GSD-2022-1007111 staging: greybus: audio_helper: remove unused and wrong debugfs usage

staging: greybus: audiohelper: remove unused and wrong debugfs usage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1007085 drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()

drm/vmwgfx: Fix memory leak in vmwmksstataddioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1007059 scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()

scsi: libsas: Fix use-after-free bug in smpexecutetasksg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1007056 clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe

clk: ti: dra7-atl: Fix reference leak in ofdra7atlclkprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1007014 dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow

dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006977 net: sched: cake: fix null pointer access issue when cake_init() fails

net: sched: cake: fix null pointer access issue when cakeinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.76 by commit...

GSD-2022-1006972 iommu/vt-d: Clean up si_domain in the init_dmars() error path

iommu/vt-d: Clean up sidomain in the initdmars error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.76 by commit...

GSD-2022-1006936 usb: mon: make mmapped memory read only

usb: mon: make mmapped memory read only This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1 by commit 08e2c70e549b77f5f3af9c76da00779d5756f99...

GSD-2022-1006932 nilfs2: fix leak of nilfs_root in case of writer thread creation failure

nilfs2: fix leak of nilfsroot in case of writer thread creation failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006928 scsi: stex: Properly zero out the passthrough command structure

scsi: stex: Properly zero out the passthrough command structure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006911 net: thunderbolt: Enable DMA paths only after rings are enabled

net: thunderbolt: Enable DMA paths only after rings are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006904 arm64: mte: move register initialization to C

arm64: mte: move register initialization to C This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006899 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 273f6a4f71be12e2ec80a4919837d6e4fa933a04, it...

GSD-2022-1006894 NFSD: Protect against send buffer overflow in NFSv3 READ

NFSD: Protect against send buffer overflow in NFSv3 READ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006876 tracing: Fix reading strings from synthetic events

tracing: Fix reading strings from synthetic events This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006848 sctp: handle the error returned from sctp_auth_asoc_init_active_key

sctp: handle the error returned from sctpauthasocinitactivekey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006838 drm/msm: Make .remove and .shutdown HW shutdown consistent

drm/msm: Make .remove and .shutdown HW shutdown consistent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006815 media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init

media: xilinx: vipp: Fix refcount leak in xvipgraphdmainit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006808 md: Replace snprintf with scnprintf

md: Replace snprintf with scnprintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit f95825c4e51cf9a653b0ef947ac78401fc9d3a40, i...

GSD-2022-1006799 scsi: pm8001: Fix running_req for internal abort commands

scsi: pm8001: Fix runningreq for internal abort commands This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006776 x86/entry: Work around Clang __bdos() bug

x86/entry: Work around Clang bdos bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 5ef8f5b73cd1096b12b541281733f0db14b73c89...

GSD-2022-1006719 io_uring: fix CQE reordering

iouring: fix CQE reordering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 8d8ffa39bef0e26204a6c780afd0edc9099ece5d. For more...

GSD-2022-1006712 hwmon (occ): Retry for checksum failure

hwmon occ: Retry for checksum failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit d94cbc3725e95579ab1aceb51430151ef9805bef...

GSD-2022-1006693 i40e: Fix DMA mappings leak

i40e: Fix DMA mappings leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit 5f499596dfa3db9b3172645b6de9e1096a669c95, it was...

GSD-2022-1006683 net: hsr: avoid possible NULL deref in skb_clone()

net: hsr: avoid possible NULL deref in skbclone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

GSD-2022-1006681 nvme-hwmon: kmalloc the NVME SMART log buffer

nvme-hwmon: kmalloc the NVME SMART log buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

GSD-2022-1006603 mm/slub: fix to return errno if kmalloc() fails

mm/slub: fix to return errno if kmalloc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.215 by commit...

GSD-2022-1006580 s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

s390/dasd: fix Oops in dasdaliasgetstartdev due to missing pavgroup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.146 by commit...

GSD-2022-1006557 netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()

netfilter: nftables: fix percpu memory leak at nftablesaddchain This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006532 dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()

dmaengine: ti: k3-udma-private: Fix refcount leak bug in ofxudmadevget This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

GSD-2022-1006473 net/sched: taprio: avoid disabling offload when it was never enabled

net/sched: taprio: avoid disabling offload when it was never enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

GSD-2022-1006468 bnxt: prevent skb UAF after handing over to PTP worker

bnxt: prevent skb UAF after handing over to PTP worker This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

GSD-2022-1006427 drm/radeon: add a force flush to delay work when radeon

drm/radeon: add a force flush to delay work when radeon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.213 by commit...

GSD-2022-1006397 of: fdt: fix off-by-one error in unflatten_dt_nodes()

of: fdt: fix off-by-one error in unflattendtnodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.145 by commit...

GSD-2022-1006392 drm/gem: Fix GEM handle release errors

drm/gem: Fix GEM handle release errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006390 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006378 RDMA/srp: Set scmnd->result only when scmnd is not NULL

RDMA/srp: Set scmnd-result only when scmnd is not NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006364 wifi: mt76: mt7921e: fix crash in chip reset fail

wifi: mt76: mt7921e: fix crash in chip reset fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

GSD-2022-1006347 scsi: mpt3sas: Fix use-after-free warning

scsi: mpt3sas: Fix use-after-free warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

GSD-2022-1006303 usb: host: ohci-ppc-of: Fix refcount leak bug

usb: host: ohci-ppc-of: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006299 kprobes: don't call disarm_kprobe() for disabled kprobes

kprobes: don't call disarmkprobe for disabled kprobes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.327 by commit...

GSD-2022-1006295 ext4: avoid resizing to a partial cluster size

ext4: avoid resizing to a partial cluster size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006293 mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start

mips: cavium-octeon: Fix missing ofnodeput in octeon2usbclocksstart This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006268 cpufreq: zynq: Fix refcount leak in zynq_get_revision

cpufreq: zynq: Fix refcount leak in zynqgetrevision This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006257 wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()

wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965rsfilllinkcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by comm...

GSD-2022-1006253 wifi: libertas: Fix possible refcount leak in if_usb_probe()

wifi: libertas: Fix possible refcount leak in ifusbprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006248 mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

mmc: sdhci-of-esdhc: Fix refcount leak in esdhcsignalvoltageswitch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006242 ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe

ASoC: mediatek: mt8173: Fix refcount leak in mt8173rt5650rt5676devprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006216 clk: qcom: ipq8074: dont disable gcc_sleep_clk_src

clk: qcom: ipq8074: dont disable gccsleepclksrc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006215 gadgetfs: ep_io - wait until IRQ finishes

gadgetfs: epio - wait until IRQ finishes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...