GSD-2023-1000892 drm/panfrost: Fix GEM handle creation ref-counting

drm/panfrost: Fix GEM handle creation ref-counting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000427 drm/panfrost: Fix GEM handle creation ref-counting

drm/panfrost: Fix GEM handle creation ref-counting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2022-1007751 drm/scheduler: fix fence ref counting

drm/scheduler: fix fence ref counting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit e5f4b38362df93594cb426b04979d8834122f159...

UBUNTU-CVE-2022-43039

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfisommetarestoreitemsref at /isomedia/meta.c...

GSD-2022-1006538 drm/i915/gem: Really move i915_gem_context.link under ref protection

drm/i915/gem: Really move i915gemcontext.link under ref protection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006492 drm/i915/gem: Really move i915_gem_context.link under ref protection

drm/i915/gem: Really move i915gemcontext.link under ref protection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

CVE-2022-32082

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...

Malicious code in exporting-ref-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c85877779d24911c119e2efc1fa59b688c166a71c97b0537c4dbc6af25ba7a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2923 Malicious code in exporting-ref-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c85877779d24911c119e2efc1fa59b688c166a71c97b0537c4dbc6af25ba7a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ref-client-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf19b642e7b2ecb13e2b7b0b395605636b74380541b56309a5693b48bed81428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5729 Malicious code in ref-client-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf19b642e7b2ecb13e2b7b0b395605636b74380541b56309a5693b48bed81428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

`array!` macro is unsound in presence of traits that implement methods it calls internally

Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...

GHSA-83GG-PWXF-JR89 `array!` macro is unsound in presence of traits that implement methods it calls internally

Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...

GSD-2022-1001803 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001771 scsi: qla2xxx: Implement ref count for SRB

scsi: qla2xxx: Implement ref count for SRB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001487 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001169 net/sched: act_ct: fix ref leak when switching zones

net/sched: actct: fix ref leak when switching zones This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

CVE-2022-0410

The WP Visitor Statistics Real Time Traffic WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection...

RUSTSEC-2022-0096 Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-88xq-w8cq-xfg7. For more information see the GitHub-hosted security advisory...

GHSA-88XQ-W8CQ-XFG7 Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals

Impact There exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an externref global will result in an invalid drop of a VMExternRef via an uninitialized pointer. As instance slots may be reused between...