NishiSearch

Web This site Trusted

30 result(s) for “if can site www bug act uk site www is gov site:cdn.kernel.org” of 35 matched · 1029 ms

Scope: Nishi’s own index (our crawl + Common Crawl) — not the whole live web. Some sites block all automated crawlers (anti-bot walls), so their pages may be absent here even though we never filter lawful content.

Freshness: no result on this page carries a fetch time yet (indexed before the fetch epoch was stored beside the doc)

If the woken waiter is killed before it can do either, the kernel must jump in and wake the next task down the line
from the top result below

commit c610b395b0a512dbf32dd0c38897404a7c0011bd Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.152
A malicious or malformed Thunderbolt device can set dual_link_port_nr beyond the allocated sw->ports[] (max_port_number + 1 entries), producing an out-of-bounds tb_port pointer that is stored and later dereferenced

commit 78ed1e47aca1a79488df010fd584502de6aef744 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.266
The deny and allow side can therefore come to different conclusions when pre-content watches are in play: if a pre-content watch is added to the interpreter after registration every subsequent exec through that entry takes a write denial on the clone that is never paired with a write allowance, driving the interpreter

commit 3696cfb7acec262a298e60f9fc0da59d8fc2451e Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.104
A malicious or malformed Thunderbolt device can set dual_link_port_nr beyond the allocated sw->ports[] (max_port_number + 1 entries), producing an out-of-bounds tb_port pointer that is stored and later dereferenced

commit bf3be28f6721e24961992ebb9e61c0cf21a56806 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.45
Always set nf_flow_route tuple out ifindex even if the indev is not one of the flowtable configured devices since otherwise the outdev lookup in nf_flow_offload_ip_hook() or nf_flow_offload_ipv6_hook() for FLOW_OFFLOAD_XMIT_NEIGH flowtable entries will fail

commit ffc82ed665314ccf141abc4710830f3f424d98ea Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.9
A malicious or malformed Thunderbolt device can set dual_link_port_nr beyond the allocated sw->ports[] (max_port_number + 1 entries), producing an out-of-bounds tb_port pointer that is stored and later dereferenced

commit 79643295eba17affbd16ca97f3ef04c90266b28c Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.157
Setting hwc->config should be safe even if there is an error so use this opportunity to simplify the code

commit 2a3da1f4966798b0b48ce302944ad356b2c98b5d Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.265
A malicious or malformed Thunderbolt device can set dual_link_port_nr beyond the allocated sw->ports[] (max_port_number + 1 entries), producing an out-of-bounds tb_port pointer that is stored and later dereferenced

commit 0eb903b5b519d037c723d47a58c5d4f20eed7342 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.216
A malicious or malformed Thunderbolt device can set dual_link_port_nr beyond the allocated sw->ports[] (max_port_number + 1 entries), producing an out-of-bounds tb_port pointer that is stored and later dereferenced

commit 500df175a7f9e6bc1a9c328590ca5150f84f9ff0 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.6
This creates a potential use-after-free defect if the underlying dso is released while the filter remains active

commit 7e6e670547210424443261b2d54d2acfff85a37c Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.183
A malicious or malformed Thunderbolt device can set dual_link_port_nr beyond the allocated sw->ports[] (max_port_number + 1 entries), producing an out-of-bounds tb_port pointer that is stored and later dereferenced

commit 2609d60e2f6d0b8a96563baa08b56482962cebaa Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.6
This missed the case where background I/O holds the final reference after userspace close() returns, and required explicit maintenance at each close-path site

commit 856a9b51680cbbed1ace1207b29e424a616cff48 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.42
If the work is already running, mark it cancelled and let the worker own the cleanup; otherwise tcm_disable() can cancel the queued work and clean up immediately

commit aa0e49877a2e61e9f4ca10e039727a34f59e9964 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.148
If a vCPU stays scheduled out (or blocked) while the last pCPU it ran on goes through a hotplug cycle (online->offline->online), and the vCPU then resumes execution on the same pCPU, then it is possible for it to run with an ASID that has now been assigned to a different vCPU, resulting in stale TLB translations being

commit 1f99e9ab748fc5c32120de9c4eca31abfe54a4d5 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.46
org Tested-by: Pavel Machek (CIP) Tested-by: Brett A C Sheffield Tested-by: Florian Fainelli Tested-by: Barry K

commit 81d3924095fd017e473332a9b6dd6dd0e3d9a59b Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.13
Bridge a wired interface to an mt7925u AP and the first forwarded frame that arrives short panics the kernel: skbuff: skb_under_panic: len:415 put:4 tail:0x19b end:0x640 dev:wlan1 kernel BUG at net/core/skbuff

commit dc6160265ffc795a1832bc1424f58291d152c7bb Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.153
The deny and allow side can therefore come to different conclusions when pre-content watches are in play: if a pre-content watch is added to the interpreter after registration every subsequent exec through that entry takes a write denial on the clone that is never paired with a write allowance, driving the interpreter

commit 05208478041ccec1b348d25e1df5c4013608590e Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.184
Author: Tengda Wu Date: Mon Aug 3 00:56:39 2026 +0000 ring-buffer: Use current_context for safe per-CPU buffer swap [ Upstream commit f27bdc43077e4fcb5557dfc315ee8d91e741f483 ] The ring_buffer_swap_cpu() function currently checks the per-CPU committing counter to determine if a buffer is actively being written to

