TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1001294
Summary: ext4: make mb_optimize_scan performance mount option work with extents
Published: 2022-04-24T21:01:56.902385Z

ext4: make mb_optimize_scan performance mount option work with extents

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit b017c9a1abee723689204bea86b0cc36e480d187, it was introduced in version v5.13 by commit 196e402adf2e4cd66f101923409f1970ec5f1af3. For more details please see the references link.
Vulnerability: GSD-2021-1000203
Summary: hfsplus: prevent corruption in shrinking truncate
Published: 2021-05-31T15:39:45.041586Z

hfsplus: prevent corruption in shrinking truncate

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 97314e45aa1223a42d60256a62c5d9af54baf446, it was introduced in version v4.19 by commit 31651c607151f1034cfb57e5a78678bea54c362b. For more details please see the references link.
Vulnerability: GSD-2021-1002394
Summary: perf hist: Fix memory leak of a perf_hpp_fmt
Published: 2021-12-19T19:35:25.185038Z

perf hist: Fix memory leak of a perf_hpp_fmt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit c5c8a26c0dc69a400553245e92d741fe55f91095. For more details please see the references link.
Vulnerability: GSD-2021-1001941
Summary: net: mdiobus: Fix memory leak in __mdiobus_register
Published: 2021-11-14T15:12:37.189107Z

net: mdiobus: Fix memory leak in __mdiobus_register

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.288 by commit bc5f2f3431ced08300e4cb3aff35f1da14c26433. For more details please see the references link.
Vulnerability: GSD-2021-1000653
Summary: i2c: i801: Don't generate an interrupt on bus reset
Published: 2021-06-04T19:55:19.015717Z

i2c: i801: Don't generate an interrupt on bus reset

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit c70e1ba2e7e65255a0ce004f531dd90dada97a8c, it was introduced in version v3.6 by commit 636752bcb5177a301d0266270661581de8624828. For more details please see the references link.
Vulnerability: GSD-2022-1002142
Summary: pinctrl: samsung: drop pin banks references on error paths
Published: 2022-04-24T22:15:43.903884Z

pinctrl: samsung: drop pin banks references on error paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit be22ebe79e64c3a8eb76f68743d97771f244cb18, it was introduced in version v3.8 by commit ab663789d69760d2735402f66501f20b60312a3d. For more details please see the references link.
Vulnerability: GSD-2022-1000485
Summary: can: isotp: fix potential CAN frame reception race in isotp_rcv()
Published: 2022-02-27T03:13:22.575741Z

can: isotp: fix potential CAN frame reception race in isotp_rcv()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 5b068f33bc8acfcfd5ea7992a2dafb30d89bad30, it was introduced in version v5.10 by commit e057dd3fc20ffb3d7f150af46542a51b59b90127. For more details please see the references link.
Vulnerability: GSD-2021-1001412
Summary: virtio_console: Assure used length from device is limited
Published: 2021-08-03T02:33:12.568081Z

virtio_console: Assure used length from device is limited

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 56cf748562d3cbfd33d1ba2eb4a7603a5e20da88. For more details please see the references link.
Vulnerability: GSD-2022-1002512
Summary: jffs2: fix memory leak in jffs2_do_mount_fs
Published: 2022-04-24T22:56:45.317482Z

jffs2: fix memory leak in jffs2_do_mount_fs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 2a9d8184458562e6bf2f40d0e677fc85e2dd3834, it was introduced in version v2.6.15 by commit e631ddba588783edd521c5a89f7b2902772fb691. For more details please see the references link.
Vulnerability: GSD-2021-1001042
Summary: IB/mlx5: Fix initializing CQ fragments buffer
Published: 2021-06-30T00:35:51.539898Z

IB/mlx5: Fix initializing CQ fragments buffer

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit 3e670c54eda238cb8a1ea93538a79ae89285c1c4, it was introduced in version v4.17 by commit 388ca8be00370db132464e27f745b8a0add19fcb. For more details please see the references link.
Vulnerability: GSD-2021-1002802
Summary: phonet/pep: refuse to enable an unbound pipe
Published: 2021-12-30T02:44:07.231004Z

phonet/pep: refuse to enable an unbound pipe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.169 by commit 48c76fc53582e7f13c1e0b11c916e503256c4d0b. For more details please see the references link.
Vulnerability: GSD-2022-1000240
Summary: Bluetooth: refactor malicious adv data check
Published: 2022-02-18T22:00:08.728079Z

Bluetooth: refactor malicious adv data check

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit bcea886771c3f22a590c8c8b9139a107bd7f1e1c. For more details please see the references link.
Vulnerability: GSD-2021-1000995
Summary: can: j1939: fix Use-after-Free, hold skb ref while in use
Published: 2021-06-30T00:32:03.841152Z

can: j1939: fix Use-after-Free, hold skb ref while in use

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 509ab6bfdd0c76daebbad0f0af07da712116de22, it was introduced in version v5.4 by commit 9d71dd0c70099914fcd063135da3c580865e924c. For more details please see the references link.
Vulnerability: GSD-2021-1001687
Summary: drm/nouveau/debugfs: fix file release memory leak
Published: 2021-10-19T16:31:52.208386Z

drm/nouveau/debugfs: fix file release memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.12 by commit 88c3610045ca6e699331b6bb5c095c5565f30721, it was introduced in version v4.5 by commit 6e9fc177399f08446293fec7607913fdbc95e191. For more details please see the references link.
Vulnerability: GSD-2022-1001902
Summary: brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
Published: 2022-04-24T21:53:25.282965Z

brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit a88337a06966f2d733ad9a97714b874469133f14, it was introduced in version v5.4 by commit 82f93cf46d6007ffa003b2d4a2834563b6b84d21. For more details please see the references link.
Vulnerability: GSD-2022-1000610
Summary: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
Published: 2022-02-27T03:31:01.554809Z

KVM: LAPIC: Also cancel preemption timer during SET_LAPIC

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit ce55f63f6cea4cab8ae9212f73285648a5baa30d. For more details please see the references link.
Vulnerability: GSD-2021-1002101
Summary: ocfs2: fix data corruption after conversion from inline format
Published: 2021-11-14T15:19:56.585007Z

ocfs2: fix data corruption after conversion from inline format

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit fa9b6b6c953e3f6441ed6cf83b4c771dac2dae08, it was introduced in version v5.10 by commit 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b. For more details please see the references link.
Vulnerability: GSD-2022-1001451
Summary: scsi: qla2xxx: Implement ref count for SRB
Published: 2022-04-24T21:14:23.694350Z

scsi: qla2xxx: Implement ref count for SRB

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit e140723f78ff418c8df7d990e102e07b65c87d4a. For more details please see the references link.
Vulnerability: GSD-2021-1002551
Summary: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
Published: 2021-12-19T19:42:19.511294Z

drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit 06c6f8f86ec243b89e52f0c3dc7062bcb9de74df. For more details please see the references link.
Vulnerability: GSD-2021-1000096
Summary: tools/power turbostat: Fix offset overflow issue in index converting
Published: 2021-05-31T15:39:45.031586Z

tools/power turbostat: Fix offset overflow issue in index converting

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit dbdf22fc825fdb1d97f23230064e0f9819471628, it was introduced in version v5.10 by commit 9972d5d84d76982606806b2ce887f70c2f8ba60a. For more details please see the references link.
Vulnerability: GSD-2022-1001001
Summary: irqchip/gic-v3: Fix GICR_CTLR.RWP polling
Published: 2022-04-24T20:38:43.006664Z

irqchip/gic-v3: Fix GICR_CTLR.RWP polling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 6fef3e3179e6ed8fecdd004ede541674ffa7749d, it was introduced in version v3.17 by commit 021f653791ad17e03f98aaa7fb933816ae16f161. For more details please see the references link.
Vulnerability: GSD-2021-1000583
Summary: drm/amd/amdgpu: fix a potential deadlock in gpu reset
Published: 2021-06-04T19:42:51.953377Z

drm/amd/amdgpu: fix a potential deadlock in gpu reset

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit 4951dd498d483fa961c92541b55ffb32db7f2dbf, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1001514
Summary: RDMA/rxe: Change variable and function argument to proper type
Published: 2022-04-24T21:19:07.820089Z

RDMA/rxe: Change variable and function argument to proper type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 4bf26b79a1d8a73e271a31aeb8c6193d07f60b44. For more details please see the references link.
Vulnerability: GSD-2021-1002044
Summary: userfaultfd: fix a race between writeprotect and exit_mmap()
Published: 2021-11-14T15:17:20.500151Z

userfaultfd: fix a race between writeprotect and exit_mmap()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 3cda4bfffd4f755645577aaa9e96a606657b4525, it was introduced in version v5.7 by commit 63b2d4174c4ad1f40b48d7138e71bcb564c1fe03. For more details please see the references link.
Vulnerability: GSD-2021-1000079
Summary: mmc: uniphier-sd: Fix a resource leak in the remove function
Published: 2021-05-31T15:39:45.031586Z

mmc: uniphier-sd: Fix a resource leak in the remove function

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit d6e7fda496978f2763413b5523557b38dc2bf6c2, it was introduced in version v4.20 by commit 3fd784f745dd1747863775a99ec749619ee6759c. For more details please see the references link.
Vulnerability: GSD-2022-1001144
Summary: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
Published: 2022-04-24T20:48:46.088720Z

media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 20811bbe685ca3eddd34b0c750860427d7030910. For more details please see the references link.
Vulnerability: GSD-2021-1002414
Summary: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
Published: 2021-12-19T19:36:21.137508Z

net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.220 by commit 2c1a6a9a011d622a7c61324a97a49801ba425eff. For more details please see the references link.
Vulnerability: GSD-2021-1000429
Summary: media: aspeed: fix clock handling logic
Published: 2021-05-31T15:39:45.041586Z

media: aspeed: fix clock handling logic

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.119 by commit 1dc1d30ac101bb8335d9852de2107af60c2580e7, it was introduced in version v5.0 by commit d2b4387f3bdf016e266d23cf657465f557721488. For more details please see the references link.
Vulnerability: GSD-2021-1001392
Summary: wl1251: Fix possible buffer overflow in wl1251_cmd_scan
Published: 2021-08-03T02:26:55.070139Z

wl1251: Fix possible buffer overflow in wl1251_cmd_scan

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 115103f6e3f1c26c473766c16439c7c8b235529a. For more details please see the references link.
Vulnerability: GSD-2022-1000305
Summary: vt_ioctl: fix array_index_nospec in vt_setactivate
Published: 2022-02-27T02:48:43.359443Z

vt_ioctl: fix array_index_nospec in vt_setactivate

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.267 by commit 2a45a6bd1e6d651770aafff57ab3e1d3bb0b42e0. For more details please see the references link.
Vulnerability: GSD-2022-1002338
Summary: ext4: don't BUG if someone dirty pages without asking ext4 first
Published: 2022-04-24T22:35:39.720049Z

ext4: don't BUG if someone dirty pages without asking ext4 first

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 0d3a6926f7e8be3c897fa46216ce13b119a9f56a. For more details please see the references link.
Vulnerability: GSD-2021-1001668
Summary: irqchip/gic-v3-its: Fix potential VPE leak on error
Published: 2021-10-19T16:30:54.458650Z

irqchip/gic-v3-its: Fix potential VPE leak on error

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.70 by commit 568662e37f927e3dc3e475f3ff7cf4ab7719c5e7, it was introduced in version v4.14 by commit 7d75bbb4bc1ad90386776459d37e4ddfe605671e. For more details please see the references link.
Vulnerability: GSD-2022-1001847
Summary: gpu: host1x: Fix a memory leak in 'host1x_remove()'
Published: 2022-04-24T21:47:39.309989Z

gpu: host1x: Fix a memory leak in 'host1x_remove()'

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit c06577a80485511b894cb688e881ef0bc2d1d296, it was introduced in version v4.13 by commit 8474b02531c4881a762c52ef869c52429e38633f. For more details please see the references link.
Vulnerability: GSD-2022-1000755
Summary: mm/filemap: Fix handling of THPs in generic_file_buffered_read()
Published: 2022-03-18T00:15:37.372478Z

mm/filemap: Fix handling of THPs in generic_file_buffered_read()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit ace802caf3de0f31792fcf654e7df4a294aab950, it was introduced in version v5.12 by commit cbd59c48ae2bcadc4a7599c29cf32fd3f9b78251. For more details please see the references link.
Vulnerability: GSD-2022-1002292
Summary: ARM: davinci: da850-evm: Avoid NULL pointer dereference
Published: 2022-04-24T22:30:52.322696Z

ARM: davinci: da850-evm: Avoid NULL pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.239 by commit c64e2ed5cc376e137e572babfd2edc38b2cfb61b, it was introduced in version v2.6.33 by commit bae105879f2f2404155da6f50b3636193d228a62. For more details please see the references link.
Vulnerability: GSD-2021-1001238
Summary: usb: max-3421: Prevent corruption of freed memory
Published: 2021-08-03T01:45:51.362547Z

usb: max-3421: Prevent corruption of freed memory

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.54 by commit 7af54a4e221e5619a87714567e2258445dc35435, it was introduced in version v3.16 by commit 2d53139f31626bad6f8983d8e519ddde2cbba921. For more details please see the references link.
Vulnerability: GSD-2021-1000700
Summary: btrfs: do not BUG_ON in link_to_fixup_dir
Published: 2021-06-04T20:05:26.350088Z

btrfs: do not BUG_ON in link_to_fixup_dir

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.271 by commit 76bfd8ac20bebeae599452a03dfc5724c0475dcf, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1001812
Summary: efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()
Published: 2021-10-28T13:50:14.187748Z

efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.213 by commit 853985927c5629bbe43e3f1abb9a5c673b86bd61. For more details please see the references link.
Vulnerability: GSD-2022-1001797
Summary: selinux: allow FIOCLEX and FIONCLEX with policy capability
Published: 2022-04-24T21:42:50.051322Z

selinux: allow FIOCLEX and FIONCLEX with policy capability

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 55d192691b4b7063166e7feafbe44db24dbe205c. For more details please see the references link.
Vulnerability: GSD-2022-1000885
Summary: RDMA/ib_srp: Fix a deadlock
Published: 2022-03-18T00:27:56.066258Z

RDMA/ib_srp: Fix a deadlock

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.182 by commit 901206f71e6ad2b2e7accefc5199a438d173c25f, it was introduced in version v3.8 by commit ef6c49d87c3418c442a22e55e3ce2f91b163d69e. For more details please see the references link.
Vulnerability: GSD-2021-1002697
Summary: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
Published: 2021-12-27T05:37:26.470982Z

net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.88 by commit 12512bc8f25b8ba9795dfbae0e9ca57ff13fd542, it was introduced in version v5.8 by commit d8355240cf8fb8b9e002b5c8458578435cea85c2. For more details please see the references link.
Vulnerability: GSD-2021-1000350
Summary: vsock/virtio: free queued packets when closing socket
Published: 2021-05-31T15:39:45.041586Z

vsock/virtio: free queued packets when closing socket

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit b605673b523fe33abeafb2136759bcbc9c1e6ebf, it was introduced in version v5.2 by commit ac03046ece2b158ebd204dfc4896fd9f39f0e6c8. For more details please see the references link.
Vulnerability: GSD-2022-1002441
Summary: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
Published: 2022-04-24T22:47:57.638931Z

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit b2b65c9013dc28836d82e25d0f0c94d794a14aba, it was introduced in version v3.16 by commit 00a7bb81c20f3e81711e28e0f6c08cee8fd18514. For more details please see the references link.
Vulnerability: GSD-2021-1001111
Summary: net: caif: fix memory leak in ldisc_open
Published: 2021-07-08T01:57:03.234151Z

net: caif: fix memory leak in ldisc_open

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.196 by commit 568ce04020f5fca707d67d36db2d551966212cfa. For more details please see the references link.
Vulnerability: GSD-2022-1000186
Summary: ceph: properly put ceph_string reference after async create attempt
Published: 2022-02-18T21:52:23.957456Z

ceph: properly put ceph_string reference after async create attempt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit e7be12ca7d3947765b0d7c1c7e0537e748da993a, it was introduced in version v5.7 by commit 9a8d03ca2e2c334d08ee91a3e07dcce31a02fdc6. For more details please see the references link.
Vulnerability: GSD-2022-1002011
Summary: PCI: endpoint: Fix alignment fault error in copy tests
Published: 2022-04-24T22:02:48.222835Z

PCI: endpoint: Fix alignment fault error in copy tests

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit b02a1a65023f46b970486be38f7d209761084a7c. For more details please see the references link.
Vulnerability: GSD-2021-1001541
Summary: md: fix a lock order reversal in md_alloc
Published: 2021-10-19T16:22:55.730145Z

md: fix a lock order reversal in md_alloc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.249 by commit 9252a5f39df073d364d72662cb8a45dc2f0da328, it was introduced in version v3.0 by commit b0140891a8cea36469f58d23859e599b1122bd37. For more details please see the references link.
Vulnerability: GSD-2021-1001054
Summary: mac80211: fix skb length check in ieee80211_scan_rx()
Published: 2021-06-30T00:36:35.977798Z

mac80211: fix skb length check in ieee80211_scan_rx()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit d1b949c70206178b12027f66edc088d40375b5cb, it was introduced in version v5.10 by commit cd418ba63f0c2f6157f35a41c9accc6ecb52590a. For more details please see the references link.
Vulnerability: GSD-2022-1002504
Summary: ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
Published: 2022-04-24T22:55:34.199142Z

ASoC: mxs: Fix error handling in mxs_sgtl5000_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit f16ad2c0e22687f80e5981c67374023f51c204b9, it was introduced in version v3.5 by commit e968194b45c4e8077dada75c5bae5660b37628fe. For more details please see the references link.
Vulnerability: GSD-2022-1000539
Summary: scsi: pm8001: Fix use-after-free for aborted TMF sas_task
Published: 2022-02-27T03:20:57.343923Z

scsi: pm8001: Fix use-after-free for aborted TMF sas_task

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.11 by commit 510b21442c3a2e3ecc071ba3e666b320e7acdd61. For more details please see the references link.
Vulnerability: GSD-2021-1001404
Summary: net: fix uninit-value in caif_seqpkt_sendmsg
Published: 2021-08-03T02:30:56.420258Z

net: fix uninit-value in caif_seqpkt_sendmsg

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.241 by commit ffe31dd70b70a40cd6b21b78c1713a23e021843a, it was introduced in version v2.6.35 by commit bece7b2398d073d11b2e352405a3ecd3a1e39c60. For more details please see the references link.
Vulnerability: GSD-2022-1000493
Summary: scsi: qedf: Add stag_work to all the vports
Published: 2022-02-27T03:14:56.298871Z

scsi: qedf: Add stag_work to all the vports

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 0be556512cd0dfcf5ec1a140d9f42d88221a5d4e. For more details please see the references link.
Vulnerability: GSD-2022-1002154
Summary: dm integrity: fix memory corruption when tag_size is less than digest size
Published: 2022-04-24T22:16:36.943498Z

dm integrity: fix memory corruption when tag_size is less than digest size

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.190 by commit 7f84c937222944c03f4615ca4742df6bed0e5adf. For more details please see the references link.
Vulnerability: GSD-2022-1000169
Summary: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
Published: 2022-02-18T21:50:29.367729Z

ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.178 by commit fd9a23319f16e7031f0d8c98eed6e093c2927229. For more details please see the references link.
Vulnerability: GSD-2021-1000645
Summary: NFC: nci: fix memory leak in nci_allocate_device
Published: 2021-06-04T19:53:48.911688Z

NFC: nci: fix memory leak in nci_allocate_device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.123 by commit af2a4426baf71163c0c354580ae98c7888a9aba7, it was introduced in version v4.0 by commit 11f54f228643d0248ec00ce8c9fb8d872f87e7b8. For more details please see the references link.
Vulnerability: GSD-2021-1002678
Summary: sit: do not call ipip6_dev_free() from sit_init_net()
Published: 2021-12-27T05:36:23.035010Z

sit: do not call ipip6_dev_free() from sit_init_net()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.168 by commit ad0ed314d6167b212939e3839428ba0c8bb16adb, it was introduced in version v4.12 by commit cf124db566e6b036b8bcbe8decbed740bdfac8c6. For more details please see the references link.
Vulnerability: GSD-2021-1001957
Summary: can: peak_pci: peak_pci_remove(): fix UAF
Published: 2021-11-14T15:13:24.013969Z

can: peak_pci: peak_pci_remove(): fix UAF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.253 by commit 34914971bb3244db4ce2be44e9438a9b30c56250, it was introduced in version v3.4 by commit e6d9c80b7ca1504411ad6d7acdb8683e4ae1c9cd. For more details please see the references link.
Vulnerability: GSD-2022-1001328
Summary: uaccess: fix integer overflow on access_ok()
Published: 2022-04-24T21:04:59.151958Z

uaccess: fix integer overflow on access_ok()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.1 by commit a1ad747fc1a0e06d1bf26b996ee8a56b5c8d02d8, it was introduced in version v4.20 by commit da551281947cb2c0ab6e0045529a706af5d79584. For more details please see the references link.
Vulnerability: GSD-2021-1002382
Summary: ALSA: pcm: oss: Fix negative period/buffer sizes
Published: 2021-12-19T19:34:48.657996Z

ALSA: pcm: oss: Fix negative period/buffer sizes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.293 by commit 502e1146873d870f87da3b8f93d6bf2de5f38d0c. For more details please see the references link.
Vulnerability: GSD-2021-1000215
Summary: xprtrdma: Fix cwnd update ordering
Published: 2021-05-31T15:39:45.041586Z

xprtrdma: Fix cwnd update ordering

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 19b5fa9489b5706bc878c3a522a7f771079e2fa0, it was introduced in version v5.5 by commit 2ae50ad68cd79224198b525f7bd645c9da98b6ff. For more details please see the references link.
Vulnerability: GSD-2021-1002228
Summary: ALSA: gus: fix null pointer dereference on pointer block
Published: 2021-11-29T02:34:20.227452Z

ALSA: gus: fix null pointer dereference on pointer block

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.291 by commit cb09c760c201f82df83babc92a5ffea0a01807fc. For more details please see the references link.
Vulnerability: GSD-2022-1001282
Summary: drm/i915/gem: add missing boundary check in vm_access
Published: 2022-04-24T21:01:05.989937Z

drm/i915/gem: add missing boundary check in vm_access

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 8f0ebea8f6e8c474264ed97d7a64c9c09ed4f5aa, it was introduced in version v5.8 by commit 9f909e215fea0652023b9ed09d3d7bfe10386423. For more details please see the references link.
Vulnerability: GSD-2022-1001778
Summary: KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU
Published: 2022-04-24T21:41:52.034901Z

KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit af47248407c0c5ae52a752af1ab5ce5b0db91502, it was introduced in version v5.13 by commit b7cccd397f310739fb85383033e95580f99927e0. For more details please see the references link.
Vulnerability: GSD-2022-1001056
Summary: scsi: pm8001: Fix task leak in pm8001_send_abort_all()
Published: 2022-04-24T20:42:45.327587Z

scsi: pm8001: Fix task leak in pm8001_send_abort_all()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 34c79d16ee69cb53288c202bb1ab0ba0130d9674. For more details please see the references link.
Vulnerability: GSD-2021-1002506
Summary: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
Published: 2021-12-19T19:40:23.381102Z

nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.85 by commit 83ea620a1be840bf05089a5061fb8323ca42f38c, it was introduced in version v3.12 by commit ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95. For more details please see the references link.
Vulnerability: GSD-2021-1000491
Summary: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry
Published: 2021-05-31T23:45:20.564402Z

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.7 by commit 807fa14536b26803b858da878b643be72952a097, it was introduced in version v5.6 by commit c5b2cbdbdac563f46ecd5e187253ab1abbd6fc04. For more details please see the references link.
Vulnerability: GSD-2022-1001406
Summary: drm/amdgpu: Fix recursive locking warning
Published: 2022-04-24T21:10:46.352601Z

drm/amdgpu: Fix recursive locking warning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit c8c93088a51c9b27f311296a81769bd835d30f2e. For more details please see the references link.
Vulnerability: GSD-2021-1002156
Summary: NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
Published: 2021-11-14T15:22:29.018836Z

NFC: digital: fix possible memory leak in digital_in_send_sdd_req()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 291c932fc3692e4d211a445ba8aa35663831bac7, it was introduced in version v3.13 by commit 2c66daecc4092e6049673c281b2e6f0d5e59a94c. For more details please see the references link.
Vulnerability: GSD-2022-1001955
Summary: scsi: target: tcmu: Fix possible page UAF
Published: 2022-04-24T21:57:49.562730Z

scsi: target: tcmu: Fix possible page UAF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.112 by commit aec36b98a1bbaa84bfd8299a306e4c12314af626. For more details please see the references link.
Vulnerability: GSD-2022-1000647
Summary: af_packet: fix data-race in packet_setsockopt / packet_setsockopt
Published: 2022-02-27T03:35:49.813477Z

af_packet: fix data-race in packet_setsockopt / packet_setsockopt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.6 by commit c074e2c8d67af5f0b1fb953d4ff960a8dc854eab, it was introduced in version v4.3 by commit 47dceb8ecdc1c3ad1818dfea3d659a05b74c3fc2. For more details please see the references link.
Vulnerability: GSD-2022-1002380
Summary: llc: only change llc->dev when bind() succeeds
Published: 2022-04-24T22:41:00.313966Z

llc: only change llc->dev when bind() succeeds

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.237 by commit c106f9aa6cd8913af9188ad361899ae696b5de37, it was introduced in version v4.19.237 by commit d14193111c436fc5de33206c67c7afd45c730099. For more details please see the references link.
Vulnerability: GSD-2021-1001280
Summary: misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge
Published: 2021-08-03T01:56:27.052110Z

misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.52 by commit 58f69684ba03e5b0e0a3ae844a845280c0f06309. For more details please see the references link.
Vulnerability: GSD-2022-1000217
Summary: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
Published: 2022-02-18T21:56:41.556776Z

ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.99 by commit 6877f87579ed830f9ff6d478539074f035d04bfb. For more details please see the references link.
Vulnerability: GSD-2021-1000868
Summary: isdn: mISDN: netjet: Fix crash in nj_probe:
Published: 2021-06-30T00:02:30.992096Z

isdn: mISDN: netjet: Fix crash in nj_probe:

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.195 by commit bf78e25bd3f487208e042c67c8a31706c2dba265. For more details please see the references link.
Vulnerability: GSD-2021-1000887
Summary: bonding: init notify_work earlier to avoid uninitialized use
Published: 2021-06-30T00:04:31.672502Z

bonding: init notify_work earlier to avoid uninitialized use

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.126 by commit e0172831c61a7684ff63160c22a627747e6c5268. For more details please see the references link.
Vulnerability: GSD-2021-1001795
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-10-28T13:49:14.324549Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.252 by commit b7b023e6ff567e991c31cd425b0e1d16779c938b, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.
Vulnerability: GSD-2022-1001810
Summary: kgdboc: fix return value of __setup handler
Published: 2022-04-24T21:43:51.959682Z

kgdboc: fix return value of __setup handler

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit a885e17cf5f2dd6606abe825a001fd09a5c29c2e, it was introduced in version v4.20 by commit 1bd54d851f50dea6af30c3e6ff4f3e9aab5558f9. For more details please see the references link.
Vulnerability: GSD-2022-1000702
Summary: net: fix up skbs delta_truesize in UDP GRO frag_list
Published: 2022-03-18T00:11:00.432914Z

net: fix up skbs delta_truesize in UDP GRO frag_list

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit 334b4736a22bfd482c71bfc13375248362b08768, it was introduced in version v5.11 by commit 53475c5dd856212e91538a9501162e821cc1f791. For more details please see the references link.
Vulnerability: GSD-2022-1000352
Summary: nvme: fix a possible use-after-free in controller reset during load
Published: 2022-02-27T02:54:45.586460Z

nvme: fix a possible use-after-free in controller reset during load

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.181 by commit 70356b756a58704e5c8818cb09da5854af87e765. For more details please see the references link.
Vulnerability: GSD-2021-1002443
Summary: net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()
Published: 2021-12-19T19:37:30.567229Z

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.164 by commit 57247f7035393c12a5819c589d52b6ee3edde8aa. For more details please see the references link.
Vulnerability: GSD-2021-1000184
Summary: bpf: Fix masking negation logic upon negative dst register
Published: 2021-05-31T15:39:45.031586Z

bpf: Fix masking negation logic upon negative dst register

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.117 by commit 53e0db429b37a32b8fc706d0d90eb4583ad13848, it was introduced in version v5.0 by commit 979d63d50c0c0f7bc537bf821e056cc9fe5abd38. For more details please see the references link.
Vulnerability: GSD-2022-1001113
Summary: wireguard: socket: free skb in send6 when ipv6 is disabled
Published: 2022-04-24T20:46:25.490157Z

wireguard: socket: free skb in send6 when ipv6 is disabled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 0b19bcb753dbfb74710d12bb2761ec5ed706c726, it was introduced in version v5.6 by commit e7096c131e5161fa3b8e52a650d7719d2857adfd. For more details please see the references link.
Vulnerability: GSD-2021-1002013
Summary: isdn: mISDN: Fix sleeping function called from invalid context
Published: 2021-11-14T15:15:55.557315Z

isdn: mISDN: Fix sleeping function called from invalid context

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit 4054b869dc263228d30a4755800b78f0f2ba0c89. For more details please see the references link.
Vulnerability: GSD-2022-1001543
Summary: drm/bridge: anx7625: Fix overflow issue on reading EDID
Published: 2022-04-24T21:21:58.152955Z

drm/bridge: anx7625: Fix overflow issue on reading EDID

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit f0d5d938d51af4eb08d9d8684fd9903425a0a87d, it was introduced in version v5.11 by commit 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730. For more details please see the references link.
Vulnerability: GSD-2021-1001516
Summary: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
Published: 2021-10-19T16:21:46.097860Z

cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.285 by commit 1ba2e770481905b06f5684d6cbd0817a1432da2b, it was introduced in version v4.9.285 by commit cb4a53ba37532c861a5f3f22803391018a41849a. For more details please see the references link.
Vulnerability: GSD-2022-1000581
Summary: RDMA/cma: Use correct address when leaving multicast group
Published: 2022-02-27T03:27:06.973956Z

RDMA/cma: Use correct address when leaving multicast group

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit 7715682f357db296cbc70faa945994f75bd06357, it was introduced in version v5.10 by commit b5de0c60cc30c2a3513c7188c73f3f29acc29234. For more details please see the references link.
Vulnerability: GSD-2022-1002046
Summary: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
Published: 2022-04-24T22:05:42.389182Z

media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit bafec1a6ba4b187a7fcdcfce0faebdc623d4ef8e. For more details please see the references link.