aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2016-10-02cifs: Check for existing directory when opening file with O_CREATlinux-3.10.y-securitySachin Prabhu1-3/+21
2016-10-02workqueue: fix ghost PENDING flag while doing MQ IORoman Pen1-0/+29
2016-10-02modules: fix longstanding /proc/kallsyms vs module insertion race.Rusty Russell2-50/+78
2016-10-02module: wrapper for symbol name.Rusty Russell1-11/+15
2016-10-02virtio: fix memory leak of virtio ida cache layersSuman Anna1-0/+1
2016-10-02tracepoints: Do not trace when cpu is offlineSteven Rostedt (Red Hat)1-0/+6
2016-10-02pty: make sure super_block is still valid in final /dev/tty closeHerton R. Krzesinski3-3/+30
2016-10-02pty: fix possible use after free of tty->driver_dataHerton R. Krzesinski1-1/+17
2016-10-02crypto: af_alg - Disallow bind/setkey/... after accept(2)Herbert Xu2-8/+35
2016-10-02ALSA: dummy: Implement timer backend switching more safelyTakashi Iwai1-18/+19
2016-10-02l2tp: protect tunnel->del_work by ref_countAlexander Couzens1-2/+9
2016-10-02auxdisplay: ks0108: fix refcountSudip Mukherjee1-0/+1
2016-10-02x86/xen: Probe target addresses in set_aliased_prot() before the hypercallAndy Lutomirski1-0/+40
2016-10-02console: Fix console name size mismatchPeter Hurley1-1/+3
2016-10-02mm/memory hotplug: postpone the reset of obsolete pgdatGu Zheng1-9/+4
2016-10-02x86/fpu: Avoid math_state_restore() without used_math() in __restore_xstate_s...Oleg Nesterov1-3/+4
2016-10-02x86, fpu: __restore_xstate_sig()->math_state_restore() needs preempt_disable()Oleg Nesterov1-1/+4
2016-10-02workqueue: fix subtle pool management issue which can stall whole worker_poolTejun Heo1-26/+13
2016-10-02sata_dwc_460ex: fix resource leak on error pathAndy Shevchenko1-14/+12
2016-10-02eCryptfs: Force RO mount when encrypted view is enabledTyler Hicks2-15/+13
2016-10-02dm bufio: fix memleak when using a dm_buffer's inline bioDarrick J. Wong1-1/+19
2016-10-02net/l2tp: don't fall back on UDP [get|set]sockoptSasha Levin1-2/+2
2016-10-02SCSI: storvsc: NULL pointer dereference fixAles Novak1-0/+3
2016-10-02dm sysfs: fix a module unload raceMikulas Patocka6-27/+74
2016-10-02dm: wait until embedded kobject is released before destroying a deviceMikulas Patocka3-1/+22
2016-10-02ore: Fix wrong math in allocation of per device BIOBoaz Harrosh2-12/+26
2016-10-02fuse: fix pipe_buf_operationsMiklos Szeredi4-48/+26
2016-10-02ath9k_htc: properly set MAC address and BSSID maskMathy Vanhoef2-10/+20
2016-10-02lib/genalloc.c: fix overflow of ending address of memory chunkJoonyoung Shim2-9/+14
2016-10-02packet: fix use after free race in send path when dev is releasedDaniel Borkmann2-23/+37
2016-10-02dm cache: fix a race condition between queuing new migrations and quiescing f...Joe Thornber1-14/+40
2016-10-02ipc, msg: forbid negative values for "msg{max,mnb,mni}"Mathias Krause2-11/+15
2016-10-02slub: Handle NULL parameter in kmem_cache_flagsChristoph Lameter1-2/+2
2016-10-02rt2x00: fix a crash bug in the HT descriptor handling fixFelix Fietkau1-1/+2
2016-10-02mm: avoid reinserting isolated balloon pages into LRU listsRafael Aquini3-2/+29
2016-10-02virtio: support unlocked queue pollMichael S. Tsirkin2-12/+48
2016-10-02staging: line6: Fix unlocked snd_pcm_stop() callTakashi Iwai1-1/+4
2016-10-02ASoC: s6000: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+2
2016-10-02ALSA: usx2y: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+4
2016-10-02ALSA: asihpi: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+3
2016-10-02ALSA: atiixp: Fix unlocked snd_pcm_stop() callTakashi Iwai2-0/+4
2016-10-02ALSA: pxa2xx: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+2
2016-10-02ALSA: ua101: Fix unlocked snd_pcm_stop() callTakashi Iwai1-2/+12
2016-10-02ALSA: 6fire: Fix unlocked snd_pcm_stop() callTakashi Iwai1-2/+10
2016-09-06Linux 3.10.0-security103v3.10.0-security103Sasha Levin1-1/+1
2016-09-06net/irda: fix NULL pointer dereference on memory allocation failureVegard Nossum1-2/+5
2016-09-06block: fix use-after-free in seq fileVegard Nossum1-0/+1
2016-09-06sctp: Prevent soft lockup when sctp_accept() is called during a timeout eventKarl Heiss1-19/+23
2016-09-06ecryptfs: don't allow mmap when the lower fs doesn't support itJeff Mahoney1-1/+14
2016-09-06Revert "ecryptfs: forbid opening files without mmap handler"Jeff Mahoney1-11/+2
2016-09-06fs/nilfs2: fix potential underflow in call to crc32_leTorsten Hilbrich1-1/+1
2016-09-06ALSA: timer: Fix leak in events via snd_timer_user_tinterruptKangjie Lu1-0/+1
2016-09-06ALSA: timer: Fix leak in events via snd_timer_user_ccallbackKangjie Lu1-0/+1
2016-09-06ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMSKangjie Lu1-0/+1
2016-09-06ALSA: dummy: Fix a use-after-free at closingTakashi Iwai1-0/+1
2016-09-06tty/vt/keyboard: fix OOB access in do_compute_shiftstate()Dmitry Torokhov1-21/+9
2016-09-06iio: Fix error handling in iio_trigger_attach_poll_funcCrestez Dan Leonard1-5/+18
2016-09-06tracing: Handle NULL formats in hold_module_trace_bprintk_format()Steven Rostedt (Red Hat)1-1/+6
2016-09-06IB/security: Restrict use of the write() interfaceJason Gunthorpe5-0/+72
2016-09-06mac80211: mesh: flush mesh paths unconditionallyBob Copeland1-0/+4
2016-09-06crypto: scatterwalk - Fix test in scatterwalk_doneHerbert Xu1-1/+2
2016-09-06ecryptfs: forbid opening files without mmap handlerJann Horn1-2/+11
2016-09-06KVM: x86: fix OOPS after invalid KVM_SET_DEBUGREGSPaolo Bonzini1-0/+5
2016-09-06xfs: fix inode validity check in xfs_iflush_clusterDave Chinner1-4/+4
2016-09-06xfs: xfs_iflush_cluster fails to abort on errorDave Chinner1-4/+13
2016-09-06ext4: fix reference counting bug on block allocation errorVegard Nossum1-14/+3
2016-09-06ext4: short-cut orphan cleanup on errorVegard Nossum1-0/+10
2016-09-06ext4: don't call ext4_should_journal_data() on the journal inodeVegard Nossum1-3/+3
2016-09-06ext4: check for extents that wrap aroundVegard Nossum1-2/+6
2016-09-06ext4: fix hang when processing corrupted orphaned inode listTheodore Ts'o1-4/+6
2016-09-06Input: xpad - validate USB endpoint count during probeCameron Gutman1-0/+3
2016-09-06tcp: make challenge acks less predictableCharles (Chas) Williams1-3/+11
2016-09-06HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commandsScott Bauer1-5/+5
2016-09-06mm: migrate dirty page without clear_page_dirty_for_io etcHugh Dickins1-20/+31
2016-09-06KEYS: potential uninitialized variableDan Carpenter1-1/+1
2016-09-06cdc_ncm: do not call usbnet_link_change from cdc_ncm_bindBjørn Mork1-15/+5
2016-09-06pipe: limit the per-user amount of pages allocated in pipesWilly Tarreau5-2/+87
2016-09-06x86/mm: Add barriers and document switch_mm()-vs-flush synchronizationAndy Lutomirski2-4/+52
