GSD-2022-1006013 RDMA/hfi1: fix potential memory leak in setup_base_ctxt()

RDMA/hfi1: fix potential memory leak in setupbasectxt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005378 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005374 vfs: Check the truncate maximum size in inode_newsize_ok()

vfs: Check the truncate maximum size in inodenewsizeok This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005369 RISC-V: Fixup get incorrect user mode PC for kernel mode regs

RISC-V: Fixup get incorrect user mode PC for kernel mode regs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005317 ARM: dts: qcom: replace gcc PXO with pxo_board fixed clock

ARM: dts: qcom: replace gcc PXO with pxoboard fixed clock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005314 bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()

bus: hisilpc: fix missing platformdeviceput in hisilpcacpiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005293 torture: Adjust to again produce debugging information

torture: Adjust to again produce debugging information This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005267 mtd: partitions: Fix refcount leak in parse_redboot_of

mtd: partitions: Fix refcount leak in parseredbootof This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005249 intel_th: Fix a resource leak in an error handling path

intelth: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005230 RDMA/rxe: Fix error unwind in rxe_create_qp()

RDMA/rxe: Fix error unwind in rxecreateqp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005219 tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output()

tty: ngsm: fix wrong queuing behavior in gsmdlcidataoutput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005181 block: don't allow the same type rq_qos add more than once

block: don't allow the same type rqqos add more than once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005137 vdpa_sim_blk: set number of address spaces and virtqueue groups

vdpasimblk: set number of address spaces and virtqueue groups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005055 ice: xsk: prohibit usage of non-balanced queue id

ice: xsk: prohibit usage of non-balanced queue id This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1004982 kcm: fix strp_init() order and cleanup

kcm: fix strpinit order and cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit f865976baa85915c7672f351b74d5974b93215f6, ...

GSD-2022-1004973 firmware_loader: Fix memory leak in firmware upload

firmwareloader: Fix memory leak in firmware upload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

GSD-2022-1004963 tty: n_gsm: avoid call of sleeping functions from atomic context

tty: ngsm: avoid call of sleeping functions from atomic context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

GSD-2022-1004959 media: mceusb: Use new usb_control_msg_*() routines

media: mceusb: Use new usbcontrolmsg routines This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

Palo Alto Networks Authenticated Remote Code Execution

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS versions use exploit/linux/http/panosopcmdexec msf exploitpanosopcmdexec show targets ...targets... ms...

A Door Isn’t a Door When It’s Ajar - Part 3

A Door Isn’t a Door When It’s Ajar - Part III By Trellix · August 25, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Installing OnGuard by Third Party Vendor Exploitation and Hacking the Planet! Putting it all Together Building the Final Demo System The Demo Lessons and...