TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2021-1001796
Summary: usb: musb: dsps: Fix the probe error path
Published: 2021-10-28T13:49:17.369106Z

usb: musb: dsps: Fix the probe error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.252 by commit 5ed60a430fb5f3d93e7fef66264daef466b4d10c, it was introduced in version v4.14.247 by commit 5269937d1483d3159d5b51907346e4f4b13ef079. For more details please see the references link.
Vulnerability: GSD-2021-1000884
Summary: scsi: core: Fix error handling of scsi_host_alloc()
Published: 2021-06-30T00:03:33.059465Z

scsi: core: Fix error handling of scsi_host_alloc()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.195 by commit 2dc85045ae65b9302a1d2e2ddd7ce4c030153a6a. For more details please see the references link.
Vulnerability: GSD-2022-1000701
Summary: netfilter: nf_queue: fix possible use-after-free
Published: 2022-03-18T00:10:56.573422Z

netfilter: nf_queue: fix possible use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit dcc3cb920bf7ba66ac5e9272293a9ba5f80917ee, it was introduced in version v2.6.29 by commit 271b72c7fa82c2c7a795bc16896149933110672d. For more details please see the references link.
Vulnerability: GSD-2022-1001813
Summary: clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
Published: 2022-04-24T21:44:17.141649Z

clk: qcom: clk-rcg2: Update logic to calculate D value for RCG

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 34dca60982e93e69ae442aa2d36ce61c9a3bb563, it was introduced in version v3.16 by commit 99cbd064b059f222c8839ba433a68b2d6ee33066. For more details please see the references link.
Vulnerability: GSD-2022-1000351
Summary: nvme-tcp: fix possible use-after-free in transport error_recovery work
Published: 2022-02-27T02:54:38.880523Z

nvme-tcp: fix possible use-after-free in transport error_recovery work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.181 by commit 61a26ffd5ad3ece456d74c4c79f7b5e3f440a141. For more details please see the references link.
Vulnerability: GSD-2022-1000644
Summary: net: amd-xgbe: Fix skb data length underflow
Published: 2022-02-27T03:35:29.390987Z

net: amd-xgbe: Fix skb data length underflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.6 by commit e8f73f620fee5f52653ed2da360121e4446575c5, it was introduced in version v4.11 by commit 622c36f143fc9566ba49d7cec994c2da1182d9e2. For more details please see the references link.
Vulnerability: GSD-2022-1001956
Summary: drm/amdkfd: Check for potential null return of kmalloc_array()
Published: 2022-04-24T21:57:52.391750Z

drm/amdkfd: Check for potential null return of kmalloc_array()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.112 by commit 1d7a5aae884ca727d41c7ed15d4c82fdb67c040c. For more details please see the references link.
Vulnerability: GSD-2022-1002383
Summary: ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
Published: 2022-04-24T22:41:20.427410Z

ALSA: pcm: Test for "silence" field in struct "pcm_format_data"

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit c3b2f23bfe5452b00eb1c842bc71098449e4ad9f. For more details please see the references link.
Vulnerability: GSD-2021-1001329
Summary: watchdog: Fix possible use-after-free in wdt_startup()
Published: 2021-08-03T02:10:36.012331Z

watchdog: Fix possible use-after-free in wdt_startup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.134 by commit 146cc288fb80c662c9c35e7bc58325d1ac0a7875. For more details please see the references link.
Vulnerability: GSD-2021-1001283
Summary: f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
Published: 2021-08-03T01:57:12.460587Z

f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.51 by commit 86786603014e0a22d0d6af8e80ae4b8687927048. For more details please see the references link.
Vulnerability: GSD-2022-1000214
Summary: selinux: fix double free of cond_list on error paths
Published: 2022-02-18T21:56:21.644904Z

selinux: fix double free of cond_list on error paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.99 by commit f446089a268c8fc6908488e991d28a9b936293db. For more details please see the references link.
Vulnerability: GSD-2022-1002229
Summary: kgdboc: fix return value of __setup handler
Published: 2022-04-24T22:23:31.892477Z

