13627 matches found
GSD-2021-1001619 powerpc/64s: fix program check interrupt emergency stack path
powerpc/64s: fix program check interrupt emergency stack path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.73 by commit...
GSD-2021-1001616 xen/x86: fix PV trap handling on secondary processors
xen/x86: fix PV trap handling on secondary processors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.150 by commit...
GSD-2021-1001449 watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
watchdog: sc520wdt: Fix possible use-after-free in wdtturnoff This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.276 by commit...
GSD-2021-1001433 atm: iphase: fix possible use-after-free in ia_module_exit()
atm: iphase: fix possible use-after-free in iamoduleexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.240 by commit...
GSD-2021-1001423 smackfs: restrict bytes count in smk_set_cipso()
smackfs: restrict bytes count in smksetcipso This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.240 by commit...
GSD-2021-1001301 drm/sched: Avoid data corruptions
drm/sched: Avoid data corruptions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit 0687411e2a8858262de2fc4a1d576016fd77292e. F...
GSD-2021-1001257 net: fddi: fix UAF in fza_probe
net: fddi: fix UAF in fzaprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.53 by commit f33605908a9b6063525e9f68e62d739948c5fccf, it w...
GSD-2021-1001246 xdp, net: Fix use-after-free in bpf_xdp_link_release
xdp, net: Fix use-after-free in bpfxdplinkrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...
GSD-2021-1001128 s390/stack: fix possible register corruption with stack switch helper
s390/stack: fix possible register corruption with stack switch helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.47 by commit...
GSD-2021-1001108 i2c: robotfuzz-osif: fix control-request directions
i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.238 by commit...
GSD-2021-1001093 cfg80211: call cfg80211_leave_ocb when switching away from OCB
cfg80211: call cfg80211leaveocb when switching away from OCB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.274 by commit...
GSD-2021-1001030 usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL
usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...
GSD-2021-1001029 usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled
usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...
GSD-2021-1001008 mm/slub: actually fix freelist pointer vs redzoning
mm/slub: actually fix freelist pointer vs redzoning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...
GSD-2021-1000975 batman-adv: Avoid WARN_ON timing related checks
batman-adv: Avoid WARNON timing related checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...
GSD-2021-1000951 btrfs: promote debugging asserts to full-fledged checks in validate_super
btrfs: promote debugging asserts to full-fledged checks in validatesuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...
GSD-2021-1000863 perf: Fix data race between pin_count increment/decrement
perf: Fix data race between pincount increment/decrement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...
GSD-2021-1000787 xen-netback: take a reference to the RX task thread
xen-netback: take a reference to the RX task thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commit...
GSD-2021-1000567 net/sched: fq_pie: fix OOB access in the traffic path
net/sched: fqpie: fix OOB access in the traffic path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...
GSD-2021-1000546 net: fec: fix the potential memory leak in fec_enet_init()
net: fec: fix the potential memory leak in fecenetinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...
GSD-2021-1000545 interconnect: qcom: bcm-voter: add a missing of_node_put()
interconnect: qcom: bcm-voter: add a missing ofnodeput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...
GSD-2021-1000534 drm/amdgpu: Fix a use-after-free
drm/amdgpu: Fix a use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit d4ea141fd4b40636a8326df5a377d9c5cf9b3faa, it...
GSD-2021-1000348 powerpc/64: Fix the definition of the fixmap area
powerpc/64: Fix the definition of the fixmap area This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
GSD-2021-1000253 mt76: connac: fix kernel warning adding monitor interface
mt76: connac: fix kernel warning adding monitor interface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000225 net: Only allow init netns to set default tcp cong to a restricted algo
net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000243 i2c: imx: fix reference leak when pm_runtime_get_sync fails
i2c: imx: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000301 drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode.
drm/amdgpu: Init GFX10ADDRCONFIG for VCN v3 in DPG mode. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000211 arm64: entry: always set GIC_PRIO_PSR_I_SET during entry
arm64: entry: always set GICPRIOPSRISET during entry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...
GSD-2021-1000097 media: staging/intel-ipu3: Fix set_fmt error handling
media: staging/intel-ipu3: Fix setfmt error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...
GSD-2021-1000057 io_uring: fix shared sqpoll cancellation hangs
iouring: fix shared sqpoll cancellation hangs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...
GSD-2021-1000367 drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train()
drm: xlnx: zynqmp: fix a memset in zynqmpdptrain This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
GSD-2023-1002374 net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
net: openvswitch: fix possible memory leak in ovsmetercmdset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...
GSD-2023-1002371 ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
ASoC: SOF: Intel: hda-dai: fix possible streamtag leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...
GSD-2023-1002355 net: sched: sch: Bounds check priority
net: sched: sch: Bounds check priority This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...
GSD-2023-1002341 IB/hfi1: Restore allocated resources on failed copyout
IB/hfi1: Restore allocated resources on failed copyout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.12 by commit...
GSD-2023-1002334 ice: switch: fix potential memleak in ice_add_adv_recipe()
ice: switch: fix potential memleak in iceaddadvrecipe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.12 by commit...
GSD-2023-1002295 regulator: da9211: Use irq handler when ready
regulator: da9211: Use irq handler when ready This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.303 by commit...
GSD-2023-1002292 nilfs2: fix general protection fault in nilfs_btree_insert()
nilfs2: fix general protection fault in nilfsbtreeinsert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.304 by commit...
GSD-2023-1002287 net: nfc: Fix use-after-free in local_cleanup()
net: nfc: Fix use-after-free in localcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.305 by commit...
GSD-2023-1002282 dmaengine: Fix double increment of client_count in dma_chan_get()
dmaengine: Fix double increment of clientcount in dmachanget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.305 by commit...
GSD-2023-1002279 tracing: Make sure trace_printk() can output as soon as it can be used
tracing: Make sure traceprintk can output as soon as it can be used This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.305 by commit...
GSD-2023-1002258 net: mdio: validate parameter addr in mdiobus_get_phy()
net: mdio: validate parameter addr in mdiobusgetphy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.272 by commit...
GSD-2023-1002253 w1: fix WARNING after calling w1_process()
w1: fix WARNING after calling w1process This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.272 by commit...
GSD-2023-1002236 net/sched: act_mpls: Fix warning during failed attribute validation
net/sched: actmpls: Fix warning during failed attribute validation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...
GSD-2023-1002199 perf/x86/amd: fix potential integer overflow on shift of a int
perf/x86/amd: fix potential integer overflow on shift of a int This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...
GSD-2023-1002193 drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer
drm/msm/dp: do not complete dpauxcmdfifotx if irq is not for aux transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...
GSD-2023-1002189 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...
GSD-2023-1002185 net/sched: act_mpls: Fix warning during failed attribute validation
net/sched: actmpls: Fix warning during failed attribute validation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...
GSD-2023-1002183 io_uring/io-wq: only free worker if it was allocated for creation
iouring/io-wq: only free worker if it was allocated for creation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...
GSD-2023-1002167 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...