TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2021-1002017
Summary: drm/ttm: fix memleak in ttm_transfered_destroy
Published: 2021-11-14T15:16:06.238597Z

drm/ttm: fix memleak in ttm_transfered_destroy

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.157 by commit bd99782f3ca491879e8524c89b1c0f40071903bd. For more details please see the references link.
Vulnerability: GSD-2021-1002502
Summary: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
Published: 2021-12-19T19:40:07.167873Z

IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.85 by commit 2c08271f4ed0e24633b3f81ceff61052b9d45efc, it was introduced in version v4.5 by commit 46b010d3eeb8eb29c740c4ef09c666485f5c07e6. For more details please see the references link.
Vulnerability: GSD-2022-1001052
Summary: mips: ralink: fix a refcount leak in ill_acc_of_setup()
Published: 2022-04-24T20:42:33.825198Z

mips: ralink: fix a refcount leak in ill_acc_of_setup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit c74c755daed551b9aceb8388159180861474bdfe. For more details please see the references link.
Vulnerability: GSD-2021-1002152
Summary: xhci: Fix command ring pointer corruption while aborting a command
Published: 2021-11-14T15:22:12.198323Z

xhci: Fix command ring pointer corruption while aborting a command

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit ff0e50d3564f33b7f4b35cadeabd951d66cfc570. For more details please see the references link.
Vulnerability: GSD-2022-1001402
Summary: scsi: mpi3mr: Fix memory leaks
Published: 2022-04-24T21:10:34.850514Z

scsi: mpi3mr: Fix memory leaks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 27fc9e90171ab0a94a411f3fdb3522ef5acb9537. For more details please see the references link.
Vulnerability: GSD-2021-1000495
Summary: uio_hv_generic: Fix a memory leak in error handling paths
Published: 2021-05-31T23:45:56.468200Z

uio_hv_generic: Fix a memory leak in error handling paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.7 by commit 53486c467e356e06aa37047c984fccd64d78c827, it was introduced in version v4.20 by commit cdfa835c6e5e87d145f9f632b58843de97509f2b. For more details please see the references link.
Vulnerability: GSD-2022-1002384
Summary: drivers: net: slip: fix NPD bug in sl_tx_timeout()
Published: 2022-04-24T22:41:23.320072Z

drivers: net: slip: fix NPD bug in sl_tx_timeout()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 3fdb033f8f8c978489c7702a4a44494b7ae63424. For more details please see the references link.
Vulnerability: GSD-2022-1000643
Summary: ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
Published: 2022-02-27T03:35:22.744862Z

ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.6 by commit 7bf02718b736e66609fc1002a358727a945f46a6, it was introduced in version v5.10 by commit f33d9e2b48a34e1558b67a473a1fc1d6e793f93c. For more details please see the references link.
Vulnerability: GSD-2022-1001951
Summary: gcc-plugins: latent_entropy: use /dev/urandom
Published: 2022-04-24T21:57:33.754217Z

gcc-plugins: latent_entropy: use /dev/urandom

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.112 by commit cc21ae932656483b07982afcec7e38a5bd6acc0c, it was introduced in version v4.9 by commit 38addce8b600ca335dc86fa3d48c890f1c6fa1f4. For more details please see the references link.
Vulnerability: GSD-2022-1000213
Summary: af_packet: fix data-race in packet_setsockopt / packet_setsockopt
Published: 2022-02-18T21:56:15.030162Z

af_packet: fix data-race in packet_setsockopt / packet_setsockopt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.97 by commit 32e179971085832f5335e308774a04dd1147a316, it was introduced in version v4.3 by commit 47dceb8ecdc1c3ad1818dfea3d659a05b74c3fc2. For more details please see the references link.
Vulnerability: GSD-2021-1001284
Summary: cgroup: verify that source is a string
Published: 2021-08-03T01:57:16.084769Z

cgroup: verify that source is a string

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.52 by commit 811763e3beb6c922d168e9f509ec593e9240842e, it was introduced in version v5.1 by commit 8d2451f4994fa60a57617282bab91b98266a00b1. For more details please see the references link.
Vulnerability: GSD-2022-1002500
Summary: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
Published: 2022-04-24T22:54:54.415640Z

