13627 matches found
GSD-2022-1003988 net: phy: micrel: Allow probing without .driver_data
net: phy: micrel: Allow probing without .driverdata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003987 um: Fix out-of-bounds read in LDT setup
um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003986 eth: tg3: silence the GCC 12 array-bounds warning
eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003985 ARM: versatile: Add missing of_node_put in dcscb_init
ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003984 RDMA/hfi1: Fix potential integer multiplication overflow errors
RDMA/hfi1: Fix potential integer multiplication overflow errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003983 phy: qcom-qmp: fix struct clk leak on probe errors
phy: qcom-qmp: fix struct clk leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003982 fs: jfs: fix possible NULL pointer dereference in dbFree()
fs: jfs: fix possible NULL pointer dereference in dbFree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003981 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 b...
GSD-2022-1003980 phy: qcom-qmp: fix reset-controller leak on probe errors
phy: qcom-qmp: fix reset-controller leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003979 ARM: hisi: Add missing of_node_put after of_find_compatible_node
ARM: hisi: Add missing ofnodeput after offindcompatiblenode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003978 usb: usbip: fix a refcount leak in stub_probe()
usb: usbip: fix a refcount leak in stubprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003977 PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
PCI: Avoid pcidevlock AB/BA deadlock with sriovnumvfsstore This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003976 powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/xics: fix refcount leak in icpopalinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003975 RDMA/hfi1: Prevent panic when SDMA is disabled
RDMA/hfi1: Prevent panic when SDMA is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003974 tty: goldfish: Use tty_port_destroy() to destroy port
tty: goldfish: Use ttyportdestroy to destroy port This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003973 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003972 firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
firmware: dmi-sysfs: Fix memory leak in dmisysfsregisterhandle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003971 rtc: mt6397: check return value after calling platform_get_resource()
rtc: mt6397: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003970 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
net: ethernet: mtkethsoc: out of bounds read in mtkhwlrogetfdirentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003969 soc: rockchip: Fix refcount leak in rockchip_grf_init
soc: rockchip: Fix refcount leak in rockchipgrfinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003968 jffs2: fix memory leak in jffs2_do_fill_super
jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003967 ubi: ubi_create_volume: Fix use-after-free when volume creation failed
ubi: ubicreatevolume: Fix use-after-free when volume creation failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003966 net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxxmdiosregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003965 tcp: tcp_rtx_synack() can be called from process context
tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003964 ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
ata: pataocteoncf: Fix refcount leak in octeoncfprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003963 net: ipv6: unexport __init-annotated seg6_hmac_init()
net: ipv6: unexport init-annotated seg6hmacinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003962 net: mdio: unexport __init-annotated mdio_bus_init()
net: mdio: unexport init-annotated mdiobusinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003961 net: xfrm: unexport __init-annotated xfrm4_protocol_init()
net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003960 net: altera: Fix refcount leak in altera_tse_mdio_create
net: altera: Fix refcount leak in alteratsemdiocreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003959 fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped pages
fs-writeback: writebacksbinodes:Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003958 ext4: fix use-after-free in ext4_rename_dir_prepare
ext4: fix use-after-free in ext4renamedirprepare This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003957 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
tcp: fix tcpmtupprobesuccess vs wrong sndcwnd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003956 ext4: fix bug_on in ext4_writepages
ext4: fix bugon in ext4writepages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit b2b78f5bf2d453dda3903955efee059260787a42...
GSD-2022-1003955 ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
ocfs2: dlmfs: fix error handling of userdlmdestroylock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003954 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003953 ext4: avoid cycles in directory h-tree
ext4: avoid cycles in directory h-tree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003952 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003951 rtl818x: Prevent using not initialized queues
rtl818x: Prevent using not initialized queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003950 tracing: Fix sleeping function called from invalid context on RT kernel
tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003949 mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
mips: cpc: Fix refcount leak in mipscpcdefaultphysbase This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003948 xprtrdma: treat all calls not a bcall when bc_serv is NULL
xprtrdma: treat all calls not a bcall when bcserv is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003947 video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()
video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xxgcuprobe/remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by...
GSD-2022-1003946 iio: dummy: iio_simple_dummy: check the return value of kstrdup()
iio: dummy: iiosimpledummy: check the return value of kstrdup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003945 USB: host: isp116x: check return value after calling platform_get_resource()
USB: host: isp116x: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003944 tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
tty: synclinkgt: Fix null-pointer-dereference in slgtclean This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003943 drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
drivers: staging: rtl8192e: Fix deadlock in rtllibbeaconsstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003942 tty: Fix a possible resource leak in icom_probe
tty: Fix a possible resource leak in icomprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003941 usb: dwc2: gadget: don't reset gadget's driver->bus
usb: dwc2: gadget: don't reset gadget's driver-bus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003940 drivers: tty: serial: Fix deadlock in sa1100_set_termios()
drivers: tty: serial: Fix deadlock in sa1100settermios This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...
GSD-2022-1003939 extcon: Modify extcon device to be created after driver data is set
extcon: Modify extcon device to be created after driver data is set This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...