TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2021-1000717
Summary: ocfs2: fix data corruption by fallocate
Published: 2021-06-24T23:58:55.245251Z

ocfs2: fix data corruption by fallocate

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.272 by commit 624fa7baa3788dc9e57840ba5b94bc22b03cda57, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1000892
Summary: sr9700: sanity check for packet length
Published: 2022-03-18T00:28:53.983088Z

sr9700: sanity check for packet length

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.182 by commit b95d71abeb7d31d4d51cd836d80f99fd783fd6d5. For more details please see the references link.
Vulnerability: GSD-2022-1001780
Summary: media: imx-jpeg: fix a bug of accessing array out of bounds
Published: 2022-04-24T21:42:00.473574Z

media: imx-jpeg: fix a bug of accessing array out of bounds

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 02f9f97d54ffc85b50ad77f5b1f3c8f69cd17747. For more details please see the references link.
Vulnerability: GSD-2021-1000202
Summary: userfaultfd: release page in error path to avoid BUG_ON
Published: 2021-05-31T15:39:45.041586Z

userfaultfd: release page in error path to avoid BUG_ON

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 2d59a0ed8b26b8f3638d8afc31f839e27759f1f6, it was introduced in version v4.11 by commit cb658a453b9327ce96ce5222c24d162b5b65b564. For more details please see the references link.
Vulnerability: GSD-2022-1001295
Summary: mmc: core: use sysfs_emit() instead of sprintf()
Published: 2022-04-24T21:01:59.853177Z

mmc: core: use sysfs_emit() instead of sprintf()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit c4ab65738ab3e21fe519ee46b2051222bc8e32ef. For more details please see the references link.
Vulnerability: GSD-2021-1002395
Summary: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
Published: 2021-12-19T19:35:27.400070Z

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit 550658a2d61e4eaf522c8ebc7fad76dc376bfb45, it was introduced in version v3.9 by commit 7f9664525f9cb507de9198a395a111371413f230. For more details please see the references link.
Vulnerability: GSD-2021-1001940
Summary: isdn: mISDN: Fix sleeping function called from invalid context
Published: 2021-11-14T15:12:34.857736Z

isdn: mISDN: Fix sleeping function called from invalid context

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.288 by commit ef269a8808cb1759245a98a7fe16fceaebad894c. For more details please see the references link.
Vulnerability: GSD-2021-1000652
Summary: btrfs: do not BUG_ON in link_to_fixup_dir
Published: 2021-06-04T19:55:00.082285Z

btrfs: do not BUG_ON in link_to_fixup_dir

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit 6eccfb28f8dca70c9b1b3bb3194ca54cbe73a9fa, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1002143
Summary: remoteproc: Fix count check in rproc_coredump_write()
Published: 2022-04-24T22:15:48.549476Z

remoteproc: Fix count check in rproc_coredump_write()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit b97b305656a7013690e7b6e310f0e827e0bbff90, it was introduced in version v5.9 by commit 3afdc59e4390487f04f2435b7e8a6289984e0a1e. For more details please see the references link.
Vulnerability: GSD-2021-1001413
Summary: seq_file: disallow extremely large seq buffer allocations
Published: 2021-08-03T02:33:42.828810Z

seq_file: disallow extremely large seq buffer allocations

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 3c07d1335d17ae0411101024de438dbc3734e992, it was introduced in version v3.16 by commit 058504edd02667eef8fac9be27ab3ea74332e9b4. For more details please see the references link.
Vulnerability: GSD-2022-1000484
Summary: ima: fix reference leak in asymmetric_verify()
Published: 2022-02-27T03:13:15.564399Z

ima: fix reference leak in asymmetric_verify()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 89f586d3398f4cc0432ed870949dffb702940754, it was introduced in version v5.13 by commit 947d70597236dd5ae65c1f68c8eabfb962ee5a6b. For more details please see the references link.
Vulnerability: GSD-2022-1002513
Summary: jffs2: fix memory leak in jffs2_scan_medium
Published: 2022-04-24T22:56:57.862182Z

jffs2: fix memory leak in jffs2_scan_medium

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 9b0c69182f09b70779817af4dcf89780955d5c4c, it was introduced in version v2.6.15 by commit e631ddba588783edd521c5a89f7b2902772fb691. For more details please see the references link.
Vulnerability: GSD-2021-1001043
Summary: NFS: Fix a potential NULL dereference in nfs_get_client()
Published: 2021-06-30T00:35:55.330359Z

