messages from 2026-08-25 13:41:16 to 2026-08-25 13:51:05 UTC [more...]
[PATCH 6.6 00/87] 6.6.154-rc1 review
2026-08-25 13:26 UTC (85+ messages)
` [PATCH 6.6 01/87] PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
` [PATCH 6.6 02/87] Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
` [PATCH 6.6 03/87] rndis_host: add overflow check in rndis_rx_fixup()
` [PATCH 6.6 04/87] NTB: ntb_netdev: Preserve RX queue depth on allocation failure
` [PATCH 6.6 05/87] serial: amba-pl011: synchronize DMA teardown
` [PATCH 6.6 06/87] perf: Unify perf_event_free_task() / perf_event_exit_task_context()
` [PATCH 6.6 07/87] perf/core: Fix group leader use-after-free after sibling detach
` [PATCH 6.6 08/87] serial: qcom-geni: fix TX DMA buffer flush
` [PATCH 6.6 09/87] serial: sc16is7xx: fix copy-paste errors in EFR_SWFLOWx_BIT constants
` [PATCH 6.6 10/87] serial: sc16is7xx: convert bitmask definitions to use BIT() macro
` [PATCH 6.6 11/87] serial: sc16is7xx: rename EFR mutex with generic name
` [PATCH 6.6 12/87] serial: sc16is7xx: use guards for simple mutex locks
` [PATCH 6.6 13/87] serial: sc16is7xx: enable THRI before filling TX FIFO
` [PATCH 6.6 14/87] inet: frags: add inet_frag_putn() helper
` [PATCH 6.6 15/87] ipv4: frags: remove ipq_put()
` [PATCH 6.6 16/87] inet: frags: change inet_frag_kill() to defer refcount updates
` [PATCH 6.6 17/87] inet: frags: save a pair of atomic operations in reassembly
` [PATCH 6.6 18/87] inet: frags: publish queues before arming timer
` [PATCH 6.6 19/87] mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
` [PATCH 6.6 20/87] xfs: dont use a xfs_log_iovec for ri_buf in log recovery
` [PATCH 6.6 21/87] xfs: bounds-check buffer log items dirty bitmap
` [PATCH 6.6 22/87] ALSA: dummy: Check card index validity at probe
` [PATCH 6.6 23/87] ocfs2: fix missing metadata reservation for large xattrs
` [PATCH 6.6 24/87] null_blk: fix UBSAN shift-out-of-bounds when zone_size is 0 or overflows
` [PATCH 6.6 25/87] kcov: fix data corruption and race conditions on PREEMPT_RT
` [PATCH 6.6 26/87] ext4: stop retrying saturated xattr cache entries
` [PATCH 6.6 27/87] ext4: clear error before retrying inode xattr space fallback
` [PATCH 6.6 28/87] xfs: validate attr entry pointer before field access
` [PATCH 6.6 29/87] gpio: ml-ioh: use raw_spinlock_t for the register lock
` [PATCH 6.6 30/87] s390/vfio_ccw: Free all memory if cp_init() fails
` [PATCH 6.6 31/87] s390/vfio_ccw: Ensure first IDAW remains constant
` [PATCH 6.6 32/87] s390/vfio_ccw: Calculate idal length based on idaw type
` [PATCH 6.6 33/87] s390/vfio_ccw: Implement a crw lock
` [PATCH 6.6 34/87] drm/amd/amdgpu: disable ASPM in some situations
` [PATCH 6.6 35/87] drm/amd/display: Fix BT2020 YCbCr limited/full range input
` [PATCH 6.6 36/87] drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
` [PATCH 6.6 37/87] drm/amdgpu: check ASPM on the dGPU host link
` [PATCH 6.6 38/87] nfc: digital: clamp SENSF_RES length to the destination buffer
` [PATCH 6.6 39/87] nfc: fdp: bound the device-reported read length and fix an skb leak
` [PATCH 6.6 40/87] nfc: microread: validate target discovery payload lengths
` [PATCH 6.6 41/87] nfc: llcp: bound the connect_sn TLV walk to the skb
` [PATCH 6.6 42/87] nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
` [PATCH 6.6 43/87] nfc: llcp: reject PDUs shorter than the LLCP header
` [PATCH 6.6 44/87] nfc: pn533: purge fragmented skbs during cleanup
` [PATCH 6.6 45/87] nfc: st21nfca: validate ATR_REQ length against the received frame
` [PATCH 6.6 46/87] nfc: nci: fix out-of-bounds write in nci_target_auto_activated()
` [PATCH 6.6 47/87] nfc: nci: fix uninit-value in the RF discover/activated NTF handlers
` [PATCH 6.6 48/87] nfc: nci: free destination parameters when closing a connection
` [PATCH 6.6 49/87] ndisc: ndisc_send_redirect() cleanup
` [PATCH 6.6 50/87] Input: byd - synchronize timer deletion before freeing private data
