GSD-2022-1005389 USB: core: Prevent nested device-reset calls

USB: core: Prevent nested device-reset calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005388 wifi: mac80211: Fix UAF in ieee80211_scan_rx()

wifi: mac80211: Fix UAF in ieee80211scanrx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005387 ALSA: seq: oss: Fix data-race for max_midi_devs access

ALSA: seq: oss: Fix data-race for maxmididevs access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005386 ALSA: seq: Fix data-race at module auto-loading

ALSA: seq: Fix data-race at module auto-loading This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005385 crypto: arm64/poly1305 - fix a read out-of-bound

crypto: arm64/poly1305 - fix a read out-of-bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.1 by commit...

GSD-2022-1005384 arm64: set UXN on swapper page tables

arm64: set UXN on swapper page tables This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.1 by commit 9283e708a9b8529e7aafac9ab5c5c79a9fab8846...

GSD-2022-1005383 nfsd: eliminate the NFSD_FILE_BREAK_* flags

nfsd: eliminate the NFSDFILEBREAK flags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005382 ALSA: bcd2000: Fix a UAF bug on the error path of probing

ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005381 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005380 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005379 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005378 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005377 KVM: x86/xen: Stop Xen timer before changing IRQ

KVM: x86/xen: Stop Xen timer before changing IRQ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005376 KVM: x86/xen: Initialize Xen timer only once

KVM: x86/xen: Initialize Xen timer only once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005375 lockd: detect and reject lock arguments that overflow

lockd: detect and reject lock arguments that overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005374 vfs: Check the truncate maximum size in inode_newsize_ok()

vfs: Check the truncate maximum size in inodenewsizeok This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005373 crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak

crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by comm...

GSD-2022-1005372 riscv:uprobe fix SR_SPIE set/clear handling

riscv:uprobe fix SRSPIE set/clear handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005371 KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005370 RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context

RISC-V: kexec: Fixup use of smpprocessorid in preemptible context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005369 RISC-V: Fixup get incorrect user mode PC for kernel mode regs

RISC-V: Fixup get incorrect user mode PC for kernel mode regs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005368 RISC-V: Fixup schedule out issue in machine_crash_shutdown()

RISC-V: Fixup schedule out issue in machinecrashshutdown This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005367 RISC-V: Fix counter restart during overflow for RV32

RISC-V: Fix counter restart during overflow for RV32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005366 RISC-V: Update user page mapping only once during start

RISC-V: Update user page mapping only once during start This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005365 LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

LoongArch: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005364 rtc: rx8025: fix 12/24 hour mode detection on RX-8035

rtc: rx8025: fix 12/24 hour mode detection on RX-8035 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005363 tty: vt: initialize unicode screen buffer

tty: vt: initialize unicode screen buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005362 drm/fb-helper: Fix out-of-bounds access

drm/fb-helper: Fix out-of-bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005361 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005360 usbnet: Fix linkwatch use-after-free on disconnect

usbnet: Fix linkwatch use-after-free on disconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005359 bpf: Fix KASAN use-after-free Read in compute_effective_progs

bpf: Fix KASAN use-after-free Read in computeeffectiveprogs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005358 iio: light: isl29028: Fix the warning in isl29028_remove()

iio: light: isl29028: Fix the warning in isl29028remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005357 ksmbd: fix memory leak in smb2_handle_negotiate

ksmbd: fix memory leak in smb2handlenegotiate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005356 ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT

ksmbd: prevent out of bound read for SMB2TREECONNNECT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005355 ksmbd: fix use-after-free bug in smb2_tree_disconect

ksmbd: fix use-after-free bug in smb2treedisconect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005354 ksmbd: prevent out of bound read for SMB2_WRITE

ksmbd: prevent out of bound read for SMB2WRITE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005353 ksmbd: fix heap-based overflow in set_ntacl_dacl()

ksmbd: fix heap-based overflow in setntacldacl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005352 btrfs: reject log replay if there is unsupported RO compat flag

btrfs: reject log replay if there is unsupported RO compat flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005351 fuse: write inode in fuse_release()

fuse: write inode in fuserelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit 4bd9d5d20f344d015422969302d12653c903c271, it...

GSD-2022-1005350 md-raid: destroy the bitmap after destroying the thread

md-raid: destroy the bitmap after destroying the thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005349 scsi: sg: Allow waiting for commands to complete on removed device

scsi: sg: Allow waiting for commands to complete on removed device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005348 coresight: Clear the connection field properly

coresight: Clear the connection field properly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005347 powerpc/64e: Fix early TLB miss with KUAP

powerpc/64e: Fix early TLB miss with KUAP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005346 netfilter: nf_tables: fix null deref due to zeroed list head

netfilter: nftables: fix null deref due to zeroed list head This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005345 netfilter: nf_tables: do not allow SET_ID to refer to another table

netfilter: nftables: do not allow SETID to refer to another table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005344 netfilter: nf_tables: do not allow CHAIN_ID to refer to another table

netfilter: nftables: do not allow CHAINID to refer to another table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005343 md-raid10: fix KASAN warning

md-raid10: fix KASAN warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit 5f57843565131bb782388f9d993f9ee8f453dee1. For mor...

GSD-2022-1005342 MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

MIPS: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005341 arm64: kasan: do not instrument stacktrace.c

arm64: kasan: do not instrument stacktrace.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005340 arm64: stacktrace: use non-atomic __set_bit

arm64: stacktrace: use non-atomic setbit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...