GSD-2022-1005483 gadgetfs: ep_io - wait until IRQ finishes

gadgetfs: epio - wait until IRQ finishes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005472 lib/list_debug.c: Detect uninitialized lists

lib/listdebug.c: Detect uninitialized lists This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005425 bpf: Don't use tnum_range on array range checking for poke descriptors

bpf: Don't use tnumrange on array range checking for poke descriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...

GSD-2022-1005154 Revert "mm: kfence: apply kmemleak_ignore_phys on early allocated pool"

Revert "mm: kfence: apply kmemleakignorephys on early allocated pool" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.3 by commit...

GSD-2022-1005044 net: Fix data-races around sysctl_max_skb_frags.

net: Fix data-races around sysctlmaxskbfrags. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1004986 bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO

bpf: Do markchainprecision for ARGCONSTALLOCSIZEORZERO This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

Imperva Data Security Fabric Wins 2022 SC Media Trust Award for Data Security

SC Media has announced the winners of their 2022 SC Awards, with 38 companies, executives, and security solutions selected by their panel of judges as the best of the year. We are thrilled to report that ​Imperva Data Security Fabric has earned the 2022 SC Media Trust Award for Data Security. For...

Wyse Management Suite has an unspecified vulnerability (CNVD-2022-56656)

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, Inc. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery.A security vulnerability exists in Wyse Management Suite 3.6.1 and prior versions,...

GSD-2022-1004691 net: sfp: fix memory leak in sfp_probe()

net: sfp: fix memory leak in sfpprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit ede990cfc42775bd0141e21f37ee365dcaeeb50...

GSD-2022-1004624 iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client

iio: adc: adi-axi-adc: Fix refcount leak in adiaxiadcattachclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...

GSD-2022-1004618 soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe

soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstbpmprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...

GSD-2022-1004584 ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction

ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004475 bpf: Fix request_sock leak in sk lookup helpers

bpf: Fix requestsock leak in sk lookup helpers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004442 net: ipv6: unexport __init-annotated seg6_hmac_net_init()

net: ipv6: unexport init-annotated seg6hmacnetinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...

GSD-2022-1004104 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

tcp: Fix data-races around sysctltcpslowstartafteridle. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1003987 um: Fix out-of-bounds read in LDT setup

um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003849 net: xfrm: unexport __init-annotated xfrm4_protocol_init()

net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003816 nbd: call genl_unregister_family() first in nbd_cleanup()

nbd: call genlunregisterfamily first in nbdcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003804 lockdown: also lock down previous kgdb use

lockdown: also lock down previous kgdb use This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.197 by commit...

GSD-2022-1003774 mmc: jz4740: Apply DMA engine limits to maximum segment size

mmc: jz4740: Apply DMA engine limits to maximum segment size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...