GSD-2023-1000472 tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line

tracing: Fix infinite loop in tracingreadpipe on overflowed printtraceline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000471 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()

fs/ntfs3: Use GFPNOWARN allocation at ntfsfillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000470 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'

tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000469 fs/ntfs3: Delete duplicate condition in ntfs_read_mft()

fs/ntfs3: Delete duplicate condition in ntfsreadmft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000468 tracing: Fix race where eprobes can be called before the event

tracing: Fix race where eprobes can be called before the event This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

GSD-2023-1000467 fs/ntfs3: Fix slab-out-of-bounds in r_page

fs/ntfs3: Fix slab-out-of-bounds in rpage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000466 objtool: Fix SEGFAULT

objtool: Fix SEGFAULT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit 38b9415abbd703438ebbc6fb74990bd0fbddc5b9. For more detai...

GSD-2023-1000465 staging: media: tegra-video: fix device_node use after free

staging: media: tegra-video: fix devicenode use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000464 iommu/mediatek: Fix crash on isr after kexec()

iommu/mediatek: Fix crash on isr after kexec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000463 media: dvb-core: Fix double free in dvb_register_device()

media: dvb-core: Fix double free in dvbregisterdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000462 powerpc/rtas: avoid device tree lookups in rtas_os_term()

powerpc/rtas: avoid device tree lookups in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000461 powerpc/rtas: avoid scheduling in rtas_os_term()

powerpc/rtas: avoid scheduling in rtasosterm This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000460 rtc: msc313: Fix function prototype mismatch in msc313_rtc_probe()

rtc: msc313: Fix function prototype mismatch in msc313rtcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000459 kprobes: kretprobe events missing on 2-core KVM guest

kprobes: kretprobe events missing on 2-core KVM guest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000458 ALSA: line6: fix stack overflow in line6_midi_transmit

ALSA: line6: fix stack overflow in line6miditransmit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000457 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()

ipu3-imgu: Fix NULL pointer dereference in imgusubdevsetselection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000456 md: fix a crash in mempool_free

md: fix a crash in mempoolfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit 842f222fc42a9239831e15b1fd49a51c546902cb. For...

GSD-2023-1000455 ipmi: fix use after free in _ipmi_destroy_user()

ipmi: fix use after free in ipmidestroyuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000454 ima: Fix memory leak in __ima_inode_hash()

ima: Fix memory leak in imainodehash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit c4df8cb38f139ed9f4296868c0a6f15a26e8c491,...

GSD-2023-1000453 PCI/sysfs: Fix double free in error path

PCI/sysfs: Fix double free in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000452 parisc: led: Fix potential null-ptr-deref in start_task()

parisc: led: Fix potential null-ptr-deref in starttask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000451 RISC-V: kexec: Fix memory leak of fdt buffer

RISC-V: kexec: Fix memory leak of fdt buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000450 RISC-V: kexec: Fix memory leak of elf header buffer

RISC-V: kexec: Fix memory leak of elf header buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000449 remoteproc: imx_dsp_rproc: Add mutex protection for workqueue

remoteproc: imxdsprproc: Add mutex protection for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000448 drm/vmwgfx: Validate the box size for the snooped cursor

drm/vmwgfx: Validate the box size for the snooped cursor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000447 ext4: silence the warning when evicting inode with dioread_nolock

ext4: silence the warning when evicting inode with dioreadnolock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000446 ext4: fix undefined behavior in bit shift for ext4_check_flag_values

ext4: fix undefined behavior in bit shift for ext4checkflagvalues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000445 btrfs: fix resolving backrefs for inline extent followed by prealloc

btrfs: fix resolving backrefs for inline extent followed by prealloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000444 fs: ext4: initialize fsdata in pagecache_write()

fs: ext4: initialize fsdata in pagecachewrite This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000443 ext4: fix reserved cluster accounting in __es_remove_extent()

ext4: fix reserved cluster accounting in esremoveextent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000442 ext4: don't allow journal inode to have encrypt flag

ext4: don't allow journal inode to have encrypt flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000441 ext4: disable fast-commit of encrypted dir operations

ext4: disable fast-commit of encrypted dir operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000440 ext4: fix leaking uninitialized memory in fast-commit journal

ext4: fix leaking uninitialized memory in fast-commit journal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000439 ext4: don't set up encryption key during jbd2 transaction

ext4: don't set up encryption key during jbd2 transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000438 ext4: fix off-by-one errors in fast-commit block filling

ext4: fix off-by-one errors in fast-commit block filling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000437 ext4: fix uninititialized value in 'ext4_evict_inode'

ext4: fix uninititialized value in 'ext4evictinode' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000436 ext4: fix corruption when online resizing a 1K bigalloc fs

ext4: fix corruption when online resizing a 1K bigalloc fs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000435 ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod

ARM: 9256/1: NWFPE: avoid compiler-generated aeabiuldivmod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000434 ext4: fix deadlock due to mbcache entry corruption

ext4: fix deadlock due to mbcache entry corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000433 media: dvb-core: Fix UAF due to refcount races at releasing

media: dvb-core: Fix UAF due to refcount races at releasing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000432 ext4: fix kernel BUG in 'ext4_write_inline_data_end()'

ext4: fix kernel BUG in 'ext4writeinlinedataend' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000431 md/bitmap: Fix bitmap chunk size overflow issues

md/bitmap: Fix bitmap chunk size overflow issues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000430 ext4: fix corrupt backup group descriptors after online resize

ext4: fix corrupt backup group descriptors after online resize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000429 drm/i915/ttm: consider CCS for backup objects

drm/i915/ttm: consider CCS for backup objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000428 phy: qcom-qmp-combo: fix broken power on

phy: qcom-qmp-combo: fix broken power on This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000427 drm/panfrost: Fix GEM handle creation ref-counting

drm/panfrost: Fix GEM handle creation ref-counting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000426 net: sched: fix memory leak in tcindex_set_parms

net: sched: fix memory leak in tcindexsetparms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000425 bonding: fix lockdep splat in bond_miimon_commit()

bonding: fix lockdep splat in bondmiimoncommit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000424 net: hns3: fix VF promisc mode not update when mac table full

net: hns3: fix VF promisc mode not update when mac table full This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000423 qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure

qlcnic: prevent -dcb use-after-free on qlcnicdcbenable failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...