GSD-2023-1000972 media: dvbdev: fix refcnt bug

media: dvbdev: fix refcnt bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit 2471a44769b53effd8f602ac87ca47a5d8710edb, it wa...

GSD-2023-1000971 crypto: hisilicon/hpre - fix resource leak in remove process

crypto: hisilicon/hpre - fix resource leak in remove process This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000970 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs

scsi: lpfc: Fix hard lockup when reading the rxmonitor from debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000969 scsi: ufs: Reduce the START STOP UNIT timeout

scsi: ufs: Reduce the START STOP UNIT timeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000968 nvme-pci: fix mempool alloc size

nvme-pci: fix mempool alloc size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit 9141144b37f30e3e7fa024bcfa0a13011e546ba9, it...

GSD-2023-1000967 scsi: elx: libefc: Fix second parameter type in state callbacks

scsi: elx: libefc: Fix second parameter type in state callbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000966 block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq

block, bfq: fix uaf for bfqq in bfqexiticqbfqq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000965 hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()

hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000964 drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()

drm/fsl-dcu: Fix return type of fsldcudrmconnectormodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000963 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()

drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000962 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()

orangefs: Fix kmemleak in orangefspreparedebugfshelpstring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000961 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()

orangefs: Fix kmemleak in orangefskernel,clientdebuginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000960 security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

security: Restrict CONFIGZEROCALLUSEDREGS to gcc or clang 15.0.6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000959 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range

btrfs: do not BUGON on ENOMEM when dropping extent items for a range This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000958 pnode: terminate at peers of source

pnode: terminate at peers of source This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit c24cc476acd8bccb5af54849aac5e779d8223bf5,...

GSD-2023-1000957 pstore/zone: Use GFP_ATOMIC to allocate zone buffer

pstore/zone: Use GFPATOMIC to allocate zone buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000956 mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING

mmc: vub300: fix warning - do not call blocking ops when !TASKRUNNING This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000955 mm, compaction: fix fast_isolate_around() to stay within boundaries

mm, compaction: fix fastisolatearound to stay within boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000954 tpm: acpi: Call acpi_put_table() to fix memory leak

tpm: acpi: Call acpiputtable to fix memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000953 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak

tpm: tpmcrb: Add the missed acpiputtable to fix memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000952 SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails

SUNRPC: Don't leak netobj memory when gssreadproxyverf fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000951 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak

tpm: tpmtis: Add the missed acpiputtable to fix memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000950 fs/ntfs3: Validate BOOT record_size

fs/ntfs3: Validate BOOT recordsize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit af7a195deae349f15baa765d000a5188920d61dd...

GSD-2023-1000949 phy: qcom-qmp-combo: fix out-of-bounds clock access

phy: qcom-qmp-combo: fix out-of-bounds clock access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000948 fs/ntfs3: Add overflow check for attribute size

fs/ntfs3: Add overflow check for attribute size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000947 btrfs: fix extent map use-after-free when handling missing device in read_one_chunk

btrfs: fix extent map use-after-free when handling missing device in readonechunk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by...

GSD-2023-1000946 fs/ntfs3: Validate data run offset

fs/ntfs3: Validate data run offset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit de5e0955248ff90a2ae91e7f5c108392b52152d0...

GSD-2023-1000945 fs/ntfs3: Add null pointer check to attr_load_runs_vcn

fs/ntfs3: Add null pointer check to attrloadrunsvcn This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000944 x86/MCE/AMD: Clear DFR errors found in THR handler

x86/MCE/AMD: Clear DFR errors found in THR handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000943 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path

fs/ntfs3: Fix memory leak on ntfsfillsuper error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000942 fs/ntfs3: Add null pointer check for inode operations

fs/ntfs3: Add null pointer check for inode operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000941 cpufreq: Init completion before kobject_init_and_add()

cpufreq: Init completion before kobjectinitandadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000940 fs/ntfs3: Validate attribute name offset

fs/ntfs3: Validate attribute name offset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000939 media: s5p-mfc: Clear workbit to handle error condition

media: s5p-mfc: Clear workbit to handle error condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000938 fs/ntfs3: Validate buffer length while parsing index

fs/ntfs3: Validate buffer length while parsing index This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000937 dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata

dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000936 fs/ntfs3: Validate resident attribute name

fs/ntfs3: Validate resident attribute name This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000935 dm thin: Use last transaction's pmd->root when commit failed

dm thin: Use last transaction's pmd-root when commit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000934 mptcp: use proper req destructor for IPv6

mptcp: use proper req destructor for IPv6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000933 fs/ntfs3: Fix slab-out-of-bounds read in run_unpack

fs/ntfs3: Fix slab-out-of-bounds read in rununpack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000932 dm thin: Fix UAF in run_timer_softirq()

dm thin: Fix UAF in runtimersoftirq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit 34cd15d83b7206188d440b29b68084fcafde9395,...

GSD-2023-1000931 fs/ntfs3: Validate index root when initialize NTFS security

fs/ntfs3: Validate index root when initialize NTFS security This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000930 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()

fs/ntfs3: Use GFPNOWARN allocation at wndinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000929 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()

fs/ntfs3: Use GFPNOWARN allocation at ntfsfillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000928 dm integrity: Fix UAF in dm_integrity_dtr()

dm integrity: Fix UAF in dmintegritydtr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000927 fs/ntfs3: Delete duplicate condition in ntfs_read_mft()

fs/ntfs3: Delete duplicate condition in ntfsreadmft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000926 dm cache: Fix UAF in destroy()

dm cache: Fix UAF in destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit d2a0b298ebf83ab6236f66788a3541e91ce75a70, it was...

GSD-2023-1000925 dm clone: Fix UAF in clone_dtr()

dm clone: Fix UAF in clonedtr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit 856edd0e92f3fe89606b704c86a93daedddfe6ec, it wa...

GSD-2023-1000924 fs/ntfs3: Fix slab-out-of-bounds in r_page

fs/ntfs3: Fix slab-out-of-bounds in rpage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000923 objtool: Fix SEGFAULT

objtool: Fix SEGFAULT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit 23a249b1185cdd5bfb6971d1608ba49e589f2288. For more...