GSD-2021-1002753 sit: do not call ipip6_dev_free() from sit_init_net()

sit: do not call ipip6devfree from sitinitnet This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002751 net/packet: rx_owner_map depends on pg_vec

net/packet: rxownermap depends on pgvec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002750 igbvf: fix double free in `igbvf_probe`

igbvf: fix double free in igbvfprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit 944b8be08131f5faf2cd2440aa1c24a39a163a54...

GSD-2021-1002749 mptcp: fix deadlock in __mptcp_push_pending()

mptcp: fix deadlock in mptcppushpending This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002746 mptcp: clear 'kern' flag from fallback sockets

mptcp: clear 'kern' flag from fallback sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002745 mptcp: never allow the PM to close a listener subflow

mptcp: never allow the PM to close a listener subflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002744 drm/amd/pm: fix a potential gpu_metrics_table memory leak

drm/amd/pm: fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002743 rds: memory leak in __rds_conn_create()

rds: memory leak in rdsconncreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit 68014890e4382ff9192e1357be39b7d0455665fa, i...

GSD-2021-1002742 net/sched: sch_ets: don't remove idle classes from the round-robin list

net/sched: schets: don't remove idle classes from the round-robin list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002741 net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

net: hns3: fix use-after-free bug in hclgevfsendmbxmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002737 dm btree remove: fix use after free in rebalance_children()

dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002734 audit: improve robustness of the audit queue handling

audit: improve robustness of the audit queue handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002733 vduse: check that offset is within bounds in get_config()

vduse: check that offset is within bounds in getconfig This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002732 vduse: fix memory corruption in vduse_dev_ioctl()

vduse: fix memory corruption in vdusedevioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002731 net: netlink: af_netlink: Prevent empty skb by adding a check on len.

net: netlink: afnetlink: Prevent empty skb by adding a check on len. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

GSD-2021-1002730 bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg

bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002727 firmware: arm_scpi: Fix string overflow in SCPI genpd driver

firmware: armscpi: Fix string overflow in SCPI genpd driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002726 drm/msm: Fix null ptr access msm_ioctl_gem_submit()

drm/msm: Fix null ptr access msmioctlgemsubmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

GSD-2021-1002723 i2c: virtio: fix completion handling

i2c: virtio: fix completion handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit 9cbb957441ed8873577d7d313a3d79d69f1dad5c...

GSD-2021-1002722 RDMA/irdma: Fix a user-after-free in add_pble_prm

RDMA/irdma: Fix a user-after-free in addpbleprm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

GSD-2021-1002719 RDMA: Fix use-after-free in rxe_queue_cleanup

RDMA: Fix use-after-free in rxequeuecleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...

GSD-2021-1002717 xen/netfront: harden netfront against event channel storms

xen/netfront: harden netfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002716 xen/blkfront: harden blkfront against event channel storms

xen/blkfront: harden blkfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002715 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002713 ovl: fix warning in ovl_create_real()

ovl: fix warning in ovlcreatereal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit 6859985a2fbda5d1586bf44538853e1be69e85f7. F...

GSD-2021-1002711 xen/netback: don't queue unlimited number of packages

xen/netback: don't queue unlimited number of packages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002710 iocost: Fix divide-by-zero on donation from low hweight cgroup

iocost: Fix divide-by-zero on donation from low hweight cgroup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002709 media: mxl111sf: change mutex_init() location

media: mxl111sf: change mutexinit location This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002708 btrfs: fix memory leak in __add_inode_ref()

btrfs: fix memory leak in addinoderef This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit 005d9292b5b2e71a009f911bd85d755009b3724...

GSD-2021-1002707 net/packet: rx_owner_map depends on pg_vec

net/packet: rxownermap depends on pgvec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002706 net: systemport: Add global locking for descriptor lifecycle

net: systemport: Add global locking for descriptor lifecycle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002705 sit: do not call ipip6_dev_free() from sit_init_net()

sit: do not call ipip6devfree from sitinitnet This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002703 igbvf: fix double free in `igbvf_probe`

igbvf: fix double free in igbvfprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit 74a16e062b23332d8db017ff4a41e16279c44411...

GSD-2021-1002702 rds: memory leak in __rds_conn_create()

rds: memory leak in rdsconncreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit 74dc97dfb276542f12746d706abef63364d816bb, i...

GSD-2021-1002700 drm/amd/pm: fix a potential gpu_metrics_table memory leak

drm/amd/pm: fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002699 dm btree remove: fix use after free in rebalance_children()

dm btree remove: fix use after free in rebalancechildren This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002698 net/sched: sch_ets: don't remove idle classes from the round-robin list

net/sched: schets: don't remove idle classes from the round-robin list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002697 net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

net: hns3: fix use-after-free bug in hclgevfsendmbxmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002694 net: netlink: af_netlink: Prevent empty skb by adding a check on len.

net: netlink: afnetlink: Prevent empty skb by adding a check on len. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.87 by commit...

GSD-2021-1002693 sch_cake: do not call cake_destroy() from cake_init()

schcake: do not call cakedestroy from cakeinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002691 audit: improve robustness of the audit queue handling

audit: improve robustness of the audit queue handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002689 firmware: arm_scpi: Fix string overflow in SCPI genpd driver

firmware: armscpi: Fix string overflow in SCPI genpd driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2021-1002686 xen/console: harden hvc_xen against event channel storms

xen/console: harden hvcxen against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002685 xen/netfront: harden netfront against event channel storms

xen/netfront: harden netfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002683 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

scsi: scsidebug: Sanity check block descriptor length in respmodeselect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002682 ovl: fix warning in ovl_create_real()

ovl: fix warning in ovlcreatereal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit f9f300a92297be8250547347fd52216ef0177ae0. F...

GSD-2021-1002680 media: mxl111sf: change mutex_init() location

media: mxl111sf: change mutexinit location This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002678 sit: do not call ipip6_dev_free() from sit_init_net()

sit: do not call ipip6devfree from sitinitnet This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002677 igbvf: fix double free in `igbvf_probe`

igbvf: fix double free in igbvfprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit 8addba6cab94ce01686ea2e80ed1530f9dc33a9a...

GSD-2021-1002676 net/packet: rx_owner_map depends on pg_vec

net/packet: rxownermap depends on pgvec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...