TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2021-1000625
Summary: btrfs: do not BUG_ON in link_to_fixup_dir
Published: 2021-06-04T19:49:27.793122Z

btrfs: do not BUG_ON in link_to_fixup_dir

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 0ed102453aa1cd12fefde8f6b60b9519b0b1f003, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1001348
Summary: btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone
Published: 2022-04-24T21:06:36.011232Z

btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 09e65ae515af2b24d6dc23af21719a3b41de83e5, it was introduced in version v5.16 by commit a85f05e59bc15a83ad910dbcb71df5ad8fa77295. For more details please see the references link.
Vulnerability: GSD-2021-1002248
Summary: i40e: Fix NULL ptr dereference on VSI filter sync
Published: 2021-11-29T02:35:18.367128Z

i40e: Fix NULL ptr dereference on VSI filter sync

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.218 by commit 87c421ab4a43433cb009fea44bbbc77f46913e1d, it was introduced in version v3.12 by commit 41c445ff0f482bb6e6b72dcee9e598e20575f743. For more details please see the references link.
Vulnerability: GSD-2021-1000275
Summary: drm/amd/display: Fix off by one in hdmi_14_process_transaction()
Published: 2021-05-31T15:39:45.041586Z

drm/amd/display: Fix off by one in hdmi_14_process_transaction()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 080bd41d6478a64edf96704fddcda52b1fd5fed7, it was introduced in version v5.5 by commit 4c283fdac08abf3211533f70623c90a34f41d08d. For more details please see the references link.
Vulnerability: GSD-2022-1001718
Summary: Bluetooth: use memset avoid memory leaks
Published: 2022-04-24T21:37:30.871263Z

Bluetooth: use memset avoid memory leaks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 42b6a39f439b6f37cc2024d91ce547d83290ff78. For more details please see the references link.
Vulnerability: GSD-2021-1001872
Summary: kunit: fix reference count leak in kfree_at_end
Published: 2021-10-28T13:53:18.011232Z

kunit: fix reference count leak in kfree_at_end

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit bbdd158b40b66a9403391a517f24ef6613573446. For more details please see the references link.
Vulnerability: GSD-2021-1000760
Summary: x86/kvm: Disable all PV features on crash
Published: 2021-06-25T00:03:00.856824Z

x86/kvm: Disable all PV features on crash

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.125 by commit 97e814e6b5cdc8101127a5140925941b6088aabb, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000330
Summary: ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
Published: 2021-05-31T15:39:45.041586Z

ethernet:enic: Fix a use after free bug in enic_hard_start_xmit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.38 by commit 7afdd6aba95c8a526038e7abe283eeac3e4320f1, it was introduced in version v4.16 by commit fb7516d42478ebc8e2f00efb76ef96f7b68fd8d3. For more details please see the references link.
Vulnerability: GSD-2022-1002421
Summary: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Published: 2022-04-24T22:45:18.456327Z

video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 580e5d3815474b8349250c25c16416585a72c7fe. For more details please see the references link.
Vulnerability: GSD-2021-1001171
Summary: usb: max-3421: Prevent corruption of freed memory
Published: 2021-08-03T01:32:10.823130Z

usb: max-3421: Prevent corruption of freed memory

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.6 by commit d4179cdb769a651f2ae89c325612a69bf6fbdf70, it was introduced in version v3.16 by commit 2d53139f31626bad6f8983d8e519ddde2cbba921. For more details please see the references link.
Vulnerability: GSD-2022-1002071
Summary: tipc: fix the timer expires after interval 100ms
Published: 2022-04-24T22:07:50.539609Z

tipc: fix the timer expires after interval 100ms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 084be6309f4f7d71cf7cbc4da6a6be513992b69f, it was introduced in version v4.20 by commit 6787927475e52f6933e3affce365dabb2aa2fadf. For more details please see the references link.
Vulnerability: GSD-2021-1001521
Summary: mcb: fix error handling in mcb_alloc_bus()
Published: 2021-10-19T16:21:59.002103Z

mcb: fix error handling in mcb_alloc_bus()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.285 by commit 8a558261fa57a6deefb0925ab1829f698b194aea, it was introduced in version v4.7 by commit 5d9e2ab9fea4cdf0a2522f5cbed2e7fbb220d757. For more details please see the references link.
Vulnerability: GSD-2022-1001831
Summary: ibmvnic: fix race between xmit and reset
Published: 2022-04-24T21:46:09.900281Z

ibmvnic: fix race between xmit and reset

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 1bd58abf595b6cf1ba6dd47ec887c4c009155fc9, it was introduced in version v5.4 by commit 7ed5b31f4a6695a21f617df07646e9b15c6c1d29. For more details please see the references link.
Vulnerability: GSD-2022-1000723
Summary: btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target
Published: 2022-03-18T00:12:17.207485Z

btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit 833df0a3d38c4d5bd3cd84b8dd38855792aa6573. For more details please see the references link.
Vulnerability: GSD-2022-1000689
Summary: btrfs: do not start relocation until in progress drops are done
Published: 2022-03-18T00:09:46.222981Z

btrfs: do not start relocation until in progress drops are done

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit 5e70bc827b563caf22e1203428cc3719643de5aa. For more details please see the references link.
Vulnerability: GSD-2022-1000373
Summary: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
Published: 2022-02-27T02:57:49.509871Z

ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.101 by commit 09ac0fcb0a82d647f2c61d3d488d367b7ee5bd51, it was introduced in version v4.0 by commit f243e5a7859a24d10975afb9a1708cac624ba6f1. For more details please see the references link.
Vulnerability: GSD-2021-1002462
Summary: aio: fix use-after-free due to missing POLLFREE handling
Published: 2021-12-19T19:38:23.616900Z

aio: fix use-after-free due to missing POLLFREE handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.165 by commit 4105e6a128e8a98455dfc9e6dbb2ab0c33c4497f, it was introduced in version v4.18 by commit 2c14fa838cbefc23cf1c73ca167ed85b274b2913. For more details please see the references link.
Vulnerability: GSD-2022-1001132
Summary: media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
Published: 2022-04-24T20:47:58.760803Z

media: atomisp: fix dummy_ptr check to avoid duplicate active_bo

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 2a4be3f39f1c436f2f59902247a90d705fe76e2d. For more details please see the references link.
Vulnerability: GSD-2021-1002198
Summary: cgroup: Fix memory leak caused by missing cgroup_bpf_offline
Published: 2021-11-14T15:24:20.790071Z

cgroup: Fix memory leak caused by missing cgroup_bpf_offline

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 04f8ef5643bcd8bcde25dfdebef998aea480b2ba, it was introduced in version v5.10 by commit 2b0d3d3e4fcfb19d10f9a82910b8f0f05c56ee3e. For more details please see the references link.
Vulnerability: GSD-2021-1002032
Summary: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
Published: 2021-11-14T15:16:43.389898Z

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.75 by commit 57e48886401b14cd351423fabfec2cfd18df4f66, it was introduced in version v4.3 by commit 69aba7948cbe53f2f1827e84e9dd0ae470a5072e. For more details please see the references link.
Vulnerability: GSD-2022-1001098
Summary: x86/sev: Unroll string mmio with CC_ATTR_GUEST_UNROLL_STRING_IO
Published: 2022-04-24T20:45:07.803960Z

x86/sev: Unroll string mmio with CC_ATTR_GUEST_UNROLL_STRING_IO

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit b06bacfacdcdd8df7800b48814b96554b532b77f, it was introduced in version v4.15 by commit d8aa7eea78a1401cce39b3bb61ead0150044a3df. For more details please see the references link.
Vulnerability: GSD-2022-1001562
Summary: ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume
Published: 2022-04-24T21:23:53.107560Z

ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 4e5510219111607b1f1875ab3c3f0485ba3c381c, it was introduced in version v5.16 by commit 081068fd641403994f0505e6b91e021d3925f348. For more details please see the references link.
Vulnerability: GSD-2022-1001077
Summary: drm/amdkfd: svm range restore work deadlock when process exit
Published: 2022-04-24T20:43:45.972305Z

drm/amdkfd: svm range restore work deadlock when process exit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 858822905f4bf44100d63c5e22e263109976f7cb. For more details please see the references link.
Vulnerability: GSD-2021-1002527
Summary: io_uring: fail cancellation for EXITING tasks
Published: 2021-12-19T19:41:13.338246Z

io_uring: fail cancellation for EXITING tasks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.6 by commit 3d2a1e68fd9904fdc1b02f2e7d40ca47df7ba39f, it was introduced in version v5.15 by commit 89b263f6d56e683ddcf7643140271ef6e36c72b9. For more details please see the references link.
Vulnerability: GSD-2022-1001427
Summary: io_uring: fix memory leak of uid in files registration
Published: 2022-04-24T21:12:10.924630Z

io_uring: fix memory leak of uid in files registration

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit d6d7a517e81accf6ed22d55684baea763d2dbe43, it was introduced in version v5.5 by commit 08a451739a9b5783f67de51e84cb6d9559bb9dc4. For more details please see the references link.
Vulnerability: GSD-2021-1002177
Summary: KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
Published: 2021-11-14T15:23:21.568036Z

KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 9b4416c5095c20e110c82ae602c254099b83b72f, it was introduced in version v5.2 by commit 10d91611f426d4bafd2a83d966c36da811b2f7ad. For more details please see the references link.
Vulnerability: GSD-2022-1001974
Summary: drbd: Fix five use after free bugs in get_initial_state
Published: 2022-04-24T22:00:01.359868Z

drbd: Fix five use after free bugs in get_initial_state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 594205b4936771a250f9d141e7e0fff21c3dd2d9, it was introduced in version v4.5 by commit a29728463b254ce81ecefdf20c1a02e01d9361da. For more details please see the references link.
Vulnerability: GSD-2022-1000666
Summary: RDMA/cma: Use correct address when leaving multicast group
Published: 2022-02-27T03:37:58.437327Z

RDMA/cma: Use correct address when leaving multicast group

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.8 by commit 3365f9daa2a7060309979d55105f0a1c12354683, it was introduced in version v5.10 by commit b5de0c60cc30c2a3513c7188c73f3f29acc29234. For more details please see the references link.
Vulnerability: GSD-2022-1000236
Summary: moxart: fix potential use-after-free on remove path
Published: 2022-02-18T21:59:41.082520Z

moxart: fix potential use-after-free on remove path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.100 by commit be93028d306dac9f5b59ebebd9ec7abcfc69c156. For more details please see the references link.
Vulnerability: GSD-2021-1000849
Summary: scsi: core: Fix error handling of scsi_host_alloc()
Published: 2021-06-30T00:01:13.511008Z

scsi: core: Fix error handling of scsi_host_alloc()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.273 by commit 8958181c1663e24a13434448e7d6b96b5d04900a. For more details please see the references link.
Vulnerability: GSD-2021-1000799
Summary: bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks
Published: 2021-06-25T00:08:08.380930Z

bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit acc43fc6cf0d50612193813c5906a1ab9d433e1e, it was introduced in version v5.6 by commit 59438b46471ae6cdfb761afc8c9beaf1e428a331. For more details please see the references link.
Vulnerability: GSD-2021-1000263
Summary: ataflop: potential out of bounds in do_format()
Published: 2021-05-31T15:39:45.041586Z

ataflop: potential out of bounds in do_format()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 2a3a8bbca28b899806844c00d49ed1b7ccb50957, it was introduced in version v5.11 by commit bf9c0538e485b591a2ee02d9adb8a99db4be5a2a. For more details please see the references link.
Vulnerability: GSD-2021-1000633
Summary: drm/meson: fix shutdown crash when component not probed
Published: 2021-06-04T19:51:16.650822Z

drm/meson: fix shutdown crash when component not probed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 4ce2bf20b4a6e307e114847d60b2bf40a6a1fac0, it was introduced in version v5.4.106 by commit d2100ef32a8cfd024bad94f4fbc5e53d40d2b3da. For more details please see the references link.
Vulnerability: GSD-2021-1001921
Summary: isdn: mISDN: Fix sleeping function called from invalid context
Published: 2021-11-14T15:11:48.428866Z

isdn: mISDN: Fix sleeping function called from invalid context

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.290 by commit 6f95c97e0f9d6eb39c3f2cb45e8fa4268d1b372b. For more details please see the references link.
Vulnerability: GSD-2021-1001188
Summary: virtio_console: Assure used length from device is limited
Published: 2021-08-03T01:33:28.391366Z

virtio_console: Assure used length from device is limited

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.4 by commit 21a06a244d2576f93cbc9ce9bf95814c2810c36a. For more details please see the references link.
Vulnerability: GSD-2022-1002122
Summary: brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
Published: 2022-04-24T22:13:46.385773Z

brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit f3820ddaf4f3ac80c7401ccc6a42e663c9317f31, it was introduced in version v5.4 by commit 82f93cf46d6007ffa003b2d4a2834563b6b84d21. For more details please see the references link.
Vulnerability: GSD-2021-1001472
Summary: seq_file: disallow extremely large seq buffer allocations
Published: 2021-08-03T02:51:28.552916Z

seq_file: disallow extremely large seq buffer allocations

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.276 by commit 3533e50cbee8ff086bfa04176ac42a01ee3db37d, it was introduced in version v3.16 by commit 058504edd02667eef8fac9be27ab3ea74332e9b4. For more details please see the references link.
Vulnerability: GSD-2022-1002088
Summary: gpu: host1x: Fix a memory leak in 'host1x_remove()'
Published: 2022-04-24T22:09:42.884285Z

gpu: host1x: Fix a memory leak in 'host1x_remove()'

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 6bb107332db28a0e9256c2d36a0902b85307612c, it was introduced in version v4.13 by commit 8474b02531c4881a762c52ef869c52429e38633f. For more details please see the references link.
Vulnerability: GSD-2021-1001022
Summary: usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource()
Published: 2021-06-30T00:34:28.893543Z

usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit 2147684be1ebdaf845783139b9bc4eba3fecd9e4, it was introduced in version v5.11 by commit 517c4c44b32372d2fdf4421822e21083c45e89f9. For more details please see the references link.
Vulnerability: GSD-2021-1001537
Summary: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
Published: 2021-10-19T16:22:45.082782Z

cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.249 by commit 514643eadfeab8ee11e55981289c720308eb0afd, it was introduced in version v4.14.249 by commit 463c46705f321201090b69c4ad5da0cd2ce614c9. For more details please see the references link.
Vulnerability: GSD-2022-1002067
Summary: clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
Published: 2022-04-24T22:07:22.792923Z

clk: qcom: clk-rcg2: Update logic to calculate D value for RCG

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 334720f418f57b1d969dad2117b21f9388cb9395, it was introduced in version v3.16 by commit 99cbd064b059f222c8839ba433a68b2d6ee33066. For more details please see the references link.
Vulnerability: GSD-2021-1001167
Summary: io_uring: fix memleak in io_init_wq_offload()
Published: 2021-08-03T01:31:54.637164Z

io_uring: fix memleak in io_init_wq_offload()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.6 by commit 502731a03f27cba1513fbbff77e508185ffce5bb, it was introduced in version v5.12 by commit e941894eae31b52f0fd9bdb3ce20620afa152f45. For more details please see the references link.
Vulnerability: GSD-2022-1002437
Summary: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
Published: 2022-04-24T22:47:18.983939Z

drm/tegra: Fix reference leak in tegra_dsi_ganged_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 5e8fdb6392d945d33fef959eab73f8c34bc0a63b, it was introduced in version v3.19 by commit e94236cde4d519cdecd45e2435defba33abdc99f. For more details please see the references link.
Vulnerability: GSD-2021-1000326
Summary: sched: Fix out-of-bound access in uclamp
Published: 2021-05-31T15:39:45.041586Z

sched: Fix out-of-bound access in uclamp

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.38 by commit f7347c85490b92dd144fa1fba9e1eca501656ab3, it was introduced in version v5.3 by commit 69842cba9ace84849bb9b8edcdf2cefccd97901c. For more details please see the references link.
Vulnerability: GSD-2022-1000959
Summary: i2c: dev: check return value when calling dev_set_name()
Published: 2022-04-24T20:35:06.579858Z

i2c: dev: check return value when calling dev_set_name()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.4 by commit c74d77a2d07744147d734138acd6ce9dba715e5d, it was introduced in version v5.7 by commit 1413ef638abae4ab5621901cf4d8ef08a4a48ba6. For more details please see the references link.
Vulnerability: GSD-2021-1000776
Summary: ext4: fix memory leak in ext4_fill_super
Published: 2021-06-25T00:04:52.990237Z

ext4: fix memory leak in ext4_fill_super

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.43 by commit 01d349a481f0591230300a9171330136f9159bcd, it was introduced in version v2.6.25 by commit ce40733ce93de402ed629762f0e912d9af187cef. For more details please see the references link.
Vulnerability: GSD-2021-1001864
Summary: efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()
Published: 2021-10-28T13:52:54.868441Z

efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.75 by commit 3b42751401424a1c0f39297b7f4317598aa33474. For more details please see the references link.
Vulnerability: GSD-2022-1001535
Summary: scsi: pm8001: Fix abort all task initialization
Published: 2022-04-24T21:21:14.266549Z

scsi: pm8001: Fix abort all task initialization

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 326d894adf89f3c707b7784becbe241830daaab6, it was introduced in version v3.10 by commit c6b9ef5779c3e1edfa9de949d2a51252bc347663. For more details please see the references link.
Vulnerability: GSD-2021-1002065
Summary: riscv, bpf: Fix potential NULL dereference
Published: 2021-11-14T15:18:19.566383Z

riscv, bpf: Fix potential NULL dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.77 by commit cac6b043cea3e120f4fccec16f7381747cbfdc0d, it was introduced in version v5.7 by commit ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa. For more details please see the references link.
Vulnerability: GSD-2021-1000058
Summary: media: staging/intel-ipu3: Fix set_fmt error handling
Published: 2021-05-31T15:39:45.031586Z

media: staging/intel-ipu3: Fix set_fmt error handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit 6fb617e37a39db0a3eca4489431359d0bdf3b9bc, it was introduced in version v5.2 by commit 6d5f26f2e045f2377b524516194657c00efbbce8. For more details please see the references link.
Vulnerability: GSD-2022-1001165
Summary: LSM: general protection fault in legacy_parse_param
Published: 2022-04-24T20:49:46.966137Z

LSM: general protection fault in legacy_parse_param

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit cadae7c5e477aaafcba819b8e4a3d1c1a1503b62. For more details please see the references link.
Vulnerability: GSD-2021-1002435
Summary: proc/vmcore: fix clearing user buffer by properly using clear_user()
Published: 2021-12-19T19:37:10.501558Z

proc/vmcore: fix clearing user buffer by properly using clear_user()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.163 by commit fd7974c547abfb03072a4ee706d3a6f182266f89, it was introduced in version v3.0 by commit 997c136f518c5debd63847e78e2a8694f56dcf90. For more details please see the references link.
Vulnerability: GSD-2021-1000408
Summary: hfsplus: prevent corruption in shrinking truncate
Published: 2021-05-31T15:39:45.041586Z

hfsplus: prevent corruption in shrinking truncate

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.120 by commit c451a6bafb5f422197d31536f82116aed132b72c, it was introduced in version v4.19 by commit 31651c607151f1034cfb57e5a78678bea54c362b. For more details please see the references link.
Vulnerability: GSD-2022-1000324
Summary: vsock: remove vsock from connected table when connect is interrupted by a signal
Published: 2022-02-27T02:51:33.956871Z

vsock: remove vsock from connected table when connect is interrupted by a signal

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.231 by commit 2910bcb9f67551a45397735e47b6d456eb8cd549, it was introduced in version v3.9 by commit d021c344051af91f42c5ba9fdedc176740cbd238. For more details please see the references link.
Vulnerability: GSD-2022-1002319
Summary: dm ioctl: prevent potential spectre v1 gadget
Published: 2022-04-24T22:33:52.558788Z

dm ioctl: prevent potential spectre v1 gadget

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 7ae2c5b89da3cfaf856df880af27d3bb32a74b3d. For more details please see the references link.
Vulnerability: GSD-2021-1001649
Summary: mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
Published: 2021-10-19T16:29:57.214152Z

mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.71 by commit 1282bb00835ff79d2d9c023055d514df5b4de260, it was introduced in version v4.7 by commit 646e76bb5daf4ca38438c69ffb72cccb605f3466. For more details please see the references link.
Vulnerability: GSD-2022-1001866
Summary: bpf: Fix UAF due to race between btf_try_get_module and load_module
Published: 2022-04-24T21:49:45.242691Z

bpf: Fix UAF due to race between btf_try_get_module and load_module

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 51b82141fffa454abf937a8ff0b8af89e4fd0c8f, it was introduced in version v5.12 by commit 541c3bad8dc51b253ba8686d0cd7628e6b9b5f4c. For more details please see the references link.
Vulnerability: GSD-2022-1000774
Summary: xfrm: fix MTU regression
Published: 2022-03-18T00:17:17.621062Z

xfrm: fix MTU regression

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.27 by commit 75cbedd333431381ef309c5b0968582c7ba4c8ee, it was introduced in version v4.15 by commit 749439bfac6e1a2932c582e2699f91d329658196. For more details please see the references link.
Vulnerability: GSD-2021-1001219
Summary: RDMA/cma: Fix rdma_resolve_route() memory leak
Published: 2021-08-03T01:39:33.098394Z

RDMA/cma: Fix rdma_resolve_route() memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit 07583ba2e2d8947c3d365d97608cb436510885ac. For more details please see the references link.
Vulnerability: GSD-2021-1002823
Summary: net: marvell: prestera: fix incorrect structure access
Published: 2021-12-30T02:44:59.336675Z

net: marvell: prestera: fix incorrect structure access

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit 5c553a0cd1263e4da5f220d80fa713fc3959c1d0, it was introduced in version v5.14 by commit 3d5048cc54bd250cfbb358c37fcc011135977887. For more details please see the references link.
Vulnerability: GSD-2022-1001889
Summary: watch_queue: Fix NULL dereference in error cleanup
Published: 2022-04-24T21:52:18.881607Z

watch_queue: Fix NULL dereference in error cleanup

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 695c47cea02b9101e2fc2e7d36d552128592b347, it was introduced in version v5.8 by commit c73be61cede5882f9605a852414db559c0ebedfd. For more details please see the references link.
Vulnerability: GSD-2022-1000261
Summary: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
Published: 2022-02-18T22:03:25.904794Z

powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit 3bfbc00587dc883eaed383558ae512a351c2cd09, it was introduced in version v4.8 by commit 156d0e290e969caba25f1851c52417c14d141b24. For more details please see the references link.
Vulnerability: GSD-2022-1001923
Summary: jffs2: fix memory leak in jffs2_scan_medium
Published: 2022-04-24T21:55:17.649441Z

jffs2: fix memory leak in jffs2_scan_medium

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 52ba0ab4f0a606f02a6163493378989faa1ec10a, it was introduced in version v2.6.15 by commit e631ddba588783edd521c5a89f7b2902772fb691. For more details please see the references link.
Vulnerability: GSD-2022-1000631
Summary: hwmon: (nct6775) Fix crash in clear_caseopen
Published: 2022-02-27T03:33:23.241580Z

hwmon: (nct6775) Fix crash in clear_caseopen

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit cfb7d12f2e4a4d694f49e9b4ebb352f7b67cdfbb, it was introduced in version v5.16 by commit 2e7b9886968b89f0b4cbc59b8e6ed47fd4edd0dd. For more details please see the references link.
Vulnerability: GSD-2021-1002120
Summary: net/tls: Fix flipped sign in tls_err_abort() calls
Published: 2021-11-14T15:20:45.047458Z

