GSD-2023-1000622 bpf: prevent leak of lsm program after failed attach

bpf: prevent leak of lsm program after failed attach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000621 net: enetc: avoid buffer leaks on xdp_do_redirect() failure

net: enetc: avoid buffer leaks on xdpdoredirect failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000620 devlink: hold region lock when flushing snapshots

devlink: hold region lock when flushing snapshots This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000619 devlink: protect devlink dump by the instance lock

devlink: protect devlink dump by the instance lock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000618 skbuff: Account for tail adjustment during pull operations

skbuff: Account for tail adjustment during pull operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000617 mailbox: zynq-ipi: fix error handling while device_register() fails

mailbox: zynq-ipi: fix error handling while deviceregister fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000616 net: stream: purge sk_error_queue in sk_stream_kill_queues()

net: stream: purge skerrorqueue in skstreamkillqueues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000615 cifs: don't leak -ENOMEM in smb2_open_file()

cifs: don't leak -ENOMEM in smb2openfile This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000614 rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()

rcu: Fix thiscpuread lockdep warning in rcuforcequiescentstate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000613 arm64: make is_ttbrX_addr() noinstr-safe

arm64: make isttbrXaddr noinstr-safe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit f6cd079bb223312256428624af1e53fc5a291dd4...

GSD-2023-1000612 ARM: dts: aspeed: rainier,everest: Move reserved memory regions

ARM: dts: aspeed: rainier,everest: Move reserved memory regions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000611 video: hyperv_fb: Avoid taking busy spinlock on panic path

video: hypervfb: Avoid taking busy spinlock on panic path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000610 x86/hyperv: Remove unregister syscore call from Hyper-V cleanup

x86/hyperv: Remove unregister syscore call from Hyper-V cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000609 binfmt_misc: fix shift-out-of-bounds in check_special_flags

binfmtmisc: fix shift-out-of-bounds in checkspecialflags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000608 fs: jfs: fix shift-out-of-bounds in dbAllocAG

fs: jfs: fix shift-out-of-bounds in dbAllocAG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000607 udf: Avoid double brelse() in udf_rename()

udf: Avoid double brelse in udfrename This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 4fca09045509f5bde8fc28e68fbca38cb4bdcf2e...

GSD-2023-1000606 jfs: Fix fortify moan in symlink

jfs: Fix fortify moan in symlink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 8fec5ff666853739a43d44269ba3e02c5aaff6ad. For...

GSD-2023-1000605 fs: jfs: fix shift-out-of-bounds in dbDiscardAG

fs: jfs: fix shift-out-of-bounds in dbDiscardAG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000604 ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value

ACPI: processor: idle: Check acpifetchacpidev return value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000603 ACPICA: Fix error code path in acpi_ds_call_control_method()

ACPICA: Fix error code path in acpidscallcontrolmethod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000602 nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()

nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000601 nilfs2: fix shift-out-of-bounds due to too large exponent of block size

nilfs2: fix shift-out-of-bounds due to too large exponent of block size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000600 acct: fix potential integer overflow in encode_comp_t()

acct: fix potential integer overflow in encodecompt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000599 x86/apic: Handle no CONFIG_X86_X2APIC on systems with x2APIC enabled by BIOS

x86/apic: Handle no CONFIGX86X2APIC on systems with x2APIC enabled by BIOS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000598 hfs: fix OOB Read in __hfs_brec_find

hfs: fix OOB Read in hfsbrecfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit e9e692917c6e10a7066c7a6d092dcdc3d4e329f3. For...

GSD-2023-1000597 media: imx-jpeg: Disable useless interrupt to avoid kernel panic

media: imx-jpeg: Disable useless interrupt to avoid kernel panic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000596 brcmfmac: return error when getting invalid max_flowrings from dongle

brcmfmac: return error when getting invalid maxflowrings from dongle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000595 wifi: ath9k: verify the expected usb_endpoints are present

wifi: ath9k: verify the expected usbendpoints are present This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000594 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out

wifi: ar5523: Fix use-after-free on ar5523cmd timed out This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000593 ipmi: fix memleak when unload ipmi driver

ipmi: fix memleak when unload ipmi driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000592 wifi: ath10k: Delay the unmapping of the buffer

wifi: ath10k: Delay the unmapping of the buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000591 drm/amd/display: prevent memory leak

drm/amd/display: prevent memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4 by commit 104c307147ad379617472dd91a5bcb368d72bd6d. Fo...

GSD-2023-1000590 drm/rockchip: use pm_runtime_resume_and_get() instead of pm_runtime_get_sync()

drm/rockchip: use pmruntimeresumeandget instead of pmruntimegetsync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000589 blk-mq: avoid double ->queue_rq() because of early timeout

blk-mq: avoid double -queuerq because of early timeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000588 wifi: ath11k: Fix qmi_msg_handler data structure initialization

wifi: ath11k: Fix qmimsghandler data structure initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000587 qed (gcc13): use u16 for fid to be big enough

qed gcc13: use u16 for fid to be big enough This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000586 drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()

drm/meson: Fix return type of mesonencodercvbsmodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000585 bpf: make sure skb->len != 0 when redirecting to a tunneling device

bpf: make sure skb-len != 0 when redirecting to a tunneling device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000584 net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()

net: ethernet: ti: Fix return type of netcpndostartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000583 hamradio: baycom_epp: Fix return type of baycom_send_packet()

hamradio: baycomepp: Fix return type of baycomsendpacket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000582 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()

wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000581 igb: Do not free q_vector unless new one was allocated

igb: Do not free qvector unless new one was allocated This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000580 drm/amdgpu: Fix type of second parameter in trans_msg() callback

drm/amdgpu: Fix type of second parameter in transmsg callback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000579 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback

drm/amdgpu: Fix type of second parameter in odneditdpmtable callback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000578 s390/ctcm: Fix return type of ctc{mp,}m_tx()

s390/ctcm: Fix return type of ctcmp,mtx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000577 s390/netiucv: Fix return type of netiucv_tx()

s390/netiucv: Fix return type of netiucvtx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000576 s390/lcs: Fix return type of lcs_start_xmit()

s390/lcs: Fix return type of lcsstartxmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000575 drm/amd/display: Disable DRR actions during state commit

drm/amd/display: Disable DRR actions during state commit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000574 drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid()

drm/mediatek: Fix return type of mtkhdmibridgemodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000573 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

drivers/md/md-bitmap: check the return value of mdbitmapgetcounter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...