1. a666d66 UPSTREAM: ipv4, ipv6: ensure raw socket message is big enough to hold an IP header by Alexander Potapenko · 8 years ago
  2. 3d9756f diag: Validate copying length against source buffer length by Hardik Arya · 8 years ago
  3. ef36863 crypto: hmac - require that the underlying hash algorithm is unkeyed by Eric Biggers · 8 years ago
  4. db75f87 msm: sensor: actuator: avoid accessing out of bound memory by Haibin Liu · 8 years ago
  5. 49a48a4 msm: vidc: Fix use after free bug in set_output_buffers by Chinmay Sawarkar · 8 years ago
  6. df782bd loop: fix concurrent lo_open/lo_release by Linus Torvalds · 8 years ago
  7. 9a1aa86 Input: gtco - fix potential out-of-bound access by Dmitry Torokhov · 8 years ago
  8. bd170eb msm: ipa: Fix the handling of default IPA header by Ghanim Fodi · 8 years ago
  9. 44560a2 net: usb: rmnet_usb_ctrl: Fix use after free issue by Sai Krishna Juturi · 8 years ago
  10. 11a210e sctp: do not peel off an assoc from one netns to another one by Xin Long · 8 years ago
  11. e7f3f9f net: ipv4: emulate READ_ONCE() on ->hdrincl bit-field in raw_sendmsg() by Nicolai Stange · 8 years ago
  12. 18ed6c3 net: ipv4: fix for a race condition in raw_sendmsg by Mohamed Ghannam · 8 years ago
  13. 1c911cd ipv4: Avoid reading user iov twice after raw_probe_proto_opt by Herbert Xu · 11 years ago
  14. 5b400da ipv4: Use standard iovec primitive in raw_probe_proto_opt by Herbert Xu · 11 years ago
  15. 88395c5 UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc() by Eric Biggers · 7 years ago
  16. cf889f6 ASoC: apr: Add validity check to APR port by Aditya Bavanari · 8 years ago
  17. aed116f BACKPORT: USB: core: harden cdc_parse_cdc_header by Marissa Wall · 8 years ago
  18. 106c738 cdc-acm: prevent infinite loop when parsing CDC headers. by Quentin Casasnovas · 10 years ago
  19. a5a3ba4 cdc-acm: add sanity checks by Oliver Neukum · 11 years ago
  20. 98e2602 ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor by Takashi Iwai · 8 years ago
  21. e80c08a USB: fix out-of-bounds in usb_set_configuration by Greg Kroah-Hartman · 8 years ago
  22. d9fbd68 HID: usbhid: fix out-of-bounds bug by Jaejoong Kim · 8 years ago
  23. 816c02c USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() by Alan Stern · 8 years ago
  24. f591920 USB: serial: console: fix use-after-free after failed setup by Johan Hovold · 8 years ago
  25. f736675 msm:ipa: Fix to incorrect structure access by Mohammed Javid · 8 years ago
  26. f63cdb6 msm: ipa: Prevent multiple header deletion from user space by Ghanim Fodi · 8 years ago
  27. 21fc0f7 ASoC: msm: qdsp6v2: Set freed pointers to NULL by Aditya Bavanari · 8 years ago
  28. 18906ad diag: Add protection while de-initializing clients by Mohit Aggarwal · 8 years ago
  29. e640177 BACKPORT: packet: in packet_do_bind, test fanout with bind_lock held by Marissa Wall · 8 years ago
  30. 870e82a ALSA: usb-audio: Kill stray URB at exiting by Takashi Iwai · 8 years ago
  31. c3d4a71 msm: vidc: update the check to ignore extradata plane in dqbuf by Praveen Chavan · 9 years ago
  32. 16d0335 msm: vidc: add ion_handle checking before mapping buffers by Praveen Chavan · 10 years ago
  33. 9fd90e7 msm: vidc: Add same fd ref only for static buffer mode by Surajit Podder · 11 years ago
