TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1001621
Summary: pinctrl: samsung: drop pin banks references on error paths
Published: 2022-04-24T21:29:33.960520Z

pinctrl: samsung: drop pin banks references on error paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 04ea05612ef74896ee3371d4ebe2c3747384d5f0, it was introduced in version v3.8 by commit ab663789d69760d2735402f66501f20b60312a3d. For more details please see the references link.
Vulnerability: GSD-2022-1001334
Summary: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
Published: 2022-04-24T21:05:26.782837Z

drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.1 by commit abc9ad36df16e27ac1c665085157f1a082d39bac, it was introduced in version v5.13 by commit 377f8331d0565e6f71ba081c894029a92d0c7e77. For more details please see the references link.
Vulnerability: GSD-2021-1002664
Summary: xen/netfront: harden netfront against event channel storms
Published: 2021-12-27T05:35:09.247173Z

xen/netfront: harden netfront against event channel storms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.222 by commit 3559ca594f15fcd23ed10c0056d40d71e5dab8e5. For more details please see the references link.
Vulnerability: GSD-2021-1000659
Summary: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
Published: 2021-06-04T19:56:29.739310Z

NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit 40f139a6d50c232c0d1fd1c5e65a845c62db0ede, it was introduced in version v4.0 by commit a7d42ddb3099727f58366fa006f850a219cce6c8. For more details please see the references link.
Vulnerability: GSD-2022-1000876
Summary: xfrm: fix MTU regression
Published: 2022-03-18T00:27:01.047688Z

xfrm: fix MTU regression

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.183 by commit ac858e4462bdc5c589b0c062420c09dab3e579cd, it was introduced in version v4.15 by commit 749439bfac6e1a2932c582e2699f91d329658196. For more details please see the references link.
Vulnerability: GSD-2022-1001764
Summary: KVM: SVM: fix panic on out-of-bounds guest IRQ
Published: 2022-04-24T21:41:00.816613Z

KVM: SVM: fix panic on out-of-bounds guest IRQ

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 3fa2d747960521a646fc1aad7aea82e95e139a68. For more details please see the references link.
Vulnerability: GSD-2021-1002234
Summary: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
Published: 2021-11-29T02:34:34.520898Z

cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.256 by commit 4e458abbb4a523f1413bfe15c079cf4e24c15b21, it was introduced in version v3.6 by commit ac800140c20e7ae51117e71289065bedd4930fc2. For more details please see the references link.
Vulnerability: GSD-2021-1000209
Summary: netfilter: nftables: Fix a memleak from userdata error path in new objects
Published: 2021-05-31T15:39:45.041586Z

netfilter: nftables: Fix a memleak from userdata error path in new objects

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit dd3bebf515f336214a91994348a2b86b9a1d3d7f, it was introduced in version v5.10 by commit b131c96496b369c7b14125e7c50e89ac7cec8051. For more details please see the references link.
Vulnerability: GSD-2022-1000525
Summary: phy: ti: Fix missing sentinel for clk_div_table
Published: 2022-02-27T03:19:22.191132Z

phy: ti: Fix missing sentinel for clk_div_table

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 5b0c9569135a37348c1267c81e8b0274b21a86ed, it was introduced in version v5.6 by commit 091876cc355d6739e393efa4b3d07f451a6a035c. For more details please see the references link.
Vulnerability: GSD-2021-1001048
Summary: HID: usbhid: fix info leak in hid_submit_ctrl
Published: 2021-06-30T00:36:13.688684Z

HID: usbhid: fix info leak in hid_submit_ctrl

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.12 by commit 21883bff0fd854e07429a773ff18f1e9658f50e8. For more details please see the references link.
Vulnerability: GSD-2022-1000175
Summary: ASoC: max9759: fix underflow in speaker_gain_control_put()
Published: 2022-02-18T21:51:10.604853Z

