aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2016-10-02auxdisplay: ks0108: fix refcountlinux-3.4.y-securitySudip Mukherjee1-0/+1
2016-10-02x86/xen: Probe target addresses in set_aliased_prot() before the hypercallAndy Lutomirski1-0/+40
2016-10-02console: Fix console name size mismatchPeter Hurley1-1/+2
2016-10-02sata_dwc_460ex: fix resource leak on error pathAndy Shevchenko1-14/+12
2016-10-02eCryptfs: Force RO mount when encrypted view is enabledTyler Hicks2-15/+13
2016-10-02eCryptfs: Copy up POSIX ACL and read-only flags from lower mountTyler Hicks1-1/+9
2016-10-02net/l2tp: don't fall back on UDP [get|set]sockoptSasha Levin1-2/+2
2016-10-02intel_idle: Don't register CPU notifier if we are not running.Konrad Rzeszutek Wilk1-3/+4
2016-10-02i82975x_edac: Fix dimm label initializationMauro Carvalho Chehab1-7/+4
2016-10-02cifs: delay super block destruction until all cifsFileInfo objects are goneMateusz Guzik3-1/+33
2016-10-02USB: serial: fix hang when opening portMing Lei1-0/+1
2016-10-02USB: ti_usb_3410_5052: fix use-after-free in TIOCMIWAITJohan Hovold1-4/+6
2016-10-02USB: ssu100: fix use-after-free in TIOCMIWAITJohan Hovold1-5/+7
2016-10-02USB: spcp8x5: fix use-after-free in TIOCMIWAITJohan Hovold1-4/+5
2016-10-02USB: pl2303: fix use-after-free in TIOCMIWAITJohan Hovold1-5/+6
2016-10-02USB: oti6858: fix use-after-free in TIOCMIWAITJohan Hovold1-4/+6
2016-10-02USB: mos7840: fix use-after-free in TIOCMIWAITJohan Hovold1-5/+8
2016-10-02USB: mos7840: fix broken TIOCMIWAITJohan Hovold1-2/+3
2016-10-02USB: mct_u232: fix use-after-free in TIOCMIWAITJohan Hovold1-6/+7
2016-10-02USB: io_ti: fix use-after-free in TIOCMIWAITJohan Hovold1-6/+6
2016-10-02USB: io_edgeport: fix use-after-free in TIOCMIWAITJohan Hovold1-5/+7
2016-10-02USB: ftdi_sio: fix use-after-free in TIOCMIWAITJohan Hovold1-11/+8
2016-10-02USB: cypress_m8: fix use-after-free in TIOCMIWAITJohan Hovold1-6/+8
2016-10-02USB: ch341: fix use-after-free in TIOCMIWAITJohan Hovold1-5/+6
2016-10-02USB: ark3116: fix use-after-free in TIOCMIWAITJohan Hovold1-4/+6
2016-10-02SCSI: storvsc: NULL pointer dereference fixAles Novak1-0/+3
2016-10-02ALSA: asihpi: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+3
2016-10-02staging: line6: Fix unlocked snd_pcm_stop() callTakashi Iwai1-1/+4
2016-10-02ASoC: s6000: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+2
2016-10-02ALSA: pxa2xx: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+2
2016-10-02ALSA: usx2y: Fix unlocked snd_pcm_stop() callTakashi Iwai1-0/+4
2016-10-02ALSA: ua101: Fix unlocked snd_pcm_stop() callTakashi Iwai1-2/+12
2016-10-02ALSA: 6fire: Fix unlocked snd_pcm_stop() callTakashi Iwai1-2/+10
2016-10-02ALSA: atiixp: Fix unlocked snd_pcm_stop() callTakashi Iwai2-0/+4
2016-10-02xen/smp: Fix leakage of timer interrupt line for every CPU online/offline.Konrad Rzeszutek Wilk1-0/+1
2016-10-02dm sysfs: fix a module unload raceMikulas Patocka6-27/+76
2016-10-02dm: wait until embedded kobject is released before destroying a deviceMikulas Patocka3-1/+22
2016-10-02ore: Fix wrong math in allocation of per device BIOBoaz Harrosh2-12/+26
2016-10-02ath9k_htc: properly set MAC address and BSSID maskMathy Vanhoef2-10/+20
2016-10-02packet: fix use after free race in send path when dev is releasedDaniel Borkmann1-23/+37
2016-10-02PCI: fix truncation of resource size to 32 bitsNikhil P Rao1-1/+2