  34. 893536a wcnss: fix the potential buffer flow issue in firmware setup by Sarada Prasanna Garnayak · 8 years ago
  35. 052effe wcnss: Fix mismatch between format and argument in pr_err() by Jeff Johnson · 12 years ago
  36. b5768a6 msm: camera: Return -NOTTY on invalid ioctl command. by Trishansh Bhardwaj · 8 years ago
  37. 2e43a4e msm: sensor: Validationg function pointers before using them by VijayaKumar T M · 9 years ago
  38. c5593a0 msm: camera: sensor: Validate destination step position by Rajesh Bondugula · 8 years ago
  39. 4098ac8 msm: camera: validate num_streams in stream_cfg_cmd before using it by Gaoxiang Chen · 8 years ago
  40. db56ff6 mqueue: fix a use-after-free in sys_mq_notify() by Cong Wang · 8 years ago
  41. 4c49736 Sanitize 'move_pages()' permission checks by Linus Torvalds · 8 years ago
  42. 7b983f1 tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 by Wei Wang · 8 years ago
  43. 75bdf91 KEYS: prevent KEYCTL_READ on negative key by Eric Biggers · 8 years ago
  44. 64fa6cd KEYS: fix dereferencing NULL payload with nonzero length by Eric Biggers · 8 years ago
  45. 8b98179 packet: fix tp_reserve race in packet_set_ring by Willem de Bruijn · 8 years ago
  46. 6758127 packet: hold bind lock when rebinding to fanout hook by Ben Hutchings · 8 years ago
  47. 740bf0f diag: Add mutex protection while reading dci debug statistics by Sreelakshmi Gownipalli · 8 years ago
  48. b5816e4 msm: vidc: WARN_ON() reveals fuction addresses by Ariel Yin · 9 years ago
  49. bd924fe ANDROID: qtaguid: Fix the UAF probelm with tag_ref_tree by Chenbo Feng · 8 years ago
  50. 16ed9c1 rtac: add size check when reading cal data kvaddr buffer by kunleiz · 8 years ago
  51. 1e191c5 ASoC: wcd9xxx: restrict debugfs permission by Karthikeyan Mani · 8 years ago
  52. 13fee7c USB: core: prevent malicious bNumInterfaces overflow by Alan Stern · 8 years ago
  53. 1a63b62 usb: config->desc.bLength may not exceed amount of data returned by the device by Hans de Goede · 12 years ago
  54. 193f237 ipsec: Fix aborted xfrm policy dump crash by Ben Hutchings · 8 years ago
  55. 9bee074 iovec: make sure the caller actually wants anything in memcpy_fromiovecend by Paul Lawrence · 8 years ago
  56. 5ca98ba ANDROID: sound: rawmidi: Hold lock around realloc by Daniel Rosenberg · 8 years ago
  57. 4fa1fe9 clocksource: arch_timer: make virtual counter access configurable by Greg Hackmann · 8 years ago
  58. e8acc9f staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl by Viktor Slavkovic · 8 years ago
  59. 6931318 crypto: algif_skcipher - Load TX SG list after waiting by Herbert Xu · 10 years ago
  60. 49ca11d ANDROID: sdcardfs: fix potential crash when reserved_mb is not zero by Lianjun Huang · 7 years ago
  61. ee93c70 leds: trigger: ledtrig-backlight: Fix invalid memory access in fb_event notification callback by Manfred Schlaegl · 12 years ago
  62. 8249a07 msm: mdss: Make LEDS_TRIGGER_BACKLIGHT work by Ricardo Cerqueira · 10 years ago
  63. e59ae0b FP2: disable KSM by chrmhoffmann · 7 years ago
  64. 0368080 ANDROID: sdcardfs: Don't d_drop in d_revalidate by Daniel Rosenberg · 7 years ago
  65. 0f0c980 ANDROID: sdcardfs: Set s_root to NULL after putting by Daniel Rosenberg · 7 years ago
  66. 5ae351e ANDROID: sdcardfs: d_make_root calls iput by Daniel Rosenberg · 7 years ago
