GSD-2022-1007440 RISC-V: Make port I/O string accessors actually work

RISC-V: Make port I/O string accessors actually work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007439 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.223 by commit 3d056d81b93a787613eda44aeb21fc14c3392b34, ...

GSD-2022-1007438 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

UM: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007437 btrfs: fix race between quota enable and quota rescan ioctl

btrfs: fix race between quota enable and quota rescan ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007436 fbdev: smscufx: Fix use-after-free in ufx_ops_open()

fbdev: smscufx: Fix use-after-free in ufxopsopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007435 f2fs: fix to do sanity check on destination blkaddr during recovery

f2fs: fix to do sanity check on destination blkaddr during recovery This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007434 f2fs: fix to do sanity check on summary info

f2fs: fix to do sanity check on summary info This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007433 ext4: avoid crash when inline data creation follows DIO write

ext4: avoid crash when inline data creation follows DIO write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007432 ext4: fix null-ptr-deref in ext4_write_info

ext4: fix null-ptr-deref in ext4writeinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007431 sh: machvec: Use char[] for section boundaries

sh: machvec: Use char for section boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007430 drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()

drm/nouveau: fix a use-after-free in nouveaugemprimeimportsgtable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007429 nfsd: Fix a memory leak in an error handling path

nfsd: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007428 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()

wifi: ath10k: add peer map clean up for peer delete in ath10kstastate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007427 vhost/vsock: Use kvmalloc/kvfree for larger packets.

vhost/vsock: Use kvmalloc/kvfree for larger packets. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007426 sctp: handle the error returned from sctp_auth_asoc_init_active_key

sctp: handle the error returned from sctpauthasocinitactivekey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007425 mISDN: fix use-after-free bugs in l1oip timer handlers

mISDN: fix use-after-free bugs in l1oip timer handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007424 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()

net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007423 net/ieee802154: reject zero-sized raw_sendmsg()

net/ieee802154: reject zero-sized rawsendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007422 bnx2x: fix potential memory leak in bnx2x_tpa_stop()

bnx2x: fix potential memory leak in bnx2xtpastop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007421 net: mvpp2: fix mvpp2 debugfs leak

net: mvpp2: fix mvpp2 debugfs leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit 72c0d361940aec02d114d6f8f351147b85190464, ...

GSD-2022-1007420 drm/mipi-dsi: Detach devices when removing the host

drm/mipi-dsi: Detach devices when removing the host This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007419 platform/chrome: fix memory corruption in ioctl

platform/chrome: fix memory corruption in ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007418 drm/bridge: megachips: Fix a null pointer dereference bug

drm/bridge: megachips: Fix a null pointer dereference bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007417 drm/omap: dss: Fix refcount leak bugs

drm/omap: dss: Fix refcount leak bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit 9d7af9b1624dd70b67354972d7297429e637209...

GSD-2022-1007416 drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx

drm/msm/dpu: index dpukms-hwvbif using vbifidx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007415 memory: of: Fix refcount leak bug in of_get_ddr_timings()

memory: of: Fix refcount leak bug in ofgetddrtimings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007414 soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()

soc: qcom: smsm: Fix refcount leak bugs in qcomsmsmprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007413 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()

memory: pl353-smc: Fix refcount leak bug in pl353smcprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007412 clk: tegra: Fix refcount leak in tegra210_clock_init

clk: tegra: Fix refcount leak in tegra210clockinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007411 clk: tegra: Fix refcount leak in tegra114_clock_init

clk: tegra: Fix refcount leak in tegra114clockinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007410 clk: tegra20: Fix refcount leak in tegra20_clock_init

clk: tegra20: Fix refcount leak in tegra20clockinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007409 HSI: omap_ssi: Fix refcount leak in ssi_probe

HSI: omapssi: Fix refcount leak in ssiprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007408 misc: ocxl: fix possible refcount leak in afu_ioctl()

misc: ocxl: fix possible refcount leak in afuioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007407 media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init

media: xilinx: vipp: Fix refcount leak in xvipgraphdmainit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007406 RDMA/rxe: Fix "kernel NULL pointer dereference" error

RDMA/rxe: Fix "kernel NULL pointer dereference" error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007405 usb: gadget: function: fix dangling pnp_string in f_printer.c

usb: gadget: function: fix dangling pnpstring in fprinter.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007404 md: Replace snprintf with scnprintf

md: Replace snprintf with scnprintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit 97238b88583c27c9d3b4a0cedb45f816523f17c3,...

GSD-2022-1007403 scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()

scsi: libsas: Fix use-after-free bug in smpexecutetasksg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007402 firmware: google: Test spinlock on panic path to avoid lockups

firmware: google: Test spinlock on panic path to avoid lockups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007401 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown

tty: serial: fsllpuart: disable dma rx/tx use flags in lpuartdmashutdown This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007400 staging: vt6655: fix some erroneous memory clean-up loops

staging: vt6655: fix some erroneous memory clean-up loops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007399 drivers: serial: jsm: fix some leaks in probe

drivers: serial: jsm: fix some leaks in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007398 clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe

clk: ti: dra7-atl: Fix reference leak in ofdra7atlclkprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007397 iommu/omap: Fix buffer overflow in debugfs

iommu/omap: Fix buffer overflow in debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007396 crypto: akcipher - default implementation for setting a private key

crypto: akcipher - default implementation for setting a private key This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007395 crypto: cavium - prevent integer overflow loading firmware

crypto: cavium - prevent integer overflow loading firmware This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007394 powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue

powercap: intelrapl: fix UBSAN shift-out-of-bounds issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007393 thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash

thermal: intelpowerclamp: Use getcpu instead of smpprocessorid to avoid crash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007392 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007391 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()

wifi: ath9k: avoid uninit memory read in ath9khtcrxmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...