TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1000231
Summary: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
Published: 2022-02-18T21:59:06.573627Z

scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.99 by commit ec4334152dae175dbd8fd5bde1d2139bbe7b42d0, it was introduced in version v3.16 by commit d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2. For more details please see the references link.
Vulnerability: GSD-2021-1002520
Summary: nfsd: fix use-after-free due to delegation race
Published: 2021-12-19T19:40:56.497174Z

nfsd: fix use-after-free due to delegation race

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.85 by commit eeb0711801f5e19ef654371b627682aed3b11373. For more details please see the references link.
Vulnerability: GSD-2022-1001070
Summary: ref_tracker: implement use-after-free detection
Published: 2022-04-24T20:43:25.744025Z

ref_tracker: implement use-after-free detection

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 3743c9de303fa36c2e2ca2522ab280c52bcafbd2. For more details please see the references link.
Vulnerability: GSD-2021-1002170
Summary: ocfs2: fix data corruption after conversion from inline format
Published: 2021-11-14T15:23:04.549931Z

ocfs2: fix data corruption after conversion from inline format

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 5314454ea3ff6fc746eaf71b9a7ceebed52888fa, it was introduced in version v5.10 by commit 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b. For more details please see the references link.
Vulnerability: GSD-2022-1001420
Summary: KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
Published: 2022-04-24T21:11:32.587546Z

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit d4a764be384f99da35378d4c3c7adb9b5e683536, it was introduced in version v4.2 by commit ca724305a2b02abcbecbf22577536fc8e965ab4f. For more details please see the references link.
Vulnerability: GSD-2021-1001930
Summary: comedi: vmk80xx: fix transfer-buffer overflows
Published: 2021-11-14T15:12:10.678067Z

comedi: vmk80xx: fix transfer-buffer overflows

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.292 by commit 5229159f1d052821007aff1a1beb7873eacf1a9f, it was introduced in version v2.6.31 by commit 985cafccbf9b7f862aa1c5ee566801e18b5161fb. For more details please see the references link.
Vulnerability: GSD-2021-1000622
Summary: drm/amd/amdgpu: fix refcount leak
Published: 2021-06-04T19:49:13.154892Z

drm/amd/amdgpu: fix refcount leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit dde2656e0bbb2ac7d83a7bd95a8d5c3c95bbc009, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000788
Summary: x86/kvm: Disable all PV features on crash
Published: 2021-06-25T00:05:41.825987Z

x86/kvm: Disable all PV features on crash

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.43 by commit 334c59d58de5faf449d9c9feaa8c50dd8b4046a7, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000272
Summary: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'
Published: 2021-05-31T15:39:45.041586Z

media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 711acdf0228dc71601247f28b56f13e850e395c8, it was introduced in version v5.5 by commit 32f0a6ddc8c98a1aade2bf3d07c79d5d2c6ceb9a. For more details please see the references link.
Vulnerability: GSD-2022-1002099
Summary: libbpf: Fix possible NULL pointer dereference when destroying skeleton
Published: 2022-04-24T22:11:04.291226Z

libbpf: Fix possible NULL pointer dereference when destroying skeleton

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 56722aa77b3bb9b53882182cb424514ed4287198, it was introduced in version v5.6 by commit d66562fba1ce66975bd61b0786fb8b1810f33caa. For more details please see the references link.
Vulnerability: GSD-2021-1001033
Summary: usb: dwc3: ep0: fix NULL pointer exception
Published: 2021-06-30T00:35:12.075030Z

usb: dwc3: ep0: fix NULL pointer exception

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.11 by commit 788755756dd4a6aba1de479fec20b0fa600e7f19. For more details please see the references link.
Vulnerability: GSD-2021-1001199
Summary: iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails
Published: 2021-08-03T01:35:28.206311Z

iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.4 by commit fe92c058199067ae90cf2a901ddf3c271893557a. For more details please see the references link.
Vulnerability: GSD-2022-1002133
Summary: riscv: Increase stack size under KASAN
Published: 2022-04-24T22:14:25.259585Z

