8267 matches found
GSD-2021-1002829 Input: elantech - fix stack out of bound access in elantech_change_report_id()
Input: elantech - fix stack out of bound access in elantechchangereportid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...
GSD-2021-1002809 mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
mm/hwpoison: clear MFCOUNTINCREASED before retrying getanypage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.89 by commit...
GSD-2021-1002771 xen/blkfront: harden blkfront against event channel storms
xen/blkfront: harden blkfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
GSD-2021-1002767 io-wq: check for wq exit after adding new worker task_work
io-wq: check for wq exit after adding new worker taskwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
GSD-2021-1002761 io-wq: drop wqe lock before creating new worker
io-wq: drop wqe lock before creating new worker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
GSD-2021-1002757 btrfs: fix memory leak in __add_inode_ref()
btrfs: fix memory leak in addinoderef This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit 493ff661d434d6bdf02e3a21adae04d7a0b4265...
GSD-2021-1002736 tee: amdtee: fix an IS_ERR() vs NULL bug
tee: amdtee: fix an ISERR vs NULL bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit 832f3655c6138c23576ed268e31cc76e0f05f2b...
GSD-2021-1002733 vduse: check that offset is within bounds in get_config()
vduse: check that offset is within bounds in getconfig This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
GSD-2021-1002729 bpf: Fix kernel address leakage in atomic fetch
bpf: Fix kernel address leakage in atomic fetch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
GSD-2021-1002715 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
GSD-2021-1002693 sch_cake: do not call cake_destroy() from cake_init()
schcake: do not call cakedestroy from cakeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
GSD-2021-1002690 bpf: Fix signed bounds propagation after mov32
bpf: Fix signed bounds propagation after mov32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
GSD-2021-1002670 mac80211: track only QoS data frames for admission control
mac80211: track only QoS data frames for admission control This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...
GSD-2021-1002660 ovl: fix warning in ovl_create_real()
ovl: fix warning in ovlcreatereal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit 445d2dc63e5871d218f21b8f62ab29ac72f2e6b8...
GSD-2021-1002656 sit: do not call ipip6_dev_free() from sit_init_net()
sit: do not call ipip6devfree from sitinitnet This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...
GSD-2021-1002624 dm btree remove: fix use after free in rebalance_children()
dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.294 by commit...
GSD-2021-1002610 nfc: fix segfault in nfc_genl_dump_devices_done
nfc: fix segfault in nfcgenldumpdevicesdone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.296 by commit...
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
