13627 matches found
GSD-2022-1004816 net: tun: unlink NAPI from device on destruction
net: tun: unlink NAPI from device on destruction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.251 by commit...
GSD-2022-1004813 net: bonding: fix use-after-free after 802.3ad slave unbind
net: bonding: fix use-after-free after 802.3ad slave unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.251 by commit...
GSD-2022-1004808 xen/blkfront: force data bouncing when backend is untrusted
xen/blkfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.251 by commit...
GSD-2022-1004805 usbnet: fix memory leak in error case
usbnet: fix memory leak in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.252 by commit...
GSD-2022-1004801 xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
xen/netback: avoid entering xenvifrxnextskb with an empty rx queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...
GSD-2022-1004799 cgroup: Use separate src/dst nodes when preloading css_sets for migration
cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...
GSD-2022-1004794 sfc: fix use after free when disabling sriov
sfc: fix use after free when disabling sriov This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...
GSD-2022-1004781 tcp: Fix data-races around sysctl_tcp_mtu_probing.
tcp: Fix data-races around sysctltcpmtuprobing. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...
GSD-2022-1004770 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
tcp: Fix data-races around sysctltcpslowstartafteridle. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...
GSD-2022-1004762 i40e: Fix call trace in setup_tx_descriptors
i40e: Fix call trace in setuptxdescriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.200 by commit...
GSD-2022-1004761 tty: goldfish: Fix free_irq() on remove
tty: goldfish: Fix freeirq on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.200 by commit f7183c76d500324b8b5bd0af5e663cfa57b7b836...
GSD-2022-1004757 comedi: vmk80xx: fix expression for tx buffer size
comedi: vmk80xx: fix expression for tx buffer size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.200 by commit...
GSD-2022-1004756 usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
usb: gadget: lpc32xxudc: Fix refcount leak in lpc32xxudcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.200 by commit...
GSD-2022-1004746 drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf
drm/msm/mdp4: Fix refcount leak in mdp4modesetinitintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.202 by commit...
GSD-2022-1004742 virtio_net: fix xdp_rxq_info bug after suspend/resume
virtionet: fix xdprxqinfo bug after suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.202 by commit...
GSD-2022-1004740 xtensa: xtfpga: Fix refcount leak bug in setup
xtensa: xtfpga: Fix refcount leak bug in setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.202 by commit...
GSD-2022-1004716 xen/arm: Fix race in RB-tree based P2M accounting
xen/arm: Fix race in RB-tree based P2M accounting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.204 by commit...
GSD-2022-1004698 raw: Fix a data-race around sysctl_raw_l3mdev_accept.
raw: Fix a data-race around sysctlrawl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...
GSD-2022-1004658 ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
ata: libata-core: fix NULL pointer deref in atahostallocpinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...
GSD-2022-1004656 ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
ipv6: Fix signed integer overflow in l2tpip6sendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...
GSD-2022-1004651 arm64: ftrace: consistently handle PLTs.
arm64: ftrace: consistently handle PLTs. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...
GSD-2022-1004627 virtio_net: fix xdp_rxq_info bug after suspend/resume
virtionet: fix xdprxqinfo bug after suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...
GSD-2022-1004622 xtensa: Fix refcount leak bug in time.c
xtensa: Fix refcount leak bug in time.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...
GSD-2022-1004621 powerpc: Enable execve syscall exit tracepoint
powerpc: Enable execve syscall exit tracepoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...
GSD-2022-1004615 ARM: cns3xxx: Fix refcount leak in cns3xxx_init
ARM: cns3xxx: Fix refcount leak in cns3xxxinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...
GSD-2022-1004607 linux/dim: Fix divide by 0 in RDMA DIM
linux/dim: Fix divide by 0 in RDMA DIM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...
GSD-2022-1004593 bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
bpf: Fix insufficient bounds propagation from adjustscalarminmaxvals This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.130 by commit...
GSD-2022-1004569 ima: Fix potential memory leak in ima_init_crypto()
ima: Fix potential memory leak in imainitcrypto This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...
GSD-2022-1004566 seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
seg6: bpf: fix skb checksum in bpfpushseg6encap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...
GSD-2022-1004548 lockdown: Fix kexec lockdown bypass with ima policy
lockdown: Fix kexec lockdown bypass with ima policy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...
GSD-2022-1004530 igmp: Fix data-races around sysctl_igmp_llm_reports.
igmp: Fix data-races around sysctligmpllmreports. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...
GSD-2022-1004524 be2net: Fix buffer overflow in be_get_module_eeprom
be2net: Fix buffer overflow in begetmoduleeeprom This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...
GSD-2022-1004510 scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...
GSD-2022-1004508 staging: r8188eu: Fix warning of array overflow in ioctl_linux.c
staging: r8188eu: Fix warning of array overflow in ioctllinux.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...
GSD-2022-1004503 tty: goldfish: Fix free_irq() on remove
tty: goldfish: Fix freeirq on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit fb15e79cacddfbc62264e6e807bde50ad688e988...
GSD-2022-1004498 irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions
irqchip/gic-v3: Fix error handling in gicpopulateppipartitions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...
GSD-2022-1004490 dm mirror log: round up region bitmap size to BITS_PER_LONG
dm mirror log: round up region bitmap size to BITSPERLONG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...
GSD-2022-1004485 ext4: add reserved GDT blocks check
ext4: add reserved GDT blocks check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit 33b1bba31f4c784d33d2c2517964bdccdc9204cd...
GSD-2022-1004483 9p: fix fid refcount leak in v9fs_vfs_get_link
9p: fix fid refcount leak in v9fsvfsgetlink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...
GSD-2022-1004469 erspan: do not assume transport header is always set
erspan: do not assume transport header is always set This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...
GSD-2022-1004466 afs: Fix dynamic root getattr
afs: Fix dynamic root getattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit 2b2bba96526f25f2eba74ecadb031de2e05a83ce, it wa...
GSD-2022-1004464 btrfs: don't set lock_owner when locking extent buffer for reading
btrfs: don't set lockowner when locking extent buffer for reading This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...
GSD-2022-1004412 btrfs: zoned: fix a leaked bioc in read_zone_info
btrfs: zoned: fix a leaked bioc in readzoneinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...
GSD-2022-1004407 ima: Fix a potential integer overflow in ima_appraise_measurement
ima: Fix a potential integer overflow in imaappraisemeasurement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...
GSD-2022-1004403 cipso: Fix data-races around sysctl.
cipso: Fix data-races around sysctl. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit 07b0caf8aeb9b82e6ecc6c292a3e47c7fcdb1148...
GSD-2022-1004397 raw: Fix a data-race around sysctl_raw_l3mdev_accept.
raw: Fix a data-race around sysctlrawl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...
GSD-2022-1004374 x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.57 by commit...
GSD-2022-1004359 ip: Fix data-races around sysctl_ip_fwd_update_priority.
ip: Fix data-races around sysctlipfwdupdatepriority. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...
GSD-2022-1004350 tcp: Fix a data-race around sysctl_tcp_probe_threshold.
tcp: Fix a data-race around sysctltcpprobethreshold. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...
GSD-2022-1004347 net: stmmac: fix dma queue left shift overflow issue
net: stmmac: fix dma queue left shift overflow issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...