GSD-2022-1004069 fs: jfs: fix possible NULL pointer dereference in dbFree()

fs: jfs: fix possible NULL pointer dereference in dbFree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004053 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()

net: ethernet: mtkethsoc: out of bounds read in mtkhwlrogetfdirentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004030 usb: dwc2: gadget: don't reset gadget's driver->bus

usb: dwc2: gadget: don't reset gadget's driver-bus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004024 netfilter: nf_tables: disallow non-stateful expression in sets earlier

netfilter: nftables: disallow non-stateful expression in sets earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1004008 dm stats: add cond_resched when looping over entries

dm stats: add condresched when looping over entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.282 by commit...

GSD-2022-1004007 rxrpc: Fix listen() setting the bar too high for the prealloc rings

rxrpc: Fix listen setting the bar too high for the prealloc rings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003923 HID: elan: Fix potential double free in elan_input_configured

HID: elan: Fix potential double free in elaninputconfigured This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003884 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003872 RDMA/hfi1: Fix potential integer multiplication overflow errors

RDMA/hfi1: Fix potential integer multiplication overflow errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003864 phy: qcom-qmp: fix struct clk leak on probe errors

phy: qcom-qmp: fix struct clk leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003837 rtl818x: Prevent using not initialized queues

rtl818x: Prevent using not initialized queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003773 arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall

arm64: compat: Do not treat syscall number as ESRELx for a bad syscall This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003772 thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe

thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003744 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003732 phy: qcom-qmp: fix struct clk leak on probe errors

phy: qcom-qmp: fix struct clk leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003710 ubi: ubi_create_volume: Fix use-after-free when volume creation failed

ubi: ubicreatevolume: Fix use-after-free when volume creation failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003699 f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()

f2fs: fix to avoid f2fsbugon in decvalidnodecount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003559 wifi: mac80211: fix use-after-free in chanctx code

wifi: mac80211: fix use-after-free in chanctx code This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003550 um: Fix out-of-bounds read in LDT setup

um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003532 driver core: fix deadlock in __device_attach

driver core: fix deadlock in deviceattach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003413 drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()

drm/rockchip: vop: fix possible null-ptr-deref in vopbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003412 ipw2x00: Fix potential NULL dereference in libipw_xmit()

ipw2x00: Fix potential NULL dereference in libipwxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003319 iommu/mediatek: Fix NULL pointer dereference when printing dev_name

iommu/mediatek: Fix NULL pointer dereference when printing devname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003310 ext4: fix race condition between ext4_write and ext4_convert_inline_data

ext4: fix race condition between ext4write and ext4convertinlinedata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003306 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003253 tcp: use alloc_large_system_hash() to allocate table_perturb

tcp: use alloclargesystemhash to allocate tableperturb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1003227 iommu/arm-smmu-v3: check return value after calling platform_get_resource()

iommu/arm-smmu-v3: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1003067 firmware: arm_scmi: Fix list protocols enumeration in the base protocol

firmware: armscmi: Fix list protocols enumeration in the base protocol This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003056 soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc

soc: ti: tiscipmdomains: Check for null return of devmkcalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003051 pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()

pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003008 dlm: fix plock invalid read

dlm: fix plock invalid read This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit 56aa8d1fbd02357f3bf81bdfba1cde87ce8402fc, it was...

GSD-2022-1002997 blk-iolatency: Fix inflight count imbalances and IO hangs on offline

blk-iolatency: Fix inflight count imbalances and IO hangs on offline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002988 misc/pvpanic: Convert regular spinlock into trylock on panic path

misc/pvpanic: Convert regular spinlock into trylock on panic path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002877 pipe: Fix missing lock in pipe_resize_ring()

pipe: Fix missing lock in piperesizering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

GSD-2022-1002850 dm stats: add cond_resched when looping over entries

dm stats: add condresched when looping over entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

GSD-2022-1002821 drm/plane: Move range check for format_count earlier

drm/plane: Move range check for formatcount earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002814 scsi: target: tcmu: Fix possible data corruption

scsi: target: tcmu: Fix possible data corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002789 usbnet: Run unregister_netdev() before unbind() again

usbnet: Run unregisternetdev before unbind again This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002778 drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()

drm/rockchip: vop: fix possible null-ptr-deref in vopbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002775 drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume

drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel...

GSD-2022-1002769 drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit

drm/msm/disp/dpu1: avoid clearing hw interrupts if hwintr is null during drm uninit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by...

GSD-2022-1002735 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002695 RDMA/hfi1: Prevent panic when SDMA is disabled

RDMA/hfi1: Prevent panic when SDMA is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002689 iommu/mediatek: Fix NULL pointer dereference when printing dev_name

iommu/mediatek: Fix NULL pointer dereference when printing devname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002673 tracing: Fix potential double free in create_var_ref()

tracing: Fix potential double free in createvarref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002668 staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002656 phy: qcom-qmp: fix struct clk leak on probe errors

phy: qcom-qmp: fix struct clk leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002643 watchdog: rzg2l_wdt: Fix 32bit overflow issue

watchdog: rzg2lwdt: Fix 32bit overflow issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002606 SUNRPC: Trap RDMA segment overflows

SUNRPC: Trap RDMA segment overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit 659f7568e09593945c221bf20217a82ebdfe1328, ...

GSD-2022-1002589 ip_gre: test csum_start instead of transport header

ipgre: test csumstart instead of transport header This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...