GSD-2022-1007872 gfs2: Check sb_bsize_shift after reading superblock

gfs2: Check sbbsizeshift after reading superblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007870 net/9p: use a dedicated spinlock for trans_fd

net/9p: use a dedicated spinlock for transfd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007864 RDMA/rxe: Fix mr leak in RESPST_ERR_RNR

RDMA/rxe: Fix mr leak in RESPSTERRRNR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit 50b35ad2864a9d66f802f9ce193d99bbef64e219,...

GSD-2022-1007853 netfilter: nf_tables: netlink notifier might race to release objects

netfilter: nftables: netlink notifier might race to release objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007831 btrfs: fix tree mod log mishandling of reallocated nodes

btrfs: fix tree mod log mishandling of reallocated nodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007828 cxl/region: Fix decoder allocation crash

cxl/region: Fix decoder allocation crash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007757 ALSA: hda: fix potential memleak in 'add_widget_node'

ALSA: hda: fix potential memleak in 'addwidgetnode' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

GSD-2022-1007741 octeon_ep: fix potential memory leak in octep_device_setup()

octeonep: fix potential memory leak in octepdevicesetup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007739 net: mhi: Fix memory leak in mhi_net_dellink()

net: mhi: Fix memory leak in mhinetdellink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007727 net: lan966x: Fix potential null-ptr-deref in lan966x_stats_init()

net: lan966x: Fix potential null-ptr-deref in lan966xstatsinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007718 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()

tracing: kprobe: Fix potential null-ptr-deref on traceeventfile in kprobeeventgentestexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1...

GSD-2022-1007716 rethook: fix a potential memleak in rethook_alloc()

rethook: fix a potential memleak in rethookalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007703 perf: Improve missing SIGTRAP checking

perf: Improve missing SIGTRAP checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit b09221f1b4944d2866d06ac35e59d7a6f8916c9...

GSD-2022-1007702 net: use struct_group to copy ip/ipv6 header addresses

net: use structgroup to copy ip/ipv6 header addresses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007693 kcm: avoid potential race in kcm_tx_work

kcm: avoid potential race in kcmtxwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit 2526ac6b0f5a9b38e7e9073e37141cf78408078...

GSD-2022-1007690 dm ioctl: fix misbehavior if list_versions races with module loading

dm ioctl: fix misbehavior if listversions races with module loading This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007687 9p: trans_fd/p9_conn_cancel: drop client lock earlier

9p: transfd/p9conncancel: drop client lock earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-ujson) security update

An update for python-ujson is now available for Red Hat OpenStack Platform 16.2.4 Train for Red Hat Enterprise Linux RHEL 8.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

PT-2022-5768 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to insufficient input validation in the NVIDIA GPU Display Driver, allowing an unprivileged user to access or modify system files,...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2022:4247-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4247-1 advisory. Update to Firefox Extended Support Release 102.5.0 ESR MFSA 2022-48, bsc1205270: - CVE-2022-45403: Service Workers might have learn...