kgdboc: fix return value of __setup handler

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 16fe77f86aa58418f20de13d614db88d608537bb, it was introduced in version v4.20 by commit 1bd54d851f50dea6af30c3e6ff4f3e9aab5558f9. For more details please see the references link.
Vulnerability: GSD-2021-1001779
Summary: can: peak_pci: peak_pci_remove(): fix UAF
Published: 2021-10-28T13:48:29.239301Z

can: peak_pci: peak_pci_remove(): fix UAF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.288 by commit 447d44cd2f67a20b596ede3ca3cd67086dfd9ca9, it was introduced in version v3.4 by commit e6d9c80b7ca1504411ad6d7acdb8683e4ae1c9cd. For more details please see the references link.
Vulnerability: GSD-2022-1001055
Summary: scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()
Published: 2022-04-24T20:42:42.460620Z

scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit a25ed5f21f94f9ae4bcc8dd747e978668890c921. For more details please see the references link.
Vulnerability: GSD-2021-1002505
Summary: HID: bigbenff: prevent null pointer dereference
Published: 2021-12-19T19:40:21.044637Z

HID: bigbenff: prevent null pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.85 by commit 6272b17001e6fdcf7b4a16206287010a1523fa6e. For more details please see the references link.
Vulnerability: GSD-2021-1000538
Summary: drm/amd/amdgpu: fix refcount leak
Published: 2021-06-04T19:35:17.621386Z

drm/amd/amdgpu: fix refcount leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit 95a4ec905e51a30c64cf2d78b04a7acbeae5ca94, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000492
Summary: x86/sev-es: Don't return NULL from sev_es_get_ghcb()
Published: 2021-05-31T23:45:31.507294Z

x86/sev-es: Don't return NULL from sev_es_get_ghcb()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.7 by commit efbfc33b0b1c241311553d3c2229974ec1d684e2, it was introduced in version v5.10 by commit 0786138c78e79343c7b015d77507cbf9d5f15d00. For more details please see the references link.
Vulnerability: GSD-2022-1001405
Summary: iommu/arm-smmu-v3: fix event handling soft lockup
Published: 2022-04-24T21:10:43.479297Z

iommu/arm-smmu-v3: fix event handling soft lockup

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit f42258fddea631bad727b3f4489ceb76a292f4dc. For more details please see the references link.
Vulnerability: GSD-2021-1002155
Summary: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
Published: 2021-11-14T15:22:26.632697Z

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 58e7dcc9ca29c14e44267a4d0ea61e3229124907, it was introduced in version v3.13 by commit 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8. For more details please see the references link.
Vulnerability: GSD-2021-1000168
Summary: tracing: Restructure trace_clock_global() to never block
Published: 2021-05-31T15:39:45.031586Z

tracing: Restructure trace_clock_global() to never block

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.118 by commit c64da3294a7d59a4bf6874c664c13be892f15f44, it was introduced in version v5.4.76 by commit aef59b5e5bdfc800f0e7aec7e74a33e98bf142c0. For more details please see the references link.
Vulnerability: GSD-2022-1002100
Summary: udmabuf: validate ubuf->pagecount
Published: 2022-04-24T22:11:10.744856Z

udmabuf: validate ubuf->pagecount

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit b267a8118c2b171bf7d67b90ed64154eeab9fae0, it was introduced in version v4.20 by commit fbb0de795078190a9834b3409e4b009cfb18a6d4. For more details please see the references link.
Vulnerability: GSD-2021-1001450
Summary: nfs: fix acl memory leak of posix_acl_create()
Published: 2021-08-03T02:45:07.008775Z

nfs: fix acl memory leak of posix_acl_create()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.276 by commit cef9d9acb7c80ed6bace894b6334557fd493863b, it was introduced in version v3.14 by commit 013cdf1088d7235da9477a2375654921d9b9ba9f. For more details please see the references link.
Vulnerability: GSD-2021-1001000
Summary: x86/ioremap: Map EFI-reserved memory as encrypted for SEV
Published: 2021-06-30T00:32:22.126890Z

x86/ioremap: Map EFI-reserved memory as encrypted for SEV

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 208bb686e7fa7fff16e8fa78ff0db34aa9acdbd7, it was introduced in version v5.10 by commit 58c909022a5a56cd1d9e89c8c5461fd1f6a27bb5. For more details please see the references link.
Vulnerability: GSD-2022-1000097
Summary: udf: Fix NULL ptr deref when converting from inline format
Published: 2022-02-18T21:34:52.021830Z

udf: Fix NULL ptr deref when converting from inline format

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.265 by commit a312cbdb9045a52e5c1fec4ac7b86895f508dc76, it was introduced in version v4.2 by commit 52ebea749aaed195245701a8f90a23d672c7a933. For more details please see the references link.
Vulnerability: GSD-2021-1002786
Summary: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
Published: 2021-12-30T02:43:22.513512Z

IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.223 by commit 0aaec9c5f60754b56f84460ea439b8c5e91f4caa, it was introduced in version v4.19.216 by commit 73d2892148aa4397a885b4f4afcfc5b27a325c42. For more details please see the references link.
Vulnerability: GSD-2021-1000241
Summary: i2c: xiic: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: xiic: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit a42ac16e6573f19c78f556ea292f5b534fcc4514, it was introduced in version v5.6 by commit 10b17004a74c384c6f410af355b0d6d7a168f613. For more details please see the references link.
Vulnerability: GSD-2021-1001903
Summary: mlxsw: thermal: Fix out-of-bounds memory accesses
Published: 2021-10-28T13:54:54.822027Z

mlxsw: thermal: Fix out-of-bounds memory accesses

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit df8e58716afb3bee2b59de66b1ba1033f2e26303, it was introduced in version v4.10 by commit a50c1e35650b929500bd89be61c89d95a267ce56. For more details please see the references link.
Vulnerability: GSD-2021-1000611
Summary: net/sched: fq_pie: fix OOB access in the traffic path
Published: 2021-06-04T19:47:21.192854Z

net/sched: fq_pie: fix OOB access in the traffic path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit e6294c06e7c62ffdd5bf3df696d3a4fcbb753d3c, it was introduced in version v5.6 by commit ec97ecf1ebe485a17cd8395a5f35e6b80b57665a. For more details please see the references link.
Vulnerability: GSD-2022-1000994
Summary: io_uring: drop the old style inflight file tracking
Published: 2022-04-24T20:37:58.868897Z

io_uring: drop the old style inflight file tracking

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit a8344ace69ffa5adc75220e0a98380cea4df08a4, it was introduced in version v5.17.3 by commit 2c443b22756cf75dc594d4d32bf64505bf4ce84b. For more details please see the references link.
Vulnerability: GSD-2022-1001686
Summary: dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
Published: 2022-04-24T21:35:10.956679Z

dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 599874bbc4ed832ccb578d48ac0ae7344382ef43, it was introduced in version v5.3 by commit d346c9e86d8685d7cdceddf5b2e9c4376334620c. For more details please see the references link.
Vulnerability: GSD-2021-1000304
Summary: mt76: fix potential DMA mapping leak
Published: 2021-05-31T15:39:45.041586Z

mt76: fix potential DMA mapping leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 91b9548d413fda488ea853cd1b9f59b572db3a0c, it was introduced in version v5.10 by commit 27d5c528a7ca08dcd44877fdd9fc08b76630bf77. For more details please see the references link.
Vulnerability: GSD-2021-1002339
Summary: scsi: advansys: Fix kernel pointer leak
Published: 2021-11-29T02:39:30.849534Z

scsi: advansys: Fix kernel pointer leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.5 by commit 27490ae6a85a70242d80615ca74d0362a820d6a7. For more details please see the references link.
Vulnerability: GSD-2022-1001393
Summary: mips: ralink: fix a refcount leak in ill_acc_of_setup()
Published: 2022-04-24T21:10:08.670854Z

