GSD-2023-1000522 hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()

hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000521 nvme-pci: fix mempool alloc size

nvme-pci: fix mempool alloc size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit e1777b4286e526c58b4ee699344b0ad85aaf83a0, it...

GSD-2023-1000520 scsi: smartpqi: Correct device removal for multi-actuator devices

scsi: smartpqi: Correct device removal for multi-actuator devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000519 drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()

drm/fsl-dcu: Fix return type of fsldcudrmconnectormodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000518 block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq

block, bfq: fix uaf for bfqq in bfqexiticqbfqq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000517 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()

drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000516 scsi: target: iscsi: Fix a race condition between login_work and the login thread

scsi: target: iscsi: Fix a race condition between loginwork and the login thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by comm...

GSD-2023-1000515 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()

orangefs: Fix kmemleak in orangefspreparedebugfshelpstring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000514 orangefs: Fix kmemleak in orangefs_sysfs_init()

orangefs: Fix kmemleak in orangefssysfsinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000513 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()

orangefs: Fix kmemleak in orangefskernel,clientdebuginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000512 security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

security: Restrict CONFIGZEROCALLUSEDREGS to gcc or clang 15.0.6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000511 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range

btrfs: do not BUGON on ENOMEM when dropping extent items for a range This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000510 futex: Fix futex_waitv() hrtimer debug object leak on kcalloc error

futex: Fix futexwaitv hrtimer debug object leak on kcalloc error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000509 mm/mempolicy: fix memory leak in set_mempolicy_home_node system call

mm/mempolicy: fix memory leak in setmempolicyhomenode system call This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000508 pnode: terminate at peers of source

pnode: terminate at peers of source This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit e7c9f10c44a8919cd8bbd51b228c84d0caf7d518, ...

GSD-2023-1000507 pstore/zone: Use GFP_ATOMIC to allocate zone buffer

pstore/zone: Use GFPATOMIC to allocate zone buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000506 mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING

mmc: vub300: fix warning - do not call blocking ops when !TASKRUNNING This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000505 mm, compaction: fix fast_isolate_around() to stay within boundaries

mm, compaction: fix fastisolatearound to stay within boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000504 tpm: acpi: Call acpi_put_table() to fix memory leak

tpm: acpi: Call acpiputtable to fix memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000503 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak

tpm: tpmcrb: Add the missed acpiputtable to fix memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000502 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak

tpm: tpmtis: Add the missed acpiputtable to fix memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000501 SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails

SUNRPC: Don't leak netobj memory when gssreadproxyverf fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000500 eventpoll: add EPOLL_URING_WAKE poll wakeup flag

eventpoll: add EPOLLURINGWAKE poll wakeup flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000499 eventfd: provide a eventfd_signal_mask() helper

eventfd: provide a eventfdsignalmask helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000498 arm64: dts: qcom: sc8280xp: fix UFS DMA coherency

arm64: dts: qcom: sc8280xp: fix UFS DMA coherency This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000497 fs/ntfs3: Validate BOOT record_size

fs/ntfs3: Validate BOOT recordsize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit 8702e0dc987014f6d77740b693340f91344fd0ae. F...

GSD-2023-1000496 btrfs: fix extent map use-after-free when handling missing device in read_one_chunk

btrfs: fix extent map use-after-free when handling missing device in readonechunk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by...

GSD-2023-1000495 phy: qcom-qmp-combo: fix out-of-bounds clock access

phy: qcom-qmp-combo: fix out-of-bounds clock access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000494 fs/ntfs3: Add overflow check for attribute size

fs/ntfs3: Add overflow check for attribute size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000493 fs/ntfs3: Validate data run offset

fs/ntfs3: Validate data run offset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit e0455361d3068066a91fe18282b751925d7b5ee7. F...

GSD-2023-1000492 x86/MCE/AMD: Clear DFR errors found in THR handler

x86/MCE/AMD: Clear DFR errors found in THR handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000491 fs/ntfs3: Add null pointer check to attr_load_runs_vcn

fs/ntfs3: Add null pointer check to attrloadrunsvcn This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000490 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path

fs/ntfs3: Fix memory leak on ntfsfillsuper error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000489 cpufreq: Init completion before kobject_init_and_add()

cpufreq: Init completion before kobjectinitandadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000488 media: s5p-mfc: Clear workbit to handle error condition

media: s5p-mfc: Clear workbit to handle error condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000487 ext2: unbugger ext2_empty_dir()

ext2: unbugger ext2emptydir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit 84b35f6efccec6c7f5446dfbdcd3cbf896e644ad, it was...

GSD-2023-1000486 dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata

dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000485 dm thin: Use last transaction's pmd->root when commit failed

dm thin: Use last transaction's pmd-root when commit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000484 mptcp: use proper req destructor for IPv6

mptcp: use proper req destructor for IPv6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000483 fs/ntfs3: Add null pointer check for inode operations

fs/ntfs3: Add null pointer check for inode operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000482 dm thin: Fix UAF in run_timer_softirq()

dm thin: Fix UAF in runtimersoftirq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit 94e231c9d6f2648d2f1f68e7f476e050ee0a6159, ...

GSD-2023-1000481 fs/ntfs3: Validate attribute name offset

fs/ntfs3: Validate attribute name offset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000480 fs/ntfs3: Validate buffer length while parsing index

fs/ntfs3: Validate buffer length while parsing index This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000479 fs/ntfs3: Validate resident attribute name

fs/ntfs3: Validate resident attribute name This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000478 dm integrity: Fix UAF in dm_integrity_dtr()

dm integrity: Fix UAF in dmintegritydtr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000477 dm cache: Fix UAF in destroy()

dm cache: Fix UAF in destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit 6ac4f36910764cb510bafc4c3768544f86ca48ca, it was...

GSD-2023-1000476 fs/ntfs3: Fix slab-out-of-bounds read in run_unpack

fs/ntfs3: Fix slab-out-of-bounds read in rununpack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000475 dm clone: Fix UAF in clone_dtr()

dm clone: Fix UAF in clonedtr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit b1ddb666073bb5f36390aaabaa1a4d48d78c52ed, it was...

GSD-2023-1000474 fs/ntfs3: Validate index root when initialize NTFS security

fs/ntfs3: Validate index root when initialize NTFS security This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000473 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()

fs/ntfs3: Use GFPNOWARN allocation at wndinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...