drm/tegra: Fix reference leak in tegra_dsi_ganged_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 0e2f4e434e71dffd1085c3dccd676514bd71d316, it was introduced in version v3.19 by commit e94236cde4d519cdecd45e2435defba33abdc99f. For more details please see the references link.
Vulnerability: GSD-2021-1001050
Summary: kvm: LAPIC: Restore guard to prevent illegal APIC register access
Published: 2021-06-30T00:36:20.924806Z

kvm: LAPIC: Restore guard to prevent illegal APIC register access

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit a2aff09807fbe4018c269d3773a629949058b210, it was introduced in version v5.3 by commit 01402cf81051f796dac7c60ca11d6147153ca46a. For more details please see the references link.
Vulnerability: GSD-2022-1002150
Summary: netfilter: nf_tables: initialize registers in nft_do_chain()
Published: 2022-04-24T22:16:25.426030Z

netfilter: nf_tables: initialize registers in nft_do_chain()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.109 by commit 2c74374c2e88c7b7992bf808d9f9391f7452f9d9, it was introduced in version v3.13 by commit 96518518cc417bb0a8c80b9fb736202e28acdf96. For more details please see the references link.
Vulnerability: GSD-2022-1000497
Summary: Revert "gfs2: check context in gfs2_glock_put"
Published: 2022-02-27T03:15:23.458290Z

Revert "gfs2: check context in gfs2_glock_put"

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 4ad70fad65d7faf7d3d3126218eba48651d0674a, it was introduced in version v5.16 by commit 660a6126f8c3208f6df8d552039cda078a8426d1. For more details please see the references link.
Vulnerability: GSD-2021-1001400
Summary: media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
Published: 2021-08-03T02:29:25.500907Z

media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.241 by commit e818f2ff648581a6c553ae2bebc5dcef9a8bb90c, it was introduced in version v2.6.34 by commit dae52d009fc950b5c209260d50fcc000f5becd3c. For more details please see the references link.
Vulnerability: GSD-2021-1002386
Summary: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
Published: 2021-12-19T19:35:05.206057Z

staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit c0ef0e75a858cbd8618b473f22fbca36106dcf82, it was introduced in version v3.2 by commit 66898177e7e5486dc77a4ba742efa4e2e9e900a4. For more details please see the references link.
Vulnerability: GSD-2021-1001953
Summary: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
Published: 2021-11-14T15:13:13.670989Z

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.252 by commit 2df6c023050205c4d04ffc121bc549f65cb8d1df, it was introduced in version v4.3 by commit 69aba7948cbe53f2f1827e84e9dd0ae470a5072e. For more details please see the references link.
Vulnerability: GSD-2021-1000641
Summary: USB: usbfs: Don't WARN about excessively large memory allocations
Published: 2021-06-04T19:52:57.584166Z

USB: usbfs: Don't WARN about excessively large memory allocations

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 2c835fede13e03f2743a333e4370b5ed2db91e83, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2022-1001286
Summary: video: fbdev: sm712fb: Fix crash in smtcfb_read()
Published: 2022-04-24T21:01:26.142340Z

video: fbdev: sm712fb: Fix crash in smtcfb_read()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit e46779a5706941fb9cd6e0264427953eb77d7888. For more details please see the references link.
Vulnerability: GSD-2021-1000211
Summary: arm64: entry: always set GIC_PRIO_PSR_I_SET during entry
Published: 2021-05-31T15:39:45.041586Z

arm64: entry: always set GIC_PRIO_PSR_I_SET during entry

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit d8d52005f57bbb4a4ec02f647e2555d327135c68, it was introduced in version v5.10 by commit 23529049c68423820487304f244144e0d576e85a. For more details please see the references link.
Vulnerability: GSD-2022-1000881
Summary: mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
Published: 2022-03-18T00:27:13.107029Z

mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.183 by commit 964f155c382f80242a0ba15034a2e792788f5c1c. For more details please see the references link.
Vulnerability: GSD-2022-1001793
Summary: ext4: don't BUG if someone dirty pages without asking ext4 first
Published: 2022-04-24T21:42:38.409067Z

ext4: don't BUG if someone dirty pages without asking ext4 first

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit a0856764dc1276ad2dc7891288c2e9246bf11a37. For more details please see the references link.
Vulnerability: GSD-2021-1001816
Summary: mm, slub: fix mismatch between reconstructed freelist depth and cnt
Published: 2021-10-28T13:50:26.796632Z

mm, slub: fix mismatch between reconstructed freelist depth and cnt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit a1ec195a1943c39fffa96e47ab6532d74a9f4c78, it was introduced in version v4.17 by commit c3895391df385c6628638f014c87e16f5e2efd45. For more details please see the references link.
Vulnerability: GSD-2021-1000704
Summary: tipc: skb_linearize the head skb when reassembling msgs
Published: 2021-06-04T20:06:11.054366Z

tipc: skb_linearize the head skb when reassembling msgs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.271 by commit b2c8d28c34b3070407cb1741f9ba3f15d0284b8b, it was introduced in version v4.3 by commit 45c8b7b175ceb2d542e0fe15247377bf3bce29ec. For more details please see the references link.
Vulnerability: GSD-2021-1002739
Summary: sch_cake: do not call cake_destroy() from cake_init()
Published: 2021-12-27T05:45:53.208318Z

sch_cake: do not call cake_destroy() from cake_init()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit f6deae2e2d83bd267e1986f5d71d8c458e18fd99, it was introduced in version v4.19 by commit 046f6fd5daefac7f5abdafb436b30f63bc7c602b. For more details please see the references link.
Vulnerability: GSD-2022-1001269
Summary: f2fs: fix missing free nid in f2fs_handle_failed_inode
Published: 2022-04-24T20:59:55.377942Z

f2fs: fix missing free nid in f2fs_handle_failed_inode

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 8579b413af100ec5f3592bd6cf11559312b380c0, it was introduced in version v4.19 by commit 7735730d39d75e70476c1b01435b9b1f41637f0e. For more details please see the references link.
Vulnerability: GSD-2021-1000354
Summary: i2c: imx: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: imx: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 3a0cdd336d92c429b51a79bf4f64b17eafa0325d, it was introduced in version v5.7 by commit 3a5ee18d2a32bda6b9a1260136f6805848e3839d. For more details please see the references link.
Vulnerability: GSD-2021-1002369
Summary: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
Published: 2021-12-19T19:34:16.821381Z

staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.292 by commit 9186680382934b0e7529d3d70dcc0a21d087683b, it was introduced in version v3.2 by commit 66898177e7e5486dc77a4ba742efa4e2e9e900a4. For more details please see the references link.
Vulnerability: GSD-2021-1002693
Summary: sch_cake: do not call cake_destroy() from cake_init()
Published: 2021-12-27T05:37:05.913773Z

sch_cake: do not call cake_destroy() from cake_init()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.88 by commit 20ad1ef02f9ad5e1dda9eeb113e4c158b4806986, it was introduced in version v4.19 by commit 046f6fd5daefac7f5abdafb436b30f63bc7c602b. For more details please see the references link.
Vulnerability: GSD-2022-1001639
Summary: ax25: Fix UAF bugs in ax25 timers
Published: 2022-04-24T21:30:49.684968Z

ax25: Fix UAF bugs in ax25 timers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.35 by commit 85f25bb9a0051198af48ac2f3afc9f16f2277114. For more details please see the references link.
Vulnerability: GSD-2022-1000182
Summary: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
Published: 2022-02-18T21:51:57.077581Z

bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit ff6bdc205fd0a83bd365405d4e31fb5905826996, it was introduced in version v5.9 by commit fa28dcb82a38f8e3993b0fae9106b1a80b59e4f0. For more details please see the references link.
Vulnerability: GSD-2021-1001115
Summary: mac80211: remove warning in ieee80211_get_sband()
Published: 2021-07-08T01:57:19.202296Z

