# Vulnerabilities published in 2021


- [GSD-2021-1002780](https://insights.sbomify.com/GSD-2021-1002780/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (not scored)
- [GSD-2021-1002779](https://insights.sbomify.com/GSD-2021-1002779/): phonet/pep: refuse to enable an unbound pipe (not scored)
- [GSD-2021-1002778](https://insights.sbomify.com/GSD-2021-1002778/): hamradio: improve the incomplete fix to avoid NPD (not scored)
- [GSD-2021-1002777](https://insights.sbomify.com/GSD-2021-1002777/): hamradio: defer ax25 kfree after unregister_netdev (not scored)
- [GSD-2021-1002776](https://insights.sbomify.com/GSD-2021-1002776/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (not scored)
- [GSD-2021-1002775](https://insights.sbomify.com/GSD-2021-1002775/): phonet/pep: refuse to enable an unbound pipe (not scored)
- [GSD-2021-1002774](https://insights.sbomify.com/GSD-2021-1002774/): hamradio: improve the incomplete fix to avoid NPD (not scored)
- [GSD-2021-1002773](https://insights.sbomify.com/GSD-2021-1002773/): hamradio: defer ax25 kfree after unregister_netdev (not scored)
- [GSD-2021-1002772](https://insights.sbomify.com/GSD-2021-1002772/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (not scored)
- [GSD-2021-1002771](https://insights.sbomify.com/GSD-2021-1002771/): xen/blkfront: harden blkfront against event channel storms (not scored)
- [GSD-2021-1002770](https://insights.sbomify.com/GSD-2021-1002770/): xen/netfront: harden netfront against event channel storms (not scored)
- [GSD-2021-1002769](https://insights.sbomify.com/GSD-2021-1002769/): xen/console: harden hvc_xen against event channel storms (not scored)
- [GSD-2021-1002768](https://insights.sbomify.com/GSD-2021-1002768/): scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (not scored)
- [GSD-2021-1002767](https://insights.sbomify.com/GSD-2021-1002767/): io-wq: check for wq exit after adding new worker task_work (not scored)
- [GSD-2021-1002766](https://insights.sbomify.com/GSD-2021-1002766/): scsi: scsi_debug: Don't call kcalloc() if size arg is zero (not scored)
- [GSD-2021-1002765](https://insights.sbomify.com/GSD-2021-1002765/): ovl: fix warning in ovl_create_real() (not scored)
- [GSD-2021-1002764](https://insights.sbomify.com/GSD-2021-1002764/): scsi: scsi_debug: Fix type in min_t to avoid stack OOB (not scored)
- [GSD-2021-1002763](https://insights.sbomify.com/GSD-2021-1002763/): xen/netback: don't queue unlimited number of packages (not scored)
- [GSD-2021-1002762](https://insights.sbomify.com/GSD-2021-1002762/): USB: core: Make do_proc_control() and do_proc_bulk() killable (not scored)
- [GSD-2021-1002761](https://insights.sbomify.com/GSD-2021-1002761/): io-wq: drop wqe lock before creating new worker (not scored)
- [GSD-2021-1002760](https://insights.sbomify.com/GSD-2021-1002760/): media: mxl111sf: change mutex_init() location (not scored)
- [GSD-2021-1002759](https://insights.sbomify.com/GSD-2021-1002759/): iocost: Fix divide-by-zero on donation from low hweight cgroup (not scored)
- [GSD-2021-1002758](https://insights.sbomify.com/GSD-2021-1002758/): usb: xhci-mtk: fix list_del warning when enable list debug (not scored)
- [GSD-2021-1002757](https://insights.sbomify.com/GSD-2021-1002757/): btrfs: fix memory leak in __add_inode_ref() (not scored)
- [GSD-2021-1002756](https://insights.sbomify.com/GSD-2021-1002756/): selinux: fix sleeping function called from invalid context (not scored)
