PT-2022-35555 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns the use of char for section boundaries in the machvec component. It was introduced in version v2.6.23 and fixed in version v5.10.150. The actual impact and attack...

PT-2022-35255 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to an uninit-value in the idmouse open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

GSD-2022-1006602 netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

netfilter: nfnetlinkosf: fix possible bogus match in nfosffind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.215 by commit...

GSD-2022-1006534 mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.

mm: slub: fix flushcpuslab/freeslab invocations in task context. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006403 sch_sfb: Don't assume the skb is still around after enqueueing to child

schsfb: Don't assume the skb is still around after enqueueing to child This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.143 by commit...

GSD-2022-1006354 vfio/type1: Unpin zero pages

vfio/type1: Unpin zero pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit 5d721bf222936f5cf3ee15ced53cc483ecef7e46. For mor...

GSD-2022-1006345 tee: fix compiler warning in tee_shm_register()

tee: fix compiler warning in teeshmregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

GSD-2022-1006032 selftests/bpf: fix a test for snprintf() overflow

selftests/bpf: fix a test for snprintf overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005963 gadgetfs: ep_io - wait until IRQ finishes

gadgetfs: epio - wait until IRQ finishes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005802 can: j1939: j1939_session_destroy(): fix memory leak of skbs

can: j1939: j1939sessiondestroy: fix memory leak of skbs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005744 net: Fix data-races around sysctl_devconf_inherit_init_net.

net: Fix data-races around sysctldevconfinheritinitnet. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005472 lib/list_debug.c: Detect uninitialized lists

lib/listdebug.c: Detect uninitialized lists This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005390 media: mceusb: Use new usb_control_msg_*() routines

media: mceusb: Use new usbcontrolmsg routines This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005374 vfs: Check the truncate maximum size in inode_newsize_ok()

vfs: Check the truncate maximum size in inodenewsizeok This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005365 LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

LoongArch: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005363 tty: vt: initialize unicode screen buffer

tty: vt: initialize unicode screen buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005362 drm/fb-helper: Fix out-of-bounds access

drm/fb-helper: Fix out-of-bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005309 tools/power turbostat: Fix file pointer leak

tools/power turbostat: Fix file pointer leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005061 NFS: Fix another fsync() issue after a server reboot

NFS: Fix another fsync issue after a server reboot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1005019 md: call __md_stop_writes in md_stop

md: call mdstopwrites in mdstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit f42a9819ba84bed2e609a4dff56af37063dcabdc, it w...