NFS: Fix a potential NULL dereference in nfs_get_client()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit 58ddf61f10b8f9b7b1341644bfee2f1c6508d4e1, it was introduced in version v3.17 by commit 31434f496abb9f3410b10f541462fe58613dd3ad. For more details please see the references link.
Vulnerability: GSD-2021-1000081
Summary: ACPI: custom_method: fix potential use-after-free issue
Published: 2021-05-31T15:39:45.031586Z

ACPI: custom_method: fix potential use-after-free issue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit b7a5baaae212a686ceb812c32fceed79c03c0234, it was introduced in version v5.4 by commit 03d1571d9513369c17e6848476763ebbd10ec2cb. For more details please see the references link.
Vulnerability: GSD-2022-1001016
Summary: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
Published: 2022-04-24T20:40:05.382993Z

IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 57800cc36e55db0547461c49acf5cd84c0f502b0, it was introduced in version v5.1 by commit d757c60eca9b22f4d108929a24401e0fdecda0b1. For more details please see the references link.
Vulnerability: GSD-2021-1002546
Summary: vdpa_sim: avoid putting an uninitialized iova_domain
Published: 2021-12-19T19:42:06.743062Z

vdpa_sim: avoid putting an uninitialized iova_domain

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.6 by commit e4d58ac67e63727aa45a4a26185876f598e8b3dd, it was introduced in version v5.13 by commit 4080fc1067501707b9693b8003feae7d50d14e35. For more details please see the references link.
Vulnerability: GSD-2022-1001446
Summary: scsi: qla2xxx: Fix premature hw access after PCI error
Published: 2022-04-24T21:14:04.391679Z

scsi: qla2xxx: Fix premature hw access after PCI error

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit d7994dff9071555a959a168f9184dd9abae68a6b. For more details please see the references link.
Vulnerability: GSD-2021-1002116
Summary: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
Published: 2021-11-14T15:20:33.641128Z

scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit a7fbb56e6c941d9f59437b96412a348e66388d3e, it was introduced in version v3.11 by commit 8c0eb596baa51f2b43949c698c644727ef17805c. For more details please see the references link.
Vulnerability: GSD-2021-1001690
Summary: drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
Published: 2021-10-19T16:32:01.118002Z

drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.12 by commit 72e9a1bf9b722628c28092e0c2cd8717edd201dc, it was introduced in version v5.10 by commit c9a6b82f45e261d247b980a7949aaa6a9bfffe01. For more details please see the references link.
Vulnerability: GSD-2021-1000982
Summary: mptcp: Fix out of bounds when parsing TCP options
Published: 2021-06-30T00:31:14.739846Z

mptcp: Fix out of bounds when parsing TCP options

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 73eeba71dc9932970befa009e68272a3d5ec4a58, it was introduced in version v5.6 by commit cec37a6e41aae7bf3df9a3da783380a4d9325fd8. For more details please see the references link.
Vulnerability: GSD-2022-1000607
Summary: ceph: properly put ceph_string reference after async create attempt
Published: 2022-02-27T03:30:02.848363Z

ceph: properly put ceph_string reference after async create attempt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit a0c22e970cd78b81c94691e6cb09713e8074d580, it was introduced in version v5.7 by commit 9a8d03ca2e2c334d08ee91a3e07dcce31a02fdc6. For more details please see the references link.
Vulnerability: GSD-2022-1001915
Summary: rtc: pl031: fix rtc features null pointer dereference
Published: 2022-04-24T21:54:12.540721Z

rtc: pl031: fix rtc features null pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit cd2722e411e8ab7e5ae41102f6925fa13dffdac5, it was introduced in version v5.12 by commit d9b0dd54a1943f47a381a474f8ea2c94466110c0. For more details please see the references link.
Vulnerability: GSD-2022-1000257
Summary: ARM: 9170/1: fix panic when kasan and kprobe are enabled
Published: 2022-02-18T22:02:08.473232Z

