GSD-2021-1000239 iommu/mediatek: Always enable the clk on resume

iommu/mediatek: Always enable the clk on resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000070 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

net/sched: schfrag: fix stack OOB read while fragmenting IPv4 packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000335 PCI: endpoint: Fix NULL pointer dereference for ->get_features()

PCI: endpoint: Fix NULL pointer dereference for -getfeatures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000343 net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

net:emac/emac-mac: Fix a use after free in emacmactxbufsend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000128 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

GSD-2021-1000049 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.189 by commit...

GSD-2021-1000195 nbd: Fix NULL pointer in flush_workqueue

nbd: Fix NULL pointer in flushworkqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2023-1002422 pinctrl: single: fix potential NULL dereference

pinctrl: single: fix potential NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.306 by commit...

GSD-2023-1002421 net: USB: Fix wrong-direction WARNING in plusb.c

net: USB: Fix wrong-direction WARNING in plusb.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.306 by commit...

GSD-2023-1002402 aio: fix mremap after fork null-deref

aio: fix mremap after fork null-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.232 by commit 4326d0080f7e84fba775da41d158f46cf9d3f1c...

GSD-2023-1002400 mmc: sdio: fix possible resource leaks in some error paths

mmc: sdio: fix possible resource leaks in some error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.232 by commit...

GSD-2023-1002384 ALSA: hda: Do not unset preset when cleaning up codec

ALSA: hda: Do not unset preset when cleaning up codec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...

GSD-2023-1002372 net: sched: sch: Fix off by one in htb_activate_prios()

net: sched: sch: Fix off by one in htbactivateprios This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...

GSD-2023-1002369 btrfs: zlib: zero-initialize zlib workspace

btrfs: zlib: zero-initialize zlib workspace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.94 by commit...

GSD-2023-1002367 IB/IPoIB: Fix legacy IPoIB due to wrong number of queues

IB/IPoIB: Fix legacy IPoIB due to wrong number of queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.94 by commit...

GSD-2023-1002351 mmc: sdio: fix possible resource leaks in some error paths

mmc: sdio: fix possible resource leaks in some error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...

GSD-2023-1002347 nilfs2: fix underflow in second superblock position calculations

nilfs2: fix underflow in second superblock position calculations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...

GSD-2023-1002336 of: Make OF framebuffer device names unique

of: Make OF framebuffer device names unique This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.12 by commit...

GSD-2023-1002333 riscv: stacktrace: Fix missing the first frame

riscv: stacktrace: Fix missing the first frame This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.12 by commit...

GSD-2023-1002319 s390/decompressor: specify __decompress() buf len to avoid overflow

s390/decompressor: specify decompress buf len to avoid overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.13 by commit...

GSD-2023-1002315 kasan: fix Oops due to missing calls to kasan_arch_is_ready()

kasan: fix Oops due to missing calls to kasanarchisready This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.13 by commit...

GSD-2023-1002304 net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()

net: openvswitch: fix possible memory leak in ovsmetercmdset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.13 by commit...

GSD-2023-1002284 usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait

usb: gadget: ffs: Prevent race during ffsep0queuewait This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.305 by commit...

GSD-2023-1002270 f2fs: let's avoid panic if extent_tree is not created

f2fs: let's avoid panic if extenttree is not created This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.271 by commit...

GSD-2023-1002262 EDAC/highbank: Fix memory leak in highbank_mc_probe()

EDAC/highbank: Fix memory leak in highbankmcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.272 by commit...

GSD-2023-1002261 bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation

bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.272 by commi...

GSD-2023-1002240 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1002237 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()

nfc: pn533: Wait for outurb's completion in pn533usbsendframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1002235 efi: fix NULL-deref in init error path

efi: fix NULL-deref in init error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

GSD-2023-1002232 nilfs2: fix general protection fault in nilfs_btree_insert()

nilfs2: fix general protection fault in nilfsbtreeinsert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.230 by commit...

GSD-2023-1002217 net/sched: sch_taprio: fix possible use-after-free

net/sched: schtaprio: fix possible use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...

GSD-2023-1002212 HID: betop: check shape of output reports

HID: betop: check shape of output reports This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...

GSD-2023-1002207 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info

EDAC/qcom: Do not pass llccdrivdata as edacdevicectlinfo's pvtinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...

GSD-2023-1002204 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()

ipv4: prevent potential spectre v1 gadget in ipmetricsconvert This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.231 by commit...

GSD-2023-1002192 ixgbe: fix pci device refcount leak

ixgbe: fix pci device refcount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit 112df4cd2b09acd64bcd18f5ef83ba5d07b34bf0...

GSD-2023-1002171 btrfs: fix race between quota rescan and disable leading to NULL pointer deref

btrfs: fix race between quota rescan and disable leading to NULL pointer deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by comm...

GSD-2023-1002146 cifs: Fix oops due to uncleared server->smbd_conn in reconnect

cifs: Fix oops due to uncleared server-smbdconn in reconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002143 netlink: prevent potential spectre v1 gadgets

netlink: prevent potential spectre v1 gadgets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.166 by commit...

GSD-2023-1002135 net: fix NULL pointer in skb_segment_list

net: fix NULL pointer in skbsegmentlist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.167 by commit...

GSD-2023-1002132 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

netfilter: nftpayload: incorrect arithmetics when fetching VLAN header bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1002129 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops

s390/cpumsf: add READONCE semantics to compare and swap loops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1002119 net/sched: act_mpls: Fix warning during failed attribute validation

net/sched: actmpls: Fix warning during failed attribute validation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1002118 platform/surface: aggregator: Add missing call to ssam_request_sync_free()

platform/surface: aggregator: Add missing call to ssamrequestsyncfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.89 by commit...

GSD-2023-1002113 Bluetooth: hci_qca: Fix driver shutdown on closed serdev

Bluetooth: hciqca: Fix driver shutdown on closed serdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...

GSD-2023-1002105 misc: fastrpc: Don't remove map on creater_process and device_release

misc: fastrpc: Don't remove map on createrprocess and devicerelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...

GSD-2023-1002077 usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait

usb: gadget: ffs: Prevent race during ffsep0queuewait This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1002073 l2tp: prevent lockdep issue in l2tp_tunnel_register()

l2tp: prevent lockdep issue in l2tptunnelregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1002071 ptdma: pt_core_execute_cmd() should use spinlock

ptdma: ptcoreexecutecmd should use spinlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1002051 bpf: Skip task with pid=1 in send_signal_common()

bpf: Skip task with pid=1 in sendsignalcommon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.92 by commit...

GSD-2023-1002041 squashfs: harden sanity check in squashfs_read_xattr_id_table

squashfs: harden sanity check in squashfsreadxattridtable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...