1. 5808c72 futex: Validate atomic acquisition in futex_lock_pi_atomic() by Thomas Gleixner · 10 years ago
  2. b3cbd89 futex: Prevent attaching to kernel threads by Thomas Gleixner · 10 years ago
  3. 4e83753 futex: Add another early deadlock detection check by Thomas Gleixner · 10 years ago
  4. 1ee4f05 futex: fix handling of read-only-mapped hugepages by Linus Torvalds · 11 years ago
  5. 0f846bb futex: Take hugepages into account when generating futex_key by Zhang Yi · 11 years ago
  6. f8597ae hugetlbfs: fix mmap failure in unaligned size request by Naoya Horiguchi · 11 years ago
  7. 4db14f6 futex: Revert "futex: Mark get_robust_list as deprecated" by Thomas Gleixner · 12 years ago
  8. 2b3c872 futex: avoid wake_futex() for a PI futex_q by Darren Hart · 12 years ago
  9. 7c0713b futex: Handle futex_pi OWNER_DIED take over correctly by Thomas Gleixner · 12 years ago
  10. 73bca9c futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi() by Darren Hart · 12 years ago
  11. f95d7d0 futex: Fix bug in WARN_ON for NULL q.pi_state by Darren Hart · 12 years ago
  12. c1838d2 futex: Test for pi_mutex on fault in futex_wait_requeue_pi() by Darren Hart · 12 years ago
  13. bf51ef8 msm: adsprpc: Fix race conditions on same buffer by Tharun Kumar Merugu · 7 years ago
  14. a666d66 UPSTREAM: ipv4, ipv6: ensure raw socket message is big enough to hold an IP header by Alexander Potapenko · 7 years ago
  15. 3d9756f diag: Validate copying length against source buffer length by Hardik Arya · 7 years ago
  16. ef36863 crypto: hmac - require that the underlying hash algorithm is unkeyed by Eric Biggers · 7 years ago
  17. db75f87 msm: sensor: actuator: avoid accessing out of bound memory by Haibin Liu · 7 years ago
  18. 49a48a4 msm: vidc: Fix use after free bug in set_output_buffers by Chinmay Sawarkar · 7 years ago
  19. df782bd loop: fix concurrent lo_open/lo_release by Linus Torvalds · 7 years ago
  20. 9a1aa86 Input: gtco - fix potential out-of-bound access by Dmitry Torokhov · 7 years ago
  21. bd170eb msm: ipa: Fix the handling of default IPA header by Ghanim Fodi · 7 years ago
  22. 44560a2 net: usb: rmnet_usb_ctrl: Fix use after free issue by Sai Krishna Juturi · 7 years ago
  23. 11a210e sctp: do not peel off an assoc from one netns to another one by Xin Long · 7 years ago
  24. e7f3f9f net: ipv4: emulate READ_ONCE() on ->hdrincl bit-field in raw_sendmsg() by Nicolai Stange · 7 years ago
  25. 18ed6c3 net: ipv4: fix for a race condition in raw_sendmsg by Mohamed Ghannam · 7 years ago
  26. 1c911cd ipv4: Avoid reading user iov twice after raw_probe_proto_opt by Herbert Xu · 10 years ago
  27. 5b400da ipv4: Use standard iovec primitive in raw_probe_proto_opt by Herbert Xu · 10 years ago
  28. 88395c5 UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc() by Eric Biggers · 7 years ago
  29. cf889f6 ASoC: apr: Add validity check to APR port by Aditya Bavanari · 7 years ago
  30. aed116f BACKPORT: USB: core: harden cdc_parse_cdc_header by Marissa Wall · 7 years ago
  31. 106c738 cdc-acm: prevent infinite loop when parsing CDC headers. by Quentin Casasnovas · 9 years ago
  32. a5a3ba4 cdc-acm: add sanity checks by Oliver Neukum · 10 years ago
  33. 98e2602 ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor by Takashi Iwai · 7 years ago