mips: ralink: fix a refcount leak in ill_acc_of_setup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 8d7f7ef7980f287ace1c15f2ac03d6754e12f071. For more details please see the references link.
Vulnerability: GSD-2022-1001669
Summary: gpio: Restrict usage of GPIO chip irq members before initialization
Published: 2022-04-24T21:33:35.114888Z

gpio: Restrict usage of GPIO chip irq members before initialization

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 0912cf021fb5749372b3782611d8b1de4986c13a. For more details please see the references link.
Vulnerability: GSD-2021-1001846
Summary: ocfs2: mount fails with buffer overflow in strlen
Published: 2021-10-28T13:51:55.681664Z

ocfs2: mount fails with buffer overflow in strlen

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 93be0eeea14cf39235e585c8f56df3b3859deaad. For more details please see the references link.
Vulnerability: GSD-2021-1000754
Summary: nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
Published: 2021-06-25T00:02:36.849416Z

nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.125 by commit 5d4c4b06ed9fb7a69d0b2e2a73fc73226d25ab70, it was introduced in version v3.3 by commit d646960f7986fefb460a2b062d5ccc8ccfeacc3a. For more details please see the references link.
Vulnerability: GSD-2021-1002769
Summary: xen/console: harden hvc_xen against event channel storms
Published: 2021-12-27T05:53:02.589902Z

xen/console: harden hvc_xen against event channel storms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit 153d1ea3272209fc970116f09051002d14422cde. For more details please see the references link.
Vulnerability: GSD-2022-1001239
Summary: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
Published: 2022-04-24T20:56:48.316754Z

drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 639b3b9def0a6a3f316a195d705d14113236e89c, it was introduced in version v4.15 by commit e7b07ceef2a650e5ed8ca37997689e086c680daf. For more details please see the references link.
Vulnerability: GSD-2021-1002293
Summary: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
Published: 2021-11-29T02:37:22.487426Z

tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.82 by commit 77e9fed33056f2a88eba9dd4d2d5412f0c7d1f41. For more details please see the references link.
Vulnerability: GSD-2021-1001515
Summary: cpufreq: schedutil: Use kobject release() method to free sugov_tunables
Published: 2021-10-19T16:21:43.436526Z

cpufreq: schedutil: Use kobject release() method to free sugov_tunables

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.285 by commit cb4a53ba37532c861a5f3f22803391018a41849a, it was introduced in version v4.7 by commit 9bdcb44e391da5c41b98573bf0305a0e0b1c9569. For more details please see the references link.
Vulnerability: GSD-2022-1000582
Summary: RDMA/ucma: Protect mc during concurrent multicast leaves
Published: 2022-02-27T03:27:13.693095Z

RDMA/ucma: Protect mc during concurrent multicast leaves

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit 2923948ffe0835f7114e948b35bcc42bc9b3baa1, it was introduced in version v5.10 by commit 95fe51096b7adf1d1e7315c49c75e2f75f162584. For more details please see the references link.
Vulnerability: GSD-2022-1002045
Summary: media: staging: media: zoran: move videodev alloc
Published: 2022-04-24T22:05:39.502625Z

media: staging: media: zoran: move videodev alloc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit bd01629315ffd5b63da91d0bd529a77d30e55028. For more details please see the references link.
Vulnerability: GSD-2022-1000078
Summary: Bluetooth: refactor malicious adv data check
Published: 2022-02-18T21:32:43.807728Z

Bluetooth: refactor malicious adv data check

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.300 by commit 7889b38a7f21ed19314f83194622b195d328465c. For more details please see the references link.
Vulnerability: GSD-2021-1001145
Summary: s390/stack: fix possible register corruption with stack switch helper
Published: 2021-07-08T01:59:29.254119Z

s390/stack: fix possible register corruption with stack switch helper

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13 by commit 67147e96a332b56c7206238162771d82467f86c0, it was introduced in version v4.20 by commit ff340d2472ec7618443913928af9fb85a7009270. For more details please see the references link.
Vulnerability: GSD-2022-1002415
Summary: can: mcba_usb: properly check endpoint type
Published: 2022-04-24T22:44:56.349251Z

can: mcba_usb: properly check endpoint type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 5598442edc29e8f6f2380e4b471dc1a3fcd80508, it was introduced in version v4.12 by commit 51f3baad7de943780ce0c17bd7975df567dd6e14. For more details please see the references link.
Vulnerability: GSD-2022-1000428
Summary: net: dsa: mv88e6xxx: don't use devres for mdiobus
Published: 2022-02-27T03:06:12.193824Z

net: dsa: mv88e6xxx: don't use devres for mdiobus

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.24 by commit 8b626d45127d6f5ada7d815b83cfdc09e8cb1394, it was introduced in version v5.9 by commit ac3a68d56651c3dad2c12c7afce065fe15267f44. For more details please see the references link.
Vulnerability: GSD-2021-1001352
Summary: RDMA/cma: Fix rdma_resolve_route() memory leak
Published: 2021-08-03T02:15:42.250757Z

RDMA/cma: Fix rdma_resolve_route() memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.133 by commit 032c68b4f5be128a2167f35b558b7cec88fe4972. For more details please see the references link.
Vulnerability: GSD-2022-1002252
Summary: power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
Published: 2022-04-24T22:26:25.198741Z

power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 41ed61364285ff38bbbe9ca8a45c8372ba72921d, it was introduced in version v4.9 by commit 8c0984e5a75337df513047ec92a6c09d78e3e5cd. For more details please see the references link.
Vulnerability: GSD-2021-1001702
Summary: io_uring: allow conditional reschedule for intensive iterators
Published: 2021-10-19T16:32:36.549100Z

io_uring: allow conditional reschedule for intensive iterators

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.11 by commit 648f59a06b0e1fec7a4158cdee9acd362e493ce1. For more details please see the references link.
Vulnerability: GSD-2021-1000810
Summary: HID: magicmouse: fix NULL-deref on disconnect
Published: 2021-06-25T00:08:49.410743Z

HID: magicmouse: fix NULL-deref on disconnect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit 9cf27473f21913a3eaf4702dd2a25415afd5f33f, it was introduced in version v4.20 by commit 9d7b18668956c411a422d04c712994c5fdb23a4b. For more details please see the references link.
Vulnerability: GSD-2022-1000795
Summary: xhci: Prevent futile URB re-submissions due to incorrect return value.
Published: 2022-03-18T00:18:38.333904Z

xhci: Prevent futile URB re-submissions due to incorrect return value.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.26 by commit ce94606060d7f4306774d919fd219546c589c56a, it was introduced in version v3.11 by commit 203a86613fb3bf2767335659513fa98563a3eb71. For more details please see the references link.
Vulnerability: GSD-2022-1001887
Summary: soc: qcom: rpmpd: Check for null return of devm_kcalloc
Published: 2022-04-24T21:52:07.495660Z

soc: qcom: rpmpd: Check for null return of devm_kcalloc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 724376c30af5a57686b223dbcd6188e07d2a1de2, it was introduced in version v5.1 by commit bbe3a66c3f5a65fb3d702351bac2a6033944d389. For more details please see the references link.
Vulnerability: GSD-2021-1002084
Summary: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
Published: 2021-11-14T15:19:08.503522Z

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit 0e822e5413da1af28cca350cb1cb42b6133bdcae, it was introduced in version v4.3 by commit 69aba7948cbe53f2f1827e84e9dd0ae470a5072e. For more details please see the references link.
Vulnerability: GSD-2021-1000543
Summary: net: fujitsu: fix potential null-ptr-deref
Published: 2021-06-04T19:35:58.468929Z

net: fujitsu: fix potential null-ptr-deref

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit f14bf57a08779a5dee9936f63ada0149ea89c5e6, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000113
Summary: btrfs: fix race between transaction aborts and fsyncs leading to use-after-free
Published: 2021-05-31T15:39:45.031586Z

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit 633f7f216663587f17601eaa1cf2ac3d5654874c, it was introduced in version v5.7 by commit ef67963dac255b293e19815ea3d440567be4626f. For more details please see the references link.
Vulnerability: GSD-2022-1001184
Summary: cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse
Published: 2022-04-24T20:51:49.574059Z

cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 50b65f410814a2891505ed9bdfff3486abdc8d0b, it was introduced in version v5.7 by commit a8811ec764f95a04ba82f6f457e28c5e9e36e36b. For more details please see the references link.
Vulnerability: GSD-2021-1000406
Summary: kyber: fix out of bounds access when preempted
Published: 2021-05-31T15:39:45.041586Z

kyber: fix out of bounds access when preempted

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.120 by commit 0b6b4b90b74c27bea968c214d820ba4254b903a5, it was introduced in version v4.18 by commit a6088845c2bf754d6cb2572b484180680b037804. For more details please see the references link.
Vulnerability: GSD-2022-1001491
Summary: net: hns3: add vlan list lock to protect vlan list
Published: 2022-04-24T21:16:36.274076Z

net: hns3: add vlan list lock to protect vlan list

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 09e383ca97e798f9954189b741af54b5c51e7a97, it was introduced in version v5.1 by commit c6075b193462d9a3930fb41f587f94720658752a. For more details please see the references link.
Vulnerability: GSD-2021-1000056
Summary: usb: dwc3: core: Do core softreset when switch mode
Published: 2021-05-31T15:39:45.031586Z

usb: dwc3: core: Do core softreset when switch mode

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit 1c10fd60c8595ea7ff7e29d3cf1fa88069941da3, it was introduced in version v4.12 by commit 41ce1456e1dbbc7355d0fcc10cf7c337c13def24. For more details please see the references link.
Vulnerability: GSD-2021-1002591
Summary: seg6: fix the iif in the IPv6 socket control block
Published: 2021-12-19T19:44:04.295469Z

seg6: fix the iif in the IPv6 socket control block

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit 98adb2bbfa407c9290bda299d4c6f7a1c4ebd5e1, it was introduced in version v5.0 by commit ef489749aae508e6f17886775c075f12ff919fb1. For more details please see the references link.
Vulnerability: GSD-2021-1001217
Summary: KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio
Published: 2021-08-03T01:38:52.535228Z

KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.4 by commit 069d44a24c0ff8f85adf49233aae7a8ca16f5c7e, it was introduced in version v5.13 by commit 5d3c4c79384af06e3c8e25b7770b6247496b4417. For more details please see the references link.
Vulnerability: GSD-2022-1000280
Summary: ASoC: hdmi-codec: Fix OOB memory accesses
Published: 2022-02-18T22:05:38.668004Z

ASoC: hdmi-codec: Fix OOB memory accesses

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.22 by commit 10007bd96b6c4c3cfaea9e76c311b06a07a5e260. For more details please see the references link.
Vulnerability: GSD-2022-1001868
Summary: libbpf: Fix possible NULL pointer dereference when destroying skeleton
Published: 2022-04-24T21:49:57.022762Z

libbpf: Fix possible NULL pointer dereference when destroying skeleton

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit b385ebe91ae917677ae8cdd3240828155248ff0c, it was introduced in version v5.6 by commit d66562fba1ce66975bd61b0786fb8b1810f33caa. For more details please see the references link.
Vulnerability: GSD-2021-1001647
Summary: sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
Published: 2021-10-19T16:29:51.889555Z

sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.71 by commit 9c6591ae8e63f93c895ad5e2703c36c548aac997, it was introduced in version v4.8 by commit 3acb50c18d8d6650f10919464ade4dcdaf41d62f. For more details please see the references link.
Vulnerability: GSD-2021-1000955
Summary: usb: dwc3: ep0: fix NULL pointer exception
Published: 2021-06-30T00:29:03.856947Z

