GSD-2022-1004123 igmp: Fix data-races around sysctl_igmp_llm_reports.

igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004122 igmp: Fix data-races around sysctl_igmp_qrv.

igmp: Fix data-races around sysctligmpqrv. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004121 tcp: Fix data-races around sysctl_tcp_migrate_req.

tcp: Fix data-races around sysctltcpmigratereq. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004118 tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.

tcp: Fix data-races around sysctltcpfastopenblackholetimeout. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004111 ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

ipv4: Fix data-races around sysctlfibmultipathhashpolicy. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004110 ip: Fix data-races around sysctl_ip_prot_sock.

ip: Fix data-races around sysctlipprotsock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004108 ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.

ipv4: Fix data-races around sysctlfibmultipathhashfields. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004106 tcp: Fix data-races around sysctl_tcp_recovery.

tcp: Fix data-races around sysctltcprecovery. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004103 tcp: Fix data-races around sysctl_tcp_max_reordering.

tcp: Fix data-races around sysctltcpmaxreordering. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

Race Condition

VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H...

GSD-2022-1004023 zsmalloc: fix races between asynchronous zspage free and page migration

zsmalloc: fix races between asynchronous zspage free and page migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.282 by commit...

GSD-2022-1003930 zsmalloc: fix races between asynchronous zspage free and page migration

zsmalloc: fix races between asynchronous zspage free and page migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.246 by commit...

GSD-2022-1003659 zsmalloc: fix races between asynchronous zspage free and page migration

zsmalloc: fix races between asynchronous zspage free and page migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.120 by commit...

GSD-2022-1003451 zsmalloc: fix races between asynchronous zspage free and page migration

zsmalloc: fix races between asynchronous zspage free and page migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.45 by commit...

GSD-2022-1003184 zsmalloc: fix races between asynchronous zspage free and page migration

zsmalloc: fix races between asynchronous zspage free and page migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

GSD-2022-1002867 zsmalloc: fix races between asynchronous zspage free and page migration

zsmalloc: fix races between asynchronous zspage free and page migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

Delegate functions are missing `Send` bound

Affected versions of this crate did not require event handlers to have Send bound despite there being no guarantee of them being called on any particular thread, which can potentially lead to data races and undefined behavior. The flaw was corrected in commit afe3252 by adding Send bounds...

GHSA-X4MQ-M75F-MX8M Delegate functions are missing `Send` bound

Affected versions of this crate did not require event handlers to have Send bound despite there being no guarantee of them being called on any particular thread, which can potentially lead to data races and undefined behavior. The flaw was corrected in commit afe3252 by adding Send bounds...

GSD-2022-1002151 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls

ALSA: pcm: Fix races among concurrent hwparams and hwfree calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.109 by commit...

GSD-2022-1001634 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls

ALSA: pcm: Fix races among concurrent hwparams and hwfree calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.18 by commit...