GSD-2022-1002646 nbd: fix possible overflow on 'first_minor' in nbd_dev_add()

nbd: fix possible overflow on 'firstminor' in nbddevadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18 by commit...

GSD-2022-1002629 scsi: sd: Fix potential NULL pointer dereference

scsi: sd: Fix potential NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002624 driver core: fix deadlock in __device_attach

driver core: fix deadlock in deviceattach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002616 drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

drm/amdgpu: Off by one in dmdmuboutbox1lowirq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002608 efi: Do not import certificates from UEFI Secure Boot for T2 Macs

efi: Do not import certificates from UEFI Secure Boot for T2 Macs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002600 net: altera: Fix refcount leak in altera_tse_mdio_create

net: altera: Fix refcount leak in alteratsemdiocreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002594 net: xfrm: unexport __init-annotated xfrm4_protocol_init()

net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002584 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.

drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002579 net/mlx5: E-Switch, pair only capable devices

net/mlx5: E-Switch, pair only capable devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002566 xprtrdma: treat all calls not a bcall when bc_serv is NULL

xprtrdma: treat all calls not a bcall when bcserv is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002541 staging: rtl8712: fix uninit-value in usb_read8() and friends

staging: rtl8712: fix uninit-value in usbread8 and friends This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002534 cifs: fix potential deadlock in direct reclaim

cifs: fix potential deadlock in direct reclaim This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002530 nbd: call genl_unregister_family() first in nbd_cleanup()

nbd: call genlunregisterfamily first in nbdcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

Fund migration should trigger a rebase to prevent missing out on potential rewards

Lines of code Vulnerability details Impact Rebasing allows the protocol to "distribute" profit/rewards to Yieldy and Foxy token holders by increasing the supply of tokens and increasing the balance of each token holder relative to the token balance creditBalances. The order of rebasing and...

Malicious code in luc1f3rhk1-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0132343e5096ec1c7558fa700c505b841930fe5cc1546d0289d4ea7c53826f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in res-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a93597f1f8b3cccc9c9376c46c7c4bb4aa253d0a1023a670719749e01333d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1610 Malicious code in block-utxos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e70c6a7180039569d10a362b93afb6e7327163558b46d4e3605503c9a4459596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odata-discriminator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265529bcc74ef5bda572c9fde28874a801e8ce0977e3981dbc87bbc3f2df2500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in omar-evil-test-rpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e5e94c35a9358e80839da1d1e54bf442ee12222b449aba7928ce4e04e801056 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/match-media (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0f5386f94497eb0315d2358c99de8c51a9f6b76e96ba9d77f5dccc7f41949a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...