GSD-2023-1000572 md/raid0, raid10: Don't set discard sectors for request queue

md/raid0, raid10: Don't set discard sectors for request queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000571 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000570 drm/amd/display: fix array index out of bound error in bios parser

drm/amd/display: fix array index out of bound error in bios parser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000569 nvme-auth: don't override ctrl keys before validation

nvme-auth: don't override ctrl keys before validation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000568 net: add atomic_long_t to net_device_stats fields

net: add atomiclongt to netdevicestats fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000567 ipv6/sit: use DEV_STATS_INC() to avoid data-races

ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000566 mrp: introduce active flags to prevent UAF when applicant uninit

mrp: introduce active flags to prevent UAF when applicant uninit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000565 net: ethernet: mtk_eth_soc: drop packets to WDMA if the ring is full

net: ethernet: mtkethsoc: drop packets to WDMA if the ring is full This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000564 ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()

ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173rt5650rt5514devprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by...

GSD-2023-1000563 ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()

ASoC: sofes8336: fix possible use-after-free in sofes8336remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000562 ppp: associate skb with a device at tx

ppp: associate skb with a device at tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 18dc946360bfe0de016a59e3cc3ee1f450fceb9...

GSD-2023-1000561 ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()

ASoC: audio-graph-card: fix refcount leak of cpuep in graphforeachlink This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000560 ASoC: rt5670: Remove unbalanced pm_runtime_put()

ASoC: rt5670: Remove unbalanced pmruntimeput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000559 ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe()

ASoC: mediatek: mt8183: fix refcount leak in mt8183mt6358ts3a227max98357devprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by comm...

GSD-2023-1000558 bpf: Fix a BTF_ID_LIST bug with CONFIG_DEBUG_INFO_BTF not set

bpf: Fix a BTFIDLIST bug with CONFIGDEBUGINFOBTF not set This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000557 bpf: Prevent decl_tag from being referenced in func_proto arg

bpf: Prevent decltag from being referenced in funcproto arg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000556 ethtool: avoiding integer overflow in ethtool_phys_id()

ethtool: avoiding integer overflow in ethtoolphysid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000555 media: dvb-frontends: fix leak of memory fw

media: dvb-frontends: fix leak of memory fw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000554 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq

usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000553 media: dvbdev: adopts refcnt to avoid UAF

media: dvbdev: adopts refcnt to avoid UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000552 usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init

usb: dwc3: qcom: Fix memory leak in dwc3qcominterconnectinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000551 9p: set req refcount to zero to avoid uninitialized usage

9p: set req refcount to zero to avoid uninitialized usage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000550 media: dvb-usb: fix memory leak in dvb_usb_adapter_init()

media: dvb-usb: fix memory leak in dvbusbadapterinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000549 media: mediatek: vcodec: Can't set dst buffer to done when lat decode error

media: mediatek: vcodec: Can't set dst buffer to done when lat decode error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000548 blk-mq: fix possible memleak when register 'hctx' failed

blk-mq: fix possible memleak when register 'hctx' failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000547 iio: fix memory leak in iio_device_register_eventset()

iio: fix memory leak in iiodeviceregistereventset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000546 floppy: Fix memory leak in do_floppy_init()

floppy: Fix memory leak in dofloppyinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000545 drm/amd/display: Use the largest vready_offset in pipe group

drm/amd/display: Use the largest vreadyoffset in pipe group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000544 drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming

drm/amd/display: Fix DTBCLK disable requests and SRCSEL programming This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000543 fbdev: fbcon: release buffer when fbcon_do_set_font() failed

fbdev: fbcon: release buffer when fbcondosetfont failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000542 libbpf: Avoid enum forward-declarations in public API in C++ mode

libbpf: Avoid enum forward-declarations in public API in C++ mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000541 ovl: fix use inode directly in rcu-walk mode

ovl: fix use inode directly in rcu-walk mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000540 regulator: core: fix use_count leakage when handling boot-on

regulator: core: fix usecount leakage when handling boot-on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000539 wifi: mt76: do not run mt76u_status_worker if the device is not running

wifi: mt76: do not run mt76ustatusworker if the device is not running This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000538 selftests/bpf: Fix conflicts with built-in functions in bpf_iter_ksym

selftests/bpf: Fix conflicts with built-in functions in bpfiterksym This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000537 nfs: fix possible null-ptr-deref when parsing param

nfs: fix possible null-ptr-deref when parsing param This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000536 media: si470x: Fix use-after-free in si470x_int_in_callback()

media: si470x: Fix use-after-free in si470xintincallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000535 clk: st: Fix memory leak in st_of_quadfs_setup()

clk: st: Fix memory leak in stofquadfssetup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000534 regulator: core: Use different devices for resource allocation and DT lookup

regulator: core: Use different devices for resource allocation and DT lookup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000533 mm/gup: disallow FOLL_FORCE|FOLL_WRITE on hugetlb mappings

mm/gup: disallow FOLLFORCE|FOLLWRITE on hugetlb mappings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000532 scsi: qla2xxx: Fix crash when I/O abort times out

scsi: qla2xxx: Fix crash when I/O abort times out This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000531 blk-iolatency: Fix memory leak on add_disk() failures

blk-iolatency: Fix memory leak on adddisk failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000530 crypto: hisilicon/hpre - fix resource leak in remove process

crypto: hisilicon/hpre - fix resource leak in remove process This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000529 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs

scsi: lpfc: Fix hard lockup when reading the rxmonitor from debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000528 net: stmmac: fix errno when create_singlethread_workqueue() fails

net: stmmac: fix errno when createsinglethreadworkqueue fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000527 scsi: ufs: Reduce the START STOP UNIT timeout

scsi: ufs: Reduce the START STOP UNIT timeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000526 media: dvbdev: fix build warning due to comments

media: dvbdev: fix build warning due to comments This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000525 media: dvbdev: fix refcnt bug

media: dvbdev: fix refcnt bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit c850254fb58af2f995302f5ae1e4010a5bd59657, it was...

GSD-2023-1000524 crypto: hisilicon/qm - increase the memory of local variables

crypto: hisilicon/qm - increase the memory of local variables This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000523 scsi: elx: libefc: Fix second parameter type in state callbacks

scsi: elx: libefc: Fix second parameter type in state callbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...