GSD-2022-1000890 openvswitch: Fix setting ipv6 fields causing hw csum failure

openvswitch: Fix setting ipv6 fields causing hw csum failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000889 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

nfp: flower: Fix a potential leak in nfptunneladdsharedmac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000888 netfilter: nf_tables: fix memory leak during stateful obj update

netfilter: nftables: fix memory leak during stateful obj update This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000887 spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()

spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000886 configfs: fix a race in configfs_{,un}register_subsystem()

configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000885 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit 901206f71e6ad2b2e7accefc5199a438d173c25f, it was...

GSD-2022-1000884 iio: adc: men_z188_adc: Fix a resource leak in an error handling path

iio: adc: menz188adc: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000883 usb: gadget: rndis: add spinlock for rndis response list

usb: gadget: rndis: add spinlock for rndis response list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000882 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.182 by commit...

GSD-2022-1000881 mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work

mac80211hwsim: initialize ieee80211txinfo at hwscanwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000880 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

ASoC: ops: Shift tested values in sndsocputvolsw by +min This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000879 cifs: fix double free race when mount fails in cifs_get_root()

cifs: fix double free race when mount fails in cifsgetroot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000878 usb: gadget: clear related members when goto fail

usb: gadget: clear related members when goto fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000877 xen/netfront: destroy queues before real_num_tx_queues is zeroed

xen/netfront: destroy queues before realnumtxqueues is zeroed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000876 xfrm: fix MTU regression

xfrm: fix MTU regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit ac858e4462bdc5c589b0c062420c09dab3e579cd, it was...

GSD-2022-1000875 netfilter: fix use-after-free in __nf_register_net_hook()

netfilter: fix use-after-free in nfregisternethook This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000874 netfilter: nf_queue: fix possible use-after-free

netfilter: nfqueue: fix possible use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000873 net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

net: arcnet: com20020: Fix null-ptr-deref in com20020pciprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000872 ibmvnic: free reset-work-item when flushing

ibmvnic: free reset-work-item when flushing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...

GSD-2022-1000871 xen/xenbus: don't let xenbus_grant_ring() remove grants in error case

xen/xenbus: don't let xenbusgrantring remove grants in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.184 by commit...

GSD-2022-1000870 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.184 by commit...

GSD-2022-1000869 xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

xen/netfront: react properly to failing gnttabendforeignaccessref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.184 by commit...

GSD-2022-1000868 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing

vhost/vsock: don't check owner in vhostvsockstop while releasing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000867 KVM: x86/mmu: make apf token non-zero to fix bug

KVM: x86/mmu: make apf token non-zero to fix bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000866 sr9700: sanity check for packet length

sr9700: sanity check for packet length This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000865 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000864 bpf: Add schedule points in batch ops

bpf: Add schedule points in batch ops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000863 CDC-NCM: avoid overflow in sanity checking

CDC-NCM: avoid overflow in sanity checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000862 io_uring: add a schedule point in io_add_buffers()

iouring: add a schedule point in ioaddbuffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000861 gso: do not skip outer ip header in case of ipip and net_failover

gso: do not skip outer ip header in case of ipip and netfailover This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000860 openvswitch: Fix setting ipv6 fields causing hw csum failure

openvswitch: Fix setting ipv6 fields causing hw csum failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000859 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

nfp: flower: Fix a potential leak in nfptunneladdsharedmac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000858 netfilter: nf_tables: fix memory leak during stateful obj update

netfilter: nftables: fix memory leak during stateful obj update This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000857 net/smc: Use a mutex for locking "struct smc_pnettable"

net/smc: Use a mutex for locking "struct smcpnettable" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000856 spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()

spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynqqspiexecmemop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000855 configfs: fix a race in configfs_{,un}register_subsystem()

configfs: fix a race in configfs,unregistersubsystem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000854 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit 99eb8d694174c777558dc902d575d1997d5ca650, it was...

GSD-2022-1000853 iio: adc: men_z188_adc: Fix a resource leak in an error handling path

iio: adc: menz188adc: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000852 iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot

iio: imu: stlsm6dsx: wait for settling time in stlsm6dsxreadoneshot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000851 sc16is7xx: Fix for incorrect data being transmitted

sc16is7xx: Fix for incorrect data being transmitted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000850 usb: gadget: rndis: add spinlock for rndis response list

usb: gadget: rndis: add spinlock for rndis response list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000849 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000848 RDMA/cma: Do not change route.addr.src_addr outside state checks

RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000847 thermal: int340x: fix memory leak in int3400_notify()

thermal: int340x: fix memory leak in int3400notify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000846 riscv: fix oops caused by irqsoff latency tracer

riscv: fix oops caused by irqsoff latency tracer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000845 mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work

mac80211hwsim: initialize ieee80211txinfo at hwscanwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit...

GSD-2022-1000844 riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP

riscv: Fix config KASAN && SPARSEMEM && !SPARSEVMEMMAP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit...

GSD-2022-1000843 tipc: fix a bit overflow in tipc_crypto_key_rcv()

tipc: fix a bit overflow in tipccryptokeyrcv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit...

GSD-2022-1000842 cifs: fix double free race when mount fails in cifs_get_root()

cifs: fix double free race when mount fails in cifsgetroot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit...

GSD-2022-1000841 riscv: Fix config KASAN && DEBUG_VIRTUAL

riscv: Fix config KASAN && DEBUGVIRTUAL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit...