TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1000316
Summary: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
Published: 2022-02-27T02:49:58.153377Z

ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.230 by commit 12b6703e9546902c56b4b9048b893ad49d62bdd4, it was introduced in version v4.0 by commit f243e5a7859a24d10975afb9a1708cac624ba6f1. For more details please see the references link.
Vulnerability: GSD-2021-1001381
Summary: dma-buf/sync_file: Don't leak fences on merge failure
Published: 2021-08-03T02:24:50.672184Z

dma-buf/sync_file: Don't leak fences on merge failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.199 by commit e0355a0ad31a1d677b2a4514206de4902bd550e8, it was introduced in version v4.9 by commit a02b9dc90d844cc7df7b63264e7920cc425052d9. For more details please see the references link.
Vulnerability: GSD-2021-1000969
Summary: HID: usbhid: fix info leak in hid_submit_ctrl
Published: 2021-06-30T00:29:57.603507Z

HID: usbhid: fix info leak in hid_submit_ctrl

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.45 by commit b1e3596416d74ce95cc0b7b38472329a3818f8a9. For more details please see the references link.
Vulnerability: GSD-2022-1001157
Summary: Revert "Revert "block, bfq: honor already-setup queue merges""
Published: 2022-04-24T20:49:23.829502Z

Revert "Revert "block, bfq: honor already-setup queue merges""

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 4083925bd6dc89216d156474a8076feec904e607. For more details please see the references link.
Vulnerability: GSD-2021-1002407
Summary: ALSA: pcm: oss: Limit the period size to 16MB
Published: 2021-12-19T19:35:56.957360Z

ALSA: pcm: oss: Limit the period size to 16MB

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.258 by commit be55f306396cd62c6889286a7194fd8b53363aeb. For more details please see the references link.
Vulnerability: GSD-2022-1001507
Summary: tipc: fix the timer expires after interval 100ms
Published: 2022-04-24T21:18:26.073820Z

tipc: fix the timer expires after interval 100ms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit b58fa5cf636f66cd3d955b351f15c0e5d9445250, it was introduced in version v4.20 by commit 6787927475e52f6933e3affce365dabb2aa2fadf. For more details please see the references link.
Vulnerability: GSD-2021-1000590
Summary: btrfs: return whole extents in fiemap
Published: 2021-06-04T19:43:29.550064Z

btrfs: return whole extents in fiemap

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit c7e0c6047c4f2a9664e48e3671af80c513220a44, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1002057
Summary: net/tls: Fix flipped sign in tls_err_abort() calls
Published: 2021-11-14T15:17:52.264814Z

net/tls: Fix flipped sign in tls_err_abort() calls

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.77 by commit f3dec7e7ace38224f82cf83f0049159d067c2e19, it was introduced in version v4.17 by commit c46234ebb4d1eee5e09819f49169e51cfc6eb909. For more details please see the references link.
Vulnerability: GSD-2021-1002542
Summary: net/sched: sch_ets: don't peek at classes beyond 'nbands'
Published: 2021-12-19T19:41:56.712585Z

net/sched: sch_ets: don't peek at classes beyond 'nbands'

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.6 by commit e25bdbc7e951ae5728fee1f4c09485df113d013c, it was introduced in version v5.6 by commit dcc68b4d8084e1ac9af0d4022d6b1aff6a139a33. For more details please see the references link.
Vulnerability: GSD-2022-1001012
Summary: drbd: Fix five use after free bugs in get_initial_state
Published: 2022-04-24T20:39:38.189981Z

drbd: Fix five use after free bugs in get_initial_state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 226e993c39405292781bfcf4b039a8db56aab362, it was introduced in version v4.5 by commit a29728463b254ce81ecefdf20c1a02e01d9361da. For more details please see the references link.
Vulnerability: GSD-2021-1000085
Summary: bus: mhi: core: Fix invalid error returning in mhi_queue
Published: 2021-05-31T15:39:45.031586Z

