summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
21 hoursLinux 6.6.154v6.6.154Greg Kroah-Hartman
21 hoursnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet
21 hoursBluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya
21 hoursBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
21 hoursHID: hyperv: validate initial device info boundsMichael Bommarito
21 hoursHID: sensor: custom: Fix use-after-free in enable_sensorHaoxiang Li
21 hoursHID: core: fix number/pointer type confusion on long itemsJann Horn
21 hoursHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()Ibrahim Hashimov
21 hoursmptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar
21 hoursInput: atkbd - skip deactivate for HONOR ZQC-PDonglin Lyu
21 hoursInput: atkbd - skip deactivate for HONOR FMB-P's internal keyboardCryolitia PukNgae
21 hoursBluetooth: hci_sync: Fix advertising data UAFsChengfeng Ye
21 hoursxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)
21 hoursHID: core: fix OOB read of field->usage in hid_set_field()Baul Lee
21 hoursHID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_IDLee Jones
21 hoursHID: magicmouse: do not keep a stale msc->input if no input is claimedJose Villaseñor Montfort
21 hoursHID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-CAndrei Fed
21 hoursmptcp: pm: fix data race in add_addr timer callbackQing Luo
21 hoursASoC: codecs: lpass-tx-macro: Fix enum kcontrol accessesDawid Wróbel
21 hoursASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeoutPeter Ujfalusi
21 hoursASoC: SOF: pcm: Add snd_sof_pcm specific wrappers for dev_dbg() and dev_err()Peter Ujfalusi
21 hoursASoC: SOF: pcm: Move period/buffer configuration print after platform openPeter Ujfalusi
21 hoursASoC: SOF: Relocate and rework functionality for PCM stream freeingPeter Ujfalusi
21 hoursASoC: sof: pcm: use snd_pcm_direction_name()Kuninori Morimoto
21 hoursnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsGreg Kroah-Hartman
21 hoursnvmet-fc: fix invalid free in LS IOD error pathJiang HongHui
21 hoursnvmet-auth: zero the AUTH_RECEIVE response bufferBryam Vargas
21 hoursipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu
21 hoursipv4: reject undersized MTUs in ip_do_fragment()Yong Wang
21 hourslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha
21 hoursInput: byd - synchronize timer deletion before freeing private dataLinmao Li
21 hoursndisc: ndisc_send_redirect() cleanupEric Dumazet
21 hoursnfc: nci: free destination parameters when closing a connectionLinmao Li
21 hoursnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page
21 hoursnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page
21 hoursnfc: st21nfca: validate ATR_REQ length against the received frameDoruk Tan Ozturk
21 hoursnfc: pn533: purge fragmented skbs during cleanupXu Rao
21 hoursnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk
21 hoursnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal
21 hoursnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk
21 hoursnfc: microread: validate target discovery payload lengthsPengpeng Hou
21 hoursnfc: fdp: bound the device-reported read length and fix an skb leakBryam Vargas
21 hoursnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk
21 hoursdrm/amdgpu: check ASPM on the dGPU host linkYang Wang
21 hoursdrm/amd/display: fix BT.2020 YCbCr limited output CSC matrixNathan Lucas
21 hoursdrm/amd/display: Fix BT2020 YCbCr limited/full range inputIlya Bakoulin
21 hoursdrm/amd/amdgpu: disable ASPM in some situationsKenneth Feng
21 hourss390/vfio_ccw: Implement a crw lockEric Farman
21 hourss390/vfio_ccw: Calculate idal length based on idaw typeEric Farman
21 hourss390/vfio_ccw: Ensure first IDAW remains constantEric Farman