GSD-2022-1002661 lkdtm/bugs: Check for the NULL pointer after calling kmalloc

lkdtm/bugs: Check for the NULL pointer after calling kmalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002660 md: Don't set mddev private to NULL in raid0 pers->free

md: Don't set mddev private to NULL in raid0 pers-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002657 usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback

usb: dwc3: gadget: Replace listforeachentrysafe if using giveback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002648 macsec: fix UAF bug for real_dev

macsec: fix UAF bug for realdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit d130282179aa6051449ac8f8df1115769998a665, it w...

GSD-2022-1002646 nbd: fix possible overflow on 'first_minor' in nbd_dev_add()

nbd: fix possible overflow on 'firstminor' in nbddevadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18 by commit...

GSD-2022-1002635 misc/pvpanic: Convert regular spinlock into trylock on panic path

misc/pvpanic: Convert regular spinlock into trylock on panic path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002619 net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition

net/mlx5e: Disable softirq in mlx5eactivaterq to avoid race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002616 drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

drm/amdgpu: Off by one in dmdmuboutbox1lowirq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002607 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages

fs-writeback: writebacksbinodes：Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002590 bpf, arm64: Clear prog->jited_len along prog->jited

bpf, arm64: Clear prog-jitedlen along prog-jited This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002587 net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules

net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002586 ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock

ocfs2: dlmfs: fix error handling of userdlmdestroylock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002574 vduse: Fix NULL pointer dereference on sysfs access

vduse: Fix NULL pointer dereference on sysfs access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002566 xprtrdma: treat all calls not a bcall when bc_serv is NULL

xprtrdma: treat all calls not a bcall when bcserv is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002565 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type

dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002560 NFSv4: Don't hold the layoutget locks across multiple RPC calls

NFSv4: Don't hold the layoutget locks across multiple RPC calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002545 iio: dummy: iio_simple_dummy: check the return value of kstrdup()

iio: dummy: iiosimpledummy: check the return value of kstrdup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002529 drm/amd/display: Check if modulo is 0 before dividing.

drm/amd/display: Check if modulo is 0 before dividing. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002514 jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

jffs2: fix use-after-free in jffs2clearxattrsubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002506 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...