GSD-2022-1005598 dmaengine: sf-pdma: Add multithread support for a DMA channel

dmaengine: sf-pdma: Add multithread support for a DMA channel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005580 ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe

ASoC: croseccodec: Fix refcount leak in croseccodecplatformprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005570 rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge

rpmsg: qcomsmd: Fix refcount leak in qcomsmdparseedge This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005557 video: fbdev: s3fb: Check the size of screen before memset_io()

video: fbdev: s3fb: Check the size of screen before memsetio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005535 KVM: Unconditionally get a ref to /dev/kvm module when creating a VM

KVM: Unconditionally get a ref to /dev/kvm module when creating a VM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005532 tracing/eprobes: Do not allow eprobes to use $stack, or % for regs

tracing/eprobes: Do not allow eprobes to use $stack, or % for regs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005484 scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE

scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005481 cxl: Fix a memory leak in an error handling path

cxl: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005477 dmaengine: dw-axi-dmac: ignore interrupt if no descriptor

dmaengine: dw-axi-dmac: ignore interrupt if no descriptor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005464 smb3: check xattr value length earlier

smb3: check xattr value length earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

GSD-2022-1005447 net: Fix data-races around sysctl_max_skb_frags.

net: Fix data-races around sysctlmaxskbfrags. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...

GSD-2022-1005430 md: call __md_stop_writes in md_stop

md: call mdstopwrites in mdstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit 661c01b2181d9413c799127f13143583b69f20fd, it...

GSD-2022-1005420 HID: hidraw: fix memory leak in hidraw_release()

HID: hidraw: fix memory leak in hidrawrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...

GSD-2022-1005417 net: fix refcount bug in sk_psock_get (2)

net: fix refcount bug in skpsockget 2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit a5d1cb908131e939bd8b63b8e5e23365bbc2eda...

GSD-2022-1005406 net/sched: fix netdevice reference leaks in attach_default_qdiscs()

net/sched: fix netdevice reference leaks in attachdefaultqdiscs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005394 tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()

tty: ngsm: add sanity check for gsm-receive in gsmreceivebuf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005390 media: mceusb: Use new usb_control_msg_*() routines

media: mceusb: Use new usbcontrolmsg routines This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005378 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005363 tty: vt: initialize unicode screen buffer

tty: vt: initialize unicode screen buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005349 scsi: sg: Allow waiting for commands to complete on removed device

scsi: sg: Allow waiting for commands to complete on removed device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005338 arm64: Do not forget syscall when starting a new thread.

arm64: Do not forget syscall when starting a new thread. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005303 drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init

drm/meson: encoderhdmi: Fix refcount leak in mesonencoderhdmiinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005292 drm/mcde: Fix refcount leak in mcde_dsi_bind

drm/mcde: Fix refcount leak in mcdedsibind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005286 kunit: executor: Fix a memory leak on failure in kunit_filter_tests

kunit: executor: Fix a memory leak on failure in kunitfiltertests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005284 bpf, x86: fix freeing of not-finalized bpf_prog_pack

bpf, x86: fix freeing of not-finalized bpfprogpack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005269 of: check previous kernel's ima-kexec-buffer against memory bounds

of: check previous kernel's ima-kexec-buffer against memory bounds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005268 wireguard: allowedips: don't corrupt stack when detecting overflow

wireguard: allowedips: don't corrupt stack when detecting overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005267 mtd: partitions: Fix refcount leak in parse_redboot_of

mtd: partitions: Fix refcount leak in parseredbootof This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005261 usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe

usb: ohci-nxp: Fix refcount leak in ohcihcdnxpprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005215 net: 9p: fix refcount leak in p9_read_work() error handling

net: 9p: fix refcount leak in p9readwork error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005211 watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource

watchdog: sp5100tco: Fix a memory leak of EFCH MMIO resource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005198 video: fbdev: arkfb: Check the size of screen before memset_io()

video: fbdev: arkfb: Check the size of screen before memsetio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005189 locking/csd_lock: Change csdlock_debug from early_param to __setup

locking/csdlock: Change csdlockdebug from earlyparam to setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005182 wifi: nl80211: hold wdev mutex for tid config

wifi: nl80211: hold wdev mutex for tid config This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005168 drm/amd/display: Check correct bounds for stream encoder instances for DCN303

drm/amd/display: Check correct bounds for stream encoder instances for DCN303 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005159 mptcp: move subflow cleanup in mptcp_destroy_common()

mptcp: move subflow cleanup in mptcpdestroycommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005139 ceph: don't leak snap_rwsem in handle_cap_grant

ceph: don't leak snaprwsem in handlecapgrant This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005138 tools/testing/cxl: Fix cxl_hdm_decode_init() calling convention

tools/testing/cxl: Fix cxlhdmdecodeinit calling convention This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005121 powerpc/pci: Fix get_phb_number() locking

powerpc/pci: Fix getphbnumber locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit 90f195c01a2e8d8da6281791617e21109719c981...

GSD-2022-1005109 drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex

drm/amdgpu: Fix use-after-free on amdgpubolist mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005050 netfilter: flowtable: fix stuck flows on cleanup due to pending work

netfilter: flowtable: fix stuck flows on cleanup due to pending work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1005027 mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte

mm/hugetlb: avoid corrupting page-mapping in hugetlbmcopyatomicpte This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1005023 riscv: traps: add missing prototype

riscv: traps: add missing prototype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit b8e86aef0a601bc9731c38d4a5b3f0ee5aa99b2d, ...

GSD-2022-1005022 Revert "md-raid: destroy the bitmap after destroying the thread"

Revert "md-raid: destroy the bitmap after destroying the thread" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1005004 ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead

ftrace: Fix NULL pointer dereference in isftracetrampoline when ftrace is dead This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.7 by commit...

GSD-2022-1004999 xsk: Fix corrupted packets for XDP_SHARED_UMEM

xsk: Fix corrupted packets for XDPSHAREDUMEM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

GSD-2022-1004990 arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fwlevel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.7 by...

GSD-2022-1004982 kcm: fix strp_init() order and cleanup

kcm: fix strpinit order and cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit f865976baa85915c7672f351b74d5974b93215f6, ...

GSD-2022-1004972 vt: Clear selection before changing the font

vt: Clear selection before changing the font This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

GSD-2022-1004966 USB: gadget: Fix obscure lockdep violation for udc_mutex

USB: gadget: Fix obscure lockdep violation for udcmutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...