ASoC: max9759: fix underflow in speaker_gain_control_put()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.178 by commit 71e60c170105d153e34d01766c1e4db26a4b24cc, it was introduced in version v4.17 by commit fa8d915172b8c10ec0734c4021e99e9705023b07. For more details please see the references link.
Vulnerability: GSD-2022-1002148
Summary: llc: only change llc->dev when bind() succeeds
Published: 2022-04-24T22:16:10.912337Z

llc: only change llc->dev when bind() succeeds

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.109 by commit 163960a7de1333514c9352deb7c80c6b9fd9abf2, it was introduced in version v5.10.109 by commit 571df3393f523b59cba87e2f3e80a3a624030f9c. For more details please see the references link.
Vulnerability: GSD-2021-1001418
Summary: memory: fsl_ifc: fix leak of IO mapping on probe failure
Published: 2021-08-03T02:35:13.790710Z

memory: fsl_ifc: fix leak of IO mapping on probe failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 6b3b002de90738e3c85853a682ce7e0fa078d42b, it was introduced in version v3.3 by commit a20cbdeffce247a2b6fb83cd8d22433994068565. For more details please see the references link.
Vulnerability: GSD-2021-1000120
Summary: vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
Published: 2021-05-31T15:39:45.031586Z

vhost-vdpa: fix vm_flags for virtqueue doorbell mapping

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit 940230a5c31e2714722aee04c521a21f484b4df7, it was introduced in version v5.8 by commit ddd89d0a059d8e9740c75a97e0efe9bf07ee51f9. For more details please see the references link.
Vulnerability: GSD-2021-1000570
Summary: iommu/vt-d: Fix sysfs leak in alloc_iommu()
Published: 2021-06-04T19:40:41.667654Z

iommu/vt-d: Fix sysfs leak in alloc_iommu()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit ca466561eef36d1ec657673e3944eb6340bddb5b, it was introduced in version v4.11 by commit 39ab9555c24110671f8dc671311a26e5c985b592. For more details please see the references link.
Vulnerability: GSD-2022-1002261
Summary: ASoC: soc-compress: prevent the potentially use of null pointer
Published: 2022-04-24T22:27:43.032167Z

ASoC: soc-compress: prevent the potentially use of null pointer

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 68a69ad8df959e5211ed4a8e120783b2d352ea74, it was introduced in version v5.4 by commit 467fece8fbc6774a3a3bd0981e1a342fb5022706. For more details please see the references link.
Vulnerability: GSD-2021-1001731
Summary: KVM: SVM: fix missing sev_decommission in sev_receive_start
Published: 2021-10-19T16:33:54.784609Z

KVM: SVM: fix missing sev_decommission in sev_receive_start

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit efd7866e114dcb44f86d151e843f8276b7efbc67, it was introduced in version v5.13 by commit af43cbbf954b50ca97d5e7bb56c2edc6ffd209ef. For more details please see the references link.
Vulnerability: GSD-2021-1000823
Summary: x86/kvm: Disable kvmclock on all CPUs on shutdown
Published: 2021-06-25T00:09:37.581210Z

x86/kvm: Disable kvmclock on all CPUs on shutdown

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit 1df2dc09926f61319116c80ee85701df33577d70, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000989
Summary: net: hamradio: fix memory leak in mkiss_close
Published: 2021-06-30T00:31:40.878430Z

net: hamradio: fix memory leak in mkiss_close

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 290b0b6432e2599021db0b8d6046f756d931c29f, it was introduced in version v2.6.14 by commit 815f62bf742718458ba822a7e1f51f285eb997f2. For more details please see the references link.
Vulnerability: GSD-2021-1001361
Summary: media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
Published: 2021-08-03T02:18:43.918008Z

media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.199 by commit ec731c6ef564ee6fc101fc5d73e3a3a953d09a00, it was introduced in version v2.6.34 by commit dae52d009fc950b5c209260d50fcc000f5becd3c. For more details please see the references link.
Vulnerability: GSD-2021-1001674
Summary: staging: greybus: uart: fix tty use after free
Published: 2021-10-19T16:31:14.218182Z

staging: greybus: uart: fix tty use after free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.70 by commit b9e697e60ce9890e9258a73eb061288e7d68e5e6, it was introduced in version v4.9 by commit a18e15175708d39abbe9746ddc3479466b7800c3. For more details please see the references link.
Vulnerability: GSD-2021-1000966
Summary: NFS: Fix use-after-free in nfs4_init_client()
Published: 2021-06-30T00:29:46.043129Z

NFS: Fix use-after-free in nfs4_init_client()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.44 by commit c3b6cf64dfe4ef96e7341508d50d6998da7062c7, it was introduced in version v4.13 by commit 8dcbec6d20eb881ba368d0aebc3a8a678aebb1da. For more details please see the references link.
Vulnerability: GSD-2022-1002324
Summary: KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
Published: 2022-04-24T22:34:25.166363Z

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 7f32e8f5fd68216a271d8d5ebb57d0eca88e1bb7, it was introduced in version v4.2 by commit ca724305a2b02abcbecbf22577536fc8e965ab4f. For more details please see the references link.
Vulnerability: GSD-2022-1000319
Summary: veth: fix races around rq->rx_notify_masked
Published: 2022-02-27T02:50:18.294959Z

veth: fix races around rq->rx_notify_masked

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.230 by commit 8f0ea3777590c16222d4251a49e31dd376ff5ac1, it was introduced in version v4.19 by commit 948d4f214fde43743c57aae0c708bff44f6345f2. For more details please see the references link.
Vulnerability: GSD-2021-1001224
Summary: mwifiex: bring down link before deleting interface
Published: 2021-08-03T01:41:04.092376Z

mwifiex: bring down link before deleting interface

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit 35af69c7c0490fdccfc159c6a87e4d1dc070838a, it was introduced in version v5.12 by commit a05829a7222e9d10c416dd2dbbf3929fe6646b89. For more details please see the references link.
Vulnerability: GSD-2022-1000749
Summary: ice: fix concurrent reset and removal of VFs
Published: 2022-03-18T00:15:13.042114Z

ice: fix concurrent reset and removal of VFs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit 2a3e61de89bab6696aa28b70030eb119968c5586, it was introduced in version v5.14 by commit c503e63200c679e362afca7aca9d3dc63a0f45ed. For more details please see the references link.
Vulnerability: GSD-2021-1000065
Summary: sfc: farch: fix TX queue lookup in TX flush done handling
Published: 2021-05-31T15:39:45.031586Z

sfc: farch: fix TX queue lookup in TX flush done handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit 98d91180748986bfb6dfb3e72765f3225719a647, it was introduced in version v5.10 by commit 12804793b17c0e19115a90d98f2f3df0cb79e233. For more details please see the references link.
Vulnerability: GSD-2021-1002058
Summary: ocfs2: fix race between searching chunks and release journal_head from buffer_head
Published: 2021-11-14T15:17:54.589274Z

ocfs2: fix race between searching chunks and release journal_head from buffer_head

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.77 by commit 5043fbd294f5909a080ade0f04b70a4da9e122b7. For more details please see the references link.
Vulnerability: GSD-2022-1001508
Summary: net: bcmgenet: Use stronger register read/writes to assure ordering
Published: 2022-04-24T21:18:33.557193Z

net: bcmgenet: Use stronger register read/writes to assure ordering

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 1d717816189fd68f9e089cf89ed1f7327d2c2e71, it was introduced in version v4.14 by commit 69d2ea9c798983c4a7157278ec84ff969d1cd8e8. For more details please see the references link.
Vulnerability: GSD-2021-1000435
Summary: bus: qcom: Put child node before return
Published: 2021-05-31T15:39:45.041586Z

bus: qcom: Put child node before return

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.119 by commit 3a76ec28824c01b57aa1f0927841d75e4f167cb8, it was introduced in version v4.9 by commit 335a127548081322bd2b294d715418648912f20c. For more details please see the references link.
Vulnerability: GSD-2021-1002408
Summary: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
Published: 2021-12-19T19:35:59.394862Z

staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.219 by commit bca19bb2dc2d89ce60c4a4a6e59609d4cf2e13ef, it was introduced in version v3.2 by commit 66898177e7e5486dc77a4ba742efa4e2e9e900a4. For more details please see the references link.
Vulnerability: GSD-2022-1001158
Summary: bfq: fix use-after-free in bfq_dispatch_request
Published: 2022-04-24T20:49:26.748775Z

