GSD-2022-1005018 arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76

arm64: Fix matchlist for erratum 1286807 on Arm Cortex-A76 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1004272 KVM: arm64: Prevent kmemleak from accessing pKVM memory

KVM: arm64: Prevent kmemleak from accessing pKVM memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...

GSD-2022-1001744 coredump: Use the vma snapshot in fill_files_note

coredump: Use the vma snapshot in fillfilesnote This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2021-1002831 ipmi: ssif: initialize ssif_info->client early

ipmi: ssif: initialize ssifinfo-client early This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1000800 ice: track AF_XDP ZC enabled queues in bitmap

ice: track AFXDP ZC enabled queues in bitmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

GSD-2023-1002389 ice: Do not use WQ_MEM_RECLAIM flag for workqueue

ice: Do not use WQMEMRECLAIM flag for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.168 by commit...

GSD-2023-1002359 Fix page corruption caused by racy check in __free_pages

Fix page corruption caused by racy check in freepages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.94 by commit...

GSD-2023-1000813 hfs: Fix OOB Write in hfs_asc2mac

hfs: Fix OOB Write in hfsasc2mac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit ae21b03f904736eb2aa9bd119d2a14e741f1681f, it...

GSD-2023-1000290 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event

ALSA: seq: Fix function prototype mismatch in sndseqexpandvarevent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.227 by commit...

GSD-2023-1000190 libbpf: Handle size overflow for ringbuf mmap

libbpf: Handle size overflow for ringbuf mmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2022-1007622 openvswitch: switch from WARN to pr_warn

openvswitch: switch from WARN to prwarn This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.332 by commit...

GSD-2022-1005079 mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start

mips: cavium-octeon: Fix missing ofnodeput in octeon2usbclocksstart This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1004162 net: sfp: fix memory leak in sfp_probe()

net: sfp: fix memory leak in sfpprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit f22ddc8a5278d7fb6369a0aeb0d8775a0aefaae...

GSD-2022-1002100 udmabuf: validate ubuf->pagecount

udmabuf: validate ubuf-pagecount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit b267a8118c2b171bf7d67b90ed64154eeab9fae0, i...

GSD-2022-1000711 iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

iommu/vt-d: Fix double listadd when enabling VMD in scalable mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit...

GSD-2022-1000700 net: ipv6: ensure we call ipv6_mc_down() at most once

net: ipv6: ensure we call ipv6mcdown at most once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit...

GSD-2021-1002599 nfsd: Fix nsfd startup race (again)

nfsd: Fix nsfd startup race again This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit 8bf902fee5893cfc2f04a698abab47629699ae9a, it...

GSD-2021-1002598 btrfs: free exchange changeset on failures

btrfs: free exchange changeset on failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

GSD-2021-1001147 CWE-89 in Secure Remote Access (SRA) version 8.x, 9.0.0.9-26sv and earlier

SonicWall is aware of improper neutralization of a SQL Command leading to SQL Injection vulnerability, reported by CrowdStrike, impacting end-of-life Secure Remote Access SRA products, specifically the SRA appliances running all 8.x firmware or an old version of firmware 9.x 9.0.0.9-26sv or...

GSD-2021-1001059 net/mlx5e: Fix use-after-free of encap entry in neigh update handler

net/mlx5e: Fix use-after-free of encap entry in neigh update handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1000903 KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message

KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.126 by commit...

GSD-2021-1000672 net: fujitsu: fix potential null-ptr-deref

net: fujitsu: fix potential null-ptr-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.235 by commit...

GSD-2023-1002357 ALSA: hda: Do not unset preset when cleaning up codec

ALSA: hda: Do not unset preset when cleaning up codec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...

GSD-2023-1001518 pstore/ram: Fix error return code in ramoops_probe()

pstore/ram: Fix error return code in ramoopsprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001264 ext4: disable fast-commit of encrypted dir operations

ext4: disable fast-commit of encrypted dir operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001110 RDMA/core: Make sure "ib_port" is valid when access sysfs node

RDMA/core: Make sure "ibport" is valid when access sysfs node This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000859 ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF

ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.88 by commit...

GSD-2022-1007477 KVM: arm64: vgic: Fix exit condition in scan_its_table()

KVM: arm64: vgic: Fix exit condition in scanitstable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...

GSD-2022-1005824 video: fbdev: arkfb: Check the size of screen before memset_io()

video: fbdev: arkfb: Check the size of screen before memsetio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005744 net: Fix data-races around sysctl_devconf_inherit_init_net.

net: Fix data-races around sysctldevconfinheritinitnet. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1004933 ARM: cns3xxx: Fix refcount leak in cns3xxx_init

ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.321 by commit...

GSD-2022-1004890 mm/slub: add missing TID updates on slab deactivation

mm/slub: add missing TID updates on slab deactivation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.288 by commit...

GSD-2022-1004470 perf arm-spe: Don't set data source if it's not a memory operation

perf arm-spe: Don't set data source if it's not a memory operation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

GSD-2022-1004283 x86/boot: Wrap literal addresses in absolute_pointer()

x86/boot: Wrap literal addresses in absolutepointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.7 by commit...

GSD-2022-1004165 netfilter: nf_tables: avoid skb access on nf_stolen

netfilter: nftables: avoid skb access on nfstolen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

GSD-2022-1003726 rtc: mt6397: check return value after calling platform_get_resource()

rtc: mt6397: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003179 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak

KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

GSD-2022-1002869 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak

KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

GSD-2022-1002574 vduse: Fix NULL pointer dereference on sysfs access

vduse: Fix NULL pointer dereference on sysfs access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002158 gcc-plugins: latent_entropy: use /dev/urandom

gcc-plugins: latententropy: use /dev/urandom This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.190 by commit...

GSD-2022-1001601 ext4: make mb_optimize_scan performance mount option work with extents

ext4: make mboptimizescan performance mount option work with extents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001503 cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse

cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001412 ath11k: fix kernel panic during unload/load ath11k modules

ath11k: fix kernel panic during unload/load ath11k modules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001083 usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value

usb: cdnsp: fix cdnspdecodetrb function to properly handle ret value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1001063 powerpc/set_memory: Avoid spinlock recursion in change_page_attr()

powerpc/setmemory: Avoid spinlock recursion in changepageattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1000945 mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work

mac80211hwsim: initialize ieee80211txinfo at hwscanwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.305 by commit...

GSD-2022-1000752 KVM: x86/mmu: make apf token non-zero to fix bug

KVM: x86/mmu: make apf token non-zero to fix bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

GSD-2022-1000631 hwmon: (nct6775) Fix crash in clear_caseopen

hwmon: nct6775 Fix crash in clearcaseopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000484 ima: fix reference leak in asymmetric_verify()

ima: fix reference leak in asymmetricverify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000076 Unknown vulnerability in Wormhole on 2022-02-02 resulting in 120K ETH on Solana by an attacker.

An attacker was able to exploit a bug in Wormhole allowing them to mint 120K ETH on Solana worth approximately $300 Million USD. This has been confirmed with an on-chain message from Wormhole offering a $10 Million USD bug bounty if the newly minted tokens are returned to Wormhole. Wormhole has...