GSD-2022-1006940 net: ehea: fix possible memory leak in ehea_register_port()

net: ehea: fix possible memory leak in ehearegisterport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006939 net: broadcom: bcm4908_enet: update TX stats after actual transmission

net: broadcom: bcm4908enet: update TX stats after actual transmission This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006938 net/mlx5: Fix possible use-after-free in async command interface

net/mlx5: Fix possible use-after-free in async command interface This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006937 net: do not sense pfmemalloc status in skb_append_pagefrags()

net: do not sense pfmemalloc status in skbappendpagefrags This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006936 usb: mon: make mmapped memory read only

usb: mon: make mmapped memory read only This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1 by commit 08e2c70e549b77f5f3af9c76da00779d5756f99...

GSD-2022-1006935 Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works

Bluetooth: use hdev-workqueue when queuing hdev-cmd,ncmdtimer works This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1 by commit...

GSD-2022-1006934 fs: fix UAF/GPF bug in nilfs_mdt_destroy

fs: fix UAF/GPF bug in nilfsmdtdestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.1 by commit 2a96b532098284ecf8e4849b8b9e5fc7a28bdee9...

GSD-2022-1006933 nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()

nilfs2: fix NULL pointer dereference at nilfsbmaplookupatlevel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006932 nilfs2: fix leak of nilfs_root in case of writer thread creation failure

nilfs2: fix leak of nilfsroot in case of writer thread creation failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006931 wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()

wifi: cfg80211: fix u8 overflow in cfg80211updatenotlistednontrans This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006930 nilfs2: fix use-after-free bug of struct nilfs_root

nilfs2: fix use-after-free bug of struct nilfsroot This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006929 nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure

nilfs2: replace WARNONs by nilfserror for checkpoint acquisition failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006928 scsi: stex: Properly zero out the passthrough command structure

scsi: stex: Properly zero out the passthrough command structure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006927 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006926 wifi: cfg80211/mac80211: reject bad MBSSID elements

wifi: cfg80211/mac80211: reject bad MBSSID elements This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006925 wifi: cfg80211: fix BSS refcounting bugs

wifi: cfg80211: fix BSS refcounting bugs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006924 wifi: cfg80211: avoid nontransmitted BSS list corruption

wifi: cfg80211: avoid nontransmitted BSS list corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006923 wifi: mac80211: fix crash in beacon protection for P2P-device

wifi: mac80211: fix crash in beacon protection for P2P-device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006922 mctp: prevent double key removal and unref

mctp: prevent double key removal and unref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006921 misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic

misc: pciendpointtest: Fix pciendpointtestcopy,write,read panic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006920 io_uring/af_unix: defer registered files gc to io_uring release

iouring/afunix: defer registered files gc to iouring release This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006919 ALSA: usb-audio: Fix potential memory leaks

ALSA: usb-audio: Fix potential memory leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006918 cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message

cifs: Fix the error length of VALIDATENEGOTIATEINFO message This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006917 usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video()

usb: gadget: uvc: Fix argument to sizeof in uvcregistervideo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006916 i2c: designware: Fix handling of real but unexpected device interrupts

i2c: designware: Fix handling of real but unexpected device interrupts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006915 xhci: dbc: Fix memory leak in xhci_alloc_dbc()

xhci: dbc: Fix memory leak in xhciallocdbc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006914 fs: dlm: fix invalid derefence of sb_lvbptr

fs: dlm: fix invalid derefence of sblvbptr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006913 regulator: qcom_rpm: Fix circular deferral regression

regulator: qcomrpm: Fix circular deferral regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006912 RISC-V: Make port I/O string accessors actually work

RISC-V: Make port I/O string accessors actually work This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006911 net: thunderbolt: Enable DMA paths only after rings are enabled

net: thunderbolt: Enable DMA paths only after rings are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006910 riscv: vdso: fix NULL deference in vdso_join_timens() when vfork

riscv: vdso: fix NULL deference in vdsojointimens when vfork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006909 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

UM: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006908 dm: verity-loadpin: Only trust verity targets with enforcement

dm: verity-loadpin: Only trust verity targets with enforcement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006907 nvmem: core: Fix memleak in nvmem_register()

nvmem: core: Fix memleak in nvmemregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006906 dmaengine: qcom-adm: fix wrong sizeof config in slave_config

dmaengine: qcom-adm: fix wrong sizeof config in slaveconfig This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006905 dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg

dmaengine: qcom-adm: fix wrong calling convention for prepslavesg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006904 arm64: mte: move register initialization to C

arm64: mte: move register initialization to C This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006903 arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored

arm64: mte: Avoid setting PGmtetagged if no tags cleared or restored This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006902 drm/virtio: Check whether transferred 2D BO is shmem

drm/virtio: Check whether transferred 2D BO is shmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006901 xen/gntdev: Accommodate VMA splitting

xen/gntdev: Accommodate VMA splitting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit cdafa219ace013c594e2491158ad1b51f9923dde,...

GSD-2022-1006900 mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in

mm/uffd: fix warning without PTEMARKERUFFDWP compiled in This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006899 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 273f6a4f71be12e2ec80a4919837d6e4fa933a04, it...

GSD-2022-1006898 slimbus: qcom-ngd: cleanup in probe error path

slimbus: qcom-ngd: cleanup in probe error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006897 NFSD: Protect against send buffer overflow in NFSv3 READDIR

NFSD: Protect against send buffer overflow in NFSv3 READDIR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006896 ksmbd: fix incorrect handling of iterate_dir

ksmbd: fix incorrect handling of iteratedir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006895 NFSD: Protect against send buffer overflow in NFSv2 READ

NFSD: Protect against send buffer overflow in NFSv2 READ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006894 NFSD: Protect against send buffer overflow in NFSv3 READ

NFSD: Protect against send buffer overflow in NFSv3 READ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006893 btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer

btrfs: set generation before calling btrfscleantreeblock in btrfsinitnewbuffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006892 fbdev: smscufx: Fix use-after-free in ufx_ops_open()

fbdev: smscufx: Fix use-after-free in ufxopsopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006891 btrfs: fix race between quota enable and quota rescan ioctl

btrfs: fix race between quota enable and quota rescan ioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...