Intel SGX SDK Advisory - Lenovo Support US

No description provided...

Intel® ON Event Series Android App Advisory

Summary: A potential security vulnerability in the Intel® ON Event Series Android application may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-41614 Description: Insufficiently protected...

GSD-2023-1002295 regulator: da9211: Use irq handler when ready

regulator: da9211: Use irq handler when ready This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...

GSD-2023-1002290 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.304 by commit...

GSD-2023-1002282 dmaengine: Fix double increment of client_count in dma_chan_get()

dmaengine: Fix double increment of clientcount in dmachanget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.305 by commit...

GSD-2023-1002279 tracing: Make sure trace_printk() can output as soon as it can be used

tracing: Make sure traceprintk can output as soon as it can be used This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.305 by commit...

GSD-2023-1002264 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...

GSD-2023-1002254 HID: betop: check shape of output reports

HID: betop: check shape of output reports This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.272 by commit...

GSD-2023-1002253 w1: fix WARNING after calling w1_process()

w1: fix WARNING after calling w1process This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.272 by commit...

GSD-2023-1002237 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

nfc: pn533: Wait for outurb's completion in pn533usbsendframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1002225 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1002199 perf/x86/amd: fix potential integer overflow on shift of a int

perf/x86/amd: fix potential integer overflow on shift of a int This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...

GSD-2023-1002180 btrfs: always report error in run_one_delayed_ref()

btrfs: always report error in runonedelayedref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1002167 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1002149 w1: fix WARNING after calling w1_process()

w1: fix WARNING after calling w1process This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002146 cifs: Fix oops due to uncleared server->smbd_conn in reconnect

cifs: Fix oops due to uncleared server-smbdconn in reconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002141 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()

ipv4: prevent potential spectre v1 gadget in ipmetricsconvert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002138 net/sched: sch_taprio: do not schedule in taprio_reset()

net/sched: schtaprio: do not schedule in taprioreset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002137 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL

x86/i8259: Mark legacy PIC interrupts with IRQLEVEL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002136 perf/x86/amd: fix potential integer overflow on shift of a int

perf/x86/amd: fix potential integer overflow on shift of a int This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...