TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1000449
Summary: parisc: Fix data TLB miss in sba_unmap_sg
Published: 2022-02-27T03:08:35.405911Z

parisc: Fix data TLB miss in sba_unmap_sg

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit 8c8e949ae81e7f5ab58f9f9f8e9b573b93173dd2. For more details please see the references link.
Vulnerability: GSD-2022-1002161
Summary: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
Published: 2022-04-24T22:17:11.306067Z

net: usb: aqc111: Fix out-of-bounds accesses in RX fixup

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.190 by commit 404998a137bcb8a926f7c949030afbe285472593. For more details please see the references link.
Vulnerability: GSD-2021-1001431
Summary: atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
Published: 2021-08-03T02:38:33.329835Z

atm: nicstar: Fix possible use-after-free in nicstar_cleanup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit c471569632654e57c83512e0fc1ba0dbb4544ad6. For more details please see the references link.
Vulnerability: GSD-2021-1001061
Summary: netfilter: synproxy: Fix out of bounds when parsing TCP options
Published: 2021-06-30T00:37:01.905605Z

netfilter: synproxy: Fix out of bounds when parsing TCP options

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit f648089337cb8ed40b2bb96e244f72b9d97dc96b, it was introduced in version v3.12 by commit 48b1de4c110a7afa4b85862f6c75af817db26fad. For more details please see the references link.
Vulnerability: GSD-2021-1000220
Summary: PCI: endpoint: Fix NULL pointer dereference for ->get_features()
Published: 2021-05-31T15:39:45.041586Z

PCI: endpoint: Fix NULL pointer dereference for ->get_features()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 0169d4f0bee44fdfef908c13ed21fcb326c38695, it was introduced in version v5.1 by commit 2c04c5b8eef797dca99699cfb55ff42dd3c12c23. For more details please see the references link.
Vulnerability: GSD-2021-1000670
Summary: btrfs: do not BUG_ON in link_to_fixup_dir
Published: 2021-06-04T19:58:51.788660Z

btrfs: do not BUG_ON in link_to_fixup_dir

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.235 by commit 0eaf383c6a4a83c09f60fd07a1bea9f1a9181611, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1001962
Summary: net: mdiobus: Fix memory leak in __mdiobus_register
Published: 2021-11-14T15:13:35.963497Z

net: mdiobus: Fix memory leak in __mdiobus_register

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.253 by commit 4ec0f9abc512cc02fb04daa89ccf6697e80ab417. For more details please see the references link.
Vulnerability: GSD-2022-1001937
Summary: mac80211: fix potential double free on mesh join
Published: 2022-04-24T21:56:25.545896Z

mac80211: fix potential double free on mesh join

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.32 by commit 12e407a8ef17623823fd0c066fbd7f103953d28d, it was introduced in version v5.8 by commit 6a01afcf8468d3ca2bd8bbb27503f60dcf643b20. For more details please see the references link.
Vulnerability: GSD-2022-1000625
Summary: KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance
Published: 2022-02-27T03:32:42.562268Z

KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit 14c9086ea246b84e0d35e8a0b7f706202bd72f0a, it was introduced in version v5.14 by commit 25aa28691bb960a76f0cffd8862144a29487f6ff. For more details please see the references link.
Vulnerability: GSD-2021-1001348
Summary: dm btree remove: assign new_root only when removal succeeds
Published: 2021-08-03T02:14:11.382937Z

dm btree remove: assign new_root only when removal succeeds

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.133 by commit 964d57d1962d7e68f0f578f05d9ae4a104d74851. For more details please see the references link.
Vulnerability: GSD-2022-1000275
Summary: net: sched: fix use-after-free in tc_new_tfilter()
Published: 2022-02-18T22:05:03.723568Z

net: sched: fix use-after-free in tc_new_tfilter()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.20 by commit f36cacd6c933183c1a8827d5987cf2cfc0a44c76, it was introduced in version v5.1 by commit 470502de5bdb1ed0def643a4458593a40b8f6b66. For more details please see the references link.
Vulnerability: GSD-2022-1002248
Summary: ext2: correct max file size computing
Published: 2022-04-24T22:25:55.092610Z

ext2: correct max file size computing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit cc16d0bc1c695645a5c1426e81d33931cc32f558, it was introduced in version v5.1 by commit 1c2d14212b15a60300a2d4f6364753e87394c521. For more details please see the references link.
Vulnerability: GSD-2021-1002837
Summary: mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
Published: 2021-12-30T02:45:41.001489Z

mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit c691e7575eff76e563b0199c23ec46bd454f43e3, it was introduced in version v5.10 by commit b94e02822debdf0cc473556aad7dcc859f216653. For more details please see the references link.
Vulnerability: GSD-2021-1001718
Summary: net: hns3: do not allow call hns3_nic_net_open repeatedly
Published: 2021-10-19T16:33:21.811045Z

net: hns3: do not allow call hns3_nic_net_open repeatedly

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit 3dac38bdce7932901b9f0b71c62331852c809e61, it was introduced in version v5.0 by commit e888402789b9db5de4fcda361331d66dbf0cd9fd. For more details please see the references link.
Vulnerability: GSD-2022-1001034
Summary: NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()
Published: 2022-04-24T20:41:29.379858Z

NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit f46f632f9cfae4b2e3635fa58840a8ec584c42e3. For more details please see the references link.
Vulnerability: GSD-2021-1002564
Summary: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
Published: 2021-12-19T19:42:57.794546Z

mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit 14b03b8cebdf18ff13c39d58501b625411314de2, it was introduced in version v5.8 by commit 37f4ca907c462d7c8a1ac9e7e3473681b5f893dd. For more details please see the references link.
Vulnerability: GSD-2021-1000559
Summary: NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
Published: 2021-06-04T19:38:46.016765Z

NFS: Fix an Oopsable condition in __nfs_pageio_add_request()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit 15ac6f14787649e8ebd75c142e2c5d2a243c8490, it was introduced in version v4.0 by commit a7d42ddb3099727f58366fa006f850a219cce6c8. For more details please see the references link.
Vulnerability: GSD-2022-1001464
Summary: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
Published: 2022-04-24T21:15:06.698890Z

media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 8d075ede7d24f19dc817c5bd517a53f0524f9031. For more details please see the references link.
Vulnerability: GSD-2021-1002134
Summary: octeontx2-af: Fix possible null pointer dereference.
Published: 2021-11-14T15:21:26.967642Z

octeontx2-af: Fix possible null pointer dereference.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.16 by commit f1e3cd1cc80204fd02b9e9843450925a2af90dc0, it was introduced in version v5.5 by commit 8756828a81485f7b28b588adbf0bac9bf6fc6651. For more details please see the references link.
Vulnerability: GSD-2021-1000109
Summary: net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets
Published: 2021-05-31T15:39:45.031586Z

net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit 018bb8da5b5888e19585f9b802f036afe643fcef, it was introduced in version v5.11 by commit c129412f74e99b609f0a8e95fc3915af1fd40f34. For more details please see the references link.
Vulnerability: GSD-2021-1002421
Summary: xhci: Fix commad ring abort, write all 64 bits to CRCR register.
Published: 2021-12-19T19:36:37.623573Z

xhci: Fix commad ring abort, write all 64 bits to CRCR register.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.220 by commit abba418a9c73dcffecbe19ef93c7ae5d2e8e38d3, it was introduced in version v4.19.213 by commit 62c182b5e763e5f4062e72678e72ce3e02dd4d1b. For more details please see the references link.
Vulnerability: GSD-2022-1001171
Summary: net/x25: Fix null-ptr-deref caused by x25_disconnect
Published: 2022-04-24T20:50:20.175873Z

net/x25: Fix null-ptr-deref caused by x25_disconnect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 671529db75e6be777bb1c76aa07c2bdd2992be6d, it was introduced in version v5.7 by commit 4becb7ee5b3d2829ed7b9261a245a77d5b7de902. For more details please see the references link.
Vulnerability: GSD-2021-1002071
Summary: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
Published: 2021-11-14T15:18:34.093552Z

media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.78 by commit d7fc85f6104259541ec136199d3bf7c8a736613d. For more details please see the references link.
Vulnerability: GSD-2022-1001521
Summary: RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
Published: 2022-04-24T21:19:47.740473Z

RDMA/mlx5: Fix memory leak in error flow for subscribe event routine

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit d66498507801fd9a20307a15a0814a0a016c3cde, it was introduced in version v5.3 by commit 7597385371425febdaa8c6a1da3625d4ffff16f5. For more details please see the references link.
Vulnerability: GSD-2022-1001872
Summary: ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe
Published: 2022-04-24T21:50:21.836885Z

ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 87e04a89c31e792eef62bcba6ebb77fd323d28a1, it was introduced in version v5.15.17 by commit 286c6f7b28fab19d649c2e1f3bc18fdecdbadfe5. For more details please see the references link.
Vulnerability: GSD-2022-1000760
Summary: btrfs: do not start relocation until in progress drops are done
Published: 2022-03-18T00:15:49.093064Z

btrfs: do not start relocation until in progress drops are done

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.27 by commit 6599d5e8bd758d897fd2ef4dc388ae50278b1f7e. For more details please see the references link.
Vulnerability: GSD-2022-1000330
Summary: nvme-rdma: fix possible use-after-free in transport error_recovery work
Published: 2022-02-27T02:52:14.158182Z

nvme-rdma: fix possible use-after-free in transport error_recovery work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.231 by commit 5593f72d1922403c11749532e3a0aa4cf61414e9. For more details please see the references link.
Vulnerability: GSD-2022-1000347
Summary: vsock: remove vsock from connected table when connect is interrupted by a signal
Published: 2022-02-27T02:54:10.009821Z

vsock: remove vsock from connected table when connect is interrupted by a signal

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.181 by commit 5f326fe2aef411a6575628f92bd861463ea91df7, it was introduced in version v3.9 by commit d021c344051af91f42c5ba9fdedc176740cbd238. For more details please see the references link.
Vulnerability: GSD-2021-1000938
Summary: isdn: mISDN: netjet: Fix crash in nj_probe:
Published: 2021-06-30T00:25:44.280046Z

isdn: mISDN: netjet: Fix crash in nj_probe:

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.44 by commit 143fc7220961220eecc04669e5909af8847bf8c8. For more details please see the references link.
Vulnerability: GSD-2022-1001805
Summary: xen: fix is_xen_pmu()
Published: 2022-04-24T21:43:24.579280Z

xen: fix is_xen_pmu()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit af884b276b08e2b7e74c2b9208df35f36fa6a54c, it was introduced in version v4.3 by commit bf6dfb154d935725c9a2005033ca33017b9df439. For more details please see the references link.
Vulnerability: GSD-2022-1000717
Summary: cifs: fix double free race when mount fails in cifs_get_root()
Published: 2022-03-18T00:12:00.512181Z

cifs: fix double free race when mount fails in cifs_get_root()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit 563431c1f3c8f2230e4a9c445fa23758742bc4f0. For more details please see the references link.
Vulnerability: GSD-2021-1000892
Summary: drm: Fix use-after-free read in drm_getunique()
Published: 2021-06-30T00:04:51.535074Z

drm: Fix use-after-free read in drm_getunique()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.126 by commit b246b4c70c1250e7814f409b243000f9c0bf79a3. For more details please see the references link.
Vulnerability: GSD-2021-1001780
Summary: ocfs2: fix data corruption after conversion from inline format
Published: 2021-10-28T13:48:31.903459Z

