GSD-2023-1001047 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()

remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5wcssinitmmio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000987 usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init

usb: dwc3: qcom: Fix memory leak in dwc3qcominterconnectinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000949 phy: qcom-qmp-combo: fix out-of-bounds clock access

phy: qcom-qmp-combo: fix out-of-bounds clock access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000843 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()

cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000758 ASoC: qcom: Add checks for devm_kcalloc

ASoC: qcom: Add checks for devmkcalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 7830e2289eb4b74970b6cd1b6cc68dcd021c228...

GSD-2023-1000646 led: qcom-lpg: Fix sleeping in atomic

led: qcom-lpg: Fix sleeping in atomic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 9deba7b51d5ee7a2d93fabb69f9b8189241f90e3...

GSD-2023-1000628 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()

remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5wcssinitmmio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000552 usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init

usb: dwc3: qcom: Fix memory leak in dwc3qcominterconnectinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000498 arm64: dts: qcom: sc8280xp: fix UFS DMA coherency

arm64: dts: qcom: sc8280xp: fix UFS DMA coherency This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000495 phy: qcom-qmp-combo: fix out-of-bounds clock access

phy: qcom-qmp-combo: fix out-of-bounds clock access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000428 phy: qcom-qmp-combo: fix broken power on

phy: qcom-qmp-combo: fix broken power on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000104 clk: qcom: gdsc: Remove direct runtime PM calls

clk: qcom: gdsc: Remove direct runtime PM calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-33505 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a fix for broken power on in the phy: qcom-qmp-combo component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34445 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A memory leak issue was discovered in the qcom add sysmon subdev function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33723

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.19 through v6.0.15 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the qcom-lpg LED driver. The actual impact and attack plausibility have not yet been proven...

PT-2023-34293

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A memory leak issue was discovered in the qcom cpufreq hw read lut function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2023-34125

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A memory leak issue was discovered in the qcom add sysmon subdev function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2023-34392

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A memory leak issue was discovered in the dwc3 qcom interconnect init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-34590

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A memory leak issue exists in the qcom cpufreq hw read lut function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-33920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A memory leak issue was discovered in the qcom cpufreq hw read lut function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.9 and...