stable.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2026-08-17 14:12:13 to 2026-08-17 14:21:48 UTC [more...]

[PATCH 5.10 000/389] 5.10.265-rc1 review
 2026-08-17 13:33 UTC  (199+ messages)
` [PATCH 5.10 149/389] cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
` [PATCH 5.10 192/389] raw: fix a typo in raw_icmp_error()
` [PATCH 5.10 193/389] net: bridge: vlan: fix global vlan option range dumping
` [PATCH 5.10 194/389] net: mpls: initialize rtm_tos in mpls_getroute()
` [PATCH 5.10 195/389] media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
` [PATCH 5.10 196/389] media: uvcvideo: Fix sequence number when no EOF
` [PATCH 5.10 197/389] HID: logitech-dj: Standardise hid_report_enum variable nomenclature
` [PATCH 5.10 198/389] HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write
` [PATCH 5.10 199/389] HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report
` [PATCH 5.10 200/389] net: qrtr: ns: Limit the maximum server registration per node
` [PATCH 5.10 201/389] net: qrtr: ns: Raise node count limit to 512
` [PATCH 5.10 202/389] tls: separate no-async decryption request handling from async
` [PATCH 5.10 203/389] dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
` [PATCH 5.10 204/389] ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup
` [PATCH 5.10 205/389] ASoC: max98090: "
` [PATCH 5.10 206/389] netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()
` [PATCH 5.10 207/389] keys: fix out-of-bounds read in keyring_get_key_chunk()
` [PATCH 5.10 208/389] keys: make keyring key-chunk byte order agree with keyring_diff_objects()
` [PATCH 5.10 209/389] assoc_array: trim the final shortcut word using the current chunk end
` [PATCH 5.10 210/389] netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
` [PATCH 5.10 211/389] netfilter: nft_payload: fix mask build for partial field offload
` [PATCH 5.10 212/389] rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
` [PATCH 5.10 213/389] rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()
` [PATCH 5.10 214/389] scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer
` [PATCH 5.10 215/389] scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
` [PATCH 5.10 216/389] smb: client: fix buffer leaks in SMB1 read and write
` [PATCH 5.10 217/389] hwmon: (nct6775-core) Prevent access to unsupported weight registers
` [PATCH 5.10 218/389] forcedeth: fix UAF of txrx_stats in nv_remove
` [PATCH 5.10 219/389] hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread
` [PATCH 5.10 220/389] hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks
` [PATCH 5.10 221/389] hwmon: (adt7470) Create functions for updating readings and limits
` [PATCH 5.10 222/389] hwmon: (adt7470) Fix some style issues
` [PATCH 5.10 223/389] hwmon: (adt7470) Convert to use regmap
` [PATCH 5.10 224/389] hwmon: (adt7470) Fix PWM auto temp state array and bounds check
` [PATCH 5.10 225/389] powerpc/boot: Fix simpleboot CPU node lookup check
` [PATCH 5.10 226/389] powerpc/boot: Fix treeboot-currituck "
` [PATCH 5.10 227/389] powerpc/boot: Fix treeboot-akebono "
` [PATCH 5.10 228/389] hwmon: (pmbus) Fix return value from pmbus_update_byte_data()
` [PATCH 5.10 229/389] Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp
` [PATCH 5.10 230/389] net: phylink: put link_gpio if phylink_create fails
` [PATCH 5.10 231/389] scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req
` [PATCH 5.10 232/389] net: sxgbe: free TX rings on RX allocation failure
` [PATCH 5.10 233/389] net: sxgbe: check descriptor ring allocation failures
` [PATCH 5.10 234/389] can: isotp: check register_netdevice_notifier() error in module init
` [PATCH 5.10 235/389] tracing/mmiotrace: Reset dropped_count in mmio_reset_data()
` [PATCH 5.10 236/389] octeontx2-pf: Set correct sequence for carrier off and tx queue stop
` [PATCH 5.10 237/389] qede: sync udp_tunnel ports outside qede_lock in the recovery path
` [PATCH 5.10 238/389] ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
` [PATCH 5.10 239/389] rhashtable: clear stale iter->p on table restart
` [PATCH 5.10 240/389] pinctrl: devicetree: dont free uninitialized dev_name on error path
` [PATCH 5.10 241/389] pinctrl: bm1880: add missing select GENERIC_PINCONF
` [PATCH 5.10 242/389] mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
` [PATCH 5.10 243/389] mm/hugetlb: fix list corruption in allocate_file_region_entries()
` [PATCH 5.10 244/389] sctp: validate Adaptation Indication parameter length
` [PATCH 5.10 245/389] audit: fix potential integer overflow in audit_log_n_string()
` [PATCH 5.10 246/389] audit: fix potential use-after-free in audit_del_rule()
` [PATCH 5.10 247/389] Bluetooth: HIDP: validate numbered report payloads
` [PATCH 5.10 248/389] bpf: lwt: Fix dst reference leak on reroute failure
` [PATCH 5.10 249/389] ALSA: 6fire: Fix UAF at error handling during probe
` [PATCH 5.10 250/389] ALSA: lx6464es: fix period byte count for 16-bit streams
` [PATCH 5.10 251/389] ALSA: pcm: wake linked drain waiters on unlink
` [PATCH 5.10 252/389] ASoC: tas2562: fix DVC coefficient write order
` [PATCH 5.10 253/389] ASoC: tas2562: fix broken entries in the volume lookup table
` [PATCH 5.10 254/389] ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()
` [PATCH 5.10 255/389] ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set
` [PATCH 5.10 256/389] ALSA: usb-audio: Clamp frame size in implicit-feedback mode
` [PATCH 5.10 257/389] dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+
` [PATCH 5.10 258/389] e1000: fix memory leak in e1000_probe()
` [PATCH 5.10 259/389] igbvf: Fix leak in TX DMA error cleanup
` [PATCH 5.10 260/389] ipvs: do not propagate one-packet flag to synced conns
` [PATCH 5.10 261/389] net/smc: fix socket use-after-free during link group termination
` [PATCH 5.10 262/389] netfilter: ipset: do not update comments from kernel-side hash adds
` [PATCH 5.10 263/389] tipc: avoid use-after-free in poll trace queue dumps
` [PATCH 5.10 264/389] wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
` [PATCH 5.10 265/389] binfmt_misc: reject a flag character as the field delimiter
` [PATCH 5.10 266/389] mm/page_reporting: use system_freezable_wq to fix UAF during suspend
` [PATCH 5.10 267/389] net: bridge: stop fast-leave after deleting a port group
` [PATCH 5.10 268/389] net: ipv6: clear suppressed fib6 rule result
` [PATCH 5.10 269/389] powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()
` [PATCH 5.10 270/389] um: vector: fix use-after-free in vector_mmsg_rx()
` [PATCH 5.10 271/389] vxlan: re-fetch eth header after route_shortcircuit()
` [PATCH 5.10 272/389] vxlan: unclone skb head before modifying eth header in route_shortcircuit()
` [PATCH 5.10 273/389] vxlan: use neigh_ha_snapshot() "
` [PATCH 5.10 274/389] vxlan: use pskb_network_may_pull() "
` [PATCH 5.10 275/389] tracing: Check return value of __register_event() in trace_module_add_events()
` [PATCH 5.10 276/389] tracing/filters: Fix false positive match in regex_match_full()
` [PATCH 5.10 277/389] selftests/clone3: fix wild pointer access of getline due to missing init
` [PATCH 5.10 278/389] sctp: reject stale cookies with mismatched verification tags
` [PATCH 5.10 279/389] sctp: prevent peer transport count overflow
` [PATCH 5.10 280/389] i2c: amd-mp2: Unregister callback on adapter add failure
` [PATCH 5.10 281/389] cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()
` [PATCH 5.10 282/389] s390/dasd: Fix potential NULL pointer dereference
` [PATCH 5.10 283/389] s390/zcrypt: Validate length for CCA AES cipher key requests
` [PATCH 5.10 284/389] s390/zcrypt: Validate length for CCA ECC private "
` [PATCH 5.10 285/389] phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask
` [PATCH 5.10 286/389] phy: zynqmp: use read-modify-write for SERDES scrambler bypass
` [PATCH 5.10 287/389] phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB
` [PATCH 5.10 288/389] net: openvswitch: fix potential UAF on meter attach failure
` [PATCH 5.10 289/389] net: openvswitch: fix skb leak on flow key update failure during ct
` [PATCH 5.10 290/389] i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock
` [PATCH 5.10 291/389] can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
` [PATCH 5.10 292/389] can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()
` [PATCH 5.10 293/389] can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
` [PATCH 5.10 294/389] can: softing: fw_parse(): validate firmware record spans
` [PATCH 5.10 295/389] can: peak_usb: add bounds check for USB channel index
` [PATCH 5.10 296/389] can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
` [PATCH 5.10 297/389] can: peak_usb: validate uCAN receive record lengths
` [PATCH 5.10 298/389] drm/vc4: Zero the tile state data array before each BIN job
` [PATCH 5.10 299/389] drm/amdgpu: cap GTT size to physical RAM on APUs
` [PATCH 5.10 300/389] drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
` [PATCH 5.10 301/389] drm/vmwgfx: bound DMA command body size against suffix pointer
` [PATCH 5.10 302/389] HID: logitech-dj: Fix maxfield check in DJ short report validation
` [PATCH 5.10 303/389] mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios
` [PATCH 5.10 304/389] Bluetooth: SCO: Fix UAF on sco_sock_timeout
` [PATCH 5.10 305/389] Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
` [PATCH 5.10 306/389] net: openvswitch: fix skb leak on flow key update failure during recirculation
` [PATCH 5.10 308/389] gpio: pch: use raw_spinlock_t for the register lock
` [PATCH 5.10 309/389] mount: honour SB_NOUSER in the new mount API
` [PATCH 5.10 310/389] s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
` [PATCH 5.10 311/389] nfs4: take a reference on the nfs_client when running FREE_STATEID
` [PATCH 5.10 312/389] NFS: Pin the struct nfs_server during a FREE_STATEID call
` [PATCH 5.10 313/389] ARM: npcm: Fix OF node refcount leaks in SMP setup
` [PATCH 5.10 314/389] bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
` [PATCH 5.10 315/389] bpf: Preserve pointer state for commuted arithmetic
` [PATCH 5.10 316/389] net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()
` [PATCH 5.10 317/389] net/sched: cls_route: fix fastmap use-after-free on filter
` [PATCH 5.10 318/389] net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete
` [PATCH 5.10 319/389] net/mlx5: Remove second FW tracer check
` [PATCH 5.10 320/389] net/mlx5: fw_tracer, return NULL on create error
` [PATCH 5.10 321/389] counter: microchip-tcb-capture: Fix DT channel validation
` [PATCH 5.10 322/389] udp: fix potential use-after-free in tunnel segmentation
` [PATCH 5.10 323/389] net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
` [PATCH 5.10 324/389] net: openvswitch: Fix kerneldoc warnings
` [PATCH 5.10 325/389] net: openvswitch: fix kernel-doc warnings in flow.c
` [PATCH 5.10 326/389] net/openvswitch: check Ethernet header length in key_extract()
` [PATCH 5.10 327/389] bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips
` [PATCH 5.10 328/389] bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
` [PATCH 5.10 329/389] sctp: fix addip_serial increment on ASCONF_ACK allocation failure
` [PATCH 5.10 330/389] net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length
` [PATCH 5.10 331/389] net: marvell: prestera: try to load previous fw version
` [PATCH 5.10 332/389] net: prestera: validate firmware header length
` [PATCH 5.10 333/389] net: remove WARN_ON_ONCE() from sk_mc_loop()
` [PATCH 5.10 334/389] net: qrtr: ns: Raise lookup limit to 128
` [PATCH 5.10 335/389] ata: pata_sl82c105: fix bridge revision use-after-free
` [PATCH 5.10 336/389] sctp: clear control chunk transport if it is being removed
` [PATCH 5.10 337/389] sctp: remove the unessessary hold for idev in sctp_v6_err
` [PATCH 5.10 338/389] sctp: extract sctp_v6_err_handle function from sctp_v6_err
` [PATCH 5.10 339/389] sctp: extract sctp_v4_err_handle function from sctp_v4_err
` [PATCH 5.10 340/389] tls: dont abort the connection on signal-interrupted sends
` [PATCH 5.10 341/389] spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers
` [PATCH 5.10 342/389] ALSA: usb-audio: Evaluate packsize caps at the right place
