# Vulnerabilities published in 2021


- [GSD-2021-1001077](https://insights.sbomify.com/GSD-2021-1001077/): can: mcba_usb: fix memory leak in mcba_usb (not scored)
- [GSD-2021-1001076](https://insights.sbomify.com/GSD-2021-1001076/): can: j1939: fix Use-after-Free, hold skb ref while in use (not scored)
- [GSD-2021-1001075](https://insights.sbomify.com/GSD-2021-1001075/): regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL (not scored)
- [GSD-2021-1001074](https://insights.sbomify.com/GSD-2021-1001074/): phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (not scored)
- [GSD-2021-1001073](https://insights.sbomify.com/GSD-2021-1001073/): can: bcm: fix infoleak in struct bcm_msg_head (not scored)
- [GSD-2021-1001072](https://insights.sbomify.com/GSD-2021-1001072/): net: ethernet: fix potential use-after-free in ec_bhf_remove (not scored)
- [GSD-2021-1001071](https://insights.sbomify.com/GSD-2021-1001071/): net: cdc_eem: fix tx fixup skb leak (not scored)
- [GSD-2021-1001070](https://insights.sbomify.com/GSD-2021-1001070/): net: hamradio: fix memory leak in mkiss_close (not scored)
- [GSD-2021-1001069](https://insights.sbomify.com/GSD-2021-1001069/): net: ipv4: fix memory leak in ip_mc_add1_src (not scored)
- [GSD-2021-1001068](https://insights.sbomify.com/GSD-2021-1001068/): net: usb: fix possible use-after-free in smsc75xx_bind (not scored)
- [GSD-2021-1001067](https://insights.sbomify.com/GSD-2021-1001067/): bpf: Fix leakage under speculation on mispredicted branches (not scored)
- [GSD-2021-1001066](https://insights.sbomify.com/GSD-2021-1001066/): net: qrtr: fix OOB Read in qrtr_endpoint_post (not scored)
- [GSD-2021-1001065](https://insights.sbomify.com/GSD-2021-1001065/): ethtool: strset: fix message length calculation (not scored)
- [GSD-2021-1001064](https://insights.sbomify.com/GSD-2021-1001064/): mptcp: fix soft lookup in subflow_error_report() (not scored)
- [GSD-2021-1001063](https://insights.sbomify.com/GSD-2021-1001063/): sch_cake: Fix out of bounds when parsing TCP options and header (not scored)
- [GSD-2021-1001062](https://insights.sbomify.com/GSD-2021-1001062/): mptcp: Fix out of bounds when parsing TCP options (not scored)
- [GSD-2021-1001061](https://insights.sbomify.com/GSD-2021-1001061/): netfilter: synproxy: Fix out of bounds when parsing TCP options (not scored)
- [GSD-2021-1001060](https://insights.sbomify.com/GSD-2021-1001060/): net/mlx5e: Fix page reclaim for dead peer hairpin (not scored)
- [GSD-2021-1001059](https://insights.sbomify.com/GSD-2021-1001059/): net/mlx5e: Fix use-after-free of encap entry in neigh update handler (not scored)
- [GSD-2021-1001058](https://insights.sbomify.com/GSD-2021-1001058/): udp: fix race between close() and udp_abort() (not scored)
- [GSD-2021-1001057](https://insights.sbomify.com/GSD-2021-1001057/): netfilter: nf_tables: initialize set before expression setup (not scored)
- [GSD-2021-1001056](https://insights.sbomify.com/GSD-2021-1001056/): net: rds: fix memory leak in rds_recvmsg (not scored)
- [GSD-2021-1001055](https://insights.sbomify.com/GSD-2021-1001055/): net: ipv4: fix memory leak in netlbl_cipsov4_add_std (not scored)
- [GSD-2021-1001054](https://insights.sbomify.com/GSD-2021-1001054/): mac80211: fix skb length check in ieee80211_scan_rx() (not scored)
- [GSD-2021-1001053](https://insights.sbomify.com/GSD-2021-1001053/): batman-adv: Avoid WARN_ON timing related checks (not scored)
- [GSD-2021-1001052](https://insights.sbomify.com/GSD-2021-1001052/): drm/amd/display: Fix potential memory leak in DMUB hw_init (not scored)
- [GSD-2021-1001051](https://insights.sbomify.com/GSD-2021-1001051/): gfs2: Fix use-after-free in gfs2_glock_shrink_scan (not scored)
- [GSD-2021-1001050](https://insights.sbomify.com/GSD-2021-1001050/): kvm: LAPIC: Restore guard to prevent illegal APIC register access (not scored)
- [GSD-2021-1001049](https://insights.sbomify.com/GSD-2021-1001049/): drm/tegra: sor: Do not leak runtime PM reference (not scored)
- [GSD-2021-1001048](https://insights.sbomify.com/GSD-2021-1001048/): HID: usbhid: fix info leak in hid_submit_ctrl (not scored)
- [GSD-2021-1001047](https://insights.sbomify.com/GSD-2021-1001047/): mm/memory-failure: make sure wait for page writeback in memory_failure (not scored)
- [GSD-2021-1001046](https://insights.sbomify.com/GSD-2021-1001046/): net: ieee802154: fix null deref in parse dev addr (not scored)
- [GSD-2021-1001045](https://insights.sbomify.com/GSD-2021-1001045/): scsi: core: Fix error handling of scsi_host_alloc() (not scored)
- [GSD-2021-1001044](https://insights.sbomify.com/GSD-2021-1001044/): NFS: Fix use-after-free in nfs4_init_client() (not scored)
- [GSD-2021-1001043](https://insights.sbomify.com/GSD-2021-1001043/): NFS: Fix a potential NULL dereference in nfs_get_client() (not scored)
- [GSD-2021-1001042](https://insights.sbomify.com/GSD-2021-1001042/): IB/mlx5: Fix initializing CQ fragments buffer (not scored)
- [GSD-2021-1001041](https://insights.sbomify.com/GSD-2021-1001041/): KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message (not scored)
- [GSD-2021-1001040](https://insights.sbomify.com/GSD-2021-1001040/): perf: Fix data race between pin_count increment/decrement (not scored)
- [GSD-2021-1001039](https://insights.sbomify.com/GSD-2021-1001039/): gpio: wcd934x: Fix shift-out-of-bounds error (not scored)
- [GSD-2021-1001038](https://insights.sbomify.com/GSD-2021-1001038/): ASoC: core: Fix Null-point-dereference in fmt_single_name() (not scored)
- [GSD-2021-1001037](https://insights.sbomify.com/GSD-2021-1001037/): RDMA: Verify port when creating flow rule (not scored)
- [GSD-2021-1001036](https://insights.sbomify.com/GSD-2021-1001036/): RDMA/ipoib: Fix warning caused by destroying non-initial netns (not scored)
- [GSD-2021-1001035](https://insights.sbomify.com/GSD-2021-1001035/): usb: fix various gadget panics on 10gbps cabling (not scored)
- [GSD-2021-1001034](https://insights.sbomify.com/GSD-2021-1001034/): usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port (not scored)
- [GSD-2021-1001033](https://insights.sbomify.com/GSD-2021-1001033/): usb: dwc3: ep0: fix NULL pointer exception (not scored)
- [GSD-2021-1001032](https://insights.sbomify.com/GSD-2021-1001032/): usb: fix various gadgets null ptr deref on 10gbps cabling. (not scored)
- [GSD-2021-1001031](https://insights.sbomify.com/GSD-2021-1001031/): usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler (not scored)
- [GSD-2021-1001030](https://insights.sbomify.com/GSD-2021-1001030/): usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL (not scored)
- [GSD-2021-1001029](https://insights.sbomify.com/GSD-2021-1001029/): usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled (not scored)
- [GSD-2021-1001028](https://insights.sbomify.com/GSD-2021-1001028/): btrfs: promote debugging asserts to full-fledged checks in validate_super (not scored)