` [PATCH 6.6 51/87] libceph: fix OOB read in decode_watchers() via missing bounds check
` [PATCH 6.6 52/87] ipv4: reject undersized MTUs in ip_do_fragment()
` [PATCH 6.6 53/87] ipv6: fix use-after-free in ip6_finish_output2()
` [PATCH 6.6 54/87] nvmet-auth: zero the AUTH_RECEIVE response buffer
` [PATCH 6.6 55/87] nvmet-fc: fix invalid free in LS IOD error path
` [PATCH 6.6 56/87] nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
` [PATCH 6.6 57/87] ASoC: sof: pcm: use snd_pcm_direction_name()
` [PATCH 6.6 58/87] ASoC: SOF: Relocate and rework functionality for PCM stream freeing
` [PATCH 6.6 59/87] ASoC: SOF: pcm: Move period/buffer configuration print after platform open
` [PATCH 6.6 60/87] ASoC: SOF: pcm: Add snd_sof_pcm specific wrappers for dev_dbg() and dev_err()
` [PATCH 6.6 62/87] ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
` [PATCH 6.6 63/87] mptcp: pm: fix data race in add_addr timer callback
` [PATCH 6.6 64/87] HID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-C
` [PATCH 6.6 65/87] HID: magicmouse: do not keep a stale msc->input if no input is claimed
` [PATCH 6.6 66/87] HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID
` [PATCH 6.6 67/87] HID: core: fix OOB read of field->usage in hid_set_field()
` [PATCH 6.6 68/87] xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
` [PATCH 6.6 71/87] Input: atkbd - skip deactivate for HONOR ZQC-P
` [PATCH 6.6 72/87] mptcp: pm: fix memory leak from alloc-during-teardown race
` [PATCH 6.6 73/87] selinux: fix style issues in security/selinux/ss/policydb.h
` [PATCH 6.6 74/87] selinux: fix style issues in security/selinux/ss/policydb.c
` [PATCH 6.6 75/87] selinux: use known type instead of void pointer
` [PATCH 6.6 76/87] selinux: avoid unnecessary indirection in struct level_datum
` [PATCH 6.6 77/87] selinux: make more use of str_read() when loading the policy
` [PATCH 6.6 78/87] selinux: use u16 for security classes
` [PATCH 6.6 79/87] selinux: more strict policy parsing
` [PATCH 6.6 80/87] selinux: reject a permission value exceeding the class permission count
` [PATCH 6.6 81/87] selinux: require a classs permission values to cover its "
` [PATCH 6.6 82/87] HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
` [PATCH 6.6 83/87] HID: core: fix number/pointer type confusion on long items
` [PATCH 6.6 84/87] HID: sensor: custom: Fix use-after-free in enable_sensor
` [PATCH 6.6 85/87] HID: hyperv: validate initial device info bounds
` [PATCH 6.6 86/87] Bluetooth: hci_event: fix LE list UAF on reset
` [PATCH 6.6 87/87] Bluetooth: hci_event: validate LE Set CIG Parameters response
[PATCH 6.12 00/77] 6.12.106-rc1 review
2026-08-25 13:26 UTC (78+ messages)
` [PATCH 6.12 01/77] PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
` [PATCH 6.12 02/77] Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
` [PATCH 6.12 03/77] ALSA: scarlett2: Use a private URB for the notification endpoint
` [PATCH 6.12 04/77] rndis_host: add overflow check in rndis_rx_fixup()
` [PATCH 6.12 05/77] gpio: ml-ioh: use raw_spinlock_t for the register lock
` [PATCH 6.12 06/77] gve: fix zero-length skb frag with header-split
` [PATCH 6.12 07/77] hwmon: (ltc4286) Fix symbol namespace of MODULE_IMPORT_NS()
` [PATCH 6.12 08/77] netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
` [PATCH 6.12 09/77] inet: frags: add inet_frag_putn() helper
` [PATCH 6.12 10/77] ipv4: frags: remove ipq_put()
` [PATCH 6.12 11/77] inet: frags: change inet_frag_kill() to defer refcount updates
` [PATCH 6.12 12/77] inet: frags: save a pair of atomic operations in reassembly
` [PATCH 6.12 13/77] inet: frags: publish queues before arming timer
` [PATCH 6.12 14/77] serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx
` [PATCH 6.12 15/77] NTB: ntb_netdev: Preserve RX queue depth on allocation failure
` [PATCH 6.12 16/77] serial: amba-pl011: synchronize DMA teardown