bfq: fix use-after-free in bfq_dispatch_request

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 40b4ba0030e0b02cbacd424ebb9f4c8b0976c786. For more details please see the references link.
Vulnerability: GSD-2022-1001637
Summary: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
Published: 2022-04-24T21:30:36.932846Z

drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.18 by commit ac92b474eeeed75b8660374ba1d129a121c09da8, it was introduced in version v5.13 by commit 377f8331d0565e6f71ba081c894029a92d0c7e77. For more details please see the references link.
Vulnerability: GSD-2022-1000925
Summary: cifs: fix double free race when mount fails in cifs_get_root()
Published: 2022-03-18T00:32:38.107703Z

cifs: fix double free race when mount fails in cifs_get_root()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.270 by commit 147a0e71ccf96df9fc8c2ac500829d8e423ef02c. For more details please see the references link.
Vulnerability: GSD-2021-1002367
Summary: iio: mma8452: Fix trigger reference couting
Published: 2021-12-19T19:34:11.375369Z

iio: mma8452: Fix trigger reference couting

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.295 by commit 094d513b78b1714113bc016684b8142382e071ba, it was introduced in version v4.2 by commit ae6d9ce05691bf79694074db7c7da980080548af. For more details please see the references link.
Vulnerability: GSD-2022-1001267
Summary: soc: qcom: rpmpd: Check for null return of devm_kcalloc
Published: 2022-04-24T20:59:37.907669Z

soc: qcom: rpmpd: Check for null return of devm_kcalloc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 31b5124d742969ea8bf7a1360596f548ca23e770, it was introduced in version v5.1 by commit bbe3a66c3f5a65fb3d702351bac2a6033944d389. For more details please see the references link.
Vulnerability: GSD-2021-1002737
Summary: dm btree remove: fix use after free in rebalance_children()
Published: 2021-12-27T05:45:40.661178Z

dm btree remove: fix use after free in rebalance_children()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit 607beb420b3fe23b948a9bf447d993521a02fbbb. For more details please see the references link.
Vulnerability: GSD-2021-1001818
Summary: audit: fix possible null-pointer dereference in audit_filter_rules
Published: 2021-10-28T13:50:32.123040Z

audit: fix possible null-pointer dereference in audit_filter_rules

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit d6f451f1f60c58d73038c7c3177066f8f084e2a2, it was introduced in version v5.3 by commit bf361231c295d92a28ca283ea713f56e93e55796. For more details please see the references link.
Vulnerability: GSD-2022-1000026
Summary: i2c: validate user data in compat ioctl
Published: 2022-01-10T19:50:42.959386Z

i2c: validate user data in compat ioctl

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.224 by commit 407c8708fb1bf2d4afc5337ef50635cf540c364b, it was introduced in version v4.15 by commit 7d5cb45655f2e9e37ef75d18f50c0072ef14a38b. For more details please see the references link.
Vulnerability: GSD-2022-1000476
Summary: lockdep: Correct lock_classes index mapping
Published: 2022-02-27T03:12:21.936195Z

lockdep: Correct lock_classes index mapping

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit 5dcc365697340599b7ef63a9352fcea890f0e78b, it was introduced in version v5.10 by commit f611e8cf98ec908b9c2c0da6064a660fc6022487. For more details please see the references link.
Vulnerability: GSD-2022-1000499
Summary: arm64: errata: Add detection for TRBE trace data corruption
Published: 2022-02-27T03:15:36.585048Z

arm64: errata: Add detection for TRBE trace data corruption

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit aff260ffbaa3c45df62e56ec7e543698039ae237. For more details please see the references link.
Vulnerability: GSD-2022-1000163
Summary: net: amd-xgbe: Fix skb data length underflow
Published: 2022-02-18T21:49:03.802153Z

net: amd-xgbe: Fix skb data length underflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.177 by commit 9892742f035f7aa7dcd2bb0750effa486db89576, it was introduced in version v4.11 by commit 622c36f143fc9566ba49d7cec994c2da1182d9e2. For more details please see the references link.
Vulnerability: GSD-2022-1000533
Summary: iommu: Fix potential use-after-free during probe
Published: 2022-02-27T03:20:16.643911Z

iommu: Fix potential use-after-free during probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit f74fc4b5bd533ea3d30ce47cccb8ef8d21fda85a. For more details please see the references link.
Vulnerability: GSD-2022-1001288
Summary: samples/landlock: Fix path_list memory leak
Published: 2022-04-24T21:01:31.995005Z

samples/landlock: Fix path_list memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 017196730299ccd6eed24bbfabed8af4ffd81530. For more details please see the references link.
Vulnerability: GSD-2021-1002222
Summary: scsi: advansys: Fix kernel pointer leak
Published: 2021-11-29T02:34:06.086560Z

scsi: advansys: Fix kernel pointer leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.293 by commit 06d7d12efb5c62db9dea15141ae2b322c2719515. For more details please see the references link.
Vulnerability: GSD-2022-1001772
Summary: scsi: qla2xxx: Fix warning message due to adisc being flushed
Published: 2022-04-24T21:41:32.048598Z

scsi: qla2xxx: Fix warning message due to adisc being flushed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 7a3457777c4f700c64836e78dc71e6ce459f62b8. For more details please see the references link.
Vulnerability: GSD-2022-1000860
Summary: openvswitch: Fix setting ipv6 fields causing hw csum failure
Published: 2022-03-18T00:25:25.876619Z

openvswitch: Fix setting ipv6 fields causing hw csum failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.103 by commit 1df9d552fe84bb7d7a6a361b5bb8a9273f9f799d, it was introduced in version v3.8 by commit 3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b. For more details please see the references link.
Vulnerability: GSD-2021-1002672
Summary: sch_cake: do not call cake_destroy() from cake_init()
Published: 2021-12-27T05:36:05.285742Z

sch_cake: do not call cake_destroy() from cake_init()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.168 by commit 0d80462fbdcafd536dcad7569e65d3d14a7e9f2f, it was introduced in version v4.19 by commit 046f6fd5daefac7f5abdafb436b30f63bc7c602b. For more details please see the references link.
Vulnerability: GSD-2021-1002388
Summary: ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
Published: 2021-12-19T19:35:09.954428Z

ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit 25bd60b9f6e820e317c0c4fb6a2451a748d6ef58, it was introduced in version v3.8 by commit 9c4566a117a6fe404a0e49b27ac71b631945a70f. For more details please see the references link.
Vulnerability: GSD-2022-1001322
Summary: iio: accel: mma8452: use the correct logic to get mma8452_data
Published: 2022-04-24T21:04:30.272937Z

iio: accel: mma8452: use the correct logic to get mma8452_data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit d2d9ebdbff79d87d27652578e6d1638ad3b5f3bf, it was introduced in version v4.4 by commit c3cdd6e48e35b7a02f28e301ef30a87ff3cd6527. For more details please see the references link.
Vulnerability: GSD-2021-1001377
Summary: net: qcom/emac: fix UAF in emac_remove
Published: 2021-08-03T02:23:46.473229Z

net: qcom/emac: fix UAF in emac_remove

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.199 by commit 11e9d163d631198bb3eb41a677a61b499516c0f7, it was introduced in version v4.9 by commit 54e19bc74f3380d414681762ceed9f7245bc6a6e. For more details please see the references link.
Vulnerability: GSD-2022-1001908
Summary: mm/kmemleak: reset tag when compare object pointer
Published: 2022-04-24T21:53:45.211150Z

mm/kmemleak: reset tag when compare object pointer

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 7d3bd683e0849f0ec52fefa8070734dedc3b33a1. For more details please see the references link.
Vulnerability: GSD-2021-1002808
Summary: platform/x86: intel_pmc_core: fix memleak on registration failure
Published: 2021-12-30T02:44:21.371312Z

platform/x86: intel_pmc_core: fix memleak on registration failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.89 by commit 7a37f2e370699e2feca3dca6c8178c71ceee7e8a, it was introduced in version v5.9 by commit 938835aa903ae19ad62805134f79bbcf20fc3bea. For more details please see the references link.
Vulnerability: GSD-2021-1000835
Summary: net/nfc/rawsock.c: fix a permission check bug
Published: 2021-06-30T00:00:20.832825Z

net/nfc/rawsock.c: fix a permission check bug

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.273 by commit d6a21a3fb03300fbaa9fc3ed99f8b0962ce28362. For more details please see the references link.
Vulnerability: GSD-2021-1001727
Summary: RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
Published: 2021-10-19T16:33:44.543635Z

RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit e56a5146ef8cb51cd7c9e748267dce7564448a35, it was introduced in version v5.11 by commit c80a0c52d85c49a910d0dc0e342e8d8898677dc0. For more details please see the references link.
Vulnerability: GSD-2022-1002277
Summary: NFSD: prevent underflow in nfssvc_decode_writeargs()
Published: 2022-04-24T22:29:29.732502Z

NFSD: prevent underflow in nfssvc_decode_writeargs()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 85259340fc9bd54e3d567b41b881ecb4d0055da1. For more details please see the references link.
Vulnerability: GSD-2021-1000566
Summary: misc/uss720: fix memory leak in uss720_probe
Published: 2021-06-04T19:40:08.343292Z

misc/uss720: fix memory leak in uss720_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit a3c3face38cb49932c62adcc1289914f1c742096, it was introduced in version v2.6.14 by commit 0f36163d3abefbda1b21a330b3fdf3c2dc076d94. For more details please see the references link.
Vulnerability: GSD-2021-1000136
Summary: media: staging/intel-ipu3: Fix memory leak in imu_fmt
Published: 2021-05-31T15:39:45.031586Z

media: staging/intel-ipu3: Fix memory leak in imu_fmt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.36 by commit 517f6f570566a863c2422b843c8b7d099474f6a9, it was introduced in version v5.2 by commit 6d5f26f2e045f2377b524516194657c00efbbce8. For more details please see the references link.
Vulnerability: GSD-2021-1000423
Summary: RDMA/qedr: Fix error return code in qedr_iw_connect()
Published: 2021-05-31T15:39:45.041586Z

RDMA/qedr: Fix error return code in qedr_iw_connect()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.119 by commit 53656a2a01834e3d90fb2813ae5c82febcb96218, it was introduced in version v5.4.45 by commit 8a69220b659c31ccd481538193220d732814b324. For more details please see the references link.
Vulnerability: GSD-2021-1000589
Summary: net: fujitsu: fix potential null-ptr-deref
Published: 2021-06-04T19:43:26.108045Z

net: fujitsu: fix potential null-ptr-deref

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit 71723a796ab7881f491d663c6cd94b29be5fba50, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000073
Summary: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free
Published: 2021-05-31T15:39:45.031586Z

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit e2da98788369bfba1138bada72765c47989a4338, it was introduced in version v5.7 by commit ef67963dac255b293e19815ea3d440567be4626f. For more details please see the references link.
Vulnerability: GSD-2021-1001232
Summary: atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
Published: 2021-08-03T01:43:50.117777Z

atm: nicstar: Fix possible use-after-free in nicstar_cleanup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit 5b991df8881088448cb223e769e37cab8dd40706. For more details please see the references link.
Vulnerability: GSD-2022-1002298
Summary: gpiolib: acpi: use correct format characters
Published: 2022-04-24T22:31:41.312898Z

gpiolib: acpi: use correct format characters

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.239 by commit 38b0bd0f251010073efb3fc37a708ae9079bb332, it was introduced in version v4.14 by commit e40a3ae1f794a35c4af3746291ed6fedc1fa0f6f. For more details please see the references link.
Vulnerability: GSD-2022-1002332
Summary: video: fbdev: sm712fb: Fix crash in smtcfb_write()
Published: 2022-04-24T22:35:22.621724Z

video: fbdev: sm712fb: Fix crash in smtcfb_write()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 1aea36a62f0a0ad67eccc945bac0bd6422ef720f. For more details please see the references link.
Vulnerability: GSD-2021-1001398
Summary: mISDN: fix possible use-after-free in HFC_cleanup()
Published: 2021-08-03T02:28:40.172023Z

mISDN: fix possible use-after-free in HFC_cleanup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 5f2818185da0fe82a932f0856633038b66faf124. For more details please see the references link.
Vulnerability: GSD-2021-1000970
Summary: drm/tegra: sor: Do not leak runtime PM reference
Published: 2021-06-30T00:30:01.228183Z