ARM: 9170/1: fix panic when kasan and kprobe are enabled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit 1515e72aae803fc6b466adf918e71c4e4c9d5b3d, it was introduced in version v2.6.25 by commit 35aa1df4328340f38edc46f00837f08d33d49f63. For more details please see the references link.
Vulnerability: GSD-2021-1002815
Summary: hamradio: improve the incomplete fix to avoid NPD
Published: 2021-12-30T02:44:39.465532Z

hamradio: improve the incomplete fix to avoid NPD

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.89 by commit 7dd52af1eb5798f590d9d9e1c56ed8f5744ee0ca. For more details please see the references link.
Vulnerability: GSD-2021-1000828
Summary: bonding: init notify_work earlier to avoid uninitialized use
Published: 2021-06-29T23:59:54.546178Z

bonding: init notify_work earlier to avoid uninitialized use

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.273 by commit 818298d54aa0d7b3baf5635c94ff3b39b48d037f. For more details please see the references link.
Vulnerability: GSD-2022-1002285
Summary: tpm: fix reference counting for struct tpm_chip
Published: 2022-04-24T22:30:15.227354Z

tpm: fix reference counting for struct tpm_chip

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit a27ed2f3695baf15f9b34d2d7a1f9fc105539a81, it was introduced in version v4.12 by commit fdc915f7f71939ad5a3dda3389b8d2d7a7c5ee66. For more details please see the references link.
Vulnerability: GSD-2022-1000742
Summary: netfilter: nf_tables: unregister flowtable hooks on netns exit
Published: 2022-03-18T00:14:31.508765Z

netfilter: nf_tables: unregister flowtable hooks on netns exit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit b4fcc081e527aa2ce12e956912fc47e251f6bd27, it was introduced in version v5.5 by commit ff4bf2f42a40e7dff28379f085b64df322c70b45. For more details please see the references link.
Vulnerability: GSD-2022-1001850
Summary: ext2: correct max file size computing
Published: 2022-04-24T21:48:06.610879Z

ext2: correct max file size computing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 3813591bc046f8c4739a6be0c92acf05a1a1d729, it was introduced in version v5.1 by commit 1c2d14212b15a60300a2d4f6364753e87394c521. For more details please see the references link.
Vulnerability: GSD-2021-1001385
Summary: NFSv4: Initialise connection to the server in nfs4_alloc_client()
Published: 2021-08-03T02:26:02.642318Z

NFSv4: Initialise connection to the server in nfs4_alloc_client()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 743f6b973c8ba8a0a5ed15ab11e1d07fa00d5368, it was introduced in version v4.8 by commit 5c6e5b60aae4347223f176966455010a5715b863. For more details please see the references link.
Vulnerability: GSD-2022-1000312
Summary: drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
Published: 2022-02-27T02:49:31.288168Z

drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.268 by commit cbc0e2a098872c3d510aa492c5e487f52aea0e7c, it was introduced in version v2.6.31 by commit 4ea7e38696c7e798c47ebbecadfd392f23f814f9. For more details please see the references link.
Vulnerability: GSD-2021-1002403
Summary: seg6: fix the iif in the IPv6 socket control block
Published: 2021-12-19T19:35:46.774237Z

seg6: fix the iif in the IPv6 socket control block

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.258 by commit b16d412e5f79734033df04e97d7ea2f50a8e9fe3, it was introduced in version v4.14.98 by commit c630ec8bdadae9d557b1ceb9d6c06e149108a0d4. For more details please see the references link.
Vulnerability: GSD-2022-1001153
Summary: parisc: Fix non-access data TLB cache flush faults
Published: 2022-04-24T20:49:12.190281Z

parisc: Fix non-access data TLB cache flush faults

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit ddca4b82027e2a66333dd40fab21a4beff435c7e. For more details please see the references link.
Vulnerability: GSD-2021-1002053
Summary: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
Published: 2021-11-14T15:17:42.301777Z

scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 96f0aebf29be25254fa585af43924e34aa21fd9a, it was introduced in version v3.11 by commit 8c0eb596baa51f2b43949c698c644727ef17805c. For more details please see the references link.
Vulnerability: GSD-2021-1000594
Summary: net: dsa: fix a crash if ->get_sset_count() fails
Published: 2021-06-04T19:44:10.676106Z

net: dsa: fix a crash if ->get_sset_count() fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6, it was introduced in version v4.7 by commit badf3ada60ab8f76f9488dc8f5c0c57f70682f5a. For more details please see the references link.
Vulnerability: GSD-2022-1001503
Summary: cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse
Published: 2022-04-24T21:18:02.234009Z

cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 22b1ea0421d486b8a7e49cad4a2f3c18f6305300, it was introduced in version v5.7 by commit a8811ec764f95a04ba82f6f457e28c5e9e36e36b. For more details please see the references link.
Vulnerability: GSD-2021-1002287
Summary: perf bench futex: Fix memory leak of perf_cpu_map__new()
Published: 2021-11-29T02:37:08.146124Z

perf bench futex: Fix memory leak of perf_cpu_map__new()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.82 by commit 2ada5c0877f4aa9b0749e7777557d9a5d2973082, it was introduced in version v5.4 by commit 9c3516d1b850ea938b074df33e4c86d721c77720. For more details please see the references link.
Vulnerability: GSD-2021-1001852
Summary: drm/msm: Fix null pointer dereference on pointer edp
Published: 2021-10-28T13:52:14.319362Z

drm/msm: Fix null pointer dereference on pointer edp

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.75 by commit 91a340768b012f5b910a203a805b97a345b3db37, it was introduced in version v4.0 by commit ab5b0107ccf3821a6837b0f2819270d6fa0b278f. For more details please see the references link.
Vulnerability: GSD-2021-1000740
Summary: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
Published: 2021-06-25T00:00:24.399787Z

ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.194 by commit 569496aa3776eea1ff0d49d0174ac1b7e861e107, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000310
Summary: KVM: VMX: Disable preemption when probing user return MSRs
Published: 2021-05-31T15:39:45.041586Z

KVM: VMX: Disable preemption when probing user return MSRs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.38 by commit 31f29749ee970c251b3a7e5b914108425940d089, it was introduced in version v5.5 by commit 4be5341026246870818e28b53202b001426a5aec. For more details please see the references link.
Vulnerability: GSD-2022-1001387
Summary: mt76: fix monitor mode crash with sdio driver
Published: 2022-04-24T21:09:38.673724Z

mt76: fix monitor mode crash with sdio driver

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit c37b4cab3d97ef64b206fca4d9daabd9aff7356e. For more details please see the references link.
Vulnerability: GSD-2022-1002401
Summary: drm/imx: Fix memory leak in imx_pd_connector_get_modes
Published: 2022-04-24T22:43:28.685657Z

drm/imx: Fix memory leak in imx_pd_connector_get_modes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 38bf605bd8c83d942c8dcffaef3633b7d8b37549, it was introduced in version v4.8 by commit 76ecd9c9fb24b014a6f33fbb1287ede3be12158b. For more details please see the references link.
Vulnerability: GSD-2021-1001151
Summary: net: fddi: fix UAF in fza_probe
Published: 2021-08-03T01:30:47.097675Z

net: fddi: fix UAF in fza_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.5 by commit bdfbb51f7a437ae8ea91317a5c133ec13adf3c47, it was introduced in version v4.20 by commit 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d. For more details please see the references link.
Vulnerability: GSD-2022-1002051
Summary: ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
Published: 2022-04-24T22:05:56.826044Z

ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit cd6d719534af993210306f8a13f9cb3e615f7c8d. For more details please see the references link.
Vulnerability: GSD-2021-1001501
Summary: blktrace: Fix uaf in blk_trace access after removing by sysfs
Published: 2021-10-19T16:21:06.069099Z

blktrace: Fix uaf in blk_trace access after removing by sysfs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.286 by commit 488da313edf3abea7f7733efe011c96b23740ab5, it was introduced in version v2.6.30 by commit c71a896154119f4ca9e89d6078f5f63ad60ef199. For more details please see the references link.
Vulnerability: GSD-2022-1000596
Summary: moxart: fix potential use-after-free on remove path
Published: 2022-02-27T03:28:47.746542Z

moxart: fix potential use-after-free on remove path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.23 by commit af0e6c49438b1596e4be8a267d218a0c88a42323. For more details please see the references link.
Vulnerability: GSD-2021-1001014
Summary: net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
Published: 2021-06-30T00:33:59.213568Z

net/qla3xxx: fix schedule while atomic in ql_sem_spinlock

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit 2ed296c47e5c545a26bb774ec7a87e5369e6ddf9. For more details please see the references link.
Vulnerability: GSD-2022-1000083
Summary: net: fix information leakage in /proc/net/ptype
Published: 2022-02-18T21:33:18.040157Z

net: fix information leakage in /proc/net/ptype

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.300 by commit be1ca30331c7923c6f376610c1bd6059be9b1908, it was introduced in version v2.6.26 by commit 2feb27dbe00cbb4f7d31f90acf6bd0d751dd0a50. For more details please see the references link.
Vulnerability: GSD-2022-1000579
Summary: IB/hfi1: Fix AIP early init panic
Published: 2022-02-27T03:26:53.201887Z

IB/hfi1: Fix AIP early init panic

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit a3dd4d2682f2a796121609e5f3bbeb1243198c53, it was introduced in version v5.8 by commit d99dc602e2a55a99940ba9506a7126dfa54d54ea. For more details please see the references link.
Vulnerability: GSD-2021-1001444
Summary: memory: fsl_ifc: fix leak of IO mapping on probe failure
Published: 2021-08-03T02:43:36.180287Z

memory: fsl_ifc: fix leak of IO mapping on probe failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.276 by commit d0d04b95e8ed0223844a1d58497c686fe2e4a955, it was introduced in version v3.3 by commit a20cbdeffce247a2b6fb83cd8d22433994068565. For more details please see the references link.
Vulnerability: GSD-2022-1002114
Summary: watch_queue: Actually free the watch
Published: 2022-04-24T22:12:59.992531Z

watch_queue: Actually free the watch

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 9d92be1a09fbb3dd65600dbfe7eedb40e7228e4b, it was introduced in version v5.8 by commit c73be61cede5882f9605a852414db559c0ebedfd. For more details please see the references link.
Vulnerability: GSD-2022-1000129
Summary: phylib: fix potential use-after-free
Published: 2022-02-18T21:44:21.776130Z

phylib: fix potential use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.228 by commit 67d271760b037ce0806d687ee6057edc8afd4205, it was introduced in version v4.16 by commit bafbdd527d569c8200521f2f7579f65a044271be. For more details please see the references link.
Vulnerability: GSD-2021-1001917
Summary: drm/msm: Fix null pointer dereference on pointer edp
Published: 2021-11-14T15:11:37.427591Z

drm/msm: Fix null pointer dereference on pointer edp

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.290 by commit f175b9a83e5c252d7c74acddc792840016caae0a, it was introduced in version v4.0 by commit ab5b0107ccf3821a6837b0f2819270d6fa0b278f. For more details please see the references link.
Vulnerability: GSD-2021-1000605
Summary: serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
Published: 2021-06-04T19:46:25.219411Z

serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit 6a931ceb0b9401fe18d0c500e08164bf9cc7be4b, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1002638
Summary: dm btree remove: fix use after free in rebalance_children()
Published: 2021-12-27T05:28:25.055325Z

dm btree remove: fix use after free in rebalance_children()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.259 by commit b03abd0aa09c05099f537cb05b8460c4298f0861. For more details please see the references link.
Vulnerability: GSD-2022-1000980
Summary: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
Published: 2022-04-24T20:36:49.603226Z

net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.4 by commit 22025513ced3d599ee8b24169141c95cf2467a4a, it was introduced in version v5.1 by commit af5f60c7e3d593c2fa31b9a62c16eae75f074de3. For more details please see the references link.
Vulnerability: GSD-2022-1001692
Summary: net: sfc: add missing xdp queue reinitialization
Published: 2022-04-24T21:35:43.858696Z

net: sfc: add missing xdp queue reinitialization

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit ed7a824fda8732578d1014fad1f7fb0363705090, it was introduced in version v5.5 by commit 3990a8fffbdad5765f47ea593f9de66c91762059. For more details please see the references link.
Vulnerability: GSD-2022-1001368
Summary: NFS: Avoid writeback threads getting stuck in mempool_alloc()
Published: 2022-04-24T21:08:26.945770Z

NFS: Avoid writeback threads getting stuck in mempool_alloc()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 1b3fa9a3c420c31e77b406ddc28f3a627100516c. For more details please see the references link.
Vulnerability: GSD-2021-1000255
Summary: mt76: mt7921: fix memory leak in mt7921_coredump_work
Published: 2021-05-31T15:39:45.041586Z

mt76: mt7921: fix memory leak in mt7921_coredump_work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 4811226374453607175ea057777faa7e7f752204, it was introduced in version v5.12 by commit 1c099ab44727c8e42fe4de4d91b53cec3ef02860. For more details please see the references link.
Vulnerability: GSD-2021-1002268
Summary: usb: host: ohci-tmio: check return value after calling platform_get_resource()
Published: 2021-11-29T02:36:12.127333Z

usb: host: ohci-tmio: check return value after calling platform_get_resource()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.162 by commit f98986b7acb4219f95789095eced93ed69d81d35. For more details please see the references link.
Vulnerability: GSD-2022-1001738
Summary: usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value
Published: 2022-04-24T21:38:28.767333Z

usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 052fb1c9ddfbee13ec73e73532be66c08531c26b. For more details please see the references link.
Vulnerability: GSD-2021-1002792
Summary: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
Published: 2021-12-30T02:43:36.773683Z

IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.169 by commit 79dcbd8176152b860028b62f81a635d987365752, it was introduced in version v5.4.157 by commit 0f8cdfff06829a0b0348b6debc29ff6a61967724. For more details please see the references link.
Vulnerability: GSD-2021-1002842
Summary: f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
Published: 2021-12-30T02:45:52.550926Z

f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit a8a9d753edd7f71e6a2edaa580d8182530b68791. For more details please see the references link.
Vulnerability: GSD-2021-1001297
Summary: drm/amd/display: Avoid HDCP over-read and corruption
Published: 2021-08-03T02:00:45.754324Z

drm/amd/display: Avoid HDCP over-read and corruption

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.51 by commit c5b518f4b98dbb2bc31b6a55e6aaa1e0e2948f2e. For more details please see the references link.
Vulnerability: GSD-2022-1000200
Summary: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending
Published: 2022-02-18T21:54:46.751539Z

powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit 55402a4618721f350a9ab660bb42717d8aa18e7c, it was introduced in version v5.10.94 by commit ef798cd035f316a537fee8ed170c127f12407085. For more details please see the references link.
Vulnerability: GSD-2022-1002397
Summary: mm/mempolicy: fix mpol_new leak in shared_policy_replace
Published: 2022-04-24T22:43:06.521915Z

mm/mempolicy: fix mpol_new leak in shared_policy_replace

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 5e16dc5378abd749a836daa9ee4ab2c8d2668999, it was introduced in version v3.8 by commit 42288fe366c4f1ce7522bc9f27d0bc2a81c55264. For more details please see the references link.
Vulnerability: GSD-2022-1000650
Summary: ASoC: hdmi-codec: Fix OOB memory accesses
Published: 2022-02-27T03:36:10.958510Z

ASoC: hdmi-codec: Fix OOB memory accesses

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.8 by commit 1552e66be325a21d7eff49f46013fb402165a0ac. For more details please see the references link.
Vulnerability: GSD-2022-1001942
Summary: netfilter: nf_tables: initialize registers in nft_do_chain()
Published: 2022-04-24T21:56:50.417879Z

netfilter: nf_tables: initialize registers in nft_do_chain()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.32 by commit fafb904156fbb8f1dd34970cd5223e00b47c33be, it was introduced in version v3.13 by commit 96518518cc417bb0a8c80b9fb736202e28acdf96. For more details please see the references link.
Vulnerability: GSD-2021-1002141
Summary: comedi: vmk80xx: fix transfer-buffer overflows
Published: 2021-11-14T15:21:44.011557Z

comedi: vmk80xx: fix transfer-buffer overflows

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.18 by commit 278484ae93297b1bb1ce755f9d3b6d95a48c7d47, it was introduced in version v2.6.31 by commit 985cafccbf9b7f862aa1c5ee566801e18b5161fb. For more details please see the references link.
Vulnerability: GSD-2021-1000486
Summary: net/nfc: fix use-after-free llcp_sock_bind/connect
Published: 2021-05-31T15:39:45.041586Z

net/nfc: fix use-after-free llcp_sock_bind/connect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.269 by commit ccddad6dd28530e716448e594c9ca7c76ccd0570, it was introduced in version v4.9.267 by commit 18013007b596771bf5f5e7feee9586fb0386ad14. For more details please see the references link.
Vulnerability: GSD-2022-1001411
Summary: ath11k: pci: fix crash on suspend if board file is not found
Published: 2022-04-24T21:11:00.826923Z

ath11k: pci: fix crash on suspend if board file is not found

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit f3c5ef433da82d257337424b3647ce9dcb37d4b5. For more details please see the references link.
Vulnerability: GSD-2021-1002511
Summary: ALSA: pcm: oss: Fix negative period/buffer sizes
Published: 2021-12-19T19:40:35.342223Z

ALSA: pcm: oss: Fix negative period/buffer sizes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.85 by commit 02b2b691b77cd7b951fa7b6c9d44d4e472cdc823. For more details please see the references link.
Vulnerability: GSD-2022-1001041
Summary: netfilter: conntrack: revisit gc autotuning
Published: 2022-04-24T20:41:49.564420Z

netfilter: conntrack: revisit gc autotuning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 592e57591826f3d09c28d755a39ea8e9d13705ad. For more details please see the references link.
Vulnerability: GSD-2022-1001554
Summary: drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode_decode
Published: 2022-04-24T21:23:04.840829Z

drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode_decode

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 3ee7db7ea79bd318614a5ce5bcbbab4b7976ff98, it was introduced in version v5.11 by commit 09234b88ef5598252d1cee37e4d7b26a48b6557f. For more details please see the references link.
Vulnerability: GSD-2021-1002004
Summary: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
Published: 2021-11-14T15:15:33.891986Z

can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit a0e47d2833b4f65e6c799f28c6b636d36b8b936d, it was introduced in version v5.4 by commit 9d71dd0c70099914fcd063135da3c580865e924c. For more details please see the references link.
Vulnerability: GSD-2021-1000039
Summary: ARM: footbridge: fix PCI interrupt mapping
Published: 2021-05-31T15:39:45.031586Z

ARM: footbridge: fix PCI interrupt mapping

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.114 by commit 871b569a3e67f570df9f5ba195444dc7c621293b, it was introduced in version v4.13 by commit 30fdfb929e82450bbf3d0e0aba56efbc29b52b52. For more details please see the references link.
Vulnerability: GSD-2021-1000193
Summary: KVM: nVMX: Always make an attempt to map eVMCS after migration
Published: 2021-05-31T15:39:45.041586Z

KVM: nVMX: Always make an attempt to map eVMCS after migration

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit bd0e8455b85b651a4c77de9616e307129b15aaa7, it was introduced in version v5.11 by commit f2c7ef3ba9556d62a7e2bb23b563c6510007d55c. For more details please see the references link.
Vulnerability: GSD-2022-1001104
Summary: block: Fix the maximum minor value is blk_alloc_ext_minor()
Published: 2022-04-24T20:45:40.813942Z

block: Fix the maximum minor value is blk_alloc_ext_minor()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit fbe2cc4525480ddd20c866bb5c0578071e01451a, it was introduced in version v5.11 by commit 22ae8ce8b89241c94ac00c237752c0ffa37ba5ae. For more details please see the references link.
Vulnerability: GSD-2021-1002454
Summary: can: sja1000: fix use after free in ems_pcmcia_add_card()
Published: 2021-12-19T19:38:04.691956Z

can: sja1000: fix use after free in ems_pcmcia_add_card()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.165 by commit 1a295fea90e1acbe80c6d4940f5ff856edcd6bec, it was introduced in version v3.2 by commit fd734c6f25aea4b2b44b045e489aec67b388577e. For more details please see the references link.
Vulnerability: GSD-2021-1000469
Summary: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
Published: 2021-05-31T15:39:45.041586Z

net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.233 by commit dc1b438a35773d030be0ee80d9c635c3e558a322, it was introduced in version v4.9 by commit b9b17debc69d27cd55e21ee51a5ba7fc50a426cf. For more details please see the references link.
Vulnerability: GSD-2022-1000345
Summary: vt_ioctl: fix array_index_nospec in vt_setactivate
Published: 2022-02-27T02:53:56.365094Z

vt_ioctl: fix array_index_nospec in vt_setactivate

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.180 by commit ae3d57411562260ee3f4fd5e875f410002341104. For more details please see the references link.
Vulnerability: GSD-2022-1002378
Summary: ALSA: oss: Fix PCM OSS buffer allocation overflow
Published: 2022-04-24T22:40:52.610455Z

ALSA: oss: Fix PCM OSS buffer allocation overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.237 by commit a63af1baf0a5e11827db60e3127f87e437cab6e5. For more details please see the references link.
Vulnerability: GSD-2021-1001628
Summary: net_sched: fix NULL deref in fifo_set_limit()
Published: 2021-10-19T16:28:57.616438Z

net_sched: fix NULL deref in fifo_set_limit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.73 by commit acff2d182c0768a713cee77442caeb07668bd68f, it was introduced in version v2.6.27 by commit fb0305ce1b03f6ff17f84f2c63daccecb45f2805. For more details please see the references link.
Vulnerability: GSD-2021-1001782
Summary: drm/msm: Fix null pointer dereference on pointer edp
Published: 2021-10-28T13:48:37.231276Z

drm/msm: Fix null pointer dereference on pointer edp

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.288 by commit bacac7d26849c8e903ceb7466d9ce8dc3c2797eb, it was introduced in version v4.0 by commit ab5b0107ccf3821a6837b0f2819270d6fa0b278f. For more details please see the references link.
Vulnerability: GSD-2021-1000890
Summary: dm verity: fix require_signatures module_param permissions
Published: 2021-06-30T00:04:43.209835Z

dm verity: fix require_signatures module_param permissions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.126 by commit ece8ad75e31856f429b90cba30c8c6ff6a82e0dd. For more details please see the references link.
Vulnerability: GSD-2022-1000715
Summary: riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
Published: 2022-03-18T00:11:55.797850Z

riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit d1c3ac0f8cedd75a2a8c35327e0ea15f9abeed3e, it was introduced in version v5.6 by commit 8ad8b72721d0f07fa02dbe71f901743f9c71c8e6. For more details please see the references link.
Vulnerability: GSD-2022-1001807
Summary: net: hns3: add vlan list lock to protect vlan list
Published: 2022-04-24T21:43:35.589627Z

net: hns3: add vlan list lock to protect vlan list

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 30f0ff7176efe8ac6c55f85bce26ed58bb608758, it was introduced in version v5.1 by commit c6075b193462d9a3930fb41f587f94720658752a. For more details please see the references link.