TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2021-1001264
Summary: virtio_console: Assure used length from device is limited
Published: 2021-08-03T01:52:40.023293Z

virtio_console: Assure used length from device is limited

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.52 by commit f6ec306b93dc600a0ab3bb2693568ef1cc5f7f7a. For more details please see the references link.
Vulnerability: GSD-2022-1000709
Summary: xen/netfront: destroy queues before real_num_tx_queues is zeroed
Published: 2022-03-18T00:11:31.552002Z

xen/netfront: destroy queues before real_num_tx_queues is zeroed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.13 by commit 47e2f166ed9fe17f24561d6315be2228f6a90209, it was introduced in version v5.16.3 by commit c5eb468cbc1fa663bf0cc6c5360802dea4e611c2. For more details please see the references link.
Vulnerability: GSD-2021-1000025
Summary: dmaengine: idxd: clear MSIX permission entry on shutdown
Published: 2021-05-31T15:39:45.031586Z

dmaengine: idxd: clear MSIX permission entry on shutdown

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.16 by commit c84b8982d7aa9b4717dc36a1c6cbc93ee153b500, it was introduced in version v5.11 by commit 8e50d392652f20616a136165dff516b86baf5e49. For more details please see the references link.
Vulnerability: GSD-2021-1002018
Summary: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
Published: 2021-11-14T15:16:09.229084Z

IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.157 by commit 0f8cdfff06829a0b0348b6debc29ff6a61967724, it was introduced in version v2.6.35 by commit f931551bafe1f10ded7f5282e2aa162c267a2e5d. For more details please see the references link.
Vulnerability: GSD-2022-1001548
Summary: bpf: Fix a btf decl_tag bug when tagging a function
Published: 2022-04-24T21:22:27.066330Z

bpf: Fix a btf decl_tag bug when tagging a function

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit a3bcd2110c087bc62e90fddd4a93237b049d6e68, it was introduced in version v5.16 by commit b5ea834dde6b6e7f75e51d5f66dac8cd7c97b5ef. For more details please see the references link.
Vulnerability: GSD-2021-1000475
Summary: mtd: require write permissions for locking and badblock ioctls
Published: 2021-05-31T15:39:45.041586Z

mtd: require write permissions for locking and badblock ioctls

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.233 by commit f73b29819c6314c0ba8b7d5892dfb03487424bee, it was introduced in version v4.14.194 by commit 389c74c218d3b182e9cd767e98cee0e0fd0dabaa. For more details please see the references link.
Vulnerability: GSD-2021-1002448
Summary: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
Published: 2021-12-19T19:37:49.399547Z

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.164 by commit bbeb0325a7460ebf1e03f5e0bfc5c652fba9519f, it was introduced in version v3.9 by commit 7f9664525f9cb507de9198a395a111371413f230. For more details please see the references link.
Vulnerability: GSD-2022-1001118
Summary: ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work
Published: 2022-04-24T20:47:03.480117Z

ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 52b18c0b28a58d7f83ed497abdf95c9361189f66, it was introduced in version v4.9 by commit 474b93704f32163af4bfa728fddc570eba357353. For more details please see the references link.
Vulnerability: GSD-2022-1000420
Summary: scsi: myrs: Fix crash in error case
Published: 2022-02-27T03:04:31.402097Z

scsi: myrs: Fix crash in error case

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.24 by commit 6207f35c213f6cb2fc3f13b5e77f08c710e1de19. For more details please see the references link.
Vulnerability: GSD-2021-1002761
Summary: io-wq: drop wqe lock before creating new worker
Published: 2021-12-27T05:49:22.703441Z

io-wq: drop wqe lock before creating new worker

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit 11053a021937aa403c883d3e8ef78d8c5308f583, it was introduced in version v5.15.11 by commit 4b4e5bbf9386d4ec21d91c0cb0fd60b9bba778ec. For more details please see the references link.
Vulnerability: GSD-2022-1001231
Summary: power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
Published: 2022-04-24T20:56:11.580622Z

power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit c32f6b6196b6efc1c68990dfeaac36fb8eb3b8e1, it was introduced in version v4.9 by commit 8c0984e5a75337df513047ec92a6c09d78e3e5cd. For more details please see the references link.
Vulnerability: GSD-2021-1002331
Summary: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
Published: 2021-11-29T02:39:03.576191Z

ALSA: usb-audio: fix null pointer dereference on pointer cs_desc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.5 by commit 58fa50de595f152900594c28ec9915c169643739. For more details please see the references link.
Vulnerability: GSD-2022-1001661
Summary: net/smc: use memcpy instead of snprintf to avoid out of bounds read
Published: 2022-04-24T21:32:44.505405Z

net/smc: use memcpy instead of snprintf to avoid out of bounds read

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11 by commit 8a4465368964b4fbaf084760c94c7aabf61059fb, it was introduced in version v5.11 by commit a3db10efcc4cc9c03a6375920179ade75ea2df7a. For more details please see the references link.
Vulnerability: GSD-2022-1000973
Summary: Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests
Published: 2022-04-24T20:36:08.281126Z

Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.4 by commit 6230bc50d6d21cae4c084766623d0a6d17958721. For more details please see the references link.
Vulnerability: GSD-2022-1001374
Summary: xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
Published: 2022-04-24T21:08:56.129795Z

xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit be63f365f454e39d09c41bbd21ea72b5244160b5. For more details please see the references link.
Vulnerability: GSD-2021-1002624
Summary: dm btree remove: fix use after free in rebalance_children()
Published: 2021-12-27T05:27:45.397754Z

dm btree remove: fix use after free in rebalance_children()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.294 by commit 66ea642af6fd4eacb5d0271a922130fcf8700424. For more details please see the references link.
Vulnerability: GSD-2021-1000619
Summary: mld: fix panic in mld_newpack()
Published: 2021-06-04T19:48:39.424144Z

mld: fix panic in mld_newpack()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 37d697759958d111439080bab7e14d2b0e7b39f5, it was introduced in version v2.6.35 by commit 72e09ad107e78d69ff4d3b97a69f0aad2b77280f. For more details please see the references link.
Vulnerability: GSD-2022-1001724
Summary: scsi: pm8001: Fix task leak in pm8001_send_abort_all()
Published: 2022-04-24T21:37:48.298504Z

scsi: pm8001: Fix task leak in pm8001_send_abort_all()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 2290dcad6f65864dec518fb2d5fb45f67d684150. For more details please see the references link.
Vulnerability: GSD-2022-1000836
Summary: iommu/amd: Recover from event log overflow
Published: 2022-03-18T00:22:53.059389Z

iommu/amd: Recover from event log overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.104 by commit 61a895da48443c899083c9eddd9b77484e232707. For more details please see the references link.
Vulnerability: GSD-2021-1002274
Summary: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Published: 2021-11-29T02:36:27.626778Z

scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.162 by commit 16bcbfb56d759c25665f786e33ec633b9508a08f. For more details please see the references link.
Vulnerability: GSD-2021-1000249
Summary: RDMA/qedr: Fix error return code in qedr_iw_connect()
Published: 2021-05-31T15:39:45.041586Z

RDMA/qedr: Fix error return code in qedr_iw_connect()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 296eb4ca08e47ec77b27d5e476c19bf23f91f6cd, it was introduced in version v5.5 by commit 82af6d19d8d9227c22a53ff00b40fb2a4f9fce69. For more details please see the references link.
Vulnerability: GSD-2022-1000565
Summary: lockdep: Correct lock_classes index mapping
Published: 2022-02-27T03:24:35.108777Z

lockdep: Correct lock_classes index mapping

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.11 by commit c20f90fe009ffdccba826d2ee839e5d55118a2bf, it was introduced in version v5.10 by commit f611e8cf98ec908b9c2c0da6064a660fc6022487. For more details please see the references link.
Vulnerability: GSD-2021-1001008
Summary: mm/slub: actually fix freelist pointer vs redzoning
Published: 2021-06-30T00:33:35.277600Z

mm/slub: actually fix freelist pointer vs redzoning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit f6ed2357541612a13a5841b3af4dc32ed984a25f. For more details please see the references link.
Vulnerability: GSD-2022-1000135
Summary: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
Published: 2022-02-18T21:45:02.968238Z

ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.228 by commit 65a61b1f56f5386486757930069fbdce94af08bf. For more details please see the references link.
Vulnerability: GSD-2022-1002108
Summary: media: usb: go7007: s2250-board: fix leak in probe()
Published: 2022-04-24T22:12:21.913977Z

media: usb: go7007: s2250-board: fix leak in probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 44973633b0064c46083833b55dd0a45e6235f8ca, it was introduced in version v3.10 by commit d3b2ccd9e307eae80b4b4eeb0ede46cb02212df2. For more details please see the references link.
Vulnerability: GSD-2021-1001458
Summary: scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
Published: 2021-08-03T02:47:08.084500Z

scsi: core: Fix bad pointer dereference when ehandler kthread is invalid

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.276 by commit d2f0b960d07e52bb664471b4de0ed8b08c636b3a, it was introduced in version v4.9.273 by commit 8958181c1663e24a13434448e7d6b96b5d04900a. For more details please see the references link.
Vulnerability: GSD-2021-1001376
Summary: net: ti: fix UAF in tlan_remove_one
Published: 2021-08-03T02:23:31.255541Z

net: ti: fix UAF in tlan_remove_one

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.199 by commit a0a817b2d308fac090a05cbbe80988e073ac5193, it was introduced in version v3.10 by commit 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa. For more details please see the references link.
Vulnerability: GSD-2022-1001909
Summary: can: isotp: sanitize CAN ID checks in isotp_bind()
Published: 2022-04-24T21:53:49.701845Z

can: isotp: sanitize CAN ID checks in isotp_bind()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit f343dbe82314ab457153c9afd970be4e9e553020, it was introduced in version v5.10 by commit e057dd3fc20ffb3d7f150af46542a51b59b90127. For more details please see the references link.
Vulnerability: GSD-2021-1000834
Summary: NFS: Fix a potential NULL dereference in nfs_get_client()
Published: 2021-06-30T00:00:16.574243Z

NFS: Fix a potential NULL dereference in nfs_get_client()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.273 by commit fab8bfdfb4aac9e4e8363666333adfdf21e89106, it was introduced in version v3.17 by commit 31434f496abb9f3410b10f541462fe58613dd3ad. For more details please see the references link.
Vulnerability: GSD-2021-1002809
Summary: mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
Published: 2021-12-30T02:44:23.985679Z

mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.89 by commit 1f207076740101fed87074a6bc924dbe806f08a5, it was introduced in version v5.10 by commit b94e02822debdf0cc473556aad7dcc859f216653. For more details please see the references link.
Vulnerability: GSD-2021-1001726
Summary: drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
Published: 2021-10-19T16:33:42.084851Z

drm/i915/gvt: fix the usage of ww lock in gvt scheduler.

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit ce1cccb000bda07a172518894c3439c1cb699f42, it was introduced in version v5.12 by commit 67f1120381df022a7016f4acc8d4880da9a66c03. For more details please see the references link.
Vulnerability: GSD-2022-1002276
Summary: jffs2: fix memory leak in jffs2_scan_medium
Published: 2022-04-24T22:29:26.878396Z

jffs2: fix memory leak in jffs2_scan_medium

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 455f4a23490bfcbedc8e5c245c463a59b19e5ddd, it was introduced in version v2.6.15 by commit e631ddba588783edd521c5a89f7b2902772fb691. For more details please see the references link.
Vulnerability: GSD-2021-1000567
Summary: net/sched: fq_pie: fix OOB access in the traffic path
Published: 2021-06-04T19:40:15.901607Z

net/sched: fq_pie: fix OOB access in the traffic path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit 7a1bdec12e43e29cc34a4394590337069d8812ce, it was introduced in version v5.6 by commit ec97ecf1ebe485a17cd8395a5f35e6b80b57665a. For more details please see the references link.
Vulnerability: GSD-2021-1000137
Summary: media: dvbdev: Fix memory leak in dvb_media_device_free()
Published: 2021-05-31T15:39:45.031586Z

media: dvbdev: Fix memory leak in dvb_media_device_free()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.36 by commit 43263fd43083e412311fa764cd04a727b0c6a749, it was introduced in version v4.5 by commit 0230d60e4661d9ced6fb0b9a30f182ebdafbba7a. For more details please see the references link.
Vulnerability: GSD-2021-1000422
Summary: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.119 by commit 815859cb1d2302e74f11bf6894bceace9ca9eb4a, it was introduced in version v4.16 by commit 13d6eb20fc79a1e606307256dad4098375539a09. For more details please see the references link.
Vulnerability: GSD-2021-1000588
Summary: btrfs: do not BUG_ON in link_to_fixup_dir
Published: 2021-06-04T19:43:18.881087Z

btrfs: do not BUG_ON in link_to_fixup_dir

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.42 by commit 7e13db503918820e6333811cdc6f151dcea5090a, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000072
Summary: openvswitch: fix stack OOB read while fragmenting IPv4 packets
Published: 2021-05-31T15:39:45.031586Z

openvswitch: fix stack OOB read while fragmenting IPv4 packets

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit b3502b04e84ac5349be95fc033c17bd701d2787a, it was introduced in version v4.16 by commit d52e5a7e7ca49457dd31fc8b42fb7c0d58a31221. For more details please see the references link.
Vulnerability: GSD-2022-1002299
Summary: veth: Ensure eth header is in skb's linear part
Published: 2022-04-24T22:31:53.553291Z

veth: Ensure eth header is in skb's linear part

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.239 by commit 1ef0088e43af1de4e3b365218c4d3179d9a37eec, it was introduced in version v2.6.24 by commit e314dbdc1c0dc6a548ecf0afce28ecfd538ff568. For more details please see the references link.
Vulnerability: GSD-2021-1001233
Summary: mISDN: fix possible use-after-free in HFC_cleanup()
Published: 2021-08-03T01:44:05.436120Z

mISDN: fix possible use-after-free in HFC_cleanup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit ed7c3739d0a07e2ec3ccbffe7e93cea01c438cda. For more details please see the references link.
Vulnerability: GSD-2021-1001399
Summary: atm: iphase: fix possible use-after-free in ia_module_exit()
Published: 2021-08-03T02:29:10.551892Z

atm: iphase: fix possible use-after-free in ia_module_exit()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.198 by commit 89ce0b0747f319eb70f85bc820dcc43cebbd5417. For more details please see the references link.
Vulnerability: GSD-2022-1002333
Summary: mmc: host: Return an error when ->enable_sdio_irq() ops is missing
Published: 2022-04-24T22:35:25.508622Z

mmc: host: Return an error when ->enable_sdio_irq() ops is missing

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 63535a20f4f3c54f60c6ea27eebac09262d3ce77. For more details please see the references link.
Vulnerability: GSD-2021-1000971
Summary: mm/memory-failure: make sure wait for page writeback in memory_failure
Published: 2021-06-30T00:30:04.725494Z

mm/memory-failure: make sure wait for page writeback in memory_failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 9e379da727a7a031be9b877cde7b9c34a0fb8306, it was introduced in version v3.16 by commit 0bc1f8b0682caa39f45ce1e0228ebf43acb46111. For more details please see the references link.
Vulnerability: GSD-2021-1001663
Summary: nvme-rdma: destroy cm id before destroy qp to avoid use after free
Published: 2021-10-19T16:30:37.354461Z

nvme-rdma: destroy cm id before destroy qp to avoid use after free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.70 by commit ecf0dc5a904830c926a64feffd8e01141f89822f. For more details please see the references link.
Vulnerability: GSD-2022-1001636
Summary: uaccess: fix integer overflow on access_ok()
Published: 2022-04-24T21:30:32.825773Z

uaccess: fix integer overflow on access_ok()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.18 by commit 99801e2f457824955da4aadaa035913a6dede03a, it was introduced in version v4.20 by commit da551281947cb2c0ab6e0045529a706af5d79584. For more details please see the references link.
Vulnerability: GSD-2022-1000924
Summary: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
Published: 2022-03-18T00:32:35.665349Z

ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.270 by commit 7e0e4bc93811cf600508ff36f07abea7b40643ed, it was introduced in version v4.14.265 by commit 586ef863c94354a7e00e5ae5ef01443d1dc99bc7. For more details please see the references link.
Vulnerability: GSD-2021-1002366
Summary: ALSA: pcm: oss: Limit the period size to 16MB
Published: 2021-12-19T19:34:09.114525Z

ALSA: pcm: oss: Limit the period size to 16MB

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.295 by commit d1bb703ad050de9095f10b2d3416c32921ac6bcc. For more details please see the references link.
Vulnerability: GSD-2022-1001266
Summary: media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()
Published: 2022-04-24T20:59:31.739690Z

media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 1381f1a629a090c251965edb56f849ad648414a4, it was introduced in version v5.12 by commit 7168155002cf7aadbfaa14a28f037c880a214764. For more details please see the references link.
Vulnerability: GSD-2021-1002736
Summary: tee: amdtee: fix an IS_ERR() vs NULL bug
Published: 2021-12-27T05:45:37.895598Z

tee: amdtee: fix an IS_ERR() vs NULL bug

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.11 by commit 832f3655c6138c23576ed268e31cc76e0f05f2b1, it was introduced in version v5.6 by commit 757cc3e9ff1d72d014096399d6e2bf03974d9da1. For more details please see the references link.
Vulnerability: GSD-2021-1001819
Summary: powerpc/idle: Don't corrupt back chain when going idle
Published: 2021-10-28T13:50:34.905869Z

powerpc/idle: Don't corrupt back chain when going idle

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit 8e25a62e8dab7bb09da337354ed1be5df61f83a0, it was introduced in version v5.4.156 by commit 80bbb0bc3a0288442f7fe6fc514f4ee1cb06ccb7. For more details please see the references link.
Vulnerability: GSD-2022-1000027
Summary: sctp: use call_rcu to free endpoint
Published: 2022-01-10T19:50:45.281441Z

sctp: use call_rcu to free endpoint

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.224 by commit af6e6e58f7ebf86b4e7201694b1e4f3a62cbc3ec, it was introduced in version v4.14 by commit d25adbeb0cdb860fb39e09cdd025e9cfc954c5ab. For more details please see the references link.
Vulnerability: GSD-2022-1000477
Summary: HID: elo: fix memory leak in elo_probe
Published: 2022-02-27T03:12:28.608448Z

HID: elo: fix memory leak in elo_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit de0d102d0c8c681fc9a3263d842fb35f7cf662f4, it was introduced in version v5.15 by commit fbf42729d0e91332e8ce75a1ecce08b8a2dab9c1. For more details please see the references link.
Vulnerability: GSD-2022-1000498
Summary: riscv: eliminate unreliable __builtin_frame_address(1)
Published: 2022-02-27T03:15:29.989478Z

riscv: eliminate unreliable __builtin_frame_address(1)

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 7324a299fa544bdce6bced422a0923dbed513266, it was introduced in version v5.13 by commit eac2f3059e02382d91f8c887462083841d6ea2a3. For more details please see the references link.
Vulnerability: GSD-2022-1000162
Summary: ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
Published: 2022-02-18T21:48:56.885239Z

ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.177 by commit f2a186a44e7e066d3418f80b2627f02677853b13, it was introduced in version v5.4.82 by commit beead010654d0e0432166fccec290e10273b8c46. For more details please see the references link.
Vulnerability: GSD-2022-1000532
Summary: mm: don't try to NUMA-migrate COW pages that have other uses
Published: 2022-02-27T03:20:09.804637Z

mm: don't try to NUMA-migrate COW pages that have other uses

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.11 by commit d187eeb02d18446e5e54ed6bcbf8b47e6551daea, it was introduced in version v5.9 by commit 09854ba94c6aad7886996bfbee2530b3d8a7f4f4. For more details please see the references link.
Vulnerability: GSD-2021-1002223
Summary: usb: musb: tusb6010: check return value after calling platform_get_resource()
Published: 2021-11-29T02:34:08.260314Z

usb: musb: tusb6010: check return value after calling platform_get_resource()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.4.293 by commit 1ba7605856e05fa991d4654ac69e5ace66c767b9. For more details please see the references link.
Vulnerability: GSD-2022-1001289
Summary: ext4: fix fs corruption when tring to remove a non-empty directory with IO error
Published: 2022-04-24T21:01:34.894803Z

ext4: fix fs corruption when tring to remove a non-empty directory with IO error

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 988fbad2ee18c01c23cec5f66200387303246030. For more details please see the references link.
Vulnerability: GSD-2022-1001773
Summary: drm/i915: Treat SAGV block time 0 as SAGV disabled
Published: 2022-04-24T21:41:34.949043Z

drm/i915: Treat SAGV block time 0 as SAGV disabled

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 102cba6d5ae2378a8467504c71ac1008658f36c6. For more details please see the references link.
Vulnerability: GSD-2022-1000861
Summary: gso: do not skip outer ip header in case of ipip and net_failover
Published: 2022-03-18T00:25:37.009996Z

gso: do not skip outer ip header in case of ipip and net_failover

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.103 by commit dac2490d9ee0b89dffc72f1172b8bbeb60eaec39, it was introduced in version v3.13 by commit cb32f511a70be8967ac9025cf49c44324ced9a39. For more details please see the references link.
Vulnerability: GSD-2021-1002673
Summary: dm btree remove: fix use after free in rebalance_children()
Published: 2021-12-27T05:36:07.988552Z

dm btree remove: fix use after free in rebalance_children()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.168 by commit 501ecd90efdc9b2edc6c28852ecd098a4adf8f00. For more details please see the references link.
Vulnerability: GSD-2022-1001323
Summary: tpm: use try_get_ops() in tpm-space.c
Published: 2022-04-24T21:04:33.184956Z

tpm: use try_get_ops() in tpm-space.c

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.1 by commit ba84f9a48366dcc3cdef978599433efe101dd5bd. For more details please see the references link.
Vulnerability: GSD-2021-1002389
Summary: scsi: mpt3sas: Fix kernel panic during drive powercycle test
Published: 2021-12-19T19:35:12.365841Z

scsi: mpt3sas: Fix kernel panic during drive powercycle test

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.257 by commit dd035ca0e7a142870a970d46b1d19276cfe2bc8c, it was introduced in version v3.8 by commit f92363d12359498f9a9960511de1a550f0ec41c2. For more details please see the references link.
Vulnerability: GSD-2021-1000121
Summary: ACPI: custom_method: fix potential use-after-free issue
Published: 2021-05-31T15:39:45.031586Z

ACPI: custom_method: fix potential use-after-free issue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit f16737caf41fc06cfe6e49048becb09657074d4b, it was introduced in version v5.4 by commit 03d1571d9513369c17e6848476763ebbd10ec2cb. For more details please see the references link.
Vulnerability: GSD-2021-1000571
Summary: can: isotp: prevent race between isotp_bind() and isotp_setsockopt()
Published: 2021-06-04T19:40:49.506891Z

can: isotp: prevent race between isotp_bind() and isotp_setsockopt()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit b190618d8337b9466d985854e417dc0e8b012e3c, it was introduced in version v5.11 by commit 921ca574cd382142add8b12d0a7117f495510de5. For more details please see the references link.
Vulnerability: GSD-2022-1002260
Summary: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
Published: 2022-04-24T22:27:37.436981Z

ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 7025f40690a235a118c87674cfb93072694aa66d, it was introduced in version v3.16 by commit 00a7bb81c20f3e81711e28e0f6c08cee8fd18514. For more details please see the references link.
Vulnerability: GSD-2021-1001730
Summary: KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
Published: 2021-10-19T16:33:52.221616Z

KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit 99a9e9b80f19fc63be005a33d76211dd23114792, it was introduced in version v5.5 by commit 7ee30bc132c683d06a6d9e360e39e483e3990708. For more details please see the references link.
Vulnerability: GSD-2021-1000822
Summary: xen-netback: take a reference to the RX task thread
Published: 2021-06-25T00:09:34.066515Z

xen-netback: take a reference to the RX task thread

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit caec9bcaeb1a5f03f2d406305355c853af10c13e, it was introduced in version v5.5 by commit 2ac061ce97f413bfbbdd768f7d2e0fda2e8170df. For more details please see the references link.
Vulnerability: GSD-2021-1000988
Summary: net: ipv4: fix memory leak in ip_mc_add1_src
Published: 2021-06-30T00:31:37.302387Z

net: ipv4: fix memory leak in ip_mc_add1_src

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit ac31cc837cafb57a271babad8ccffbf733caa076, it was introduced in version v4.9 by commit 24803f38a5c0b6c57ed800b47e695f9ce474bc3a. For more details please see the references link.
Vulnerability: GSD-2021-1001360
Summary: powerpc/mm: Fix lockup on kernel exec fault
Published: 2021-08-03T02:18:13.478580Z

powerpc/mm: Fix lockup on kernel exec fault

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.133 by commit a82471a14aad90f79d1608d2bcbb019f0ffb53f0, it was introduced in version v4.14 by commit d3ca587404b36943b02df87406054ce73cc49500. For more details please see the references link.
Vulnerability: GSD-2021-1001675
Summary: mcb: fix error handling in mcb_alloc_bus()
Published: 2021-10-19T16:31:17.084943Z

mcb: fix error handling in mcb_alloc_bus()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.70 by commit 91e4ad05bf18322b5921d1a6c9b603f6eb1694f0, it was introduced in version v4.7 by commit 5d9e2ab9fea4cdf0a2522f5cbed2e7fbb220d757. For more details please see the references link.
Vulnerability: GSD-2021-1000967
Summary: scsi: core: Fix error handling of scsi_host_alloc()
Published: 2021-06-30T00:29:50.123524Z

scsi: core: Fix error handling of scsi_host_alloc()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.44 by commit 7a696ce1d5d16a33a6cd6400bbcc0339b2460e11. For more details please see the references link.
Vulnerability: GSD-2022-1000318
Summary: net: fix a memleak when uncloning an skb dst and its metadata
Published: 2022-02-27T02:50:11.620841Z

net: fix a memleak when uncloning an skb dst and its metadata

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.230 by commit 0be943916d781df2b652793bb2d3ae4f9624c10a, it was introduced in version v4.3 by commit fc4099f17240767554ff3a73977acb78ef615404. For more details please see the references link.
Vulnerability: GSD-2022-1002325
Summary: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
Published: 2022-04-24T22:34:33.643740Z

ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 28d5387c1994f5e1e0d41b30a1f3dd6e1f609252, it was introduced in version v4.4 by commit 337aadff8e4567e39669e07d9a88b789d78458b5. For more details please see the references link.
Vulnerability: GSD-2021-1001225
Summary: powerpc/mm: Fix lockup on kernel exec fault
Published: 2021-08-03T01:41:18.759716Z

powerpc/mm: Fix lockup on kernel exec fault

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit 8a96ec5ebf96ad8e2ba7b1b34103a0be5140fc70, it was introduced in version v4.14 by commit d3ca587404b36943b02df87406054ce73cc49500. For more details please see the references link.
Vulnerability: GSD-2022-1000748
Summary: bpf: Fix crash due to incorrect copy_map_value
Published: 2022-03-18T00:15:09.964474Z

bpf: Fix crash due to incorrect copy_map_value

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit eca9bd215d2233de79d930fa97aefbce03247a98, it was introduced in version v5.15 by commit 68134668c17f31f51930478f75495b552a411550. For more details please see the references link.
Vulnerability: GSD-2021-1002059
Summary: cfg80211: fix management registrations locking
Published: 2021-11-14T15:17:56.984696Z

cfg80211: fix management registrations locking

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.77 by commit 4c22227e39c7a0b4dab55617ee8d34d171fab8d4, it was introduced in version v5.8 by commit 6cd536fe62ef58d7c4eac2da07ab0ed7fd19010d. For more details please see the references link.
Vulnerability: GSD-2021-1000064
Summary: sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues
Published: 2021-05-31T15:39:45.031586Z

sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit ebeac958b690123a0b40aa61f688f2f170035fad, it was introduced in version v5.12 by commit e26ca4b535820b1445dcef3c0f82b3fb5b45108b. For more details please see the references link.
Vulnerability: GSD-2022-1001509
Summary: net: dsa: fix panic on shutdown if multi-chip tree failed to probe
Published: 2022-04-24T21:18:37.121698Z

net: dsa: fix panic on shutdown if multi-chip tree failed to probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit b6e668ff43ebd87ccc8a19e5481345c428672295, it was introduced in version v5.15 by commit 0650bf52b31ff35dc6430fc2e37969c36baba724. For more details please see the references link.
Vulnerability: GSD-2021-1002409
Summary: proc/vmcore: fix clearing user buffer by properly using clear_user()
Published: 2021-12-19T19:36:01.845863Z

proc/vmcore: fix clearing user buffer by properly using clear_user()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.219 by commit 9ef384ed300d1bcfb23d0ab0b487d544444d4b52, it was introduced in version v3.0 by commit 997c136f518c5debd63847e78e2a8694f56dcf90. For more details please see the references link.
Vulnerability: GSD-2021-1000434
Summary: soundwire: stream: fix memory leak in stream config error path
Published: 2021-05-31T15:39:45.041586Z

soundwire: stream: fix memory leak in stream config error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.119 by commit 870533403ffa28ff63e173045fc5369365642002, it was introduced in version v4.18 by commit 89e590535f32d4bc548bcf266f3b046e50942f6d. For more details please see the references link.
Vulnerability: GSD-2022-1001159
Summary: hwrng: cavium - fix NULL but dereferenced coccicheck error
Published: 2022-04-24T20:49:29.667098Z

hwrng: cavium - fix NULL but dereferenced coccicheck error

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit e47b12f9415169eceda6770fcf45802e0c8d2a66. For more details please see the references link.
Vulnerability: GSD-2022-1000461
Summary: ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
Published: 2022-02-27T03:10:39.646353Z

ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit 9ed25183e6d47a71f5385dbc52419c473646c768, it was introduced in version v5.12 by commit 0c5fcf9e249ee1d94cf872c99baf9cba7ff9ce27. For more details please see the references link.
Vulnerability: GSD-2022-1000031
Summary: sctp: use call_rcu to free endpoint
Published: 2022-01-10T19:50:55.523105Z

sctp: use call_rcu to free endpoint

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.170 by commit 831de271452b87657fcf8d715ee20519b79caef5, it was introduced in version v4.14 by commit d25adbeb0cdb860fb39e09cdd025e9cfc954c5ab. For more details please see the references link.
Vulnerability: GSD-2022-1000898
Summary: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
Published: 2022-03-18T00:29:27.597920Z

net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.233 by commit b838add93e1dd98210482dc433768daaf752bdef, it was introduced in version v3.18 by commit 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f. For more details please see the references link.
Vulnerability: GSD-2021-1002720
Summary: RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
Published: 2021-12-27T05:38:55.476686Z

RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.10 by commit e3bc4d4b50cae7db08e50dbe43f771c906e97701, it was introduced in version v5.13 by commit f18ec422311767738ef4033b61e91cae07163b22. For more details please see the references link.
Vulnerability: GSD-2022-1001270
Summary: ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
Published: 2022-04-24T21:00:01.565943Z

ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 2091de10a1ffc3b76a527e90d5399d15fca0a8ce, it was introduced in version v5.1 by commit 6f6c3c36f0917be24587eeba818ab4fdfcb5465a. For more details please see the references link.