13627 matches found
GSD-2022-1006890 f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on destination blkaddr during recovery This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006889 jbd2: add miss release buffer head in fc_do_one_pass()
jbd2: add miss release buffer head in fcdoonepass This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006888 ext4: fix check for block being out of directory size
ext4: fix check for block being out of directory size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006887 jbd2: fix potential buffer head reference count leak
jbd2: fix potential buffer head reference count leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006886 jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
jbd2: fix potential use-after-free in jbd2fcwaitbufs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006885 f2fs: fix to do sanity check on summary info
f2fs: fix to do sanity check on summary info This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006884 ext2: Add sanity checks for group and filesystem size
ext2: Add sanity checks for group and filesystem size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006883 ext4: avoid crash when inline data creation follows DIO write
ext4: avoid crash when inline data creation follows DIO write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006882 ext4: fix null-ptr-deref in ext4_write_info
ext4: fix null-ptr-deref in ext4writeinfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006881 ext4: fix i_version handling in ext4
ext4: fix iversion handling in ext4 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 6eec744d48e8b5ebe313e1409111e75fad8e2961. F...
GSD-2022-1006880 ext4: fix potential memory leak in ext4_fc_record_modified_inode()
ext4: fix potential memory leak in ext4fcrecordmodifiedinode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006879 ext4: fix dir corruption when ext4_dx_add_entry() fails
ext4: fix dir corruption when ext4dxaddentry fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006878 rpmsg: char: Avoid double destroy of default endpoint
rpmsg: char: Avoid double destroy of default endpoint This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006877 KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02
KVM: nVMX: Don't propagate vmcs12's PERFGLOBALCTRL settings to vmcs02 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006876 tracing: Fix reading strings from synthetic events
tracing: Fix reading strings from synthetic events This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006875 ext4: fix potential memory leak in ext4_fc_record_regions()
ext4: fix potential memory leak in ext4fcrecordregions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006874 staging: greybus: audio_helper: remove unused and wrong debugfs usage
staging: greybus: audiohelper: remove unused and wrong debugfs usage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006873 sh: machvec: Use char[] for section boundaries
sh: machvec: Use char for section boundaries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006872 drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
drm/nouveau: fix a use-after-free in nouveaugemprimeimportsgtable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006871 MIPS: SGI-IP30: Fix platform-device leak in bridge_platform_create()
MIPS: SGI-IP30: Fix platform-device leak in bridgeplatformcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006870 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()
MIPS: SGI-IP27: Fix platform-device leak in bridgeplatformcreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006869 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
erofs: fix order = MAXORDER warning due to crafted negative isize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006868 NFSD: Protect against send buffer overflow in NFSv2 READDIR
NFSD: Protect against send buffer overflow in NFSv2 READDIR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006867 nfsd: Fix a memory leak in an error handling path
nfsd: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006866 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
wifi: ath10k: add peer map clean up for peer delete in ath10kstastate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006865 wifi: ath10k: Set tx credit to one for WCN3990 snoc based devices
wifi: ath10k: Set tx credit to one for WCN3990 snoc based devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006864 bpf: Fix reference state management for synchronous callbacks
bpf: Fix reference state management for synchronous callbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006863 wifi: mac80211: fix use-after-free
wifi: mac80211: fix use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit aebef10affe16228462af680b88751bf137e2856, it...
GSD-2022-1006862 bpf: Propagate error from htab_lock_bucket() to userspace
bpf: Propagate error from htablockbucket to userspace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006861 wifi: wfx: prevent underflow in wfx_send_pds()
wifi: wfx: prevent underflow in wfxsendpds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006860 ice: set tx_tstamps when creating new Tx rings via ethtool
ice: set txtstamps when creating new Tx rings via ethtool This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006859 Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()
Bluetooth: avoid hcidevtestandsetflag in mgmtinithdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006858 selftests/xsk: Avoid use-after-free on ctx
selftests/xsk: Avoid use-after-free on ctx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006857 wifi: mt76: mt7921e: fix rmmod crash in driver reload test
wifi: mt76: mt7921e: fix rmmod crash in driver reload test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006856 wifi: mt76: mt7921: fix use after free in mt7921_acpi_read()
wifi: mt76: mt7921: fix use after free in mt7921acpiread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006855 Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
Bluetooth: hcildisc,serdev: check percpuinitrwsem failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006854 wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected
wifi: ath11k: fix failed to find the peer with peerid 0 when disconnected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006853 mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv
mwifiex: fix sleep in atomic context bugs caused by devcoredumpv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
GSD-2022-1006852 xfrm: Reinject transport-mode packets through workqueue
xfrm: Reinject transport-mode packets through workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006851 Bluetooth: Prevent double register of suspend
Bluetooth: Prevent double register of suspend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006850 vhost/vsock: Use kvmalloc/kvfree for larger packets.
vhost/vsock: Use kvmalloc/kvfree for larger packets. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006849 eth: alx: take rtnl_lock on resume
eth: alx: take rtnllock on resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit c0323c0fd07804d5874699e93f935cda0d989c67, it...
GSD-2022-1006848 sctp: handle the error returned from sctp_auth_asoc_init_active_key
sctp: handle the error returned from sctpauthasocinitactivekey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006847 mISDN: fix use-after-free bugs in l1oip timer handlers
mISDN: fix use-after-free bugs in l1oip timer handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006846 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006845 af_unix: Fix memory leaks of the whole sk due to OOB skb.
afunix: Fix memory leaks of the whole sk due to OOB skb. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006844 bnx2x: fix potential memory leak in bnx2x_tpa_stop()
bnx2x: fix potential memory leak in bnx2xtpastop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006843 net/ieee802154: reject zero-sized raw_sendmsg()
net/ieee802154: reject zero-sized rawsendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006842 eth: sp7021: fix use after free bug in spl2sw_nvmem_get_mac_address
eth: sp7021: fix use after free bug in spl2swnvmemgetmacaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006841 drm: bridge: adv7511: unregister cec i2c device after cec adapter
drm: bridge: adv7511: unregister cec i2c device after cec adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...