  34. e80c08a USB: fix out-of-bounds in usb_set_configuration by Greg Kroah-Hartman · 7 years ago
  35. d9fbd68 HID: usbhid: fix out-of-bounds bug by Jaejoong Kim · 7 years ago
  36. 816c02c USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() by Alan Stern · 7 years ago
  37. f591920 USB: serial: console: fix use-after-free after failed setup by Johan Hovold · 7 years ago
  38. f736675 msm:ipa: Fix to incorrect structure access by Mohammed Javid · 7 years ago
  39. f63cdb6 msm: ipa: Prevent multiple header deletion from user space by Ghanim Fodi · 7 years ago
  40. 21fc0f7 ASoC: msm: qdsp6v2: Set freed pointers to NULL by Aditya Bavanari · 7 years ago
  41. 18906ad diag: Add protection while de-initializing clients by Mohit Aggarwal · 7 years ago
  42. e640177 BACKPORT: packet: in packet_do_bind, test fanout with bind_lock held by Marissa Wall · 7 years ago
  43. 870e82a ALSA: usb-audio: Kill stray URB at exiting by Takashi Iwai · 7 years ago
  44. c3d4a71 msm: vidc: update the check to ignore extradata plane in dqbuf by Praveen Chavan · 8 years ago
  45. 16d0335 msm: vidc: add ion_handle checking before mapping buffers by Praveen Chavan · 9 years ago
  46. 9fd90e7 msm: vidc: Add same fd ref only for static buffer mode by Surajit Podder · 10 years ago
  47. 893536a wcnss: fix the potential buffer flow issue in firmware setup by Sarada Prasanna Garnayak · 7 years ago
  48. 052effe wcnss: Fix mismatch between format and argument in pr_err() by Jeff Johnson · 11 years ago
  49. b5768a6 msm: camera: Return -NOTTY on invalid ioctl command. by Trishansh Bhardwaj · 7 years ago
  50. 2e43a4e msm: sensor: Validationg function pointers before using them by VijayaKumar T M · 8 years ago
  51. c5593a0 msm: camera: sensor: Validate destination step position by Rajesh Bondugula · 8 years ago
  52. 4098ac8 msm: camera: validate num_streams in stream_cfg_cmd before using it by Gaoxiang Chen · 7 years ago
  53. db56ff6 mqueue: fix a use-after-free in sys_mq_notify() by Cong Wang · 7 years ago
  54. 4c49736 Sanitize 'move_pages()' permission checks by Linus Torvalds · 7 years ago
  55. 7b983f1 tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 by Wei Wang · 7 years ago
  56. 75bdf91 KEYS: prevent KEYCTL_READ on negative key by Eric Biggers · 7 years ago
  57. 64fa6cd KEYS: fix dereferencing NULL payload with nonzero length by Eric Biggers · 7 years ago
  58. 8b98179 packet: fix tp_reserve race in packet_set_ring by Willem de Bruijn · 7 years ago
  59. 6758127 packet: hold bind lock when rebinding to fanout hook by Ben Hutchings · 7 years ago
  60. 740bf0f diag: Add mutex protection while reading dci debug statistics by Sreelakshmi Gownipalli · 7 years ago
  61. b5816e4 msm: vidc: WARN_ON() reveals fuction addresses by Ariel Yin · 8 years ago
  62. bd924fe ANDROID: qtaguid: Fix the UAF probelm with tag_ref_tree by Chenbo Feng · 7 years ago
  63. 16ed9c1 rtac: add size check when reading cal data kvaddr buffer by kunleiz · 7 years ago
  64. 1e191c5 ASoC: wcd9xxx: restrict debugfs permission by Karthikeyan Mani · 7 years ago
  65. 13fee7c USB: core: prevent malicious bNumInterfaces overflow by Alan Stern · 7 years ago
  66. 1a63b62 usb: config->desc.bLength may not exceed amount of data returned by the device by Hans de Goede · 11 years ago
