GSD-2021-1002164 KVM: arm64: Fix host stage-2 PGD refcount

KVM: arm64: Fix host stage-2 PGD refcount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002161 mptcp: fix possible stall on recvmsg()

mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit 612f71d7328c14369924384ad2170aae2a6abd92, i...

GSD-2021-1002146 media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()

media: firewire: firedtv-avc: fix a buffer overflow in avccapmt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.17 by commit...

GSD-2021-1002139 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

GSD-2021-1002129 cgroup: Fix memory leak caused by missing cgroup_bpf_offline

cgroup: Fix memory leak caused by missing cgroupbpfoffline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

GSD-2021-1002123 ocfs2: fix race between searching chunks and release journal_head from buffer_head

ocfs2: fix race between searching chunks and release journalhead from bufferhead This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by...

GSD-2021-1002118 s390/pci: fix zpci_zdev_put() on reserve

s390/pci: fix zpcizdevput on reserve This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit 4e5d794a2743f5a1e13ee1066ce37711f2696044...

GSD-2021-1002117 isdn: mISDN: Fix sleeping function called from invalid context

isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1002113 isdn: cpai: check ctr->cnr to avoid array index out of bound

isdn: cpai: check ctr-cnr to avoid array index out of bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1002110 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1002089 drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read

drm/edid: In connectorbadedid cap numofext by numblocks read This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

GSD-2021-1002069 net: batman-adv: fix error handling

net: batman-adv: fix error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit b0a2cd38553c77928ef1646ed1518486b1e70ae8,...

GSD-2021-1002063 drm/amdgpu: fix out of bounds write

drm/amdgpu: fix out of bounds write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit eb3b6805e3e9d98b2507201fd061a231988ce623...

GSD-2021-1002054 s390/pci: fix zpci_zdev_put() on reserve

s390/pci: fix zpcizdevput on reserve This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit 188907c252188ac7a5ec3efcfa31dae1f47b8a20...

GSD-2021-1002044 userfaultfd: fix a race between writeprotect and exit_mmap()

userfaultfd: fix a race between writeprotect and exitmmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

GSD-2021-1002043 ocfs2: mount fails with buffer overflow in strlen

ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

GSD-2021-1002040 can: peak_pci: peak_pci_remove(): fix UAF

can: peakpci: peakpciremove: fix UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit 28f28e4bc3a5e0051faa963f10b778ab38c1db69...

GSD-2021-1002039 netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value

netfilter: xtIDLETIMER: fix panic that occurs when timertype has garbage value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commi...

GSD-2021-1002033 net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path

net/mlx5e: Fix memory leak in mlx5coredestroycq error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...

GSD-2021-1002029 btrfs: fix abort logic in btrfs_replace_file_extents

btrfs: fix abort logic in btrfsreplacefileextents This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...

GSD-2021-1002011 mm, slub: fix potential memoryleak in kmem_cache_open()

mm, slub: fix potential memoryleak in kmemcacheopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

GSD-2021-1002009 powerpc/idle: Don't corrupt back chain when going idle

powerpc/idle: Don't corrupt back chain when going idle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

GSD-2021-1001971 comedi: ni_usb6501: fix NULL-deref in command paths

comedi: niusb6501: fix NULL-deref in command paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.255 by commit...

GSD-2021-1001970 comedi: dt9812: fix DMA buffers on stack

comedi: dt9812: fix DMA buffers on stack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.255 by commit...

GSD-2021-1001960 isdn: cpai: check ctr->cnr to avoid array index out of bound

isdn: cpai: check ctr-cnr to avoid array index out of bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.253 by commit...

GSD-2021-1001959 ocfs2: mount fails with buffer overflow in strlen

ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.253 by commit...

GSD-2021-1001935 drm/msm: Fix null pointer dereference on pointer edp

drm/msm: Fix null pointer dereference on pointer edp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.288 by commit...

GSD-2021-1001930 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.292 by commit...

GSD-2021-1001926 scsi: core: Put LLD module refcnt after SCSI device is released

scsi: core: Put LLD module refcnt after SCSI device is released This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.292 by commit...

GSD-2021-1001919 ocfs2: mount fails with buffer overflow in strlen

ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.290 by commit...

GSD-2021-1001904 net: encx24j600: check error in devm_regmap_init_encx24j600

net: encx24j600: check error in devmregmapinitencx24j600 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

GSD-2021-1001893 netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value

netfilter: xtIDLETIMER: fix panic that occurs when timertype has garbage value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commi...

GSD-2021-1001889 powerpc/smp: do not decrement idle task preempt count in CPU offline

powerpc/smp: do not decrement idle task preempt count in CPU offline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1001887 can: peak_pci: peak_pci_remove(): fix UAF

can: peakpci: peakpciremove: fix UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit 0e5afdc2315b0737edcf55bede4ee1640d2d464d...

GSD-2021-1001823 dma-debug: fix sg checks in debug_dma_map_sg()

dma-debug: fix sg checks in debugdmamapsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

GSD-2021-1001817 KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()

KVM: PPC: Book3S HV: Fix stack handling in idlekvmstartguest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

GSD-2021-1001801 isdn: mISDN: Fix sleeping function called from invalid context

isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit...

GSD-2021-1001781 ocfs2: mount fails with buffer overflow in strlen

ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.288 by commit...

GSD-2021-1001772 drm/msm: Fix null pointer dereference on pointer edp

drm/msm: Fix null pointer dereference on pointer edp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.290 by commit...

GSD-2021-1001767 staging: greybus: uart: fix tty use after free

staging: greybus: uart: fix tty use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

GSD-2021-1001764 mcb: fix error handling in mcb_alloc_bus()

mcb: fix error handling in mcballocbus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit 9fc198f415dee070a1de957bb5bf5921d8df349...

GSD-2021-1001758 virtio-net: fix pages leaking when building skb in big mode

virtio-net: fix pages leaking when building skb in big mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

GSD-2021-1001757 enetc: Fix illegal access when reading affinity_hint

enetc: Fix illegal access when reading affinityhint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

GSD-2021-1001755 s390/qeth: fix NULL deref in qeth_clear_working_pool_list()

s390/qeth: fix NULL deref in qethclearworkingpoollist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

GSD-2021-1001741 s390/qeth: Fix deadlock in remove_discipline

s390/qeth: Fix deadlock in removediscipline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001737 hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

hwmon: w83793 Fix NULL pointer dereference by removing unnecessary structure field This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by...

GSD-2021-1001732 mac80211: fix use-after-free in CCMP/GCMP RX

mac80211: fix use-after-free in CCMP/GCMP RX This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

GSD-2021-1001725 hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

hwmon: mlxreg-fan Return non-zero value when fan current state is enforced from sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 b...

GSD-2021-1001685 i2c: acpi: fix resource leak in reconfiguration device addition

i2c: acpi: fix resource leak in reconfiguration device addition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit...

GSD-2021-1001666 md: fix a lock order reversal in md_alloc

md: fix a lock order reversal in mdalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...