GSD-2023-1000122 ethernet: aeroflex: fix potential skb leak in greth_init_rings()

ethernet: aeroflex: fix potential skb leak in grethinitrings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000121 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()

dpaa2-switch: Fix memory leak in dpaa2switchaclentryadd and dpaa2switchaclentryremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 b...

GSD-2023-1000120 net: thunderbolt: fix memory leak in tbnet_open()

net: thunderbolt: fix memory leak in tbnetopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000119 ipv6: avoid use-after-free in ip6_fragment()

ipv6: avoid use-after-free in ip6fragment This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000118 net: mvneta: Fix an out of bounds check

net: mvneta: Fix an out of bounds check This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

GSD-2023-1000117 s390/qeth: fix use-after-free in hsci

s390/qeth: fix use-after-free in hsci This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit db6343a5b0d9661f2dd76f653c6d274d38234d2...

GSD-2023-1000116 rtc: cmos: Fix event handler registration ordering issue

rtc: cmos: Fix event handler registration ordering issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000115 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

ASoC: ops: Check bounds for second channel in sndsocputvolswsx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.84 by commit...

GSD-2023-1000114 PCI: mt7621: Add sentinel to quirks table

PCI: mt7621: Add sentinel to quirks table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000113 pinctrl: meditatek: Startup with the IRQs disabled

pinctrl: meditatek: Startup with the IRQs disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.84 by commit...

GSD-2023-1000112 udf: Discard preallocation before extending file with a hole

udf: Discard preallocation before extending file with a hole This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000111 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000110 igb: Initialize mailbox message for VF reset

igb: Initialize mailbox message for VF reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000109 perf: Fix perf_pending_task() UaF

perf: Fix perfpendingtask UaF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.84 by commit 8bffa95ac19ff27c8261904f89d36c7fcf215d59. For...

GSD-2023-1000108 udf: Fix preallocation discarding at indirect extent boundary

udf: Fix preallocation discarding at indirect extent boundary This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000107 udf: Fix extending file within last block

udf: Fix extending file within last block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000106 Bluetooth: L2CAP: Fix u8 overflow

Bluetooth: L2CAP: Fix u8 overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit 19a78143961a197de8502f4f29c453b913dc3c29. F...

GSD-2023-1000105 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()

btrfs: qgroup: fix sleep from invalid context bug in btrfsqgroupinherit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000104 clk: qcom: gdsc: Remove direct runtime PM calls

clk: qcom: gdsc: Remove direct runtime PM calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000103 iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw

iio: health: afe4404: Fix oob read in afe4404read|writeraw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000102 iio: health: afe4403: Fix oob read in afe4403_read_raw

iio: health: afe4403: Fix oob read in afe4403readraw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000101 libbpf: Handle size overflow for ringbuf mmap

libbpf: Handle size overflow for ringbuf mmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000100 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000099 clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error

clocksource/drivers/armarchtimer: Fix XGene-1 TVAL register math error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000098 ixgbevf: Fix resource leak in ixgbevf_init_module()

ixgbevf: Fix resource leak in ixgbevfinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000097 fm10k: Fix error handling in fm10k_init_module()

fm10k: Fix error handling in fm10kinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000096 iavf: Fix error handling in iavf_init_module()

iavf: Fix error handling in iavfinitmodule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000095 e100: Fix possible use after free in e100_xmit_prepare

e100: Fix possible use after free in e100xmitprepare This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000094 net/mlx5e: Fix use-after-free when reverting termination table

net/mlx5e: Fix use-after-free when reverting termination table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000093 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods

can: mcan: pci: add missing mcanclassfreedev in probe/remove methods This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000092 wifi: cfg80211: fix buffer overflow in elem comparison

wifi: cfg80211: fix buffer overflow in elem comparison This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000091 wifi: cfg80211: don't allow multi-BSSID in S1G

wifi: cfg80211: don't allow multi-BSSID in S1G This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000090 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration

wifi: mac8021: fix possible oob access in ieee80211getrateduration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000089 net: phy: fix null-ptr-deref while probe() failed

net: phy: fix null-ptr-deref while probe failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000088 net/9p: Fix a potential socket leak in p9_socket_open

net/9p: Fix a potential socket leak in p9socketopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000087 net: ethernet: nixge: fix NULL dereference

net: ethernet: nixge: fix NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000086 mptcp: fix sleep in atomic at close time

mptcp: fix sleep in atomic at close time This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000085 tipc: re-fetch skb cb after tipc_msg_validate

tipc: re-fetch skb cb after tipcmsgvalidate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000084 net: mdiobus: fix unbalanced node reference count

net: mdiobus: fix unbalanced node reference count This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000083 net: hsr: Fix potential use-after-free

net: hsr: Fix potential use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit f3add2b8cf620966de3ebfa07679ca12d33ec26...

GSD-2023-1000082 net: tun: Fix use-after-free in tun_detach()

net: tun: Fix use-after-free in tundetach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000081 sctp: fix memory leak in sctp_stream_outq_migrate()

sctp: fix memory leak in sctpstreamoutqmigrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000080 afs: Fix server->active leak in afs_put_server

afs: Fix server-active leak in afsputserver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000079 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()

hwmon: coretemp fix pci device refcount leak in nv1aramnew This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000078 hwmon: (coretemp) Check for null before removing sysfs attrs

hwmon: coretemp Check for null before removing sysfs attrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000077 hwmon: (asus-ec-sensors) Add checks for devm_kcalloc

hwmon: asus-ec-sensors Add checks for devmkcalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000076 can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down

can: can327: can327feedframetonetdev: fix potential skb leak when netdev is down This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by comm...

GSD-2023-1000075 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()

nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000074 tracing: Free buffers when a used dynamic event is removed

tracing: Free buffers when a used dynamic event is removed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

GSD-2023-1000073 ASoC: ops: Fix bounds check for _sx controls

ASoC: ops: Fix bounds check for sx controls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...