13627 matches found
GSD-2022-1008040 net/x25: Fix skb leak in x25_lapb_receive_frame()
net/x25: Fix skb leak in x25lapbreceiveframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008039 ftrace: Fix null pointer dereference in ftrace_add_mod()
ftrace: Fix null pointer dereference in ftraceaddmod This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008038 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event()
tracing: Fix memory leak in testgensynthcmd and testemptysynthevent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008037 tracing: Fix wild-memory-access in register_synth_event()
tracing: Fix wild-memory-access in registersynthevent This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008036 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit()
tracing: kprobe: Fix potential null-ptr-deref on traceeventfile in kprobeeventgentestexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version...
GSD-2022-1008035 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()
tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentestexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 ...
GSD-2022-1008034 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008033 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
iio: adc: at91adc: fix possible memory leak in at91adcallocatetrigger This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008032 iio: adc: mp2629: fix potential array out of bound access
iio: adc: mp2629: fix potential array out of bound access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008031 Input: iforce - invert valid length check when fetching device IDs
Input: iforce - invert valid length check when fetching device IDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008030 scsi: zfcp: Fix double free of FSF request when qdio send fails
scsi: zfcp: Fix double free of FSF request when qdio send fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008029 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008028 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008027 net: use struct_group to copy ip/ipv6 header addresses
net: use structgroup to copy ip/ipv6 header addresses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008026 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
scsi: target: tcmloop: Fix possible name leak in tcmloopsetuphbabus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008025 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
kprobes: Skip clearing aggrprobe's posthandler in kprobe-on-ftrace case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008024 Input: i8042 - fix leaking of platform device on module removal
Input: i8042 - fix leaking of platform device on module removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008023 macvlan: enforce a consistent minimal mtu
macvlan: enforce a consistent minimal mtu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008022 tcp: cdg: allow tcp_cdg_release() to be called multiple times
tcp: cdg: allow tcpcdgrelease to be called multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008021 kcm: avoid potential race in kcm_tx_work
kcm: avoid potential race in kcmtxwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008020 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
ALSA: usb-audio: Drop sndBUGON from sndusbmidioutputopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008019 dm ioctl: fix misbehavior if list_versions races with module loading
dm ioctl: fix misbehavior if listversions races with module loading This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008018 ceph: avoid putting the realm twice when decoding snaps fails
ceph: avoid putting the realm twice when decoding snaps fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.157 by commit...
GSD-2022-1008017 9p: trans_fd/p9_conn_cancel: drop client lock earlier
9p: transfd/p9conncancel: drop client lock earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008016 gfs2: Check sb_bsize_shift after reading superblock
gfs2: Check sbbsizeshift after reading superblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008015 9p/trans_fd: always use O_NONBLOCK read/write
9p/transfd: always use ONONBLOCK read/write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008014 ntfs: fix use-after-free in ntfs_attr_find()
ntfs: fix use-after-free in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008013 ntfs: fix out-of-bounds read in ntfs_attr_find()
ntfs: fix out-of-bounds read in ntfsattrfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008012 ntfs: check overflow when iterating ATTR_RECORDs
ntfs: check overflow when iterating ATTRRECORDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...
GSD-2022-1008011 IB/hfi1: Correctly move list in sc_disable()
IB/hfi1: Correctly move list in scdisable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008010 SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008009 nfs4: Fix kmemleak when allocate slot failed
nfs4: Fix kmemleak when allocate slot failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008008 net: dsa: Fix possible memory leaks in dsa_loop_init()
net: dsa: Fix possible memory leaks in dsaloopinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008007 RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
RDMA/core: Fix null-ptr-deref in ibcorecleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008006 nfc: fdp: Fix potential memory leak in fdp_nci_send()
nfc: fdp: Fix potential memory leak in fdpncisend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008005 nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
nfc: nxp-nci: Fix potential memory leak in nxpncisend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008004 nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
nfc: s3fwrn5: Fix potential memory leak in s3fwrn5ncisend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008003 nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008002 net: sched: Fix use after free in red_enqueue()
net: sched: Fix use after free in redenqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008001 net: tun: fix bugs for oversize packet when napi frags enabled
net: tun: fix bugs for oversize packet when napi frags enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1008000 netfilter: nf_tables: netlink notifier might race to release objects
netfilter: nftables: netlink notifier might race to release objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007999 netfilter: nf_tables: release flow rule object from commit path
netfilter: nftables: release flow rule object from commit path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007998 ipvs: fix WARNING in __ip_vs_cleanup_batch()
ipvs: fix WARNING in ipvscleanupbatch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit 5ee2d6b726b0ce339e36569e5849692f4cf4595...
GSD-2022-1007997 ipvs: fix WARNING in ip_vs_app_net_cleanup()
ipvs: fix WARNING in ipvsappnetcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007996 rose: Fix NULL pointer dereference in rose_send_frame()
rose: Fix NULL pointer dereference in rosesendframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007995 mISDN: fix possible memory leak in mISDN_register_device()
mISDN: fix possible memory leak in mISDNregisterdevice This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007994 btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
btrfs: fix inode list leak during backref walking at resolveindirectrefs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007993 btrfs: fix inode list leak during backref walking at find_parent_nodes()
btrfs: fix inode list leak during backref walking at findparentnodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007992 btrfs: fix ulist leaks in error paths of qgroup self tests
btrfs: fix ulist leaks in error paths of qgroup self tests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
GSD-2022-1007991 netfilter: ipset: enforce documented limit to prevent allocating huge memory
netfilter: ipset: enforce documented limit to prevent allocating huge memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...