riscv: Increase stack size under KASAN

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 34bc1f69bf569309e76e5dfd574ee9034ceca147, it was introduced in version v5.6 by commit 8ad8b72721d0f07fa02dbe71f901743f9c71c8e6. For more details please see the references link.
Vulnerability: GSD-2021-1001463
Summary: media: zr364xx: fix memory leak in zr364xx_start_readpipe
Published: 2021-08-03T02:47:56.703132Z

media: zr364xx: fix memory leak in zr364xx_start_readpipe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.276 by commit bbc80a972a3c5d7eba3f6c9c07af8fea42f5c513, it was introduced in version v2.6.32 by commit ccbf035ae5de4c535160fc99f73feb44cc55b534. For more details please see the references link.
Vulnerability: GSD-2021-1001176
Summary: bus: mhi: core: Validate channel ID when processing command completions
Published: 2021-08-03T01:32:29.927640Z

bus: mhi: core: Validate channel ID when processing command completions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.6 by commit aed4f5b51aba41e2afd7cfda20a0571a6a67dfe9, it was introduced in version v5.7 by commit 1d3173a3bae7039b765a0956e3e4bf846dbaacb8. For more details please see the references link.
Vulnerability: GSD-2022-1002426
Summary: net/x25: Fix null-ptr-deref caused by x25_disconnect
Published: 2022-04-24T22:45:38.982488Z

net/x25: Fix null-ptr-deref caused by x25_disconnect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 858642789ada1b48630f322e59416ca9fca3e6b7, it was introduced in version v4.14.192 by commit f0b6ce595c397a91d5b62c6b0b5ea93b84191795. For more details please see the references link.
Vulnerability: GSD-2021-1001526
Summary: bpf: Fix integer overflow in prealloc_elems_and_freelist()
Published: 2021-10-19T16:22:16.204517Z

bpf: Fix integer overflow in prealloc_elems_and_freelist()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.251 by commit f34bcd10c4832d491049905d25ea3f46a410c426, it was introduced in version v4.6 by commit 557c0c6e7df8e14a46bd7560d193fa5bbc00a858. For more details please see the references link.
Vulnerability: GSD-2022-1002076
Summary: Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
Published: 2022-04-24T22:08:22.686320Z

Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 70a6cf749d9ff9f463490248322e5343199bc267, it was introduced in version v5.2 by commit 9aebfd4a2200ab8075e44379c758bccefdc589bb. For more details please see the references link.
Vulnerability: GSD-2021-1001875
Summary: powerpc/idle: Don't corrupt back chain when going idle
Published: 2021-10-28T13:53:26.716587Z

powerpc/idle: Don't corrupt back chain when going idle

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit 65ede7bd97138435c07de602efc8812c586a1d38, it was introduced in version v5.14.15 by commit 6d077c37c4643394b1bae9682da48164fc147ea8. For more details please see the references link.
Vulnerability: GSD-2021-1000767
Summary: netfilter: nft_ct: skip expectations for confirmed conntrack
Published: 2021-06-25T00:04:19.137136Z

netfilter: nft_ct: skip expectations for confirmed conntrack

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.43 by commit 5f3429c05e4028a0e241afdad856dd15dec2ffb9, it was introduced in version v5.3 by commit 857b46027d6f91150797295752581b7155b9d0e1. For more details please see the references link.
Vulnerability: GSD-2021-1000337
Summary: f2fs: fix panic during f2fs_resize_fs()
Published: 2021-05-31T15:39:45.041586Z

f2fs: fix panic during f2fs_resize_fs()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.38 by commit 1c20a4896409f5ca1c770e1880c33d0a28a8b10f, it was introduced in version v5.8 by commit b4b10061ef98c583bcf82a4200703fbaa98c18dc. For more details please see the references link.
Vulnerability: GSD-2022-1000948
Summary: iio: adc: men_z188_adc: Fix a resource leak in an error handling path
Published: 2022-03-18T00:35:35.946885Z

iio: adc: men_z188_adc: Fix a resource leak in an error handling path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.304 by commit 0f88722313645a903f4d420ba61ddc690ec2481d, it was introduced in version v3.15 by commit 74aeac4da66fbfa246edbfc849002eac9b5af9ca. For more details please see the references link.
Vulnerability: GSD-2022-1000698
Summary: net: dsa: microchip: fix bridging with more than two member ports
Published: 2022-03-18T00:10:26.474316Z

