GSD-2023-1001851 nvmem: core: fix cleanup after dev_set_name()

nvmem: core: fix cleanup after devsetname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001850 ovl: Use "buf" flexible array for memcpy() destination

ovl: Use "buf" flexible array for memcpy destination This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001849 f2fs: initialize locks earlier in f2fs_fill_super()

f2fs: initialize locks earlier in f2fsfillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001848 fbdev: smscufx: fix error handling code in ufx_usb_probe

fbdev: smscufx: fix error handling code in ufxusbprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001847 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads

wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by...

GSD-2023-1001846 gfs2: Always check inode size of inline inodes

gfs2: Always check inode size of inline inodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001845 bpf: Skip invalid kfunc call in backtrack_insn

bpf: Skip invalid kfunc call in backtrackinsn This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.11 by commit...

GSD-2023-1001843 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...

GSD-2023-1001842 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...

GSD-2023-1001840 regulator: da9211: Use irq handler when ready

regulator: da9211: Use irq handler when ready This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...

GSD-2023-1001839 usb: xhci: Check endpoint is valid before dereferencing it

usb: xhci: Check endpoint is valid before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.304 by commit...

GSD-2023-1001838 f2fs: let's avoid panic if extent_tree is not created

f2fs: let's avoid panic if extenttree is not created This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.304 by commit...

GSD-2023-1001837 gsmi: fix null-deref in gsmi_get_variable

gsmi: fix null-deref in gsmigetvariable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.304 by commit...

GSD-2023-1001836 nilfs2: fix general protection fault in nilfs_btree_insert()

nilfs2: fix general protection fault in nilfsbtreeinsert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.304 by commit...

GSD-2023-1001834 drm/virtio: Fix GEM handle creation UAF

drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.270 by commit...

GSD-2023-1001831 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

nfc: pn533: Wait for outurb's completion in pn533usbsendframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.270 by commit...

GSD-2023-1001830 regulator: da9211: Use irq handler when ready

regulator: da9211: Use irq handler when ready This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.270 by commit...

GSD-2023-1001829 efi: fix NULL-deref in init error path

efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.270 by commit...

GSD-2023-1001828 f2fs: let's avoid panic if extent_tree is not created

f2fs: let's avoid panic if extenttree is not created This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...

GSD-2023-1001826 Add exception protection processing for vd in axi_chan_handle_err function

Add exception protection processing for vd in axichanhandleerr function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...

GSD-2023-1001824 gsmi: fix null-deref in gsmi_get_variable

gsmi: fix null-deref in gsmigetvariable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...

GSD-2023-1001823 xhci: Fix null pointer dereference when host dies

xhci: Fix null pointer dereference when host dies This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...

GSD-2023-1001821 drm/virtio: Fix GEM handle creation UAF

drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1001812 efi: fix NULL-deref in init error path

efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1001811 f2fs: let's avoid panic if extent_tree is not created

f2fs: let's avoid panic if extenttree is not created This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1001808 usb: xhci: Check endpoint is valid before dereferencing it

usb: xhci: Check endpoint is valid before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1001807 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1001806 misc: fastrpc: Fix use-after-free race condition for maps

misc: fastrpc: Fix use-after-free race condition for maps This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1001805 xhci: Fix null pointer dereference when host dies

xhci: Fix null pointer dereference when host dies This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1001801 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1001800 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001795 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001793 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001791 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

nfc: pn533: Wait for outurb's completion in pn533usbsendframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001789 regulator: da9211: Use irq handler when ready

regulator: da9211: Use irq handler when ready This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001788 efi: fix NULL-deref in init error path

efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001787 io_uring/io-wq: only free worker if it was allocated for creation

iouring/io-wq: only free worker if it was allocated for creation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

GSD-2023-1001781 Add exception protection processing for vd in axi_chan_handle_err function

Add exception protection processing for vd in axichanhandleerr function This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001779 nilfs2: fix general protection fault in nilfs_btree_insert()

nilfs2: fix general protection fault in nilfsbtreeinsert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001778 xhci: Fix null pointer dereference when host dies

xhci: Fix null pointer dereference when host dies This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001777 misc: fastrpc: Fix use-after-free race condition for maps

misc: fastrpc: Fix use-after-free race condition for maps This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001776 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001774 tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer

tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001771 drm/amd/display: Calculate output_color_space after pixel encoding adjustment

drm/amd/display: Calculate outputcolorspace after pixel encoding adjustment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001768 drm/virtio: Fix GEM handle creation UAF

drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1001767 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops

s390/cpumsf: add READONCE semantics to compare and swap loops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1001766 drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer

drm/msm/dp: do not complete dpauxcmdfifotx if irq is not for aux transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1001765 ixgbe: fix pci device refcount leak

ixgbe: fix pci device refcount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit 4c93422a54cd6a349988f42e1c6bf082cf4ea9d8,...

GSD-2023-1001764 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames

ipv6: raw: Deduct extension header length in rawv6pushpendingframes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1001760 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...