Code-Centric Detection of Vulnerability-Fixing Commits: A Unified Benchmark and Empirical Study

Automated detection of vulnerability-fixing commits VFCs is critical for timely security patch deployment, as advisory databases lag patch releases by a median of 25 days and many fixes never receive advisories. We present a comprehensive evaluation of code language model based VFC detection...

GSD-2022-1007091 drm: bridge: adv7511: unregister cec i2c device after cec adapter

drm: bridge: adv7511: unregister cec i2c device after cec adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006336 nvme-tcp: fix UAF when detecting digest errors

nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

GSD-2022-1003633 ipw2x00: Fix potential NULL dereference in libipw_xmit()

ipw2x00: Fix potential NULL dereference in libipwxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1001321 coresight: syscfg: Fix memleak on registration failure in cscfg_create_device

coresight: syscfg: Fix memleak on registration failure in cscfgcreatedevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...