net: dsa: microchip: fix bridging with more than two member ports

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit 91e2709a2b61843f3d6827460a54e02a499d23e4, it was introduced in version v5.16 by commit b3612ccdf2841c64ae7a8dd9e780c91240093fe6. For more details please see the references link.
Vulnerability: GSD-2022-1000362
Summary: scsi: target: iscsi: Make sure the np under each tpg is unique
Published: 2022-02-27T02:56:35.469409Z

scsi: target: iscsi: Make sure the np under each tpg is unique

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.101 by commit 7dbda616fc64298cedfb5b6cd52049f8038234fb. For more details please see the references link.
Vulnerability: GSD-2022-1000732
Summary: iio: adc: men_z188_adc: Fix a resource leak in an error handling path
Published: 2022-03-18T00:13:19.583812Z

iio: adc: men_z188_adc: Fix a resource leak in an error handling path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit d6ed5426a7fad36cf928c244483ba24e72359638, it was introduced in version v3.15 by commit 74aeac4da66fbfa246edbfc849002eac9b5af9ca. For more details please see the references link.
Vulnerability: GSD-2022-1001820
Summary: kernel/resource: fix kfree() of bootmem memory again
Published: 2022-04-24T21:45:01.545808Z

kernel/resource: fix kfree() of bootmem memory again

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit a9e88c2618d228d7a4e7e515cf30dc0d0d813f27, it was introduced in version v3.10 by commit ebff7d8f270d045338d9f4796014f4db429a17f9. For more details please see the references link.
Vulnerability: GSD-2021-1002023
Summary: isofs: Fix out of bound access for corrupted isofs image
Published: 2021-11-14T15:16:21.274983Z

isofs: Fix out of bound access for corrupted isofs image

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.159 by commit 6e80e9314f8bb52d9eabe1907698718ff01120f5. For more details please see the references link.
Vulnerability: GSD-2022-1001089
Summary: coredump: Use the vma snapshot in fill_files_note
Published: 2022-04-24T20:44:22.145507Z

coredump: Use the vma snapshot in fill_files_note

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 5c6baf808f409b69ad0799a551a704177b5a7ec1, it was introduced in version v5.10 by commit a07279c9a8cd7dbd321640ff7210591599ee00a4. For more details please see the references link.
Vulnerability: GSD-2022-1001573
Summary: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
Published: 2022-04-24T21:25:12.983867Z

video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit d396c651e2b508b6179bb678cc029f3becbf5170, it was introduced in version v3.2 by commit 3c8a63e22a0802fd56380f6ab305b419f18eb6f5. For more details please see the references link.
Vulnerability: GSD-2021-1002473
Summary: ice: fix vsi->txq_map sizing
Published: 2021-12-19T19:38:49.843766Z

ice: fix vsi->txq_map sizing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.83 by commit 1eb5395add786613c7c5579d3947aa0b8f0ec241, it was introduced in version v5.5 by commit efc2214b6047b6f5b4ca53151eba62521b9452d6. For more details please see the references link.
Vulnerability: GSD-2022-1001123
Summary: scsi: qla2xxx: Fix scheduling while atomic
Published: 2022-04-24T20:47:30.750258Z

scsi: qla2xxx: Fix scheduling while atomic

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 78612f2fe8e26637476d756a44f0f05cca0d97de. For more details please see the references link.
Vulnerability: GSD-2021-1002189
Summary: net/tls: Fix flipped sign in tls_err_abort() calls
Published: 2021-11-14T15:23:57.691221Z

net/tls: Fix flipped sign in tls_err_abort() calls

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit da353fac65fede6b8b4cfe207f0d9408e3121105, it was introduced in version v4.17 by commit c46234ebb4d1eee5e09819f49169e51cfc6eb909. For more details please see the references link.
Vulnerability: GSD-2022-1001436
Summary: wireguard: socket: ignore v6 endpoints when ipv6 is disabled
Published: 2022-04-24T21:12:59.380645Z