2016-10-02virtio: support unlocked queue pollMichael S. Tsirkin2-11/+47
2016-10-02perf: Fix perf mmap bugsPeter Zijlstra3-19/+24
2016-10-02Input: cyttsp - fix memcpy size paramFerruh Yigit1-1/+1
2016-10-02net: rate-limit warn-bad-offload splats.Ben Greear1-0/+3
2016-10-02sched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()sTejun Heo1-2/+4
2016-10-02KVM: Allow cross page reads and writes from cached translations.Andrew Honig4-18/+45
2016-10-02Btrfs: fix race between mmap writes and compressionChris Mason3-0/+49
2016-10-02x86/xen: don't assume %ds is usable in xen_iret for 32-bit PVOPS.Jan Beulich1-7/+7
2016-10-02ring-buffer: Fix race between integrity check and readersSteven Rostedt1-2/+5
2016-10-02ath9k: ar9003: fix OTP register offsets for AR9340Gabor Juhos1-3/+3
2016-10-02workqueue: convert BUG_ON()s in __queue_delayed_work() to WARN_ON_ONCE()sTejun Heo1-2/+2
2016-10-02ceph: avoid 32-bit page index overflowAlex Elder1-6/+5
2016-10-02mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma()Mel Gorman1-1/+11
2016-10-02mempolicy: fix refcount leak in mpol_set_shared_policy()KOSAKI Motohiro1-6/+9
2016-10-02mempolicy: remove mempolicy sharingKOSAKI Motohiro1-14/+38
2016-10-02revert "mm: mempolicy: Let vma_merge and vma_split handle vma->vm_policy link...KOSAKI Motohiro1-17/+24
2016-10-02ALSA: aloop - add locking to timer accessOmair Mohammed Abdullah1-0/+6
2016-10-02ext4: fix crash when accessing /proc/mounts concurrentlyHerton Ronaldo Krzesinski1-1/+1
2016-10-02ext4: fix potential deadlock in ext4_nonda_switch()Theodore Ts'o2-7/+11
2016-10-02ext4: ignore last group w/o enough space when resizing instead of BUG'ingYongqiang Yang1-3/+9
2016-10-02ipv6: fix return value check in fib6_add()Wei Yongjun1-0/+4
2016-10-02ipv6: release reference of ip6_null_entry's dst entry in __ip6_del_rtGao feng1-5/+6
2016-10-02rapidio/rionet: fix multicast packet transmit logicAlexandre Bounine1-3/+17
2016-10-02SCSI: scsi_remove_target: fix softlockup regression on hot removeDan Williams1-16/+14
2016-10-02SCSI: fix hot unplug vs async scan raceDan Williams2-15/+29
2016-10-02media: Avoid sysfs oops when an rc_dev's raw device is absentDouglas Bagnall1-2/+3
2016-10-02eCryptfs: Fix lockdep warning in miscdev operationsTyler Hicks1-12/+13
2016-10-02drop_monitor: dont sleep in atomic contextEric Dumazet1-69/+33
2016-10-02Tools: hv: verify origin of netlink connector messageOlaf Hering1-3/+7
2016-10-02x86, amd, xen: Avoid NULL pointer paravirt referencesKonrad Rzeszutek Wilk1-0/+3
2016-09-06ext4: check for zero length extent explicitlyEryu Guan1-1/+1
2016-07-30tcp: implement RFC 5961 3.2Eric Dumazet6-1/+45
2016-05-17include/linux/poison.h: fix LIST_POISON{1,2} offsetVasily Kulikov1-2/+2
2016-05-12Linux 3.4.0-security112v3.4.0-security112Sasha Levin1-1/+1
2016-05-12x86/iopl/64: Properly context-switch IOPL on Xen PVAndy Lutomirski3-1/+15
2016-05-12pipe: Fix buffer offset after partially failed readBen Hutchings1-1/+4
2016-05-12mvsas: Fix NULL pointer dereference in mvs_slot_task_freeDāvis Mosāns1-0/+2
2016-05-12mm: make sendfile(2) killableJan Kara1-4/+5
2016-05-12crypto: ahash - ensure statesize is non-zeroRussell King1-1/+2
2016-05-12drivers/tty: require read access for controlling terminalJann Horn1-4/+27