drm/tegra: sor: Do not leak runtime PM reference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.45 by commit 570b3e4020f2aa7ab6908042e7f3a41ab24ce261. For more details please see the references link.
Vulnerability: GSD-2021-1001662
Summary: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
Published: 2021-10-19T16:30:34.897226Z

blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.70 by commit f58d305887ad7b24986d58e881f6806bb81b2bdf. For more details please see the references link.
Vulnerability: GSD-2022-1000421
Summary: riscv: eliminate unreliable __builtin_frame_address(1)
Published: 2022-02-27T03:04:38.144230Z

riscv: eliminate unreliable __builtin_frame_address(1)

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.24 by commit 71f46f3d1bf29ee5b0a53dc21462125f754491dd, it was introduced in version v5.13 by commit eac2f3059e02382d91f8c887462083841d6ea2a3. For more details please see the references link.
Vulnerability: GSD-2021-1002760
Summary: media: mxl111sf: change mutex_init() location
Published: 2021-12-27T05:49:19.993169Z

media: mxl111sf: change mutex_init() location

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit 8c6fdf62bfe1bc72bfceeaf832ef7499c7ed09ba, it was introduced in version v3.7 by commit 8572211842afc53c8450fb470f2b8d02ba7592e0. For more details please see the references link.
Vulnerability: GSD-2022-1001230
Summary: rtw88: fix use after free in rtw_hw_scan_update_probe_req()
Published: 2022-04-24T20:56:03.572304Z

rtw88: fix use after free in rtw_hw_scan_update_probe_req()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit d9fb80ad781e28b332df8c10b0511e9ca856e55d, it was introduced in version v5.17.2 by commit ec5da191bfcd5fd22b95459b623694f66c1cc10b. For more details please see the references link.
Vulnerability: GSD-2021-1002330
Summary: f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
Published: 2021-11-29T02:39:00.870181Z

f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.5 by commit 680a0c6332c48df1b900b3c535e920e7cc453b7e, it was introduced in version v5.15 by commit 65ddf6564843890a58ee3b18bb46ce67d96333fb. For more details please see the references link.
Vulnerability: GSD-2022-1001660
Summary: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
Published: 2022-04-24T21:32:39.080736Z

net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.35 by commit 62a48383ebe2e159fd68425dd3e16d4c6bd6599a, it was introduced in version v4.8 by commit fb3bbdb859891e6bc27fd1afb3a07319f82c2ee4. For more details please see the references link.
Vulnerability: GSD-2022-1000972
Summary: scsi: lpfc: Fix unload hang after back to back PCI EEH faults
Published: 2022-04-24T20:36:05.426710Z

scsi: lpfc: Fix unload hang after back to back PCI EEH faults

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.4 by commit d0b040c2297c13bd2b00a84556dd6104771dc171. For more details please see the references link.
Vulnerability: GSD-2022-1001375
Summary: drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
Published: 2022-04-24T21:09:03.783957Z

drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 946c33fefcb9dd0c2c820ef9c3fe91a45401d321, it was introduced in version v4.13 by commit 71c37505e7eaa01fa259debad1a71a7ae061039d. For more details please see the references link.
Vulnerability: GSD-2021-1000618
Summary: gve: Add NULL pointer checks when freeing irqs.
Published: 2021-06-04T19:48:28.208456Z

gve: Add NULL pointer checks when freeing irqs.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 821149ee88c206fa37e79c1868cc270518484876, it was introduced in version v5.3 by commit 893ce44df56580fb878ca5af9c4a5fd87567da50. For more details please see the references link.
Vulnerability: GSD-2021-1002625
Summary: xen/netback: don't queue unlimited number of packages
Published: 2021-12-27T05:27:47.741637Z

xen/netback: don't queue unlimited number of packages

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.294 by commit b4226b387436315e7f57465c15335f4f4b5b075d, it was introduced in version v3.18 by commit f48da8b14d04ca87ffcffe68829afd45f926ec6a. For more details please see the references link.
Vulnerability: GSD-2022-1001725
Summary: dm ioctl: prevent potential spectre v1 gadget
Published: 2022-04-24T21:37:51.193946Z

