GSD-2023-1000811 rapidio: fix possible UAF when kfifo_alloc() fails

rapidio: fix possible UAF when kfifoalloc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000684 scsi: snic: Fix possible UAF in snic_tgt_create()

scsi: snic: Fix possible UAF in snictgtcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000677 staging: vme_user: Fix possible UAF in tsi148_dma_list_add

staging: vmeuser: Fix possible UAF in tsi148dmalistadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000553 media: dvbdev: adopts refcnt to avoid UAF

media: dvbdev: adopts refcnt to avoid UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000518 block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq

block, bfq: fix uaf for bfqq in bfqexiticqbfqq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000482 dm thin: Fix UAF in run_timer_softirq()

dm thin: Fix UAF in runtimersoftirq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit 94e231c9d6f2648d2f1f68e7f476e050ee0a6159, ...

GSD-2023-1000478 dm integrity: Fix UAF in dm_integrity_dtr()

dm integrity: Fix UAF in dmintegritydtr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000475 dm clone: Fix UAF in clone_dtr()

dm clone: Fix UAF in clonedtr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit b1ddb666073bb5f36390aaabaa1a4d48d78c52ed, it was...

GSD-2023-1000433 media: dvb-core: Fix UAF due to refcount races at releasing

media: dvb-core: Fix UAF due to refcount races at releasing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000372 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...

GSD-2023-1000310 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.226 by commit...

GSD-2023-1000189 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000007 perf: Fix perf_pending_task() UaF

perf: Fix perfpendingtask UaF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.14 by commit 78e1317a174edbfd1182599bf76c092a2877672c. For mo...

PT-2023-34399 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential issue exists where the media: dvbdev: adopts refcnt to avoid UAF. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

GSD-2022-1007855 net: sched: Fix use after free in red_enqueue()

net: sched: Fix use after free in redenqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5752-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5752-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a use- after-fr...

GSD-2022-1007617 fs: fix UAF/GPF bug in nilfs_mdt_destroy

fs: fix UAF/GPF bug in nilfsmdtdestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007460 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...

GSD-2022-1007343 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

net: fix UAF issue in nfqnlnfhookdrop when opsinit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.223 by commit...

GSD-2022-1007337 fs: fix UAF/GPF bug in nilfs_mdt_destroy

fs: fix UAF/GPF bug in nilfsmdtdestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.148 by commit...