mac80211: remove warning in ieee80211_get_sband()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.129 by commit ae9de9444b54c867c9fc1383a6dcba1018cddaea. For more details please see the references link.
Vulnerability: GSD-2022-1002445
Summary: media: usb: go7007: s2250-board: fix leak in probe()
Published: 2022-04-24T22:48:38.495645Z

media: usb: go7007: s2250-board: fix leak in probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit a97130cd5b0c00eec169b10a16d922b9ea67324a, it was introduced in version v3.10 by commit d3b2ccd9e307eae80b4b4eeb0ede46cb02212df2. For more details please see the references link.
Vulnerability: GSD-2022-1000478
Summary: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
Published: 2022-02-27T03:12:35.263890Z

Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9, it was introduced in version v4.15 by commit c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c. For more details please see the references link.
Vulnerability: GSD-2021-1001545
Summary: mcb: fix error handling in mcb_alloc_bus()
Published: 2021-10-19T16:23:06.790625Z

mcb: fix error handling in mcb_alloc_bus()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.249 by commit 115b07d9f47e3996430b8f2007edd9768e1f807f, it was introduced in version v4.7 by commit 5d9e2ab9fea4cdf0a2522f5cbed2e7fbb220d757. For more details please see the references link.
Vulnerability: GSD-2022-1002015
Summary: ath11k: fix kernel panic during unload/load ath11k modules
Published: 2022-04-24T22:02:59.723403Z

ath11k: fix kernel panic during unload/load ath11k modules

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit c6a815f5abdf324108799829dd19ea62fef4bf95. For more details please see the references link.
Vulnerability: GSD-2022-1000028
Summary: Input: appletouch - initialize work before device registration
Published: 2022-01-10T19:50:47.760167Z

Input: appletouch - initialize work before device registration

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.170 by commit 975774ea7528b489930b76a77ffc4d5379b95ff2, it was introduced in version v2.6.23 by commit 5a6eb676d3bc4d7a6feab200a92437b62ad298da. For more details please see the references link.
Vulnerability: GSD-2021-1002040
Summary: can: peak_pci: peak_pci_remove(): fix UAF
Published: 2021-11-14T15:17:09.453407Z

can: peak_pci: peak_pci_remove(): fix UAF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 28f28e4bc3a5e0051faa963f10b778ab38c1db69, it was introduced in version v3.4 by commit e6d9c80b7ca1504411ad6d7acdb8683e4ae1c9cd. For more details please see the references link.
Vulnerability: GSD-2022-1001510
Summary: powerpc/pseries: Fix use after free in remove_phb_dynamic()
Published: 2022-04-24T21:18:45.165557Z

powerpc/pseries: Fix use after free in remove_phb_dynamic()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 403f9e0bc5535a0a5184d1352fa3a70e6ffacb6f, it was introduced in version v4.8 by commit 2dd9c11b9d4dfbd6c070eab7b81197f65e82f1a0. For more details please see the references link.
Vulnerability: GSD-2021-1000587
Summary: btrfs: release path before starting transaction when cloning inline extent
Published: 2021-06-04T19:43:14.599841Z

btrfs: release path before starting transaction when cloning inline extent

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit 88f566beb1cf843876cffc4153640e5267d1171b, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1002410
Summary: ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
Published: 2021-12-19T19:36:04.280721Z

ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.219 by commit 33712bc6482ef9e4ac13835ebe20f77b4984a8aa, it was introduced in version v3.8 by commit 9c4566a117a6fe404a0e49b27ac71b631945a70f. For more details please see the references link.
Vulnerability: GSD-2022-1001140
Summary: video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Published: 2022-04-24T20:48:34.427584Z

video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 41baa86b6c802cdc6ab8ff2d46c083c9be93de81. For more details please see the references link.
Vulnerability: GSD-2022-1000301
Summary: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
Published: 2022-02-27T02:48:16.224462Z

ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.267 by commit b541845dfc4e7df551955e70deec0921d6b297c3, it was introduced in version v4.0 by commit f243e5a7859a24d10975afb9a1708cac624ba6f1. For more details please see the references link.
Vulnerability: GSD-2021-1001396
Summary: media: zr364xx: fix memory leak in zr364xx_start_readpipe
Published: 2021-08-03T02:28:09.953061Z

media: zr364xx: fix memory leak in zr364xx_start_readpipe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 021c294dff030f3ba38eb81e400ba123db32ecbc, it was introduced in version v2.6.32 by commit ccbf035ae5de4c535160fc99f73feb44cc55b534. For more details please see the references link.
Vulnerability: GSD-2022-1002296
Summary: nfc: nci: add flush_workqueue to prevent uaf
Published: 2022-04-24T22:31:26.105217Z

nfc: nci: add flush_workqueue to prevent uaf

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.239 by commit 1a1748d0dd0f0a98535c6baeef671c8722107639, it was introduced in version v3.2 by commit 6a2968aaf50c7a22fced77a5e24aa636281efca8. For more details please see the references link.
Vulnerability: GSD-2022-1000751
Summary: sr9700: sanity check for packet length
Published: 2022-03-18T00:15:20.153445Z

sr9700: sanity check for packet length

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit 639f72dce8667a3d601561e0e47d53ad999e7f8a. For more details please see the references link.
Vulnerability: GSD-2022-1001843
Summary: powerpc: 8xx: fix a return value error in mpc8xx_pic_init
Published: 2022-04-24T21:47:15.873671Z

powerpc: 8xx: fix a return value error in mpc8xx_pic_init

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 45962427aca2cc453b72e984252a5ca7861740ee, it was introduced in version v5.2 by commit cc76404feaed597bb4f5234d34d3f49e2d1139bf. For more details please see the references link.
Vulnerability: GSD-2022-1000244
Summary: tracing/histogram: Fix a potential memory leak for kstrdup()
Published: 2022-02-18T22:00:36.329605Z

tracing/histogram: Fix a potential memory leak for kstrdup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.19 by commit e33fa4a46ee22de88a700e2e3d033da8214a5175, it was introduced in version v5.6 by commit d380dcde9a07ca5de4805dee11f58a98ec0ad6ff. For more details please see the references link.
Vulnerability: GSD-2022-1002279
Summary: pinctrl: samsung: drop pin banks references on error paths
Published: 2022-04-24T22:29:42.853450Z

pinctrl: samsung: drop pin banks references on error paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit e05221d20153383cca49d93f976edd1ede249b4a, it was introduced in version v3.8 by commit ab663789d69760d2735402f66501f20b60312a3d. For more details please see the references link.
Vulnerability: GSD-2021-1001729
Summary: RDMA/cma: Do not change route.addr.src_addr.ss_family
Published: 2021-10-19T16:33:49.660958Z

RDMA/cma: Do not change route.addr.src_addr.ss_family

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit d9ba5565c7f81337e4fa2f02f7fe2f33c0b0a7e6, it was introduced in version v5.10 by commit 732d41c545bb359cbb8c94698bdc1f8bcf82279c. For more details please see the references link.
Vulnerability: GSD-2021-1002806
Summary: ipmi: ssif: initialize ssif_info->client early
Published: 2021-12-30T02:44:16.805041Z

ipmi: ssif: initialize ssif_info->client early

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.89 by commit 1f6ab847461ce7dd89ae9db2dd4658c993355d7c, it was introduced in version v5.4 by commit c4436c9149c5d2bc0c49ab57ec85c75ea1c4d61c. For more details please see the references link.
Vulnerability: GSD-2022-1000614
Summary: usb: xhci-plat: fix crash when suspend if remote wake enable
Published: 2022-02-27T03:31:28.661897Z

usb: xhci-plat: fix crash when suspend if remote wake enable

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit 8b05ad29acb972850ad795fa850e814b2e758b83. For more details please see the references link.
Vulnerability: GSD-2022-1001906
Summary: ext4: make mb_optimize_scan performance mount option work with extents
Published: 2022-04-24T21:53:39.435383Z

