# Vulnerabilities published in 2021


- [GSD-2021-1000377](https://insights.sbomify.com/GSD-2021-1000377/): spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (not scored)
- [GSD-2021-1000376](https://insights.sbomify.com/GSD-2021-1000376/): drm/amd/display: Fix off by one in hdmi_14_process_transaction() (not scored)
- [GSD-2021-1000375](https://insights.sbomify.com/GSD-2021-1000375/): Drivers: hv: vmbus: Increase wait time for VMbus unload (not scored)
- [GSD-2021-1000374](https://insights.sbomify.com/GSD-2021-1000374/): sched/fair: Fix shift-out-of-bounds in load_balance() (not scored)
- [GSD-2021-1000373](https://insights.sbomify.com/GSD-2021-1000373/): media: aspeed: fix clock handling logic (not scored)
- [GSD-2021-1000372](https://insights.sbomify.com/GSD-2021-1000372/): media: [next] staging: media: atomisp: fix memory leak of object flash (not scored)
- [GSD-2021-1000371](https://insights.sbomify.com/GSD-2021-1000371/): media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' (not scored)
- [GSD-2021-1000370](https://insights.sbomify.com/GSD-2021-1000370/): media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() (not scored)
- [GSD-2021-1000369](https://insights.sbomify.com/GSD-2021-1000369/): nvmet-tcp: fix incorrect locking in state_change sk callback (not scored)
- [GSD-2021-1000368](https://insights.sbomify.com/GSD-2021-1000368/): io_uring: fix overflows checks in provide buffers (not scored)
- [GSD-2021-1000367](https://insights.sbomify.com/GSD-2021-1000367/): drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train() (not scored)
- [GSD-2021-1000366](https://insights.sbomify.com/GSD-2021-1000366/): Bluetooth: avoid deadlock between hci_dev->lock and socket lock (not scored)
- [GSD-2021-1000365](https://insights.sbomify.com/GSD-2021-1000365/): powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (not scored)
- [GSD-2021-1000364](https://insights.sbomify.com/GSD-2021-1000364/): liquidio: Fix unintented sign extension of a left shift of a u16 (not scored)
- [GSD-2021-1000363](https://insights.sbomify.com/GSD-2021-1000363/): iommu/vt-d: Remove WO permissions on second-level paging entries (not scored)
- [GSD-2021-1000362](https://insights.sbomify.com/GSD-2021-1000362/): powerpc/64s: Fix pte update for kernel memory on radix (not scored)
- [GSD-2021-1000361](https://insights.sbomify.com/GSD-2021-1000361/): mt76: mt7615: fix tx skb dma unmap (not scored)
- [GSD-2021-1000360](https://insights.sbomify.com/GSD-2021-1000360/): mt76: mt7915: fix tx skb dma unmap (not scored)
- [GSD-2021-1000359](https://insights.sbomify.com/GSD-2021-1000359/): RDMA/rtrs-clt: destroy sysfs after removing session from active list (not scored)
- [GSD-2021-1000358](https://insights.sbomify.com/GSD-2021-1000358/): RDMA/qedr: Fix error return code in qedr_iw_connect() (not scored)
- [GSD-2021-1000357](https://insights.sbomify.com/GSD-2021-1000357/): i2c: cadence: fix reference leak when pm_runtime_get_sync fails (not scored)
- [GSD-2021-1000356](https://insights.sbomify.com/GSD-2021-1000356/): i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (not scored)
- [GSD-2021-1000355](https://insights.sbomify.com/GSD-2021-1000355/): i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (not scored)
- [GSD-2021-1000354](https://insights.sbomify.com/GSD-2021-1000354/): i2c: imx: fix reference leak when pm_runtime_get_sync fails (not scored)
- [GSD-2021-1000353](https://insights.sbomify.com/GSD-2021-1000353/): i2c: sprd: fix reference leak when pm_runtime_get_sync fails (not scored)
- [GSD-2021-1000352](https://insights.sbomify.com/GSD-2021-1000352/): i2c: xiic: fix reference leak when pm_runtime_get_sync fails (not scored)
- [GSD-2021-1000351](https://insights.sbomify.com/GSD-2021-1000351/): i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails (not scored)
- [GSD-2021-1000350](https://insights.sbomify.com/GSD-2021-1000350/): vsock/virtio: free queued packets when closing socket (not scored)
- [GSD-2021-1000349](https://insights.sbomify.com/GSD-2021-1000349/): net: marvell: prestera: fix port event handling on init (not scored)
- [GSD-2021-1000348](https://insights.sbomify.com/GSD-2021-1000348/): powerpc/64: Fix the definition of the fixmap area (not scored)
- [GSD-2021-1000347](https://insights.sbomify.com/GSD-2021-1000347/): mt76: mt7615: fix memleak when mt7615_unregister_device() (not scored)
- [GSD-2021-1000346](https://insights.sbomify.com/GSD-2021-1000346/): ath10k: Fix a use after free in ath10k_htc_send_bundle (not scored)
