GSD-2022-1007955 phy: ralink: mt7621-pci: add sentinel to quirks table

phy: ralink: mt7621-pci: add sentinel to quirks table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007940 mctp: Fix an error handling path in mctp_init()

mctp: Fix an error handling path in mctpinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007936 nilfs2: fix deadlock in nilfs_count_free_blocks()

nilfs2: fix deadlock in nilfscountfreeblocks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007920 nvmet: fix a memory leak

nvmet: fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.9 by commit 382fee1a8b623e2546a3e15e80517389e0e0673e, it was...

GSD-2022-1007870 net/9p: use a dedicated spinlock for trans_fd

net/9p: use a dedicated spinlock for transfd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

GSD-2022-1007861 net: dsa: Fix possible memory leaks in dsa_loop_init()

net: dsa: Fix possible memory leaks in dsaloopinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007857 nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()

nfc: s3fwrn5: Fix potential memory leak in s3fwrn5ncisend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007853 netfilter: nf_tables: netlink notifier might race to release objects

netfilter: nftables: netlink notifier might race to release objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007850 ipvs: fix WARNING in ip_vs_app_net_cleanup()

ipvs: fix WARNING in ipvsappnetcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit 97f872b00937f2689bff2dab4ad9ed259482840f...

GSD-2022-1007821 arm64: entry: avoid kprobe recursion

arm64: entry: avoid kprobe recursion This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit db66629d43b2d12cb43b004a4ca6be1d03228e97, ...

GSD-2022-1007820 ext4: update the backup superblock's at the end of the online resize

ext4: update the backup superblock's at the end of the online resize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007818 x86/tdx: Panic on bad configs that #VE on "private" memory access

x86/tdx: Panic on bad configs that VE on "private" memory access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

GSD-2022-1007806 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues

bpf, sockmap: Fix the sk-skforwardalloc warning of skstreamkillqueues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

GSD-2022-1007786 net: lapbether: fix issue of invalid opcode in lapbeth_open()

net: lapbether: fix issue of invalid opcode in lapbethopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

GSD-2022-1007767 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()

serial: 8250: omap: Fix unpaired pmruntimeputsync in omap8250remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007741 octeon_ep: fix potential memory leak in octep_device_setup()

octeonep: fix potential memory leak in octepdevicesetup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007719 tracing: Fix race where eprobes can be called before the event

tracing: Fix race where eprobes can be called before the event This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007708 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()

mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007704 x86/fpu: Drop fpregs lock before inheriting FPU permissions

x86/fpu: Drop fpregs lock before inheriting FPU permissions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007693 kcm: avoid potential race in kcm_tx_work

kcm: avoid potential race in kcmtxwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit 2526ac6b0f5a9b38e7e9073e37141cf78408078...

GSD-2022-1007690 dm ioctl: fix misbehavior if list_versions races with module loading

dm ioctl: fix misbehavior if listversions races with module loading This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007686 9p/trans_fd: always use O_NONBLOCK read/write

9p/transfd: always use ONONBLOCK read/write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007684 net/9p: use a dedicated spinlock for trans_fd

net/9p: use a dedicated spinlock for transfd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2022-1007679 usb: mon: make mmapped memory read only

usb: mon: make mmapped memory read only This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007678 nilfs2: fix leak of nilfs_root in case of writer thread creation failure

nilfs2: fix leak of nilfsroot in case of writer thread creation failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007672 regulator: qcom_rpm: Fix circular deferral regression

regulator: qcomrpm: Fix circular deferral regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007657 soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()

soc: qcom: smsm: Fix refcount leak bugs in qcomsmsmprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007615 nilfs2: fix use-after-free bug of struct nilfs_root

nilfs2: fix use-after-free bug of struct nilfsroot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007614 scsi: stex: Properly zero out the passthrough command structure

scsi: stex: Properly zero out the passthrough command structure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007607 sh: machvec: Use char[] for section boundaries

sh: machvec: Use char for section boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007604 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()

wifi: ath10k: add peer map clean up for peer delete in ath10kstastate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007598 drm/bridge: megachips: Fix a null pointer dereference bug

drm/bridge: megachips: Fix a null pointer dereference bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007578 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()

wifi: ath9k: avoid uninit memory read in ath9khtcrxmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007575 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007556 xhci: Remove device endpoints from bandwidth list when freeing the device

xhci: Remove device endpoints from bandwidth list when freeing the device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.298 by commit...

GSD-2022-1007531 ext4: avoid crash when inline data creation follows DIO write

ext4: avoid crash when inline data creation follows DIO write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007516 HSI: omap_ssi: Fix refcount leak in ssi_probe

HSI: omapssi: Fix refcount leak in ssiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007511 drivers: serial: jsm: fix some leaks in probe

drivers: serial: jsm: fix some leaks in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007473 mm: /proc/pid/smaps_rollup: fix no vma's null-deref

mm: /proc/pid/smapsrollup: fix no vma's null-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit...

GSD-2022-1007406 RDMA/rxe: Fix "kernel NULL pointer dereference" error

RDMA/rxe: Fix "kernel NULL pointer dereference" error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007404 md: Replace snprintf with scnprintf

md: Replace snprintf with scnprintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit 97238b88583c27c9d3b4a0cedb45f816523f17c3,...

GSD-2022-1007386 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007382 drm: Use size_t type for len variable in drm_copy_field()

drm: Use sizet type for len variable in drmcopyfield This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007366 nvmet-tcp: add bounds check on Transfer Tag

nvmet-tcp: add bounds check on Transfer Tag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007356 mm: /proc/pid/smaps_rollup: fix no vma's null-deref

mm: /proc/pid/smapsrollup: fix no vma's null-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.221 by commit...

GSD-2022-1007355 xhci: Remove device endpoints from bandwidth list when freeing the device

xhci: Remove device endpoints from bandwidth list when freeing the device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.223 by commit...

GSD-2022-1007317 xen/gntdev: Accommodate VMA splitting

xen/gntdev: Accommodate VMA splitting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...

GSD-2022-1007302 ext4: fix potential memory leak in ext4_fc_record_regions()

ext4: fix potential memory leak in ext4fcrecordregions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007291 mISDN: fix use-after-free bugs in l1oip timer handlers

mISDN: fix use-after-free bugs in l1oip timer handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1007270 RDMA/rxe: Fix "kernel NULL pointer dereference" error

RDMA/rxe: Fix "kernel NULL pointer dereference" error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...