ext4: make mb_optimize_scan performance mount option work with extents

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 3c65b7309d2e0dd8d134e7813cd95debd91ea07b, it was introduced in version v5.13 by commit 196e402adf2e4cd66f101923409f1970ec5f1af3. For more details please see the references link.
Vulnerability: GSD-2021-1001683
Summary: scsi: iscsi: Fix iscsi_task use after free
Published: 2021-10-19T16:31:41.205288Z

scsi: iscsi: Fix iscsi_task use after free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.12 by commit 1642f51ac0d4f2b55d5748094c49ff8f7191b93c, it was introduced in version v5.14 by commit d39df158518ccc3bf24ee18082b5e100c8f014aa. For more details please see the references link.
Vulnerability: GSD-2021-1000991
Summary: net: ethernet: fix potential use-after-free in ec_bhf_remove
Published: 2021-06-30T00:31:48.889297Z

net: ethernet: fix potential use-after-free in ec_bhf_remove

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 95deeb29d831e2fae608439e243e7a520611e7ea, it was introduced in version v3.15 by commit 6af55ff52b02d492d45db88df3e461fa51a6f753. For more details please see the references link.
Vulnerability: GSD-2021-1001379
Summary: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
Published: 2021-08-03T02:24:16.781261Z

watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 522e75ed63f67e815d4ec0deace67df22d9ce78e. For more details please see the references link.
Vulnerability: GSD-2022-1001455
Summary: drm/dp: Fix off-by-one in register cache size
Published: 2022-04-24T21:14:36.742204Z

drm/dp: Fix off-by-one in register cache size

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit e504041c01d95a761d69803352a6a6689f6f9229, it was introduced in version v5.12 by commit e2e16da398d9149ede0162a55f44537582aed2e7. For more details please see the references link.
Vulnerability: GSD-2021-1002105
Summary: mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()
Published: 2021-11-14T15:20:06.757266Z

mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit b77ba1e02345bafd703f0d407bdbd88c3be1f767, it was introduced in version v5.14 by commit 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49. For more details please see the references link.
Vulnerability: GSD-2021-1000138
Summary: ext4: fix check to prevent false positive report of incorrect used inodes
Published: 2021-05-31T15:39:45.031586Z

ext4: fix check to prevent false positive report of incorrect used inodes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.36 by commit 098b257563b959f4ca6c1d82fde0ee727792cb19, it was introduced in version v4.18 by commit 5012284700775a4e6e3fbe7eac4c543c4874b559. For more details please see the references link.
Vulnerability: GSD-2022-1001005
Summary: lz4: fix LZ4_decompress_safe_partial read out of bound
Published: 2022-04-24T20:38:55.913949Z

lz4: fix LZ4_decompress_safe_partial read out of bound

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 467d5e200ab4486b744fe1776154a43d1aa22d4b. For more details please see the references link.
Vulnerability: GSD-2021-1000092
Summary: thermal/drivers/cpufreq_cooling: Fix slab OOB issue
Published: 2021-05-31T15:39:45.031586Z

thermal/drivers/cpufreq_cooling: Fix slab OOB issue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit 876a5f33e5d961d879c5436987c09b3d9ef70379, it was introduced in version v5.8 by commit 371a3bc79c11b707d7a1b7a2c938dc3cc042fffb. For more details please see the references link.
Vulnerability: GSD-2021-1002555
Summary: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
Published: 2021-12-19T19:42:28.886560Z

net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit 12f907cb11576b8cd0b1d95a16d1f10ed5bb7237. For more details please see the references link.
Vulnerability: GSD-2021-1000568
Summary: s390/dasd: add missing discipline function
Published: 2021-06-04T19:40:27.143346Z

s390/dasd: add missing discipline function

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit a16be88a3d7e5efcb59a15edea87a8bd369630c6, it was introduced in version v5.11 by commit b72949328869dfd45f6452c2410647afd7db5f1a. For more details please see the references link.
Vulnerability: GSD-2021-1000207
Summary: netfilter: nftables: avoid overflows in nft_hash_buckets()
Published: 2021-05-31T15:39:45.041586Z

