GSD-2022-1001177 clk: visconti: prevent array overflow in visconti_clk_register_gates()

clk: visconti: prevent array overflow in visconticlkregistergates This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29704

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30734

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29910

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.17 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to preventing array overflow in the visconti clk register gates function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-30216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29607

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description The issue is related to the drm/virtio component, specifically in the virtio gpu array put free function, where it does not check if objs is NULL. This could potentially lead to security...

PT-2022-29729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A bug in the imx-jpeg media module allows for accessing an array out of bounds. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.239 Description The issue is related to a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.32 Description The issue is related to accessing an array out of bounds for an enum type in the va-macro codec. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30436

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30229

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29247

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description A potential issue exists where kmalloc array could return null, which may have security implications. The actual impact and likelihood of an attack have not been confirmed. Recommendations For...

PT-2022-29928

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue concerns a potential null return of kmalloc array in the drm/amdkfd component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30150

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: wc938x module. The actual impact and attack plausibility have not yet been proven. Recommendatio...