GSD-2022-1005532 tracing/eprobes: Do not allow eprobes to use $stack, or % for regs

tracing/eprobes: Do not allow eprobes to use $stack, or % for regs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005516 octeontx2-af: Fix mcam entry resource leak

octeontx2-af: Fix mcam entry resource leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005513 ceph: don't leak snap_rwsem in handle_cap_grant

ceph: don't leak snaprwsem in handlecapgrant This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005510 fs/ntfs3: Fix missing i_op in ntfs_read_mft

fs/ntfs3: Fix missing iop in ntfsreadmft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005502 powerpc/pci: Fix get_phb_number() locking

powerpc/pci: Fix getphbnumber locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit 1d9e75c3d8cdf7c96a94cb77450d4ee070279e6...

GSD-2022-1005492 irqchip/tegra: Fix overflow implicit truncation warnings

irqchip/tegra: Fix overflow implicit truncation warnings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005482 habanalabs/gaudi: fix shift out of bounds

habanalabs/gaudi: fix shift out of bounds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

PT-2022-33743 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the coresight: etm4x component, where an automated ID was created to aid in the discovery of potential security vulnerabilities. The actual impact and attack...

PT-2022-33764 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue concerns error handling during reset. It was introduced in version v4.14 and fixed in Linux Kernel version v5.15.63. The actual impact and attack plausibility have not yet been...

PT-2022-33751 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a use-after-free condition. It has been fixed in Linux Kernel version v5.15.63. Recommendations: For versions prior to v5.15.63, update to version v5.15.63 or later ...

PT-2022-33778 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A memory leak issue exists inside XPD TX with mergeable. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.63,...

GSD-2022-1005464 smb3: check xattr value length earlier

smb3: check xattr value length earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005461 f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()

f2fs: fix to avoid use f2fsbugon in f2fsnewnodepage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005459 powerpc/64: Init jump labels before parse_early_param()

powerpc/64: Init jump labels before parseearlyparam This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

PT-2022-33719 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the use of f2fs bug on in f2fs new node page. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...