GSD-2023-1000045 can: slcan: fix freed work crash

can: slcan: fix freed work crash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit 9e2709d58a14a10eb00d919acd7dec071c33f8c8, it...

GSD-2023-1000039 HID: core: fix shift-out-of-bounds in hid_report_raw_event

HID: core: fix shift-out-of-bounds in hidreportrawevent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000035 netfilter: conntrack: fix using __this_cpu_add in preemptible

netfilter: conntrack: fix using thiscpuadd in preemptible This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000034 gpio: amd8111: Fix PCI device reference count leak

gpio: amd8111: Fix PCI device reference count leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000033 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark

netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000032 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()

mac802154: fix missing INITLISTHEAD in ieee802154ifadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000028 octeontx2-pf: Fix potential memory leak in otx2_init_tc()

octeontx2-pf: Fix potential memory leak in otx2inittc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000023 net: wwan: iosm: fix memory leak in ipc_mux_init()

net: wwan: iosm: fix memory leak in ipcmuxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000013 net: thunderbolt: fix memory leak in tbnet_open()

net: thunderbolt: fix memory leak in tbnetopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

GSD-2023-1000012 s390/qeth: fix use-after-free in hsci

s390/qeth: fix use-after-free in hsci This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit bde0dfc7c4569406a6ddeec363d04a1df7b3073f...

GSD-2023-1000011 rtc: cmos: Fix event handler registration ordering issue

rtc: cmos: Fix event handler registration ordering issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.14 by commit...

GSD-2023-1000010 PCI: mt7621: Add sentinel to quirks table

PCI: mt7621: Add sentinel to quirks table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

GSD-2023-1000009 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

ASoC: ops: Check bounds for second channel in sndsocputvolswsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.14 by commit...

GSD-2023-1000008 pinctrl: meditatek: Startup with the IRQs disabled

pinctrl: meditatek: Startup with the IRQs disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.14 by commit...

GSD-2023-1000007 perf: Fix perf_pending_task() UaF

perf: Fix perfpendingtask UaF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.14 by commit 78e1317a174edbfd1182599bf76c092a2877672c. For mo...

GSD-2023-1000006 udf: Discard preallocation before extending file with a hole

udf: Discard preallocation before extending file with a hole This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

GSD-2023-1000003 udf: Fix extending file within last block

udf: Fix extending file within last block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

PT-2023-33980

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns the ext4 file system, specifically with the fast-commit of encrypted directory operations. The actual impact and potential for attack have not been proven yet...

PT-2023-33375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.226 Description A NULL pointer dereference issue exists in the nilfs palloc commit free entry function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-33979

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns leaking uninitialized memory in the fast-commit journal of the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...