13627 matches found
GSD-2022-1006740 drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13 by commit...
GSD-2022-1006739 clk: zynqmp: Fix stack-out-of-bounds in strncpy`
clk: zynqmp: Fix stack-out-of-bounds in strncpy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006738 btrfs: scrub: properly report super block errors in system log
btrfs: scrub: properly report super block errors in system log This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006737 btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure
btrfs: call btrfsremovefreespacecachelocked on cache load failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006736 kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT
kselftest/arm64: Fix validatation termination record after EXTRACONTEXT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006735 clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
clk: zynqmp: pll: rectify rate rounding in zynqmppllroundrate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006734 scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID
scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFTID This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006733 media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
media: cx88: Fix a null-ptr-deref bug in bufferprepare This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006732 dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow
dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006731 RDMA/rxe: Delete error messages triggered by incoming Read requests
RDMA/rxe: Delete error messages triggered by incoming Read requests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006730 power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
power: supply: adp5061: fix out-of-bounds read in adp5061getchgtype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006729 ata: libahci_platform: Sanity check the DT child nodes number
ata: libahciplatform: Sanity check the DT child nodes number This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006728 nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
nbd: Fix hung when signal interrupts nbdstartdeviceioctl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006727 staging: vt6655: fix potential memory leak
staging: vt6655: fix potential memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006726 blk-throttle: prevent overflow while calculating wait time
blk-throttle: prevent overflow while calculating wait time This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006725 HID: roccat: Fix use-after-free in roccat_read()
HID: roccat: Fix use-after-free in roccatread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006724 HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()
HSI: ssiprotocol: fix potential resource leak in ssippnopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006723 usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
usb: host: xhci: Fix potential memory leak in xhciallocstreaminfo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006722 soundwire: cadence: Don't overwrite msg->buf during write commands
soundwire: cadence: Don't overwrite msg-buf during write commands This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006721 staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw()
staging: rtl8723bs: fix potential memory leak in rtwinitdrvsw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006720 usb: musb: Fix musb_gadget.c rxstate overflow bug
usb: musb: Fix musbgadget.c rxstate overflow bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006719 io_uring: fix CQE reordering
iouring: fix CQE reordering This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 8d8ffa39bef0e26204a6c780afd0edc9099ece5d. For more...
GSD-2022-1006718 nvmet-tcp: add bounds check on Transfer Tag
nvmet-tcp: add bounds check on Transfer Tag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006717 ext2: Use kvmalloc() for group descriptor array
ext2: Use kvmalloc for group descriptor array This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006716 staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
staging: rtl8723bs: fix a potential memory leak in rtwinitcmdpriv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006715 usb: idmouse: fix an uninit-value in idmouse_open
usb: idmouse: fix an uninit-value in idmouseopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006714 blk-mq: use quiesced elevator switch when reinitializing queues
blk-mq: use quiesced elevator switch when reinitializing queues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006713 mm: hugetlb: fix UAF in hugetlb_handle_userfault
mm: hugetlb: fix UAF in hugetlbhandleuserfault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006712 hwmon (occ): Retry for checksum failure
hwmon occ: Retry for checksum failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit d94cbc3725e95579ab1aceb51430151ef9805bef...
GSD-2022-1006711 fsi: occ: Prevent use after free
fsi: occ: Prevent use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 3593e8efc9f0dac6be70bd5c964eadaa86bf2713. For...
GSD-2022-1006710 ALSA: usb-audio: Fix last interface check for registration
ALSA: usb-audio: Fix last interface check for registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006709 net/ieee802154: don't warn zero-sized raw_sendmsg()
net/ieee802154: don't warn zero-sized rawsendmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006708 io_uring: fix fdinfo sqe offsets calculation
iouring: fix fdinfo sqe offsets calculation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
GSD-2022-1006707 io-wq: Fix memory leak in worker creation
io-wq: Fix memory leak in worker creation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.4 by commit...
GSD-2022-1006706 efi: ssdt: Don't free memory if ACPI table was loaded successfully
efi: ssdt: Don't free memory if ACPI table was loaded successfully This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.4 by commit...
GSD-2022-1006705 video/aperture: Call sysfb_disable() before removing PCI devices
video/aperture: Call sysfbdisable before removing PCI devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006704 selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006703 cpufreq: qcom: fix writes in read-only memory region
cpufreq: qcom: fix writes in read-only memory region This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006702 ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006701 mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
mm,hugetlb: take hugetlblock before decrementing h-resvhugepages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006700 cpufreq: qcom: fix memory leak in error path
cpufreq: qcom: fix memory leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006699 KVM: arm64: vgic: Fix exit condition in scan_its_table()
KVM: arm64: vgic: Fix exit condition in scanitstable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006698 media: ipu3-imgu: Fix NULL pointer dereference in active selection access
media: ipu3-imgu: Fix NULL pointer dereference in active selection access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006697 tipc: fix an information leak in tipc_topsrv_kern_subscr
tipc: fix an information leak in tipctopsrvkernsubscr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006696 tipc: Fix recognition of trial period
tipc: Fix recognition of trial period This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit 4e21f28563af691eb669c3e45f8ece5bd8bf19fb,...
GSD-2022-1006695 skmsg: pass gfp argument to alloc_sk_msg()
skmsg: pass gfp argument to allocskmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit 693ddd6ffc05b228ea1638f9d757c5d3541f9446...
GSD-2022-1006694 net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe()
net: ethernet: mtkethsoc: fix possible memory leak in mtkprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006693 i40e: Fix DMA mappings leak
i40e: Fix DMA mappings leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit 5f499596dfa3db9b3172645b6de9e1096a669c95, it was...
GSD-2022-1006692 blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping()
blk-mq: fix null pointer dereference in blkmqclearrqmapping This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...
GSD-2022-1006691 scsi: lpfc: Fix memory leak in lpfc_create_port()
scsi: lpfc: Fix memory leak in lpfccreateport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...