GSD-2022-1000519 net: dsa: fix panic when DSA master device unbinds on shutdown

net: dsa: fix panic when DSA master device unbinds on shutdown This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000514 ibmvnic: don't release napi in __ibmvnic_open()

ibmvnic: don't release napi in ibmvnicopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000467 net_sched: add __rcu annotation to netdev->qdisc

netsched: add rcu annotation to netdev-qdisc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

GSD-2022-1000448 iommu: Fix potential use-after-free during probe

iommu: Fix potential use-after-free during probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000445 perf: Fix list corruption in perf_cgroup_switch()

perf: Fix list corruption in perfcgroupswitch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000435 veth: fix races around rq->rx_notify_masked

veth: fix races around rq-rxnotifymasked This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000431 net: dsa: lantiq_gswip: don't use devres for mdiobus

net: dsa: lantiqgswip: don't use devres for mdiobus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000430 net: dsa: felix: don't use devres for mdiobus

net: dsa: felix: don't use devres for mdiobus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000402 perf bpf: Defer freeing string after possible strlen() on it

perf bpf: Defer freeing string after possible strlen on it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

GSD-2022-1000381 fs/proc: task_mmu.c: don't read mapcount for migration entry

fs/proc: taskmmu.c: don't read mapcount for migration entry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

GSD-2022-1000357 copy_process(): Move fd_install() out of sighand->siglock critical section

copyprocess: Move fdinstall out of sighand-siglock critical section This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.181 by commit...

GSD-2022-1000341 veth: fix races around rq->rx_notify_masked

veth: fix races around rq-rxnotifymasked This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.180 by commit...

GSD-2022-1000312 drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit

dropmonitor: fix data-race in dropmonnetevent / tracenapipollhit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.268 by commit...

GSD-2022-1000309 net: ieee802154: at86rf230: Stop leaking skb's

net: ieee802154: at86rf230: Stop leaking skb's This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.268 by commit...

GSD-2022-1000288 ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.302 by commit...

EulerOS 2.0 SP3 : ceph-common (EulerOS-SA-2022-1157)

According to the versions of the ceph-common packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to...

CVE-2021-27755

"Sametime Android potential path traversal vulnerability when using File class"...

CVE-2021-27755

Technical details about CVE-2021-27755 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are stated. Monitor for updates from vendors and security advisories.

GSD-2022-1000278 ovl: fix NULL pointer dereference in copy up warning

ovl: fix NULL pointer dereference in copy up warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.20 by commit...

GSD-2022-1000264 net/smc: Transitional solution for clcsock race issue

net/smc: Transitional solution for clcsock race issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...