- [GSD-2021-1001027](https://insights.sbomify.com/GSD-2021-1001027/): tracing: Correct the length check which causes memory corruption (not scored)
- [GSD-2021-1001026](https://insights.sbomify.com/GSD-2021-1001026/): bcache: avoid oversized read request in cache missing code path (not scored)
- [GSD-2021-1001025](https://insights.sbomify.com/GSD-2021-1001025/): ftrace: Do not blindly read the ip address in ftrace_bug() (not scored)
- [GSD-2021-1001024](https://insights.sbomify.com/GSD-2021-1001024/): kvm: avoid speculation-based attacks from out-of-range memslot accesses (not scored)
- [GSD-2021-1001023](https://insights.sbomify.com/GSD-2021-1001023/): bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove() (not scored)
- [GSD-2021-1001022](https://insights.sbomify.com/GSD-2021-1001022/): usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource() (not scored)
- [GSD-2021-1001021](https://insights.sbomify.com/GSD-2021-1001021/): drm: Lock pointer access in drm_master_release() (not scored)
- [GSD-2021-1001020](https://insights.sbomify.com/GSD-2021-1001020/): KVM: X86: MMU: Use the correct inherited permissions to get shadow page (not scored)
- [GSD-2021-1001019](https://insights.sbomify.com/GSD-2021-1001019/): drm: Fix use-after-free read in drm_getunique() (not scored)
- [GSD-2021-1001018](https://insights.sbomify.com/GSD-2021-1001018/): ALSA: seq: Fix race of snd_seq_timer_open() (not scored)
- [GSD-2021-1001017](https://insights.sbomify.com/GSD-2021-1001017/): spi: bcm2835: Fix out-of-bounds access with more than 4 slaves (not scored)
- [GSD-2021-1001016](https://insights.sbomify.com/GSD-2021-1001016/): dm verity: fix require_signatures module_param permissions (not scored)
- [GSD-2021-1001015](https://insights.sbomify.com/GSD-2021-1001015/): net:sfc: fix non-freed irq in legacy irq mode (not scored)
- [GSD-2021-1001014](https://insights.sbomify.com/GSD-2021-1001014/): net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (not scored)
- [GSD-2021-1001013](https://insights.sbomify.com/GSD-2021-1001013/): wq: handle VM suspension in stall detection (not scored)
- [GSD-2021-1001012](https://insights.sbomify.com/GSD-2021-1001012/): bonding: init notify_work earlier to avoid uninitialized use (not scored)
- [GSD-2021-1001011](https://insights.sbomify.com/GSD-2021-1001011/): isdn: mISDN: netjet: Fix crash in nj_probe: (not scored)
- [GSD-2021-1001010](https://insights.sbomify.com/GSD-2021-1001010/): net/nfc/rawsock.c: fix a permission check bug (not scored)
- [GSD-2021-1001009](https://insights.sbomify.com/GSD-2021-1001009/): usb: dwc3: core: fix kernel panic when do reboot (not scored)
- [GSD-2021-1001008](https://insights.sbomify.com/GSD-2021-1001008/): mm/slub: actually fix freelist pointer vs redzoning (not scored)
- [GSD-2021-1001007](https://insights.sbomify.com/GSD-2021-1001007/): net: bridge: fix vlan tunnel dst refcnt when egressing (not scored)
- [GSD-2021-1001006](https://insights.sbomify.com/GSD-2021-1001006/): net: bridge: fix vlan tunnel dst null pointer dereference (not scored)
- [GSD-2021-1001005](https://insights.sbomify.com/GSD-2021-1001005/): net: ll_temac: Make sure to free skb when it is completely used (not scored)
- [GSD-2021-1001004](https://insights.sbomify.com/GSD-2021-1001004/): net: ll_temac: Fix TX BD buffer overwrite (not scored)
- [GSD-2021-1001003](https://insights.sbomify.com/GSD-2021-1001003/): mac80211: Fix NULL ptr deref for injected rate info (not scored)
- [GSD-2021-1001002](https://insights.sbomify.com/GSD-2021-1001002/): x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer (not scored)
- [GSD-2021-1001001](https://insights.sbomify.com/GSD-2021-1001001/): x86/fpu: Prevent state corruption in __fpu__restore_sig() (not scored)
- [GSD-2021-1001000](https://insights.sbomify.com/GSD-2021-1001000/): x86/ioremap: Map EFI-reserved memory as encrypted for SEV (not scored)
- [GSD-2021-1000999](https://insights.sbomify.com/GSD-2021-1000999/): KVM: X86: Fix x86_emulator slab cache leak (not scored)
- [GSD-2021-1000998](https://insights.sbomify.com/GSD-2021-1000998/): PCI: aardvark: Fix kernel panic during PIO transfer (not scored)
- [GSD-2021-1000997](https://insights.sbomify.com/GSD-2021-1000997/): KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (not scored)
- [GSD-2021-1000996](https://insights.sbomify.com/GSD-2021-1000996/): can: mcba_usb: fix memory leak in mcba_usb (not scored)
- [GSD-2021-1000995](https://insights.sbomify.com/GSD-2021-1000995/): can: j1939: fix Use-after-Free, hold skb ref while in use (not scored)
- [GSD-2021-1000994](https://insights.sbomify.com/GSD-2021-1000994/): regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL (not scored)
- [GSD-2021-1000993](https://insights.sbomify.com/GSD-2021-1000993/): can: bcm: fix infoleak in struct bcm_msg_head (not scored)
- [GSD-2021-1000992](https://insights.sbomify.com/GSD-2021-1000992/): phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (not scored)
- [GSD-2021-1000991](https://insights.sbomify.com/GSD-2021-1000991/): net: ethernet: fix potential use-after-free in ec_bhf_remove (not scored)
- [GSD-2021-1000990](https://insights.sbomify.com/GSD-2021-1000990/): net: cdc_eem: fix tx fixup skb leak (not scored)
- [GSD-2021-1000989](https://insights.sbomify.com/GSD-2021-1000989/): net: hamradio: fix memory leak in mkiss_close (not scored)
- [GSD-2021-1000988](https://insights.sbomify.com/GSD-2021-1000988/): net: ipv4: fix memory leak in ip_mc_add1_src (not scored)
- [GSD-2021-1000987](https://insights.sbomify.com/GSD-2021-1000987/): net: usb: fix possible use-after-free in smsc75xx_bind (not scored)
- [GSD-2021-1000986](https://insights.sbomify.com/GSD-2021-1000986/): bpf: Fix leakage under speculation on mispredicted branches (not scored)
- [GSD-2021-1000985](https://insights.sbomify.com/GSD-2021-1000985/): net: qrtr: fix OOB Read in qrtr_endpoint_post (not scored)
- [GSD-2021-1000984](https://insights.sbomify.com/GSD-2021-1000984/): ethtool: strset: fix message length calculation (not scored)
- [GSD-2021-1000983](https://insights.sbomify.com/GSD-2021-1000983/): sch_cake: Fix out of bounds when parsing TCP options and header (not scored)
- [GSD-2021-1000982](https://insights.sbomify.com/GSD-2021-1000982/): mptcp: Fix out of bounds when parsing TCP options (not scored)
- [GSD-2021-1000981](https://insights.sbomify.com/GSD-2021-1000981/): netfilter: synproxy: Fix out of bounds when parsing TCP options (not scored)
- [GSD-2021-1000980](https://insights.sbomify.com/GSD-2021-1000980/): net/mlx5e: Fix page reclaim for dead peer hairpin (not scored)
- [GSD-2021-1000979](https://insights.sbomify.com/GSD-2021-1000979/): udp: fix race between close() and udp_abort() (not scored)
- [GSD-2021-1000978](https://insights.sbomify.com/GSD-2021-1000978/): net: rds: fix memory leak in rds_recvmsg (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/30/