TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1002105
Summary: media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
Published: 2022-04-24T22:11:56.809318Z

media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 4d68603cc4382174bc1e7d532e10675c48c6b257, it was introduced in version v3.7 by commit 8ac456495a33d9466076fea94594181ceefb76d9. For more details please see the references link.
Vulnerability: GSD-2021-1001005
Summary: net: ll_temac: Make sure to free skb when it is completely used
Published: 2021-06-30T00:32:40.267121Z

net: ll_temac: Make sure to free skb when it is completely used

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.46 by commit 019ab7d044d0ebf97e1236bb8935b7809be92358. For more details please see the references link.
Vulnerability: GSD-2022-1000092
Summary: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
Published: 2022-02-18T21:34:18.446807Z

scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.300 by commit 3a345198a7c2d1db2526dc60b77052f75de019d3, it was introduced in version v3.16 by commit d576a5e80cd07ea7049f8fd7b303c14df7b5d7d2. For more details please see the references link.
Vulnerability: GSD-2022-1000568
Summary: pidfd: fix test failure due to stack overflow on some arches
Published: 2022-02-27T03:24:55.492195Z

pidfd: fix test failure due to stack overflow on some arches

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.11 by commit 3cfc79b41381780ef745d696520260238c1cf9fc. For more details please see the references link.
Vulnerability: GSD-2021-1002279
Summary: tipc: check for null after calling kmemdup
Published: 2021-11-29T02:36:47.465843Z

tipc: check for null after calling kmemdup

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.82 by commit a7d91625863d4ffed63b993b5e6dc1298b6430c9. For more details please see the references link.
Vulnerability: GSD-2021-1000244
Summary: i2c: sprd: fix reference leak when pm_runtime_get_sync fails
Published: 2021-05-31T15:39:45.041586Z

i2c: sprd: fix reference leak when pm_runtime_get_sync fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit d3406ab52097328a3bc4cbe124bfd8f6d51fb86f, it was introduced in version v4.14 by commit 8b9ec0719834fe66146d138d62ed66cef025c864. For more details please see the references link.
Vulnerability: GSD-2022-1001729
Summary: drm/amdgpu: Fix recursive locking warning
Published: 2022-04-24T21:38:02.930458Z

drm/amdgpu: Fix recursive locking warning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 0a922366d6d9b2532344b3763a54090ab9b50f59. For more details please see the references link.
Vulnerability: GSD-2021-1002783
Summary: hamradio: improve the incomplete fix to avoid NPD
Published: 2021-12-30T02:43:15.530250Z

hamradio: improve the incomplete fix to avoid NPD

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.260 by commit a7b0ae2cc486fcb601f9f9d87d98138cc7b7f7f9. For more details please see the references link.
Vulnerability: GSD-2021-1002629
Summary: xen/console: harden hvc_xen against event channel storms
Published: 2021-12-27T05:27:57.795066Z

xen/console: harden hvc_xen against event channel storms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.294 by commit 728389c21176b2095fa58e858d5ef1d2f2aac429. For more details please see the references link.
Vulnerability: GSD-2021-1000614
Summary: NFC: nci: fix memory leak in nci_allocate_device
Published: 2021-06-04T19:47:43.444591Z

NFC: nci: fix memory leak in nci_allocate_device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.41 by commit b34cb7ac32cc8e5471dc773180ea9ae676b1a745, it was introduced in version v4.0 by commit 11f54f228643d0248ec00ce8c9fb8d872f87e7b8. For more details please see the references link.
Vulnerability: GSD-2021-1001906
Summary: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Published: 2021-10-28T13:55:03.278218Z

net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit ed8aafea4fec9c654e63445236e0b505e27ed3a7, it was introduced in version v3.11 by commit e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c. For more details please see the references link.
Vulnerability: GSD-2022-1001683
Summary: rxrpc: fix a race in rxrpc_exit_net()
Published: 2022-04-24T21:34:49.854631Z

