TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1000255
Summary: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
Published: 2022-02-18T22:01:53.879594Z

rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit 85aba11a8ea92a8eef2de95ebbe063086fd62d9c, it was introduced in version v4.11 by commit c0cdc19f84a4712cf74888f83af286e3c2e14efd. For more details please see the references link.
Vulnerability: GSD-2021-1002817
Summary: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
Published: 2021-12-30T02:44:44.084729Z

drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit 71d07ebc5000b9c1d140e99e7493b0bafa954776, it was introduced in version v5.14 by commit 41ca9caaae0bfc959b22dbcd59d88a7107707e17. For more details please see the references link.
Vulnerability: GSD-2021-1001738
Summary: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
Published: 2021-10-19T16:34:19.052279Z

crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit e450c422aa233e9f80515f2ee9164e33f158a472, it was introduced in version v4.12 by commit 36cf515b9bbe298e1ce7384620f0d4ec45ad3328. For more details please see the references link.
Vulnerability: GSD-2022-1001014
Summary: rxrpc: fix a race in rxrpc_exit_net()
Published: 2022-04-24T20:39:53.519469Z

rxrpc: fix a race in rxrpc_exit_net()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit cd8aef1f30d1215648e4e6686cfb422004851429, it was introduced in version v4.17 by commit ace45bec6d77bc061c3c3d8ad99e298ea9800c2b. For more details please see the references link.
Vulnerability: GSD-2021-1000083
Summary: s390/zcrypt: fix zcard and zqueue hot-unplug memleak
Published: 2021-05-31T15:39:45.031586Z

s390/zcrypt: fix zcard and zqueue hot-unplug memleak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit 971dc8706cee47393d393905d294ea47e39503d3, it was introduced in version v5.10 by commit 29c2680fd2bf3862ff5cf2957f198512493156f9. For more details please see the references link.
Vulnerability: GSD-2021-1000579
Summary: gve: Add NULL pointer checks when freeing irqs.
Published: 2021-06-04T19:41:56.139326Z

gve: Add NULL pointer checks when freeing irqs.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit da21a35c00ff1a1794d4f166d3b3fa8db4d0f6fb, it was introduced in version v5.3 by commit 893ce44df56580fb878ca5af9c4a5fd87567da50. For more details please see the references link.
Vulnerability: GSD-2021-1002544
Summary: iommu/vt-d: Fix unmap_pages support
Published: 2021-12-19T19:42:01.692249Z

iommu/vt-d: Fix unmap_pages support

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.6 by commit 724ee060d0aba28f072fc7357a20366b0a519593, it was introduced in version v5.15 by commit 3f34f125977685e591def32984c77e23a86075b0. For more details please see the references link.
Vulnerability: GSD-2022-1001444
Summary: ubifs: rename_whiteout: Fix double free for whiteout_ui->data
Published: 2022-04-24T21:13:58.504111Z

ubifs: rename_whiteout: Fix double free for whiteout_ui->data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit b9a937f096e608b3368c1abc920d4d640ba2c94f, it was introduced in version v4.9 by commit 9e0a1fff8db56eaaebb74b4a3ef65f86811c4798. For more details please see the references link.
Vulnerability: GSD-2021-1000129
Summary: netfilter: conntrack: Make global sysctls readonly in non-init netns
Published: 2021-05-31T15:39:45.031586Z

netfilter: conntrack: Make global sysctls readonly in non-init netns

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.19 by commit fbf85a34ce17c4cf0a37ee253f4c582bbfb8231b, it was introduced in version v5.7 by commit d0febd81ae77a0e13717f1412ff9589e43fc4f8b. For more details please see the references link.
Vulnerability: GSD-2021-1002114
Summary: drm: mxsfb: Fix NULL pointer dereference crash on unload
Published: 2021-11-14T15:20:28.684491Z

drm: mxsfb: Fix NULL pointer dereference crash on unload

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit b0e6db0656ddfd8bb57303c2ef61ee1c1cc694a8, it was introduced in version v5.10 by commit ae1ed0093281939b80664a687689f12436c0e874. For more details please see the references link.
Vulnerability: GSD-2022-1002141
Summary: f2fs: quota: fix loop condition at f2fs_quota_sync()
Published: 2022-04-24T22:15:33.686971Z

f2fs: quota: fix loop condition at f2fs_quota_sync()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit e58ee6bd939b773675240f5d0f5b88a367c037c4, it was introduced in version v5.10.67 by commit 2d586a3f5b7ec2f5a939db4abc9aa053c237545c. For more details please see the references link.
Vulnerability: GSD-2022-1000486
Summary: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
Published: 2022-02-27T03:13:29.317259Z

NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit aa9051ddb4b378bd22e72a67bc77b9fc1482c5f0. For more details please see the references link.
Vulnerability: GSD-2021-1001411
Summary: scsi: libfc: Fix array index out of bound exception
Published: 2021-08-03T02:33:01.113194Z

scsi: libfc: Fix array index out of bound exception

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.241 by commit 44651522941c623e20882b3b443f23f77de1ea8b. For more details please see the references link.
Vulnerability: GSD-2022-1002511
Summary: mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
Published: 2022-04-24T22:56:32.660033Z

mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 43397f238aa344b21f101b59e626bb2ddb943f6c, it was introduced in version v2.6.23 by commit 2a1e274acf0b1c192face19a4be7c12d4503eaaf. For more details please see the references link.
Vulnerability: GSD-2021-1001041
Summary: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message
Published: 2021-06-30T00:35:47.741439Z

KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit 9fb088ce13bc3c59a51260207b487db3e556f275, it was introduced in version v5.4 by commit 380e0055bc7e4a5c687436ba3ccebb4667836b95. For more details please see the references link.
Vulnerability: GSD-2022-1001297
Summary: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
Published: 2022-04-24T21:02:08.753260Z

ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 67f7bd9ff9079c1ee2de58e024fb582905c74c16, it was introduced in version v5.2 by commit d16046ffa6de040bf580a64d5f4d0aa18258a854. For more details please see the references link.
Vulnerability: GSD-2021-1000200
Summary: ACPI: scan: Fix a memory leak in an error handling path
Published: 2021-05-31T15:39:45.041586Z

ACPI: scan: Fix a memory leak in an error handling path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit a7e17a8d421ae23c920240625b4413c7b94d94a4, it was introduced in version v5.12 by commit eb50aaf960e3bedfef79063411ffd670da94b84b. For more details please see the references link.
Vulnerability: GSD-2021-1002397
Summary: can: sja1000: fix use after free in ems_pcmcia_add_card()
Published: 2021-12-19T19:35:32.069461Z

can: sja1000: fix use after free in ems_pcmcia_add_card()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.258 by commit c8718026ba287168ff9ad0ccc4f9a413062cba36, it was introduced in version v3.2 by commit fd734c6f25aea4b2b44b045e489aec67b388577e. For more details please see the references link.
Vulnerability: GSD-2021-1000650
Summary: drm/amdgpu: Fix a use-after-free
Published: 2021-06-04T19:54:49.242824Z

drm/amdgpu: Fix a use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit a849e218556f932576c0fb1c5a88714b61709a17, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1001942
Summary: usbnet: sanity check for maxpacket
Published: 2021-11-14T15:12:39.547392Z

usbnet: sanity check for maxpacket

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.289 by commit 524f333e98138d909a0a0c574a9ff6737dce2767. For more details please see the references link.
Vulnerability: GSD-2021-1002378
Summary: serial: core: fix transmit-buffer reset and memleak
Published: 2021-12-19T19:34:38.840670Z

serial: core: fix transmit-buffer reset and memleak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.292 by commit 011f6c92b5bf6e1fbfdedc8b5232f64c1c493206, it was introduced in version v4.9 by commit 761ed4a94582ab291aa24dcbea4e01e8936488c8. For more details please see the references link.
Vulnerability: GSD-2021-1000345
Summary: bnxt_en: Fix RX consumer index logic in the error path.
Published: 2021-05-31T15:39:45.041586Z

