GSD-2022-1001100 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

ACPI: CPPC: Avoid out of bounds access when parsing CPC data This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001093 docs: sysctl/kernel: add missing bit to panic_print

docs: sysctl/kernel: add missing bit to panicprint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001087 ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111

ath5k: fix OOB in ath5keepromreadpcalinfo5111 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1001052 mips: ralink: fix a refcount leak in ill_acc_of_setup()

mips: ralink: fix a refcount leak in illaccofsetup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1001031 x86: Annotate call_on_stack()

x86: Annotate callonstack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit 9b78f03e429076e97615fbdb886f06ddd7ab6e50. For more...

GSD-2022-1001027 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1001019 net: ipv4: fix route with nexthop object delete warning

net: ipv4: fix route with nexthop object delete warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1001016 IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition

IB/rdmavt: add lock to call to rvterrorqp to prevent a race condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1000994 io_uring: drop the old style inflight file tracking

iouring: drop the old style inflight file tracking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1000992 drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw

drm/amd/display: Fix by adding FPU protection for dcn30internalvalidatebw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1000986 cachefiles: unmark inode in use in error path

cachefiles: unmark inode in use in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

GSD-2022-1000974 drm/amdkfd: Check for potential null return of kmalloc_array()

drm/amdkfd: Check for potential null return of kmallocarray This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

GSD-2022-1000967 net: usb: aqc111: Fix out-of-bounds accesses in RX fixup

net: usb: aqc111: Fix out-of-bounds accesses in RX fixup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

GSD-2022-1000958 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"

ALSA: pcm: Test for "silence" field in struct "pcmformatdata" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.4 by commit...

GSD-2022-1000934 sr9700: sanity check for packet length

sr9700: sanity check for packet length This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.269 by commit...

GSD-2022-1000924 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

ASoC: ops: Shift tested values in sndsocputvolsw by +min This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.270 by commit...

GSD-2022-1000899 netfilter: nf_queue: fix possible use-after-free

netfilter: nfqueue: fix possible use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.233 by commit...

GSD-2022-1000870 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.184 by commit...

GSD-2022-1000854 RDMA/ib_srp: Fix a deadlock

RDMA/ibsrp: Fix a deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit 99eb8d694174c777558dc902d575d1997d5ca650, it was...

GSD-2022-1000852 iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot

iio: imu: stlsm6dsx: wait for settling time in stlsm6dsxreadoneshot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000821 mm/filemap: Fix handling of THPs in generic_file_buffered_read()

mm/filemap: Fix handling of THPs in genericfilebufferedread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000803 net-timestamp: convert sk->sk_tskey to atomic_t

net-timestamp: convert sk-sktskey to atomict This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000791 btrfs: prevent copying too big compressed lzo segment

btrfs: prevent copying too big compressed lzo segment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000750 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

GSD-2022-1000744 gso: do not skip outer ip header in case of ipip and net_failover

gso: do not skip outer ip header in case of ipip and netfailover This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

GSD-2022-1000736 net-timestamp: convert sk->sk_tskey to atomic_t

net-timestamp: convert sk-sktskey to atomict This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

GSD-2022-1000632 drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc

drm/msm/dpu: invalid parameter check in dpusetupdspppcc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000614 usb: xhci-plat: fix crash when suspend if remote wake enable

usb: xhci-plat: fix crash when suspend if remote wake enable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000575 drm/nouveau: fix off by one in BIOS boundary checking

drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

GSD-2022-1000572 ALSA: hda: Fix UAF of leds class devs at unbinding

ALSA: hda: Fix UAF of leds class devs at unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

GSD-2022-1000553 net_sched: add __rcu annotation to netdev->qdisc

netsched: add rcu annotation to netdev-qdisc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000531 s390/cio: verify the driver availability for path_event call

s390/cio: verify the driver availability for pathevent call This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000506 tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case

tcp: take care of mixed splice/sendmsgMSGZEROCOPY case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000499 arm64: errata: Add detection for TRBE trace data corruption

arm64: errata: Add detection for TRBE trace data corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000452 scsi: pm8001: Fix use-after-free for aborted TMF sas_task

scsi: pm8001: Fix use-after-free for aborted TMF sastask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

GSD-2022-1000447 mm: don't try to NUMA-migrate COW pages that have other uses

mm: don't try to NUMA-migrate COW pages that have other uses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

GSD-2022-1000388 net: ieee802154: at86rf230: Stop leaking skb's

net: ieee802154: at86rf230: Stop leaking skb's This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

GSD-2022-1000327 ax25: improve the incomplete fix to avoid UAF and NPD bugs

ax25: improve the incomplete fix to avoid UAF and NPD bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.231 by commit...

GSD-2022-1000253 powerpc/32s: Fix kasan_init_region() for KASAN

powerpc/32s: Fix kasaninitregion for KASAN This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

GSD-2022-1000222 dma-buf: heaps: Fix potential spectre v1 gadget

dma-buf: heaps: Fix potential spectre v1 gadget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

GSD-2022-1000213 af_packet: fix data-race in packet_setsockopt / packet_setsockopt

afpacket: fix data-race in packetsetsockopt / packetsetsockopt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.97 by commit...

GSD-2022-1000153 i40e: Fix queues reservation for XDP

i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.176 by commit be6998f232b8e4ca8225029e305b8329d89bfd59...

GSD-2022-1000119 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.227 by commit...

GSD-2022-1000080 usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS

usb: gadget: fsourcesink: Fix isoc transfer for USBSPEEDSUPERPLUS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...

GSD-2022-1000031 sctp: use call_rcu to free endpoint

sctp: use callrcu to free endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.170 by commit 831de271452b87657fcf8d715ee20519b79caef5, ...

GSD-2022-1000025 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.224 by commit...

GSD-2022-1000012 Input: appletouch - initialize work before device registration

Input: appletouch - initialize work before device registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.296 by commit...

GSD-2021-1002836 mac80211: fix locking in ieee80211_start_ap error path

mac80211: fix locking in ieee80211startap error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002832 ipmi: fix initialization when workqueue allocation fails

ipmi: fix initialization when workqueue allocation fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...

GSD-2021-1002818 NFSD: Fix READDIR buffer overflow

NFSD: Fix READDIR buffer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit eabc0aab98e5218ceecd82069b0d6fdfff5ee885, i...