GSD-2022-1005189 locking/csd_lock: Change csdlock_debug from early_param to __setup

locking/csdlock: Change csdlockdebug from earlyparam to setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005186 mm/damon/reclaim: fix potential memory leak in damon_reclaim_init()

mm/damon/reclaim: fix potential memory leak in damonreclaiminit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005182 wifi: nl80211: hold wdev mutex for tid config

wifi: nl80211: hold wdev mutex for tid config This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005181 block: don't allow the same type rq_qos add more than once

block: don't allow the same type rqqos add more than once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005177 ext4: fix warning in ext4_iomap_begin as race between bmap and write

ext4: fix warning in ext4iomapbegin as race between bmap and write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005173 tracing: Use a copy of the va_list for __assign_vstr()

tracing: Use a copy of the valist for assignvstr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005171 net_sched: cls_route: remove from list when handle is 0

netsched: clsroute: remove from list when handle is 0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005156 ASoC: Intel: avs: Use lookup table to create modules

ASoC: Intel: avs: Use lookup table to create modules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005121 powerpc/pci: Fix get_phb_number() locking

powerpc/pci: Fix getphbnumber locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit 90f195c01a2e8d8da6281791617e21109719c981...

GSD-2022-1005021 binder_alloc: add missing mmap_lock calls when using the VMA

binderalloc: add missing mmaplock calls when using the VMA This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1004997 bpf, cgroup: Fix kernel BUG in purge_effective_progs

bpf, cgroup: Fix kernel BUG in purgeeffectiveprogs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

PT-2022-33613 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.19.1 Description: A use-after-free bug was discovered in the smb2 tree disconnect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33543 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential information leak in the wil write file wmi function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.1...

PT-2022-33527 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a potential security vulnerability in the Linux Kernel, where the previous kernel's ima-kexec-buffer is not properly checked against memory bounds. The actual impact and...

PT-2022-33487 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential security problem in the jbd2 module of the Linux Kernel. It was introduced in version v2.6.19 and fixed in version v5.19.2. The actual impact and attack...

PT-2022-33464 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a refcount leak in setup msi msg address. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33614 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to an out of bound read for SMB2 TREE CONNECT. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33449 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns invalid memory access via the node onlineNUMA NO NODE function. It was introduced in version v2.6.33 and fixed in version v5.19.2. The actual impact and attack plausibilit...

PT-2022-33538 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the Bluetooth HCI work queue. When the queue is drained, only queue chained work is performed. This is an automated ID intended to aid in discovery of potential...

PT-2022-33485 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the mt6797 mt6351 dev probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...