dm ioctl: prevent potential spectre v1 gadget

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 02cc46f397eb3691c56affbd5073e54f7a82ac32. For more details please see the references link.
Vulnerability: GSD-2022-1000837
Summary: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
Published: 2022-03-18T00:22:57.510974Z

thermal: core: Fix TZ_GET_TRIP NULL pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.104 by commit 1c0b51e62a50e9291764d022ed44549e65d6ab9c, it was introduced in version v5.9 by commit 1ce50e7d408ef2bdc8ca021363fd46d1b8bfad00. For more details please see the references link.
Vulnerability: GSD-2021-1000248
Summary: RDMA/rtrs-clt: destroy sysfs after removing session from active list
Published: 2021-05-31T15:39:45.041586Z

RDMA/rtrs-clt: destroy sysfs after removing session from active list

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit d3cca8067d43dfee4a3535c645b55f618708dccb, it was introduced in version v5.8 by commit 6a98d71daea186247005099758af549e6afdd244. For more details please see the references link.
Vulnerability: GSD-2021-1002275
Summary: selinux: fix NULL-pointer dereference when hashtab allocation fails
Published: 2021-11-29T02:36:30.286185Z

selinux: fix NULL-pointer dereference when hashtab allocation fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.82 by commit b17dd53cac769dd13031b0ca34f90cc65e523fab, it was introduced in version v5.8 by commit 03414a49ad5f3c56988c36d2070e402ffa17feaf. For more details please see the references link.
Vulnerability: GSD-2022-1000564
Summary: dmaengine: ptdma: Fix the error handling path in pt_core_init()
Published: 2022-02-27T03:24:28.334676Z

dmaengine: ptdma: Fix the error handling path in pt_core_init()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.11 by commit d7de1e4820c5a42441ff7276174c8c0e63575c1b, it was introduced in version v5.15 by commit fa5d823b16a9442d609617abeec31da8b6afa224. For more details please see the references link.
Vulnerability: GSD-2021-1001009
Summary: usb: dwc3: core: fix kernel panic when do reboot
Published: 2021-06-30T00:33:39.066467Z

usb: dwc3: core: fix kernel panic when do reboot

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 174c27583b3807ac96228c442735b02622d8d1c3, it was introduced in version v5.10.46 by commit e52d43c82f2f6556f0b7a790c19c072c1e99a95f. For more details please see the references link.
Vulnerability: GSD-2022-1002109
Summary: soc: qcom: rpmpd: Check for null return of devm_kcalloc
Published: 2022-04-24T22:12:27.987062Z

soc: qcom: rpmpd: Check for null return of devm_kcalloc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit b5d6eba71997b6d661935d2b15094ac7f9f6132d, it was introduced in version v5.1 by commit bbe3a66c3f5a65fb3d702351bac2a6033944d389. For more details please see the references link.
Vulnerability: GSD-2022-1000134
Summary: af_packet: fix data-race in packet_setsockopt / packet_setsockopt
Published: 2022-02-18T21:44:56.090598Z

af_packet: fix data-race in packet_setsockopt / packet_setsockopt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.228 by commit 1f0c712832907baef27d13721b3ca2e515d39ecf, it was introduced in version v4.3 by commit 47dceb8ecdc1c3ad1818dfea3d659a05b74c3fc2. For more details please see the references link.
Vulnerability: GSD-2021-1001459
Summary: wl1251: Fix possible buffer overflow in wl1251_cmd_scan
Published: 2021-08-03T02:47:11.987687Z

wl1251: Fix possible buffer overflow in wl1251_cmd_scan

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.276 by commit d3d8b9c9c7843dce31e284927d4c9904fd5a510a. For more details please see the references link.
Vulnerability: GSD-2021-1000161
Summary: ovl: fix leaked dentry
Published: 2021-05-31T15:39:45.031586Z

ovl: fix leaked dentry

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.35 by commit 71d58457a8afc650da5d3292a7f7029317654d95, it was introduced in version v5.8 by commit 6815f479ca90ee7fd2e28b2a420f796b974155fe. For more details please see the references link.