GSD-2022-1004202 dmaengine: qcom: bam_dma: fix runtime PM underflow

dmaengine: qcom: bamdma: fix runtime PM underflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.11 by commit...

GSD-2022-1004199 tracing/histograms: Fix memory leak problem

tracing/histograms: Fix memory leak problem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004197 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004196 wifi: mac80211: fix queue selection for mesh/OCB interfaces

wifi: mac80211: fix queue selection for mesh/OCB interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004195 drm/panfrost: Fix shrinker list corruption by madvise IOCTL

drm/panfrost: Fix shrinker list corruption by madvise IOCTL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004194 btrfs: zoned: fix a leaked bioc in read_zone_info

btrfs: zoned: fix a leaked bioc in readzoneinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004193 Revert "evm: Fix memleak in init_desc"

Revert "evm: Fix memleak in initdesc" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit a92d44b412e75dd66543843165e46637457f22c...

GSD-2022-1004192 ARM: 9210/1: Mark the FDT_FIXED sections as shareable

ARM: 9210/1: Mark the FDTFIXED sections as shareable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004191 drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()

drm/i915: fix a possible refcount leak in inteldpaddmstconnector This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004190 ima: Fix a potential integer overflow in ima_appraise_measurement

ima: Fix a potential integer overflow in imaappraisemeasurement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004189 net: stmmac: dwc-qos: Disable split header for Tegra194

net: stmmac: dwc-qos: Disable split header for Tegra194 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004188 sysctl: Fix data races in proc_douintvec().

sysctl: Fix data races in procdouintvec. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004187 sysctl: Fix data races in proc_douintvec_minmax().

sysctl: Fix data races in procdouintvecminmax. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004186 cipso: Fix data-races around sysctl.

cipso: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit 59e26906b89cc35bb54476498772b45cbc32323f...

GSD-2022-1004185 icmp: Fix data-races around sysctl.

icmp: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit 798c2cf57c63ab39c8aac24d6a3d50f4fa5eeb06,...

GSD-2022-1004184 ipv4: Fix a data-race around sysctl_fib_sync_mem.

ipv4: Fix a data-race around sysctlfibsyncmem. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004182 drm/i915/selftests: fix subtraction overflow bug

drm/i915/selftests: fix subtraction overflow bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004181 sysctl: Fix data-races in proc_dou8vec_minmax().

sysctl: Fix data-races in procdou8vecminmax. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004180 icmp: Fix data-races around sysctl_icmp_echo_enable_probe.

icmp: Fix data-races around sysctlicmpechoenableprobe. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004179 icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.

icmp: Fix a data-race around sysctlicmperrorsuseinboundifaddr. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004178 raw: Fix a data-race around sysctl_raw_l3mdev_accept.

raw: Fix a data-race around sysctlrawl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004177 tcp: Fix a data-race around sysctl_tcp_ecn_fallback.

tcp: Fix a data-race around sysctltcpecnfallback. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004176 nexthop: Fix data-races around nexthop_compat_mode.

nexthop: Fix data-races around nexthopcompatmode. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004174 ima: Fix potential memory leak in ima_init_crypto()

ima: Fix potential memory leak in imainitcrypto This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004173 sfc: fix use after free when disabling sriov

sfc: fix use after free when disabling sriov This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004172 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004171 sfc: fix kernel panic when creating VF

sfc: fix kernel panic when creating VF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004170 seg6: bpf: fix skb checksum in bpf_push_seg6_encap()

seg6: bpf: fix skb checksum in bpfpushseg6encap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004169 net: atlantic: remove deep parameter on suspend/resume functions

net: atlantic: remove deep parameter on suspend/resume functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004167 KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()

KVM: x86: Fully initialize 'struct kvmlapicirq' in kvmpvkickcpuop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004166 powerpc/xive/spapr: correct bitmap allocation size

powerpc/xive/spapr: correct bitmap allocation size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004165 netfilter: nf_tables: avoid skb access on nf_stolen

netfilter: nftables: avoid skb access on nfstolen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004164 cpufreq: pmac32-cpufreq: Fix refcount leak bug

cpufreq: pmac32-cpufreq: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004163 net: tipc: fix possible refcount leak in tipc_sk_create()

net: tipc: fix possible refcount leak in tipcskcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004161 pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()

pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004160 ASoC: Intel: sof_sdw: handle errors on card registration

ASoC: Intel: sofsdw: handle errors on card registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004159 vt: fix memory overlapping when deleting chars in the buffer

vt: fix memory overlapping when deleting chars in the buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004158 ASoC: rt7*-sdw: harden jack_detect_handler

ASoC: rt7-sdw: harden jackdetecthandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004157 ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error

ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004155 serial: 8250: Fix PM usage_count for console handover

serial: 8250: Fix PM usagecount for console handover This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004154 power: supply: core: Fix boundary conditions in interpolation

power: supply: core: Fix boundary conditions in interpolation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004153 drm/aperture: Run fbdev removal before internal helpers

drm/aperture: Run fbdev removal before internal helpers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1004151 x86/bugs: Report Intel retbleed vulnerability

x86/bugs: Report Intel retbleed vulnerability This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

GSD-2022-1004150 x86/speculation: Fill RSB on vmexit for IBRS

x86/speculation: Fill RSB on vmexit for IBRS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

GSD-2022-1004149 x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported

x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

GSD-2022-1004146 x86/speculation: Disable RRSBA behavior

x86/speculation: Disable RRSBA behavior This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

GSD-2022-1004145 lockdown: Fix kexec lockdown bypass with ima policy

lockdown: Fix kexec lockdown bypass with ima policy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004144 x86/kvm: fix FASTOP_SIZE when return thunks are enabled

x86/kvm: fix FASTOPSIZE when return thunks are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.14 by commit...

GSD-2022-1004143 net: usb: ax88179_178a needs FLAG_SEND_ZLP

net: usb: ax88179178a needs FLAGSENDZLP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

GSD-2022-1004142 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe

power/reset: arm-versatile: Fix refcount leak in versatilerebootprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...