GSD-2023-1001972 misc: fastrpc: Fix use-after-free and race in fastrpc_map_find

misc: fastrpc: Fix use-after-free and race in fastrpcmapfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001971 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001970 misc: fastrpc: Fix use-after-free race condition for maps

misc: fastrpc: Fix use-after-free race condition for maps This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001969 xhci: Fix null pointer dereference when host dies

xhci: Fix null pointer dereference when host dies This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001968 mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()

mm/hugetlb: fix PTE marker handling in hugetlbchangeprotection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001967 btrfs: qgroup: do not warn on record without old_roots populated

btrfs: qgroup: do not warn on record without oldroots populated This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001966 btrfs: fix race between quota rescan and disable leading to NULL pointer deref

btrfs: fix race between quota rescan and disable leading to NULL pointer deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001965 btrfs: do not abort transaction on failure to write log tree when syncing log

btrfs: do not abort transaction on failure to write log tree when syncing log This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001964 tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer

tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001963 tty: fix possible null-ptr-defer in spk_ttyio_release

tty: fix possible null-ptr-defer in spkttyiorelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001962 io_uring/poll: don't reissue in case of poll race on multishot request

iouring/poll: don't reissue in case of poll race on multishot request This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001961 USB: gadgetfs: Fix race between mounting and unmounting

USB: gadgetfs: Fix race between mounting and unmounting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001960 dmaengine: idxd: Let probe fail when workqueue cannot be enabled

dmaengine: idxd: Let probe fail when workqueue cannot be enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001959 dmaengine: idxd: Prevent use after free on completion memory

dmaengine: idxd: Prevent use after free on completion memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001958 gsmi: fix null-deref in gsmi_get_variable

gsmi: fix null-deref in gsmigetvariable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit 6646d769fdb0ce4318ef9afd127f8526d1ca839...

GSD-2023-1001957 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001956 drm/amd/display: Calculate output_color_space after pixel encoding adjustment

drm/amd/display: Calculate outputcolorspace after pixel encoding adjustment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001955 VMCI: Use threaded irqs instead of tasklets

VMCI: Use threaded irqs instead of tasklets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001954 octeontx2-pf: Avoid use of GFP_KERNEL in atomic context

octeontx2-pf: Avoid use of GFPKERNEL in atomic context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001953 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt

octeontx2-pf: Fix the use of GFPKERNEL in atomic context on rt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001952 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"

Revert "wifi: mac80211: fix memory leak in ieee80211ifadd" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1001951 HID: intel_ish-hid: Add check for ishtp_dma_tx_map

HID: intelish-hid: Add check for ishtpdmatxmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001950 dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG

dmaengine: ti: k3-udma: Do conditional decrement of UDMACHANRTPEERBCNTREG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001949 reset: uniphier-glue: Fix possible null-ptr-deref

reset: uniphier-glue: Fix possible null-ptr-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001948 EDAC/highbank: Fix memory leak in highbank_mc_probe()

EDAC/highbank: Fix memory leak in highbankmcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001947 RDMA/rxe: Prevent faulty rkey generation

RDMA/rxe: Prevent faulty rkey generation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001946 erofs: fix kvcalloc() misuse with __GFP_NOFAIL

erofs: fix kvcalloc misuse with GFPNOFAIL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001945 RDMA/core: Fix ib block iterator counter overflow

RDMA/core: Fix ib block iterator counter overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001944 IB/hfi1: Immediately remove invalid memory from hardware

IB/hfi1: Immediately remove invalid memory from hardware This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001943 NFSD: fix use-after-free in nfsd4_ssc_setup_dul()

NFSD: fix use-after-free in nfsd4sscsetupdul This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001942 phy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()

phy: usb: sunplus: Fix potential null-ptr-deref in spusbphyprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001941 bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation

bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001940 net: nfc: Fix use-after-free in local_cleanup()

net: nfc: Fix use-after-free in localcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001939 net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()

net: enetc: avoid deadlock in enetctxonesteptstamp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001938 wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid

wifi: rndiswlan: Prevent buffer overflow in rndisqueryoid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001937 net/sched: sch_taprio: fix possible use-after-free

net/sched: schtaprio: fix possible use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001936 l2tp: close all race conditions in l2tp_tunnel_register()

l2tp: close all race conditions in l2tptunnelregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001935 net: mdio: validate parameter addr in mdiobus_get_phy()

net: mdio: validate parameter addr in mdiobusgetphy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001934 usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait

usb: gadget: ffs: Prevent race during ffsep0queuewait This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001933 Bluetooth: Fix a buffer overflow in mgmt_mesh_add()

Bluetooth: Fix a buffer overflow in mgmtmeshadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001932 Bluetooth: hci_conn: Fix memory leaks

Bluetooth: hciconn: Fix memory leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit f51a825b9f730a782aa768454906b4468e67b667, ...

GSD-2023-1001931 Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()

Bluetooth: hcisync: fix memory leak in hciupdateadvdata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001930 net/mlx5e: Avoid false lock dependency warning on tc_ht even more

net/mlx5e: Avoid false lock dependency warning on tcht even more This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001929 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change

Bluetooth: Fix possible deadlock in rfcommskstatechange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001928 net: mlx5: eliminate anonymous module_init & module_exit

net: mlx5: eliminate anonymous moduleinit & moduleexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001927 dmaengine: Fix double increment of client_count in dma_chan_get()

dmaengine: Fix double increment of clientcount in dmachanget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001926 l2tp: prevent lockdep issue in l2tp_tunnel_register()

l2tp: prevent lockdep issue in l2tptunnelregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001925 HID: betop: check shape of output reports

HID: betop: check shape of output reports This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001924 dmaengine: tegra: Fix memory leak in terminate_all()

dmaengine: tegra: Fix memory leak in terminateall This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

GSD-2023-1001923 ptdma: pt_core_execute_cmd() should use spinlock

ptdma: ptcoreexecutecmd should use spinlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...