  67. 193f237 ipsec: Fix aborted xfrm policy dump crash by Ben Hutchings · 7 years ago
  68. 9bee074 iovec: make sure the caller actually wants anything in memcpy_fromiovecend by Paul Lawrence · 7 years ago
  69. 5ca98ba ANDROID: sound: rawmidi: Hold lock around realloc by Daniel Rosenberg · 7 years ago
  70. 4fa1fe9 clocksource: arch_timer: make virtual counter access configurable by Greg Hackmann · 7 years ago
  71. e8acc9f staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl by Viktor Slavkovic · 7 years ago
  72. 6931318 crypto: algif_skcipher - Load TX SG list after waiting by Herbert Xu · 9 years ago
  73. 49ca11d ANDROID: sdcardfs: fix potential crash when reserved_mb is not zero by Lianjun Huang · 6 years ago
  74. ee93c70 leds: trigger: ledtrig-backlight: Fix invalid memory access in fb_event notification callback by Manfred Schlaegl · 11 years ago
  75. 8249a07 msm: mdss: Make LEDS_TRIGGER_BACKLIGHT work by Ricardo Cerqueira · 9 years ago
  76. e59ae0b FP2: disable KSM by chrmhoffmann · 6 years ago
  77. 0368080 ANDROID: sdcardfs: Don't d_drop in d_revalidate by Daniel Rosenberg · 6 years ago
  78. 0f0c980 ANDROID: sdcardfs: Set s_root to NULL after putting by Daniel Rosenberg · 6 years ago
  79. 5ae351e ANDROID: sdcardfs: d_make_root calls iput by Daniel Rosenberg · 6 years ago
  80. ff80533 ANDROID: sdcardfs: Check for private data earlier by Daniel Rosenberg · 6 years ago
  81. 396bf57 ANDROID: fuse: Add null terminator to path in canonical path to avoid issue by Ritesh Harjani · 6 years ago
  82. dbd58bd ANDROID: sdcardfs: Fix sdcardfs to stop creating cases-sensitive duplicate entries. by Ritesh Harjani · 6 years ago
  83. 7d0e3e9 ANDROID: sdcardfs: Set num in extension_details during make_item by Ritesh Harjani · 7 years ago
  84. 690f288 ANDROID: sdcardfs: Hold i_mutex for i_size_write by Daniel Rosenberg · 7 years ago
  85. dc2e381 ANDROID: sdcardfs: Protect set_top by Daniel Rosenberg · 7 years ago
  86. be38164 ANDROID: fsnotify: Notify lower fs of open by Daniel Rosenberg · 7 years ago
  87. 4a65a16 Revert "ANDROID: sdcardfs: notify lower file of opens" by Daniel Rosenberg · 7 years ago
  88. ba62cd9 ANDROID: sdcardfs: Use lower getattr times/size by Daniel Rosenberg · 7 years ago
  89. c6952aa ANDROID: xattr: Pass EOPNOTSUPP to permission2 by Daniel Rosenberg · 7 years ago
  90. c99c82d ANDROID: sdcardfs: Move default_normal to superblock by Daniel Rosenberg · 7 years ago
  91. 4a66373 ANDROID: sdcardfs: Fix missing break on default_normal by Daniel Rosenberg · 7 years ago
  92. ad92161 ANDROID: sdcardfs: Add default_normal option by Daniel Rosenberg · 7 years ago
  93. adb6505 ANDROID: sdcardfs: notify lower file of opens by Daniel Rosenberg · 7 years ago
  94. 365c70c sdcardfs: fix space leak by Andrea Arcangeli · 7 years ago
  95. a4aec0d sdcardfs: minor fixes by Andrea Arcangeli · 7 years ago
  96. 5e12285 sdcardfs: Backport and use some 3.10 hlist/hash macros by Paul Keith · 7 years ago
  97. a0dfb93 ANDROID: sdcardfs: Add missing break by Daniel Rosenberg · 7 years ago
  98. 36ae01f ANDROID: Sdcardfs: Move gid derivation under flag by Daniel Rosenberg · 7 years ago
  99. 63ce173 ANDROID: mnt: Fix freeing of mount data by Daniel Rosenberg · 7 years ago
  100. ba32e49 ANDROID: sdcardfs: override credential for ioctl to lower fs by Jaegeuk Kim · 7 years ago