raw_spinlock_t for the register lockJunjie Cao
47 hoursdrm/amdgpu: check ASPM on the dGPU host linkYang Wang
47 hoursxfs: bounds-check buffer log item's dirty bitmapIbrahim Hashimov
47 hoursxfs: don't use a xfs_log_iovec for ri_buf in log recoveryChristoph Hellwig
47 hourss390/vfio_ccw: Implement a crw lockEric Farman