GSD-2022-1005739 Revert "md-raid: destroy the bitmap after destroying the thread"

Revert "md-raid: destroy the bitmap after destroying the thread" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005738 xen/privcmd: fix error exit of privcmd_ioctl_dm_op()

xen/privcmd: fix error exit of privcmdioctldmop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005737 md: call __md_stop_writes in md_stop

md: call mdstopwrites in mdstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit a5a58fab556bfe618b4c9719eb85712d78c6cb10, it...

GSD-2022-1005736 arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76

arm64: Fix matchlist for erratum 1286807 on Arm Cortex-A76 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005735 scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq

scsi: storvsc: Remove WQMEMRECLAIM from storvscerrorwq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005734 bpf: Don't use tnum_range on array range checking for poke descriptors

bpf: Don't use tnumrange on array range checking for poke descriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005733 HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005732 loop: Check for overflow while configuring loop

loop: Check for overflow while configuring loop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005731 udmabuf: Set the DMA mask for the udmabuf device (v2)

udmabuf: Set the DMA mask for the udmabuf device v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005730 HID: hidraw: fix memory leak in hidraw_release()

HID: hidraw: fix memory leak in hidrawrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005729 media: pvrusb2: fix memory leak in pvr_probe

media: pvrusb2: fix memory leak in pvrprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005728 net: fix refcount bug in sk_psock_get (2)

net: fix refcount bug in skpsockget 2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005727 net/af_packet: check len when min_header_len equals to 0

net/afpacket: check len when minheaderlen equals to 0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005726 fbdev: fb_pm2fb: Avoid potential divide by zero error

fbdev: fbpm2fb: Avoid potential divide by zero error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005725 bpf: Don't redirect packets with invalid pkt_len

bpf: Don't redirect packets with invalid pktlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005724 ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead

ftrace: Fix NULL pointer dereference in isftracetrampoline when ftrace is dead This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by comm...

GSD-2022-1005723 bpf, cgroup: Fix kernel BUG in purge_effective_progs

bpf, cgroup: Fix kernel BUG in purgeeffectiveprogs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005722 ieee802154/adf7242: defer destroy_workqueue call

ieee802154/adf7242: defer destroyworkqueue call This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005721 drm/amd/display: clear optc underflow before turn off odm clock

drm/amd/display: clear optc underflow before turn off odm clock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005720 drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid

drm/amd/pm: add missing -finimicrocode interface for Sienna Cichlid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005719 net/sched: fix netdevice reference leaks in attach_default_qdiscs()

net/sched: fix netdevice reference leaks in attachdefaultqdiscs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005718 kcm: fix strp_init() order and cleanup

kcm: fix strpinit order and cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit 1b6666964ca1de93a7bf06e122bcf3616dbd33a9...

GSD-2022-1005717 tcp: annotate data-race around challenge_timestamp

tcp: annotate data-race around challengetimestamp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005716 staging: rtl8712: fix use after free bugs

staging: rtl8712: fix use after free bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005715 Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag

Input: iforce - wake up after clearing IFORCEXMITRUNNING flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005714 misc: fastrpc: fix memory corruption on open

misc: fastrpc: fix memory corruption on open This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005713 misc: fastrpc: fix memory corruption on probe

misc: fastrpc: fix memory corruption on probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005712 clk: bcm: rpi: Prevent out-of-bounds access

clk: bcm: rpi: Prevent out-of-bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005711 hwmon: (gpio-fan) Fix array out of bounds access

hwmon: gpio-fan Fix array out of bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005710 xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()

xen/grants: prevent integer overflow in gnttabdmaallocpages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005709 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005708 vt: Clear selection before changing the font

vt: Clear selection before changing the font This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005707 binder: fix UAF of ref->proc caused by race condition

binder: fix UAF of ref-proc caused by race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005706 media: mceusb: Use new usb_control_msg_*() routines

media: mceusb: Use new usbcontrolmsg routines This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005705 USB: core: Prevent nested device-reset calls

USB: core: Prevent nested device-reset calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005704 wifi: mac80211: Fix UAF in ieee80211_scan_rx()

wifi: mac80211: Fix UAF in ieee80211scanrx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005703 ALSA: seq: oss: Fix data-race for max_midi_devs access

ALSA: seq: oss: Fix data-race for maxmididevs access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005702 ALSA: seq: Fix data-race at module auto-loading

ALSA: seq: Fix data-race at module auto-loading This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1005701 crypto: arm64/poly1305 - fix a read out-of-bound

crypto: arm64/poly1305 - fix a read out-of-bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.60 by commit...

GSD-2022-1005700 arm64: set UXN on swapper page tables

arm64: set UXN on swapper page tables This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.60 by commit 775871d4be0d75e219cca937af843a4a1b60489...

GSD-2022-1005699 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005698 nfsd: eliminate the NFSD_FILE_BREAK_* flags

nfsd: eliminate the NFSDFILEBREAK flags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005697 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005696 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005695 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005694 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005693 lockd: detect and reject lock arguments that overflow

lockd: detect and reject lock arguments that overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005692 crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak

crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by...

GSD-2022-1005691 riscv:uprobe fix SR_SPIE set/clear handling

riscv:uprobe fix SRSPIE set/clear handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005690 RISC-V: Fixup get incorrect user mode PC for kernel mode regs

RISC-V: Fixup get incorrect user mode PC for kernel mode regs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...