bnxt_en: Fix RX consumer index logic in the error path.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 4fcaad2b7dac3f16704f8118c7e481024ddbd3ed, it was introduced in version v5.1 by commit a1b0e4e684e9c300b9e759b46cb7a0147e61ddff. For more details please see the references link.
Vulnerability: GSD-2021-1002682
Summary: ovl: fix warning in ovl_create_real()
Published: 2021-12-27T05:36:39.065112Z

ovl: fix warning in ovl_create_real()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.168 by commit f9f300a92297be8250547347fd52216ef0177ae0. For more details please see the references link.
Vulnerability: GSD-2022-1001628
Summary: coresight: syscfg: Fix memleak on registration failure in cscfg_create_device
Published: 2022-04-24T21:29:56.254434Z

coresight: syscfg: Fix memleak on registration failure in cscfg_create_device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit a529af1f5a5c096f3e18f0d5a32cfcc3d82df1ec, it was introduced in version v5.15 by commit 85e2414c518a03a21dddd4bc88fec2723c5e1197. For more details please see the references link.
Vulnerability: GSD-2022-1001782
Summary: video: fbdev: cirrusfb: check pixclock to avoid divide by zero
Published: 2022-04-24T21:42:06.312906Z

video: fbdev: cirrusfb: check pixclock to avoid divide by zero

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 6fe23ff94e7840097202e85c148688940b37c9b1. For more details please see the references link.
Vulnerability: GSD-2022-1000890
Summary: openvswitch: Fix setting ipv6 fields causing hw csum failure
Published: 2022-03-18T00:28:40.566480Z

openvswitch: Fix setting ipv6 fields causing hw csum failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.182 by commit d0251c38dff849404ac6bdedba6c1e2f89089b79, it was introduced in version v3.8 by commit 3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b. For more details please see the references link.
Vulnerability: GSD-2021-1002728
Summary: bpf: Fix signed bounds propagation after mov32
Published: 2021-12-27T05:39:29.828307Z

bpf: Fix signed bounds propagation after mov32

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit f77d7a35d4913e4ab27abb36016fbfc1e882a654, it was introduced in version v5.7 by commit 3f50f132d8400e129fc9eb68b5020167ef80a244. For more details please see the references link.
Vulnerability: GSD-2021-1000715
Summary: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
Published: 2021-06-24T23:58:48.255208Z

ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.272 by commit e33bafad30d34cfa5e9787cb099cab05e2677fcb, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1001807
Summary: NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
Published: 2021-10-28T13:49:56.185339Z

NFC: digital: fix possible memory leak in digital_in_send_sdd_req()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.213 by commit 071bdef36391958c89af5fa2172f691b31baa212, it was introduced in version v3.13 by commit 2c66daecc4092e6049673c281b2e6f0d5e59a94c. For more details please see the references link.
Vulnerability: GSD-2022-1001278
Summary: crypto: hisilicon/sec - fix the aead software fallback for engine
Published: 2022-04-24T21:00:51.564462Z

crypto: hisilicon/sec - fix the aead software fallback for engine

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 5c1149e2abe0b7489300736b8277b45b113de67f, it was introduced in version v5.14 by commit 6c46a3297beae4ae2d22b26da5e091f058381c7c. For more details please see the references link.
Vulnerability: GSD-2021-1001554
Summary: usb: dwc2: check return value after calling platform_get_resource()
Published: 2021-10-19T16:23:32.594153Z

usb: dwc2: check return value after calling platform_get_resource()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.210 by commit a7182993dd8e09f96839ddc3ac54f9b37370d282. For more details please see the references link.
Vulnerability: GSD-2022-1000039
Summary: sctp: use call_rcu to free endpoint
Published: 2022-01-10T19:51:24.029471Z

sctp: use call_rcu to free endpoint

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.90 by commit 769d14abd35e0e153b5149c3e1e989a9d719e3ff, it was introduced in version v4.14 by commit d25adbeb0cdb860fb39e09cdd025e9cfc954c5ab. For more details please see the references link.
Vulnerability: GSD-2022-1002004
Summary: mips: ralink: fix a refcount leak in ill_acc_of_setup()
Published: 2022-04-24T22:02:28.348054Z