netfilter: nftables: avoid overflows in nft_hash_buckets()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit a388d10961ff8578b1a6691945d406c0f33aa71b, it was introduced in version v4.9 by commit 0ed6389c483dc77cdbdd48de0ca7ce41723dd667. For more details please see the references link.
Vulnerability: GSD-2022-1001290
Summary: media: omap3isp: Use struct_group() for memcpy() region
Published: 2022-04-24T21:01:41.567503Z

media: omap3isp: Use struct_group() for memcpy() region

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 389d9bf28d814fcdaeb632935084b79e98db0407, it was introduced in version v4.18 by commit 378e3f81cb5653b28100d3231db6da07b0581ff4. For more details please see the references link.
Vulnerability: GSD-2022-1000878
Summary: usb: gadget: clear related members when goto fail
Published: 2022-03-18T00:27:05.969618Z

usb: gadget: clear related members when goto fail

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.183 by commit 58b419d16e8791e16f8865463aa28bbcef726e26. For more details please see the references link.
Vulnerability: GSD-2021-1000657
Summary: tipc: skb_linearize the head skb when reassembling msgs
Published: 2021-06-04T19:56:07.313132Z

tipc: skb_linearize the head skb when reassembling msgs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.193 by commit 4b1761898861117c97066aea6c58f68a7787f0bf, it was introduced in version v4.3 by commit 45c8b7b175ceb2d542e0fe15247377bf3bce29ec. For more details please see the references link.
Vulnerability: GSD-2021-1001945
Summary: net: batman-adv: fix error handling
Published: 2021-11-14T15:12:53.603851Z

net: batman-adv: fix error handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.289 by commit 07533f1a673ce1126d0a72ef1e4b5eaaa3dd6d20, it was introduced in version v2.6.38 by commit c6c8fea29769d998d94fcec9b9f14d4b52b349d3. For more details please see the references link.
Vulnerability: GSD-2021-1002390
Summary: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
Published: 2021-12-19T19:35:14.740053Z

ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit abbd5faa0748d0aa95d5191d56ff7a17a6275bd1. For more details please see the references link.
Vulnerability: GSD-2021-1001416
Summary: watchdog: Fix possible use-after-free in wdt_startup()
Published: 2021-08-03T02:34:13.212618Z

watchdog: Fix possible use-after-free in wdt_startup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 0ac50a76cf3cd63db000648b3b19f3f98b8aaa76. For more details please see the references link.
Vulnerability: GSD-2022-1000481
Summary: pidfd: fix test failure due to stack overflow on some arches
Published: 2022-02-27T03:12:55.396281Z

pidfd: fix test failure due to stack overflow on some arches

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit fc6d187f2986b20de112e9d442c4d0962860f1e6. For more details please see the references link.
Vulnerability: GSD-2022-1002146
Summary: ALSA: pcm: Fix races among concurrent prealloc proc writes
Published: 2022-04-24T22:16:01.956266Z

ALSA: pcm: Fix races among concurrent prealloc proc writes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.109 by commit b560d670c87d7d40b3cf6949246fa4c7aa65a00a. For more details please see the references link.
Vulnerability: GSD-2021-1001046
Summary: net: ieee802154: fix null deref in parse dev addr
Published: 2021-06-30T00:36:06.449874Z

net: ieee802154: fix null deref in parse dev addr

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.12 by commit fdd51e34f45311ab6e48d2147cbc2904731b9993. For more details please see the references link.
Vulnerability: GSD-2022-1002516
Summary: mac80211: fix potential double free on mesh join
Published: 2022-04-24T22:57:18.124710Z

mac80211: fix potential double free on mesh join

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.309 by commit 615716af8644813355e014314a0bc1e961250f5a, it was introduced in version v4.9.233 by commit 3212d6248faf0efce6b7a718e198feecce0eea05. For more details please see the references link.
Vulnerability: GSD-2022-1002003
Summary: scsi: hisi_sas: Free irq vectors in order for v3 HW
Published: 2022-04-24T22:02:25.510566Z

