GSD-2022-1005189 locking/csd_lock: Change csdlock_debug from early_param to __setup

locking/csdlock: Change csdlockdebug from earlyparam to setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005188 btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size

btrfs: replace BTRFSMAXEXTENTSIZE with fsinfo-maxextentsize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005187 btrfs: ensure pages are unlocked on cow_file_range() failure

btrfs: ensure pages are unlocked on cowfilerange failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005186 mm/damon/reclaim: fix potential memory leak in damon_reclaim_init()

mm/damon/reclaim: fix potential memory leak in damonreclaiminit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005185 ext4: fix race when reusing xattr blocks

ext4: fix race when reusing xattr blocks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005184 firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005183 wifi: cfg80211: handle IBSS in channel switch

wifi: cfg80211: handle IBSS in channel switch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005182 wifi: nl80211: hold wdev mutex for tid config

wifi: nl80211: hold wdev mutex for tid config This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005181 block: don't allow the same type rq_qos add more than once

block: don't allow the same type rqqos add more than once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005180 dm raid: fix address sanitizer warning in raid_resume

dm raid: fix address sanitizer warning in raidresume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005179 dm raid: fix address sanitizer warning in raid_status

dm raid: fix address sanitizer warning in raidstatus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005178 ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h

ext4: add EXT4INODEHASXATTRSPACE macro in xattr.h This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005177 ext4: fix warning in ext4_iomap_begin as race between bmap and write

ext4: fix warning in ext4iomapbegin as race between bmap and write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005176 ext4: fix use-after-free in ext4_xattr_set_entry

ext4: fix use-after-free in ext4xattrsetentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005175 ext4: check if directory block is within i_size

ext4: check if directory block is within isize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005174 ext4: make sure ext4_append() always allocates new block

ext4: make sure ext4append always allocates new block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005173 tracing: Use a copy of the va_list for __assign_vstr()

tracing: Use a copy of the valist for assignvstr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005172 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005171 net_sched: cls_route: remove from list when handle is 0

netsched: clsroute: remove from list when handle is 0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005170 KVM: Unconditionally get a ref to /dev/kvm module when creating a VM

KVM: Unconditionally get a ref to /dev/kvm module when creating a VM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005169 tee: add overflow check in register_shm_helper()

tee: add overflow check in registershmhelper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.3 by commit...

GSD-2022-1005168 drm/amd/display: Check correct bounds for stream encoder instances for DCN303

drm/amd/display: Check correct bounds for stream encoder instances for DCN303 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005167 mmc: meson-gx: Fix an error handling path in meson_mmc_probe()

mmc: meson-gx: Fix an error handling path in mesonmmcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005166 tracing/eprobes: Do not allow eprobes to use $stack, or % for regs

tracing/eprobes: Do not allow eprobes to use $stack, or % for regs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005165 apparmor: fix reference count leak in aa_pivotroot()

apparmor: fix reference count leak in aapivotroot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005164 cifs: Fix memory leak on the deferred close

cifs: Fix memory leak on the deferred close This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005163 tracing/eprobes: Have event probes be consistent with kprobes and uprobes

tracing/eprobes: Have event probes be consistent with kprobes and uprobes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005162 apparmor: Fix memleak in aa_simple_write_to_buffer()

apparmor: Fix memleak in aasimplewritetobuffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005161 net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null

net: tap: NULL pointer derefence in devparseheaderprotocol when skb-dev is null This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commi...

GSD-2022-1005160 NFSv4/pnfs: Fix a use-after-free bug in open

NFSv4/pnfs: Fix a use-after-free bug in open This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005159 mptcp: move subflow cleanup in mptcp_destroy_common()

mptcp: move subflow cleanup in mptcpdestroycommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005158 mptcp: do not queue data on closed subflows

mptcp: do not queue data on closed subflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005157 BPF: Fix potential bad pointer dereference in bpf_sys_bpf()

BPF: Fix potential bad pointer dereference in bpfsysbpf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005156 ASoC: Intel: avs: Use lookup table to create modules

ASoC: Intel: avs: Use lookup table to create modules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005155 bpf: Don't reinit map value in prealloc_lru_pop

bpf: Don't reinit map value in prealloclrupop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005154 Revert "mm: kfence: apply kmemleak_ignore_phys on early allocated pool"

Revert "mm: kfence: apply kmemleakignorephys on early allocated pool" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.3 by commit...

GSD-2022-1005153 btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()

btrfs: raid56: don't trust any cached sector in raid56parityrecover This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.3 by commit...

GSD-2022-1005152 drm/ttm: Fix dummy res NULL ptr deref bug

drm/ttm: Fix dummy res NULL ptr deref bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005151 btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()

btrfs: unset reloc control if transaction commit fails in preparetorelocate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005150 can: j1939: j1939_session_destroy(): fix memory leak of skbs

can: j1939: j1939sessiondestroy: fix memory leak of skbs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005149 net: atlantic: fix aq_vec index out of range error

net: atlantic: fix aqvec index out of range error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005148 virtio_net: fix memory leak inside XPD_TX with mergeable

virtionet: fix memory leak inside XPDTX with mergeable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005147 virtio-blk: Avoid use-after-free on suspend/resume

virtio-blk: Avoid use-after-free on suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005146 devlink: Fix use-after-free after a failed reload

devlink: Fix use-after-free after a failed reload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005145 net: dsa: felix: suppress non-changes to the tagging protocol

net: dsa: felix: suppress non-changes to the tagging protocol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005144 net: bgmac: Fix a BUG triggered by wrong bytes_compl

net: bgmac: Fix a BUG triggered by wrong bytescompl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005143 pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map

pinctrl: nomadik: Fix refcount leak in nmkpinctrldtsubnodetomap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005142 Input: iqs7222 - protect volatile registers

Input: iqs7222 - protect volatile registers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005141 octeontx2-af: Fix mcam entry resource leak

octeontx2-af: Fix mcam entry resource leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005140 vsock: Fix memory leak in vsock_connect()

vsock: Fix memory leak in vsockconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit 8ff5db3c1b3d6797eda5cd326dcd31b9cd1c5f7...