commit 8b73de7da85fde281a385e0b26eda9bffd3ca477 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.156
The interrupt URB buffer is allocated in setup_port_interrupt_in() based on the endpoint's wMaxPacketSize: buffer_size = usb_endpoint_maxp(epd); port->interrupt_in_buffer = kmalloc(buffer_size, GFP_KERNEL); When a USB device declares wMaxPacketSize = 8 on its interrupt IN endpoint, the buffer is allocated from kmalloc

commit 833291ee77846538926c990bcb468f6f54e9af50 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.101
If a vCPU stays scheduled out (or blocked) while the last pCPU it ran on goes through a hotplug cycle (online->offline->online), and the vCPU then resumes execution on the same pCPU, then it is possible for it to run with an ASID that has now been assigned to a different vCPU, resulting in stale TLB translations being

commit d27334b2888c10d2b60c954c59b186182d833107 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.151
org/drm/xe/kernel/-/work_items/8412 Tested-by: Alexander Kaplan Cc: Signed-off-by: Kai Vehmanen Link: https://patch

commit 1efe5d048a391de3ead2804b2e7f86376c356cc5 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.44
org Signed-off-by: Greg Kroah-Hartman Signed-off-by: Greg Kroah-Hartman commit 10be509fa8fd95d1e47d40d1f68b0b26dfe9d572 Author: Oliver Hartkopp Date: Fri Aug 7 09:52:11 2026 +0200 can: isotp: fix timer drain order, wakeup handling and tx_gen ordering commit 050f010f920da17c1044a4f174766ad553e770b6 upstream

commit 25c76bea853d0db65b51fb4697a47cbfd9e35e76 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.8
If userspace then renders to what it believes is now the back buffer (but HW is still latched to it

commit a300e35c0a4b4a38fb53742ea6e2a203c98ee523 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.5
Still, this is a clear bug that is better to be fixed, and can be easily fixed

commit f6388029ea9e2c9e807d73827658738ea131faee Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.51
smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory

commit 7cfc41f8e80f11ffa8382ed1a505154ceffb79c7 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.50
The fix is made to be backport-friendly: the cleaner fix would be to perhaps pass the hstate to huge_ptep_get() - that is wider churn and we can do that later

commit 52c36105f76e96b638152a42e735f2e7767ed946 Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.2
Two writes to a tap by an unprivileged user in its own userns are enough: kernel BUG at net/core/skbuff

commit a4a971135a2ff64382ae4235b3ae60503bb1036a Author: Greg Kroah

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.155
Two writes to a tap by an unprivileged user in its own userns are enough: kernel BUG at net/core/skbuff

ý7zXZæÖ´F!ÏXÌäÎËïþ]2I Âü}PÞ OGÐÁªgø³ ÍÉVüž×z-„‡ãºöõº8/D

https://cdn.kernel.org/pub/linux/kernel/v7.x/patch-7.2.6.xz
+½¤ ’˜ð–°Ê– ýº/{ip æ¶p]÷©Ò=MÊB/TÁ53xªp|™b5�‰Êé}Jþ“†’UZ®®þäL©Ó}Ä�-‘cágÐÚ/ ׫ìgduÿæÂÀùíC�W´Ü½éñ †þ¸\ÀäzÈV[8>Eœïй¾p¯Öù¤Õ·F¶§°¾kּ˂qu 4â!&â»[�@ã*fŠU%ö$‰¡Ç¥“ºY&��T?#ý–±"@[­1:*°%‹±;¡ö¯W/üžÅ ê‹(:T�JZMÑ´>«´AÞ–â2 �4ˆšÇµ$

ý7zXZæÖ´FÀDZ€ !£}Ò âúIïÿ]8KvlÙ N¸š³Ï¡³«%xüž¥Í¢¨!k  {áE

https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.50.tar.xz
_zhÕö®Þê¨àhJÁÁؘȫß"c…X‰@)”‰liç Çáh_¿`‡bì“ôøÍ ¶�[…–d{Çîv’Ôüz\¡g`ÛSŒ  €is~:ò”Ï}ÏŸ

ý7zXZæÖ´F!ÏXÌäp¿ïÿ]2I Âü}PÞ OGÌáT€Ø]Á^¤Iºù°tàDŽ™Ý �@Ý) 

https://cdn.kernel.org/pub/linux/kernel/v6.x/patch-6.12.105.xz
ë¤p\Ji­ ‡K0éÊ ‰nïû?ß·ûöÉ EV2^�D‚>õ  F¤ÕÄB- MÉw™@¾9ÿ Ú3Ýh—6O† Œä庚huþe¡I§£sH;âv ˜nŽö8ÒŽ¨vê›Õ¼^P„Vª†yÌ Ì—«DœúT¡]Ä¥²DªÞCQÓ?ß^-jâ¨òÉœ×~RYA¨6¹ø Œ9fYš3Ô”¼@J0u¦¾ç.ú”õæ×q¡ï1Ú&³÷Á�qT‚çÙ—¥0·Q3dÍÛEz¾B%¤ž·†˜ÃÂ'üTeÑp&†