` [PATCH 6.12 17/77] serial: sc16is7xx: rename EFR mutex with generic name
` [PATCH 6.12 18/77] serial: sc16is7xx: use guards for simple mutex locks
` [PATCH 6.12 19/77] serial: sc16is7xx: enable THRI before filling TX FIFO
` [PATCH 6.12 20/77] xfs: namespace the maximum length/refcount symbols
` [PATCH 6.12 21/77] xfs: dont use a xfs_log_iovec for ri_buf in log recovery
` [PATCH 6.12 22/77] xfs: bounds-check buffer log items dirty bitmap
` [PATCH 6.12 23/77] xfs: hoist per-bucket unlinked list check to helper
` [PATCH 6.12 24/77] xfs: dont livelock in scrub on a circular unlinked list
` [PATCH 6.12 25/77] ALSA: dummy: Check card index validity at probe
` [PATCH 6.12 26/77] ocfs2: fix missing metadata reservation for large xattrs
` [PATCH 6.12 27/77] null_blk: fix UBSAN shift-out-of-bounds when zone_size is 0 or overflows
` [PATCH 6.12 28/77] kcov: fix data corruption and race conditions on PREEMPT_RT
` [PATCH 6.12 29/77] ext4: stop retrying saturated xattr cache entries
` [PATCH 6.12 30/77] ext4: clear error before retrying inode xattr space fallback
` [PATCH 6.12 31/77] ext4: propagate errors from fast commit range replay
` [PATCH 6.12 32/77] xfs: validate attr entry pointer before field access
` [PATCH 6.12 33/77] libceph: fix OOB read in decode_watchers() via missing bounds check
` [PATCH 6.12 34/77] nfc: digital: clamp SENSF_RES length to the destination buffer
` [PATCH 6.12 35/77] nfc: fdp: bound the device-reported read length and fix an skb leak
` [PATCH 6.12 36/77] nfc: microread: validate target discovery payload lengths
` [PATCH 6.12 37/77] nfc: llcp: bound the connect_sn TLV walk to the skb
` [PATCH 6.12 38/77] nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
` [PATCH 6.12 39/77] nfc: llcp: reject PDUs shorter than the LLCP header
` [PATCH 6.12 40/77] nfc: pn533: purge fragmented skbs during cleanup
` [PATCH 6.12 41/77] nfc: st21nfca: validate ATR_REQ length against the received frame
` [PATCH 6.12 42/77] nfc: nci: fix out-of-bounds write in nci_target_auto_activated()
` [PATCH 6.12 43/77] nfc: nci: fix uninit-value in the RF discover/activated NTF handlers
` [PATCH 6.12 44/77] nfc: nci: free destination parameters when closing a connection
` [PATCH 6.12 45/77] ndisc: ndisc_send_redirect() cleanup
` [PATCH 6.12 46/77] Input: byd - synchronize timer deletion before freeing private data
` [PATCH 6.12 47/77] ipv4: reject undersized MTUs in ip_do_fragment()
` [PATCH 6.12 48/77] ipv6: fix use-after-free in ip6_finish_output2()
` [PATCH 6.12 49/77] nvmet-auth: zero the AUTH_RECEIVE response buffer
` [PATCH 6.12 50/77] nvmet-fc: fix invalid free in LS IOD error path
` [PATCH 6.12 51/77] nvmet-tcp: bound SGL data length before allocating command buffers
` [PATCH 6.12 52/77] nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
` [PATCH 6.12 53/77] selinux: require a classs permission values to cover its permission count
` [PATCH 6.12 54/77] mptcp: pm: fix data race in add_addr timer callback
` [PATCH 6.12 55/77] ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
` [PATCH 6.12 56/77] drm/xe: Fix DPT allocation paths
` [PATCH 6.12 57/77] HID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-C
` [PATCH 6.12 58/77] HID: magicmouse: re-enable multitouch after reset-resume
` [PATCH 6.12 59/77] HID: magicmouse: do not keep a stale msc->input if no input is claimed
` [PATCH 6.12 60/77] HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID
` [PATCH 6.12 61/77] HID: core: fix OOB read of field->usage in hid_set_field()
` [PATCH 6.12 62/77] net/ionic: avoid OOB TX partner lookup for hwstamp RXQ
` [PATCH 6.12 63/77] xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
` [PATCH 6.12 64/77] ipv4: start using dst_dev_rcu()
` [PATCH 6.12 65/77] mptcp: pm: fix memory leak from alloc-during-teardown race
` [PATCH 6.12 66/77] Input: atkbd - skip deactivate for HONOR FMB-Ps internal keyboard