` [PATCH 5.10 343/389] Input: evdev - sanitize event type index when fetching event masks
` [PATCH 5.10 344/389] ALSA: usb-audio: fix OOB write on Type II inbound URBs
` [PATCH 5.10 345/389] usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
` [PATCH 5.10 346/389] usb: gadget: f_ncm: Use unsigned int for ndp_index
` [PATCH 5.10 347/389] ipvs: add totalconns for dest
` [PATCH 5.10 348/389] ipvs: properly update the overload flag on dest edit
` [PATCH 5.10 349/389] ipvs: clear IPv4 options after rebasing tunnel ICMP errors
` [PATCH 5.10 350/389] net/packet: reset the MAC header on the packet-socket transmit path
` [PATCH 5.10 351/389] net: openvswitch: reallocate update replies for mismatched IDs
` [PATCH 5.10 352/389] net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
` [PATCH 5.10 353/389] netfilter: ebt_nflog: pin the NFLOG backend
` [PATCH 5.10 354/389] vt: add permission check for KDSKBMETA ioctl
` [PATCH 5.10 355/389] vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
` [PATCH 5.10 356/389] Input: evdev - fix information leak in evdev_pass_values()
` [PATCH 5.10 357/389] Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
` [PATCH 5.10 358/389] Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
` [PATCH 5.10 359/389] ima: fix out-of-bounds read in xattr_verify()
` [PATCH 5.10 360/389] futex: Prevent robust futex exit race some more
` [PATCH 5.10 361/389] RDMA/rxe: Fix a use-after-free problem in rxe_mmap
` [PATCH 5.10 362/389] mips: sched: Fix CPUMASK_OFFSTACK memory corruption
` [PATCH 5.10 363/389] fscrypt: Replace mk_users keyring with simple list
` [PATCH 5.10 364/389] ipv4: fix use-after-free in fib_nhc_update_mtu()
` [PATCH 5.10 365/389] serial: 8250_dma: Clear stale RX state on shutdown
` [PATCH 5.10 366/389] staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
` [PATCH 5.10 367/389] staging: rtl8723bs: validate monitor transmit frame lengths
` [PATCH 5.10 368/389] misc: fastrpc: fix channel ctx ref leak when session alloc fails
` [PATCH 5.10 369/389] misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free
` [PATCH 5.10 370/389] fbdev: bitblit: bound-check glyph index in bit_cursor()
` [PATCH 5.10 371/389] ipv6: prevent in6_dev_get() from resurrecting inet6_dev
` [PATCH 5.10 372/389] netfilter: bridge: release template ct on non-IP path
` [PATCH 5.10 373/389] net: atlantic: free RX pages of consumed but not refilled buffers
` [PATCH 5.10 374/389] vxlan: do not arm the ageing timer on a device that is down
` [PATCH 5.10 375/389] vsock/virtio: avoid refilling the RX queue after teardown
` [PATCH 5.10 376/389] vhost: reset the vring metadata cache on vring reconfiguration
` [PATCH 5.10 377/389] tipc: read le->link under the node lock in tipc_node_link_down()
` [PATCH 5.10 378/389] ring-buffer: Use current_context for safe per-CPU buffer swap
` [PATCH 5.10 379/389] ipv6: fix Route Information option length validation
` [PATCH 5.10 380/389] ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
` [PATCH 5.10 381/389] bpf, sockmap: Fix sk_redir use-after-free in send verdict
` [PATCH 5.10 382/389] scsi: scsi_debug: Negate wrapped memcmp() result
` [PATCH 5.10 383/389] sctp: keep chunk->transport in step with the list it is queued on
` [PATCH 5.10 384/389] sctp: fix use-after-free of cached ASCONF chunk
` [PATCH 5.10 385/389] sctp: clear new_transport when removing a peer
` [PATCH 5.10 386/389] thunderbolt: Bound the DROM dual link port number before indexing sw->ports
` [PATCH 5.10 387/389] prestera: fix fallback to previous version on same major version
` [PATCH 5.10 388/389] hwmon: (adt7470) Add missing dependency on REGMAP_I2C
` [PATCH 5.10 389/389] hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors

[PATCH] PCI: lock upstream bridge in pci_try_reset_function()
 2026-08-17 14:19 UTC 

[PATCH v3 0/3] dmaengine: fix kref underflow and UAF in dma_chan_put()
 2026-08-17 14:17 UTC  (3+ messages)
` [PATCH v3 1/3] dmaengine: Fix device kref underflow "


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).