4414 matches found
GSD-2023-1002225 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...
GSD-2023-1002199 perf/x86/amd: fix potential integer overflow on shift of a int
perf/x86/amd: fix potential integer overflow on shift of a int This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...
GSD-2023-1002180 btrfs: always report error in run_one_delayed_ref()
btrfs: always report error in runonedelayedref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...
GSD-2023-1002167 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...
GSD-2023-1002149 w1: fix WARNING after calling w1_process()
w1: fix WARNING after calling w1process This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...
GSD-2023-1002146 cifs: Fix oops due to uncleared server->smbd_conn in reconnect
cifs: Fix oops due to uncleared server-smbdconn in reconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...
GSD-2023-1002141 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
ipv4: prevent potential spectre v1 gadget in ipmetricsconvert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...
GSD-2023-1002138 net/sched: sch_taprio: do not schedule in taprio_reset()
net/sched: schtaprio: do not schedule in taprioreset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...
GSD-2023-1002137 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
x86/i8259: Mark legacy PIC interrupts with IRQLEVEL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...
GSD-2023-1002136 perf/x86/amd: fix potential integer overflow on shift of a int
perf/x86/amd: fix potential integer overflow on shift of a int This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...
GSD-2023-1002097 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...
GSD-2023-1002078 net: mdio: validate parameter addr in mdiobus_get_phy()
net: mdio: validate parameter addr in mdiobusgetphy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...
GSD-2023-1002060 netlink: prevent potential spectre v1 gadgets
netlink: prevent potential spectre v1 gadgets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...
GSD-2023-1002058 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
ipv4: prevent potential spectre v1 gadget in ipmetricsconvert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...
GSD-2023-1002057 ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
ipv4: prevent potential spectre v1 gadget in fibmetricsmatch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...
GSD-2023-1002052 perf/x86/amd: fix potential integer overflow on shift of a int
perf/x86/amd: fix potential integer overflow on shift of a int This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...
GSD-2023-1002051 bpf: Skip task with pid=1 in send_signal_common()
bpf: Skip task with pid=1 in sendsignalcommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.92 by commit...
GSD-2023-1002046 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...
GSD-2023-1002041 squashfs: harden sanity check in squashfs_read_xattr_id_table
squashfs: harden sanity check in squashfsreadxattridtable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...
GSD-2023-1002037 efi: fix potential NULL deref in efi_mem_reserve_persistent
efi: fix potential NULL deref in efimemreservepersistent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...