GSD-2022-1002915 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type

dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002565 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type

dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-32127

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31266

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31436

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.13 Description A potential security issue exists due to the allocation of kthread struct for init and umh. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31566

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to a struct clk leak on probe errors in the phy: qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32246

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31178

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to a data type fix in the struct zynqmp dma chan. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31123

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the allocation of kthread struct for init and umh in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31810

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.12 through 5.10.120 Description The issue is related to a struct clk leak on probe errors in the qcom-qmp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`

Affected versions of this crate maintains references to memory that might have been freed already. If affects the following two tremor-script language constructs: A Merge where we assign the result back to the target expression and the expression to be merged needs to reference the event: let sta...

Arrow2 allows double free in `safe` code

The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...

PT-2025-26000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the apparmor module. The issue occurs when the copy from user function fails, causing a memory leak due to th...

_transfer#Executor.sol not checking all enum values

Lines of code Vulnerability details Impact Transaction can revert or have unexpected behaviour Poc In transferexecutor.sol you are checking Itemtype values Itemtype.NATIVE, Itemtype.ERC20 and Itemtype.ERC721 after then the last else clause assumes that the Itemtype is a ERC1155. else @audit assum...

GSD-2022-1002383 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"

ALSA: pcm: Test for "silence" field in struct "pcmformatdata" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1001946 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"

ALSA: pcm: Test for "silence" field in struct "pcmformatdata" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.112 by commit...

GSD-2022-1001852 drm/msm/dp: populate connector of struct dp_panel

drm/msm/dp: populate connector of struct dppanel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001540 drm/msm/dp: populate connector of struct dp_panel

drm/msm/dp: populate connector of struct dppanel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001347 RDMA/hfi1: Fix use-after-free bug for mm struct

RDMA/hfi1: Fix use-after-free bug for mm struct This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...