2016-05-12tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.cKosuke Tatsukawa1-4/+2
2016-05-12mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a faultMel Gorman1-0/+8
2016-05-12x86/process: Add proper bound checks in 64bit get_wchan()Thomas Gleixner1-10/+42
2016-05-12UBI: Validate data_sizeRichard Weinberger1-0/+5
2016-05-12btrfs: skip waiting on ordered range for special filesJeff Mahoney1-1/+2
2016-05-12drm: crtc: integer overflow in drm_property_create_blob()Dan Carpenter1-1/+1
2016-05-12IB/cm: Fix rb-tree duplicate free and use-after-freeDoron Tsur1-1/+9
2016-05-12sched/core: Fix TASK_DEAD race in finish_task_switch()Peter Zijlstra2-6/+8
2016-05-12md/raid0: apply base queue limits *before* disk_stack_limitsNeilBrown1-6/+6
2016-05-12hfs: fix B-tree corruption after insertion at position 0Hin-Tak Leung1-9/+11
2016-05-12hfs,hfsplus: cache pages correctly between bnode_create and bnode_freeHin-Tak Leung2-8/+4
2016-05-12fs: create and use seq_show_option for escapingKees Cook13-26/+66
2016-05-12crypto: ghash-clmulni: specify context size for ghash async algorithmAndrey Ryabinin1-0/+1
2016-05-12devres: fix devres_get()Masahiro Yamada1-2/+2
2016-05-12md/raid0: update queue parameter in a safer location.NeilBrown1-18/+37
2016-05-12svcrdma: Fix send_reply() scatter/gather set-upChuck Lever1-1/+10
2016-05-12mac80211: enable assoc check for mesh interfacesBob Copeland1-3/+0
2016-04-27Linux 3.4.0-security111v3.4.0-security111Sasha Levin1-1/+1
2016-04-27af_unix: Guard against other == sk in unix_dgram_sendmsgRainer Weikusat1-1/+6
2016-04-27netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin1-4/+17
2016-04-27Initialize msg/shm IPC objects before doing ipc_addid()Linus Torvalds3-19/+20
2016-04-27KVM: svm: unconditionally intercept #DBPaolo Bonzini1-11/+3
2016-04-27KVM: x86: work around infinite loop in microcode when #AC is deliveredEric Northup4-1/+14
2016-04-27ipv6: addrconf: validate new MTU before applying itMarcelo Leitner1-1/+16
2016-04-27KEYS: Fix crash when attempt to garbage collect an uninstantiated keyringDavid Howells1-2/+4
2016-04-27KEYS: Fix race between key destruction and finding a keyring by nameDavid Howells1-4/+4
2016-04-27USB: whiteheat: fix potential null-deref at probeJohan Hovold1-0/+31
2016-04-27ppp, slip: Validate VJ compression slot parameters completelyBen Hutchings4-15/+15
2016-04-27isdn_ppp: Add checks for allocation failure in isdn_ppp_open()Ben Hutchings1-0/+6
2016-04-27virtio-net: drop NETIF_F_FRAGLISTJason Wang1-2/+2
2016-04-27sg_start_req(): make sure that there's not too many elements in iovecAl Viro1-0/+3
2016-04-27RDS: fix race condition when sending a message on unbound socketQuentin Casasnovas2-7/+3
2016-04-27RDS: verify the underlying transport exists before creating a connectionSasha Levin1-0/+6
2016-04-27net: add validation for the socket syscall protocol argumentHannes Frederic Sowa6-0/+16
2016-04-27pptp: verify sockaddr_len in pptp_bind() and pptp_connect()WANG Cong1-0/+6
2016-04-27unix: avoid use-after-free in ep_remove_wait_queueRainer Weikusat2-19/+165
2016-04-27ipc,sem: fix use after free on IPC_RMID after a task using same semaphore set...Herton R. Krzesinski1-6/+17
2016-04-27libfc: Fix fc_fcp_cleanup_each_cmd()Bart Van Assche1-2/+17
2016-04-27libiscsi: Fix host busy blocking during connection teardownJohn Soni Jose1-23/+2