scsi: hisi_sas: Free irq vectors in order for v3 HW

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 224903cc60d045576393c3b16907742f23e6c740. For more details please see the references link.
Vulnerability: GSD-2021-1001553
Summary: bpf: Fix integer overflow in prealloc_elems_and_freelist()
Published: 2021-10-19T16:23:30.077637Z

bpf: Fix integer overflow in prealloc_elems_and_freelist()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.211 by commit 078cdd572408176a3900a6eb5a403db0da22f8e0, it was introduced in version v4.6 by commit 557c0c6e7df8e14a46bd7560d193fa5bbc00a858. For more details please see the references link.
Vulnerability: GSD-2022-1002453
Summary: jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
Published: 2022-04-24T22:49:48.077218Z

jffs2: fix use-after-free in jffs2_clear_xattr_subsystem

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 3bd2454162ec6bbb5503233c804fce6e4b6dcec5, it was introduced in version v2.6.18 by commit aa98d7cf59b5b0764d3502662053489585faf2fe. For more details please see the references link.
Vulnerability: GSD-2021-1001103
Summary: mac80211: remove warning in ieee80211_get_sband()
Published: 2021-07-08T01:56:31.531511Z

mac80211: remove warning in ieee80211_get_sband()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.238 by commit a7abf2f48669fafe7324bf0ad19bd0d9c88d0ce1. For more details please see the references link.
Vulnerability: GSD-2022-1000194
Summary: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
Published: 2022-02-18T21:53:17.778756Z

rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.96 by commit 1dbb206730f3e5ce90014ad569ddf8167ec4124a, it was introduced in version v4.11 by commit c0cdc19f84a4712cf74888f83af286e3c2e14efd. For more details please see the references link.
Vulnerability: GSD-2021-1002685
Summary: xen/netfront: harden netfront against event channel storms
Published: 2021-12-27T05:36:46.121047Z

xen/netfront: harden netfront against event channel storms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.168 by commit 3e68d099f09c260a7dee28b99af02fe6977a9e66. For more details please see the references link.
Vulnerability: GSD-2021-1000342
Summary: RDMA/siw: Fix a use after free in siw_alloc_mr
Published: 2021-05-31T15:39:45.041586Z

RDMA/siw: Fix a use after free in siw_alloc_mr

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 608a4b90ece039940e9425ee2b39c8beff27e00c, it was introduced in version v5.3 by commit 2251334dcac9eb337575d8767e2a6a7e81848f7f. For more details please see the references link.
Vulnerability: GSD-2021-1000712
Summary: net: caif: add proper error handling
Published: 2021-06-24T23:58:37.692774Z

net: caif: add proper error handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.272 by commit a3536dce5895f714d9eead8afb92629a3fb5875b, it was introduced in version v3.3 by commit 7c18d2205ea76eef9674e59e1ecae4f332a53e9e. For more details please see the references link.
Vulnerability: GSD-2021-1001800
Summary: net: mdiobus: Fix memory leak in __mdiobus_register
Published: 2021-10-28T13:49:36.825662Z

net: mdiobus: Fix memory leak in __mdiobus_register

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.214 by commit a9831afa2dc8a18205403907c41aa4e0950ac611. For more details please see the references link.
Vulnerability: GSD-2022-1001785
Summary: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
Published: 2022-04-24T21:42:15.029301Z

media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 7e76f3ed7ab2ae026c6ef9cc23096a7554af8c52. For more details please see the references link.
Vulnerability: GSD-2022-1000897
Summary: ibmvnic: free reset-work-item when flushing
Published: 2022-03-18T00:29:17.092870Z

ibmvnic: free reset-work-item when flushing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.233 by commit 786576c03b313a9ff6585458aa0dfd039d897f51, it was introduced in version v4.18 by commit 2770a7984db588913e11a6dfcfe3461dbba9b7b2. For more details please see the references link.