bus: mhi: core: Fix invalid error returning in mhi_queue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit a99b661c3187365f81026d89b1133a76cd2652b3, it was introduced in version v5.12 by commit a8f75cb348fd52e7a5cf25991cdf9c89fb0cfd41. For more details please see the references link.
Vulnerability: GSD-2021-1002112
Summary: mm, slub: fix potential use-after-free in slab_debugfs_fops
Published: 2021-11-14T15:20:23.875767Z

mm, slub: fix potential use-after-free in slab_debugfs_fops

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit 159d8cfbd0428d487c53be4722f33cdab0d25d83, it was introduced in version v5.14 by commit 64dd68497be76ab4e237cca06f5324e220d0f050. For more details please see the references link.
Vulnerability: GSD-2022-1001442
Summary: ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
Published: 2022-04-24T21:13:47.674639Z

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 70e9090acc32348cedc5def0cd6d5c126efc97b9, it was introduced in version v4.9 by commit 9e0a1fff8db56eaaebb74b4a3ef65f86811c4798. For more details please see the references link.
Vulnerability: GSD-2022-1001911
Summary: dm: fix use-after-free in dm_cleanup_zoned_dev()
Published: 2022-04-24T21:53:59.442555Z

dm: fix use-after-free in dm_cleanup_zoned_dev()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 0987f00a76a17aa7213da492c00ed9e5a6210c73, it was introduced in version v5.14 by commit bb37d77239af25cde59693dbe3fac04dd17d7b29. For more details please see the references link.
Vulnerability: GSD-2022-1000603
Summary: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
Published: 2022-02-27T03:29:35.388673Z

bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit b82ef4985a6d05e80f604624332430351df7b79a, it was introduced in version v5.9 by commit fa28dcb82a38f8e3993b0fae9106b1a80b59e4f0. For more details please see the references link.
Vulnerability: GSD-2021-1000986
Summary: bpf: Fix leakage under speculation on mispredicted branches
Published: 2021-06-30T00:31:29.766256Z

bpf: Fix leakage under speculation on mispredicted branches

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 5fc6ed1831ca5a30fb0ceefd5e33c7c689e7627b, it was introduced in version v4.15 by commit b2157399cc9898260d6031c5bfe45fe137c1fbe7. For more details please see the references link.
Vulnerability: GSD-2021-1001694
Summary: libbpf: Fix memory leak in strset
Published: 2021-10-19T16:32:13.407081Z

libbpf: Fix memory leak in strset

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.12 by commit 9e8e7504e09831c469b67d6dc11d9a72654bdb8c, it was introduced in version v5.13 by commit 90d76d3ececc74bf43b2a97f178dadfa1e52be54. For more details please see the references link.
Vulnerability: GSD-2021-1002811
Summary: tee: optee: Fix incorrect page free bug
Published: 2021-12-30T02:44:28.918963Z

tee: optee: Fix incorrect page free bug

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.89 by commit ad338d825e3f7b96ee542bf313728af2d19fe9ad, it was introduced in version v5.10.58 by commit 1340dc3fb75ea69221f4f5dcb0cbace55ad0331c. For more details please see the references link.
Vulnerability: GSD-2022-1000253
Summary: powerpc/32s: Fix kasan_init_region() for KASAN
Published: 2022-02-18T22:01:40.087424Z

powerpc/32s: Fix kasan_init_region() for KASAN

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit db37befafa536d1eed293fa5765ad781c3152071, it was introduced in version v5.8 by commit 7974c4732642f710b5111165ae1f7f7fed822282. For more details please see the references link.
Vulnerability: GSD-2022-1001291
Summary: media: venus: vdec: fixed possible memory leak issue
Published: 2022-04-24T21:01:45.020438Z

media: venus: vdec: fixed possible memory leak issue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 5f89d05ba93df9c2cdfe493843f93288e55e99eb, it was introduced in version v5.16 by commit 40d87aafee29fb01ce1e1868502fb2059a6a7f34. For more details please see the references link.
Vulnerability: GSD-2021-1000206
Summary: sched: Fix out-of-bound access in uclamp
Published: 2021-05-31T15:39:45.041586Z

sched: Fix out-of-bound access in uclamp

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 42ee47c7e3569d9a0e2cb5053c496d97d380472f, it was introduced in version v5.3 by commit 69842cba9ace84849bb9b8edcdf2cefccd97901c. For more details please see the references link.
Vulnerability: GSD-2022-1000879
Summary: cifs: fix double free race when mount fails in cifs_get_root()
Published: 2022-03-18T00:27:08.282936Z

cifs: fix double free race when mount fails in cifs_get_root()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.183 by commit e208668ef7ba23efcbf76a8200cab8deee501c4d. For more details please see the references link.
Vulnerability: GSD-2021-1000656
Summary: drm/meson: fix shutdown crash when component not probed
Published: 2021-06-04T19:56:04.022812Z

drm/meson: fix shutdown crash when component not probed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit e256a0eb43e17209e347409a80805b1659398d68, it was introduced in version v4.19.181 by commit 8fbbf2b3849419e31731902d7478b0c934732632. For more details please see the references link.
Vulnerability: GSD-2021-1001944
Summary: regmap: Fix possible double-free in regcache_rbtree_exit()
Published: 2021-11-14T15:12:51.224022Z

regmap: Fix possible double-free in regcache_rbtree_exit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.289 by commit fc081477b47dfc3a6cb50a96087fc29674013fc2, it was introduced in version v3.12 by commit 3f4ff561bc88b074d5e868dde4012d89cbb06c87. For more details please see the references link.
Vulnerability: GSD-2021-1002391
Summary: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
Published: 2021-12-19T19:35:18.016037Z

sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit 325ea49fc43cbc03a5e1e37de8f0ca6357ced4b1, it was introduced in version v2.6.24 by commit faf0b2e5afe7dae072d2715763c7f992b612b628. For more details please see the references link.
Vulnerability: GSD-2022-1000480
Summary: staging: vc04_services: Fix RCU dereference check
Published: 2022-02-27T03:12:48.749997Z

staging: vc04_services: Fix RCU dereference check

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit 993db6da4aec1a58b35e604d3fa779b1d07ec467. For more details please see the references link.
Vulnerability: GSD-2021-1001417
Summary: memory: fsl_ifc: fix leak of private memory on probe failure
Published: 2021-08-03T02:34:43.341514Z

memory: fsl_ifc: fix leak of private memory on probe failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 7626ffbea708e5aba6912295c012d2b409a1769f, it was introduced in version v3.3 by commit a20cbdeffce247a2b6fb83cd8d22433994068565. For more details please see the references link.
Vulnerability: GSD-2022-1002147
Summary: locking/lockdep: Avoid potential access of invalid memory in lock_class
Published: 2022-04-24T22:16:07.859075Z

locking/lockdep: Avoid potential access of invalid memory in lock_class

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 68c80088f52bfae7fc16ce0ed25ce969ddfb2ded, it was introduced in version v5.1 by commit 8b39adbee805c539a461dbf208b125b096152b1c. For more details please see the references link.
Vulnerability: GSD-2021-1001047
Summary: mm/memory-failure: make sure wait for page writeback in memory_failure
Published: 2021-06-30T00:36:10.018727Z

mm/memory-failure: make sure wait for page writeback in memory_failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit 28788dc5c70597395b6b451dae4549bbaa8e2c56, it was introduced in version v3.16 by commit 0bc1f8b0682caa39f45ce1e0228ebf43acb46111. For more details please see the references link.
Vulnerability: GSD-2022-1002517
Summary: netfilter: nf_tables: initialize registers in nft_do_chain()
Published: 2022-04-24T22:57:27.877643Z

netfilter: nf_tables: initialize registers in nft_do_chain()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.309 by commit 4d28522acd1c4415c85f6b33463713a268f68965, it was introduced in version v3.13 by commit 96518518cc417bb0a8c80b9fb736202e28acdf96. For more details please see the references link.
Vulnerability: GSD-2022-1002002
Summary: Bluetooth: use memset avoid memory leaks
Published: 2022-04-24T22:02:22.688526Z

Bluetooth: use memset avoid memory leaks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 9567d54e70ff58c2695c2cc2e53c86c67551d3e6. For more details please see the references link.
Vulnerability: GSD-2021-1001552
Summary: phy: mdio: fix memory leak
Published: 2021-10-19T16:23:25.834672Z

phy: mdio: fix memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.211 by commit 2397b9e118721292429fea8807a698e71b94795f, it was introduced in version v2.6.28 by commit 46abc02175b3c246dd5141d878f565a8725060c9. For more details please see the references link.
Vulnerability: GSD-2022-1002452
Summary: jffs2: fix memory leak in jffs2_do_mount_fs
Published: 2022-04-24T22:49:35.616727Z

jffs2: fix memory leak in jffs2_do_mount_fs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 9a0f6610c7daedd2eace430beeb08a8b7ac80699, it was introduced in version v2.6.15 by commit e631ddba588783edd521c5a89f7b2902772fb691. For more details please see the references link.
Vulnerability: GSD-2022-1000195
Summary: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
Published: 2022-02-18T21:53:24.649075Z

scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit 00849de10f798a9538242824a51b1756e7110754, it was introduced in version v3.2 by commit 0cbf32e1681d870632a1772601cbaadd996dc978. For more details please see the references link.
Vulnerability: GSD-2021-1001102
Summary: i2c: robotfuzz-osif: fix control-request directions
Published: 2021-07-08T01:56:27.796891Z

i2c: robotfuzz-osif: fix control-request directions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.274 by commit f6b3e679c7e753b7dfad6de043799ebc5705ed1d, it was introduced in version v3.14 by commit 83e53a8f120f2f273cf0ad717f5372ab79ac24fe. For more details please see the references link.
Vulnerability: GSD-2021-1002684
Summary: xen/blkfront: harden blkfront against event channel storms
Published: 2021-12-27T05:36:43.822938Z

xen/blkfront: harden blkfront against event channel storms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.168 by commit 4ed9f5c511ce95cb8db05ff82026ea901f45fd76. For more details please see the references link.
Vulnerability: GSD-2021-1000343
Summary: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
Published: 2021-05-31T15:39:45.041586Z

net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 9dc373f74097edd0e35f3393d6248eda8d1ba99d, it was introduced in version v4.9 by commit b9b17debc69d27cd55e21ee51a5ba7fc50a426cf. For more details please see the references link.
Vulnerability: GSD-2022-1001784
Summary: media: ir_toy: free before error exiting
Published: 2022-04-24T21:42:12.089005Z

media: ir_toy: free before error exiting

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 2011363c196846c083649c91ed30aeef64358d52. For more details please see the references link.
Vulnerability: GSD-2022-1000896
Summary: xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
Published: 2022-03-18T00:29:09.965101Z

xen/xenbus: don't let xenbus_grant_ring() remove grants in error case

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.234 by commit 8d521d960aef22781ff499e16899c30af899de8d. For more details please see the references link.
Vulnerability: GSD-2021-1000713
Summary: net: caif: fix memory leak in caif_device_notify
Published: 2021-06-24T23:58:41.201060Z

net: caif: fix memory leak in caif_device_notify

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.272 by commit b042e2b2039565eb8f0eb51c14fbe1ef463c8cd8, it was introduced in version v3.3 by commit 7c18d2205ea76eef9674e59e1ecae4f332a53e9e. For more details please see the references link.
Vulnerability: GSD-2021-1001801
Summary: isdn: mISDN: Fix sleeping function called from invalid context
Published: 2021-10-28T13:49:39.487244Z

isdn: mISDN: Fix sleeping function called from invalid context

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.214 by commit a5b34409d3fc52114c828be4adbc30744fa3258b. For more details please see the references link.
Vulnerability: GSD-2021-1002041
Summary: can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
Published: 2021-11-14T15:17:11.987280Z

can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 864e77771a24c877aaf53aee019f78619cbcd668, it was introduced in version v5.4 by commit 9d71dd0c70099914fcd063135da3c580865e924c. For more details please see the references link.
Vulnerability: GSD-2021-1000586
Summary: drm/amdgpu: Fix a use-after-free
Published: 2021-06-04T19:43:07.379567Z

drm/amdgpu: Fix a use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit f98cdf084405333ee2f5be548a91b2d168e49276, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1001511
Summary: af_netlink: Fix shift out of bounds in group mask calculation
Published: 2022-04-24T21:18:57.849913Z

af_netlink: Fix shift out of bounds in group mask calculation

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit e8aaf3134bc5e943048eefe9f2ddaabf41d92b1a, it was introduced in version v2.6.14 by commit f7fa9b10edbb9391bdd4ec8e8b3d621d0664b198. For more details please see the references link.
Vulnerability: GSD-2021-1002411
Summary: scsi: mpt3sas: Fix kernel panic during drive powercycle test
Published: 2021-12-19T19:36:06.670783Z

scsi: mpt3sas: Fix kernel panic during drive powercycle test

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.219 by commit 0d4b29eaadc1f59cec0c7e85eae77d08fcca9824, it was introduced in version v3.8 by commit f92363d12359498f9a9960511de1a550f0ec41c2. For more details please see the references link.
Vulnerability: GSD-2022-1001141
Summary: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
Published: 2022-04-24T20:48:37.330840Z

media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 4eb591c47c82a6a6ad293ed108c3cb77115fbc25. For more details please see the references link.
Vulnerability: GSD-2021-1001397
Summary: atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
Published: 2021-08-03T02:28:24.985372Z

atm: nicstar: Fix possible use-after-free in nicstar_cleanup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit a7a7b2848312cc4c3a42b6e42a8ab2e441857aba. For more details please see the references link.
Vulnerability: GSD-2022-1000300
Summary: scsi: target: iscsi: Make sure the np under each tpg is unique
Published: 2022-02-27T02:48:09.483387Z

scsi: target: iscsi: Make sure the np under each tpg is unique

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.267 by commit aeaf67314e4e57df8aff636979a57b5a828a6451. For more details please see the references link.
Vulnerability: GSD-2022-1002297
Summary: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
Published: 2022-04-24T22:31:34.087720Z

net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.239 by commit e2423aa174e6c3e9805e96db778245ba73cdd88c, it was introduced in version v4.8 by commit fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4. For more details please see the references link.
Vulnerability: GSD-2022-1000750
Summary: hwmon: Handle failure to register sensor with thermal zone correctly
Published: 2022-03-18T00:15:17.702797Z

hwmon: Handle failure to register sensor with thermal zone correctly

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit 8a1969e14ad93663f9a3ed02ccc2138da9956a0e, it was introduced in version v5.8 by commit 1597b374af22266266e1e20612208c4b11359ad4. For more details please see the references link.
Vulnerability: GSD-2022-1001842
Summary: PCI: Reduce warnings on possible RW1C corruption
Published: 2022-04-24T21:47:09.956551Z

PCI: Reduce warnings on possible RW1C corruption

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit e37d269734ee9866bef3f965d4f545b86352f326, it was introduced in version v4.10 by commit fb26592301200dbbe4a9943fe188b57a46716900. For more details please see the references link.
Vulnerability: GSD-2022-1002278
Summary: NFSD: prevent integer overflow on 32 bit systems
Published: 2022-04-24T22:29:32.608023Z

NFSD: prevent integer overflow on 32 bit systems

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit ce1aa09cc14ed625104acc2d487bd92b9a88efe2. For more details please see the references link.
Vulnerability: GSD-2022-1000245
Summary: ceph: properly put ceph_string reference after async create attempt
Published: 2022-02-18T22:00:43.602206Z

ceph: properly put ceph_string reference after async create attempt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit 36d433ae3242aa714176378850e6d1a5a3e78f18, it was introduced in version v5.7 by commit 9a8d03ca2e2c334d08ee91a3e07dcce31a02fdc6. For more details please see the references link.
Vulnerability: GSD-2021-1001728
Summary: RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
Published: 2021-10-19T16:33:47.100956Z

RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit 03d884671572af8bcfbc9e63944c1021efce7589, it was introduced in version v2.6.18 by commit e51060f08a61965c4dd91516d82fe90617152590. For more details please see the references link.
Vulnerability: GSD-2021-1002807
Summary: Input: elantech - fix stack out of bound access in elantech_change_report_id()
Published: 2021-12-30T02:44:19.060603Z

Input: elantech - fix stack out of bound access in elantech_change_report_id()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.89 by commit 676c572439e58b7ee6b7ca3f1e5595382921045c, it was introduced in version v5.10.21 by commit dde807b4a44273fa5f62c0cb308295e6d6642550. For more details please see the references link.
Vulnerability: GSD-2021-1001682
Summary: powerpc/64s: fix program check interrupt emergency stack path
Published: 2021-10-19T16:31:38.795696Z

powerpc/64s: fix program check interrupt emergency stack path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.12 by commit c835b3d1d6362b4a4ebb192da7e7fd27a0a45d01, it was introduced in version v5.3 by commit 0a882e28468f48ab3d9a36dde0a5723ea29ed1ed. For more details please see the references link.
Vulnerability: GSD-2021-1000990
Summary: net: cdc_eem: fix tx fixup skb leak
Published: 2021-06-30T00:31:44.638606Z

net: cdc_eem: fix tx fixup skb leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 05b2b9f7d24b5663d9b47427fe1555bdafd3ea02, it was introduced in version v2.6.30 by commit 9f722c0978b04acba209f8ca1896ad05814bc3a3. For more details please see the references link.
Vulnerability: GSD-2022-1000615
Summary: usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
Published: 2022-02-27T03:31:35.315606Z

usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit 103938dd5798e150689362290274b87af54e3a52, it was introduced in version v5.13 by commit 90c4d05780d47e14a50e11a7f17373104cd47d25. For more details please see the references link.
Vulnerability: GSD-2022-1001907
Summary: drbd: fix potential silent data corruption
Published: 2022-04-24T21:53:42.316986Z

drbd: fix potential silent data corruption

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 024c2a0db53a0f6f0f227ce6b88288e5b9e3f099. For more details please see the references link.
Vulnerability: GSD-2021-1001378
Summary: seq_file: disallow extremely large seq buffer allocations
Published: 2021-08-03T02:24:01.840162Z

seq_file: disallow extremely large seq buffer allocations

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 6de9f0bf7cacc772a618699f9ed5c9f6fca58a1d, it was introduced in version v3.16 by commit 058504edd02667eef8fac9be27ab3ea74332e9b4. For more details please see the references link.
Vulnerability: GSD-2022-1001454
Summary: video: fbdev: sm712fb: Fix crash in smtcfb_write()
Published: 2022-04-24T21:14:32.488941Z

video: fbdev: sm712fb: Fix crash in smtcfb_write()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit aeb635b49530b7d19e140949753409f759ba99be. For more details please see the references link.
Vulnerability: GSD-2021-1000139
Summary: sfc: farch: fix TX queue lookup in TX flush done handling
Published: 2021-05-31T15:39:45.031586Z

sfc: farch: fix TX queue lookup in TX flush done handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.36 by commit fb791572d6747ef385f628450f8d57cd132e6e5a, it was introduced in version v5.10 by commit 12804793b17c0e19115a90d98f2f3df0cb79e233. For more details please see the references link.
Vulnerability: GSD-2021-1002104
Summary: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()
Published: 2021-11-14T15:20:04.322739Z

mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit 9ee4e9ae98f1f262d6fae0d266cfdf3ba2c321d9, it was introduced in version v5.12 by commit bda420b985054a3badafef23807c4b4fa38a3dff. For more details please see the references link.
Vulnerability: GSD-2021-1000093
Summary: net: hso: fix NULL-deref on disconnect regression
Published: 2021-05-31T15:39:45.031586Z

net: hso: fix NULL-deref on disconnect regression

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.1 by commit 41c44e1f3112d7265dae522c026399b2a42d19ef, it was introduced in version v5.12 by commit 8a12f8836145ffe37e9c8733dce18c22fb668b66. For more details please see the references link.
Vulnerability: GSD-2022-1001004
Summary: mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
Published: 2022-04-24T20:38:53.035683Z

mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 04bc13dae4a27b8d030843c85ae452bb2f1d9c1f. For more details please see the references link.
Vulnerability: GSD-2021-1000569
Summary: scsi: target: core: Avoid smp_processor_id() in preemptible code
Published: 2021-06-04T19:40:38.328732Z

scsi: target: core: Avoid smp_processor_id() in preemptible code

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit a20b6eaf4f35046a429cde57bee7eb5f13d6857f, it was introduced in version v5.11 by commit 1526d9f10c6184031e42afad0adbdde1213e8ad1. For more details please see the references link.
Vulnerability: GSD-2021-1002554
Summary: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
Published: 2021-12-19T19:42:26.607311Z

ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit fc7ffa7f10b9454a86369405d9814bf141b30627. For more details please see the references link.
Vulnerability: GSD-2022-1002501
Summary: scsi: pm8001: Fix abort all task initialization
Published: 2022-04-24T22:55:04.237632Z

scsi: pm8001: Fix abort all task initialization

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 9914461db82caee6c519acfbe10a86fe11bcdeca, it was introduced in version v3.10 by commit c6b9ef5779c3e1edfa9de949d2a51252bc347663. For more details please see the references link.
Vulnerability: GSD-2021-1001051
Summary: gfs2: Fix use-after-free in gfs2_glock_shrink_scan
Published: 2021-06-30T00:36:24.493297Z

gfs2: Fix use-after-free in gfs2_glock_shrink_scan

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.12 by commit e87ef30fe73e7e10d2c85bdcc778dcec24dca553. For more details please see the references link.
Vulnerability: GSD-2022-1002151
Summary: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
Published: 2022-04-24T22:16:28.376767Z

ALSA: pcm: Fix races among concurrent hw_params and hw_free calls

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.109 by commit 0f6947f5f5208f6ebd4d76a82a4757e2839a23f8. For more details please see the references link.
Vulnerability: GSD-2021-1001401
Summary: usb: max-3421: Prevent corruption of freed memory
Published: 2021-08-03T02:29:55.877654Z

usb: max-3421: Prevent corruption of freed memory

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.241 by commit edddc79c4391f8001095320d3ca423214b9aa4bf, it was introduced in version v3.16 by commit 2d53139f31626bad6f8983d8e519ddde2cbba921. For more details please see the references link.
Vulnerability: GSD-2022-1000496
Summary: scsi: qedf: Fix refcount issue when LOGO is received during TMF
Published: 2022-02-27T03:15:16.883489Z

scsi: qedf: Fix refcount issue when LOGO is received during TMF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 7fcbed38503bb34c6e6538b6a9482d1c6bead1e8. For more details please see the references link.
Vulnerability: GSD-2021-1002387
Summary: proc/vmcore: fix clearing user buffer by properly using clear_user()
Published: 2021-12-19T19:35:07.533575Z

proc/vmcore: fix clearing user buffer by properly using clear_user()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit 99d348b82bcb36171f24411d3f1a15706a2a937a, it was introduced in version v3.0 by commit 997c136f518c5debd63847e78e2a8694f56dcf90. For more details please see the references link.
Vulnerability: GSD-2021-1001952
Summary: xhci: Fix command ring pointer corruption while aborting a command
Published: 2021-11-14T15:13:11.314746Z

xhci: Fix command ring pointer corruption while aborting a command

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.252 by commit 22bcb65ea41072ab5d03c0c6290e04e0df6d09a0. For more details please see the references link.
Vulnerability: GSD-2021-1000640
Summary: iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers
Published: 2021-06-04T19:52:52.810641Z

iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit f49149964d2423fb618fb6b755bb1eaa431cca2c, it was introduced in version v5.4.14 by commit 5408cbc6337300d6f1a87c797273c535ed96305a. For more details please see the references link.
Vulnerability: GSD-2021-1000210
Summary: can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe
Published: 2021-05-31T15:39:45.041586Z

can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 15f8f96ec7fc35024d4e03296e4d838fcea33d83, it was introduced in version v5.12 by commit cf8ee6de2543a0fa6d9471ddbb7216464a9681a1. For more details please see the references link.
Vulnerability: GSD-2022-1001287
Summary: exec: Force single empty string when argv is empty
Published: 2022-04-24T21:01:29.056050Z

exec: Force single empty string when argv is empty

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit cfbfff8ce5e3d674947581f1eb9af0a1b1807950. For more details please see the references link.
Vulnerability: GSD-2021-1001817
Summary: KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
Published: 2021-10-28T13:50:29.513251Z

KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit 80bbb0bc3a0288442f7fe6fc514f4ee1cb06ccb7, it was introduced in version v5.2 by commit 10d91611f426d4bafd2a83d966c36da811b2f7ad. For more details please see the references link.
Vulnerability: GSD-2021-1002738
Summary: btrfs: use latest_dev in btrfs_show_devname
Published: 2021-12-27T05:45:50.984912Z

btrfs: use latest_dev in btrfs_show_devname

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit e342c2558016ead462f376b6c6c2ac5efc17f3b1. For more details please see the references link.
Vulnerability: GSD-2021-1000705
Summary: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
Published: 2021-06-04T20:06:21.997832Z

NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.271 by commit e8b8418ce14ae66ee55179901edd12191ab06a9e, it was introduced in version v4.0 by commit a7d42ddb3099727f58366fa006f850a219cce6c8. For more details please see the references link.
Vulnerability: GSD-2022-1000880
Summary: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
Published: 2022-03-18T00:27:10.771083Z

ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.183 by commit f3537f1b2bfd3b1df15723df49fc26eccd5112fe, it was introduced in version v5.4.178 by commit 68fd718724284788fc5f379e0b7cac541429ece7. For more details please see the references link.
Vulnerability: GSD-2022-1001792
Summary: ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
Published: 2022-04-24T21:42:35.500578Z

ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 6a6beb074186a0452368a023a261c7d0eaebe838. For more details please see the references link.
Vulnerability: GSD-2022-1001268
Summary: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
Published: 2022-04-24T20:59:48.914479Z

video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 9280ef235b05e8f19f8bc6d547b992f0a0ef398d, it was introduced in version v3.2 by commit 3c8a63e22a0802fd56380f6ab305b419f18eb6f5. For more details please see the references link.
Vulnerability: GSD-2021-1002368
Summary: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
Published: 2021-12-19T19:34:13.770904Z

iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.295 by commit 8c1d43f3a3fc7184c42d7398bdf59a2a2903e4fc, it was introduced in version v4.2 by commit a25691c1f9674090fb66586cf4c5d60d3efdf339. For more details please see the references link.
Vulnerability: GSD-2021-1000355
Summary: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit cc49d206414240483bb93ffa3d80243e6a776916, it was introduced in version v4.16 by commit 13d6eb20fc79a1e606307256dad4098375539a09. For more details please see the references link.