- [GSD-2021-1000345](https://insights.sbomify.com/GSD-2021-1000345/): bnxt_en: Fix RX consumer index logic in the error path. (not scored)
- [GSD-2021-1000344](https://insights.sbomify.com/GSD-2021-1000344/): wlcore: Fix buffer overrun by snprintf due to incorrect buffer size (not scored)
- [GSD-2021-1000343](https://insights.sbomify.com/GSD-2021-1000343/): net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (not scored)
- [GSD-2021-1000342](https://insights.sbomify.com/GSD-2021-1000342/): RDMA/siw: Fix a use after free in siw_alloc_mr (not scored)
- [GSD-2021-1000341](https://insights.sbomify.com/GSD-2021-1000341/): net: Only allow init netns to set default tcp cong to a restricted algo (not scored)
- [GSD-2021-1000340](https://insights.sbomify.com/GSD-2021-1000340/): mm: memcontrol: slab: fix obtain a reference to a freeing memcg (not scored)
- [GSD-2021-1000339](https://insights.sbomify.com/GSD-2021-1000339/): KEYS: trusted: Fix memory leak on object td (not scored)
- [GSD-2021-1000338](https://insights.sbomify.com/GSD-2021-1000338/): ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook (not scored)
- [GSD-2021-1000337](https://insights.sbomify.com/GSD-2021-1000337/): f2fs: fix panic during f2fs_resize_fs() (not scored)
- [GSD-2021-1000336](https://insights.sbomify.com/GSD-2021-1000336/): f2fs: fix to avoid touching checkpointed data in get_victim() (not scored)
- [GSD-2021-1000335](https://insights.sbomify.com/GSD-2021-1000335/): PCI: endpoint: Fix NULL pointer dereference for ->get_features() (not scored)
- [GSD-2021-1000334](https://insights.sbomify.com/GSD-2021-1000334/): dmaengine: idxd: Fix potential null dereference on pointer status (not scored)
- [GSD-2021-1000333](https://insights.sbomify.com/GSD-2021-1000333/): ceph: fix inode leak on getattr error in __fh_to_dentry (not scored)
- [GSD-2021-1000332](https://insights.sbomify.com/GSD-2021-1000332/): xprtrdma: Fix cwnd update ordering (not scored)
- [GSD-2021-1000331](https://insights.sbomify.com/GSD-2021-1000331/): sctp: do asoc update earlier in sctp_sf_do_dupcook_a (not scored)
- [GSD-2021-1000330](https://insights.sbomify.com/GSD-2021-1000330/): ethernet:enic: Fix a use after free bug in enic_hard_start_xmit (not scored)
- [GSD-2021-1000329](https://insights.sbomify.com/GSD-2021-1000329/): libbpf: Fix signed overflow in ringbuf_process_ring (not scored)
- [GSD-2021-1000328](https://insights.sbomify.com/GSD-2021-1000328/): arm64: entry: always set GIC_PRIO_PSR_I_SET during entry (not scored)
- [GSD-2021-1000327](https://insights.sbomify.com/GSD-2021-1000327/): netfilter: nftables: Fix a memleak from userdata error path in new objects (not scored)
- [GSD-2021-1000326](https://insights.sbomify.com/GSD-2021-1000326/): sched: Fix out-of-bound access in uclamp (not scored)
- [GSD-2021-1000325](https://insights.sbomify.com/GSD-2021-1000325/): can: mcp251x: fix resume from sleep before interface was brought up (not scored)
- [GSD-2021-1000324](https://insights.sbomify.com/GSD-2021-1000324/): netfilter: nftables: avoid overflows in nft_hash_buckets() (not scored)
- [GSD-2021-1000323](https://insights.sbomify.com/GSD-2021-1000323/): i40e: Fix use-after-free in i40e_client_subtask() (not scored)
- [GSD-2021-1000322](https://insights.sbomify.com/GSD-2021-1000322/): powerpc/64s: Fix crashes when toggling entry flush barrier (not scored)
- [GSD-2021-1000321](https://insights.sbomify.com/GSD-2021-1000321/): userfaultfd: release page in error path to avoid BUG_ON (not scored)
- [GSD-2021-1000320](https://insights.sbomify.com/GSD-2021-1000320/): hfsplus: prevent corruption in shrinking truncate (not scored)
- [GSD-2021-1000319](https://insights.sbomify.com/GSD-2021-1000319/): ACPI: scan: Fix a memory leak in an error handling path (not scored)
- [GSD-2021-1000318](https://insights.sbomify.com/GSD-2021-1000318/): usb: dwc3: gadget: Free gadget structure only after freeing endpoints (not scored)
- [GSD-2021-1000317](https://insights.sbomify.com/GSD-2021-1000317/): kyber: fix out of bounds access when preempted (not scored)
- [GSD-2021-1000316](https://insights.sbomify.com/GSD-2021-1000316/): f2fs: compress: fix race condition of overwrite vs truncate (not scored)
- [GSD-2021-1000315](https://insights.sbomify.com/GSD-2021-1000315/): nvmet-rdma: Fix NULL deref when SEND is completed with error (not scored)