ocfs2: fix data corruption after conversion from inline format

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.288 by commit 560edd14de2bf9dbc0129681eeb4d5ef87cc105f, it was introduced in version v4.9.242 by commit acef5107e2eacb08a16ad5db60320d65bd26a6c0. For more details please see the references link.
Vulnerability: GSD-2022-1001556
Summary: udmabuf: validate ubuf->pagecount
Published: 2022-04-24T21:23:15.451946Z

udmabuf: validate ubuf->pagecount

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit a3728d32fc61eb0fe283cb8ff60b2c8f751e2202, it was introduced in version v4.20 by commit fbb0de795078190a9834b3409e4b009cfb18a6d4. For more details please see the references link.
Vulnerability: GSD-2021-1002006
Summary: ocfs2: mount fails with buffer overflow in strlen
Published: 2021-11-14T15:15:38.645356Z

ocfs2: mount fails with buffer overflow in strlen

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit d3a83576378b4c904f711598dde2c5e881c4295c. For more details please see the references link.
Vulnerability: GSD-2022-1001106
Summary: rxrpc: fix some null-ptr-deref bugs in server_key.c
Published: 2022-04-24T20:45:50.005642Z

rxrpc: fix some null-ptr-deref bugs in server_key.c

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 4e1f670e1b440dc783dbeb881d575bca31474f73, it was introduced in version v5.11 by commit 12da59fcab5a05d01773e7cb413b8b8f3bb4e334. For more details please see the references link.
Vulnerability: GSD-2021-1000191
Summary: drm/i915: Fix crash in auto_retire
Published: 2021-05-31T15:39:45.041586Z

drm/i915: Fix crash in auto_retire

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit f7520970d5353cb1fa4d9089a1b23669c5da97fe, it was introduced in version v5.8 by commit 229007e02d697b0662f85378aae53531b0dfea05. For more details please see the references link.
Vulnerability: GSD-2021-1002456
Summary: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
Published: 2021-12-19T19:38:09.397415Z

nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.165 by commit 48fcd08fdbe05e35b650a252ec2a2d96057a1c7a, it was introduced in version v3.12 by commit ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95. For more details please see the references link.
Vulnerability: GSD-2021-1002143
Summary: comedi: vmk80xx: fix bulk-buffer overflow
Published: 2021-11-14T15:21:48.922526Z

comedi: vmk80xx: fix bulk-buffer overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.18 by commit 7b0e356189327287d0eb98ec081bd6dd97068cd3, it was introduced in version v2.6.31 by commit 985cafccbf9b7f862aa1c5ee566801e18b5161fb. For more details please see the references link.
Vulnerability: GSD-2022-1001413
Summary: drm/amdkfd: svm range restore work deadlock when process exit
Published: 2022-04-24T21:11:06.603212Z

drm/amdkfd: svm range restore work deadlock when process exit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit a6be83086e91891081e0589e4b4645bf4643e897. For more details please see the references link.
Vulnerability: GSD-2021-1000484
Summary: mtd: require write permissions for locking and badblock ioctls
Published: 2021-05-31T15:39:45.041586Z

mtd: require write permissions for locking and badblock ioctls

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.269 by commit 9625b00cac6630479c0ff4b9fafa88bee636e1f0, it was introduced in version v4.9.233 by commit 583d42400532fbd6228b0254d7c732b771e4750d. For more details please see the references link.
Vulnerability: GSD-2021-1002513
Summary: ALSA: pcm: oss: Limit the period size to 16MB
Published: 2021-12-19T19:40:39.758222Z

ALSA: pcm: oss: Limit the period size to 16MB

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.85 by commit ad45babf7886e7a212ee1d5eda9ef49f696db43c. For more details please see the references link.
Vulnerability: GSD-2022-1001043
Summary: mt76: fix monitor mode crash with sdio driver
Published: 2022-04-24T20:41:55.311004Z

mt76: fix monitor mode crash with sdio driver

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 95e2af01669c7a3cb7a933cefa06361f9db15059. For more details please see the references link.
Vulnerability: GSD-2021-1002840
Summary: mm, hwpoison: fix condition in free hugetlb page path
Published: 2021-12-30T02:45:47.888657Z

mm, hwpoison: fix condition in free hugetlb page path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit 7a77e22fde6349d276f862a521d190ad932e711d. For more details please see the references link.
Vulnerability: GSD-2022-1000202
Summary: yam: fix a memory leak in yam_siocdevprivate()
Published: 2022-02-18T21:55:00.252490Z

yam: fix a memory leak in yam_siocdevprivate()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit 729e54636b3ebefb77796702a5b1f1ed5586895e, it was introduced in version v4.19 by commit 0781168e23a2fc8dceb989f11fc5b39b3ccacc35. For more details please see the references link.
Vulnerability: GSD-2021-1001295
Summary: powerpc/mm: Fix lockup on kernel exec fault
Published: 2021-08-03T02:00:01.542746Z

powerpc/mm: Fix lockup on kernel exec fault

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.51 by commit d2e52d4664097a6c1f591d869ec594bd7a0d4925, it was introduced in version v4.14 by commit d3ca587404b36943b02df87406054ce73cc49500. For more details please see the references link.
Vulnerability: GSD-2022-1002395
Summary: btrfs: fix qgroup reserve overflow the qgroup limit
Published: 2022-04-24T22:42:53.615605Z

btrfs: fix qgroup reserve overflow the qgroup limit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 0355387ea5b02d353c9415613fab908fac5c52a6. For more details please see the references link.
Vulnerability: GSD-2022-1001940
Summary: uaccess: fix integer overflow on access_ok()
Published: 2022-04-24T21:56:37.682700Z

uaccess: fix integer overflow on access_ok()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.32 by commit e65d28d4e9bf90a35ba79c06661a572a38391dec, it was introduced in version v4.20 by commit da551281947cb2c0ab6e0045529a706af5d79584. For more details please see the references link.
Vulnerability: GSD-2022-1000652
Summary: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
Published: 2022-02-27T03:36:24.484653Z

ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.8 by commit ef6cd9eeb38062a145802b7b56be7ae1090e165e. For more details please see the references link.
Vulnerability: GSD-2022-1001690
Summary: net: ipv4: fix route with nexthop object delete warning
Published: 2022-04-24T21:35:34.744441Z

net: ipv4: fix route with nexthop object delete warning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 907c97986d6fa77318d17659dd76c94b65dd27c5, it was introduced in version v5.3 by commit 4c7e8084fd467ddb2b0e6c6011f9c1064afb7e56. For more details please see the references link.
Vulnerability: GSD-2022-1000982
Summary: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
Published: 2022-04-24T20:37:03.089248Z

net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.4 by commit 6c020f05253df04c3480b586fe188a3582740049, it was introduced in version v4.8 by commit fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4. For more details please see the references link.
Vulnerability: GSD-2021-1000607
Summary: USB: usbfs: Don't WARN about excessively large memory allocations
Published: 2021-06-04T19:46:36.385195Z

USB: usbfs: Don't WARN about excessively large memory allocations

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit 8d83f109e920d2776991fa142bb904d985dca2ed, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1001915
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-11-14T15:11:32.583364Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.290 by commit 429054ec51e648d241a7e0b465cf44f6633334c5, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.
Vulnerability: GSD-2021-1000257
Summary: powerpc/64s: Fix pte update for kernel memory on radix
Published: 2021-05-31T15:39:45.041586Z

powerpc/64s: Fix pte update for kernel memory on radix

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit e40c52ee67b155ad59f59e73ea136d02685f0e0d, it was introduced in version v4.18 by commit f1cb8f9beba8699dd1b4518418191499e53f7b17. For more details please see the references link.
Vulnerability: GSD-2021-1002790
Summary: hamradio: improve the incomplete fix to avoid NPD
Published: 2021-12-30T02:43:31.857780Z

hamradio: improve the incomplete fix to avoid NPD

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.223 by commit b68f41c6320b2b7fbb54a95f07a69f3dc7e56c59. For more details please see the references link.
Vulnerability: GSD-2022-1000828
Summary: net/smc: fix connection leak
Published: 2022-03-18T00:22:00.140659Z

net/smc: fix connection leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.104 by commit 2e8d465b83db307f04ad265848f8ab3f78f6918f, it was introduced in version v5.3 by commit 39f41f367b08650e9aa314e3a13fb6dda1e9eec7. For more details please see the references link.
Vulnerability: GSD-2022-1000081
Summary: USB: core: Fix hang in usb_kill_urb by adding memory barriers
Published: 2022-02-18T21:33:04.453755Z

USB: core: Fix hang in usb_kill_urb by adding memory barriers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.300 by commit b50f5ca60475710bbc9a3af32fbfc17b1e69c2f0. For more details please see the references link.
Vulnerability: GSD-2021-1001016
Summary: dm verity: fix require_signatures module_param permissions
Published: 2021-06-30T00:34:06.811315Z

dm verity: fix require_signatures module_param permissions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit fb429fad145a987056ac315b2c859197c3daa890. For more details please see the references link.
Vulnerability: GSD-2021-1001446
Summary: virtio-blk: Fix memory leak among suspend/resume procedure
Published: 2021-08-03T02:44:07.087036Z

virtio-blk: Fix memory leak among suspend/resume procedure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.276 by commit 102d6bc6475ab09bab579c18704e6cf8d898e93c. For more details please see the references link.
Vulnerability: GSD-2022-1002116
Summary: crypto: ccree - Fix use after free in cc_cipher_exit()
Published: 2022-04-24T22:13:13.255842Z

crypto: ccree - Fix use after free in cc_cipher_exit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit c93017c8d5ebf55a4e453ac7c84cc84cf92ab570, it was introduced in version v4.17 by commit 63ee04c8b491ee148489347e7da9fbfd982ca2bb. For more details please see the references link.
Vulnerability: GSD-2022-1002403
Summary: drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
Published: 2022-04-24T22:43:48.301281Z

drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit dd3a74d9e1b7ce143f0aec04da8691a764392f67, it was introduced in version v4.13 by commit 71c37505e7eaa01fa259debad1a71a7ae061039d. For more details please see the references link.
Vulnerability: GSD-2021-1001153
Summary: tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
Published: 2021-08-03T01:30:57.038982Z

tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.5 by commit fe77b85828ca9ddc42977b79de9e40d18545b4fe, it was introduced in version v5.10 by commit 8919a9b31eb4fb4c0a93e5fb350a626924302aa6. For more details please see the references link.
Vulnerability: GSD-2022-1002053
Summary: PM: core: keep irq flags in device_pm_check_callbacks()
Published: 2022-04-24T22:06:02.670795Z

PM: core: keep irq flags in device_pm_check_callbacks()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit ede1ef1a7de973321699736ef96d01a4b9a6fe9e. For more details please see the references link.
Vulnerability: GSD-2022-1000594
Summary: perf/x86/intel/pt: Fix crash with stop filters in single-range mode
Published: 2022-02-27T03:28:34.480687Z

perf/x86/intel/pt: Fix crash with stop filters in single-range mode

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit e83d941fd3445f660d2f43647c580a320cc384f6, it was introduced in version v5.5 by commit 670638477aede0d7a355ced04b569214aa3feacd. For more details please see the references link.
Vulnerability: GSD-2021-1001503
Summary: tty: Fix out-of-bound vmalloc access in imageblit
Published: 2021-10-19T16:21:11.587083Z

tty: Fix out-of-bound vmalloc access in imageblit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.286 by commit 7e71fcedfda6f7de18f850a6b36e78d78b04476f. For more details please see the references link.
Vulnerability: GSD-2021-1002285
Summary: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
Published: 2021-11-29T02:37:03.092192Z

net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.82 by commit 471c492890557bd58f73314bb4ad85d5a8fd5026, it was introduced in version v5.10.75 by commit 4f7bddf8c5c01cac74373443b13a68e1c6723a94. For more details please see the references link.
Vulnerability: GSD-2021-1000742
Summary: nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
Published: 2021-06-25T00:01:50.972170Z

nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.194 by commit 93e4ac2a9979a9a4ecc158409ed9c3044dc0ae1f, it was introduced in version v3.3 by commit d646960f7986fefb460a2b062d5ccc8ccfeacc3a. For more details please see the references link.
Vulnerability: GSD-2021-1001850
Summary: dma-debug: fix sg checks in debug_dma_map_sg()
Published: 2021-10-28T13:52:07.967464Z

dma-debug: fix sg checks in debug_dma_map_sg()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 39afed394cc62365d54b02e091668bd68c3a5299, it was introduced in version v2.6.31 by commit 884d05970bfbc3db368f23460dc4ce63257f240d. For more details please see the references link.
Vulnerability: GSD-2022-1001385
Summary: netfilter: conntrack: revisit gc autotuning
Published: 2022-04-24T21:09:32.815579Z

netfilter: conntrack: revisit gc autotuning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 7cd361d5e6d986c0d4cafb9ceaa803359048ae15. For more details please see the references link.
Vulnerability: GSD-2021-1000312
Summary: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4
Published: 2021-05-31T15:39:45.041586Z

usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.38 by commit e5366bea0277425e1868ba20eeb27c879d5a6e2d, it was introduced in version v5.8 by commit 992a60ed0d5e312ce9a485c9e12097ac82ae4b3e. For more details please see the references link.
Vulnerability: GSD-2021-1002401
Summary: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
Published: 2021-12-19T19:35:42.083270Z

nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.258 by commit 811a7576747760bcaf60502f096d1e6e91d566fa, it was introduced in version v3.12 by commit ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95. For more details please see the references link.
Vulnerability: GSD-2022-1001151
Summary: f2fs: fix to do sanity check on curseg->alloc_type
Published: 2022-04-24T20:49:06.407781Z

f2fs: fix to do sanity check on curseg->alloc_type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit c12765e3f129b144421c80d3383df885f85ee290. For more details please see the references link.
Vulnerability: GSD-2021-1002051
Summary: drm: mxsfb: Fix NULL pointer dereference crash on unload
Published: 2021-11-14T15:17:37.259006Z

drm: mxsfb: Fix NULL pointer dereference crash on unload

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit f40c2281d2c0674d32ba732fee45222d76495472, it was introduced in version v5.10 by commit ae1ed0093281939b80664a687689f12436c0e874. For more details please see the references link.
Vulnerability: GSD-2022-1001501
Summary: clk: qcom: ipq8074: fix PCI-E clock oops
Published: 2022-04-24T21:17:45.550569Z

clk: qcom: ipq8074: fix PCI-E clock oops

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit d02b3d4a8c525068bc5cfb4341e0023d8eb82ace, it was introduced in version v5.9 by commit f0cfcf1ade201dcfd3365f231efc90e846fa46df. For more details please see the references link.
Vulnerability: GSD-2021-1000596
Summary: spi: spi-fsl-dspi: Fix a resource leak in an error handling path
Published: 2021-06-04T19:44:33.067892Z

spi: spi-fsl-dspi: Fix a resource leak in an error handling path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit fe6921e3b8451a537e01c031b8212366bb386e3e, it was introduced in version v4.10 by commit 90ba37033cb94207e97c4ced9be575770438213b. For more details please see the references link.
Vulnerability: GSD-2022-1002287
Summary: netfilter: nf_tables: initialize registers in nft_do_chain()
Published: 2022-04-24T22:30:29.505189Z

netfilter: nf_tables: initialize registers in nft_do_chain()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.188 by commit 06f0ff82c70241a766a811ae1acf07d6e2734dcb, it was introduced in version v3.13 by commit 96518518cc417bb0a8c80b9fb736202e28acdf96. For more details please see the references link.
Vulnerability: GSD-2022-1001852
Summary: drm/msm/dp: populate connector of struct dp_panel
Published: 2022-04-24T21:48:20.203025Z

drm/msm/dp: populate connector of struct dp_panel

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 9525b8bcae8b99188990b56484799cf4b1b43786, it was introduced in version v5.15 by commit 7948fe12d47a946fb8025a0534c900e3dd4b5839. For more details please see the references link.
Vulnerability: GSD-2022-1000740
Summary: netfilter: nf_tables: fix memory leak during stateful obj update
Published: 2022-03-18T00:14:19.782376Z

netfilter: nf_tables: fix memory leak during stateful obj update

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit 34bb90e407e3288f610558beaae54ecaa32b11c4, it was introduced in version v5.4 by commit d62d0ba97b5803183e70cfded7f7b9da76893bf5. For more details please see the references link.
Vulnerability: GSD-2022-1000310
Summary: vsock: remove vsock from connected table when connect is interrupted by a signal
Published: 2022-02-27T02:49:18.008016Z

vsock: remove vsock from connected table when connect is interrupted by a signal

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.268 by commit e3b3939fd137aab6d00d54bee0ee9244b286a608, it was introduced in version v3.9 by commit d021c344051af91f42c5ba9fdedc176740cbd238. For more details please see the references link.
Vulnerability: GSD-2021-1001387
Summary: misc/libmasm/module: Fix two use after free in ibmasm_init_one
Published: 2021-08-03T02:26:21.655150Z

misc/libmasm/module: Fix two use after free in ibmasm_init_one

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 481a76d4749ee3a27f902ba213fdcbb4bb39720e. For more details please see the references link.
Vulnerability: GSD-2022-1001917
Summary: ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
Published: 2022-04-24T21:54:19.168666Z

ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 7777744e92a0b30e3e0cce2758d911837011ebd9, it was introduced in version v5.15.32 by commit 47711ff10c7e126702cfa725f6d86ef529d15a5f. For more details please see the references link.
Vulnerability: GSD-2022-1000605
Summary: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
Published: 2022-02-27T03:29:48.763335Z

efi: runtime: avoid EFIv2 runtime services on Apple x86 machines

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit a4085859411c825c321c9b55b8a9dc5a128a6684. For more details please see the references link.
Vulnerability: GSD-2021-1000980
Summary: net/mlx5e: Fix page reclaim for dead peer hairpin
Published: 2021-06-30T00:31:07.389357Z

net/mlx5e: Fix page reclaim for dead peer hairpin

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit be7f3f401d224e1efe8112b2fa8b837eeb8c5e52, it was introduced in version v4.19 by commit 4d8fcf216c90bc25e34ae2200aa8985ee3158898. For more details please see the references link.
Vulnerability: GSD-2021-1001692
Summary: net/sched: sch_taprio: properly cancel timer from taprio_destroy()
Published: 2021-10-19T16:32:07.673561Z

net/sched: sch_taprio: properly cancel timer from taprio_destroy()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.12 by commit 7a1c1af341041221b3acb9d7036cc2b43e0efa75, it was introduced in version v5.11 by commit 44d4775ca51805b376a8db5b34f650434a08e556. For more details please see the references link.
Vulnerability: GSD-2021-1001368
Summary: KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
Published: 2021-08-03T02:20:29.738757Z

KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.199 by commit 9bafc34dc4ad0cef18727c557f21ed3c3304df50, it was introduced in version v4.18 by commit b3cebfe8c1cadf1817939dcc3688a2504a69c662. For more details please see the references link.
Vulnerability: GSD-2022-1002268
Summary: brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
Published: 2022-04-24T22:28:31.888588Z

brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit d0ab87f8dcdfe72dc1d763be3392c1fc51a1ace2, it was introduced in version v5.4 by commit 82f93cf46d6007ffa003b2d4a2834563b6b84d21. For more details please see the references link.