13627 matches found
GSD-2022-1005939 net: Fix a data-race around sysctl_net_busy_poll.
net: Fix a data-race around sysctlnetbusypoll. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005938 net: Fix a data-race around netdev_budget_usecs.
net: Fix a data-race around netdevbudgetusecs. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005937 s390: fix double free of GS and RI CBs on fork() failure
s390: fix double free of GS and RI CBs on fork failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005936 md: call __md_stop_writes in md_stop
md: call mdstopwrites in mdstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit 8e7fb19f1a744fd34e982633ced756fee0498ef7, it...
GSD-2022-1005935 scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
scsi: storvsc: Remove WQMEMRECLAIM from storvscerrorwq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005934 HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005933 loop: Check for overflow while configuring loop
loop: Check for overflow while configuring loop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005932 net/af_packet: check len when min_header_len equals to 0
net/afpacket: check len when minheaderlen equals to 0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005931 udmabuf: Set the DMA mask for the udmabuf device (v2)
udmabuf: Set the DMA mask for the udmabuf device v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005930 media: pvrusb2: fix memory leak in pvr_probe
media: pvrusb2: fix memory leak in pvrprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005929 HID: hidraw: fix memory leak in hidraw_release()
HID: hidraw: fix memory leak in hidrawrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005928 fbdev: fb_pm2fb: Avoid potential divide by zero error
fbdev: fbpm2fb: Avoid potential divide by zero error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005927 ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
ftrace: Fix NULL pointer dereference in isftracetrampoline when ftrace is dead This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commi...
GSD-2022-1005926 bpf: Don't redirect packets with invalid pkt_len
bpf: Don't redirect packets with invalid pktlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005925 drm/amd/display: clear optc underflow before turn off odm clock
drm/amd/display: clear optc underflow before turn off odm clock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005924 crypto: arm64/poly1305 - fix a read out-of-bound
crypto: arm64/poly1305 - fix a read out-of-bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.136 by commit...
GSD-2022-1005923 ALSA: bcd2000: Fix a UAF bug on the error path of probing
ALSA: bcd2000: Fix a UAF bug on the error path of probing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005922 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case
KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005921 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case
KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005920 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005919 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005918 drm/nouveau: fix another off-by-one in nvbios_addr
drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005917 iio: light: isl29028: Fix the warning in isl29028_remove()
iio: light: isl29028: Fix the warning in isl29028remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005916 bpf: Fix KASAN use-after-free Read in compute_effective_progs
bpf: Fix KASAN use-after-free Read in computeeffectiveprogs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...
GSD-2022-1005915 tty: vt: initialize unicode screen buffer
tty: vt: initialize unicode screen buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005914 usbnet: Fix linkwatch use-after-free on disconnect
usbnet: Fix linkwatch use-after-free on disconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005913 md-raid: destroy the bitmap after destroying the thread
md-raid: destroy the bitmap after destroying the thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005912 coresight: Clear the connection field properly
coresight: Clear the connection field properly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005911 netfilter: nf_tables: do not allow SET_ID to refer to another table
netfilter: nftables: do not allow SETID to refer to another table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005910 netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
netfilter: nftables: do not allow CHAINID to refer to another table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005909 netfilter: nf_tables: fix null deref due to zeroed list head
netfilter: nftables: fix null deref due to zeroed list head This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005908 btrfs: reject log replay if there is unsupported RO compat flag
btrfs: reject log replay if there is unsupported RO compat flag This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005907 scsi: sg: Allow waiting for commands to complete on removed device
scsi: sg: Allow waiting for commands to complete on removed device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005906 md-raid10: fix KASAN warning
md-raid10: fix KASAN warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit 5fd4ffa2372a41361d2bdd27ea5730e4e673240c. For...
GSD-2022-1005905 MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
MIPS: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005904 arm64: Do not forget syscall when starting a new thread.
arm64: Do not forget syscall when starting a new thread. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005903 arm64: fix oops in concurrently setting insn_emulation sysctls
arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005902 ARM: bcm: Fix refcount leak in bcm_kona_smc_init
ARM: bcm: Fix refcount leak in bcmkonasmcinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005901 x86/pmem: Fix platform-device leak in error path
x86/pmem: Fix platform-device leak in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005900 meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
meson-mx-socinfo: Fix refcount leak in mesonmxsocinfoinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005899 soc: amlogic: Fix refcount leak in meson-secure-pwrc.c
soc: amlogic: Fix refcount leak in meson-secure-pwrc.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005898 ARM: OMAP2+: display: Fix refcount leak bug
ARM: OMAP2+: display: Fix refcount leak bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005897 ext2: Add more validity checks for inode counts
ext2: Add more validity checks for inode counts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005896 ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
ARM: OMAP2+: Fix refcount leak in omap3xxxprmlateinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005895 cpufreq: zynq: Fix refcount leak in zynq_get_revision
cpufreq: zynq: Fix refcount leak in zynqgetrevision This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005894 ARM: OMAP2+: Fix refcount leak in omapdss_init_of
ARM: OMAP2+: Fix refcount leak in omapdssinitof This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005893 PM: hibernate: defer device probing when resuming from hibernation
PM: hibernate: defer device probing when resuming from hibernation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005892 soc: qcom: ocmem: Fix refcount leak in of_get_ocmem
soc: qcom: ocmem: Fix refcount leak in ofgetocmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005891 selinux: Add boundary check in put_entry()
selinux: Add boundary check in putentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...
GSD-2022-1005890 soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register
soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...