` [PATCH 6.12 67/77] Input: atkbd - skip deactivate for HONOR ZQC-P
` [PATCH 6.12 68/77] HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
` [PATCH 6.12 69/77] HID: nintendo: register input device after capabilities are set
` [PATCH 6.12 70/77] HID: nintendo: stop device IO before hid_hw_stop on probe failure
` [PATCH 6.12 71/77] HID: core: fix number/pointer type confusion on long items
` [PATCH 6.12 72/77] HID: sensor: custom: Fix use-after-free in enable_sensor
` [PATCH 6.12 73/77] HID: hyperv: validate initial device info bounds
` [PATCH 6.12 74/77] Bluetooth: hci_event: fix LE list UAF on reset
` [PATCH 6.12 75/77] Bluetooth: hci_event: validate LE Set CIG Parameters response
` [PATCH 6.12 76/77] Bluetooth: ISO: do not force BT_LISTEN after a failed BIG sync
` [PATCH 6.12 77/77] Bluetooth: hci_aml: validate firmware segment lengths
[PATCH 6.18 00/94] 6.18.47-rc1 review
2026-08-25 13:26 UTC (38+ messages)
` [PATCH 6.18 30/94] ext4: dont enable DAX on new encrypted files
` [PATCH 6.18 34/94] nfc: digital: clamp SENSF_RES length to the destination buffer
` [PATCH 6.18 35/94] nfc: fdp: bound the device-reported read length and fix an skb leak
` [PATCH 6.18 36/94] nfc: microread: validate target discovery payload lengths
` [PATCH 6.18 37/94] nfc: llcp: bound the connect_sn TLV walk to the skb
` [PATCH 6.18 38/94] nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
` [PATCH 6.18 39/94] nfc: llcp: reject PDUs shorter than the LLCP header
` [PATCH 6.18 65/94] HID: magicmouse: fix battery reporting for Bluetooth Magic Trackpad USB-C
` [PATCH 6.18 66/94] HID: magicmouse: re-enable multitouch after reset-resume
` [PATCH 6.18 67/94] HID: magicmouse: do not keep a stale msc->input if no input is claimed
` [PATCH 6.18 68/94] HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID
` [PATCH 6.18 69/94] HID: core: fix OOB read of field->usage in hid_set_field()
` [PATCH 6.18 70/94] HID: pidff: fix OOB write when hid->inputs is empty
` [PATCH 6.18 71/94] net/ionic: avoid OOB TX partner lookup for hwstamp RXQ
` [PATCH 6.18 72/94] xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
` [PATCH 6.18 73/94] Input: atkbd - skip deactivate for HONOR FMB-Ps internal keyboard
` [PATCH 6.18 74/94] Input: atkbd - skip deactivate for HONOR ZQC-P
` [PATCH 6.18 75/94] futex/pi: Reject cross-mm private futex owners
` [PATCH 6.18 76/94] futex: Sanitize and document task_struct::futex::state transitions
` [PATCH 6.18 77/94] futex/pi: Plug private futex exec() race
` [PATCH 6.18 78/94] futex: Fix race on the initial mm->futex.phash.ref allocation
` [PATCH 6.18 79/94] futex: Fix might_sleep() warning in futex_pivot_pending()
` [PATCH 6.18 80/94] HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
` [PATCH 6.18 81/94] HID: nintendo: register input device after capabilities are set
` [PATCH 6.18 82/94] HID: nintendo: stop device IO before hid_hw_stop on probe failure
` [PATCH 6.18 83/94] HID: core: fix number/pointer type confusion on long items
` [PATCH 6.18 84/94] HID: sensor: custom: Fix use-after-free in enable_sensor
` [PATCH 6.18 85/94] HID: uclogic: fix use-after-free of inrange_timer on remove
` [PATCH 6.18 86/94] HID: hyperv: validate initial device info bounds
` [PATCH 6.18 87/94] drm/xe: Dont hand out the flat CCS storage as usable VRAM
` [PATCH 6.18 88/94] Bluetooth: hci_event: fix LE list UAF on reset
` [PATCH 6.18 89/94] Bluetooth: hci_event: validate LE Set CIG Parameters response
` [PATCH 6.18 90/94] Bluetooth: hci_sync: Fix accept list UAF during suspend
` [PATCH 6.18 91/94] Bluetooth: ISO: do not force BT_LISTEN after a failed BIG sync
` [PATCH 6.18 92/94] Bluetooth: ISO: zero the sockaddr before returning it in getname
` [PATCH 6.18 93/94] Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
` [PATCH 6.18 94/94] Bluetooth: hci_aml: validate firmware segment lengths
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox