TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2021-1000531
Summary: iommu/amd: Clear DMA ops when switching domain
Published: 2021-06-04T19:34:28.847786Z

iommu/amd: Clear DMA ops when switching domain

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit f3f2cf46291a693eab21adb94171b0128c2a9ec1, it was introduced in version v5.11 by commit 08a27c1c3ecf5e1da193ce5f8fc97c3be16e75f0. For more details please see the references link.
Vulnerability: GSD-2022-1002220
Summary: PM: core: keep irq flags in device_pm_check_callbacks()
Published: 2022-04-24T22:22:50.692298Z

PM: core: keep irq flags in device_pm_check_callbacks()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 0cccf9d4fb45f1acbc0bbf6d7e4d8d0fb7a10416. For more details please see the references link.
Vulnerability: GSD-2021-1000862
Summary: usb: fix various gadget panics on 10gbps cabling
Published: 2021-06-30T00:02:08.891582Z

usb: fix various gadget panics on 10gbps cabling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.237 by commit 70cd19cb5bd94bbb5bacfc9c1e4ee0071699a604. For more details please see the references link.
Vulnerability: GSD-2021-1001770
Summary: ocfs2: mount fails with buffer overflow in strlen
Published: 2021-10-28T13:48:03.231028Z

ocfs2: mount fails with buffer overflow in strlen

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.290 by commit ac011cb3ff7a76b3e0e6e77158ee4ba2f929e1fb. For more details please see the references link.
Vulnerability: GSD-2021-1001320
Summary: net: validate lwtstate->data before returning from skb_tunnel_info()
Published: 2021-08-03T02:07:33.606261Z

net: validate lwtstate->data before returning from skb_tunnel_info()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.135 by commit 8aa13a86964cdec4fd969ef677c6614ff068641a, it was introduced in version v4.3 by commit 61adedf3e3f1d3f032c5a6a299978d91eff6d555. For more details please see the references link.
Vulnerability: GSD-2021-1000927
Summary: can: bcm: fix infoleak in struct bcm_msg_head
Published: 2021-06-30T00:25:02.486402Z

can: bcm: fix infoleak in struct bcm_msg_head

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.128 by commit c297559a2a2a6b6f0de61ed333a978a118b0e660, it was introduced in version v2.6.25 by commit ffd980f976e7fd666c2e61bf8ab35107efd11828. For more details please see the references link.
Vulnerability: GSD-2021-1001635
Summary: KVM: x86: Handle SRCU initialization failure during page track init
Published: 2021-10-19T16:29:16.867737Z

KVM: x86: Handle SRCU initialization failure during page track init

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.71 by commit deb2949417677649e2413266d7ce8c2ff73952b4. For more details please see the references link.
Vulnerability: GSD-2022-1000358
Summary: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
Published: 2022-02-27T02:56:08.403817Z

Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.181 by commit fe595759c2a4a5bb41c438474f15947d8ae32f5c, it was introduced in version v4.15 by commit c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c. For more details please see the references link.
Vulnerability: GSD-2022-1002365
Summary: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
Published: 2022-04-24T22:39:25.436162Z

video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit dd3a6cc7385b89ec2303f39dfc3bafa4e24cec4b, it was introduced in version v3.2 by commit 3c8a63e22a0802fd56380f6ab305b419f18eb6f5. For more details please see the references link.
Vulnerability: GSD-2021-1001265
Summary: nfs: fix acl memory leak of posix_acl_create()
Published: 2021-08-03T01:53:10.378036Z

nfs: fix acl memory leak of posix_acl_create()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.52 by commit 4b515308ab875c7e8ada8e606fe0c64762da5ed4, it was introduced in version v3.14 by commit 013cdf1088d7235da9477a2375654921d9b9ba9f. For more details please see the references link.
Vulnerability: GSD-2022-1000708
Summary: blktrace: fix use after free for struct blk_trace
Published: 2022-03-18T00:11:28.992815Z

blktrace: fix use after free for struct blk_trace

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit 6418634238ade86f2b08192928787f39d8afb58c, it was introduced in version v5.12 by commit c0ea57608b691d6cde8aff23e11f9858a86b5918. For more details please see the references link.
Vulnerability: GSD-2021-1002019
Summary: regmap: Fix possible double-free in regcache_rbtree_exit()
Published: 2021-11-14T15:16:11.624220Z

regmap: Fix possible double-free in regcache_rbtree_exit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.157 by commit 1cead23c1c0bc766dacb900a3b0269f651ad596f, it was introduced in version v3.12 by commit 3f4ff561bc88b074d5e868dde4012d89cbb06c87. For more details please see the references link.
Vulnerability: GSD-2021-1000024
Summary: dmaengine: idxd: fix wq size store permission state
Published: 2021-05-31T15:39:45.031586Z

dmaengine: idxd: fix wq size store permission state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.16 by commit 05b7791c4c4aa8304368fdc55ae911f6b34e7281, it was introduced in version v5.6 by commit c52ca478233c172b2d322b5241d6279a8661cbba. For more details please see the references link.
Vulnerability: GSD-2022-1001549
Summary: ptp: unregister virtual clocks when unregistering physical clock.
Published: 2022-04-24T21:22:30.806408Z

ptp: unregister virtual clocks when unregistering physical clock.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 9c796a57cbb5daf124a665689f0b2bc9262e0ced, it was introduced in version v5.14 by commit 73f37068d540eba5f93ba3a0019bf479d35ebd76. For more details please see the references link.
Vulnerability: GSD-2021-1002449
Summary: net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
Published: 2021-12-19T19:37:51.717737Z

net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.164 by commit e461a9816a1ac5b4aeb61621b817225b61e46a68, it was introduced in version v4.7 by commit ec25bc04ed8e12947738468cbe2191f1529f9e39. For more details please see the references link.
Vulnerability: GSD-2021-1000474
Summary: bus: qcom: Put child node before return
Published: 2021-05-31T15:39:45.041586Z

bus: qcom: Put child node before return

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.233 by commit 94810fc52925eb122a922df7f9966cf3f4ba7391, it was introduced in version v4.9 by commit 335a127548081322bd2b294d715418648912f20c. For more details please see the references link.
Vulnerability: GSD-2022-1001119
Summary: ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
Published: 2022-04-24T20:47:11.290925Z

ubifs: Fix deadlock in concurrent rename whiteout and inode writeback

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 8b278c8dcfb565cb65eceb62a38cbf7a7c326db5, it was introduced in version v4.9 by commit 9e0a1fff8db56eaaebb74b4a3ef65f86811c4798. For more details please see the references link.
Vulnerability: GSD-2021-1000399
Summary: rtw88: Fix array overrun in rtw_get_tx_power_params()
Published: 2021-05-31T15:39:45.041586Z

rtw88: Fix array overrun in rtw_get_tx_power_params()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 95fb153c6027924cda3422120169d1890737f3a0, it was introduced in version v5.3 by commit fa6dfe6bff246ddd5be3cfe81637f137acd6c294. For more details please see the references link.
Vulnerability: GSD-2021-1000663
Summary: net: usb: fix memory leak in smsc75xx_bind
Published: 2021-06-04T19:57:22.375326Z

net: usb: fix memory leak in smsc75xx_bind

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit 9e6a3eccb28779710cbbafc4f4258d92509c6d07, it was introduced in version v2.6.34 by commit d0cad871703b898a442e4049c532ec39168e5b57. For more details please see the references link.
Vulnerability: GSD-2021-1001971
Summary: comedi: ni_usb6501: fix NULL-deref in command paths
Published: 2021-11-14T15:13:57.496442Z

comedi: ni_usb6501: fix NULL-deref in command paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.255 by commit df7b1238f3b599a0b9284249772cdfd1ea83a632, it was introduced in version v3.18 by commit a03bb00e50ab4c07107da58a52a0bff7943f360c. For more details please see the references link.
Vulnerability: GSD-2021-1000233
Summary: powerpc/64: Fix the definition of the fixmap area
Published: 2021-05-31T15:39:45.041586Z

powerpc/64: Fix the definition of the fixmap area

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit a84df7c80bdac598d6ac9268ae578da6928883e8, it was introduced in version v5.5 by commit 265c3491c4bc8d40587996d6ee2f447a7ccfb4f3. For more details please see the references link.
Vulnerability: GSD-2021-1001588
Summary: HID: betop: fix slab-out-of-bounds Write in betop_probe
Published: 2021-10-19T16:25:09.261793Z

HID: betop: fix slab-out-of-bounds Write in betop_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.151 by commit fe9bb925e7096509711660d39c0493a1546e9550. For more details please see the references link.
Vulnerability: GSD-2021-1001072
Summary: net: ethernet: fix potential use-after-free in ec_bhf_remove
Published: 2021-06-30T00:37:47.702360Z

net: ethernet: fix potential use-after-free in ec_bhf_remove

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit d11d79e52ba080ee567cb7d7eb42a5ade60a8130, it was introduced in version v3.15 by commit 6af55ff52b02d492d45db88df3e461fa51a6f753. For more details please see the references link.
Vulnerability: GSD-2022-1002172
Summary: mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
Published: 2022-04-24T22:18:30.811484Z

mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit fdfb9ae26161606952f4cc3c4e0c0984d5c81cb6, it was introduced in version v2.6.14 by commit 3e347261a80b57df792ab9464b5f0ed59add53a8. For more details please see the references link.
Vulnerability: GSD-2021-1001422
Summary: jfs: fix GPF in diFree
Published: 2021-08-03T02:36:14.184337Z

jfs: fix GPF in diFree

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 49def1b0644892e3b113673c13d650c3060b43bc. For more details please see the references link.
Vulnerability: GSD-2022-1002488
Summary: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Published: 2022-04-24T22:53:25.291140Z

video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 47e5533adf118afaf06d25a3e2aaaab89371b1c5. For more details please see the references link.
Vulnerability: GSD-2021-1001137
Summary: i2c: robotfuzz-osif: fix control-request directions
Published: 2021-07-08T01:58:56.030674Z

i2c: robotfuzz-osif: fix control-request directions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.14 by commit cdc9ae6b3bd46e71cd07a8a97f21ebd0207d36c2, it was introduced in version v3.14 by commit 83e53a8f120f2f273cf0ad717f5372ab79ac24fe. For more details please see the references link.
Vulnerability: GSD-2022-1002467
Summary: veth: Ensure eth header is in skb's linear part
Published: 2022-04-24T22:51:34.016107Z

veth: Ensure eth header is in skb's linear part

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 3de2a02b60a4ef0ab76263216f08c7d095fc7c42, it was introduced in version v2.6.24 by commit e314dbdc1c0dc6a548ecf0afce28ecfd538ff568. For more details please see the references link.
Vulnerability: GSD-2021-1001567
Summary: tty: Fix out-of-bound vmalloc access in imageblit
Published: 2021-10-19T16:24:07.414411Z

tty: Fix out-of-bound vmalloc access in imageblit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.209 by commit 8a6a240f52e14356386030d8958ae8b1761d2325. For more details please see the references link.
Vulnerability: GSD-2022-1002037
Summary: KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
Published: 2022-04-24T22:05:13.832191Z

KVM: x86/mmu: do compare-and-exchange of gPTE via the user address

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit e90518d10c7dd59d5ebbe25b0f0083a7dbffa42f, it was introduced in version v5.2 by commit bd53cb35a3e9adb73a834a36586e9ad80e877767. For more details please see the references link.
Vulnerability: GSD-2021-1000726
Summary: nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
Published: 2021-06-24T23:59:29.257871Z

nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.272 by commit 39c15bd2e5d11bcf7f4c3dba2aad9e1e110a5d94, it was introduced in version v3.3 by commit d646960f7986fefb460a2b062d5ccc8ccfeacc3a. For more details please see the references link.
Vulnerability: GSD-2021-1001834
Summary: scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
Published: 2021-10-28T13:51:22.912857Z

scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 96f0aebf29be25254fa585af43924e34aa21fd9a, it was introduced in version v3.11 by commit 8c0eb596baa51f2b43949c698c644727ef17805c. For more details please see the references link.
Vulnerability: GSD-2021-1000376
Summary: drm/amd/display: Fix off by one in hdmi_14_process_transaction()
Published: 2021-05-31T15:39:45.041586Z

drm/amd/display: Fix off by one in hdmi_14_process_transaction()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 403c4528e5887af3deb9838cb77a557631d1e138, it was introduced in version v5.5 by commit 4c283fdac08abf3211533f70623c90a34f41d08d. For more details please see the references link.
Vulnerability: GSD-2022-1000909
Summary: iio: adc: men_z188_adc: Fix a resource leak in an error handling path
Published: 2022-03-18T00:30:41.810972Z

iio: adc: men_z188_adc: Fix a resource leak in an error handling path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.232 by commit 53d43a9c8dd224e66559fe86af1e473802c7130e, it was introduced in version v3.15 by commit 74aeac4da66fbfa246edbfc849002eac9b5af9ca. For more details please see the references link.
Vulnerability: GSD-2022-1000323
Summary: parisc: Fix data TLB miss in sba_unmap_sg
Published: 2022-02-27T02:51:27.231499Z

parisc: Fix data TLB miss in sba_unmap_sg

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.231 by commit 867e50231c7605547d9334904d70a181f39f2d9e. For more details please see the references link.
Vulnerability: GSD-2022-1000289
Summary: net: fix a memleak when uncloning an skb dst and its metadata
Published: 2022-02-27T02:38:47.014694Z

net: fix a memleak when uncloning an skb dst and its metadata

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.302 by commit 4ac84498fbe84a00e7aef185e2bb3e40ce71eca4, it was introduced in version v4.3 by commit fc4099f17240767554ff3a73977acb78ef615404. For more details please see the references link.
Vulnerability: GSD-2022-1001861
Summary: ptp: unregister virtual clocks when unregistering physical clock.
Published: 2022-04-24T21:49:10.594608Z

ptp: unregister virtual clocks when unregistering physical clock.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit b2dea2a696d09163da4cd33cb598ce1f73e86597, it was introduced in version v5.14 by commit 73f37068d540eba5f93ba3a0019bf479d35ebd76. For more details please see the references link.
Vulnerability: GSD-2022-1000773
Summary: netfilter: fix use-after-free in __nf_register_net_hook()
Published: 2022-03-18T00:17:10.106186Z

netfilter: fix use-after-free in __nf_register_net_hook()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.27 by commit bd61f192a339b1095dfd6d56073a5265934c2979, it was introduced in version v4.14 by commit 2420b79f8c18a75ee2417cace381f4604b9b4365. For more details please see the references link.
Vulnerability: GSD-2021-1002062
Summary: drm/ttm: fix memleak in ttm_transfered_destroy
Published: 2021-11-14T15:18:04.820244Z

drm/ttm: fix memleak in ttm_transfered_destroy

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.77 by commit c21b4002214c1c7e7b627b9b53375612f7aab6db. For more details please see the references link.
Vulnerability: GSD-2021-1002598
Summary: btrfs: free exchange changeset on failures
Published: 2021-12-19T19:44:29.530039Z

btrfs: free exchange changeset on failures

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit ca06c5cb1b6dbfe67655b33c02fc394d65824519. For more details please see the references link.
Vulnerability: GSD-2022-1001532
Summary: power: supply: wm8350-power: Add missing free in free_charger_irq
Published: 2022-04-24T21:20:51.138004Z

power: supply: wm8350-power: Add missing free in free_charger_irq

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit ae07ec8110ba83295c88bff7e85835cc2f6cc4ea, it was introduced in version v2.6.29 by commit 14431aa0c5a443d13d24e6f865a8838f97dab973. For more details please see the references link.
Vulnerability: GSD-2022-1001498
Summary: NFS: remove unneeded check in decode_devicenotify_args()
Published: 2022-04-24T21:17:24.747604Z

NFS: remove unneeded check in decode_devicenotify_args()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit e53f2f987435aa8ff208f3ef7a6e90862c8cb71b, it was introduced in version v4.0 by commit a4f743a6bb201662962fa888e3f978583d61691e. For more details please see the references link.
Vulnerability: GSD-2021-1002432
Summary: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
Published: 2021-12-19T19:37:03.421760Z

iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.221 by commit a3730f74159ad00a28960c0efe2a931fe6fe6b45, it was introduced in version v4.2 by commit a25691c1f9674090fb66586cf4c5d60d3efdf339. For more details please see the references link.
Vulnerability: GSD-2022-1001162
Summary: selinux: allow FIOCLEX and FIONCLEX with policy capability
Published: 2022-04-24T20:49:38.356468Z

selinux: allow FIOCLEX and FIONCLEX with policy capability

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit b531d4ead7990638c4d0402de1f6b3c6f4aa81be. For more details please see the references link.
Vulnerability: GSD-2022-1001477
Summary: PM: core: keep irq flags in device_pm_check_callbacks()
Published: 2022-04-24T21:15:44.752588Z

PM: core: keep irq flags in device_pm_check_callbacks()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 2add538e57a2825c61d639260386f385c75e4166. For more details please see the references link.
Vulnerability: GSD-2021-1002127
Summary: drm/ttm: fix memleak in ttm_transfered_destroy
Published: 2021-11-14T15:21:09.969285Z

drm/ttm: fix memleak in ttm_transfered_destroy

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.16 by commit 132a3d998d6753047f22152731fba2b0d6b463dd. For more details please see the references link.
Vulnerability: GSD-2022-1001027
Summary: drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
Published: 2022-04-24T20:41:08.867853Z

drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit fe7929ff9ee0bf3514c69c3c298b3819f91e7d99, it was introduced in version v4.13 by commit 71c37505e7eaa01fa259debad1a71a7ae061039d. For more details please see the references link.
Vulnerability: GSD-2021-1002577
Summary: xhci: Fix commad ring abort, write all 64 bits to CRCR register.
Published: 2021-12-19T19:43:30.731465Z

xhci: Fix commad ring abort, write all 64 bits to CRCR register.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit fa75f593c867cde772e2d87ca36ab735c4aa4a09, it was introduced in version v5.15 by commit ff0e50d3564f33b7f4b35cadeabd951d66cfc570. For more details please see the references link.
Vulnerability: GSD-2022-1000266
Summary: yam: fix a memory leak in yam_siocdevprivate()
Published: 2022-02-18T22:04:01.426771Z

yam: fix a memory leak in yam_siocdevprivate()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit 0690c3943ed0fa76654e600eca38cde6a13c87ac, it was introduced in version v4.19 by commit 0781168e23a2fc8dceb989f11fc5b39b3ccacc35. For more details please see the references link.
Vulnerability: GSD-2021-1002824
Summary: asix: fix uninit-value in asix_mdio_read()
Published: 2021-12-30T02:45:02.133172Z

asix: fix uninit-value in asix_mdio_read()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit d259f621c85949f30cc578cac813b82bb5169f56, it was introduced in version v4.9 by commit d9fe64e511144c1ee7d7555b4111f09dde9692ef. For more details please see the references link.
Vulnerability: GSD-2021-1000819
Summary: btrfs: fixup error handling in fixup_inode_link_counts
Published: 2021-06-25T00:09:22.655379Z

btrfs: fixup error handling in fixup_inode_link_counts

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit 4cd303735bdfacd115ee20a6f3235b0084924174, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1001924
Summary: can: m_can: m_can_tx_handler(): fix use after free of skb
Published: 2022-04-24T21:55:26.793276Z

can: m_can: m_can_tx_handler(): fix use after free of skb

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit f43e64076ff1b1dcb893fb77ad1204105f710a29, it was introduced in version v3.18 by commit 80646733f11c2e9de3b6339f7e635047e6087280. For more details please see the references link.
Vulnerability: GSD-2022-1000636
Summary: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
Published: 2022-02-27T03:33:56.732795Z

PCI: pciehp: Fix infinite loop in IRQ handler upon power fault

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.6 by commit 6d6f1f0dac3e3441ecdb1103d4efb11b9ed24dd5, it was introduced in version v5.7 by commit 8edf5332c39340b9583cf9cba659eb7ec71f75b5. For more details please see the references link.
Vulnerability: GSD-2021-1001475
Summary: nfs: fix acl memory leak of posix_acl_create()
Published: 2021-08-03T02:52:44.185578Z

nfs: fix acl memory leak of posix_acl_create()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.276 by commit 2e3960f276b4574a9bb0dfa31a7497302f6363b2, it was introduced in version v3.14 by commit 013cdf1088d7235da9477a2375654921d9b9ba9f. For more details please see the references link.
Vulnerability: GSD-2022-1002125
Summary: mm/kmemleak: reset tag when compare object pointer
Published: 2022-04-24T22:13:55.081453Z

mm/kmemleak: reset tag when compare object pointer

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit d5d5804acc16fce9726fbbd006660d8642e2c459. For more details please see the references link.
Vulnerability: GSD-2022-1000118
Summary: select: Fix indefinitely sleeping task in poll_schedule_timeout()
Published: 2022-02-18T21:43:07.301997Z

select: Fix indefinitely sleeping task in poll_schedule_timeout()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.227 by commit 6717900f775a6129a7b4d03ba4922218d8bf1caa. For more details please see the references link.
Vulnerability: GSD-2021-1001025
Summary: ftrace: Do not blindly read the ip address in ftrace_bug()
Published: 2021-06-30T00:34:40.155348Z

ftrace: Do not blindly read the ip address in ftrace_bug()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit 3e4ddeb68751fb4fb657199aed9cfd5d02796875, it was introduced in version v2.6.28 by commit 05736a427f7e16be948ccbf39782bd3a6ae16b14. For more details please see the references link.
Vulnerability: GSD-2022-1000548
Summary: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
Published: 2022-02-27T03:22:37.716052Z

ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.11 by commit 27f567c84f446048670376827e356f9c92033bf9, it was introduced in version v5.13 by commit 88e2ca3080947fe22eb520c1f8231e79a105d011. For more details please see the references link.
Vulnerability: GSD-2021-1000264
Summary: Bluetooth: avoid deadlock between hci_dev->lock and socket lock
Published: 2021-05-31T15:39:45.041586Z

Bluetooth: avoid deadlock between hci_dev->lock and socket lock

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 332e69eb3bd90370f2d9f2c2ca7974ff523dea17, it was introduced in version v5.7 by commit eab2404ba798a8efda2a970f44071c3406d94e57. For more details please see the references link.
Vulnerability: GSD-2021-1002259
Summary: NFC: reorder the logic in nfc_{un,}register_device
Published: 2021-11-29T02:35:46.854341Z

NFC: reorder the logic in nfc_{un,}register_device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.162 by commit 307d2e6cebfca9d92f86c8e2c8e3dd4a8be46ba6, it was introduced in version v3.10 by commit be055b2f89b5842f41363b5655a33dffb51a8294. For more details please see the references link.
Vulnerability: GSD-2022-1001709
Summary: ceph: fix memory leak in ceph_readdir when note_last_dentry returns error
Published: 2022-04-24T21:36:52.245644Z

ceph: fix memory leak in ceph_readdir when note_last_dentry returns error

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 2fe82d3254029ef9ec4e7be890125d5ef4f537de. For more details please see the references link.
Vulnerability: GSD-2021-1000634
Summary: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
Published: 2021-06-04T19:51:28.108004Z

NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 785917316b25685c9b3a2a88f933139f2de75e33, it was introduced in version v4.0 by commit a7d42ddb3099727f58366fa006f850a219cce6c8. For more details please see the references link.
Vulnerability: GSD-2021-1002609
Summary: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
Published: 2021-12-19T19:44:56.210659Z

iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit 14508fe13b1c578b3d2ba574f1d48b351975860c, it was introduced in version v4.2 by commit a25691c1f9674090fb66586cf4c5d60d3efdf339. For more details please see the references link.
Vulnerability: GSD-2021-1001926
Summary: scsi: core: Put LLD module refcnt after SCSI device is released
Published: 2021-11-14T15:12:00.373278Z

scsi: core: Put LLD module refcnt after SCSI device is released

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.292 by commit 1105573d964f7b78734348466b01f5f6ba8a1813. For more details please see the references link.
Vulnerability: GSD-2022-1001359
Summary: net: openvswitch: fix leak of nested actions
Published: 2022-04-24T21:07:42.163258Z

net: openvswitch: fix leak of nested actions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 3554c214b83ec9a839ed574263a34218f372990c, it was introduced in version v4.3 by commit 34ae932a40369be6bd6ea97d66b6686361b4370d. For more details please see the references link.
Vulnerability: GSD-2021-1000321
Summary: userfaultfd: release page in error path to avoid BUG_ON
Published: 2021-05-31T15:39:45.041586Z

userfaultfd: release page in error path to avoid BUG_ON

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.38 by commit 140cfd9980124aecb6c03ef2e69c72d0548744de, it was introduced in version v4.11 by commit cb658a453b9327ce96ce5222c24d162b5b65b564. For more details please see the references link.
Vulnerability: GSD-2021-1000771
Summary: wireguard: allowedips: free empty intermediate nodes when removing single node
Published: 2021-06-25T00:04:34.100116Z

wireguard: allowedips: free empty intermediate nodes when removing single node

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.43 by commit df3b45f6d1ce605120750b983fc4448e3769619a, it was introduced in version v5.6 by commit e7096c131e5161fa3b8e52a650d7719d2857adfd. For more details please see the references link.
Vulnerability: GSD-2021-1001863
Summary: xhci: Fix command ring pointer corruption while aborting a command
Published: 2021-10-28T13:52:52.210984Z

xhci: Fix command ring pointer corruption while aborting a command

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.75 by commit dec944bb7079b37968cf69c8a438f91f15c4cc61. For more details please see the references link.
Vulnerability: GSD-2022-1002060
Summary: lib/test: use after free in register_test_dev_kmod()
Published: 2022-04-24T22:06:27.623777Z

lib/test: use after free in register_test_dev_kmod()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 327f07e3704c821ce33e54ef5046bdf69975cb86, it was introduced in version v4.13 by commit d9c6a72d6fa29d3a7999dda726577e5d1fccafa5. For more details please see the references link.
Vulnerability: GSD-2021-1001530
Summary: ipack: ipoctal: fix module reference leak
Published: 2021-10-19T16:22:27.265213Z

ipack: ipoctal: fix module reference leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.249 by commit dde4c1429b97383689f755ce92b4ed1e84a9c92b, it was introduced in version v3.18 by commit 82a82340bab6c251e0705339f60763718eaa2a22. For more details please see the references link.
Vulnerability: GSD-2022-1002430
Summary: NFS: remove unneeded check in decode_devicenotify_args()
Published: 2022-04-24T22:46:12.609462Z

NFS: remove unneeded check in decode_devicenotify_args()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit a5ddd85bad671bee4a98e1dee3c23e8aff78288f, it was introduced in version v4.0 by commit a4f743a6bb201662962fa888e3f978583d61691e. For more details please see the references link.
Vulnerability: GSD-2021-1001160
Summary: bpf, sockmap: Fix potential memory leak on unlikely error case
Published: 2021-08-03T01:31:27.433300Z

bpf, sockmap: Fix potential memory leak on unlikely error case

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.6 by commit 6c508a1c6c62793dc6e6872cad4b200097bab7c9, it was introduced in version v5.10 by commit 4363023d2668e621b0743db351a9555d6e6ea57e. For more details please see the references link.
Vulnerability: GSD-2022-1001135
Summary: drm/dp: Fix off-by-one in register cache size
Published: 2022-04-24T20:48:08.875384Z

drm/dp: Fix off-by-one in register cache size

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit ab096ec04c902d351ea1fce3acb8ef9f4a25fc51, it was introduced in version v5.12 by commit e2e16da398d9149ede0162a55f44537582aed2e7. For more details please see the references link.
Vulnerability: GSD-2021-1002465
Summary: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
Published: 2021-12-19T19:38:30.577654Z

iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.165 by commit 8c163a14277115ca962103910ab4cce55e862ffb, it was introduced in version v4.2 by commit a25691c1f9674090fb66586cf4c5d60d3efdf339. For more details please see the references link.
Vulnerability: GSD-2021-1000458
Summary: soundwire: stream: fix memory leak in stream config error path
Published: 2021-05-31T15:39:45.041586Z

soundwire: stream: fix memory leak in stream config error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.191 by commit 342260fe821047c3d515e3d28085d73fbdce3e80, it was introduced in version v4.18 by commit 89e590535f32d4bc548bcf266f3b046e50942f6d. For more details please see the references link.
Vulnerability: GSD-2022-1001565
Summary: media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
Published: 2022-04-24T21:24:20.154121Z

media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 2874122ca4ca74adec72d6d6bf8828228ec20f15, it was introduced in version v3.7 by commit 8ac456495a33d9466076fea94594181ceefb76d9. For more details please see the references link.
Vulnerability: GSD-2021-1002035
Summary: NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
Published: 2021-11-14T15:16:57.292142Z

NFC: digital: fix possible memory leak in digital_in_send_sdd_req()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.75 by commit 50cb95487c265187289810addec5093d4fed8329, it was introduced in version v3.13 by commit 2c66daecc4092e6049673c281b2e6f0d5e59a94c. For more details please see the references link.
Vulnerability: GSD-2022-1001836
Summary: Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error"
Published: 2022-04-24T21:46:35.712726Z

Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error"

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit b089f7fc89f9a106c24bfc9d8f0bbf67df84fc3f, it was introduced in version v5.15.33 by commit 4c3c666ecc6a287f367c2e0b53fa2e48e548820d. For more details please see the references link.
Vulnerability: GSD-2022-1000724
Summary: btrfs: prevent copying too big compressed lzo segment
Published: 2022-03-18T00:12:19.575891Z

btrfs: prevent copying too big compressed lzo segment

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit e326bd06cdde46df952361456232022298281d16. For more details please see the references link.
Vulnerability: GSD-2021-1001249
Summary: bpf: Fix tail_call_reachable rejection for interpreter when jit failed
Published: 2021-08-03T01:48:26.199616Z

bpf: Fix tail_call_reachable rejection for interpreter when jit failed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.54 by commit 39f1735c8107ef43a53c4daf82f330d880488d8f, it was introduced in version v5.10 by commit ebf7d1f508a73871acf3b2bfbfa1323a477acdb3. For more details please see the references link.
Vulnerability: GSD-2022-1000374
Summary: net: do not keep the dst cache when uncloning an skb dst and its metadata
Published: 2022-02-27T02:57:56.182587Z

net: do not keep the dst cache when uncloning an skb dst and its metadata

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.101 by commit 2e9fd2d0f69e4cc82a9a497bb14c1d70e75cc430, it was introduced in version v4.6 by commit d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8. For more details please see the references link.
Vulnerability: GSD-2022-1002349
Summary: af_netlink: Fix shift out of bounds in group mask calculation
Published: 2022-04-24T22:36:58.387601Z

af_netlink: Fix shift out of bounds in group mask calculation

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit f75f4abeec4c04b600a15b50c89a481f1e7435ee, it was introduced in version v2.6.14 by commit f7fa9b10edbb9391bdd4ec8e8b3d621d0664b198. For more details please see the references link.
Vulnerability: GSD-2021-1001619
Summary: powerpc/64s: fix program check interrupt emergency stack path
Published: 2021-10-19T16:28:35.087968Z

powerpc/64s: fix program check interrupt emergency stack path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.73 by commit 411b38fe68ba20a8bbe724b0939762c3f16e16ca, it was introduced in version v5.3 by commit 0a882e28468f48ab3d9a36dde0a5723ea29ed1ed. For more details please see the references link.
Vulnerability: GSD-2022-1001973
Summary: lz4: fix LZ4_decompress_safe_partial read out of bound
Published: 2022-04-24T21:59:52.749930Z

lz4: fix LZ4_decompress_safe_partial read out of bound

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 6adc01a7aa37445dafe8846faa0610a86029b253. For more details please see the references link.
Vulnerability: GSD-2022-1000661
Summary: dma-buf: heaps: Fix potential spectre v1 gadget
Published: 2022-02-27T03:37:25.147637Z

dma-buf: heaps: Fix potential spectre v1 gadget

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.8 by commit cc8f7940d9c2d45f67b3d1a2f2b7a829ca561bed, it was introduced in version v5.5 by commit a69b0e855d3fd278ff6f09a23e1edf929538e304. For more details please see the references link.