mips: ralink: fix a refcount leak in ill_acc_of_setup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 142ae7d4f21524acfe073e5a3da5667aa85eb970. For more details please see the references link.
Vulnerability: GSD-2022-1000193
Summary: i40e: Fix queues reservation for XDP
Published: 2022-02-18T21:53:11.160427Z

i40e: Fix queues reservation for XDP

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit 768eb705e6381f0c70ca29d4e66f19790d5d19a1, it was introduced in version v3.12 by commit 41c445ff0f482bb6e6b72dcee9e598e20575f743. For more details please see the references link.
Vulnerability: GSD-2021-1001104
Summary: cfg80211: call cfg80211_leave_ocb when switching away from OCB
Published: 2021-07-08T01:56:35.473997Z

cfg80211: call cfg80211_leave_ocb when switching away from OCB

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.238 by commit cb44de1ae03374b9d5c5b87247cef35f0eefdc04. For more details please see the references link.
Vulnerability: GSD-2022-1000469
Summary: net/smc: Avoid overwriting the copies of clcsock callback functions
Published: 2022-02-27T03:11:34.091259Z

net/smc: Avoid overwriting the copies of clcsock callback functions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit 7de7ba7a8bd4fde0141de8674c13514d0072f0e6, it was introduced in version v5.15.22 by commit 0ef6049f664941bc0f75828b3a61877635048b27. For more details please see the references link.
Vulnerability: GSD-2022-1002454
Summary: pinctrl: samsung: drop pin banks references on error paths
Published: 2022-04-24T22:49:58.254471Z

pinctrl: samsung: drop pin banks references on error paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit e4bc03a96374556962a3ba560ca5c9f8c99a72c9, it was introduced in version v3.8 by commit ab663789d69760d2735402f66501f20b60312a3d. For more details please see the references link.
Vulnerability: GSD-2021-1001391
Summary: udf: Fix NULL pointer dereference in udf_symlink function
Published: 2021-08-03T02:26:51.402692Z

udf: Fix NULL pointer dereference in udf_symlink function

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 3638705ecd5ad2785e996f820121c0ad15ce64b5. For more details please see the references link.
Vulnerability: GSD-2022-1000306
Summary: perf: Fix list corruption in perf_cgroup_switch()
Published: 2022-02-27T02:48:49.919668Z

perf: Fix list corruption in perf_cgroup_switch()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.267 by commit 5d76ed4223403f90421782adb2f20a9ecbc93186, it was introduced in version v4.11 by commit 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8. For more details please see the references link.
Vulnerability: GSD-2021-1000979
Summary: udp: fix race between close() and udp_abort()
Published: 2021-06-30T00:31:03.711286Z

udp: fix race between close() and udp_abort()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 8729ec8a2238152a4afc212a331a6cd2c61aeeac, it was introduced in version v4.9 by commit 5d77dca82839ef016a93ad7acd7058b14d967752. For more details please see the references link.
Vulnerability: GSD-2022-1000756
Summary: xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
Published: 2022-03-18T00:15:39.759821Z

xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.28 by commit dea18aef2021022a568f4d385a1386f51a9df6ff. For more details please see the references link.
Vulnerability: GSD-2022-1001844
Summary: ath10k: Fix error handling in ath10k_setup_msa_resources
Published: 2022-04-24T21:47:20.787961Z

ath10k: Fix error handling in ath10k_setup_msa_resources

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 32939187f254171a5666badc058bc3787fe454af, it was introduced in version v5.8 by commit 727fec790ead3d75e2735f66209949c2163523ea. For more details please see the references link.
Vulnerability: GSD-2022-1002291
Summary: scsi: target: tcmu: Fix possible page UAF
Published: 2022-04-24T22:30:40.664091Z

scsi: target: tcmu: Fix possible page UAF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.239 by commit e3e0e067d5b34e4a68e3cc55f8eebc413f56f8ed. For more details please see the references link.
Vulnerability: GSD-2021-1000580
Summary: net/smc: remove device from smcd_dev_list after failed device_add()
Published: 2021-06-04T19:42:07.528382Z

net/smc: remove device from smcd_dev_list after failed device_add()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit 8b2cdc004d21a7255f219706dca64411108f7897, it was introduced in version v4.19 by commit c6ba7c9ba43de1b57e9a53946e7ff988554c84ed. For more details please see the references link.
Vulnerability: GSD-2022-1001517
Summary: Bluetooth: hci_uart: add missing NULL check in h5_enqueue
Published: 2022-04-24T21:19:22.961450Z

Bluetooth: hci_uart: add missing NULL check in h5_enqueue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit e6b6c904c0f88588b6a3ace20e4c0d61eab124f8, it was introduced in version v5.15 by commit d9dd833cf6d29695682ec7e7924c0d0992b906bc. For more details please see the references link.
Vulnerability: GSD-2021-1002047
Summary: powerpc/idle: Don't corrupt back chain when going idle
Published: 2021-11-14T15:17:27.680168Z

powerpc/idle: Don't corrupt back chain when going idle

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit c5c2a80368e97ac179d6a101c99f1e1f36146ec2, it was introduced in version v5.10.76 by commit fbd724c49bead048ae9fc1a5b7bff2fb3e54f855. For more details please see the references link.
Vulnerability: GSD-2022-1001147
Summary: btrfs: make search_csum_tree return 0 if we get -EFBIG
Published: 2022-04-24T20:48:54.785074Z

btrfs: make search_csum_tree return 0 if we get -EFBIG

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 93db0c727d2401da13101a075d09bbb75488af09. For more details please see the references link.
Vulnerability: GSD-2021-1002417
Summary: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
Published: 2021-12-19T19:36:28.252617Z

sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.220 by commit 0769449b0a5eabc3545337217ae690e46673e73a, it was introduced in version v2.6.24 by commit faf0b2e5afe7dae072d2715763c7f992b612b628. For more details please see the references link.
Vulnerability: GSD-2021-1002102
Summary: userfaultfd: fix a race between writeprotect and exit_mmap()
Published: 2021-11-14T15:19:58.967643Z

userfaultfd: fix a race between writeprotect and exit_mmap()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit 149958ecd0627a9f1e9c678c25c665400054cd6a, it was introduced in version v5.7 by commit 63b2d4174c4ad1f40b48d7138e71bcb564c1fe03. For more details please see the references link.
Vulnerability: GSD-2022-1001452
Summary: drm/i915: Treat SAGV block time 0 as SAGV disabled
Published: 2022-04-24T21:14:26.675620Z

drm/i915: Treat SAGV block time 0 as SAGV disabled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 1714c5d649ec267b1f98426fe98fa43478b557ff. For more details please see the references link.
Vulnerability: GSD-2021-1002552
Summary: drm/amd/amdgpu: fix potential memleak
Published: 2021-12-19T19:42:21.925069Z

drm/amd/amdgpu: fix potential memleak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit 75752ada77e0726327adf68018b9f50ae091baeb. For more details please see the references link.
Vulnerability: GSD-2021-1000095
Summary: tracing: Restructure trace_clock_global() to never block
Published: 2021-05-31T15:39:45.031586Z

tracing: Restructure trace_clock_global() to never block

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit 6e2418576228eeb12e7ba82edb8f9500623942ff, it was introduced in version v5.10 by commit b02414c8f045ab3b9afc816c3735bc98c5c3d262. For more details please see the references link.
Vulnerability: GSD-2022-1001002
Summary: btrfs: fix qgroup reserve overflow the qgroup limit
Published: 2022-04-24T20:38:45.841090Z

btrfs: fix qgroup reserve overflow the qgroup limit

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 7941b74ed49b6db25efbef2256ebef843c11a010. For more details please see the references link.
Vulnerability: GSD-2021-1002801
Summary: hamradio: improve the incomplete fix to avoid NPD
Published: 2021-12-30T02:43:58.222220Z

hamradio: improve the incomplete fix to avoid NPD

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.169 by commit a5c6a13e9056d87805ba3042c208fbd4164ad22b. For more details please see the references link.
Vulnerability: GSD-2022-1000243
Summary: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
Published: 2022-02-18T22:00:29.343790Z

efi: runtime: avoid EFIv2 runtime services on Apple x86 machines

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit 3df52448978802ae15dcebf66beba1029df957b4. For more details please see the references link.
Vulnerability: GSD-2021-1001684
Summary: bpf, s390: Fix potential memory leak about jit_data
Published: 2021-10-19T16:31:43.913028Z

bpf, s390: Fix potential memory leak about jit_data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.12 by commit d590a410e472417a22336c7c37685bfb38e801f2, it was introduced in version v5.4 by commit 1c8f9b91c456f5b47a377a0c8c5d4130fc39433a. For more details please see the references link.
Vulnerability: GSD-2021-1000996
Summary: can: mcba_usb: fix memory leak in mcba_usb
Published: 2021-06-30T00:32:07.476756Z

can: mcba_usb: fix memory leak in mcba_usb

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 6bd3d80d1f019cefa7011056c54b323f1d8b8e83, it was introduced in version v4.12 by commit 51f3baad7de943780ce0c17bd7975df567dd6e14. For more details please see the references link.
Vulnerability: GSD-2022-1000613
Summary: arm64: extable: fix load_unaligned_zeropad() reg indices
Published: 2022-02-27T03:31:21.790788Z

arm64: extable: fix load_unaligned_zeropad() reg indices

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit 47fe7a1c5e3e011eeb4ab79f2d54a794fdd1c3eb, it was introduced in version v5.16 by commit 753b32368705c396000f95f33c3b7018474e33ad. For more details please see the references link.
Vulnerability: GSD-2022-1001901
Summary: exec: Force single empty string when argv is empty
Published: 2022-04-24T21:53:19.765136Z

exec: Force single empty string when argv is empty

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 1290eb4412aa0f0e9f3434b406dc8e255da85f9e. For more details please see the references link.
Vulnerability: GSD-2021-1001954
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-11-14T15:13:16.933616Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.252 by commit b7b023e6ff567e991c31cd425b0e1d16779c938b, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.
Vulnerability: GSD-2021-1000646
Summary: bpf: No need to simulate speculative domain for immediates
Published: 2021-06-04T19:54:00.387396Z

bpf: No need to simulate speculative domain for immediates

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.123 by commit 3173c7c807854a580c85f04193a6a25aeff3dd96, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1002381
Summary: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
Published: 2021-12-19T19:34:45.829561Z

nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.293 by commit 69bb79a8f5bb9f436b6f1434ca9742591b7bbe18, it was introduced in version v3.12 by commit ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95. For more details please see the references link.
Vulnerability: GSD-2021-1000216
Summary: ceph: fix inode leak on getattr error in __fh_to_dentry
Published: 2021-05-31T15:39:45.041586Z

ceph: fix inode leak on getattr error in __fh_to_dentry

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 0a219432127d396120fc88cabd82785e0ff72a2f, it was introduced in version v5.8 by commit 878dabb64117406abd40977b87544d05bb3031fc. For more details please see the references link.
Vulnerability: GSD-2022-1001281
Summary: selftests/sgx: Fix NULL-pointer-dereference upon early test failure
Published: 2022-04-24T21:01:01.113229Z

selftests/sgx: Fix NULL-pointer-dereference upon early test failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit bc72277b7541756d91c07afee6d768ec97777651, it was introduced in version v5.17 by commit 3200505d4de6436af799d7be743d9dc87450ee5a. For more details please see the references link.
Vulnerability: GSD-2022-1000869
Summary: xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
Published: 2022-03-18T00:26:09.863221Z

xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.184 by commit 0e35f3ab69bcb01fdbf5aadc78f1731778963b1c. For more details please see the references link.
Vulnerability: GSD-2021-1001057
Summary: netfilter: nf_tables: initialize set before expression setup
Published: 2021-06-30T00:36:47.533371Z

netfilter: nf_tables: initialize set before expression setup

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit a1f6740fa3938baa2a45c3dfc53402b78122a8a8, it was introduced in version v5.7 by commit 65038428b2c6c5be79d3f78a6b79c0cdc3a58a41. For more details please see the references link.
Vulnerability: GSD-2022-1002507
Summary: media: usb: go7007: s2250-board: fix leak in probe()
Published: 2022-04-24T22:56:03.662954Z

media: usb: go7007: s2250-board: fix leak in probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit bbdd0e15738336e6b1208304ae98525117877bbd, it was introduced in version v3.10 by commit d3b2ccd9e307eae80b4b4eeb0ede46cb02212df2. For more details please see the references link.
Vulnerability: GSD-2021-1001407
Summary: net: validate lwtstate->data before returning from skb_tunnel_info()
Published: 2021-08-03T02:31:56.815397Z

net: validate lwtstate->data before returning from skb_tunnel_info()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.241 by commit 83bdcfbd968bcc91a0632b7b625e4a9b0cba5e0d, it was introduced in version v4.3 by commit 61adedf3e3f1d3f032c5a6a299978d91eff6d555. For more details please see the references link.
Vulnerability: GSD-2022-1000490
Summary: drm/vc4: Fix deadlock on DSI device attach error
Published: 2022-02-27T03:14:35.959053Z

drm/vc4: Fix deadlock on DSI device attach error

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit dddd832f35096fbc5004e3a7e58fb4d2cefb8deb. For more details please see the references link.
Vulnerability: GSD-2022-1002157
Summary: ipv6: fix panic when forwarding a pkt with no in6 dev
Published: 2022-04-24T22:16:46.270099Z

ipv6: fix panic when forwarding a pkt with no in6 dev

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.190 by commit ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435, it was introduced in version v5.4.136 by commit 7f4848229e91d508102b30396b8a1b710ac23637. For more details please see the references link.
Vulnerability: GSD-2022-1002442
Summary: ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
Published: 2022-04-24T22:48:08.125781Z

ASoC: mxs: Fix error handling in mxs_sgtl5000_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 790d2628e3fcc819d8f5572eb5615113fb2e727a, it was introduced in version v3.5 by commit e968194b45c4e8077dada75c5bae5660b37628fe. For more details please see the references link.
Vulnerability: GSD-2021-1001112
Summary: net: qed: Fix memcpy() overflow of qed_dcbx_params()
Published: 2021-07-08T01:57:07.333282Z

net: qed: Fix memcpy() overflow of qed_dcbx_params()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.196 by commit 144ca5c30c7a97d0c37c404c157db1b1358e2fcf. For more details please see the references link.
Vulnerability: GSD-2022-1000185
Summary: tracing/histogram: Fix a potential memory leak for kstrdup()
Published: 2022-02-18T21:52:17.390894Z

tracing/histogram: Fix a potential memory leak for kstrdup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit d71b06aa995007eafd247626d0669b9364c42ad7, it was introduced in version v5.6 by commit d380dcde9a07ca5de4805dee11f58a98ec0ad6ff. For more details please see the references link.
Vulnerability: GSD-2022-1002012
Summary: drm/amdgpu: Fix recursive locking warning
Published: 2022-04-24T22:02:51.122203Z

drm/amdgpu: Fix recursive locking warning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 6694b8643bde4b940f6b410507960793b922a77d. For more details please see the references link.
Vulnerability: GSD-2021-1001542
Summary: irqchip/gic-v3-its: Fix potential VPE leak on error
Published: 2021-10-19T16:22:58.392827Z

irqchip/gic-v3-its: Fix potential VPE leak on error

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.249 by commit 7d39992d45acd6f2d6b2f62389c55b61fb3d486b, it was introduced in version v4.14 by commit 7d75bbb4bc1ad90386776459d37e4ddfe605671e. For more details please see the references link.
Vulnerability: GSD-2021-1001811
Summary: xhci: Fix command ring pointer corruption while aborting a command
Published: 2021-10-28T13:50:10.002727Z

