13627 matches found
GSD-2022-1007240 Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
Bluetooth: L2CAP: initialize delayed works at l2capchancreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007239 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007238 net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
net: If sock is dead don't access sock's skwq in skstreamwaitmemory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007237 Bluetooth: L2CAP: Fix user-after-free
Bluetooth: L2CAP: Fix user-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007236 drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
drm/nouveau/nouveaubo: fix potential memory leak in nouveauboalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007235 drm: Use size_t type for len variable in drm_copy_field()
drm: Use sizet type for len variable in drmcopyfield This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007234 drm: Prevent drm_copy_field() to attempt copying a NULL pointer
drm: Prevent drmcopyfield to attempt copying a NULL pointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007233 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007232 drm/amd/display: fix overflow on MIN_I64 definition
drm/amd/display: fix overflow on MINI64 definition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007231 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
udmabuf: Set ubuf-sg = NULL if the creation of sg table fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007230 drm/meson: explicitly remove aggregate driver at module unload time
drm/meson: explicitly remove aggregate driver at module unload time This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007229 drm/dp: Don't rewrite link config when setting phy test pattern
drm/dp: Don't rewrite link config when setting phy test pattern This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007228 drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...
GSD-2022-1007227 kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
kselftest/arm64: Fix validatation termination record after EXTRACONTEXT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007226 clk: zynqmp: Fix stack-out-of-bounds in strncpy`
clk: zynqmp: Fix stack-out-of-bounds in strncpy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007225 media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
media: cx88: Fix a null-ptr-deref bug in bufferprepare This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007224 clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
clk: zynqmp: pll: rectify rate rounding in zynqmppllroundrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007223 nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
nbd: Fix hung when signal interrupts nbdstartdeviceioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007222 power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
power: supply: adp5061: fix out-of-bounds read in adp5061getchgtype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007221 staging: vt6655: fix potential memory leak
staging: vt6655: fix potential memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007220 blk-throttle: prevent overflow while calculating wait time
blk-throttle: prevent overflow while calculating wait time This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007219 ata: libahci_platform: Sanity check the DT child nodes number
ata: libahciplatform: Sanity check the DT child nodes number This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007218 soundwire: cadence: Don't overwrite msg->buf during write commands
soundwire: cadence: Don't overwrite msg-buf during write commands This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007217 HID: roccat: Fix use-after-free in roccat_read()
HID: roccat: Fix use-after-free in roccatread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007216 usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
usb: host: xhci: Fix potential memory leak in xhciallocstreaminfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007215 usb: musb: Fix musb_gadget.c rxstate overflow bug
usb: musb: Fix musbgadget.c rxstate overflow bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007214 staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
staging: rtl8723bs: fix a potential memory leak in rtwinitcmdpriv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007213 mm: hugetlb: fix UAF in hugetlb_handle_userfault
mm: hugetlb: fix UAF in hugetlbhandleuserfault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007212 nvmet-tcp: add bounds check on Transfer Tag
nvmet-tcp: add bounds check on Transfer Tag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007211 usb: idmouse: fix an uninit-value in idmouse_open
usb: idmouse: fix an uninit-value in idmouseopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007210 net/ieee802154: don't warn zero-sized raw_sendmsg()
net/ieee802154: don't warn zero-sized rawsendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
GSD-2022-1007209 selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007208 cpufreq: qcom: fix writes in read-only memory region
cpufreq: qcom: fix writes in read-only memory region This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007207 cpufreq: qcom: fix memory leak in error path
cpufreq: qcom: fix memory leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007206 ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007205 mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
mm,hugetlb: take hugetlblock before decrementing h-resvhugepages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.153 by commit...
GSD-2022-1007204 KVM: arm64: vgic: Fix exit condition in scan_its_table()
KVM: arm64: vgic: Fix exit condition in scanitstable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007203 tipc: fix an information leak in tipc_topsrv_kern_subscr
tipc: fix an information leak in tipctopsrvkernsubscr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007202 i40e: Fix DMA mappings leak
i40e: Fix DMA mappings leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit ed5baf3d0a33caaca4cd4073ebb0854cc77a616d, it was...
GSD-2022-1007201 tipc: Fix recognition of trial period
tipc: Fix recognition of trial period This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007200 udp: Update reuse->has_conns under reuseport_lock.
udp: Update reuse-hasconns under reuseportlock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007199 cifs: Fix xid leak in cifs_copy_file_range()
cifs: Fix xid leak in cifscopyfilerange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007198 cifs: Fix xid leak in cifs_flock()
cifs: Fix xid leak in cifsflock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit 2d08311aa3056a84bfdc09bc47777de6a9b16c30, it...
GSD-2022-1007197 cifs: Fix xid leak in cifs_ses_add_channel()
cifs: Fix xid leak in cifssesaddchannel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007196 net: hsr: avoid possible NULL deref in skb_clone()
net: hsr: avoid possible NULL deref in skbclone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007195 nvme-hwmon: kmalloc the NVME SMART log buffer
nvme-hwmon: kmalloc the NVME SMART log buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007194 net: sched: sfb: fix null pointer access issue when sfb_init() fails
net: sched: sfb: fix null pointer access issue when sfbinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007193 net: sched: cake: fix null pointer access issue when cake_init() fails
net: sched: cake: fix null pointer access issue when cakeinit fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007192 net: hns: fix possible memory leak in hnae_ae_register()
net: hns: fix possible memory leak in hnaeaeregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...
GSD-2022-1007191 net: sched: fix race condition in qdisc_graft()
net: sched: fix race condition in qdiscgraft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...