GSD-2021-1002452 serial: core: fix transmit-buffer reset and memleak

serial: core: fix transmit-buffer reset and memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

GSD-2021-1002450 rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

rxrpc: Fix rxrpclocal leak in rxrpclookuppeer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

GSD-2021-1002443 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3infoblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by...

GSD-2021-1002440 atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait

atlantic: Fix OOB read and write in hwatlutilsfwrpcwait This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

GSD-2021-1002436 scsi: mpt3sas: Fix kernel panic during drive powercycle test

scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.163 by commit...

GSD-2021-1002429 ALSA: pcm: oss: Limit the period size to 16MB

ALSA: pcm: oss: Limit the period size to 16MB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.221 by commit...

GSD-2021-1002422 serial: core: fix transmit-buffer reset and memleak

serial: core: fix transmit-buffer reset and memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.220 by commit...

GSD-2021-1002418 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.220 by commit...

GSD-2021-1002407 ALSA: pcm: oss: Limit the period size to 16MB

ALSA: pcm: oss: Limit the period size to 16MB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...

GSD-2021-1002401 nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

nfc: fix potential NULL pointer deref in nfcgenldumpsesdone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...

GSD-2021-1002398 serial: core: fix transmit-buffer reset and memleak

serial: core: fix transmit-buffer reset and memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by commit...

GSD-2021-1002397 can: sja1000: fix use after free in ems_pcmcia_add_card()

can: sja1000: fix use after free in emspcmciaaddcard This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...

GSD-2021-1002393 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3infoblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by...

GSD-2021-1002381 nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

nfc: fix potential NULL pointer deref in nfcgenldumpsesdone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.293 by commit...

GSD-2021-1002380 can: pch_can: pch_can_rx_normal: fix use after free

can: pchcan: pchcanrxnormal: fix use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.293 by commit...

GSD-2021-1002371 ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

ARM: socfpga: Fix crash with CONFIGFORTIRYSOURCE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.292 by commit...

GSD-2021-1002361 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.294 by commit...

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-03998)

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Defender for IOT Elevation of Privilege Vulnerability

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IOT suffers from an elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges...