TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2021-1001617
Summary: binder: make sure fd closes complete
Published: 2021-10-19T16:28:29.967434Z

binder: make sure fd closes complete

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.150 by commit aa2c274c279ff365a06a4cba263f04965895166e, it was introduced in version v5.0 by commit 80cd795630d6526ba729a089a435bf74a57af927. For more details please see the references link.
Vulnerability: GSD-2021-1000905
Summary: NFS: Fix a potential NULL dereference in nfs_get_client()
Published: 2021-06-30T00:05:39.328830Z

NFS: Fix a potential NULL dereference in nfs_get_client()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.126 by commit 0057ecef9f324007c0ba5fcca4ddd131178ce78b, it was introduced in version v3.17 by commit 31434f496abb9f3410b10f541462fe58613dd3ad. For more details please see the references link.
Vulnerability: GSD-2022-1002347
Summary: pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
Published: 2022-04-24T22:36:34.301925Z

pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 0067ba448f1c29ca06e5aee00d8506889ed1f9d0, it was introduced in version v3.9 by commit 32e67eee670e1254ee5ab41e2f454680acb9c17c. For more details please see the references link.
Vulnerability: GSD-2021-1001247
Summary: bpf, sockmap: Fix potential memory leak on unlikely error case
Published: 2021-08-03T01:48:11.525811Z

bpf, sockmap: Fix potential memory leak on unlikely error case

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.54 by commit 715f378f42909c401ec043f5150c4fdf57fb8889, it was introduced in version v5.10 by commit 4363023d2668e621b0743db351a9555d6e6ea57e. For more details please see the references link.
Vulnerability: GSD-2022-1001838
Summary: RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
Published: 2022-04-24T21:46:45.181997Z

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 8dd392e352d3269938fea32061a74655a613f929, it was introduced in version v5.3 by commit 7597385371425febdaa8c6a1da3625d4ffff16f5. For more details please see the references link.
Vulnerability: GSD-2022-1002039
Summary: ARM: mmp: Fix failure to remove sram device
Published: 2022-04-24T22:05:19.645367Z

ARM: mmp: Fix failure to remove sram device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit e7bb29df2a149f466c660209ea1aa3783b3e0e1c. For more details please see the references link.
Vulnerability: GSD-2021-1001093
Summary: cfg80211: call cfg80211_leave_ocb when switching away from OCB
Published: 2021-07-08T01:55:51.361294Z

cfg80211: call cfg80211_leave_ocb when switching away from OCB

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.274 by commit c49b86ba5a25541531c501c4fa3c6a53bf8160ff. For more details please see the references link.
Vulnerability: GSD-2021-1001569
Summary: md: fix a lock order reversal in md_alloc
Published: 2021-10-19T16:24:13.554533Z

md: fix a lock order reversal in md_alloc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.209 by commit 906b4dcc180808f0ba74ec1e07a5cf708463bc48, it was introduced in version v3.0 by commit b0140891a8cea36469f58d23859e599b1122bd37. For more details please see the references link.
Vulnerability: GSD-2022-1002469
Summary: mm/mempolicy: fix mpol_new leak in shared_policy_replace
Published: 2022-04-24T22:51:46.814811Z

mm/mempolicy: fix mpol_new leak in shared_policy_replace

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 8510c2346d9e47a72b7f018a36ef0c39483e53d6, it was introduced in version v3.8 by commit 42288fe366c4f1ce7522bc9f27d0bc2a81c55264. For more details please see the references link.
Vulnerability: GSD-2022-1000454
Summary: nvme: fix a possible use-after-free in controller reset during load
Published: 2022-02-27T03:09:13.040054Z

nvme: fix a possible use-after-free in controller reset during load

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit e043fb5a0336ee74614e26f0d9f36f1f5bb6d606. For more details please see the references link.
Vulnerability: GSD-2021-1001139
Summary: mac80211: remove warning in ieee80211_get_sband()
Published: 2021-07-08T01:59:05.600074Z

mac80211: remove warning in ieee80211_get_sband()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13 by commit 0ee4d55534f82a0624701d0bb9fc2304d4529086. For more details please see the references link.
Vulnerability: GSD-2022-1002193
Summary: scsi: libfc: Fix use after free in fc_exch_abts_resp()
Published: 2022-04-24T22:20:34.729775Z

scsi: libfc: Fix use after free in fc_exch_abts_resp()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836. For more details please see the references link.
Vulnerability: GSD-2022-1000907
Summary: xhci: Prevent futile URB re-submissions due to incorrect return value.
Published: 2022-03-18T00:30:21.367969Z

xhci: Prevent futile URB re-submissions due to incorrect return value.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.232 by commit 4cf9a3da2b555f77a9a8956a754ac9e3c53c3384, it was introduced in version v3.11 by commit 203a86613fb3bf2767335659513fa98563a3eb71. For more details please see the references link.
Vulnerability: GSD-2022-1001615
Summary: can: m_can: m_can_tx_handler(): fix use after free of skb
Published: 2022-04-24T21:28:28.689076Z

can: m_can: m_can_tx_handler(): fix use after free of skb

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 4db7d6f481990dd179a9ee7126dc7aa31ea4fff3, it was introduced in version v3.18 by commit 80646733f11c2e9de3b6339f7e635047e6087280. For more details please see the references link.
Vulnerability: GSD-2021-1001990
Summary: scsi: core: Put LLD module refcnt after SCSI device is released
Published: 2021-11-14T15:14:51.934283Z

scsi: core: Put LLD module refcnt after SCSI device is released

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.216 by commit c2df161f69fb1c67f63adbd193368b47f511edc0. For more details please see the references link.
Vulnerability: GSD-2021-1000682
Summary: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Published: 2021-06-04T20:01:30.239453Z

NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.235 by commit 42637ca25c7d7b5a92804a679af5192e8c1a9f48, it was introduced in version v4.14.233 by commit 7b7b9774643220e53eef58c15bb29bd4182fe053. For more details please see the references link.
Vulnerability: GSD-2021-1000378
Summary: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails
Published: 2021-05-31T15:39:45.041586Z

spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 5980a3b9c933408bc22b0e349b78c3ebd7cbf880, it was introduced in version v5.10 by commit 1c26372e5aa9e53391a1f8fe0dc7cd93a7e5ba9e. For more details please see the references link.
Vulnerability: GSD-2021-1002345
Summary: staging: rtl8723bs: remove possible deadlock when disconnect (v2)
Published: 2021-11-29T02:39:45.312842Z

staging: rtl8723bs: remove possible deadlock when disconnect (v2)

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.5 by commit 353a6e9acb45a66f8fb80b07c2f4097cf4b826d1. For more details please see the references link.
Vulnerability: GSD-2022-1001245
Summary: bpf: Fix UAF due to race between btf_try_get_module and load_module
Published: 2022-04-24T20:57:24.880480Z

bpf: Fix UAF due to race between btf_try_get_module and load_module

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 0481baa2318cb1ab13277715da6cdbb657807b3f, it was introduced in version v5.12 by commit 541c3bad8dc51b253ba8686d0cd7628e6b9b5f4c. For more details please see the references link.
Vulnerability: GSD-2021-1000728
Summary: net: caif: add proper error handling
Published: 2021-06-24T23:59:36.680764Z

net: caif: add proper error handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.236 by commit 676d6d02de3f6b7f3a072b08d0dda819b09d31dd, it was introduced in version v3.3 by commit 7c18d2205ea76eef9674e59e1ecae4f332a53e9e. For more details please see the references link.
Vulnerability: GSD-2021-1002715
Summary: scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
Published: 2021-12-27T05:38:38.594173Z

scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.88 by commit a9078e791426c2cbbdf28a320c3670f6e0a611e6. For more details please see the references link.
Vulnerability: GSD-2021-1002200
Summary: drm/amdgpu: fix out of bounds write
Published: 2021-11-14T15:24:25.579119Z

drm/amdgpu: fix out of bounds write

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 5afa7898ab7a0ec9c28556a91df714bf3c2f725e. For more details please see the references link.
Vulnerability: GSD-2022-1000842
Summary: cifs: fix double free race when mount fails in cifs_get_root()
Published: 2022-03-18T00:23:12.399895Z

cifs: fix double free race when mount fails in cifs_get_root()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.104 by commit df9db1a2af37f39ad1653c7b9b0d275d72d0bc67. For more details please see the references link.
Vulnerability: GSD-2022-1001750
Summary: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
Published: 2022-04-24T21:39:25.190604Z

ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 97b5593fd1b182b3fdb180b6bbe64ec09669988b, it was introduced in version v4.4 by commit 337aadff8e4567e39669e07d9a88b789d78458b5. For more details please see the references link.
Vulnerability: GSD-2021-1002650
Summary: net: netlink: af_netlink: Prevent empty skb by adding a check on len.
Published: 2021-12-27T05:33:03.550872Z

net: netlink: af_netlink: Prevent empty skb by adding a check on len.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.222 by commit ff3f517bf7138e01a17369042908a3f345c0ee41. For more details please see the references link.
Vulnerability: GSD-2022-1001300
Summary: dm: fix use-after-free in dm_cleanup_zoned_dev()
Published: 2022-04-24T21:02:19.874302Z

dm: fix use-after-free in dm_cleanup_zoned_dev()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 43a043aed964659bc69ef81f266912b73c80d837, it was introduced in version v5.14 by commit bb37d77239af25cde59693dbe3fac04dd17d7b29. For more details please see the references link.
Vulnerability: GSD-2021-1000397
Summary: mt76: fix potential DMA mapping leak
Published: 2021-05-31T15:39:45.041586Z

mt76: fix potential DMA mapping leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 9fa26701cd1fc4d932d431971efc5746325bdfce, it was introduced in version v5.10 by commit 27d5c528a7ca08dcd44877fdd9fc08b76630bf77. For more details please see the references link.
Vulnerability: GSD-2022-1002486
Summary: ARM: mmp: Fix failure to remove sram device
Published: 2022-04-24T22:53:19.577430Z

ARM: mmp: Fix failure to remove sram device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 734ff1117d5f7d7ca41bda5666366bb95fbc062b. For more details please see the references link.
Vulnerability: GSD-2022-1000141
Summary: ASoC: max9759: fix underflow in speaker_gain_control_put()
Published: 2022-02-18T21:46:32.836064Z

ASoC: max9759: fix underflow in speaker_gain_control_put()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.228 by commit a0f49d12547d45ea8b0f356a96632dd503941c1e, it was introduced in version v4.17 by commit fa8d915172b8c10ec0734c4021e99e9705023b07. For more details please see the references link.
Vulnerability: GSD-2022-1000511
Summary: net: dsa: seville: register the mdiobus under devres
Published: 2022-02-27T03:16:57.621522Z

net: dsa: seville: register the mdiobus under devres

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 0e816362d823cd46c666e64d8bffe329ee22f4cc, it was introduced in version v5.9 by commit ac3a68d56651c3dad2c12c7afce065fe15267f44. For more details please see the references link.
Vulnerability: GSD-2021-1001586
Summary: HID: usbhid: free raw_report buffers in usbhid_stop
Published: 2021-10-19T16:25:02.343658Z

HID: usbhid: free raw_report buffers in usbhid_stop

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.151 by commit 965147067fa1bedff3ae1f07ce3f89f1a14d2df3. For more details please see the references link.
Vulnerability: GSD-2021-1002579
Summary: serial: core: fix transmit-buffer reset and memleak
Published: 2021-12-19T19:43:35.450578Z

serial: core: fix transmit-buffer reset and memleak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit 64e491c1634b73d3bddc081d08620bdc92ab2c12, it was introduced in version v4.9 by commit 761ed4a94582ab291aa24dcbea4e01e8936488c8. For more details please see the references link.
Vulnerability: GSD-2021-1000544
Summary: octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()
Published: 2021-06-04T19:36:01.837801Z

octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit 389146bc6d2bbb20714d06624b74856320ce40f7, it was introduced in version v5.12 by commit 81a4362016e7d8b17031fe1aa43cdb58a7f0f163. For more details please see the references link.
Vulnerability: GSD-2021-1002083
Summary: misc: fastrpc: Add missing lock before accessing find_vma()
Published: 2021-11-14T15:19:05.643181Z

misc: fastrpc: Add missing lock before accessing find_vma()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit d22592f1fd8d4bf54fa1cc0ef9122c983d82f30a, it was introduced in version v5.2 by commit 80f3afd72bd4149c57daf852905476b43bb47647. For more details please see the references link.
Vulnerability: GSD-2022-1001029
Summary: virtio_console: eliminate anonymous module_init & module_exit
Published: 2022-04-24T20:41:15.024145Z

virtio_console: eliminate anonymous module_init & module_exit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 71612aee09ecea3475f8751dc841d75a011b1fd0. For more details please see the references link.
Vulnerability: GSD-2022-1001183
Summary: mxser: fix xmit_buf leak in activate when LSR == 0xff
Published: 2022-04-24T20:51:44.447740Z

mxser: fix xmit_buf leak in activate when LSR == 0xff

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 6dffc2035fbaada60ca8db59e0962e34f760370a, it was introduced in version v2.6.33 by commit 6769140d304731f0a3b177470a2adb4bacd9036b. For more details please see the references link.
Vulnerability: GSD-2021-1002129
Summary: cgroup: Fix memory leak caused by missing cgroup_bpf_offline
Published: 2021-11-14T15:21:15.061166Z

cgroup: Fix memory leak caused by missing cgroup_bpf_offline

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.16 by commit b529f88d93884cf8ccafda793ee3d27b82fa578d, it was introduced in version v5.10 by commit 2b0d3d3e4fcfb19d10f9a82910b8f0f05c56ee3e. For more details please see the references link.
Vulnerability: GSD-2021-1000114
Summary: cifs: Return correct error code from smb2_get_enc_key
Published: 2021-05-31T15:39:45.031586Z

cifs: Return correct error code from smb2_get_enc_key

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit f59a9242942fef0de7b926e438ba4eae65d4b4dd, it was introduced in version v4.11 by commit 61cfac6f267dabcf2740a7ec8a0295833b28b5f5. For more details please see the references link.
Vulnerability: GSD-2022-1001479
Summary: Revert "Revert "block, bfq: honor already-setup queue merges""
Published: 2022-04-24T21:15:50.559124Z

Revert "Revert "block, bfq: honor already-setup queue merges""

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit abc2129e646af7b43025d90a071f83043f1ae76c. For more details please see the references link.
Vulnerability: GSD-2021-1001355
Summary: drm/sched: Avoid data corruptions
Published: 2021-08-03T02:16:27.568093Z

drm/sched: Avoid data corruptions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.133 by commit c32d0f0e164ffab2a56c7cf8e612584b4b740e2e. For more details please see the references link.
Vulnerability: GSD-2022-1000638
Summary: net/mlx5e: Fix handling of wrong devices during bond netevent
Published: 2022-02-27T03:34:48.358002Z

net/mlx5e: Fix handling of wrong devices during bond netevent

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.6 by commit 4fad499d7fece448e7230d5e5b92f6d8a073e0bb, it was introduced in version v5.8 by commit 7e51891a237f9ea319f53f9beb83afb0077d88e6. For more details please see the references link.
Vulnerability: GSD-2022-1000792
Summary: thermal: int340x: fix memory leak in int3400_notify()
Published: 2022-03-18T00:18:18.411243Z

thermal: int340x: fix memory leak in int3400_notify()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.26 by commit ba9efbbf6745750d34c1e87c9539ce9db645ca0a, it was introduced in version v4.14 by commit 38e44da591303d08b0d965a033e11ade284999d0. For more details please see the references link.
Vulnerability: GSD-2022-1001880
Summary: ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type
Published: 2022-04-24T21:51:20.425025Z

ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit eb15c6ea692fd88d70698d874d9a0d667fb4cde9, it was introduced in version v5.12 by commit 4f692926f562ff48abfcca6b16f36ff8d57473b6. For more details please see the references link.
Vulnerability: GSD-2021-1001705
Summary: usb: dwc2: check return value after calling platform_get_resource()
Published: 2021-10-19T16:32:46.174020Z

usb: dwc2: check return value after calling platform_get_resource()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.11 by commit 337f00a0bc62d7cb7d10ec0b872c79009a1641df. For more details please see the references link.
Vulnerability: GSD-2021-1000817
Summary: btrfs: fix fsync failure and transaction abort after writes to prealloc extents
Published: 2021-06-25T00:09:15.534336Z

btrfs: fix fsync failure and transaction abort after writes to prealloc extents

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit b37885cc013516f0412d7d2e99f043dd112c99a6, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1000268
Summary: block: Fix wrong offset in bio_truncate()
Published: 2022-02-18T22:04:15.608049Z

block: Fix wrong offset in bio_truncate()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit 4633a79ff8bc82770486a063a08b55e5162521d8. For more details please see the references link.
Vulnerability: GSD-2022-1002255
Summary: Bluetooth: hci_serdev: call init_rwsem() before p->open()
Published: 2022-04-24T22:26:50.966786Z

Bluetooth: hci_serdev: call init_rwsem() before p->open()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit d58d281d6a3f49ce83b82f8211c396ba34c0304f, it was introduced in version v4.16 by commit d73e172816652772114827abaa2dbc053eecbbd7. For more details please see the references link.
Vulnerability: GSD-2022-1000287
Summary: net: do not keep the dst cache when uncloning an skb dst and its metadata
Published: 2022-02-27T02:38:33.408711Z

net: do not keep the dst cache when uncloning an skb dst and its metadata

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.302 by commit cbb43514c830cdf0f021ea74e7375a29baf80f8f, it was introduced in version v4.6 by commit d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8. For more details please see the references link.
Vulnerability: GSD-2021-1001210
Summary: btrfs: fix deadlock with concurrent chunk allocations involving system chunks
Published: 2021-08-03T01:37:48.716851Z

btrfs: fix deadlock with concurrent chunk allocations involving system chunks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.4 by commit 789b24d9950d3e67b227f81b3fab912a8fb257af, it was introduced in version v5.13 by commit eafa4fd0ad06074da8be4e28ff93b4dca9ffa407. For more details please see the references link.
Vulnerability: GSD-2022-1002310
Summary: virtio_console: eliminate anonymous module_init & module_exit
Published: 2022-04-24T22:33:10.699790Z

virtio_console: eliminate anonymous module_init & module_exit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 0f3d824bd70a1303464d5e93ee3e7afe7832fe89. For more details please see the references link.
Vulnerability: GSD-2021-1001640
Summary: ext4: fix reserved space counter leakage
Published: 2021-10-19T16:29:30.384327Z

ext4: fix reserved space counter leakage

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.71 by commit 9ccf35492b084ecbc916761a5c6f42599450f013, it was introduced in version v3.8 by commit 51865fda28e585bdcc164474ff6438a9ccdbfada. For more details please see the references link.
Vulnerability: GSD-2021-1000952
Summary: tracing: Correct the length check which causes memory corruption
Published: 2021-06-30T00:28:52.852610Z

tracing: Correct the length check which causes memory corruption

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.44 by commit 43c32c22254b9328d7abb1c2b0f689dc67838e60, it was introduced in version v5.10.17 by commit 7c93d8cff582c459350d6f8906eea6e4cd60d959. For more details please see the references link.
Vulnerability: GSD-2022-1001496
Summary: pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
Published: 2022-04-24T21:17:11.350116Z

pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 9511c6018cd772668def8b034bc67269847e591a, it was introduced in version v3.9 by commit 32e67eee670e1254ee5ab41e2f454680acb9c17c. For more details please see the references link.
Vulnerability: GSD-2021-1000401
Summary: soc/tegra: regulators: Fix locking up when voltage-spread is out of range
Published: 2021-05-31T15:39:45.041586Z

soc/tegra: regulators: Fix locking up when voltage-spread is out of range

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit a1ad124c836816fac8bd5e461d36eaf33cee4e24, it was introduced in version v5.5 by commit 783807436f363e5b1ad4d43ba7debbedfcadbb99. For more details please see the references link.
Vulnerability: GSD-2021-1002596
Summary: btrfs: fix re-dirty process of tree-log nodes
Published: 2021-12-19T19:44:24.654900Z

btrfs: fix re-dirty process of tree-log nodes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit 477675049ca803aa95ff77468ffbddd966b415b0, it was introduced in version v5.12 by commit d3575156f6623eecf086a20bcf99a63f1598109c. For more details please see the references link.
Vulnerability: GSD-2021-1000246
Summary: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: img-scb: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 7ee35cde1e810ad6ca589980b9ec2b7b62946a5b, it was introduced in version v4.15 by commit 93222bd9b966105f43418fd336654ad10045783a. For more details please see the references link.
Vulnerability: GSD-2021-1002781
Summary: f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
Published: 2021-12-30T02:43:10.935625Z

f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.260 by commit 88dedecc24763c2e0bc1e8eeb35f9f2cd785a7e5. For more details please see the references link.
Vulnerability: GSD-2022-1000839
Summary: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
Published: 2022-03-18T00:23:02.556776Z

ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.104 by commit 6951a5888165a38bb7c39a2d18f5668b2f1241c7, it was introduced in version v5.10.99 by commit a9394f21fba027147bf275b083c77955864c366a. For more details please see the references link.
Vulnerability: GSD-2022-1000993
Summary: KVM: avoid NULL pointer dereference in kvm_dirty_ring_push
Published: 2022-04-24T20:37:55.811763Z

KVM: avoid NULL pointer dereference in kvm_dirty_ring_push

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit e8d7f0dad29e634e26d4614cfbd081514c16e042. For more details please see the references link.
Vulnerability: GSD-2022-1001681
Summary: drbd: Fix five use after free bugs in get_initial_state
Published: 2022-04-24T21:34:38.102136Z

drbd: Fix five use after free bugs in get_initial_state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit a972c768723359ec995579902473028fe3cd64b1, it was introduced in version v4.5 by commit a29728463b254ce81ecefdf20c1a02e01d9361da. For more details please see the references link.
Vulnerability: GSD-2021-1001904
Summary: net: encx24j600: check error in devm_regmap_init_encx24j600
Published: 2021-10-28T13:54:57.339746Z

net: encx24j600: check error in devm_regmap_init_encx24j600

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit 322c0e53496309e634d9db7349678eaad1d25b55, it was introduced in version v4.4 by commit 04fbfce7a222327b97ca165294ef19f0faa45960. For more details please see the references link.
Vulnerability: GSD-2021-1000616
Summary: net: lantiq: fix memory corruption in RX ring
Published: 2021-06-04T19:48:05.957959Z

net: lantiq: fix memory corruption in RX ring

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 8bb1077448d43a871ed667520763e3b9f9b7975d, it was introduced in version v4.20 by commit fe1a56420cf2ec28c8eceef672b87de0bbe1a260. For more details please see the references link.
Vulnerability: GSD-2021-1001457
Summary: RDMA/cma: Fix rdma_resolve_route() memory leak
Published: 2021-08-03T02:46:52.899518Z

RDMA/cma: Fix rdma_resolve_route() memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.276 by commit e2da8ce2a9543f3ca5c93369bd1fe6eeb572101a. For more details please see the references link.
Vulnerability: GSD-2022-1002107
Summary: ASoC: soc-compress: prevent the potentially use of null pointer
Published: 2022-04-24T22:12:11.808908Z

ASoC: soc-compress: prevent the potentially use of null pointer

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 4639c1d97f385f4784f44d66a3da0672f4951ada, it was introduced in version v5.4 by commit 467fece8fbc6774a3a3bd0981e1a342fb5022706. For more details please see the references link.
Vulnerability: GSD-2022-1000090
Summary: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
Published: 2022-02-18T21:34:04.999111Z

ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.300 by commit 17e16a66b4f9a310713d8599e6e1ca4a0c9fd28c. For more details please see the references link.
Vulnerability: GSD-2021-1001007
Summary: net: bridge: fix vlan tunnel dst refcnt when egressing
Published: 2021-06-30T00:33:31.526263Z

net: bridge: fix vlan tunnel dst refcnt when egressing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit fc7fdd8c5c2ad2fe3e297698be9d4dbe4a4e0579, it was introduced in version v4.11 by commit 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd. For more details please see the references link.
Vulnerability: GSD-2022-1002042
Summary: powerpc/kasan: Fix early region not updated correctly
Published: 2022-04-24T22:05:30.882734Z

powerpc/kasan: Fix early region not updated correctly

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit f39a3309393a4a484532f6ba745c6acbcfe06115, it was introduced in version v5.4 by commit cbd18991e24fea2c31da3bb117c83e4a3538cd11. For more details please see the references link.
Vulnerability: GSD-2022-1000585
Summary: spi: uniphier: fix reference count leak in uniphier_spi_probe()
Published: 2022-02-27T03:27:33.880384Z

spi: uniphier: fix reference count leak in uniphier_spi_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit dd00b4f8f768d81c3788a8ac88fdb3d745e55ea3, it was introduced in version v5.6 by commit 28d1dddc59f6b7fc085093e7c1e978b33f0caf4c. For more details please see the references link.
Vulnerability: GSD-2021-1001512
Summary: HID: betop: fix slab-out-of-bounds Write in betop_probe
Published: 2021-10-19T16:21:35.550687Z

HID: betop: fix slab-out-of-bounds Write in betop_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.285 by commit 6fc4476dda58f6c00097c7ddec3b772513f57525. For more details please see the references link.
Vulnerability: GSD-2022-1002412
Summary: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
Published: 2022-04-24T22:44:37.933072Z

ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit d208ea44e25b31db5a4d5e8c31df51787a3e9303, it was introduced in version v4.4 by commit 337aadff8e4567e39669e07d9a88b789d78458b5. For more details please see the references link.
Vulnerability: GSD-2021-1001142
Summary: net: caif: fix memory leak in ldisc_open
Published: 2021-07-08T01:59:17.680696Z

net: caif: fix memory leak in ldisc_open

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13 by commit 58af3d3d54e87bfc1f936e16c04ade3369d34011. For more details please see the references link.
Vulnerability: GSD-2022-1001394
Summary: scsi: hisi_sas: Free irq vectors in order for v3 HW
Published: 2022-04-24T21:10:11.596922Z

scsi: hisi_sas: Free irq vectors in order for v3 HW

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 8b6eab9d683bae7f88dc894b8c851f866032301c. For more details please see the references link.
Vulnerability: GSD-2021-1000303
Summary: rtw88: Fix array overrun in rtw_get_tx_power_params()
Published: 2021-05-31T15:39:45.041586Z

rtw88: Fix array overrun in rtw_get_tx_power_params()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 9cd09722e18a08b6a3d68b8bccfac39ddc22434c, it was introduced in version v5.3 by commit fa6dfe6bff246ddd5be3cfe81637f137acd6c294. For more details please see the references link.
Vulnerability: GSD-2021-1002294
Summary: usb: host: ohci-tmio: check return value after calling platform_get_resource()
Published: 2021-11-29T02:37:25.222928Z

usb: host: ohci-tmio: check return value after calling platform_get_resource()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.82 by commit 2474eb7fc3bfbce10f7b8ea431fcffe5dd5f5100. For more details please see the references link.
Vulnerability: GSD-2021-1001841
Summary: powerpc/idle: Don't corrupt back chain when going idle
Published: 2021-10-28T13:51:42.165391Z

powerpc/idle: Don't corrupt back chain when going idle

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit c5c2a80368e97ac179d6a101c99f1e1f36146ec2, it was introduced in version v5.10.76 by commit fbd724c49bead048ae9fc1a5b7bff2fb3e54f855. For more details please see the references link.
Vulnerability: GSD-2021-1000753
Summary: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
Published: 2021-06-25T00:02:32.759848Z

ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.125 by commit 920697b004e49cb026e2e15fe91be065bf0741b7, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1000706
Summary: mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
Published: 2022-03-18T00:11:22.866952Z

mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit da0fccd842cdd4d15cc620241145e0648bfdd753, it was introduced in version v5.15 by commit 7661809d493b426e979f39ab512e3adf41fbcc69. For more details please see the references link.
Vulnerability: GSD-2022-1001814
Summary: pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
Published: 2022-04-24T21:44:27.282473Z

pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit c52703355766c347f270df222a744e0c491a02f2, it was introduced in version v3.9 by commit 32e67eee670e1254ee5ab41e2f454680acb9c17c. For more details please see the references link.
Vulnerability: GSD-2021-1001791
Summary: ocfs2: mount fails with buffer overflow in strlen
Published: 2021-10-28T13:49:02.010510Z

ocfs2: mount fails with buffer overflow in strlen

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.253 by commit 232ed9752510de4436468b653d145565669c8498. For more details please see the references link.
Vulnerability: GSD-2021-1000883
Summary: NFS: Fix use-after-free in nfs4_init_client()
Published: 2021-06-30T00:03:29.374204Z

NFS: Fix use-after-free in nfs4_init_client()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.195 by commit 42c10b0db064e45f5c5ae7019bbf2168ffab766c, it was introduced in version v4.13 by commit 8dcbec6d20eb881ba368d0aebc3a8a678aebb1da. For more details please see the references link.
Vulnerability: GSD-2022-1000356
Summary: mtd: rawnand: gpmi: don't leak PM reference in error path
Published: 2022-02-27T02:55:54.602538Z

mtd: rawnand: gpmi: don't leak PM reference in error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.181 by commit 4cd3281a910a5adf73b2a0a82241dd67844d0b25, it was introduced in version v5.4.174 by commit 29218853877a748a2ca41d9957a84b2d6a7f56a7. For more details please see the references link.
Vulnerability: GSD-2021-1000929
Summary: can: mcba_usb: fix memory leak in mcba_usb
Published: 2021-06-30T00:25:09.988305Z

can: mcba_usb: fix memory leak in mcba_usb

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.128 by commit 6f87c0e21ad20dd3d22108e33db1c552dfa352a0, it was introduced in version v4.12 by commit 51f3baad7de943780ce0c17bd7975df567dd6e14. For more details please see the references link.
Vulnerability: GSD-2022-1001117
Summary: KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
Published: 2022-04-24T20:46:55.568910Z

KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 9fa2b94443ff41cdecdff6f4d4324d83af01089a. For more details please see the references link.
Vulnerability: GSD-2021-1000180
Summary: mmc: uniphier-sd: Fix a resource leak in the remove function
Published: 2021-05-31T15:39:45.031586Z

mmc: uniphier-sd: Fix a resource leak in the remove function

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.118 by commit 0d8941b9b2d3e7b3481fdf43b1a6189d162175b7, it was introduced in version v4.20 by commit 3fd784f745dd1747863775a99ec749619ee6759c. For more details please see the references link.
Vulnerability: GSD-2021-1002447
Summary: ipv6: fix memory leak in fib6_rule_suppress
Published: 2021-12-19T19:37:46.953613Z

ipv6: fix memory leak in fib6_rule_suppress

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.164 by commit ee38eb8cf9a7323884c2b8e0adbbeb2192d31e29, it was introduced in version v5.4 by commit ca7a03c4175366a92cee0ccc4fec0038c3266e26. For more details please see the references link.
Vulnerability: GSD-2022-1001547
Summary: igc: avoid kernel warning when changing RX ring parameters
Published: 2022-04-24T21:22:23.457134Z

igc: avoid kernel warning when changing RX ring parameters

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 3ddb49af08094ebee250b461172ee7b8e27a35d3, it was introduced in version v5.13 by commit 73f1071c1d2952b8c93cd6cd99744768c59ec840. For more details please see the references link.