GSD-2022-1000054 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit 75799e71df1da11394740b43ae5686646179561d, ...

GSD-2022-1000053 net: fix use-after-free in tw_timer_handler

net: fix use-after-free in twtimerhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000052 net/smc: fix kernel panic caused by race of smc_sock

net/smc: fix kernel panic caused by race of smcsock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000051 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000050 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000049 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.13 by commit...

GSD-2022-1000048 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().

tomoyo: Check exceeded quota early in tomoyodomainquotaisok. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000046 usb: mtu3: fix list_head check warning

usb: mtu3: fix listhead check warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit 3b6efe0b7ba03cc2acf0694b46d6ff33c5b4c29...

GSD-2022-1000045 net/mlx5e: Wrap the tx reporter dump callback to extract the sq

net/mlx5e: Wrap the tx reporter dump callback to extract the sq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000044 net/smc: fix kernel panic caused by race of smc_sock

net/smc: fix kernel panic caused by race of smcsock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000043 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000042 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000041 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

usb: gadget: ffs: Clear ffseventfd in ffsdataclear. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000040 net: fix use-after-free in tw_timer_handler

net: fix use-after-free in twtimerhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000039 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit 769d14abd35e0e153b5149c3e1e989a9d719e3ff, ...

GSD-2022-1000038 binder: fix async_free_space accounting for empty parcels

binder: fix asyncfreespace accounting for empty parcels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000037 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.90 by commit...

GSD-2022-1000036 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().

tomoyo: Check exceeded quota early in tomoyodomainquotaisok. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000035 usb: mtu3: fix list_head check warning

usb: mtu3: fix listhead check warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit 585e2b244dda7ea733274e4b8fa27853d625d3b...

GSD-2022-1000033 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

usb: gadget: ffs: Clear ffseventfd in ffsdataclear. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000032 binder: fix async_free_space accounting for empty parcels

binder: fix asyncfreespace accounting for empty parcels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000031 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit 831de271452b87657fcf8d715ee20519b79caef5, ...

GSD-2022-1000030 net: fix use-after-free in tw_timer_handler

net: fix use-after-free in twtimerhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000029 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000028 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit...

GSD-2022-1000027 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit af6e6e58f7ebf86b4e7201694b1e4f3a62cbc3ec,...

GSD-2022-1000026 i2c: validate user data in compat ioctl

i2c: validate user data in compat ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000025 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000024 binder: fix async_free_space accounting for empty parcels

binder: fix asyncfreespace accounting for empty parcels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000023 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

usb: gadget: ffs: Clear ffseventfd in ffsdataclear. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000022 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000021 net: fix use-after-free in tw_timer_handler

net: fix use-after-free in twtimerhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000020 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.261 by commit...

GSD-2022-1000019 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

usb: gadget: ffs: Clear ffseventfd in ffsdataclear. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.261 by commit...

GSD-2022-1000018 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.261 by commit 8873140f95d4977bf37e4cf0d5c5e3f6e34cdd3e,...

GSD-2022-1000017 NFC: st21nfca: Fix memory leak in device probe and remove

NFC: st21nfca: Fix memory leak in device probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.261 by commit...

GSD-2022-1000016 net: fix use-after-free in tw_timer_handler

net: fix use-after-free in twtimerhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.261 by commit...

GSD-2022-1000015 binder: fix async_free_space accounting for empty parcels

binder: fix asyncfreespace accounting for empty parcels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.261 by commit...

GSD-2022-1000014 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

usb: gadget: ffs: Clear ffseventfd in ffsdataclear. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.296 by commit...

GSD-2022-1000013 net: fix use-after-free in tw_timer_handler

net: fix use-after-free in twtimerhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.296 by commit...

GSD-2022-1000012 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.296 by commit...

GSD-2022-1000011 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

usb: gadget: ffs: Clear ffseventfd in ffsdataclear. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.298 by commit...

GSD-2022-1000009 net: fix use-after-free in tw_timer_handler

net: fix use-after-free in twtimerhandler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.298 by commit...

GSD-2022-1000007 colors.js 1.4.1 has an infinite loop added by the primary developer

colors.js had an infinite loop added by the primary developer in version 1.4.1 and 6.6.6 which was released on GitHub and NPM which reports it as having 3,179 dependent packages that rely upon it. Additionally the GitHub repo was wiped of all files. This appears to have been done intentionally in...

GSD-2021-1002847 tun: avoid double free in tun_free_netdev

tun: avoid double free in tunfreenetdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002846 pinctrl: mediatek: fix global-out-of-bounds issue

pinctrl: mediatek: fix global-out-of-bounds issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002845 hamradio: defer ax25 kfree after unregister_netdev

hamradio: defer ax25 kfree after unregisternetdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002844 hamradio: improve the incomplete fix to avoid NPD

hamradio: improve the incomplete fix to avoid NPD This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002843 phonet/pep: refuse to enable an unbound pipe

phonet/pep: refuse to enable an unbound pipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002842 f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()

f2fs: fix to do sanity check on last xattr entry in f2fssetxattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...