GSD-2022-1007938 riscv: process: fix kernel info leakage

riscv: process: fix kernel info leakage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007891 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()

iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007781 ice: Fix spurious interrupt during removal of trusted VF

ice: Fix spurious interrupt during removal of trusted VF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

GSD-2022-1007747 ata: libata-transport: fix error handling in ata_tport_add()

ata: libata-transport: fix error handling in atatportadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

Why Chaos Engineering is a Good Stress Test Strategy

Learn about chaos engineering, a method of resilience testing that intentionally introduces “chaos” into a system to discover vulnerabilities and weaknesses that can be exploited by attackers...

moodle.ead.unipar.br Cross Site Scripting vulnerability OBB-3075694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GSD-2022-1007668 sh: machvec: Use char[] for section boundaries

sh: machvec: Use char for section boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007648 iommu/omap: Fix buffer overflow in debugfs

iommu/omap: Fix buffer overflow in debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007582 thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash

thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commi...

GSD-2022-1007475 net: hns: fix possible memory leak in hnae_ae_register()

net: hns: fix possible memory leak in hnaeaeregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...

GSD-2022-1007401 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown

tty: serial: fsllpuart: disable dma rx/tx use flags in lpuartdmashutdown This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007266 md: Replace snprintf with scnprintf

md: Replace snprintf with scnprintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit 76694e9ce0b2238c0a5f3ba54f9361dd3770ec78...

GSD-2022-1007223 nbd: Fix hung when signal interrupts nbd_start_device_ioctl()

nbd: Fix hung when signal interrupts nbdstartdeviceioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007169 ipv6: ensure sane device mtu in tunnels

ipv6: ensure sane device mtu in tunnels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.153 by commit...

GSD-2022-1007057 clk: imx: scu: fix memleak on platform_device_add() fails

clk: imx: scu: fix memleak on platformdeviceadd fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1007050 crypto: marvell/octeontx - prevent integer overflows

crypto: marvell/octeontx - prevent integer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1007046 fs: dlm: fix race in lowcomms

fs: dlm: fix race in lowcomms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit 27d3e646dd83bafd7094890462eebfce3ac31e4a. For...

GSD-2022-1006898 slimbus: qcom-ngd: cleanup in probe error path

slimbus: qcom-ngd: cleanup in probe error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006804 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown

tty: serial: fsllpuart: disable dma rx/tx use flags in lpuartdmashutdown This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006749 drm/amd/display: Fix urgent latency override for DCN32/DCN321

drm/amd/display: Fix urgent latency override for DCN32/DCN321 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...