14240 matches found
GSD-2022-1006365 ieee802154: cc2520: add rc code in cc2520_tx()
ieee802154: cc2520: add rc code in cc2520tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.69 by commit...
GSD-2022-1006360 drm/amdgpu: fix hive reference leak when adding xgmi device
drm/amdgpu: fix hive reference leak when adding xgmi device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006359 drm/radeon: add a force flush to delay work when radeon
drm/radeon: add a force flush to delay work when radeon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006356 ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
ALSA: emu10k1: Fix out of bounds access in sndemu10k1pcmchannelalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006355 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
ALSA: usb-audio: Fix an out-of-bounds bug in sndusbparseaudiointerface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006354 vfio/type1: Unpin zero pages
vfio/type1: Unpin zero pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit 5d721bf222936f5cf3ee15ced53cc483ecef7e46. For mor...
GSD-2022-1006349 nvmet: fix a use-after-free
nvmet: fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit 4484ce97a78171668c402e0c45db7f760aea8060, it was...
GSD-2022-1006348 regmap: spi: Reserve space for register address/padding
regmap: spi: Reserve space for register address/padding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006347 scsi: mpt3sas: Fix use-after-free warning
scsi: mpt3sas: Fix use-after-free warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006345 tee: fix compiler warning in tee_shm_register()
tee: fix compiler warning in teeshmregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006341 netfilter: nf_tables: clean up hook list when offload flags check fails
netfilter: nftables: clean up hook list when offload flags check fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006338 i40e: Fix kernel crash during module removal
i40e: Fix kernel crash during module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006336 nvme-tcp: fix UAF when detecting digest errors
nvme-tcp: fix UAF when detecting digest errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006334 erofs: fix pcluster use-after-free on UP platforms
erofs: fix pcluster use-after-free on UP platforms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006332 net/smc: Fix possible access to freed memory in link clear
net/smc: Fix possible access to freed memory in link clear This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GSD-2022-1006331 swiotlb: avoid potential left shift overflow
swiotlb: avoid potential left shift overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...
GHSA-RM2X-HGR8-W343 LIEF vulnerable to denial of service through segmentation fault
A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. A patch is available at commit number 24935f654f6df700a9a062298258b9485f584502...
GHSA-PWQ7-F7F9-CM2J Dutchoders transfer.sh contains an XSS vulnerability via malicious file upload
dutchcoders Transfer.sh versions 1.4.0 and prior are vulnerable to Cross Site Scripting XSS via a malicious document uploaded in transfer.sh. There is a fix commit merged into main for this issue, but an updated version has not yet been released...