xhci: Fix command ring pointer corruption while aborting a command

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.213 by commit 62c182b5e763e5f4062e72678e72ce3e02dd4d1b. For more details please see the references link.
Vulnerability: GSD-2021-1000703
Summary: i2c: i801: Don't generate an interrupt on bus reset
Published: 2021-06-04T20:05:48.713079Z

i2c: i801: Don't generate an interrupt on bus reset

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.271 by commit f9469082126cebb7337db3992d143f5e4edfe629, it was introduced in version v3.6 by commit 636752bcb5177a301d0266270661581de8624828. For more details please see the references link.
Vulnerability: GSD-2022-1000886
Summary: configfs: fix a race in configfs_{,un}register_subsystem()
Published: 2022-03-18T00:28:10.786343Z

configfs: fix a race in configfs_{,un}register_subsystem()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.182 by commit b7e2b91fcb5c78c414e33dc8d50642e307ca0c5a, it was introduced in version v2.6.16 by commit 7063fbf2261194f72ee75afca67b3b38b554b5fa. For more details please see the references link.
Vulnerability: GSD-2022-1001794
Summary: Revert "Revert "block, bfq: honor already-setup queue merges""
Published: 2022-04-24T21:42:41.292975Z

Revert "Revert "block, bfq: honor already-setup queue merges""

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 65d8a737452e88f251fe5d925371de6d606df613. For more details please see the references link.
Vulnerability: GSD-2021-1002694
Summary: net: netlink: af_netlink: Prevent empty skb by adding a check on len.
Published: 2021-12-27T05:37:09.613896Z

net: netlink: af_netlink: Prevent empty skb by adding a check on len.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.87 by commit dadce61247c6230489527cc5e343b6002d1114c5. For more details please see the references link.
Vulnerability: GSD-2021-1000353
Summary: i2c: sprd: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: sprd: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit e547640cee7981fd751d2c9cde3a61bdb678b755, it was introduced in version v4.14 by commit 8b9ec0719834fe66146d138d62ed66cef025c864. For more details please see the references link.
Vulnerability: GSD-2021-1002440
Summary: atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
Published: 2021-12-19T19:37:22.727224Z

atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.164 by commit 89d15a2e40d7edaaa16da2763b349dd7b056cc09. For more details please see the references link.
Vulnerability: GSD-2021-1000187
Summary: net: hso: fix NULL-deref on disconnect regression
Published: 2021-05-31T15:39:45.031586Z

net: hso: fix NULL-deref on disconnect regression

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.189 by commit 5c17cfe155d21954b4c7e2a78fa771cebcd86725, it was introduced in version v4.19.187 by commit 92028d7a31e55d53e41cff679156b9432cffcb36. For more details please see the references link.
Vulnerability: GSD-2022-1001110
Summary: wireguard: socket: ignore v6 endpoints when ipv6 is disabled
Published: 2022-04-24T20:46:09.242220Z

wireguard: socket: ignore v6 endpoints when ipv6 is disabled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit d277108f9ca223ed649d56024cb6728c1cde65fa, it was introduced in version v5.6 by commit e7096c131e5161fa3b8e52a650d7719d2857adfd. For more details please see the references link.
Vulnerability: GSD-2021-1002010
Summary: mm, slub: fix mismatch between reconstructed freelist depth and cnt
Published: 2021-11-14T15:15:48.420784Z

mm, slub: fix mismatch between reconstructed freelist depth and cnt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit a1ec195a1943c39fffa96e47ab6532d74a9f4c78, it was introduced in version v4.17 by commit c3895391df385c6628638f014c87e16f5e2efd45. For more details please see the references link.
Vulnerability: GSD-2022-1001540
Summary: drm/msm/dp: populate connector of struct dp_panel
Published: 2022-04-24T21:21:42.994620Z

drm/msm/dp: populate connector of struct dp_panel

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit fbba600f432a360b42452fee79d1fb35d3aa8aeb, it was introduced in version v5.15 by commit 7948fe12d47a946fb8025a0534c900e3dd4b5839. For more details please see the references link.