GSD-2022-1005149 net: atlantic: fix aq_vec index out of range error

net: atlantic: fix aqvec index out of range error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005147 virtio-blk: Avoid use-after-free on suspend/resume

virtio-blk: Avoid use-after-free on suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005136 fscache: don't leak cookie access refs if invalidation is in progress or failed

fscache: don't leak cookie access refs if invalidation is in progress or failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commi...

GSD-2022-1005135 kbuild: dummy-tools: avoid tmpdir leak in dummy gcc

kbuild: dummy-tools: avoid tmpdir leak in dummy gcc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005126 ASoC: DPCM: Don't pick up BE without substream

ASoC: DPCM: Don't pick up BE without substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005123 net: dsa: mv88e6060: prevent crash on an unused port

net: dsa: mv88e6060: prevent crash on an unused port This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005121 powerpc/pci: Fix get_phb_number() locking

powerpc/pci: Fix getphbnumber locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit 90f195c01a2e8d8da6281791617e21109719c981...

GSD-2022-1005107 irqchip/tegra: Fix overflow implicit truncation warnings

irqchip/tegra: Fix overflow implicit truncation warnings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005105 usb: host: ohci-ppc-of: Fix refcount leak bug

usb: host: ohci-ppc-of: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005099 gadgetfs: ep_io - wait until IRQ finishes

gadgetfs: epio - wait until IRQ finishes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005096 habanalabs/gaudi: fix shift out of bounds

habanalabs/gaudi: fix shift out of bounds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005092 dmaengine: dw-axi-dmac: do not print NULL LLI during error

dmaengine: dw-axi-dmac: do not print NULL LLI during error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005075 powerpc/watchdog: introduce a NMI watchdog's factor

powerpc/watchdog: introduce a NMI watchdog's factor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005073 Revert "ALSA: hda: Fix page fault in snd_hda_codec_shutdown()"

Revert "ALSA: hda: Fix page fault in sndhdacodecshutdown" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005072 ALSA: timer: Use deferred fasync helper

ALSA: timer: Use deferred fasync helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005071 ALSA: pcm: Use deferred fasync helper

ALSA: pcm: Use deferred fasync helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit fe87784ab3a81f5b98e19182388f19206289e05d...

PT-2022-33397 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a potential security vulnerability in the Linux Kernel, where a semaphore is not properly released. This problem was introduced in version v5.8 and is fixed in versio...

PT-2022-33372 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A missing clk disable unprepare call in intel eth pci remove may potentially lead to a security issue. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-33422 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A memory leak issue was discovered, which may potentially lead to security vulnerabilities. The issue was introduced in version v5.14 and is fixed in Linux Kernel version v5.19.4...

PT-2022-33374 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a module reference count leak in the rtnetlink rcv msg function. This problem was introduced in Linux Kernel version v5.19 and is fixed in version v5.19.4. The actual...