2016-09-06sched/x86: Optimize switch_mm() for multi-threaded workloadsRik van Riel1-7/+13
2016-09-06USB: usbfs: fix potential infoleak in devioKangjie Lu1-4/+5
2016-09-06USB: fix invalid memory access in hub_activate()Alan Stern1-3/+20
2016-09-06udp: properly support MSG_PEEK with truncated buffersEric Dumazet2-4/+8
2016-09-06netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal5-130/+92
2016-09-06Revert "netfilter: ensure number of counters is >0 in do_replace()"Bernhard Thaler1-4/+0
2016-09-06netfilter: x_tables: do compat validation via translate_tableFlorian Westphal4-333/+80
2016-09-06netfilter: ensure number of counters is >0 in do_replace()Dave Jones4-0/+22
2016-09-06netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal5-51/+26
2016-09-06netfilter: ip6_tables: simplify translate_compat_table argsFlorian Westphal1-36/+25
2016-09-06netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-36/+25
2016-09-06netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal1-46/+36
2016-09-06netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal1-2/+2
2016-09-06netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal1-5/+76
2016-09-06netfilter: x_tables: check for bogus target offsetFlorian Westphal5-10/+26
2016-09-06netfilter: x_tables: check standard target size tooFlorian Westphal1-0/+15
2016-09-06netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal5-3/+31
2016-09-06netfilter: x_tables: assert minimum target sizeFlorian Westphal1-0/+3
2016-09-06netfilter: x_tables: kill check_entry helperFlorian Westphal3-35/+24
2016-09-06netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal5-32/+41
2016-09-06netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal3-3/+13
2016-09-06netfilter: x_tables: fix unconditional helperFlorian Westphal3-33/+31
2016-09-06netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal3-6/+12
2016-09-06netfilter: x_tables: validate e->target_offset earlyFlorian Westphal3-27/+24
2016-09-06ext4: check for zero length extent explicitlyEryu Guan1-1/+1
2016-08-11tracing: Fix trace_printk() to print when not using bprintk()Steven Rostedt (Red Hat)2-3/+6
2016-06-23Linux 3.10.0-security102v3.10.0-security102Sasha Levin1-1/+1
2016-06-23USB: serial: quatech2: fix use-after-free in probe error pathJohan Hovold1-0/+1
2016-06-23USB: serial: keyspan: fix use-after-free in probe error pathJohan Hovold1-0/+4
2016-06-23Bluetooth: vhci: purge unhandled skbsJiri Slaby1-0/+1
2016-06-23net: fix a kernel infoleak in x25 moduleKangjie Lu1-0/+1
2016-06-23net: bridge: fix old ioctl unlocked net device walkNikolay Aleksandrov1-2/+3
2016-06-23net: fix infoleak in rtnetlinkKangjie Lu1-8/+10
2016-06-23net: fix infoleak in llcKangjie Lu1-0/+1
2016-06-23atl2: Disable unimplemented scatter/gather featureBen Hutchings1-1/+1
2016-06-23packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interfaceMathias Krause1-0/+1
2016-06-23decnet: Do not build routes to devices without decnet private data.David S. Miller1-1/+8
2016-06-23Input: max8997-haptic - fix NULL pointer dereferenceMarek Szyprowski1-2/+4
2016-06-23get_rock_ridge_filename(): handle malformed NM entriesAl Viro1-3/+10
2016-06-23proc: prevent accessing /proc/<PID>/environ until it's readyMathias Krause1-1/+2
2016-06-23USB: usbip: fix potential out-of-bounds writeIgnat Korchagin1-0/+11
2016-06-23efi: Fix out-of-bounds read in variable_matches()Laszlo Ersek1-11/+26
2016-06-23efi: Make efivarfs entries immutable by defaultPeter Jones9-41/+259
2016-06-23efi: Make our variable validation list include the guidPeter Jones3-22/+39
2016-06-23efi: Do variable name validation tests in utf8Peter Jones3-28/+40
2016-06-23Input: gtco - fix crash on detecting device without endpointsVladis Dronov1-1/+9
2016-06-23nl80211: check netlink protocol in socket release notificationDmitry Ivanov1-1/+1
2016-06-23usb: hcd: out of bounds access in for_each_companionRobert Dobrowolski1-0/+9
2016-06-23usb: xhci: fix wild pointers in xhci_mem_cleanupLu Baolu1-0/+5
2016-06-23usbvision: fix crash on detecting device with invalid configurationVladis Dronov1-1/+15
2016-06-23usbvision: fix leak of usb_dev on failure paths in usbvision_probe()Alexey Khoroshilov1-7/+17
2016-06-23usbvision-video: fix memory leak of alt_max_pkt_sizeAlexey Khoroshilov1-0/+2
2016-06-23net: Fix use after free in the recvmmsg exit pathArnaldo Carvalho de Melo1-19/+19
2016-06-23usbnet: cleanup after bind() in probe()Oliver Neukum1-0/+7
2016-06-23ALSA: timer: Use mod_timer() for rearming the system timerTakashi Iwai1-2/+2
2016-06-23hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiatedGuenter Roeck1-0/+6
2016-06-23ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_listJoseph Qi2-1/+13
2016-06-23ocfs2/dlm: fix race between convert and recoveryJoseph Qi1-1/+10
2016-06-23Input: ati_remote2 - fix crashes on detecting device with invalid descriptorVladis Dronov1-6/+30
2016-06-23Input: ims-pcu - sanity check against missing interfacesOliver Neukum1-0/+4
2016-06-23tracing: Fix crash from reading trace_pipe with sendfileSteven Rostedt (Red Hat)1-1/+4
2016-06-23splice: handle zero nr_pages in splice_to_pipe()Rabin Vincent1-0/+3
2016-06-23bcache: fix cache_set_flush() NULL pointer dereference on OOMEric Wheeler1-0/+3
2016-06-23jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount pathOGAWA Hirofumi1-5/+12
2016-06-23net: irda: Fix use-after-free in irtty_open()Peter Hurley1-10/+0
2016-06-23Input: powermate - fix oops with malicious USB descriptorsJosh Boyer1-0/+3
2016-06-23USB: cypress_m8: add endpoint sanity checkOliver Neukum1-6/+5
2016-06-23USB: digi_acceleport: do sanity checking for the number of portsOliver Neukum1-0/+19
2016-06-23USB: mct_u232: add sanity checking in probeOliver Neukum1-1/+8
2016-06-23USB: usb_driver_claim_interface: add sanity checkingOliver Neukum1-1/+5
2016-06-23USB: iowarrior: fix oops with malicious USB descriptorsJosh Boyer1-0/+6
2016-06-23USB: cdc-acm: more sanity checkingOliver Neukum1-0/+3
2016-06-23KVM: fix spin_lock_init order on x86Paolo Bonzini1-10/+11
2016-06-23ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()Eryu Guan1-3/+3
2016-06-23x86/iopl/64: Properly context-switch IOPL on Xen PVKamal Mostafa3-1/+15
2016-06-23pipe: Fix buffer offset after partially failed readBen Hutchings1-1/+4
2016-05-17include/linux/poison.h: fix LIST_POISON{1,2} offsetVasily Kulikov1-2/+2
2016-04-28Linux 3.10.0-security101v3.10.0-security101Sasha Levin1-1/+1
2016-04-28mac80211: fix use of uninitialised values in RX aggregationChris Bainbridge1-1/+1
2016-04-28KVM: VMX: disable PEBS before a guest entryRadim Krčmář1-0/+7
2016-04-28Linux 3.10.0-security100v3.10.0-security100Sasha Levin1-1/+1