2016-04-27vhost: actually track log eventfd fileMarc-André Lureau1-0/+1
2016-04-27usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init() functionAMAN DEEP1-1/+1
2016-04-27md: flush ->event_work before stopping array.NeilBrown1-0/+2
2016-04-27net: Clone skb before setting peeked flagHerbert Xu1-3/+38
2016-04-27hpfs: kstrdup() out of memory handlingSanidhya Kashyap1-2/+6
2016-04-27Btrfs: use kmem_cache_free when freeing entry in inode cacheFilipe Manana1-1/+1
2016-04-27Linux 3.4.0-security110v3.4.0-security110Sasha Levin1-1/+1
2016-04-27vfs: Test for and handle paths that are unreachable from their mnt_rootEric W. Biederman1-2/+27
2016-04-27dcache: Handle escaped paths in prepend_pathEric W. Biederman1-0/+10
2016-04-279p: forgetting to cancel request on interrupted zero-copy RPCAl Viro1-1/+2
2016-04-27packet: avoid out of bounds read in round robin fanoutWillem de Bruijn1-16/+2
2016-04-27packet: read num_members once in packet_rcv_fanout()Eric Dumazet1-1/+1
2016-04-27bridge: fix br_stp_set_bridge_priority race conditionsNikolay Aleksandrov2-3/+3
2016-04-27sctp: fix ASCONF list handlingMarcelo Ricardo Leitner2-11/+37
2016-04-27ext4: fix race between truncate and __ext4_journalled_writepage()Theodore Ts'o1-3/+19
2016-04-27regulator: core: fix constraints output bufferStefan Wahren1-1/+1
2016-04-27staging: rtl8712: prevent buffer overrun in recvbuf2recvframeHaggai Eran1-1/+2
2016-04-27mtd: fix: avoid race condition when accessing mtd->usecountBrian Norris1-0/+5
2016-04-27Linux 3.4.0-security109v3.4.0-security109Sasha Levin1-1/+1
2016-04-27udp: fix behavior of wrong checksumsEric Dumazet2-8/+4
2016-04-27pipe: iovec: Fix memory corruption when retrying atomic copy as non-atomicBen Hutchings1-23/+32
2016-04-27NET: ROSE: Don't dereference NULL neighbour pointer.Ralf Baechle1-1/+2
2016-04-27block: fix ext_dev_lock lockdep reportDan Williams1-6/+6
2016-04-27ipv4: Missing sk_nulls_node_init() in ping_unhash().David S. Miller1-0/+1
2016-04-27md: use kzalloc() when bitmap is disabledBenjamin Randazzo1-2/+2
2016-04-27udf: Check length of extended attributes and allocation descriptorsJan Kara1-0/+13
2016-04-27bridge: fix multicast router rlist endless loopNikolay Aleksandrov1-4/+3
2016-04-27vfs: read file_handle only once in handle_to_pathSasha Levin1-2/+3
2016-04-27ozwpan: unchecked signed subtraction leads to DoSJason A. Donenfeld1-3/+4
2016-04-27ozwpan: divide-by-zero leading to panicJason A. Donenfeld1-1/+4
2016-04-27ozwpan: Use proper check to prevent heap overflowJason A. Donenfeld1-4/+9
2016-04-27fs, omfs: add NULL terminator in the end up the token listSasha Levin1-1/+2
2016-04-27x86: bpf_jit: fix compilation of large bpf programsAlexei Starovoitov1-1/+6
2016-04-27ocfs2: dlm: fix race between purge and get lock resourceJunxiao Bi1-0/+13
2016-04-27nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()Ryusuke Konishi2-2/+2
2016-04-27nilfs2: fix potential memory overrun on inodeRyusuke Konishi1-3/+44
2016-04-27mm/memory-failure: call shake_page() when error hits thp tail pageNaoya Horiguchi1-4/+4
2016-04-27ext4: move check under lock scope to close a race.Davide Italiano1-7/+9
2016-04-27ALSA: emux: Fix mutex deadlock in OSS emulationTakashi Iwai2-16/+22
2016-04-27ALSA: emux: Fix mutex deadlock at unloadingTakashi Iwai1-2/+0
2016-04-27RCU pathwalk breakage when running into a symlink overmounting somethingAl Viro1-1/+2
2016-04-27fs/binfmt_elf.c: fix bug in loading of PIE binariesMichael Davidson1-1/+8
2016-04-27Btrfs: fix inode eviction infinite loop after cloning into itFilipe Manana1-0/+5
2016-04-27scsi: storvsc: Fix a bug in copy_from_bounce_buffer()K. Y. Srinivasan1-7/+8
2016-04-27Btrfs: fix log tree corruption when fs mounted with -o discardFilipe Manana1-3/+2
2016-04-27UBI: fix out of bounds writeBrian Norris1-1/+2
2016-04-27Linux 3.4.0-security108v3.4.0-security108Sasha Levin1-1/+1
2016-04-27writeback: use |1 instead of +1 to protect against div by zeroTejun Heo1-1/+1
2016-04-27cdc-acm: prevent infinite loop when parsing CDC headers.Quentin Casasnovas1-1/+6
2016-04-27autofs4: check dev ioctl size before allocatingSasha Levin1-0/+3
2016-04-27fs: take i_mutex during prepare_binprm for set[ug]id executablesJann Horn1-25/+40
2016-04-27IB/core: Avoid leakage from kernel to user spaceEli Cohen1-0/+1
2016-04-27spi: spidev: fix possible arithmetic overflow for multi-transfer messageIan Abbott1-1/+4
2016-04-27splice: Apply generic position and size checks to each writeBen Hutchings2-4/+12
2016-04-27ocfs2: _really_ sync the right rangeAl Viro1-4/+10
2016-04-27Defer processing of REQ_PREEMPT requests for blocked devicesBart Van Assche2-2/+6
2016-04-27be2iscsi: Fix kernel panic when device initialization failsJohn Soni Jose1-1/+1
2016-04-27IB/uverbs: Prevent integer overflow in ib_umem_get address arithmeticShachar Raindel1-0/+8
2016-04-27mac80211: fix RX A-MPDU session reorder timer deletionJohannes Berg3-5/+12
2016-04-27net: use for_each_netdev_safe() in rtnl_group_changelink()WANG Cong1-2/+2
2016-04-27cifs: fix use-after-free bug in find_writable_fileDavid Disseldorp1-0/+1
2016-04-27hfsplus: fix B-tree corruption after insertion at position 0Sergei Antonov1-9/+11
2016-04-27target/pscsi: Fix NULL pointer dereference in get_device_typeNicholas Bellinger1-1/+1
2016-04-27crypto: aesni - fix memory usage in GCM decryptionStephan Mueller1-2/+2
2016-04-27x86/asm/entry/32: Fix user_mode() misusesAndy Lutomirski1-1/+1
2016-04-27mac80211: drop unencrypted frames in mesh fwdingBob Copeland1-0/+3
2016-04-27dm: hold suspend_lock while suspending device during device deletionMikulas Patocka1-0/+6
2016-04-27xen-pciback: limit guest control of command registerJan Beulich3-14/+51
2016-04-27can: add missing initialisations in CAN related skbuffsOliver Hartkopp2-0/+8
2016-04-27libsas: Fix Kernel Crash in smp_execute_taskJames Bottomley1-2/+4
2016-04-27ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov1-0/+3
2016-04-27x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimizationAndy Lutomirski1-5/+8
2016-04-27drm/radeon: fix DRM_IOCTL_RADEON_CS oopsTommi Rantala1-1/+3
2016-04-27USB: serial: fix potential use-after-free after failed probeJohan Hovold1-1/+1
2016-04-27USB: usbfs: don't leak kernel data in siginfoAlan Stern1-0/+2
2016-04-27team: fix possible null pointer dereference in team_handle_frameJiri Pirko1-3/+1
2016-04-27netfilter: xt_socket: fix a stack corruption bugEric Dumazet1-9/+12
2016-04-27autofs4 copy_dev_ioctl(): keep the value of ->size we'd used for allocationAl Viro1-2/+6
2016-04-27debugfs: leave freeing a symlink body until inode evictionAl Viro1-17/+17
2016-04-27dm snapshot: fix a possible invalid memory access on unloadMikulas Patocka1-2/+2