Web This site Trusted
25 result(s) for “ip com site address wilhelm de site can kernel org site can kernel org site can site:cdn.kernel.org” · 1403 ms
Scope: Nishi’s own index (our crawl + Common Crawl) — not the whole live web. Some sites block all automated crawlers (anti-bot walls), so their pages may be absent here even though we never filter lawful content.
Freshness: no result on this page carries a fetch time yet (indexed before the fetch epoch was stored beside the doc)
An unprivileged user can trigger this on a loopback TCP socket with the "tls" ULP attached: BUG: kernel NULL pointer dereference, address: 0000000000000008 RIP: 0010:memcpy_from_scatterwalk+0x32/0xc0 Call Trace: skcipher_walk_next+0x1d1/0x2c0 gcm_encrypt_aesni_avx+0x1e9/0x220 bpf_exec_tx_verdict+0x3bb/0x860
from the top result below
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.45
An authenticated ASCONF from a remote SCTP peer can add a transport and remove it again with a wildcard DEL-IP parameter in the same chunk
https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.13
After a disconnect the usbfs reference can be the last one, in which case usb_put_dev() frees the device and the subsequent loop reads offset 80 of freed memory and uses the result as a struct usb_hcd *, which hcd_buffer_free_pages() then dereferences
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.157
org/linux-kernel/5df6968a-2e5f-468e-b457-fc201535dd4c@linux
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.156
After a disconnect the usbfs reference can be the last one, in which case usb_put_dev() frees the device and the subsequent loop reads offset 80 of freed memory and uses the result as a struct usb_hcd *, which hcd_buffer_free_pages() then dereferences
https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.8
org Signed-off-by: Greg Kroah-Hartman Signed-off-by: Greg Kroah-Hartman commit 971962e96618ea2eacdf4631404f5a7c1f553a66 Author: Leo Li Date: Wed Aug 5 12:33:14 2026 -0400 drm/amd/display: Exit idle optimizations before programming [ Upstream commit 8419331e64d92a8de5fc4feef0e305f201fb8b33 ] [Why] We need to exit PSR
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.104
An authenticated ASCONF from a remote SCTP peer can add a transport and remove it again with a wildcard DEL-IP parameter in the same chunk
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.152
An authenticated ASCONF from a remote SCTP peer can add a transport and remove it again with a wildcard DEL-IP parameter in the same chunk
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.44
org Signed-off-by: Greg Kroah-Hartman Signed-off-by: Greg Kroah-Hartman commit 10be509fa8fd95d1e47d40d1f68b0b26dfe9d572 Author: Oliver Hartkopp Date: Fri Aug 7 09:52:11 2026 +0200 can: isotp: fix timer drain order, wakeup handling and tx_gen ordering commit 050f010f920da17c1044a4f174766ad553e770b6 upstream
https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.9
An authenticated ASCONF from a remote SCTP peer can add a transport and remove it again with a wildcard DEL-IP parameter in the same chunk
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.151
org/drm/xe/kernel/-/work_items/8412 Tested-by: Alexander Kaplan Cc: Signed-off-by: Kai Vehmanen Link: https://patch
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.46
arm), so this can cause make oldconfig to loop indefinitely when CONFIG_SMP=n: $ make ARCH=arm allmodconfig $ sed -i "/CONFIG_SMP=y/d
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.266
However, there exists a race window where this check can be bypassed: ring_buffer_lock_reserve cpu_buffer = buffer->buffers[cpu]; // cpu_buffer_a rb_reserve_next_event rb_start_commit // inc committing if (unlikely(READ_ONCE(cpu_buffer->buffer)
https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.1.6
This missed the case where background I/O holds the final reference after userspace close() returns, and required explicit maintenance at each close-path site
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.265
An authenticated ASCONF from a remote SCTP peer can add a transport and remove it again with a wildcard DEL-IP parameter in the same chunk
https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.5
smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.216
An authenticated ASCONF from a remote SCTP peer can add a transport and remove it again with a wildcard DEL-IP parameter in the same chunk
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.51
smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.183
An authenticated ASCONF from a remote SCTP peer can add a transport and remove it again with a wildcard DEL-IP parameter in the same chunk
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.50
com Fixes: 5d2146a3354f ("selftests/mm: skip mlock tests if nobody user can't read it") Signed-off-by: Injae Ryou Cc: Brendan Jackman Cc: B
https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.6
, branch mode, scripting, annotations), the sum of added options can theoretically exceed 16 (potentially reaching up to ~19)
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.153
However, there exists a race window where this check can be bypassed: ring_buffer_lock_reserve cpu_buffer = buffer->buffers[cpu]; // cpu_buffer_a rb_reserve_next_event rb_start_commit // inc committing if (unlikely(READ_ONCE(cpu_buffer->buffer)
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.101
org Tested-by: Florian Fainelli Tested-by: Miguel Ojeda Tested-by: Peter Schneider Tested-by: Brett A C Sheffield Tested-by: Salvatore Bonaccorso Tested-by: Shuah Khan Tested-by: Pavel Machek (CIP) Tested-by: Mark Brown Tested-by: Harshit Mogalapalli Tested-by: Ron Economos Signed-off-by: Greg Kroah-Hartman commit
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.42
If the work is already running, mark it cancelled and let the worker own the cleanup; otherwise tcm_disable() can cancel the queued work and clean up immediately
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.148
179936] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 1
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.184
However, there exists a race window where this check can be bypassed: ring_buffer_lock_reserve cpu_buffer = buffer->buffers[cpu]; // cpu_buffer_a rb_reserve_next_event rb_start_commit // inc committing if (unlikely(READ_ONCE(cpu_buffer->buffer)