summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2 daysLinux 6.12.107v6.12.107linux-6.12.yGreg Kroah-Hartman
2 daysinet: frags: strip GSO state from fragments before reassemblyXinyang Ge
3 daysLinux 6.12.106v6.12.106Greg Kroah-Hartman
3 daysnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet
3 daysBluetooth: hci_aml: validate firmware segment lengthsLaxman Acharya Padhya
3 daysBluetooth: ISO: do not force BT_LISTEN after a failed BIG syncAli Ahmet Memis
3 daysBluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya
3 daysBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
3 daysHID: hyperv: validate initial device info boundsMichael Bommarito
3 daysHID: sensor: custom: Fix use-after-free in enable_sensorHaoxiang Li
3 daysHID: core: fix number/pointer type confusion on long itemsJann Horn
3 daysHID: nintendo: stop device IO before hid_hw_stop on probe failureJiangshan Yi
3 daysHID: nintendo: register input device after capabilities are setJiangshan Yi
3 daysHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()Ibrahim Hashimov
3 daysInput: atkbd - skip deactivate for HONOR ZQC-PDonglin Lyu
3 daysInput: atkbd - skip deactivate for HONOR FMB-P's internal keyboardCryolitia PukNgae
3 daysmptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar
3 daysipv4: start using dst_dev_rcu()Eric Dumazet
3 daysxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)
3 daysnet/ionic: avoid OOB TX partner lookup for hwstamp RXQAnand Khoje
3 daysHID: core: fix OOB read of field->usage in hid_set_field()Baul Lee
3 daysHID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_IDLee Jones
3 daysHID: magicmouse: do not keep a stale msc->input if no input is claimedJose Villaseñor Montfort
3 daysHID: magicmouse: re-enable multitouch after reset-resumeChristopher Kodama
3 daysHID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-CAndrei Fed
3 daysdrm/xe: Fix DPT allocation paths.Maarten Lankhorst
3 daysASoC: codecs: lpass-tx-macro: Fix enum kcontrol accessesDawid Wróbel
3 daysmptcp: pm: fix data race in add_addr timer callbackQing Luo
3 daysnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsGreg Kroah-Hartman
3 daysnvmet-tcp: bound SGL data length before allocating command buffersIbrahim Hashimov
3 daysnvmet-fc: fix invalid free in LS IOD error pathJiang HongHui
3 daysnvmet-auth: zero the AUTH_RECEIVE response bufferBryam Vargas
3 daysipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu
3 daysipv4: reject undersized MTUs in ip_do_fragment()Yong Wang
3 daysInput: byd - synchronize timer deletion before freeing private dataLinmao Li
3 daysndisc: ndisc_send_redirect() cleanupEric Dumazet
3 daysnfc: nci: free destination parameters when closing a connectionLinmao Li
3 daysnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page
3 daysnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page
3 daysnfc: st21nfca: validate ATR_REQ length against the received frameDoruk Tan Ozturk
3 daysnfc: pn533: purge fragmented skbs during cleanupXu Rao
3 daysnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk
3 daysnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal
3 daysnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk
3 daysnfc: microread: validate target discovery payload lengthsPengpeng Hou
3 daysnfc: fdp: bound the device-reported read length and fix an skb leakBryam Vargas
3 daysnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk
3 dayslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha
3 daysxfs: validate attr entry pointer before field accessHongling Zeng
3 daysext4: propagate errors from fast commit range replayGuanghui Yang