  67. ff80533 ANDROID: sdcardfs: Check for private data earlier by Daniel Rosenberg · 7 years ago
  68. 396bf57 ANDROID: fuse: Add null terminator to path in canonical path to avoid issue by Ritesh Harjani · 7 years ago
  69. dbd58bd ANDROID: sdcardfs: Fix sdcardfs to stop creating cases-sensitive duplicate entries. by Ritesh Harjani · 7 years ago
  70. 7d0e3e9 ANDROID: sdcardfs: Set num in extension_details during make_item by Ritesh Harjani · 8 years ago
  71. 690f288 ANDROID: sdcardfs: Hold i_mutex for i_size_write by Daniel Rosenberg · 7 years ago
  72. dc2e381 ANDROID: sdcardfs: Protect set_top by Daniel Rosenberg · 8 years ago
  73. be38164 ANDROID: fsnotify: Notify lower fs of open by Daniel Rosenberg · 8 years ago
  74. 4a65a16 Revert "ANDROID: sdcardfs: notify lower file of opens" by Daniel Rosenberg · 8 years ago
  75. ba62cd9 ANDROID: sdcardfs: Use lower getattr times/size by Daniel Rosenberg · 8 years ago
  76. c6952aa ANDROID: xattr: Pass EOPNOTSUPP to permission2 by Daniel Rosenberg · 8 years ago
  77. c99c82d ANDROID: sdcardfs: Move default_normal to superblock by Daniel Rosenberg · 8 years ago
  78. 4a66373 ANDROID: sdcardfs: Fix missing break on default_normal by Daniel Rosenberg · 8 years ago
  79. ad92161 ANDROID: sdcardfs: Add default_normal option by Daniel Rosenberg · 8 years ago
  80. adb6505 ANDROID: sdcardfs: notify lower file of opens by Daniel Rosenberg · 8 years ago
  81. 365c70c sdcardfs: fix space leak by Andrea Arcangeli · 8 years ago
  82. a4aec0d sdcardfs: minor fixes by Andrea Arcangeli · 8 years ago
  83. 5e12285 sdcardfs: Backport and use some 3.10 hlist/hash macros by Paul Keith · 8 years ago
  84. a0dfb93 ANDROID: sdcardfs: Add missing break by Daniel Rosenberg · 8 years ago
  85. 36ae01f ANDROID: Sdcardfs: Move gid derivation under flag by Daniel Rosenberg · 8 years ago
  86. 63ce173 ANDROID: mnt: Fix freeing of mount data by Daniel Rosenberg · 8 years ago
  87. ba32e49 ANDROID: sdcardfs: override credential for ioctl to lower fs by Jaegeuk Kim · 8 years ago
  88. 368928f sdcardfs: limit stacking depth by Andrew Chant · 8 years ago
  89. 6b47f9c ANDROID: sdcardfs: Remove unnecessary lock by Daniel Rosenberg · 8 years ago
  90. 32e4be7 ANDROID: sdcardfs: use mount_nodev and fix a issue in sdcardfs_kill_sb by Gao Xiang · 8 years ago
  91. 329fe70 ANDROID: sdcardfs: remove dead function open_flags_to_access_mode() by Greg Hackmann · 8 years ago
  92. d14af5a ANDROID: sdcardfs: d_splice_alias can return error values by Daniel Rosenberg · 8 years ago
  93. c73137c ANDROID: mnt: Fix next_descendent by Daniel Rosenberg · 8 years ago
  94. 9d58aa9 ANDROID: sdcardfs: Check for NULL in revalidate by Daniel Rosenberg · 8 years ago
  95. d81b8fb ANDROID: sdcardfs: Add linux/kref.h include by Dmitry Shmidt · 8 years ago
  96. ed4e253 ANDROID: sdcardfs: Move top to its own struct by Daniel Rosenberg · 8 years ago
  97. f56b230 ANDROID: sdcardfs: fix sdcardfs_destroy_inode for the inode RCU approach by Gao Xiang · 8 years ago
  98. 1cb546b ANDROID: sdcardfs: Don't iput if we didn't igrab by Daniel Roseberg · 8 years ago
  99. 1fbc845 ANDROID: sdcardfs: Call lower fs's revalidate by Daniel Rosenberg · 8 years ago
  100. 1e77d79 ANDROID: sdcardfs: Avoid setting GIDs outside of valid ranges by Daniel Rosenberg · 8 years ago