TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1000056
Summary: binder: fix async_free_space accounting for empty parcels
Published: 2022-01-10T19:52:06.893892Z

binder: fix async_free_space accounting for empty parcels

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.13 by commit 17691bada6b2f1d5f1c0f6d28cd9d0727023b0ff, it was introduced in version v4.14 by commit 74310e06be4d74dcf67cd108366710dee5c576d5. For more details please see the references link.
Vulnerability: GSD-2022-1001094
Summary: Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
Published: 2022-04-24T20:44:46.503005Z

Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit f2141881b530738777c28bb51c62175895c8178b. For more details please see the references link.
Vulnerability: GSD-2021-1002194
Summary: mm, thp: bail out early in collapse_file for writeback page
Published: 2021-11-14T15:24:10.769511Z

mm, thp: bail out early in collapse_file for writeback page

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 74c42e1baacf206338b1dd6b6199ac964512b5bb, it was introduced in version v5.4 by commit 99cb0dbd47a15d395bf3faa78dc122bc5efe3fc0. For more details please see the references link.
Vulnerability: GSD-2021-1000453
Summary: powerpc/64s: Fix pte update for kernel memory on radix
Published: 2021-05-31T15:39:45.041586Z

powerpc/64s: Fix pte update for kernel memory on radix

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.191 by commit b3d5d0983388d6c4fb35f7d722556d5595f167a7, it was introduced in version v4.18 by commit f1cb8f9beba8699dd1b4518418191499e53f7b17. For more details please see the references link.
Vulnerability: GSD-2022-1002342
Summary: lib/test: use after free in register_test_dev_kmod()
Published: 2022-04-24T22:35:55.748485Z

lib/test: use after free in register_test_dev_kmod()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 46012ed6a533431d004fe76162faf05a60fae975, it was introduced in version v4.13 by commit d9c6a72d6fa29d3a7999dda726577e5d1fccafa5. For more details please see the references link.
Vulnerability: GSD-2022-1001997
Summary: powerpc/secvar: fix refcount leak in format_show()
Published: 2022-04-24T22:01:55.891602Z

powerpc/secvar: fix refcount leak in format_show()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 02222bf4f0a27f6eba66d1f597cdb5daadd51829. For more details please see the references link.
Vulnerability: GSD-2022-1000685
Summary: xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
Published: 2022-03-18T00:09:36.736770Z

xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.14 by commit 34630641e955f23ae06db178822d99d0a9d89b20. For more details please see the references link.
Vulnerability: GSD-2021-1000900
Summary: usb: fix various gadget panics on 10gbps cabling
Published: 2021-06-30T00:05:21.060043Z

usb: fix various gadget panics on 10gbps cabling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.126 by commit 5ef23506695b01d5d56a13a092a97f2478069d75. For more details please see the references link.
Vulnerability: GSD-2021-1001612
Summary: enetc: Fix illegal access when reading affinity_hint
Published: 2021-10-19T16:28:14.605062Z

enetc: Fix illegal access when reading affinity_hint

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.150 by commit 4c4c3052911b577920353a7646e4883d5da40c28, it was introduced in version v5.1 by commit d4fd0404c1c95b17880f254ebfee3485693fa8ba. For more details please see the references link.
Vulnerability: GSD-2021-1001242
Summary: net: sched: fix memory leak in tcindex_partial_destroy_work
Published: 2021-08-03T01:47:07.034949Z

net: sched: fix memory leak in tcindex_partial_destroy_work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.54 by commit 8e9662fde6d63c78eb1350f6167f64c9d71a865b, it was introduced in version v3.18 by commit 8332904aa971ed4547514f57c8b3780ad4f0f949. For more details please see the references link.
Vulnerability: GSD-2021-1000845
Summary: usb: dwc3: ep0: fix NULL pointer exception
Published: 2021-06-30T00:00:58.645227Z

usb: dwc3: ep0: fix NULL pointer exception

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.273 by commit 60156089f07e724e4dc8483702d5e1ede4522749. For more details please see the references link.
Vulnerability: GSD-2021-1001757
Summary: enetc: Fix illegal access when reading affinity_hint
Published: 2021-10-19T16:35:15.476210Z

enetc: Fix illegal access when reading affinity_hint

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.9 by commit 6f329d9da2a5ae032fcde800a99b118124ed5270, it was introduced in version v5.1 by commit d4fd0404c1c95b17880f254ebfee3485693fa8ba. For more details please see the references link.
Vulnerability: GSD-2022-1002207
Summary: scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
Published: 2022-04-24T22:21:48.682844Z

scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 8077a7162bc3cf658dd9ff112bc77716c08458c5. For more details please see the references link.
Vulnerability: GSD-2022-1000390
Summary: scsi: pm8001: Fix use-after-free for aborted TMF sas_task
Published: 2022-02-27T03:00:26.249177Z

scsi: pm8001: Fix use-after-free for aborted TMF sas_task

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.102 by commit d872e7b5fe38f325f5206b6872746fa02c2b4819. For more details please see the references link.
Vulnerability: GSD-2021-1001307
Summary: KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
Published: 2021-08-03T02:04:01.854965Z

KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.136 by commit 2b9ffddd70b449cdc42b943788dc82a6d7b0d175, it was introduced in version v3.10 by commit 8e591cb7204739efa8e15967ea334eb367039dde. For more details please see the references link.
Vulnerability: GSD-2022-1001978
Summary: qede: confirm skb is allocated before using
Published: 2022-04-24T22:00:28.466838Z

qede: confirm skb is allocated before using

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 8928239e5e2e460d95b8a0b89f61671625e7ece0, it was introduced in version v4.18 by commit 8a8633978b842c88fbcfe00d4e5dde96048f630e. For more details please see the references link.
Vulnerability: GSD-2021-1000146
Summary: virtiofs: fix memory leak in virtio_fs_probe()
Published: 2021-05-31T15:39:45.031586Z

virtiofs: fix memory leak in virtio_fs_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.36 by commit d19555ff225d0896a33246a49279e6d578095f15, it was introduced in version v5.4 by commit a62a8ef9d97da23762a588592c8b8eb50a8deb6a. For more details please see the references link.
Vulnerability: GSD-2021-1002481
Summary: atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
Published: 2021-12-19T19:39:15.905538Z

atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.84 by commit 2c514d25003ac89bb7716bb4402918ccb141f8f5. For more details please see the references link.
Vulnerability: GSD-2022-1001581
Summary: crypto: ccree - Fix use after free in cc_cipher_exit()
Published: 2022-04-24T21:26:00.109938Z

crypto: ccree - Fix use after free in cc_cipher_exit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 25c358efee5153dfd240d4e0d3169d5bebe9cacd, it was introduced in version v4.17 by commit 63ee04c8b491ee148489347e7da9fbfd982ca2bb. For more details please see the references link.
Vulnerability: GSD-2021-1000516
Summary: RDMA/rxe: Clear all QP fields if creation failed
Published: 2021-05-31T23:49:14.641629Z

RDMA/rxe: Clear all QP fields if creation failed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.122 by commit a62225d951d77eb20208fed8fc199e0c9b1df08b, it was introduced in version v4.8 by commit 8700e3e7c4857d28ebaa824509934556da0b3e76. For more details please see the references link.
Vulnerability: GSD-2022-1001755
Summary: watch_queue: Free the page array when watch_queue is dismantled
Published: 2022-04-24T21:39:55.210037Z

watch_queue: Free the page array when watch_queue is dismantled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 4913daecd04addb41bc96a9175a885e1c19862a8, it was introduced in version v5.8 by commit c73be61cede5882f9605a852414db559c0ebedfd. For more details please see the references link.
Vulnerability: GSD-2022-1000847
Summary: thermal: int340x: fix memory leak in int3400_notify()
Published: 2022-03-18T00:23:34.632142Z

thermal: int340x: fix memory leak in int3400_notify()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.103 by commit e098933866f9e1dd3ef4eebbe2e3d504f970f599, it was introduced in version v4.14 by commit 38e44da591303d08b0d965a033e11ade284999d0. For more details please see the references link.
Vulnerability: GSD-2021-1002205
Summary: regmap: Fix possible double-free in regcache_rbtree_exit()
Published: 2021-11-14T15:24:37.801825Z

regmap: Fix possible double-free in regcache_rbtree_exit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 55e6d8037805b3400096d621091dfbf713f97e83, it was introduced in version v3.12 by commit 3f4ff561bc88b074d5e868dde4012d89cbb06c87. For more details please see the references link.
Vulnerability: GSD-2021-1000238
Summary: net: marvell: prestera: fix port event handling on init
Published: 2021-05-31T15:39:45.041586Z

net: marvell: prestera: fix port event handling on init

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 9d1ba11fabdd8f25abb24272ef1621417981320b, it was introduced in version v5.10 by commit 501ef3066c89d7f9045315e1be58749cf9e6814d. For more details please see the references link.
Vulnerability: GSD-2022-1001305
Summary: rtc: pl031: fix rtc features null pointer dereference
Published: 2022-04-24T21:02:35.976924Z

rtc: pl031: fix rtc features null pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 1b915703964f7e636961df04c540261dc55c6c70, it was introduced in version v5.12 by commit d9b0dd54a1943f47a381a474f8ea2c94466110c0. For more details please see the references link.
Vulnerability: GSD-2021-1000392
Summary: crypto: sun8i-ss - fix result memory leak on error path
Published: 2021-05-31T15:39:45.041586Z

crypto: sun8i-ss - fix result memory leak on error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 1f12aaf07f61122cf5074d29714ee26f8d44b0e7, it was introduced in version v5.10 by commit d9b45418a91773b7672e4c60037a28074b495c6d. For more details please see the references link.
Vulnerability: GSD-2021-1002655
Summary: net/packet: rx_owner_map depends on pg_vec
Published: 2021-12-27T05:33:25.114894Z

net/packet: rx_owner_map depends on pg_vec

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.222 by commit 18c73170de6719491f79b04c727ea8314c246b03, it was introduced in version v4.19.114 by commit 6fb0e4385928900ccb8697748555b3f54bba5193. For more details please see the references link.
Vulnerability: GSD-2021-1000668
Summary: NFC: nci: fix memory leak in nci_allocate_device
Published: 2021-06-04T19:58:29.415529Z

NFC: nci: fix memory leak in nci_allocate_device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit 0365701bc44e078682ee1224866a71897495c7ef, it was introduced in version v4.0 by commit 11f54f228643d0248ec00ce8c9fb8d872f87e7b8. For more details please see the references link.
Vulnerability: GSD-2022-1000144
Summary: tipc: improve size validations for received domain records
Published: 2022-02-18T21:46:52.945997Z

tipc: improve size validations for received domain records

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.229 by commit f1af11edd08dd8376f7a84487cbb0ea8203e3a1d, it was introduced in version v4.8 by commit 35c55c9877f8de0ab129fa1a309271d0ecc868b9. For more details please see the references link.
Vulnerability: GSD-2022-1002179
Summary: drbd: Fix five use after free bugs in get_initial_state
Published: 2022-04-24T22:19:17.554644Z

drbd: Fix five use after free bugs in get_initial_state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit b6a4055036eed1f5e239ce3d8b0db1ce38bba447, it was introduced in version v4.5 by commit a29728463b254ce81ecefdf20c1a02e01d9361da. For more details please see the references link.
Vulnerability: GSD-2021-1001429
Summary: wl1251: Fix possible buffer overflow in wl1251_cmd_scan
Published: 2021-08-03T02:38:03.595805Z

wl1251: Fix possible buffer overflow in wl1251_cmd_scan

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 0f6c0488368c9ac1aa685821916fadba32f5d1ef. For more details please see the references link.
Vulnerability: GSD-2022-1002483
Summary: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
Published: 2022-04-24T22:53:11.062791Z

ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit b3f15609ffa521de12244cd6af24002030dda3f5, it was introduced in version v4.4 by commit 337aadff8e4567e39669e07d9a88b789d78458b5. For more details please see the references link.
Vulnerability: GSD-2022-1000514
Summary: ibmvnic: don't release napi in __ibmvnic_open()
Published: 2022-02-27T03:17:18.356968Z

ibmvnic: don't release napi in __ibmvnic_open()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit e08cb9056fb2564d1f6bad789bdf79ab09bf2f81, it was introduced in version v4.12 by commit ed651a10875f13135a5f59c1bae4d51b377b3925. For more details please see the references link.
Vulnerability: GSD-2021-1001583
Summary: phy: mdio: fix memory leak
Published: 2021-10-19T16:24:52.759169Z

phy: mdio: fix memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.153 by commit 414bb4ead1362ef2c8592db723c017258f213988, it was introduced in version v2.6.28 by commit 46abc02175b3c246dd5141d878f565a8725060c9. For more details please see the references link.
Vulnerability: GSD-2021-1001079
Summary: PCI: aardvark: Fix kernel panic during PIO transfer
Published: 2021-06-30T00:38:13.806319Z

PCI: aardvark: Fix kernel panic during PIO transfer

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit 3d213a4ddf49a860be6e795482c17f87e0c82b2a. For more details please see the references link.
Vulnerability: GSD-2021-1001096
Summary: i2c: robotfuzz-osif: fix control-request directions
Published: 2021-07-08T01:56:04.343515Z

i2c: robotfuzz-osif: fix control-request directions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.274 by commit 9fd1b4e41a80e52d5f846b1f04966f2b7b84e6b3, it was introduced in version v3.14 by commit 83e53a8f120f2f273cf0ad717f5372ab79ac24fe. For more details please see the references link.
Vulnerability: GSD-2022-1002196
Summary: netlabel: fix out-of-bounds memory accesses
Published: 2022-04-24T22:20:55.941078Z

netlabel: fix out-of-bounds memory accesses

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.0 by commit 5578de4834fe0f2a34fedc7374be691443396d1f, it was introduced in version v2.6.19 by commit 446fda4f26822b2d42ab3396aafcedf38a9ff2b6. For more details please see the references link.
Vulnerability: GSD-2022-1000451
Summary: ax25: improve the incomplete fix to avoid UAF and NPD bugs
Published: 2022-02-27T03:08:51.574758Z

ax25: improve the incomplete fix to avoid UAF and NPD bugs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit 4c958f0c5714812461da7785393315b35145ac8c. For more details please see the references link.
Vulnerability: GSD-2021-1002340
Summary: scsi: core: Fix scsi_mode_sense() buffer length handling
Published: 2021-11-29T02:39:33.974555Z

scsi: core: Fix scsi_mode_sense() buffer length handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.5 by commit e15de347faf4a9f494cbd4e9a623d343dc1b5851. For more details please see the references link.
Vulnerability: GSD-2022-1001610
Summary: cifs: prevent bad output lengths in smb2_ioctl_query_info()
Published: 2022-04-24T21:28:03.636241Z

cifs: prevent bad output lengths in smb2_ioctl_query_info()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit fadddfc1dc3c6f79b21cff4a7e9a6c40b84fbc53. For more details please see the references link.
Vulnerability: GSD-2022-1000902
Summary: xen/netfront: destroy queues before real_num_tx_queues is zeroed
Published: 2022-03-18T00:29:59.959308Z

xen/netfront: destroy queues before real_num_tx_queues is zeroed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.233 by commit 198cdc287769c717dafff5887c6125cb7a373bf3, it was introduced in version v4.19.226 by commit 35cad2003b6447932cfe91f795090586306738e8. For more details please see the references link.
Vulnerability: GSD-2021-1000687
Summary: net: fujitsu: fix potential null-ptr-deref
Published: 2021-06-04T20:02:27.445814Z

net: fujitsu: fix potential null-ptr-deref

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.271 by commit 6dbf1101594f7c76990b63c35b5a40205a914b6b, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1001995
Summary: comedi: vmk80xx: fix transfer-buffer overflows
Published: 2021-11-14T15:15:04.966037Z

comedi: vmk80xx: fix transfer-buffer overflows

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.217 by commit 7a2021b896de1ad559d33b5c5cdd20b982242088, it was introduced in version v2.6.31 by commit 985cafccbf9b7f862aa1c5ee566801e18b5161fb. For more details please see the references link.
Vulnerability: GSD-2021-1002710
Summary: iocost: Fix divide-by-zero on donation from low hweight cgroup
Published: 2021-12-27T05:38:23.086939Z

iocost: Fix divide-by-zero on donation from low hweight cgroup

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.88 by commit a7c80674538f15f85d68138240aae440b8039519, it was introduced in version v5.10 by commit f1de2439ec43b74764f2a26e3a310b24407e3bde. For more details please see the references link.
Vulnerability: GSD-2022-1001240
Summary: drm/amd/display: Call dc_stream_release for remove link enc assignment
Published: 2022-04-24T20:56:51.685030Z

drm/amd/display: Call dc_stream_release for remove link enc assignment

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit a28b7b6a0c827ce672edcdb5b2b5916b0beebe03, it was introduced in version v5.17 by commit 0bb24555858403671657f6dc025d2931e3e857bb. For more details please see the references link.
Vulnerability: GSD-2022-1000282
Summary: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
Published: 2022-02-18T22:05:52.266778Z

ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit e8e07c5e25a29e2a6f119fd947f55d7a55eb8a13. For more details please see the references link.
Vulnerability: GSD-2021-1001215
Summary: dm btree remove: assign new_root only when removal succeeds
Published: 2021-08-03T01:38:45.117085Z

dm btree remove: assign new_root only when removal succeeds

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit ad365e9351ac2b450e7e79932ff6abf59342d91a. For more details please see the references link.
Vulnerability: GSD-2022-1000778
Summary: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
Published: 2022-03-18T00:17:31.319956Z

thermal: core: Fix TZ_GET_TRIP NULL pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.27 by commit 3dafbf915c05f83469e791949b5590da2aca2afb, it was introduced in version v5.9 by commit 1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00. For more details please see the references link.
Vulnerability: GSD-2021-1000957
Summary: usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port
Published: 2021-06-30T00:29:11.101443Z

usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.44 by commit 18eaf0de50eadeeb395b83310b259b21ad8ed0a6, it was introduced in version v5.10 by commit 3ed8e1c2ac9914a2fcb08ec13476b85319536cea. For more details please see the references link.
Vulnerability: GSD-2021-1001645
Summary: net: hns3: do not allow call hns3_nic_net_open repeatedly
Published: 2021-10-19T16:29:45.948992Z

net: hns3: do not allow call hns3_nic_net_open repeatedly

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.71 by commit f8ba689cb69523144d10606096ef686002dd7285, it was introduced in version v5.0 by commit e888402789b9db5de4fcda361331d66dbf0cd9fd. For more details please see the references link.
Vulnerability: GSD-2022-1002315
Summary: xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
Published: 2022-04-24T22:33:41.087544Z

xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 0848767dee78c00c5646eef9b3201ee14ce68563. For more details please see the references link.
Vulnerability: GSD-2022-1000328
Summary: nvme: fix a possible use-after-free in controller reset during load
Published: 2022-02-27T02:52:00.673931Z

nvme: fix a possible use-after-free in controller reset during load

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.231 by commit a25e460fbb0340488d119fb2e28fe3f829b7417e. For more details please see the references link.
Vulnerability: GSD-2022-1001493
Summary: vsock/virtio: initialize vdev->priv before using VQs
Published: 2022-04-24T21:16:50.544738Z

vsock/virtio: initialize vdev->priv before using VQs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 27cb7d136224a81904ead19d9da2c82357bcc9a9, it was introduced in version v5.3 by commit 9c7a5582f5d720dc35cfcc42ccaded69f0642e4a. For more details please see the references link.
Vulnerability: GSD-2021-1000404
Summary: nbd: Fix NULL pointer in flush_workqueue
Published: 2021-05-31T15:39:45.041586Z

nbd: Fix NULL pointer in flush_workqueue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.120 by commit 1c4962df938891af9ab4775f5224ef8601764107, it was introduced in version v5.4 by commit e9e006f5fcf2bab59149cb38a48a4817c1b538b4. For more details please see the references link.
Vulnerability: GSD-2021-1002439
Summary: f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
Published: 2021-12-19T19:37:20.410287Z

f2fs: set SBI_NEED_FSCK flag when inconsistent node block found

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.163 by commit 51be334da375058694043224a0941275a353eaac. For more details please see the references link.
Vulnerability: GSD-2022-1001169
Summary: net/sched: act_ct: fix ref leak when switching zones
Published: 2022-04-24T20:50:07.820265Z

net/sched: act_ct: fix ref leak when switching zones

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit b24793a37d91aacad7cb9893b226a7924a89636a, it was introduced in version v5.17 by commit 2f131de361f6d0eaff17db26efdb844c178432f8. For more details please see the references link.
Vulnerability: GSD-2021-1000054
Summary: tools/power turbostat: Fix offset overflow issue in index converting
Published: 2021-05-31T15:39:45.031586Z

tools/power turbostat: Fix offset overflow issue in index converting

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit 337b1546cde87fb8588ddaedf0201b769baa572a, it was introduced in version v5.10 by commit 9972d5d84d76982606806b2ce887f70c2f8ba60a. For more details please see the references link.
Vulnerability: GSD-2021-1002069
Summary: net: batman-adv: fix error handling
Published: 2021-11-14T15:18:29.335848Z

net: batman-adv: fix error handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.77 by commit b0a2cd38553c77928ef1646ed1518486b1e70ae8, it was introduced in version v2.6.38 by commit c6c8fea29769d998d94fcec9b9f14d4b52b349d3. For more details please see the references link.
Vulnerability: GSD-2021-1002593
Summary: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
Published: 2021-12-19T19:44:09.286133Z

net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit 973a0373e88cc19129bd6ef0ec193040535397d9, it was introduced in version v5.15 by commit 8d5f7954b7c8de54902a8beda141064a7e2e6ee0. For more details please see the references link.
Vulnerability: GSD-2022-1001539
Summary: cxl/port: Hold port reference until decoder release
Published: 2022-04-24T21:21:39.389150Z

cxl/port: Hold port reference until decoder release

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit b0022ca445d5fc4d0c89d15dcd0f855977b22c1d, it was introduced in version v5.14 by commit 40ba17afdfabb01688c61565dbe02a916241bc05. For more details please see the references link.
Vulnerability: GSD-2021-1002086
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-11-14T15:19:13.207949Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit 564249219e5b5673a8416b5181875d828c3f1e8c, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.
Vulnerability: GSD-2021-1000541
Summary: btrfs: return whole extents in fiemap
Published: 2021-06-04T19:35:47.075817Z

btrfs: return whole extents in fiemap

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit afd1fca36d26f3896c99a363fc3dbe9c05411e3a, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1001186
Summary: drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool
Published: 2022-04-24T20:51:57.898038Z

drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 30ad11bff021a94aff6dab1ec9236fdfd884fbff, it was introduced in version v5.15 by commit d43c65b05b848e0b2db1a6c78b02c189da3a95b5. For more details please see the references link.
Vulnerability: GSD-2021-1000111
Summary: openvswitch: fix stack OOB read while fragmenting IPv4 packets
Published: 2021-05-31T15:39:45.031586Z

openvswitch: fix stack OOB read while fragmenting IPv4 packets

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit d841d3cf5297fde4ce6a41ff35451d0e82917f3e, it was introduced in version v4.16 by commit d52e5a7e7ca49457dd31fc8b42fb7c0d58a31221. For more details please see the references link.
Vulnerability: GSD-2021-1001350
Summary: coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
Published: 2021-08-03T02:14:56.696666Z

coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.133 by commit ef0a06acc6b16388640ad367eedfa2a17f1945db, it was introduced in version v4.14 by commit 0c3fc4d5fa26092853278145aca9b21fa52a3e93. For more details please see the references link.
Vulnerability: GSD-2022-1002250
Summary: dax: make sure inodes are flushed before destroy cache
Published: 2022-04-24T22:26:12.547163Z

dax: make sure inodes are flushed before destroy cache

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 770d42fff12d8595adda9025a0b92091f543e775, it was introduced in version v4.12 by commit 7b6be8444e0f0dd675b54d059793423d3c9b4c03. For more details please see the references link.
Vulnerability: GSD-2022-1001885
Summary: ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
Published: 2022-04-24T21:51:56.102031Z

ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit bb0a0e23dd0070e6f407387f3822daef95e5815d, it was introduced in version v5.1 by commit 6f6c3c36f0917be24587eeba818ab4fdfcb5465a. For more details please see the references link.
Vulnerability: GSD-2022-1000797
Summary: sc16is7xx: Fix for incorrect data being transmitted
Published: 2022-03-18T00:18:52.303519Z

sc16is7xx: Fix for incorrect data being transmitted

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.26 by commit 4e508c59357310a41b8fa69a576dfea4208f2518, it was introduced in version v5.8 by commit 6393ff1c4435acc343b1481f5b834b918cb42b12. For more details please see the references link.
Vulnerability: GSD-2021-1000812
Summary: pid: take a reference when initializing `cad_pid`
Published: 2021-06-25T00:08:57.046925Z

pid: take a reference when initializing `cad_pid`

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit b8ff869f20152fbe66b6c2e2715d26a2f9897cca, it was introduced in version v2.6.19 by commit 9ec52099e4b8678a60e9f93e41ad87885d64f3e6. For more details please see the references link.
Vulnerability: GSD-2021-1001700
Summary: block: don't call rq_qos_ops->done_bio if the bio isn't tracked
Published: 2021-10-19T16:32:30.817671Z

block: don't call rq_qos_ops->done_bio if the bio isn't tracked

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.11 by commit 004b8f8a691205a93d9e80d98b786b2b97424d6e. For more details please see the references link.
Vulnerability: GSD-2022-1000580
Summary: KVM: arm64: Avoid consuming a stale esr value when SError occur
Published: 2022-02-27T03:27:00.124192Z

KVM: arm64: Avoid consuming a stale esr value when SError occur

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit e1e852746997500f1873f60b954da5f02cc2dba3, it was introduced in version v5.11 by commit defe21f49bc98b095300752aa1e19bb608f3e97d. For more details please see the references link.
Vulnerability: GSD-2021-1001517
Summary: blktrace: Fix uaf in blk_trace access after removing by sysfs
Published: 2021-10-19T16:21:48.784341Z

blktrace: Fix uaf in blk_trace access after removing by sysfs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.285 by commit dacfd5e4d1142bfb3809aab3634a375f6f373269, it was introduced in version v2.6.30 by commit c71a896154119f4ca9e89d6078f5f63ad60ef199. For more details please see the references link.
Vulnerability: GSD-2022-1002047
Summary: media: ir_toy: free before error exiting
Published: 2022-04-24T22:05:45.252305Z

media: ir_toy: free before error exiting

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 99e3f83539cac6884a4df02cb204a57a184ea12b. For more details please see the references link.
Vulnerability: GSD-2022-1002417
Summary: mmc: host: Return an error when ->enable_sdio_irq() ops is missing
Published: 2022-04-24T22:45:07.068551Z

mmc: host: Return an error when ->enable_sdio_irq() ops is missing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 3fac2cb56ba5205547e296b193e52871f9dc3845. For more details please see the references link.
Vulnerability: GSD-2022-1001391
Summary: PCI: endpoint: Fix misused goto label
Published: 2022-04-24T21:10:02.897681Z

PCI: endpoint: Fix misused goto label

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 70236a0d2d62b081d52076de22d8d017d6cbe99f. For more details please see the references link.
Vulnerability: GSD-2021-1000306
Summary: selinux: add proper NULL termination to the secclass_map permissions
Published: 2021-05-31T15:39:45.041586Z

selinux: add proper NULL termination to the secclass_map permissions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 336dc1d637f3c889785a718fe791580e01bc2a93, it was introduced in version v4.15 by commit ec27c3568a34c7fe5fcf4ac0a354eda77687f7eb. For more details please see the references link.
Vulnerability: GSD-2022-1000979
Summary: nfc: nci: add flush_workqueue to prevent uaf
Published: 2022-04-24T20:36:43.659623Z

nfc: nci: add flush_workqueue to prevent uaf

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.4 by commit edd4600120641e1714e30112e69a548cfb68e067, it was introduced in version v3.2 by commit 6a2968aaf50c7a22fced77a5e24aa636281efca8. For more details please see the references link.
Vulnerability: GSD-2021-1000756
Summary: btrfs: fixup error handling in fixup_inode_link_counts
Published: 2021-06-25T00:02:44.713794Z

btrfs: fixup error handling in fixup_inode_link_counts

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.125 by commit 6d4da27bd9efdbdffbaf6aa12617a2b549a3b752, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1001844
Summary: ocfs2: fix data corruption after conversion from inline format
Published: 2021-10-28T13:51:50.049276Z

ocfs2: fix data corruption after conversion from inline format

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit f1b98569e81c37d7e0deada7172f8f60860c1360, it was introduced in version v5.10 by commit 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b. For more details please see the references link.
Vulnerability: GSD-2021-1002291
Summary: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
Published: 2021-11-29T02:37:18.089256Z

scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.82 by commit 8440377e1a5644779b4c8d013aa2a917f5fc83c3. For more details please see the references link.
Vulnerability: GSD-2021-1002784
Summary: phonet/pep: refuse to enable an unbound pipe
Published: 2021-12-30T02:43:17.820010Z

phonet/pep: refuse to enable an unbound pipe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.260 by commit 311601f114859d586d5ef8833d60d3aa23282161. For more details please see the references link.
Vulnerability: GSD-2021-1000243
Summary: i2c: imx: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: imx: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit ff406f6cd09c273337ab4854292e4aca48f8affd, it was introduced in version v5.7 by commit 3a5ee18d2a32bda6b9a1260136f6805848e3839d. For more details please see the references link.
Vulnerability: GSD-2022-1001684
Summary: qede: confirm skb is allocated before using
Published: 2022-04-24T21:34:56.476055Z

qede: confirm skb is allocated before using

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit c9bdce2359b5f4986eb38d1e81865b3586cc20d2, it was introduced in version v4.18 by commit 8a8633978b842c88fbcfe00d4e5dde96048f630e. For more details please see the references link.
Vulnerability: GSD-2022-1000996
Summary: SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
Published: 2022-04-24T20:38:17.438916Z

SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit d21287d8a4589dd8513038f887ece980fbc399cf, it was introduced in version v5.1 by commit a73881c96d73ee72b7dbbd38a6eeef66182a8ef7. For more details please see the references link.
Vulnerability: GSD-2021-1000613
Summary: iommu/vt-d: Fix sysfs leak in alloc_iommu()
Published: 2021-06-04T19:47:35.457558Z

iommu/vt-d: Fix sysfs leak in alloc_iommu()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit f01134321d04f47c718bb41b799bcdeda27873d2, it was introduced in version v4.11 by commit 39ab9555c24110671f8dc671311a26e5c985b592. For more details please see the references link.
Vulnerability: GSD-2021-1001901
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-10-28T13:54:49.555681Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit 564249219e5b5673a8416b5181875d828c3f1e8c, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.