net/tls: Fix flipped sign in tls_err_abort() calls

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.16 by commit e41473543f75f7dbc5d605007e6f883f1bd13b9a, it was introduced in version v4.17 by commit c46234ebb4d1eee5e09819f49169e51cfc6eb909. For more details please see the references link.
Vulnerability: GSD-2022-1001470
Summary: btrfs: handle csum lookup errors properly on reads
Published: 2022-04-24T21:15:24.307856Z

btrfs: handle csum lookup errors properly on reads

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit f181b2e060929da91c01e2068179774ab8fa18fc. For more details please see the references link.
Vulnerability: GSD-2021-1002570
Summary: drm/vc4: kms: Add missing drm_crtc_commit_put
Published: 2021-12-19T19:43:14.649305Z

drm/vc4: kms: Add missing drm_crtc_commit_put

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit 53f9601e908d42481addd67cdb01a9288c611124, it was introduced in version v5.12 by commit 9ec03d7f1ed394897891319a4dda75f52c5d292d. For more details please see the references link.
Vulnerability: GSD-2022-1001020
Summary: skbuff: fix coalescing for page_pool fragment recycling
Published: 2022-04-24T20:40:26.787402Z

skbuff: fix coalescing for page_pool fragment recycling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 72bb856d16e883437023ff2ff77d0c498018728a, it was introduced in version v5.15 by commit 53e0961da1c7bbdabd1abebb20de403ec237ec09. For more details please see the references link.
Vulnerability: GSD-2021-1001075
Summary: regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL
Published: 2021-06-30T00:37:59.117299Z

regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit dc68f0c9e4a001e02376fe87f4bdcacadb27e8a1. For more details please see the references link.
Vulnerability: GSD-2022-1000518
Summary: veth: fix races around rq->rx_notify_masked
Published: 2022-02-27T03:18:34.332718Z

veth: fix races around rq->rx_notify_masked

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit fd45628d2fec2bf7085d856ef448959d6e7effe9, it was introduced in version v4.19 by commit 948d4f214fde43743c57aae0c708bff44f6345f2. For more details please see the references link.
Vulnerability: GSD-2021-1001425
Summary: dm btree remove: assign new_root only when removal succeeds
Published: 2021-08-03T02:36:32.349570Z

dm btree remove: assign new_root only when removal succeeds

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 73f27adaa73e3057a9ec464e33c4f54d34ea5de3. For more details please see the references link.
Vulnerability: GSD-2022-1002175
Summary: irqchip/gic-v3: Fix GICR_CTLR.RWP polling
Published: 2022-04-24T22:18:45.795491Z

irqchip/gic-v3: Fix GICR_CTLR.RWP polling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 3c07cc242baf83f0bddbbd9d7945d0bee56d8b57, it was introduced in version v3.17 by commit 021f653791ad17e03f98aaa7fb933816ae16f161. For more details please see the references link.
Vulnerability: GSD-2022-1000148
Summary: udf: Fix NULL ptr deref when converting from inline format
Published: 2022-02-18T21:47:19.841660Z

udf: Fix NULL ptr deref when converting from inline format

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.176 by commit 31136e5467f381cf18e2cfd467207dda7678c7a2, it was introduced in version v4.2 by commit 52ebea749aaed195245701a8f90a23d672c7a933. For more details please see the references link.
Vulnerability: GSD-2021-1000664
Summary: misc/uss720: fix memory leak in uss720_probe
Published: 2021-06-04T19:57:44.662256Z

misc/uss720: fix memory leak in uss720_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit 386918878ce4cd676e4607233866e03c9399a46a, it was introduced in version v2.6.14 by commit 0f36163d3abefbda1b21a330b3fdf3c2dc076d94. For more details please see the references link.
Vulnerability: GSD-2021-1002659
Summary: xen/netback: don't queue unlimited number of packages
Published: 2021-12-27T05:33:34.496007Z

xen/netback: don't queue unlimited number of packages

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.222 by commit c9f17e92917fd5786be872626a3928979ecc4c39, it was introduced in version v3.18 by commit f48da8b14d04ca87ffcffe68829afd45f926ec6a. For more details please see the references link.
Vulnerability: GSD-2021-1001976
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-11-14T15:14:16.626456Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.213 by commit 9881b0c860649f27ef2565deef011e516390f416, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.
Vulnerability: GSD-2022-1001309
Summary: can: m_can: m_can_tx_handler(): fix use after free of skb
Published: 2022-04-24T21:02:56.872532Z

can: m_can: m_can_tx_handler(): fix use after free of skb

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 31417073493f302d26ab66b3abc098d43227b835, it was introduced in version v3.18 by commit 80646733f11c2e9de3b6339f7e635047e6087280. For more details please see the references link.
Vulnerability: GSD-2021-1000234
Summary: mt76: mt7615: Fix a dereference of pointer sta before it is null checked
Published: 2021-05-31T15:39:45.041586Z

mt76: mt7615: Fix a dereference of pointer sta before it is null checked

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 28d7cb12d403f7f49e0914fd39b869ce5521f726, it was introduced in version v5.12.4 by commit fb2e48febf56c8993c5355dd2084c3d36b70c110. For more details please see the references link.
Vulnerability: GSD-2021-1002209
Summary: staging: rtl8712: fix use-after-free in rtl8712_dl_fw
Published: 2021-11-14T15:24:47.541914Z

staging: rtl8712: fix use-after-free in rtl8712_dl_fw

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.2 by commit a65c9afe9f2f55b7a7fb4a25ab654cd4139683a4, it was introduced in version v3.3 by commit 8c213fa59199f9673d66970d6940fa093186642f. For more details please see the references link.
Vulnerability: GSD-2022-1001759
Summary: wireguard: socket: ignore v6 endpoints when ipv6 is disabled
Published: 2022-04-24T21:40:17.827677Z

wireguard: socket: ignore v6 endpoints when ipv6 is disabled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 9af42a4f6d81b96b123f3ec22a4dcb906c6d00e7, it was introduced in version v5.6 by commit e7096c131e5161fa3b8e52a650d7719d2857adfd. For more details please see the references link.
Vulnerability: GSD-2021-1000721
Summary: net: caif: fix memory leak in caif_device_notify
Published: 2021-06-24T23:59:11.036428Z

net: caif: fix memory leak in caif_device_notify

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.272 by commit 9348c1f10932f13b299cbc8b1bd5f780751fae49, it was introduced in version v3.3 by commit 7c18d2205ea76eef9674e59e1ecae4f332a53e9e. For more details please see the references link.
Vulnerability: GSD-2021-1001833
Summary: s390/pci: fix zpci_zdev_put() on reserve
Published: 2021-10-28T13:51:19.841325Z

s390/pci: fix zpci_zdev_put() on reserve

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 188907c252188ac7a5ec3efcfa31dae1f47b8a20, it was introduced in version v5.10.61 by commit a69326e134d4ffa0d2d77bf1a4a62271c51c3051. For more details please see the references link.
Vulnerability: GSD-2021-1001999
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-11-14T15:15:14.811618Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.155 by commit 7ab488d7228a9dceb2456867f1f0919decf6efed, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.
Vulnerability: GSD-2021-1000371
Summary: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'
Published: 2021-05-31T15:39:45.041586Z

media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 00b68a7478343afdf83f30c43e64db5296057030, it was introduced in version v5.5 by commit 32f0a6ddc8c98a1aade2bf3d07c79d5d2c6ceb9a. For more details please see the references link.
Vulnerability: GSD-2022-1002460
Summary: drivers: net: slip: fix NPD bug in sl_tx_timeout()
Published: 2022-04-24T22:50:29.091025Z

drivers: net: slip: fix NPD bug in sl_tx_timeout()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 113284fe48770841e157e338bf3a2e9f197a8b50. For more details please see the references link.