- [GSD-2021-1002755](https://insights.sbomify.com/GSD-2021-1002755/): net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup (not scored)
- [GSD-2021-1002754](https://insights.sbomify.com/GSD-2021-1002754/): net: systemport: Add global locking for descriptor lifecycle (not scored)
- [GSD-2021-1002753](https://insights.sbomify.com/GSD-2021-1002753/): sit: do not call ipip6_dev_free() from sit_init_net() (not scored)
- [GSD-2021-1002752](https://insights.sbomify.com/GSD-2021-1002752/): netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc (not scored)
- [GSD-2021-1002751](https://insights.sbomify.com/GSD-2021-1002751/): net/packet: rx_owner_map depends on pg_vec (not scored)
- [GSD-2021-1002750](https://insights.sbomify.com/GSD-2021-1002750/): igbvf: fix double free in `igbvf_probe` (not scored)
- [GSD-2021-1002749](https://insights.sbomify.com/GSD-2021-1002749/): mptcp: fix deadlock in __mptcp_push_pending() (not scored)
- [GSD-2021-1002748](https://insights.sbomify.com/GSD-2021-1002748/): mptcp: remove tcp ulp setsockopt support (not scored)
- [GSD-2021-1002747](https://insights.sbomify.com/GSD-2021-1002747/): net: stmmac: fix tc flower deletion for VLAN priority Rx steering (not scored)
- [GSD-2021-1002746](https://insights.sbomify.com/GSD-2021-1002746/): mptcp: clear 'kern' flag from fallback sockets (not scored)
- [GSD-2021-1002745](https://insights.sbomify.com/GSD-2021-1002745/): mptcp: never allow the PM to close a listener subflow (not scored)
- [GSD-2021-1002744](https://insights.sbomify.com/GSD-2021-1002744/): drm/amd/pm: fix a potential gpu_metrics_table memory leak (not scored)
- [GSD-2021-1002743](https://insights.sbomify.com/GSD-2021-1002743/): rds: memory leak in __rds_conn_create() (not scored)
- [GSD-2021-1002742](https://insights.sbomify.com/GSD-2021-1002742/): net/sched: sch_ets: don't remove idle classes from the round-robin list (not scored)
- [GSD-2021-1002741](https://insights.sbomify.com/GSD-2021-1002741/): net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (not scored)
- [GSD-2021-1002740](https://insights.sbomify.com/GSD-2021-1002740/): inet_diag: fix kernel-infoleak for UDP sockets (not scored)
- [GSD-2021-1002739](https://insights.sbomify.com/GSD-2021-1002739/): sch_cake: do not call cake_destroy() from cake_init() (not scored)
- [GSD-2021-1002738](https://insights.sbomify.com/GSD-2021-1002738/): btrfs: use latest_dev in btrfs_show_devname (not scored)
- [GSD-2021-1002737](https://insights.sbomify.com/GSD-2021-1002737/): dm btree remove: fix use after free in rebalance_children() (not scored)
- [GSD-2021-1002736](https://insights.sbomify.com/GSD-2021-1002736/): tee: amdtee: fix an IS_ERR() vs NULL bug (not scored)
- [GSD-2021-1002735](https://insights.sbomify.com/GSD-2021-1002735/): mac80211: track only QoS data frames for admission control (not scored)
- [GSD-2021-1002734](https://insights.sbomify.com/GSD-2021-1002734/): audit: improve robustness of the audit queue handling (not scored)
- [GSD-2021-1002733](https://insights.sbomify.com/GSD-2021-1002733/): vduse: check that offset is within bounds in get_config() (not scored)
- [GSD-2021-1002732](https://insights.sbomify.com/GSD-2021-1002732/): vduse: fix memory corruption in vduse_dev_ioctl() (not scored)
- [GSD-2021-1002731](https://insights.sbomify.com/GSD-2021-1002731/): net: netlink: af_netlink: Prevent empty skb by adding a check on len. (not scored)
