GSD-2022-1004712 xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue

xen/netback: avoid entering xenvifrxnextskb with an empty rx queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004709 drm/panfrost: Fix shrinker list corruption by madvise IOCTL

drm/panfrost: Fix shrinker list corruption by madvise IOCTL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004702 Revert "evm: Fix memleak in init_desc"

Revert "evm: Fix memleak in initdesc" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit 31e99fa969fd67d77ea92c5527c9cf1c85faa58...

GSD-2022-1004696 seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

seg6: bpf: fix skb checksum in bpfpushseg6encap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004692 net: tipc: fix possible refcount leak in tipc_sk_create()

net: tipc: fix possible refcount leak in tipcskcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004691 net: sfp: fix memory leak in sfp_probe()

net: sfp: fix memory leak in sfpprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit ede990cfc42775bd0141e21f37ee365dcaeeb50...

GSD-2022-1004679 tcp: Fix data-races around sysctl_tcp_min_snd_mss.

tcp: Fix data-races around sysctltcpminsndmss. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...

GSD-2022-1004658 ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()

ata: libata-core: fix NULL pointer deref in atahostallocpinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...

GSD-2022-1004652 tty: goldfish: Fix free_irq() on remove

tty: goldfish: Fix freeirq on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit 65ca4db68b6819244df9024aea4be55edf8af1e...

GSD-2022-1004585 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004578 ima: Fix a potential integer overflow in ima_appraise_measurement

ima: Fix a potential integer overflow in imaappraisemeasurement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004569 ima: Fix potential memory leak in ima_init_crypto()

ima: Fix potential memory leak in imainitcrypto This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004503 tty: goldfish: Fix free_irq() on remove

tty: goldfish: Fix freeirq on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit fb15e79cacddfbc62264e6e807bde50ad688e988...

GSD-2022-1004501 arm64: ftrace: consistently handle PLTs.

arm64: ftrace: consistently handle PLTs. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

GSD-2022-1004490 dm mirror log: round up region bitmap size to BITS_PER_LONG

dm mirror log: round up region bitmap size to BITSPERLONG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

GSD-2022-1004480 scsi: ibmvfc: Allocate/free queue resource only during probe/remove

scsi: ibmvfc: Allocate/free queue resource only during probe/remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004475 bpf: Fix request_sock leak in sk lookup helpers

bpf: Fix requestsock leak in sk lookup helpers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004470 perf arm-spe: Don't set data source if it's not a memory operation

perf arm-spe: Don't set data source if it's not a memory operation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004469 erspan: do not assume transport header is always set

erspan: do not assume transport header is always set This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004459 xtensa: xtfpga: Fix refcount leak bug in setup

xtensa: xtfpga: Fix refcount leak bug in setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...