2016-04-28ubi: Fix out of bounds write in volume update codeRichard Weinberger1-1/+1
2016-04-28ALSA: hdspm: Fix zero-divisionTakashi Iwai1-0/+8
2016-04-28ALSA: hdspm: Fix wrong boolean ctl value accessesTakashi Iwai1-4/+4
2016-04-28jffs2: Fix page lock / f->sem deadlockDavid Woodhouse2-11/+11
2016-04-28Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"Thomas Betker1-21/+18
2016-04-28PM / sleep / x86: Fix crash on graph trace through x86 suspendTodd E Brandt1-0/+7
2016-04-28libata: fix HDIO_GET_32BIT ioctlArnd Bergmann2-8/+7
2016-04-28x86/entry/compat: Add missing CLAC to entry_INT80_32Andy Lutomirski1-0/+1
2016-04-28Linux 3.10.0-security99v3.10.0-security99Sasha Levin1-1/+1
2016-04-28do_last(): don't let a bogus return value from ->open() et.al. to confuse usAl Viro1-0/+4
2016-04-28sunrpc/cache: fix off-by-one in qword_get()Stefan Hajnoczi1-1/+1
2016-04-28libata: fix sff host state machine locking while pollingTejun Heo1-21/+11
2016-04-28rfkill: fix rfkill_fop_read wait_event usageJohannes Berg1-12/+4
2016-04-28gspca: ov534/topro: prevent a division by 0Antonio Ospite2-3/+12
2016-04-28Btrfs: send, don't BUG_ON() when an empty symlink is foundFilipe Manana1-1/+15
2016-04-28Btrfs: igrab inode in writepageJosef Bacik1-2/+15
2016-04-28Btrfs: add missing brelse when superblock checksum failsAnand Jain1-0/+1
2016-04-28ses: fix additional element traversal bugJames Bottomley2-1/+13
2016-04-28ses: Fix problems with simple enclosuresJames Bottomley1-1/+19
2016-04-28rfkill: copy the name into the rfkill structJohannes Berg1-3/+3
2016-04-28dm btree: fix bufio buffer leaks in dm_btree_del() error pathJoe Thornber1-1/+15
2016-04-28RDS: fix race condition when sending a message on unbound socketQuentin Casasnovas2-7/+3
2016-04-28vfs: Avoid softlockups with sendfile(2)Jan Kara1-0/+1
2016-04-28mac: validate mac_partition is within sectorKees Cook1-3/+7
2016-04-28megaraid_sas : SMAP restriction--do not access user memory from IOCTL codesumit.saxena@avagotech.com1-2/+11
2016-04-28devres: fix a for loop bounds checkDan Carpenter1-1/+1
2016-04-28genirq: Prevent chip buslock deadlockThomas Gleixner1-3/+3
2016-04-28unix: correctly track in-flight fds in sending process user_structHannes Frederic Sowa5-8/+16
2016-04-28iw_cxgb3: Fix incorrectly returning error on successHariprasad S1-2/+2
2016-04-28dm thin metadata: fix bug when taking a metadata snapshotJoe Thornber1-0/+6
2016-04-28netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin1-4/+17
2016-04-28Linux 3.10.0-security98v3.10.0-security98Sasha Levin1-1/+1
2016-04-28ip6mr: call del_timer_sync() in ip6mr_free_table()WANG Cong1-1/+1
2016-04-28futex: Drop refcount if requeue_pi() acquired the rtmutexThomas Gleixner1-0/+5
2016-04-28intel_scu_ipcutil: underflow in scu_reg_access()Dan Carpenter1-1/+1
2016-04-28radix-tree: fix oops after radix_tree_iter_retryKonstantin Khlebnikov1-3/+3
2016-04-28radix-tree: fix race in gang lookupMatthew Wilcox2-2/+26
2016-04-28memcg: only free spare array when readers are doneMartijn Coenen1-5/+6
2016-04-28xhci: Fix list corruption in urb dequeue at host removalMathias Nyman1-1/+3
2016-04-28mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()Andrew Banman1-12/+19
2016-04-28mm: soft-offline: check return value in second __get_any_page() callNaoya Horiguchi1-1/+1