wireguard: socket: ignore v6 endpoints when ipv6 is disabled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit efde4c0cf7fdbaa27c11740b0ced2e84f73779d8, it was introduced in version v5.6 by commit e7096c131e5161fa3b8e52a650d7719d2857adfd. For more details please see the references link.
Vulnerability: GSD-2021-1002166
Summary: ice: Avoid crash from unnecessary IDA free
Published: 2021-11-14T15:22:54.058427Z

ice: Avoid crash from unnecessary IDA free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 73e30a62b19b9fbb4e6a3465c59da186630d5f2e, it was introduced in version v5.14 by commit d25a0fc41c1f927bb914e72a03c1898052557406. For more details please see the references link.
Vulnerability: GSD-2022-1001066
Summary: scsi: mpi3mr: Fix memory leaks
Published: 2022-04-24T20:43:14.090322Z

scsi: mpi3mr: Fix memory leaks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 71c7ac65a084ae7d387c3c1d02d59edfdecb009f. For more details please see the references link.
Vulnerability: GSD-2021-1002536
Summary: ice: fix vsi->txq_map sizing
Published: 2021-12-19T19:41:41.627427Z

ice: fix vsi->txq_map sizing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.6 by commit 992ba40a67638dfe2772b84dfc8168dc328d5c4c, it was introduced in version v5.5 by commit efc2214b6047b6f5b4ca53151eba62521b9452d6. For more details please see the references link.
Vulnerability: GSD-2022-1000227
Summary: spi: uniphier: fix reference count leak in uniphier_spi_probe()
Published: 2022-02-18T21:57:49.640744Z

spi: uniphier: fix reference count leak in uniphier_spi_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.99 by commit e895e067d73e154b1ebc84a124e00831e311d9b0, it was introduced in version v5.6 by commit 28d1dddc59f6b7fc085093e7c1e978b33f0caf4c. For more details please see the references link.
Vulnerability: GSD-2021-1000858
Summary: ftrace: Do not blindly read the ip address in ftrace_bug()
Published: 2021-06-30T00:01:54.249692Z

ftrace: Do not blindly read the ip address in ftrace_bug()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.237 by commit acf671ba79c1feccc3ec7cfdcffead4efcec49e7, it was introduced in version v2.6.28 by commit 05736a427f7e16be948ccbf39782bd3a6ae16b14. For more details please see the references link.
Vulnerability: GSD-2022-1000677
Summary: ASoC: codecs: wcd938x: fix incorrect used of portid
Published: 2022-02-27T03:39:52.927071Z

ASoC: codecs: wcd938x: fix incorrect used of portid

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.8 by commit 9167f2712dc8c24964840a4d1e2ebf130e846b95, it was introduced in version v5.14 by commit e8ba1e05bdc016700c85fad559a812c2e795442f. For more details please see the references link.
Vulnerability: GSD-2022-1001965
Summary: mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
Published: 2022-04-24T21:59:10.628027Z

mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 5c672073bcca537a0880257f31c6d942388df046, it was introduced in version v2.6.14 by commit 3e347261a80b57df792ab9464b5f0ed59add53a8. For more details please see the references link.
Vulnerability: GSD-2021-1001434
Summary: media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
Published: 2021-08-03T02:39:49.083122Z

media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.277 by commit c6ddeb63dd543b5474b0217c4e47538b7ffd7686, it was introduced in version v2.6.34 by commit dae52d009fc950b5c209260d50fcc000f5becd3c. For more details please see the references link.
Vulnerability: GSD-2022-1000159
Summary: yam: fix a memory leak in yam_siocdevprivate()
Published: 2022-02-18T21:48:35.386085Z

yam: fix a memory leak in yam_siocdevprivate()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.176 by commit 7afc09c8915b0735203ebcb8d766d7db37b794c0, it was introduced in version v4.19 by commit 0781168e23a2fc8dceb989f11fc5b39b3ccacc35. For more details please see the references link.
Vulnerability: GSD-2022-1002164
Summary: cifs: potential buffer overflow in handling symlinks
Published: 2022-04-24T22:17:28.201657Z

cifs: potential buffer overflow in handling symlinks

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.190 by commit 22d658c6c5affed10c8907e67160cef0b6c92186, it was introduced in version v2.6.37 by commit c69c1b6eaea1b3e1eecf7ad2fba0208ac4a11131. For more details please see the references link.
Vulnerability: GSD-2021-1001064
Summary: mptcp: fix soft lookup in subflow_error_report()
Published: 2021-06-30T00:37:12.847703Z

mptcp: fix soft lookup in subflow_error_report()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit 27ef25c72373222aaa5fe7b5cd890ae9cfb89a8d, it was introduced in version v5.12 by commit 15cc10453398c22f78f6c2b897119ecce5e5dd89. For more details please see the references link.
Vulnerability: GSD-2022-1000509
Summary: SUNRPC: lock against ->sock changing during sysfs read
Published: 2022-02-27T03:16:43.691076Z

SUNRPC: lock against ->sock changing during sysfs read

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 9482ab4540f5bcc869b44c067ae99b5fca16bd07, it was introduced in version v5.16 by commit 17f09d3f619a7ad2d2b021b4e5246f08225b1b0f. For more details please see the references link.
Vulnerability: GSD-2021-1002218
Summary: NFC: reorder the logic in nfc_{un,}register_device
Published: 2021-11-29T02:33:55.586584Z

NFC: reorder the logic in nfc_{un,}register_device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.293 by commit 5ef16d2d172ee56714cff37cd005b98aba08ef5a, it was introduced in version v3.10 by commit be055b2f89b5842f41363b5655a33dffb51a8294. For more details please see the references link.
Vulnerability: GSD-2021-1000225
Summary: net: Only allow init netns to set default tcp cong to a restricted algo
Published: 2021-05-31T15:39:45.041586Z

net: Only allow init netns to set default tcp cong to a restricted algo

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit e7d7bedd507bb732e600403b7a96f9fe48d0ca31, it was introduced in version v4.15 by commit 6670e152447732ba90626f36dfc015a13fbf150e. For more details please see the references link.
Vulnerability: GSD-2022-1001748
Summary: nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
Published: 2022-04-24T21:39:13.547470Z

nbd: fix possible overflow on 'first_minor' in nbd_dev_add()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 5142720dbe51befeb25f204f912ef1ad93fba343, it was introduced in version v4.11 by commit b0d9111a2d53785847763c64c40af2d4c4c5a8b7. For more details please see the references link.
Vulnerability: GSD-2021-1001967
Summary: scsi: core: Put LLD module refcnt after SCSI device is released
Published: 2021-11-14T15:13:47.843553Z

scsi: core: Put LLD module refcnt after SCSI device is released

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.255 by commit 61a0faa89f21861d1f8d059123b5c285a5d9ffee. For more details please see the references link.
Vulnerability: GSD-2021-1002648
Summary: audit: improve robustness of the audit queue handling
Published: 2021-12-27T05:32:45.558824Z

audit: improve robustness of the audit queue handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.222 by commit 8389f50ceb854cb437fefb9330d5024ed3c7c1f5, it was introduced in version v4.11 by commit 5b52330bbfe63b3305765354d6046c9f7f89c011. For more details please see the references link.
Vulnerability: GSD-2021-1000675
Summary: drm/meson: fix shutdown crash when component not probed
Published: 2021-06-04T19:59:48.406323Z

drm/meson: fix shutdown crash when component not probed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.235 by commit b4298d33c1fcce511ffe84d8d3de07e220300f9b, it was introduced in version v4.14.226 by commit 8a5160cc8488776ddc48ea045860dab015f47390. For more details please see the references link.
Vulnerability: GSD-2022-1001318
Summary: cifs: fix handlecache and multiuser
Published: 2022-04-24T21:04:11.116212Z

cifs: fix handlecache and multiuser

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit e71f6a3a1d5c826a30384fec587ca7503ef6bde5. For more details please see the references link.
Vulnerability: GSD-2021-1001988
Summary: regmap: Fix possible double-free in regcache_rbtree_exit()
Published: 2021-11-14T15:14:46.882784Z

regmap: Fix possible double-free in regcache_rbtree_exit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.215 by commit 3dae1a4eced3ee733d7222e69b8a55caf2d61091, it was introduced in version v3.12 by commit 3f4ff561bc88b074d5e868dde4012d89cbb06c87. For more details please see the references link.
Vulnerability: GSD-2021-1000360
Summary: mt76: mt7915: fix tx skb dma unmap
Published: 2021-05-31T15:39:45.041586Z

mt76: mt7915: fix tx skb dma unmap

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 4e7914ce23306b28d377ec395e00e5fde0e6f96e, it was introduced in version v5.10 by commit 27d5c528a7ca08dcd44877fdd9fc08b76630bf77. For more details please see the references link.
Vulnerability: GSD-2021-1001822
Summary: can: peak_pci: peak_pci_remove(): fix UAF
Published: 2021-10-28T13:50:42.771730Z

can: peak_pci: peak_pci_remove(): fix UAF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit 1248582e47a9f7ce0ecd156c39fc61f8b6aa3699, it was introduced in version v3.4 by commit e6d9c80b7ca1504411ad6d7acdb8683e4ae1c9cd. For more details please see the references link.
Vulnerability: GSD-2021-1000730
Summary: net: caif: fix memory leak in cfusbl_device_notify
Published: 2021-06-24T23:59:43.848399Z

net: caif: fix memory leak in cfusbl_device_notify

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.236 by commit e8b37f5009ea7095529790f022859711e6939c76, it was introduced in version v3.3 by commit 7ad65bf68d705b445ef10b77ab50dab22be185ee. For more details please see the references link.
Vulnerability: GSD-2022-1002021
Summary: ax25: fix UAF bug in ax25_send_control()
Published: 2022-04-24T22:03:27.260292Z

ax25: fix UAF bug in ax25_send_control()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.112 by commit a4942c6fea879972a7fee50f7e92e2e10f3fc23e, it was introduced in version v5.10.112 by commit b20a5ab0f5fb175750c6bafd4cf12daccf00c738. For more details please see the references link.
Vulnerability: GSD-2021-1001571
Summary: xen/balloon: use a kernel thread instead a workqueue
Published: 2021-10-19T16:24:18.470904Z

xen/balloon: use a kernel thread instead a workqueue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.209 by commit 6bba79c6a073741b672b0bf86a1f03c0fe47f973. For more details please see the references link.
Vulnerability: GSD-2022-1002471
Summary: drbd: Fix five use after free bugs in get_initial_state
Published: 2022-04-24T22:51:58.065514Z

drbd: Fix five use after free bugs in get_initial_state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit 0489700bfeb1e53eb2039c2291c67e71b0b40103, it was introduced in version v4.5 by commit a29728463b254ce81ecefdf20c1a02e01d9361da. For more details please see the references link.
Vulnerability: GSD-2021-1001121
Summary: i2c: robotfuzz-osif: fix control-request directions
Published: 2021-07-08T01:57:43.626906Z

i2c: robotfuzz-osif: fix control-request directions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.129 by commit d77c9c8537dbc874c8d02b12e7bc5e2a0dcfc04f, it was introduced in version v3.14 by commit 83e53a8f120f2f273cf0ad717f5372ab79ac24fe. For more details please see the references link.
Vulnerability: GSD-2022-1001174
Summary: NFS: remove unneeded check in decode_devicenotify_args()
Published: 2022-04-24T20:50:38.436631Z

NFS: remove unneeded check in decode_devicenotify_args()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit dafe0551e2c5c7e8ee4d3a06bdb599bc2aff2087, it was introduced in version v4.0 by commit a4f743a6bb201662962fa888e3f978583d61691e. For more details please see the references link.
Vulnerability: GSD-2021-1000419
Summary: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
Published: 2021-05-31T15:39:45.041586Z

net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.119 by commit 55fcdd1258faaecca74b91b88cc0921f9edd775d, it was introduced in version v4.9 by commit b9b17debc69d27cd55e21ee51a5ba7fc50a426cf. For more details please see the references link.
Vulnerability: GSD-2021-1002424
Summary: can: pch_can: pch_can_rx_normal: fix use after free
Published: 2021-12-19T19:36:44.557339Z

can: pch_can: pch_can_rx_normal: fix use after free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.221 by commit 3e193ef4e0a3f5bf92ede83ef214cb09d01b00aa, it was introduced in version v2.6.37 by commit b21d18b51b31a24d17f883b678432fbdee3d5675. For more details please see the references link.
Vulnerability: GSD-2022-1001524
Summary: RDMA/irdma: Prevent some integer underflows
Published: 2022-04-24T21:19:58.249031Z

RDMA/irdma: Prevent some integer underflows

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit f21056f15bbeacab7b4b87af232f5599d1f2bff1, it was introduced in version v5.14 by commit 3f49d684256963d3f27dfb9d9ff228e2255be78d. For more details please see the references link.
Vulnerability: GSD-2021-1000049
Summary: net: hso: fix NULL-deref on disconnect regression
Published: 2021-05-31T15:39:45.031586Z

net: hso: fix NULL-deref on disconnect regression

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.189 by commit 5c17cfe155d21954b4c7e2a78fa771cebcd86725, it was introduced in version v4.19.187 by commit 92028d7a31e55d53e41cff679156b9432cffcb36. For more details please see the references link.
Vulnerability: GSD-2021-1002074
Summary: comedi: dt9812: fix DMA buffers on stack
Published: 2021-11-14T15:18:41.327557Z

comedi: dt9812: fix DMA buffers on stack

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.79 by commit 786f5b03450454557ff858a8bead5d7c0cbf78d6, it was introduced in version v2.6.29 by commit 63274cd7d38a3322d90b66a5bc976de1fb899051. For more details please see the references link.
Vulnerability: GSD-2022-1000765
Summary: mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
Published: 2022-03-18T00:16:09.672528Z

mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.27 by commit 0c3f34beb459753f9f80d0cc14c1b50ab615c631, it was introduced in version v5.13 by commit 6477dd39e62c3a67cfa368ddc127410b4ae424c6. For more details please see the references link.
Vulnerability: GSD-2022-1001877
Summary: ASoC: codecs: wc938x: fix accessing array out of bounds for enum type
Published: 2022-04-24T21:51:06.245468Z

ASoC: codecs: wc938x: fix accessing array out of bounds for enum type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit adafea71b49ec4dbc44e0b84ec6eb602004a7a08, it was introduced in version v5.14 by commit e8ba1e05bdc016700c85fad559a812c2e795442f. For more details please see the references link.
Vulnerability: GSD-2021-1001208
Summary: f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
Published: 2021-08-03T01:37:33.123701Z

f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit e472b276a0d2180808009be38105e12754432e2a. For more details please see the references link.
Vulnerability: GSD-2022-1002308
Summary: drbd: Fix five use after free bugs in get_initial_state
Published: 2022-04-24T22:32:59.716038Z

drbd: Fix five use after free bugs in get_initial_state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 188fe6b26765edbad4055611c0f788b6870f4024, it was introduced in version v4.5 by commit a29728463b254ce81ecefdf20c1a02e01d9361da. For more details please see the references link.
Vulnerability: GSD-2022-1000335
Summary: scsi: myrs: Fix crash in error case
Published: 2022-02-27T02:52:48.280245Z

scsi: myrs: Fix crash in error case

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.180 by commit 5c5ceea00c8c9df150708e66cb9f2891192c1162. For more details please see the references link.
Vulnerability: GSD-2021-1001658
Summary: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
Published: 2021-10-19T16:30:23.836680Z

hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.71 by commit 1499bb2c3a87a2efea0065adab2bd66badee61c3. For more details please see the references link.
Vulnerability: GSD-2022-1000620
Summary: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
Published: 2022-02-27T03:32:09.244911Z

rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit d6cdc6ae542845d4d0ac8b6d99362bde7042a3c7, it was introduced in version v4.11 by commit c0cdc19f84a4712cf74888f83af286e3c2e14efd. For more details please see the references link.
Vulnerability: GSD-2022-1001932
Summary: firmware: sysfb: fix platform-device leak in error path
Published: 2022-04-24T21:56:00.495761Z

firmware: sysfb: fix platform-device leak in error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit b3e38f939ab4d0d86f56bff3362c3f88c4b2ad32, it was introduced in version v5.15.17 by commit 71db96193317626954073c24344d5cf4759e0af3. For more details please see the references link.
Vulnerability: GSD-2021-1002832
Summary: ipmi: fix initialization when workqueue allocation fails
Published: 2021-12-30T02:45:28.482369Z

ipmi: fix initialization when workqueue allocation fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit 5aae769a0ef7ec3ad0e9b3e3297a2e4fc69cde95, it was introduced in version v5.15.7 by commit c4618188b15af986c4f43bb63271edc7d07f73aa. For more details please see the references link.
Vulnerability: GSD-2022-1001898
Summary: drm/i915/gem: add missing boundary check in vm_access
Published: 2022-04-24T21:53:11.021955Z

drm/i915/gem: add missing boundary check in vm_access

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 312d3d4f49e12f97260bcf972c848c3562126a18, it was introduced in version v5.8 by commit 9f909e215fea0652023b9ed09d3d7bfe10386423. For more details please see the references link.
Vulnerability: GSD-2022-1000270
Summary: net: ipa: prevent concurrent replenish
Published: 2022-02-18T22:04:29.274020Z

net: ipa: prevent concurrent replenish

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.20 by commit dffeeca9268b221063c7a5a75719299b324c1acf, it was introduced in version v5.7 by commit 84f9bd12d46dbe8ac7d4b650a8fbb4c49657a38b. For more details please see the references link.
Vulnerability: GSD-2021-1002561
Summary: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
Published: 2021-12-19T19:42:43.473382Z

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit c5ef33c1489b2cd74368057fa00b5d2183bb5853, it was introduced in version v3.9 by commit 7f9664525f9cb507de9198a395a111371413f230. For more details please see the references link.
Vulnerability: GSD-2022-1001031
Summary: x86: Annotate call_on_stack()
Published: 2022-04-24T20:41:20.712966Z

x86: Annotate call_on_stack()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 9b78f03e429076e97615fbdb886f06ddd7ab6e50. For more details please see the references link.
Vulnerability: GSD-2021-1002131
Summary: riscv, bpf: Fix potential NULL dereference
Published: 2021-11-14T15:21:19.812889Z

riscv, bpf: Fix potential NULL dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.16 by commit e1b80a5ebe5431caeb20f88c32d4a024777a2d41, it was introduced in version v5.7 by commit ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa. For more details please see the references link.
Vulnerability: GSD-2022-1001461
Summary: media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
Published: 2022-04-24T21:14:57.990674Z

media: atomisp: fix dummy_ptr check to avoid duplicate active_bo

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit edaa87390aab4d9452730540243c2f0ef06d5fc9. For more details please see the references link.
Vulnerability: GSD-2022-1001416
Summary: usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value
Published: 2022-04-24T21:11:15.258703Z

usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 6cb0c612a438494bf8f7da4e9fb52a71471cf001. For more details please see the references link.
Vulnerability: GSD-2021-1000481
Summary: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
Published: 2021-05-31T15:39:45.041586Z

net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.269 by commit c7f75d11fe72913d2619f97b2334b083cd7bb955, it was introduced in version v4.9 by commit b9b17debc69d27cd55e21ee51a5ba7fc50a426cf. For more details please see the references link.
Vulnerability: GSD-2021-1002146
Summary: media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
Published: 2021-11-14T15:21:56.280494Z

media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.17 by commit 02a476ca886dc8155025fe99cbbad4121d029fa7. For more details please see the references link.
Vulnerability: GSD-2022-1001046
Summary: netlabel: fix out-of-bounds memory accesses
Published: 2022-04-24T20:42:16.494184Z

netlabel: fix out-of-bounds memory accesses

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.0 by commit 5578de4834fe0f2a34fedc7374be691443396d1f, it was introduced in version v2.6.19 by commit 446fda4f26822b2d42ab3396aafcedf38a9ff2b6. For more details please see the references link.