usb: dwc3: ep0: fix NULL pointer exception

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.44 by commit 470403639114895e2697c766fbe17be8d0e9b67a. For more details please see the references link.
Vulnerability: GSD-2022-1002317
Summary: scsi: libfc: Fix use after free in fc_exch_abts_resp()
Published: 2022-04-24T22:33:46.798036Z

scsi: libfc: Fix use after free in fc_exch_abts_resp()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 6044ad64f41c87382cfeeca281573d1886d80cbe. For more details please see the references link.
Vulnerability: GSD-2021-1002342
Summary: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
Published: 2021-11-29T02:39:38.299788Z

arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.5 by commit 118c826ef8b43efe0fda8faf419673707ee8c5e5. For more details please see the references link.
Vulnerability: GSD-2021-1001997
Summary: xhci: Fix command ring pointer corruption while aborting a command
Published: 2021-11-14T15:15:09.866574Z

xhci: Fix command ring pointer corruption while aborting a command

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.155 by commit 01c2dcb67e71c351006dd17cbba86c26b7f61eaf. For more details please see the references link.
Vulnerability: GSD-2021-1000685
Summary: drm/amdgpu: Fix a use-after-free
Published: 2021-06-04T20:02:15.129542Z

drm/amdgpu: Fix a use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.271 by commit 3293cf3513d69f00c14d43e2020826d45ea0e46a, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1000900
Summary: netfilter: fix use-after-free in __nf_register_net_hook()
Published: 2022-03-18T00:29:49.632898Z

netfilter: fix use-after-free in __nf_register_net_hook()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.233 by commit bdd8fc1b826e6f23963f5bef3f7431c6188ec954, it was introduced in version v4.14 by commit 2420b79f8c18a75ee2417cace381f4604b9b4365. For more details please see the references link.
Vulnerability: GSD-2022-1001612
Summary: rtc: pl031: fix rtc features null pointer dereference
Published: 2022-04-24T21:28:11.410006Z

rtc: pl031: fix rtc features null pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit d274ce4a3dfd0b9a292667535578359b865765cb, it was introduced in version v5.12 by commit d9b0dd54a1943f47a381a474f8ea2c94466110c0. For more details please see the references link.
Vulnerability: GSD-2021-1002712
Summary: scsi: scsi_debug: Don't call kcalloc() if size arg is zero
Published: 2021-12-27T05:38:27.755166Z

scsi: scsi_debug: Don't call kcalloc() if size arg is zero

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.88 by commit aa1f912712a109b6306746133de7e5343f016b26. For more details please see the references link.
Vulnerability: GSD-2022-1001242
Summary: ath9k_htc: fix uninit value bugs
Published: 2022-04-24T20:57:09.129075Z

ath9k_htc: fix uninit value bugs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 5abf2b761b998063f5e2bae93fd4ab10e2a80f10, it was introduced in version v2.6.35 by commit fb9987d0f748c983bb795a86f47522313f701a08. For more details please see the references link.
Vulnerability: GSD-2021-1001094
Summary: net: caif: fix memory leak in ldisc_open
Published: 2021-07-08T01:55:55.332309Z

net: caif: fix memory leak in ldisc_open

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.274 by commit dede006783102f26a49e9eb33fd673b2937ed692. For more details please see the references link.
Vulnerability: GSD-2022-1002194
Summary: MIPS: fix fortify panic when copying asm exception handlers
Published: 2022-04-24T22:20:37.568778Z