rxrpc: fix a race in rxrpc_exit_net()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 571d8e1d154ca18f08dcb72b69318d36e10010a0, it was introduced in version v4.17 by commit ace45bec6d77bc061c3c3d8ad99e298ea9800c2b. For more details please see the references link.
Vulnerability: GSD-2022-1000991
Summary: net: dsa: realtek: rtl8365mb: serialize indirect PHY register access
Published: 2022-04-24T20:37:50.075477Z

net: dsa: realtek: rtl8365mb: serialize indirect PHY register access

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.4 by commit ac3e87eebf428819c343175ec446c86c46f5a30d, it was introduced in version v5.16 by commit 4af2950c50c8634ed2865cf81e607034f78b84aa. For more details please see the references link.
Vulnerability: GSD-2022-1001379
Summary: staging: wfx: fix an error handling in wfx_init_common()
Published: 2022-04-24T21:09:15.422227Z

staging: wfx: fix an error handling in wfx_init_common()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit ab0fed1fa744173433cfd1dbaf9239f200ded650. For more details please see the references link.
Vulnerability: GSD-2021-1000403
Summary: net/nfc: fix use-after-free llcp_sock_bind/connect
Published: 2021-05-31T15:39:45.041586Z

net/nfc: fix use-after-free llcp_sock_bind/connect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 6b7021ed36dabf29e56842e3408781cd3b82ef6e, it was introduced in version v5.10.30 by commit 6fb003e5ae18d8cda4c8a1175d9dd8db12bec049. For more details please see the references link.
Vulnerability: GSD-2022-1001494
Summary: kgdboc: fix return value of __setup handler
Published: 2022-04-24T21:16:56.953618Z

kgdboc: fix return value of __setup handler

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 9010154beae2a685c7d1045f08da69f48fce9f47, it was introduced in version v4.20 by commit 1bd54d851f50dea6af30c3e6ff4f3e9aab5558f9. For more details please see the references link.
Vulnerability: GSD-2021-1002594
Summary: net/sched: fq_pie: prevent dismantle issue
Published: 2021-12-19T19:44:19.811035Z

net/sched: fq_pie: prevent dismantle issue

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit d86216dfda7c98375f809e26a30bfdaaba21d46e, it was introduced in version v5.6 by commit ec97ecf1ebe485a17cd8395a5f35e6b80b57665a. For more details please see the references link.
Vulnerability: GSD-2021-1000053
Summary: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
Published: 2021-05-31T15:39:45.031586Z

dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.3 by commit d757bf4c69cda3c3ab7f775dfabbf5a80e2f6f9d, it was introduced in version v4.6 by commit 1c357a1e86a4227a6b6059f2de118ae47659cebc. For more details please see the references link.
Vulnerability: GSD-2021-1001212
Summary: media: v4l2-core: explicitly clear ioctl input data
Published: 2021-08-03T01:38:14.807926Z

media: v4l2-core: explicitly clear ioctl input data

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.3 by commit bfb48b54db25c3b4ef4bef5e0691464ebc4aa335. For more details please see the references link.
Vulnerability: GSD-2022-1002312
Summary: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
Published: 2022-04-24T22:33:25.716568Z

scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit db863ab2baf058ed05c7b723612e3c40c9dd6885, it was introduced in version v2.6.23 by commit 45804fbb00eea27bdf4d62751681228a9e2844e9. For more details please see the references link.
Vulnerability: GSD-2021-1000950
Summary: ftrace: Do not blindly read the ip address in ftrace_bug()
Published: 2021-06-30T00:28:43.735036Z

ftrace: Do not blindly read the ip address in ftrace_bug()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.44 by commit 97524384762c1fb9b3ded931498dd2047bd0de81, it was introduced in version v2.6.28 by commit 05736a427f7e16be948ccbf39782bd3a6ae16b14. For more details please see the references link.
Vulnerability: GSD-2021-1001642
Summary: ipack: ipoctal: fix module reference leak
Published: 2021-10-19T16:29:35.709336Z

ipack: ipoctal: fix module reference leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.71 by commit 7cea848678470daadbfdaa6a112b823c290f900c, it was introduced in version v3.18 by commit 82a82340bab6c251e0705339f60763718eaa2a22. For more details please see the references link.
Vulnerability: GSD-2021-1001357
Summary: atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
Published: 2021-08-03T02:17:12.978136Z

atm: nicstar: Fix possible use-after-free in nicstar_cleanup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.133 by commit bdf5334250c69fabf555b7322c75249ea7d5f148. For more details please see the references link.
Vulnerability: GSD-2022-1001928
Summary: NFSD: prevent integer overflow on 32 bit systems
Published: 2022-04-24T21:55:47.632700Z

NFSD: prevent integer overflow on 32 bit systems

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 303cd6173dce0a28d26526c77814eb90a41bd898. For more details please see the references link.
Vulnerability: GSD-2021-1000815
Summary: nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
Published: 2021-06-25T00:09:08.215135Z

nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit 0c4559736d9a4ec1ca58ba98ca34e7c4da4c422b, it was introduced in version v3.3 by commit d646960f7986fefb460a2b062d5ccc8ccfeacc3a. For more details please see the references link.
Vulnerability: GSD-2021-1002828
Summary: net: stmmac: ptp: fix potentially overflowing expression
Published: 2021-12-30T02:45:12.122273Z

net: stmmac: ptp: fix potentially overflowing expression

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit be2473e5f377fb7fe471a5096f37a2d73a8367e6, it was introduced in version v5.14 by commit e9e3720002f61cd637a49ecafae77cac230eefae. For more details please see the references link.
Vulnerability: GSD-2021-1001707
Summary: netfilter: conntrack: serialize hash resizes and cleanups
Published: 2021-10-19T16:32:51.403473Z

netfilter: conntrack: serialize hash resizes and cleanups

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.10 by commit 7ea6f5848281182ce0cff6cafdcf3fbdeb8ca7e1. For more details please see the references link.
Vulnerability: GSD-2022-1001882
Summary: media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()
Published: 2022-04-24T21:51:28.760858Z

media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit aa613ac270292e102503e9767882e39200efe608, it was introduced in version v5.12 by commit 7168155002cf7aadbfaa14a28f037c880a214764. For more details please see the references link.
Vulnerability: GSD-2022-1000790
Summary: mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
Published: 2022-03-18T00:18:08.163292Z

mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.27 by commit e03ad1915ccccc5c908645c78c9dd4de25ecd1b6. For more details please see the references link.
Vulnerability: GSD-2022-1002257
Summary: ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
Published: 2022-04-24T22:27:07.746756Z

ASoC: mxs: Fix error handling in mxs_sgtl5000_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 67e12f1cb2f97468c12b59e21975eaa0f332e7d2, it was introduced in version v3.5 by commit e968194b45c4e8077dada75c5bae5660b37628fe. For more details please see the references link.
Vulnerability: GSD-2021-1000546
Summary: net: fec: fix the potential memory leak in fec_enet_init()
Published: 2021-06-04T19:36:24.266780Z

net: fec: fix the potential memory leak in fec_enet_init()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.9 by commit 32a1777fd113335c3f70dc445dffee0ad1c6870f, it was introduced in version v3.18 by commit 59d0f746564495c7f54526674deabfcf101236a1. For more details please see the references link.
Vulnerability: GSD-2021-1002081
Summary: btrfs: fix abort logic in btrfs_replace_file_extents
Published: 2021-11-14T15:18:59.496257Z

btrfs: fix abort logic in btrfs_replace_file_extents

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.14 by commit 0e309e1152fc34ef75991d9d69b165dbf75bf26c. For more details please see the references link.
Vulnerability: GSD-2021-1000116
Summary: mmc: uniphier-sd: Fix a resource leak in the remove function
Published: 2021-05-31T15:39:45.031586Z

mmc: uniphier-sd: Fix a resource leak in the remove function

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.20 by commit ebe0f12cf4c044f812c6d17011531582f9ac8bb3, it was introduced in version v4.20 by commit 3fd784f745dd1747863775a99ec749619ee6759c. For more details please see the references link.
Vulnerability: GSD-2022-1001181
Summary: clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
Published: 2022-04-24T20:51:22.960211Z

clk: qcom: clk-rcg2: Update logic to calculate D value for RCG

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit a4e2e31971354790b0d1fa3e783452a9d135fcff, it was introduced in version v3.16 by commit 99cbd064b059f222c8839ba433a68b2d6ee33066. For more details please see the references link.
Vulnerability: GSD-2022-1002484
Summary: video: fbdev: sm712fb: Fix crash in smtcfb_write()
Published: 2022-04-24T22:53:13.904281Z

video: fbdev: sm712fb: Fix crash in smtcfb_write()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit fb791514acf9070225eed46e1ccbb0aa7aae5da5. For more details please see the references link.
Vulnerability: GSD-2022-1000143
Summary: moxart: fix potential use-after-free on remove path
Published: 2022-02-18T21:46:46.262247Z

moxart: fix potential use-after-free on remove path

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.229 by commit 9c25d5ff1856b91bd4365e813f566cb59aaa9552. For more details please see the references link.
Vulnerability: GSD-2021-1001584
Summary: bpf: Fix integer overflow in prealloc_elems_and_freelist()
Published: 2021-10-19T16:24:55.540625Z

bpf: Fix integer overflow in prealloc_elems_and_freelist()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.153 by commit b14f28126c51533bb329379f65de5b0dd689b13a, it was introduced in version v4.6 by commit 557c0c6e7df8e14a46bd7560d193fa5bbc00a858. For more details please see the references link.
Vulnerability: GSD-2022-1000513
Summary: net: dsa: lantiq_gswip: don't use devres for mdiobus
Published: 2022-02-27T03:17:11.675876Z

net: dsa: lantiq_gswip: don't use devres for mdiobus

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.10 by commit 2443ba2fe396bdde187a2fdfa6a57375643ae93c, it was introduced in version v5.9 by commit ac3a68d56651c3dad2c12c7afce065fe15267f44. For more details please see the references link.
Vulnerability: GSD-2021-1002202
Summary: nvme-tcp: fix possible req->offset corruption
Published: 2021-11-14T15:24:30.448326Z

nvme-tcp: fix possible req->offset corruption

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit ce7723e9cdae4eb3030da082876580f4b2dc0861, it was introduced in version v5.8 by commit db5ad6b7f8cdd6d78efef62a1557461d0cbaee54. For more details please see the references link.
Vulnerability: GSD-2022-1001752
Summary: rxrpc: Fix call timer start racing with call destruction
Published: 2022-04-24T21:39:37.860268Z

rxrpc: Fix call timer start racing with call destruction

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 8cbf4ae7a2833767d63114573e5f9a45740cc975, it was introduced in version v4.15 by commit a158bdd3247b9656df36ba133235fff702e9fdc3. For more details please see the references link.
Vulnerability: GSD-2022-1000840
Summary: usb: gadget: clear related members when goto fail
Published: 2022-03-18T00:23:04.962011Z

usb: gadget: clear related members when goto fail

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.104 by commit fdd64084e405544c5c11841ca9261785c988e2a1. For more details please see the references link.
Vulnerability: GSD-2021-1002652
Summary: rds: memory leak in __rds_conn_create()
Published: 2021-12-27T05:33:17.616415Z

rds: memory leak in __rds_conn_create()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.222 by commit 1ed173726c1a0082e9d77c7d5a85411e85bdd983, it was introduced in version v4.19.195 by commit 0a3158ac5999fe0b9974604e630078cd1eff8be6. For more details please see the references link.
Vulnerability: GSD-2021-1000395
Summary: KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
Published: 2021-05-31T15:39:45.041586Z

KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 03c6cccedd3913006744faa252a4da5145299343, it was introduced in version v5.9 by commit f65886606c2d3b562716de030706dfe1bea4ed5e. For more details please see the references link.
Vulnerability: GSD-2022-1001302
Summary: cifs: prevent bad output lengths in smb2_ioctl_query_info()
Published: 2022-04-24T21:02:25.847940Z

cifs: prevent bad output lengths in smb2_ioctl_query_info()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 7529fbee10d82493c5cb109e51788bf74816d1c0. For more details please see the references link.
Vulnerability: GSD-2021-1000680
Summary: net: usb: fix memory leak in smsc75xx_bind
Published: 2021-06-04T20:00:56.832345Z

net: usb: fix memory leak in smsc75xx_bind

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.235 by commit 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbc, it was introduced in version v2.6.34 by commit d0cad871703b898a442e4049c532ec39168e5b57. For more details please see the references link.
Vulnerability: GSD-2021-1001992
Summary: isofs: Fix out of bound access for corrupted isofs image
Published: 2021-11-14T15:14:56.910653Z

isofs: Fix out of bound access for corrupted isofs image

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.217 by commit b0ddff8d68f2e43857a84dce54c3deab181c8ae1. For more details please see the references link.
Vulnerability: GSD-2022-1001617
Summary: jffs2: fix memory leak in jffs2_do_mount_fs
Published: 2022-04-24T21:28:53.766146Z

jffs2: fix memory leak in jffs2_do_mount_fs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 5f34310d1376ca5b2ed798258def2c2ab3cc6699, it was introduced in version v2.6.15 by commit e631ddba588783edd521c5a89f7b2902772fb691. For more details please see the references link.
Vulnerability: GSD-2022-1000905
Summary: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
Published: 2022-03-18T00:30:07.373593Z

ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.233 by commit 0b2ecc9163472128e7f30b517bee92dcd27ffc34, it was introduced in version v4.19.228 by commit 65a61b1f56f5386486757930069fbdce94af08bf. For more details please see the references link.
Vulnerability: GSD-2021-1002347
Summary: usb: musb: tusb6010: check return value after calling platform_get_resource()
Published: 2021-11-29T02:39:50.365367Z

usb: musb: tusb6010: check return value after calling platform_get_resource()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.5 by commit 06cfb4cb2241e704d72e3045cf4d7dfb567fbce0. For more details please see the references link.
Vulnerability: GSD-2022-1001247
Summary: udmabuf: validate ubuf->pagecount
Published: 2022-04-24T20:57:34.593318Z

udmabuf: validate ubuf->pagecount

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit 9e9b4a269f84d3230f2af84ff42322db676440d9, it was introduced in version v4.20 by commit fbb0de795078190a9834b3409e4b009cfb18a6d4. For more details please see the references link.
Vulnerability: GSD-2021-1002717
Summary: xen/netfront: harden netfront against event channel storms
Published: 2021-12-27T05:38:47.532343Z

xen/netfront: harden netfront against event channel storms

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.88 by commit d31b3379179d64724d3bbfa87bd4ada94e3237de. For more details please see the references link.
Vulnerability: GSD-2021-1001838
Summary: mm, slub: fix potential memoryleak in kmem_cache_open()
Published: 2021-10-28T13:51:34.381612Z

mm, slub: fix potential memoryleak in kmem_cache_open()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 568f906340b43120abd6fcc67c37396482f85930, it was introduced in version v4.8 by commit 210e7a43fa905bccafa9bb5966fba1d71f33eb8b. For more details please see the references link.
Vulnerability: GSD-2021-1001091
Summary: mm/slub: actually fix freelist pointer vs redzoning
Published: 2021-06-30T00:39:00.841579Z

mm/slub: actually fix freelist pointer vs redzoning

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit ce6e8bee7a3883e8008b30f5887dbb426aac6a35. For more details please see the references link.
Vulnerability: GSD-2022-1000456
Summary: iwlwifi: fix use-after-free
Published: 2022-02-27T03:09:26.516049Z

iwlwifi: fix use-after-free

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.25 by commit ddd46059f7d99119b62d44c519df7a79f2e6a515, it was introduced in version v5.15.17 by commit e23f075d77987de4215c8e0696f28bcc707506f7. For more details please see the references link.
Vulnerability: GSD-2022-1002191
Summary: xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
Published: 2022-04-24T22:20:28.978621Z

xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 8a7462b5211cd5b74b8815034d038e28cbd96d52. For more details please see the references link.
Vulnerability: GSD-2021-1000907
Summary: scsi: core: Fix error handling of scsi_host_alloc()
Published: 2021-06-30T00:05:47.105229Z

scsi: core: Fix error handling of scsi_host_alloc()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.126 by commit 79296e292d67fa7b5fb8d8c27343683e823872c8. For more details please see the references link.
Vulnerability: GSD-2021-1001615
Summary: mcb: fix error handling in mcb_alloc_bus()
Published: 2021-10-19T16:28:24.438286Z

mcb: fix error handling in mcb_alloc_bus()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.150 by commit 7751f609eadf36b1f53712bae430019c53a16eb0, it was introduced in version v4.7 by commit 5d9e2ab9fea4cdf0a2522f5cbed2e7fbb220d757. For more details please see the references link.
Vulnerability: GSD-2022-1001990
Summary: x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy
Published: 2022-04-24T22:01:35.959378Z

x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.111 by commit 9cb90f9ad5975ddfc90d0906b40e9c71c2eca44e. For more details please see the references link.
Vulnerability: GSD-2022-1000682
Summary: ext4: fix error handling in ext4_fc_record_modified_inode()
Published: 2022-02-27T03:40:26.697725Z

ext4: fix error handling in ext4_fc_record_modified_inode()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.8 by commit 14aa3f49c7fc6424763f4323bfbc3a807b0727dc. For more details please see the references link.
Vulnerability: GSD-2022-1002345
Summary: kgdboc: fix return value of __setup handler
Published: 2022-04-24T22:36:15.144581Z

kgdboc: fix return value of __setup handler

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit 1c3bb588b78e07f97e5a55fb523d103d124050a1, it was introduced in version v4.19.2 by commit df7ada33d6dc57926e25e4cf1a22e80b4f385884. For more details please see the references link.
Vulnerability: GSD-2022-1000378
Summary: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
Published: 2022-02-27T02:58:23.308185Z

net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.101 by commit 758290defe93a865a2880d10c5d5abd288b64b5d, it was introduced in version v3.9 by commit e2ca90c276e1fc410d7cd3c1a4eee245ec902a20. For more details please see the references link.
Vulnerability: GSD-2021-1001245
Summary: net: fix uninit-value in caif_seqpkt_sendmsg
Published: 2021-08-03T01:47:52.283971Z

net: fix uninit-value in caif_seqpkt_sendmsg

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.54 by commit 1582a02fecffcee306663035a295e28e1c4aaaff, it was introduced in version v2.6.35 by commit bece7b2398d073d11b2e352405a3ecd3a1e39c60. For more details please see the references link.
Vulnerability: GSD-2022-1000728
Summary: usb: gadget: rndis: add spinlock for rndis response list
Published: 2022-03-18T00:12:52.290465Z

usb: gadget: rndis: add spinlock for rndis response list

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit 33222d1571d7ce8c1c75f6b488f38968fa93d2d9, it was introduced in version v4.6 by commit f6281af9d62e128aa6efad29cf7265062af114f2. For more details please see the references link.
Vulnerability: GSD-2021-1002039
Summary: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
Published: 2021-11-14T15:17:07.107707Z

netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.76 by commit 2a670c323055282c9b72794a491d53cef86bbeaf, it was introduced in version v5.7 by commit 68983a354a655c35d3fb204489d383a2a051fda7. For more details please see the references link.
Vulnerability: GSD-2022-1001093
Summary: docs: sysctl/kernel: add missing bit to panic_print
Published: 2022-04-24T20:44:43.602603Z

docs: sysctl/kernel: add missing bit to panic_print

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit c459241243ab28e9af1bdbd785ed69230704e1b5, it was introduced in version v5.2 by commit de6da1e8bcf0dd2058b950b127491821207679dc. For more details please see the references link.
Vulnerability: GSD-2022-1001569
Summary: ASoC: codecs: wc938x: fix accessing array out of bounds for enum type
Published: 2022-04-24T21:24:43.520313Z

ASoC: codecs: wc938x: fix accessing array out of bounds for enum type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit f03c0c94186d5876857132d97e28f20cdc100bdc, it was introduced in version v5.14 by commit e8ba1e05bdc016700c85fad559a812c2e795442f. For more details please see the references link.
Vulnerability: GSD-2021-1000454
Summary: liquidio: Fix unintented sign extension of a left shift of a u16
Published: 2021-05-31T15:39:45.041586Z

liquidio: Fix unintented sign extension of a left shift of a u16

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.191 by commit 85ab024c69fa865a044c586aeb50e6459cd59c37, it was introduced in version v4.9 by commit 5bc67f587ba7eaa8dd3976bfeff8f2b60718c871. For more details please see the references link.
Vulnerability: GSD-2021-1002469
Summary: proc/vmcore: fix clearing user buffer by properly using clear_user()
Published: 2021-12-19T19:38:39.995905Z

proc/vmcore: fix clearing user buffer by properly using clear_user()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.83 by commit a8a917058faf4abaec9fb614bb6d5f8fe3529ec6, it was introduced in version v3.0 by commit 997c136f518c5debd63847e78e2a8694f56dcf90. For more details please see the references link.
Vulnerability: GSD-2022-1001139
Summary: video: fbdev: cirrusfb: check pixclock to avoid divide by zero
Published: 2022-04-24T20:48:31.484905Z

video: fbdev: cirrusfb: check pixclock to avoid divide by zero

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit e498b504f8c81b07efab9febf8503448de4dc9cf. For more details please see the references link.
Vulnerability: GSD-2021-1002193
Summary: mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
Published: 2021-11-14T15:24:08.266580Z

mm: filemap: check if THP has hwpoisoned subpage for PMD page fault

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit eac96c3efdb593df1a57bb5b95dbe037bfa9a522, it was introduced in version v4.8 by commit 800d8c63b2e989c2e349632d1648119bf5862f01. For more details please see the references link.
Vulnerability: GSD-2021-1002486
Summary: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
Published: 2021-12-19T19:39:28.212900Z

sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.84 by commit 4a46b2f5dce02539e88a300800812bd24a45e097, it was introduced in version v2.6.24 by commit faf0b2e5afe7dae072d2715763c7f992b612b628. For more details please see the references link.
Vulnerability: GSD-2021-1000141
Summary: md/raid1: properly indicate failure when ending a failed write request
Published: 2021-05-31T15:39:45.031586Z

md/raid1: properly indicate failure when ending a failed write request

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.36 by commit 661061a45e32d8b2cc0e306da9f169ad44011382, it was introduced in version v5.4 by commit eeba6809d8d58908b5ed1b5ceb5fcb09a98a7cad. For more details please see the references link.
Vulnerability: GSD-2021-1000511
Summary: scsi: qedf: Add pointer checks in qedf_update_link_speed()
Published: 2021-05-31T23:48:29.693093Z

scsi: qedf: Add pointer checks in qedf_update_link_speed()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.40 by commit a6362a737572f66051deb7637f3f77ddf7a4402f, it was introduced in version v4.11 by commit 61d8658b4a435eac729966cc94cdda077a8df5cd. For more details please see the references link.
Vulnerability: GSD-2022-1001586
Summary: btrfs: verify the tranisd of the to-be-written dirty extent buffer
Published: 2022-04-24T21:26:28.922092Z

btrfs: verify the tranisd of the to-be-written dirty extent buffer

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 17a2437d44f4bfa1f199343075e6458303a2dceb. For more details please see the references link.
Vulnerability: GSD-2022-1002200
Summary: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
Published: 2022-04-24T22:21:07.322179Z

drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.189 by commit 4009f104b02b223d1a11d74b36b1cc083bc37028. For more details please see the references link.
Vulnerability: GSD-2021-1000842
Summary: drm: Lock pointer access in drm_master_release()
Published: 2021-06-30T00:00:46.475562Z

drm: Lock pointer access in drm_master_release()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.273 by commit 8e250a134c8fe2a945d10b421d0ccb54e85d8683. For more details please see the references link.
Vulnerability: GSD-2021-1001750
Summary: dma-debug: prevent an error message from causing runtime problems
Published: 2021-10-19T16:34:54.175041Z

dma-debug: prevent an error message from causing runtime problems

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.9 by commit de4afec2d2946c92c62a15ab341c70b287289e6a. For more details please see the references link.
Vulnerability: GSD-2021-1001300
Summary: udf: Fix NULL pointer dereference in udf_symlink function
Published: 2021-08-03T02:01:42.190967Z

udf: Fix NULL pointer dereference in udf_symlink function

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.51 by commit 21bf1414580c36ffc8d8de043beb3508cf812238. For more details please see the references link.
Vulnerability: GSD-2022-1000397
Summary: gcc-plugins/stackleak: Use noinstr in favor of notrace
Published: 2022-02-27T03:01:15.418747Z

gcc-plugins/stackleak: Use noinstr in favor of notrace

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.102 by commit 143aaf79bafa9839cabebd49aa10b36f8aaef3ce. For more details please see the references link.
Vulnerability: GSD-2022-1001355
Summary: drbd: Fix five use after free bugs in get_initial_state
Published: 2022-04-24T21:07:14.071270Z

drbd: Fix five use after free bugs in get_initial_state

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit de63e74da2333b4068bb79983e632db730fea97e, it was introduced in version v4.5 by commit a29728463b254ce81ecefdf20c1a02e01d9361da. For more details please see the references link.
Vulnerability: GSD-2021-1002605
Summary: mtd: rawnand: fsmc: Fix timing computation
Published: 2021-12-19T19:44:45.861136Z

mtd: rawnand: fsmc: Fix timing computation

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit a4953e7b6f6ab5e1faf3267b5728e40eac1b6f8d, it was introduced in version v4.13 by commit d9fb0795718333e36f7e472d7d81b7b8efe347c8. For more details please see the references link.
Vulnerability: GSD-2021-1000638
Summary: serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
Published: 2021-06-04T19:52:43.512672Z

serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.124 by commit 915452f40e2f495e187276c4407a4f567ec2307e, it was introduced in version  by commit . For more details please see the references link.
Vulnerability: GSD-2021-1000792
Summary: efi/libstub: prevent read overflow in find_file_option()
Published: 2021-06-25T00:05:56.557149Z

efi/libstub: prevent read overflow in find_file_option()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit e786eacbf323b632bd4e77fc0f5474b5a422e025, it was introduced in version v5.8 by commit 7a88a6227dc7f2e723bba11ece05e57bd8dce8e4. For more details please see the references link.
Vulnerability: GSD-2021-1001880
Summary: mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()
Published: 2021-10-28T13:53:40.540005Z

mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit b77ba1e02345bafd703f0d407bdbd88c3be1f767, it was introduced in version v5.14 by commit 1507f51255c9ff07d75909a84e7c0d7f3c4b2f49. For more details please see the references link.
Vulnerability: GSD-2022-1001705
Summary: staging: vchiq_core: handle NULL result of find_service_by_handle
Published: 2022-04-24T21:36:40.671464Z

staging: vchiq_core: handle NULL result of find_service_by_handle

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 42f2142a337ee372455574809fc924580a7e51b2. For more details please see the references link.
Vulnerability: GSD-2022-1000817
Summary: sr9700: sanity check for packet length
Published: 2022-03-18T00:21:10.535472Z

sr9700: sanity check for packet length

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.26 by commit 9f2d614779906f3d8ad4fb882c5b3e5ad6150bbe. For more details please see the references link.
Vulnerability: GSD-2021-1002255
Summary: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Published: 2021-11-29T02:35:35.536638Z

scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.218 by commit b291d147d0268e93ad866f8bc820ea14497abc9b. For more details please see the references link.