- [GSD-2021-1002730](https://insights.sbomify.com/GSD-2021-1002730/): bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg (not scored)
- [GSD-2021-1002729](https://insights.sbomify.com/GSD-2021-1002729/): bpf: Fix kernel address leakage in atomic fetch (not scored)
- [GSD-2021-1002728](https://insights.sbomify.com/GSD-2021-1002728/): bpf: Fix signed bounds propagation after mov32 (not scored)
- [GSD-2021-1002727](https://insights.sbomify.com/GSD-2021-1002727/): firmware: arm_scpi: Fix string overflow in SCPI genpd driver (not scored)
- [GSD-2021-1002726](https://insights.sbomify.com/GSD-2021-1002726/): drm/msm: Fix null ptr access msm_ioctl_gem_submit() (not scored)
- [GSD-2021-1002725](https://insights.sbomify.com/GSD-2021-1002725/): mac80211: validate extended element ID is present (not scored)
- [GSD-2021-1002724](https://insights.sbomify.com/GSD-2021-1002724/): nfc: fix segfault in nfc_genl_dump_devices_done (not scored)
- [GSD-2021-1002723](https://insights.sbomify.com/GSD-2021-1002723/): i2c: virtio: fix completion handling (not scored)
- [GSD-2021-1002722](https://insights.sbomify.com/GSD-2021-1002722/): RDMA/irdma: Fix a user-after-free in add_pble_prm (not scored)
- [GSD-2021-1002721](https://insights.sbomify.com/GSD-2021-1002721/): netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (not scored)
- [GSD-2021-1002720](https://insights.sbomify.com/GSD-2021-1002720/): RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow (not scored)
- [GSD-2021-1002719](https://insights.sbomify.com/GSD-2021-1002719/): RDMA: Fix use-after-free in rxe_queue_cleanup (not scored)
- [GSD-2021-1002718](https://insights.sbomify.com/GSD-2021-1002718/): xen/console: harden hvc_xen against event channel storms (not scored)
- [GSD-2021-1002717](https://insights.sbomify.com/GSD-2021-1002717/): xen/netfront: harden netfront against event channel storms (not scored)
- [GSD-2021-1002716](https://insights.sbomify.com/GSD-2021-1002716/): xen/blkfront: harden blkfront against event channel storms (not scored)
- [GSD-2021-1002715](https://insights.sbomify.com/GSD-2021-1002715/): scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (not scored)
- [GSD-2021-1002714](https://insights.sbomify.com/GSD-2021-1002714/): scsi: scsi_debug: Fix type in min_t to avoid stack OOB (not scored)
- [GSD-2021-1002713](https://insights.sbomify.com/GSD-2021-1002713/): ovl: fix warning in ovl_create_real() (not scored)
- [GSD-2021-1002712](https://insights.sbomify.com/GSD-2021-1002712/): scsi: scsi_debug: Don't call kcalloc() if size arg is zero (not scored)
- [GSD-2021-1002711](https://insights.sbomify.com/GSD-2021-1002711/): xen/netback: don't queue unlimited number of packages (not scored)
- [GSD-2021-1002710](https://insights.sbomify.com/GSD-2021-1002710/): iocost: Fix divide-by-zero on donation from low hweight cgroup (not scored)
- [GSD-2021-1002709](https://insights.sbomify.com/GSD-2021-1002709/): media: mxl111sf: change mutex_init() location (not scored)
- [GSD-2021-1002708](https://insights.sbomify.com/GSD-2021-1002708/): btrfs: fix memory leak in __add_inode_ref() (not scored)
- [GSD-2021-1002707](https://insights.sbomify.com/GSD-2021-1002707/): net/packet: rx_owner_map depends on pg_vec (not scored)
- [GSD-2021-1002706](https://insights.sbomify.com/GSD-2021-1002706/): net: systemport: Add global locking for descriptor lifecycle (not scored)
- [GSD-2021-1002705](https://insights.sbomify.com/GSD-2021-1002705/): sit: do not call ipip6_dev_free() from sit_init_net() (not scored)
- [GSD-2021-1002704](https://insights.sbomify.com/GSD-2021-1002704/): netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc (not scored)
- [GSD-2021-1002703](https://insights.sbomify.com/GSD-2021-1002703/): igbvf: fix double free in `igbvf_probe` (not scored)
- [GSD-2021-1002702](https://insights.sbomify.com/GSD-2021-1002702/): rds: memory leak in __rds_conn_create() (not scored)
- [GSD-2021-1002701](https://insights.sbomify.com/GSD-2021-1002701/): mptcp: clear 'kern' flag from fallback sockets (not scored)
- [GSD-2021-1002700](https://insights.sbomify.com/GSD-2021-1002700/): drm/amd/pm: fix a potential gpu_metrics_table memory leak (not scored)
- [GSD-2021-1002699](https://insights.sbomify.com/GSD-2021-1002699/): dm btree remove: fix use after free in rebalance_children() (not scored)
- [GSD-2021-1002698](https://insights.sbomify.com/GSD-2021-1002698/): net/sched: sch_ets: don't remove idle classes from the round-robin list (not scored)
- [GSD-2021-1002697](https://insights.sbomify.com/GSD-2021-1002697/): net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (not scored)
- [GSD-2021-1002696](https://insights.sbomify.com/GSD-2021-1002696/): tee: amdtee: fix an IS_ERR() vs NULL bug (not scored)
- [GSD-2021-1002695](https://insights.sbomify.com/GSD-2021-1002695/): inet_diag: fix kernel-infoleak for UDP sockets (not scored)
- [GSD-2021-1002694](https://insights.sbomify.com/GSD-2021-1002694/): net: netlink: af_netlink: Prevent empty skb by adding a check on len. (not scored)
- [GSD-2021-1002693](https://insights.sbomify.com/GSD-2021-1002693/): sch_cake: do not call cake_destroy() from cake_init() (not scored)
- [GSD-2021-1002692](https://insights.sbomify.com/GSD-2021-1002692/): mac80211: track only QoS data frames for admission control (not scored)
- [GSD-2021-1002691](https://insights.sbomify.com/GSD-2021-1002691/): audit: improve robustness of the audit queue handling (not scored)
- [GSD-2021-1002690](https://insights.sbomify.com/GSD-2021-1002690/): bpf: Fix signed bounds propagation after mov32 (not scored)
- [GSD-2021-1002689](https://insights.sbomify.com/GSD-2021-1002689/): firmware: arm_scpi: Fix string overflow in SCPI genpd driver (not scored)
- [GSD-2021-1002688](https://insights.sbomify.com/GSD-2021-1002688/): mac80211: validate extended element ID is present (not scored)
- [GSD-2021-1002687](https://insights.sbomify.com/GSD-2021-1002687/): nfc: fix segfault in nfc_genl_dump_devices_done (not scored)
- [GSD-2021-1002686](https://insights.sbomify.com/GSD-2021-1002686/): xen/console: harden hvc_xen against event channel storms (not scored)
- [GSD-2021-1002685](https://insights.sbomify.com/GSD-2021-1002685/): xen/netfront: harden netfront against event channel storms (not scored)
- [GSD-2021-1002684](https://insights.sbomify.com/GSD-2021-1002684/): xen/blkfront: harden blkfront against event channel storms (not scored)
- [GSD-2021-1002683](https://insights.sbomify.com/GSD-2021-1002683/): scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (not scored)
- [GSD-2021-1002682](https://insights.sbomify.com/GSD-2021-1002682/): ovl: fix warning in ovl_create_real() (not scored)
- [GSD-2021-1002681](https://insights.sbomify.com/GSD-2021-1002681/): xen/netback: don't queue unlimited number of packages (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/13/