summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
4 daysLinux 6.12.107v6.12.107linux-6.12.yGreg Kroah-Hartman
4 daysinet: frags: strip GSO state from fragments before reassemblyXinyang Ge
4 daysLinux 6.12.106v6.12.106Greg Kroah-Hartman
4 daysnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet
4 daysBluetooth: hci_aml: validate firmware segment lengthsLaxman Acharya Padhya
4 daysBluetooth: ISO: do not force BT_LISTEN after a failed BIG syncAli Ahmet Memis
4 daysBluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya
4 daysBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
4 daysHID: hyperv: validate initial device info boundsMichael Bommarito
4 daysHID: sensor: custom: Fix use-after-free in enable_sensorHaoxiang Li
4 daysHID: core: fix number/pointer type confusion on long itemsJann Horn
4 daysHID: nintendo: stop device IO before hid_hw_stop on probe failureJiangshan Yi
4 daysHID: nintendo: register input device after capabilities are setJiangshan Yi
4 daysHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()Ibrahim Hashimov
4 daysInput: atkbd - skip deactivate for HONOR ZQC-PDonglin Lyu
4 daysInput: atkbd - skip deactivate for HONOR FMB-P's internal keyboardCryolitia PukNgae
4 daysmptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar
4 daysipv4: start using dst_dev_rcu()Eric Dumazet
4 daysxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)
4 daysnet/ionic: avoid OOB TX partner lookup for hwstamp RXQAnand Khoje
4 daysHID: core: fix OOB read of field->usage in hid_set_field()Baul Lee
4 daysHID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_IDLee Jones
4 daysHID: magicmouse: do not keep a stale msc->input if no input is claimedJose Villaseñor Montfort
4 daysHID: magicmouse: re-enable multitouch after reset-resumeChristopher Kodama
4 daysHID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-CAndrei Fed
4 daysdrm/xe: Fix DPT allocation paths.Maarten Lankhorst
4 daysASoC: codecs: lpass-tx-macro: Fix enum kcontrol accessesDawid Wróbel
4 daysmptcp: pm: fix data race in add_addr timer callbackQing Luo
4 daysnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsGreg Kroah-Hartman
4 daysnvmet-tcp: bound SGL data length before allocating command buffersIbrahim Hashimov
4 daysnvmet-fc: fix invalid free in LS IOD error pathJiang HongHui
4 daysnvmet-auth: zero the AUTH_RECEIVE response bufferBryam Vargas
4 daysipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu
4 daysipv4: reject undersized MTUs in ip_do_fragment()Yong Wang
4 daysInput: byd - synchronize timer deletion before freeing private dataLinmao Li
4 daysndisc: ndisc_send_redirect() cleanupEric Dumazet
4 daysnfc: nci: free destination parameters when closing a connectionLinmao Li
4 daysnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page
4 daysnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page
4 daysnfc: st21nfca: validate ATR_REQ length against the received frameDoruk Tan Ozturk
4 daysnfc: pn533: purge fragmented skbs during cleanupXu Rao
4 daysnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk
4 daysnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal
4 daysnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk
4 daysnfc: microread: validate target discovery payload lengthsPengpeng Hou
4 daysnfc: fdp: bound the device-reported read length and fix an skb leakBryam Vargas
4 daysnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk
4 dayslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha
4 daysxfs: validate attr entry pointer before field accessHongling Zeng
4 daysext4: propagate errors from fast commit range replayGuanghui Yang