GSD-2022-1006609 netfilter: ebtables: fix memory leak when blob is malformed

netfilter: ebtables: fix memory leak when blob is malformed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.295 by commit...

GSD-2022-1006606 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header

ipvlan: Fix out-of-bound bugs caused by unset skb-macheader This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.260 by commit...

GSD-2022-1006579 drm/gma500: Fix BUG: sleeping function called from invalid context errors

drm/gma500: Fix BUG: sleeping function called from invalid context errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.146 by commit...

GSD-2022-1006571 mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.

mm: slub: fix flushcpuslab/freeslab invocations in task context. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006537 gpio: mockup: Fix potential resource leakage when register a chip

gpio: mockup: Fix potential resource leakage when register a chip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006526 scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()

scsi: qla2xxx: Fix memory leak in qlt24xxhandleabts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006500 scsi: core: Fix a use-after-free

scsi: core: Fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit 8fe4ce5836e932f5766317cb651c1ff2a4cd0506, it was...

GSD-2022-1006495 exfat: fix overflow for large capacity partition

exfat: fix overflow for large capacity partition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

GSD-2022-1006493 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

gpiolib: cdev: Set lineeventstate::irq after IRQ register successfully This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

GSD-2022-1006468 bnxt: prevent skb UAF after handing over to PTP worker

bnxt: prevent skb UAF after handing over to PTP worker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued

Impact Setting $secure or $httponly value to true in Config\Cookie is not reflected in setcookie or Response::setCookie. Note This vulnerability does not affect session cookies. The following code does not issue a cookie with the secure flag even if you set $secure = true in Config\Cookie. php...

GSD-2022-1006452 ieee802154: cc2520: add rc code in cc2520_tx()

ieee802154: cc2520: add rc code in cc2520tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.329 by commit...

GSD-2022-1006437 debugfs: add debugfs_lookup_and_remove()

debugfs: add debugfslookupandremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.258 by commit ebfb744bb6036485dac2a45c46e82b911c3726d1...

GSD-2022-1006425 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.213 by commit...

GSD-2022-1006410 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit...

GSD-2022-1006392 drm/gem: Fix GEM handle release errors

drm/gem: Fix GEM handle release errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006372 erofs: fix pcluster use-after-free on UP platforms

erofs: fix pcluster use-after-free on UP platforms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006370 RDMA/irdma: Report the correct max cqes from query device

RDMA/irdma: Report the correct max cqes from query device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006349 nvmet: fix a use-after-free

nvmet: fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit 4484ce97a78171668c402e0c45db7f760aea8060, it was...

GSD-2022-1006348 regmap: spi: Reserve space for register address/padding

regmap: spi: Reserve space for register address/padding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...