summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
4 daysLinux 7.1.12v7.1.12linux-7.1.yGreg Kroah-Hartman1-1/+1
4 daysinet: frags: strip GSO state from fragments before reassemblyXinyang Ge1-0/+7
5 daysLinux 7.1.11v7.1.11Greg Kroah-Hartman1-1/+1
5 daysptp: vmclock: prevent read-only mappings from becoming writableAbdifatah Suruur1-0/+6
5 daysfutex: Avoid private hash use-after-free on final putFelix Hoffmann1-1/+3
5 daysBluetooth: hci_aml: validate firmware segment lengthsLaxman Acharya Padhya1-2/+16
5 daysBluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255Ali Ahmet Memis1-0/+8
5 daysBluetooth: ISO: zero the sockaddr before returning it in getnameAli Ahmet Memis1-0/+2
5 daysBluetooth: ISO: do not force BT_LISTEN after a failed BIG syncAli Ahmet Memis1-8/+22
5 daysBluetooth: hci_sync: Fix accept list UAF during suspendChengfeng Ye1-9/+37
5 daysBluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya1-2/+4
5 daysBluetooth: hci_event: fix LE list UAF on resetChengfeng Ye1-0/+2
5 daysHID: input: read battery capacity from its actual report offsetJose Villaseñor Montfort2-4/+15
5 daysHID: hyperv: validate initial device info boundsMichael Bommarito1-3/+24
5 daysHID: uclogic: fix use-after-free of inrange_timer on removeIbrahim Hashimov1-1/+11
5 daysHID: sensor: custom: Fix use-after-free in enable_sensorHaoxiang Li1-8/+9
5 daysHID: ft260: fix stack-use-after-return write in I2C read raceRaman Varabets1-1/+24
5 daysHID: core: fix number/pointer type confusion on long itemsJann Horn1-0/+6
5 daysHID: rapoo: fix missing hid_is_usb() checkJann Horn2-1/+2
5 daysHID: nintendo: stop device IO before hid_hw_stop on probe failureJiangshan Yi1-3/+4
5 daysHID: nintendo: register input device after capabilities are setJiangshan Yi1-4/+4
5 daysHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()Ibrahim Hashimov1-1/+6
5 daysHID: huawei: fix missing hid_is_usb() checkJann Horn1-2/+3
5 daysHID: asus: fix missing hid_is_usb() checkJann Horn1-1/+1
5 daysfutex: Fix might_sleep() warning in futex_pivot_pending()Peter Zijlstra5-4/+54
5 daysfutex: Fix race on the initial mm->futex.phash.ref allocationHyunwoo Kim1-6/+10
5 daysfutex: Fix race in futex_pivot_pending() during private hash resizeYao Kai1-2/+2
5 daysfutex/pi: Plug private futex exec() raceThomas Gleixner4-25/+61
5 daysfutex: Sanitize and document task_struct::futex::state transitionsThomas Gleixner2-40/+73
5 daysfutex/pi: Reject cross-mm private futex ownersKyle Zeng3-9/+29
5 daysnet/ionic: avoid OOB TX partner lookup for hwstamp RXQAnand Khoje2-3/+21
5 daysHID: pidff: fix OOB write when hid->inputs is emptyBaul Lee1-3/+10
5 daysHID: core: fix OOB read of field->usage in hid_set_field()Baul Lee1-2/+3
5 daysHID: magicmouse: do not keep a stale msc->input if no input is claimedJose Villaseñor Montfort1-0/+10
5 daysHID: magicmouse: re-enable multitouch after reset-resumeChristopher Kodama1-0/+19
5 daysHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()Jose Villaseñor Montfort1-5/+20
5 daysHID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-CAndrei Fed2-1/+21
5 daysmptcp: pm: fix memory leak from alloc-during-teardown raceShardul Bankar3-5/+19
5 daysmptcp: pm: uniform announced addresses helpersMatthieu Baerts (NGI0)6-34/+33
5 daysmptcp: pm: rename add_entry structure to add_addrMatthieu Baerts (NGI0)2-12/+12
5 daysdrm/amdgpu: Allocate coredump ring buffers per ringLijo Lazar2-26/+27
5 daysdrm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_formatMikhail Gavrilov3-124/+184
5 daysfbdev: serialize mode sysfs access with lock_fb_info()Melbin K Mathew1-8/+38
5 daysfbdev: Wrap user-invoked calls to fb_set_var() in helperThomas Zimmermann7-18/+19
5 daysnvmet: pci-epf: put CQ ref on create_cq mapping failureYifei Gao1-0/+1
5 daysnvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()Shin'ichiro Kawasaki1-3/+6
5 daysnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocationsGreg Kroah-Hartman1-2/+4
5 daysnvmet-tcp: bound SGL data length before allocating command buffersIbrahim Hashimov1-0/+13
5 daysnvmet-fc: fix invalid free in LS IOD error pathJiang HongHui1-1/+1
5 daysnvmet-auth: zero the AUTH_RECEIVE response bufferBryam Vargas1-1/+1