summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
5 daysLinux 6.12.107v6.12.107linux-6.12.yGreg Kroah-Hartman1-1/+1
5 daysinet: frags: strip GSO state from fragments before reassemblyXinyang Ge1-0/+7
6 daysLinux 6.12.106v6.12.106Greg Kroah-Hartman1-1/+1
6 daysnet: gro: properly validate BIG TCP aggregation criteriaEric Dumazet1-2/+5
6 daysBluetooth: hci_aml: validate firmware segment lengthsLaxman Acharya Padhya1-2/+16
6 daysBluetooth: ISO: do not force BT_LISTEN after a failed BIG syncAli Ahmet Memis1-8/+22
6 daysBluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya1-2/+4
6 daysBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye1-0/+2
6 daysHID: hyperv: validate initial device info boundsMichael Bommarito1-3/+24
6 daysHID: sensor: custom: Fix use-after-free in enable_sensorHaoxiang Li1-8/+9
6 daysHID: core: fix number/pointer type confusion on long itemsJann Horn1-0/+6
6 daysHID: nintendo: stop device IO before hid_hw_stop on probe failureJiangshan Yi1-3/+4
6 daysHID: nintendo: register input device after capabilities are setJiangshan Yi1-4/+4
6 daysHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()Ibrahim Hashimov1-1/+6
6 daysInput: atkbd - skip deactivate for HONOR ZQC-PDonglin Lyu1-5/+13
6 daysInput: atkbd - skip deactivate for HONOR FMB-P's internal keyboardCryolitia PukNgae1-0/+7
6 daysmptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar4-6/+20
6 daysipv4: start using dst_dev_rcu()Eric Dumazet4-8/+10
6 daysxfrm: fix sk_dst_cache double-free in xfrm_user_policy()Xiang Mei (Microsoft)1-2/+2
6 daysnet/ionic: avoid OOB TX partner lookup for hwstamp RXQAnand Khoje2-3/+21
6 daysHID: core: fix OOB read of field->usage in hid_set_field()Baul Lee1-2/+3
6 daysHID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_IDLee Jones1-0/+16
6 daysHID: magicmouse: do not keep a stale msc->input if no input is claimedJose Villaseñor Montfort1-0/+10
6 daysHID: magicmouse: re-enable multitouch after reset-resumeChristopher Kodama1-0/+19
6 daysHID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-CAndrei Fed2-1/+21
6 daysdrm/xe: Fix DPT allocation paths.Maarten Lankhorst1-18/+6
6 daysASoC: codecs: lpass-tx-macro: Fix enum kcontrol accessesDawid Wróbel1-2/+2
6 daysmptcp: pm: fix data race in add_addr timer callbackQing Luo1-2/+4
6 daysnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsGreg Kroah-Hartman1-2/+3
6 daysnvmet-tcp: bound SGL data length before allocating command buffersIbrahim Hashimov1-0/+13
6 daysnvmet-fc: fix invalid free in LS IOD error pathJiang HongHui1-1/+1
6 daysnvmet-auth: zero the AUTH_RECEIVE response bufferBryam Vargas1-1/+1
6 daysipv6: fix use-after-free in ip6_finish_output2()Luxiao Xu1-0/+2
6 daysipv4: reject undersized MTUs in ip_do_fragment()Yong Wang1-0/+4
6 daysInput: byd - synchronize timer deletion before freeing private dataLinmao Li1-1/+1
6 daysndisc: ndisc_send_redirect() cleanupEric Dumazet1-5/+3
6 daysnfc: nci: free destination parameters when closing a connectionLinmao Li1-0/+1
6 daysnfc: nci: fix uninit-value in the RF discover/activated NTF handlersSamuel Page1-2/+2
6 daysnfc: nci: fix out-of-bounds write in nci_target_auto_activated()Samuel Page1-0/+6
6 daysnfc: st21nfca: validate ATR_REQ length against the received frameDoruk Tan Ozturk1-0/+3
6 daysnfc: pn533: purge fragmented skbs during cleanupXu Rao1-0/+1
6 daysnfc: llcp: reject PDUs shorter than the LLCP headerDoruk Tan Ozturk1-0/+5
6 daysnfc: llcp: fix OOB read and u8 offset wrap in TLV parsersMuhammad Bilal1-2/+16
6 daysnfc: llcp: bound the connect_sn TLV walk to the skbDoruk Tan Ozturk1-4/+6
6 daysnfc: microread: validate target discovery payload lengthsPengpeng Hou1-2/+29
6 daysnfc: fdp: bound the device-reported read length and fix an skb leakBryam Vargas1-0/+27
6 daysnfc: digital: clamp SENSF_RES length to the destination bufferDoruk Tan Ozturk1-0/+2
6 dayslibceph: fix OOB read in decode_watchers() via missing bounds checkPavitra Jha1-1/+4
6 daysxfs: validate attr entry pointer before field accessHongling Zeng1-0/+14
6 daysext4: propagate errors from fast commit range replayGuanghui Yang1-4/+12