GSD-2023-1000422 PCI: Fix pci_device_is_present() for VFs by checking PF

PCI: Fix pcideviceispresent for VFs by checking PF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000421 nfc: Fix potential resource leaks

nfc: Fix potential resource leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit a743128fca394a43425020a4f287d3168d94d04f, it...

GSD-2023-1000420 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()

vdpasim: fix possible memory leak in vdpasimnetinit and vdpasimblkinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000419 vhost-vdpa: fix an iotlb memory leak

vhost-vdpa: fix an iotlb memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit 4e92cb33bfb51eee5f28bb10846c46f266a4bb67,...

GSD-2023-1000418 parisc: Fix locking in pdc_iodc_print() firmware call

parisc: Fix locking in pdciodcprint firmware call This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000417 virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()

virtio-crypto: fix memory leak in virtiocryptoalgskcipherclosesession This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000416 vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove

vdpa/vpvdpa: fix kfree a wrong pointer in vpvdparemove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000415 vdpasim: fix memory leak when freeing IOTLBs

vdpasim: fix memory leak when freeing IOTLBs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000414 net/mlx5e: Always clear dest encap in neigh-update-del

net/mlx5e: Always clear dest encap in neigh-update-del This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000413 ext4: fix use-after-free in ext4_orphan_cleanup

ext4: fix use-after-free in ext4orphancleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000412 net/mlx5: Lag, fix failure to cancel delayed bond work

net/mlx5: Lag, fix failure to cancel delayed bond work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000411 net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe

net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmiiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000410 ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode

ext4: add EXT4IGETBAD flag to prevent unexpected bad inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000409 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

RDMA/mlx5: Fix mlx5ibgethwstats when used for device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000408 ext4: fix bug_on in __es_tree_search caused by bad quota inode

ext4: fix bugon in estreesearch caused by bad quota inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000407 gpio: sifive: Fix refcount leak in sifive_gpio_probe

gpio: sifive: Fix refcount leak in sifivegpioprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000406 ext4: check and assert if marking an no_delete evicting inode dirty

ext4: check and assert if marking an nodelete evicting inode dirty This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000405 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode

ext4: fix bugon in estreesearch caused by bad boot loader inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000404 vxlan: Fix memory leaks in error path

vxlan: Fix memory leaks in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit 75c1ab900f7cf0485f0be1607c79c55f51faaa90...

GSD-2023-1000403 netfilter: ipset: Rework long task execution when adding/deleting entries

netfilter: ipset: Rework long task execution when adding/deleting entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000402 perf tools: Fix resources leak in perf_data__open_dir()

perf tools: Fix resources leak in perfdataopendir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000401 usb: rndis_host: Secure rndis_query check against int overflow

usb: rndishost: Secure rndisquery check against int overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000400 caif: fix memory leak in cfctrl_linkup_request()

caif: fix memory leak in cfctrllinkuprequest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000399 fs/ntfs3: don't hold ni_lock when calling truncate_setsize()

fs/ntfs3: don't hold nilock when calling truncatesetsize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000398 qed: allow sleep in qed_mcp_trace_dump()

qed: allow sleep in qedmcptracedump This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit e0387f4f39a8d92302273ac356d1f6b2a38160d8, ...

GSD-2023-1000397 ext4: init quota for 'old.inode' in 'ext4_rename'

ext4: init quota for 'old.inode' in 'ext4rename' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000396 ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline

ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000395 hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling

hfs/hfsplus: avoid WARNON for sanity check, use proper error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000394 ext4: fix error code return to user-space in ext4_get_branch()

ext4: fix error code return to user-space in ext4getbranch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000393 ext4: fix inode leak in ext4_xattr_inode_create() on an error path

ext4: fix inode leak in ext4xattrinodecreate on an error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000392 x86/kexec: Fix double-free of elf header buffer

x86/kexec: Fix double-free of elf header buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000391 bpf: Fix panic due to wrong pageattr of im->image

bpf: Fix panic due to wrong pageattr of im-image This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000390 vhost_vdpa: fix the crash in unmap a large memory

vhostvdpa: fix the crash in unmap a large memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000389 of/fdt: run soc memory setup when early_init_dt_scan_memory fails

of/fdt: run soc memory setup when earlyinitdtscanmemory fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000388 drm/i915/gvt: fix gvt debugfs destroy

drm/i915/gvt: fix gvt debugfs destroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit b85c8536fda3d1ed07c6d87a661ffe18d6eb214b...

GSD-2023-1000387 drm/amdkfd: Fix kernel warning during topology setup

drm/amdkfd: Fix kernel warning during topology setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000386 drm/i915/gvt: fix vgpu debugfs clean in remove

drm/i915/gvt: fix vgpu debugfs clean in remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000385 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob

ksmbd: check ntlen to be at least CIFSENCPWDSIZE in ksmbddecodentlmsspauthblob This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000384 ASoC: SOF: Revert: "core: unregister clients and machine drivers in .shutdown"

ASoC: SOF: Revert: "core: unregister clients and machine drivers in .shutdown" This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000383 9p/client: fix data race on req->status

9p/client: fix data race on req-status This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit d5080e1598d0e035b3cc5e5d699a5edce34d5fb...

GSD-2023-1000382 ASoC: SOF: mediatek: initialize panic_info to zero

ASoC: SOF: mediatek: initialize panicinfo to zero This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000381 drm/amdgpu: Fix size validation for non-exclusive domains (v4)

drm/amdgpu: Fix size validation for non-exclusive domains v4 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000380 drm/amdkfd: Fix kfd_process_device_init_vm error handling

drm/amdkfd: Fix kfdprocessdeviceinitvm error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000379 drm/amdkfd: Fix double release compute pasid

drm/amdkfd: Fix double release compute pasid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000378 nvme: fix multipath crash caused by flush request when blktrace is enabled

nvme: fix multipath crash caused by flush request when blktrace is enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000377 btrfs: handle case when repair happens with dev-replace

btrfs: handle case when repair happens with dev-replace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000376 efi: random: combine bootloader provided RNG seed with RNG protocol output

efi: random: combine bootloader provided RNG seed with RNG protocol output This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000375 iio: health: afe4403: Fix oob read in afe4403_read_raw

iio: health: afe4403: Fix oob read in afe4403readraw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...

GSD-2023-1000374 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()

btrfs: qgroup: fix sleep from invalid context bug in btrfsqgroupinherit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...

GSD-2023-1000373 iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw

iio: health: afe4404: Fix oob read in afe4404read|writeraw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...