GSD-2022-1005789 net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005788 stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove()

stmmac: intel: Add a missing clkdisableunprepare call in intelethpciremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005787 igb: Add lock to avoid data race

igb: Add lock to avoid data race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit 0f516dcd1456b18b56a7de0c1f67b8a4aa54c2ef, i...

GSD-2022-1005786 drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()

drm/meson: Fix refcount bugs in mesonvpuhasavailableconnectors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005785 drm/sun4i: dsi: Prevent underflow when computing packet sizes

drm/sun4i: dsi: Prevent underflow when computing packet sizes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005784 irqchip/tegra: Fix overflow implicit truncation warnings

irqchip/tegra: Fix overflow implicit truncation warnings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005783 usb: cdns3 fix use-after-free at workaround 2

usb: cdns3 fix use-after-free at workaround 2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005782 usb: host: ohci-ppc-of: Fix refcount leak bug

usb: host: ohci-ppc-of: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005781 usb: renesas: Fix refcount leak bug

usb: renesas: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit 9790a5a4f07f38a5add85ec58c44797d3a7c3677...

GSD-2022-1005780 drm/meson: Fix overflow implicit truncation warnings

drm/meson: Fix overflow implicit truncation warnings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005779 scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input

scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by...

GSD-2022-1005778 vboxguest: Do not use devm for irq

vboxguest: Do not use devm for irq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit eddb352a807d16682ac73f6e5c2ab0a7fe1c139e...

GSD-2022-1005777 gadgetfs: ep_io - wait until IRQ finishes

gadgetfs: epio - wait until IRQ finishes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005776 clk: qcom: ipq8074: dont disable gcc_sleep_clk_src

clk: qcom: ipq8074: dont disable gccsleepclksrc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005775 cxl: Fix a memory leak in an error handling path

cxl: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005774 um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups

um: add "noreboot" command line option for PANICTIMEOUT=-1 setups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005773 csky/kprobe: reclaim insn_slot on kprobe unregistration

csky/kprobe: reclaim insnslot on kprobe unregistration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005772 dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed

dmaengine: sprd: Cleanup in .remove after pmruntimegetsync failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005771 ext4: avoid remove directory when directory is corrupted

ext4: avoid remove directory when directory is corrupted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005770 drivers:md:fix a potential use-after-free bug

drivers:md:fix a potential use-after-free bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005769 ext4: avoid resizing to a partial cluster size

ext4: avoid resizing to a partial cluster size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005768 lib/list_debug.c: Detect uninitialized lists

lib/listdebug.c: Detect uninitialized lists This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005767 mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start

mips: cavium-octeon: Fix missing ofnodeput in octeon2usbclocksstart This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005766 tty: serial: Fix refcount leak bug in ucc_uart.c

tty: serial: Fix refcount leak bug in uccuart.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005765 kbuild: dummy-tools: avoid tmpdir leak in dummy gcc

kbuild: dummy-tools: avoid tmpdir leak in dummy gcc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005764 xfrm: fix refcount leak in __xfrm_policy_check()

xfrm: fix refcount leak in xfrmpolicycheck This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005763 xfrm: policy: fix metadata dst->dev xmit null pointer dereference

xfrm: policy: fix metadata dst-dev xmit null pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005762 RISC-V: Add fast call path of crash_kexec()

RISC-V: Add fast call path of crashkexec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005761 kprobes: don't call disarm_kprobe() for disabled kprobes

kprobes: don't call disarmkprobe for disabled kprobes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

GSD-2022-1005760 ALSA: timer: Use deferred fasync helper

ALSA: timer: Use deferred fasync helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005759 NFSv4.2 fix problems with __nfs42_ssc_open

NFSv4.2 fix problems with nfs42sscopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005758 rose: check NULL rose_loopback_neigh->loopback

rose: check NULL roseloopbackneigh-loopback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005757 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005756 powerpc/64: Init jump labels before parse_early_param()

powerpc/64: Init jump labels before parseearlyparam This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005755 f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()

f2fs: fix to avoid use f2fsbugon in f2fsnewnodepage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005754 ice: xsk: prohibit usage of non-balanced queue id

ice: xsk: prohibit usage of non-balanced queue id This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005753 smb3: check xattr value length earlier

smb3: check xattr value length earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005752 video: fbdev: i740fb: Check the argument of i740_calc_vclk()

video: fbdev: i740fb: Check the argument of i740calcvclk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005751 net: Fix data-races around weight_p and dev_weight_[rt]x_bias.

net: Fix data-races around weightp and devweightrtxbias. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005750 net: Fix data-races around netdev_tstamp_prequeue.

net: Fix data-races around netdevtstampprequeue. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005749 net: Fix a data-race around sysctl_tstamp_allow_data.

net: Fix a data-race around sysctltstampallowdata. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005748 net: Fix a data-race around sysctl_net_busy_poll.

net: Fix a data-race around sysctlnetbusypoll. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005747 net: Fix a data-race around netdev_budget.

net: Fix a data-race around netdevbudget. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005746 net: Fix a data-race around sysctl_net_busy_read.

net: Fix a data-race around sysctlnetbusyread. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005745 net: Fix a data-race around netdev_budget_usecs.

net: Fix a data-race around netdevbudgetusecs. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005744 net: Fix data-races around sysctl_devconf_inherit_init_net.

net: Fix data-races around sysctldevconfinheritinitnet. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005743 net: Fix data-races around sysctl_fb_tunnels_only_for_init_net.

net: Fix data-races around sysctlfbtunnelsonlyforinitnet. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005742 rxrpc: Fix locking in rxrpc's sendmsg

rxrpc: Fix locking in rxrpc's sendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005741 perf/x86/lbr: Enable the branch type for the Arch LBR by default

perf/x86/lbr: Enable the branch type for the Arch LBR by default This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

GSD-2022-1005740 s390: fix double free of GS and RI CBs on fork() failure

s390: fix double free of GS and RI CBs on fork failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...