13627 matches found
GSD-2022-1003738 powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/xics: fix refcount leak in icpopalinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003737 ARM: hisi: Add missing of_node_put after of_find_compatible_node
ARM: hisi: Add missing ofnodeput after offindcompatiblenode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003736 ARM: versatile: Add missing of_node_put in dcscb_init
ARM: versatile: Add missing ofnodeput in dcscbinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003735 soc: rockchip: Fix refcount leak in rockchip_grf_init
soc: rockchip: Fix refcount leak in rockchipgrfinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003734 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by...
GSD-2022-1003733 dlm: fix plock invalid read
dlm: fix plock invalid read This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit 49cd9eb7b9a7b88124b31e31f8e539acaf1b3a6d, it was...
GSD-2022-1003732 phy: qcom-qmp: fix struct clk leak on probe errors
phy: qcom-qmp: fix struct clk leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003731 bfq: Update cgroup information before merging bio
bfq: Update cgroup information before merging bio This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003730 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
coresight: cpu-debug: Replace mutex with mutextrylock on panic notifier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003729 RDMA/hfi1: Fix potential integer multiplication overflow errors
RDMA/hfi1: Fix potential integer multiplication overflow errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003728 tipc: check attribute length for bearer name
tipc: check attribute length for bearer name This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003727 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
net: ethernet: mtkethsoc: out of bounds read in mtkhwlrogetfdirentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003726 rtc: mt6397: check return value after calling platform_get_resource()
rtc: mt6397: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003725 tcp: tcp_rtx_synack() can be called from process context
tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003724 net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
net: dsa: lantiqgswip: Fix refcount leak in gswipgphyfwlist This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003723 firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
firmware: dmi-sysfs: Fix memory leak in dmisysfsregisterhandle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003722 phy: qcom-qmp: fix reset-controller leak on probe errors
phy: qcom-qmp: fix reset-controller leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003721 net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxxmdiosregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003720 watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
watchdog: ts4800wdt: Fix refcount leak in ts4800wdtprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003719 netfilter: nf_tables: memleak flow rule from commit path
netfilter: nftables: memleak flow rule from commit path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003718 ip_gre: test csum_start instead of transport header
ipgre: test csumstart instead of transport header This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003717 jffs2: fix memory leak in jffs2_do_fill_super
jffs2: fix memory leak in jffs2dofillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003716 bpf, arm64: Clear prog->jited_len along prog->jited
bpf, arm64: Clear prog-jitedlen along prog-jited This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003715 driver: base: fix UAF when driver_attach failed
driver: base: fix UAF when driverattach failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003714 net: altera: Fix refcount leak in altera_tse_mdio_create
net: altera: Fix refcount leak in alteratsemdiocreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003713 blk-iolatency: Fix inflight count imbalances and IO hangs on offline
blk-iolatency: Fix inflight count imbalances and IO hangs on offline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003712 xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
xen: unexport init-annotated xenxlatemapballoonedpages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003711 net: mdio: unexport __init-annotated mdio_bus_init()
net: mdio: unexport init-annotated mdiobusinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003710 ubi: ubi_create_volume: Fix use-after-free when volume creation failed
ubi: ubicreatevolume: Fix use-after-free when volume creation failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003709 ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
ata: pataocteoncf: Fix refcount leak in octeoncfprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003708 net: xfrm: unexport __init-annotated xfrm4_protocol_init()
net: xfrm: unexport init-annotated xfrm4protocolinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003707 usb: usbip: fix a refcount leak in stub_probe()
usb: usbip: fix a refcount leak in stubprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003706 driver core: fix deadlock in __device_attach
driver core: fix deadlock in deviceattach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003705 af_unix: Fix a data-race in unix_dgram_peer_wake_me().
afunix: Fix a data-race in unixdgrampeerwakeme. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003704 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
tcp: fix tcpmtupprobesuccess vs wrong sndcwnd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003703 net: ipv6: unexport __init-annotated seg6_hmac_init()
net: ipv6: unexport init-annotated seg6hmacinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003702 f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
f2fs: fix to do sanity check on block address in f2fsdozerorange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003701 efi: Do not import certificates from UEFI Secure Boot for T2 Macs
efi: Do not import certificates from UEFI Secure Boot for T2 Macs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003700 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
nfc: st21nfca: fix memory leaks in EVTTRANSACTION handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003699 f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
f2fs: fix to avoid f2fsbugon in decvalidnodecount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003698 ext4: avoid cycles in directory h-tree
ext4: avoid cycles in directory h-tree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003697 ext4: fix bug_on in ext4_writepages
ext4: fix bugon in ext4writepages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit 73fd5b19285197078ee8a2e651d75d5b094a4de9. F...
GSD-2022-1003696 fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped pages
fs-writeback: writebacksbinodes:Recalculate 'wrote' according skipped pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003695 drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
drm/etnaviv: check for reaped mapping in etnaviviommuunmapgem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003694 f2fs: fix to clear dirty inode in f2fs_evict_inode()
f2fs: fix to clear dirty inode in f2fsevictinode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003693 ext4: fix use-after-free in ext4_rename_dir_prepare
ext4: fix use-after-free in ext4renamedirprepare This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003692 rtl818x: Prevent using not initialized queues
rtl818x: Prevent using not initialized queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003691 ext4: fix warning in ext4_handle_inode_extension
ext4: fix warning in ext4handleinodeextension This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003690 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...
GSD-2022-1003689 ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
ocfs2: dlmfs: fix error handling of userdlmdestroylock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...