GSD-2023-1001372 macintosh: fix possible memory leak in macio_add_one_device()

macintosh: fix possible memory leak in macioaddonedevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001371 powerpc/52xx: Fix a resource leak in an error handling path

powerpc/52xx: Fix a resource leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001370 cxl: Fix refcount leak in cxl_calc_capp_routing

cxl: Fix refcount leak in cxlcalccapprouting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001369 selftests/powerpc: Fix resource leaks

selftests/powerpc: Fix resource leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001368 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()

remoteproc: sysmon: fix memory leak in qcomaddsysmonsubdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001367 remoteproc: qcom_q6v5_pas: detach power domains on remove

remoteproc: qcomq6v5pas: detach power domains on remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001366 nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure

nfsd: under NFSv4.1, fix double svcxprtput on rpccreate failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001365 nfc: pn533: Clear nfc_target before being used

nfc: pn533: Clear nfctarget before being used This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001364 r6040: Fix kmemleak in probe and remove

r6040: Fix kmemleak in probe and remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001363 skbuff: Account for tail adjustment during pull operations

skbuff: Account for tail adjustment during pull operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001362 mailbox: zynq-ipi: fix error handling while device_register() fails

mailbox: zynq-ipi: fix error handling while deviceregister fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001361 net: stream: purge sk_error_queue in sk_stream_kill_queues()

net: stream: purge skerrorqueue in skstreamkillqueues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001360 rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()

rcu: Fix thiscpuread lockdep warning in rcuforcequiescentstate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001359 arm64: make is_ttbrX_addr() noinstr-safe

arm64: make isttbrXaddr noinstr-safe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit 0461a8c278b8fe74d19e58bc224327bef645e29...

GSD-2023-1001358 video: hyperv_fb: Avoid taking busy spinlock on panic path

video: hypervfb: Avoid taking busy spinlock on panic path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001357 x86/hyperv: Remove unregister syscore call from Hyper-V cleanup

x86/hyperv: Remove unregister syscore call from Hyper-V cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001356 binfmt_misc: fix shift-out-of-bounds in check_special_flags

binfmtmisc: fix shift-out-of-bounds in checkspecialflags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001355 fs: jfs: fix shift-out-of-bounds in dbAllocAG

fs: jfs: fix shift-out-of-bounds in dbAllocAG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001354 udf: Avoid double brelse() in udf_rename()

udf: Avoid double brelse in udfrename This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001353 fs: jfs: fix shift-out-of-bounds in dbDiscardAG

fs: jfs: fix shift-out-of-bounds in dbDiscardAG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001352 ACPICA: Fix error code path in acpi_ds_call_control_method()

ACPICA: Fix error code path in acpidscallcontrolmethod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001351 nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()

nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001350 nilfs2: fix shift-out-of-bounds due to too large exponent of block size

nilfs2: fix shift-out-of-bounds due to too large exponent of block size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001349 acct: fix potential integer overflow in encode_comp_t()

acct: fix potential integer overflow in encodecompt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001348 hfs: fix OOB Read in __hfs_brec_find

hfs: fix OOB Read in hfsbrecfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit 4fd3a11804c8877ff11fec59c5c53f1635331e3e. F...

GSD-2023-1001347 brcmfmac: return error when getting invalid max_flowrings from dongle

brcmfmac: return error when getting invalid maxflowrings from dongle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001346 wifi: ath9k: verify the expected usb_endpoints are present

wifi: ath9k: verify the expected usbendpoints are present This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001345 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out

wifi: ar5523: Fix use-after-free on ar5523cmd timed out This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001344 ipmi: fix memleak when unload ipmi driver

ipmi: fix memleak when unload ipmi driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001343 drm/amd/display: prevent memory leak

drm/amd/display: prevent memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4 by commit 104c307147ad379617472dd91a5bcb368d72bd6d. Fo...

GSD-2023-1001342 qed (gcc13): use u16 for fid to be big enough

qed gcc13: use u16 for fid to be big enough This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001341 bpf: make sure skb->len != 0 when redirecting to a tunneling device

bpf: make sure skb-len != 0 when redirecting to a tunneling device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001340 net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()

net: ethernet: ti: Fix return type of netcpndostartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001339 hamradio: baycom_epp: Fix return type of baycom_send_packet()

hamradio: baycomepp: Fix return type of baycomsendpacket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001338 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()

wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001337 igb: Do not free q_vector unless new one was allocated

igb: Do not free qvector unless new one was allocated This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001336 drm/amdgpu: Fix type of second parameter in trans_msg() callback

drm/amdgpu: Fix type of second parameter in transmsg callback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001335 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback

drm/amdgpu: Fix type of second parameter in odneditdpmtable callback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001334 s390/ctcm: Fix return type of ctc{mp,}m_tx()

s390/ctcm: Fix return type of ctcmp,mtx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001333 s390/netiucv: Fix return type of netiucv_tx()

s390/netiucv: Fix return type of netiucvtx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001332 s390/lcs: Fix return type of lcs_start_xmit()

s390/lcs: Fix return type of lcsstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001331 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

drivers/md/md-bitmap: check the return value of mdbitmapgetcounter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001330 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001329 drm/amd/display: fix array index out of bound error in bios parser

drm/amd/display: fix array index out of bound error in bios parser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001328 net: add atomic_long_t to net_device_stats fields

net: add atomiclongt to netdevicestats fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001327 mrp: introduce active flags to prevent UAF when applicant uninit

mrp: introduce active flags to prevent UAF when applicant uninit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001326 ppp: associate skb with a device at tx

ppp: associate skb with a device at tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001325 bpf: Prevent decl_tag from being referenced in func_proto arg

bpf: Prevent decltag from being referenced in funcproto arg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001324 ethtool: avoiding integer overflow in ethtool_phys_id()

ethtool: avoiding integer overflow in ethtoolphysid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001323 media: dvb-frontends: fix leak of memory fw

media: dvb-frontends: fix leak of memory fw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...