MIPS: fix fortify panic when copying asm exception handlers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 0aeaadc52b05b976c587182d234e3f18e8fce389. For more details please see the references link.
Vulnerability: GSD-2022-1000453
Summary: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
Published: 2022-02-27T03:09:05.416639Z

scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit d9d93f32534a0a80a1c26bdb0746d90a7b19c2c2. For more details please see the references link.
Vulnerability: GSD-2022-1000146
Summary: drm/vmwgfx: Fix stale file descriptors on failed usercopy
Published: 2022-02-18T21:47:06.372503Z

drm/vmwgfx: Fix stale file descriptors on failed usercopy

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.175 by commit 84b1259fe36ae0915f3d6ddcea6377779de48b82, it was introduced in version v4.14 by commit c906965dee22d5e95d0651759ba107b420212a9f. For more details please see the references link.
Vulnerability: GSD-2022-1002481
Summary: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
Published: 2022-04-24T22:52:53.873487Z

ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit f4de974019a0adf34d0e7de6b86252f1bd266b06. For more details please see the references link.
Vulnerability: GSD-2021-1001581
Summary: net_sched: fix NULL deref in fifo_set_limit()
Published: 2021-10-19T16:24:45.346402Z

net_sched: fix NULL deref in fifo_set_limit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.153 by commit c951a3be5e8803e93bb49a0aca0d30457d3c1b67, it was introduced in version v2.6.27 by commit fb0305ce1b03f6ff17f84f2c63daccecb45f2805. For more details please see the references link.
Vulnerability: GSD-2022-1000516
Summary: net: do not keep the dst cache when uncloning an skb dst and its metadata
Published: 2022-02-27T03:17:31.901920Z

net: do not keep the dst cache when uncloning an skb dst and its metadata

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit ff6962c6c9570856f32306859eb92e8b3ea78cc1, it was introduced in version v4.6 by commit d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8. For more details please see the references link.
Vulnerability: GSD-2022-1000845
Summary: mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
Published: 2022-03-18T00:23:22.339713Z

mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.104 by commit 13f0ea8d11934a017f5c353fa049a09de3c37ec0. For more details please see the references link.
Vulnerability: GSD-2022-1001757
Summary: can: mcba_usb: properly check endpoint type
Published: 2022-04-24T21:40:07.172168Z

can: mcba_usb: properly check endpoint type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit fa9c1f14002dc0d5293e16a2007bd89b6e79207b, it was introduced in version v4.12 by commit 51f3baad7de943780ce0c17bd7975df567dd6e14. For more details please see the references link.
Vulnerability: GSD-2021-1002207
Summary: RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
Published: 2021-11-14T15:24:42.606665Z

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 5508546631a0f555d7088203dec2614e41b5106e, it was introduced in version v5.13 by commit a639e66703ee45745dc4057c7c2013ed9e1963a7. For more details please see the references link.
Vulnerability: GSD-2021-1000390
Summary: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map
Published: 2021-05-31T15:39:45.041586Z

crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 617ec35ed51f731a593ae7274228ef2cfc9cb781, it was introduced in version v5.10 by commit ac2614d721dea2ff273af19c6c5d508d58a2bb3e. For more details please see the references link.
Vulnerability: GSD-2022-1001307
Summary: mm: invalidate hwpoison page cache page in fault path
Published: 2022-04-24T21:02:42.415174Z

mm: invalidate hwpoison page cache page in fault path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 6ab5aba503c6d3b926453f5ca18491e8a075e5cf. For more details please see the references link.
Vulnerability: GSD-2021-1001978
Summary: drm/msm: Fix null pointer dereference on pointer edp
Published: 2021-11-14T15:14:21.606251Z

drm/msm: Fix null pointer dereference on pointer edp

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.213 by commit 7f642b93710b6b1119bdff90be01e6b5a2a5d669, it was introduced in version v4.0 by commit ab5b0107ccf3821a6837b0f2819270d6fa0b278f. For more details please see the references link.
Vulnerability: GSD-2021-1002657
Summary: net: systemport: Add global locking for descriptor lifecycle
Published: 2021-12-27T05:33:29.972987Z

net: systemport: Add global locking for descriptor lifecycle

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.222 by commit 595a684fa6f23b21958379a18cfa83862c73c2e1, it was introduced in version v3.16 by commit 80105befdb4b8cea924711b40b2462b87df65b62. For more details please see the references link.