GSD-2022-1008209 9p: trans_fd/p9_conn_cancel: drop client lock earlier

9p: transfd/p9conncancel: drop client lock earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

GSD-2022-1008176 bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()

bnxten: Fix possible crash in bnxthwrmsetcoal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1008032 iio: adc: mp2629: fix potential array out of bound access

iio: adc: mp2629: fix potential array out of bound access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...

GSD-2022-1008017 9p: trans_fd/p9_conn_cancel: drop client lock earlier

9p: transfd/p9conncancel: drop client lock earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...

GSD-2022-1007960 bpf: Fix wrong reg type conversion in release_reference()

bpf: Fix wrong reg type conversion in releasereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007870 net/9p: use a dedicated spinlock for trans_fd

net/9p: use a dedicated spinlock for transfd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

CVE-2021-3661

A potential security vulnerability has been identified in certain HP Workstation BIOS UEFI firmware which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability...

CVE-2022-1038

A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software...

GSD-2022-1007599 drm/mipi-dsi: Detach devices when removing the host

drm/mipi-dsi: Detach devices when removing the host This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007308 jbd2: add miss release buffer head in fc_do_one_pass()

jbd2: add miss release buffer head in fcdoonepass This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007123 jbd2: fix potential use-after-free in jbd2_fc_wait_bufs

jbd2: fix potential use-after-free in jbd2fcwaitbufs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1007071 misc: ocxl: fix possible refcount leak in afu_ioctl()

misc: ocxl: fix possible refcount leak in afuioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006963 coresight: cti: Fix hang in cti_disable_hw()

coresight: cti: Fix hang in ctidisablehw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006952 net: netsec: fix error handling in netsec_register_mdio()

net: netsec: fix error handling in netsecregistermdio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006862 bpf: Propagate error from htab_lock_bucket() to userspace

bpf: Propagate error from htablockbucket to userspace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006724 HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()

HSI: ssiprotocol: fix potential resource leak in ssippnopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006683 net: hsr: avoid possible NULL deref in skb_clone()

net: hsr: avoid possible NULL deref in skbclone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

GSD-2022-1006665 iio: temperature: ltc2983: allocate iio channels once

iio: temperature: ltc2983: allocate iio channels once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-35491 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential memory leak was identified in the nouveau bo alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

GSD-2022-1006494 gpio: mockup: Fix potential resource leakage when register a chip

gpio: mockup: Fix potential resource leakage when register a chip This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...