summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
4 daysLinux 6.1.186v6.1.186linux-6.1.yGreg Kroah-Hartman
4 daysinet: frags: strip GSO state from fragments before reassemblyXinyang Ge
4 daysLinux 6.1.185v6.1.185Greg Kroah-Hartman
4 daysnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet
4 daysBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
4 daysHID: hyperv: validate initial device info boundsMichael Bommarito
4 daysHID: sensor: custom: Fix use-after-free in enable_sensorHaoxiang Li
4 daysHID: core: fix number/pointer type confusion on long itemsJann Horn
4 daysHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()Ibrahim Hashimov
4 daysmisc: fastrpc: Fix double free of 'buf' in error pathSukrut Bellary
4 dayscan: isotp: fix timer drain order, wakeup handling and tx_gen orderingOliver Hartkopp
4 dayscan: use skb hash instead of private variable in headroomOliver Hartkopp
4 daysInput: atkbd - skip deactivate for HONOR ZQC-PDonglin Lyu
4 daysInput: atkbd - skip deactivate for HONOR FMB-P's internal keyboardCryolitia PukNgae
4 dayss390/vfio_ccw: Free all memory if cp_init() failsEric Farman
4 daysxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)
4 daysHID: core: fix OOB read of field->usage in hid_set_field()Baul Lee
4 daysHID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_IDLee Jones
4 daysHID: magicmouse: do not keep a stale msc->input if no input is claimedJose Villaseñor Montfort
4 daysmptcp: pm: fix data race in add_addr timer callbackQing Luo
4 daysmptcp: pm: ADD_ADDR rtx: free sk if lastMatthieu Baerts (NGI0)
4 daysmptcp: pm: ADD_ADDR rtx: always decrease sk refcountMatthieu Baerts (NGI0)
4 daysASoC: codecs: lpass-tx-macro: Fix enum kcontrol accessesDawid Wróbel
4 daysInput: byd - synchronize timer deletion before freeing private dataLinmao Li
4 daysnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsGreg Kroah-Hartman
4 daysnvmet-fc: fix invalid free in LS IOD error pathJiang HongHui
4 daysnvmet-auth: zero the AUTH_RECEIVE response bufferBryam Vargas
4 daysipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu
4 daysipv4: reject undersized MTUs in ip_do_fragment()Yong Wang
4 dayslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha
4 daysndisc: ndisc_send_redirect() cleanupEric Dumazet
4 daysnfc: nci: free destination parameters when closing a connectionLinmao Li
4 daysnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page
4 daysnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page
4 daysnfc: st21nfca: validate ATR_REQ length against the received frameDoruk Tan Ozturk
4 daysnfc: pn533: purge fragmented skbs during cleanupXu Rao
4 daysnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk
4 daysnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal
4 daysnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk
4 daysnfc: microread: validate target discovery payload lengthsPengpeng Hou
4 daysnfc: fdp: bound the device-reported read length and fix an skb leakBryam Vargas
4 daysnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk
4 daysiomap: adjust read range correctly for non-block-aligned positionsJoanne Koong
4 daystls: handle data disappearing from under the TLS ULPJakub Kicinski
4 daystls: fix lockless read of strp->msg_ready in ->pollSabrina Dubroca
4 daysgpio: ml-ioh: use raw_spinlock_t for the register lockJunjie Cao
4 daysdrm/amdgpu: check ASPM on the dGPU host linkYang Wang
4 daysxfs: bounds-check buffer log item's dirty bitmapIbrahim Hashimov
4 daysxfs: don't use a xfs_log_iovec for ri_buf in log recoveryChristoph Hellwig
4 dayss390/vfio_ccw: Implement a crw lockEric Farman