- [GSD-2021-1000314](https://insights.sbomify.com/GSD-2021-1000314/): nbd: Fix NULL pointer in flush_workqueue (not scored)
- [GSD-2021-1000313](https://insights.sbomify.com/GSD-2021-1000313/): KVM: nVMX: Always make an attempt to map eVMCS after migration (not scored)
- [GSD-2021-1000312](https://insights.sbomify.com/GSD-2021-1000312/): usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 (not scored)
- [GSD-2021-1000311](https://insights.sbomify.com/GSD-2021-1000311/): drm/i915: Fix crash in auto_retire (not scored)
- [GSD-2021-1000310](https://insights.sbomify.com/GSD-2021-1000310/): KVM: VMX: Disable preemption when probing user return MSRs (not scored)
- [GSD-2021-1000309](https://insights.sbomify.com/GSD-2021-1000309/): net/nfc: fix use-after-free llcp_sock_bind/connect (not scored)
- [GSD-2021-1000308](https://insights.sbomify.com/GSD-2021-1000308/): iio: sx9310: Fix access to variable DT array (not scored)
- [GSD-2021-1000307](https://insights.sbomify.com/GSD-2021-1000307/): soc/tegra: regulators: Fix locking up when voltage-spread is out of range (not scored)
- [GSD-2021-1000306](https://insights.sbomify.com/GSD-2021-1000306/): selinux: add proper NULL termination to the secclass_map permissions (not scored)
- [GSD-2021-1000305](https://insights.sbomify.com/GSD-2021-1000305/): async_xor: increase src_offs when dropping destination page (not scored)
- [GSD-2021-1000304](https://insights.sbomify.com/GSD-2021-1000304/): mt76: fix potential DMA mapping leak (not scored)
- [GSD-2021-1000303](https://insights.sbomify.com/GSD-2021-1000303/): rtw88: Fix array overrun in rtw_get_tx_power_params() (not scored)
- [GSD-2021-1000302](https://insights.sbomify.com/GSD-2021-1000302/): drm: bridge/panel: Cleanup connector on bridge detach (not scored)
- [GSD-2021-1000301](https://insights.sbomify.com/GSD-2021-1000301/): drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode. (not scored)
- [GSD-2021-1000300](https://insights.sbomify.com/GSD-2021-1000300/): KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (not scored)
- [GSD-2021-1000299](https://insights.sbomify.com/GSD-2021-1000299/): KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (not scored)
- [GSD-2021-1000298](https://insights.sbomify.com/GSD-2021-1000298/): KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs (not scored)
- [GSD-2021-1000297](https://insights.sbomify.com/GSD-2021-1000297/): crypto: sun8i-ss - fix result memory leak on error path (not scored)
- [GSD-2021-1000296](https://insights.sbomify.com/GSD-2021-1000296/): KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (not scored)
- [GSD-2021-1000295](https://insights.sbomify.com/GSD-2021-1000295/): regmap: set debugfs_name to NULL after it is freed (not scored)
- [GSD-2021-1000294](https://insights.sbomify.com/GSD-2021-1000294/): spi: stm32: Fix use-after-free on unbind (not scored)
- [GSD-2021-1000293](https://insights.sbomify.com/GSD-2021-1000293/): crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map (not scored)
- [GSD-2021-1000292](https://insights.sbomify.com/GSD-2021-1000292/): crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (not scored)
- [GSD-2021-1000291](https://insights.sbomify.com/GSD-2021-1000291/): Drivers: hv: vmbus: Drop error message when 'No request id available' (not scored)
- [GSD-2021-1000290](https://insights.sbomify.com/GSD-2021-1000290/): mtd: require write permissions for locking and badblock ioctls (not scored)
- [GSD-2021-1000289](https://insights.sbomify.com/GSD-2021-1000289/): bus: qcom: Put child node before return (not scored)
- [GSD-2021-1000288](https://insights.sbomify.com/GSD-2021-1000288/): soundwire: stream: fix memory leak in stream config error path (not scored)
- [GSD-2021-1000287](https://insights.sbomify.com/GSD-2021-1000287/): m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (not scored)
- [GSD-2021-1000286](https://insights.sbomify.com/GSD-2021-1000286/): crypto: sun8i-ss - Fix memory leak of pad (not scored)
- [GSD-2021-1000285](https://insights.sbomify.com/GSD-2021-1000285/): spi: Fix use-after-free with devm_spi_alloc_* (not scored)
- [GSD-2021-1000284](https://insights.sbomify.com/GSD-2021-1000284/): crypto: sa2ul - Fix memory leak of rxd (not scored)
- [GSD-2021-1000283](https://insights.sbomify.com/GSD-2021-1000283/): spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (not scored)
- [GSD-2021-1000282](https://insights.sbomify.com/GSD-2021-1000282/): Drivers: hv: vmbus: Use after free in __vmbus_open() (not scored)
- [GSD-2021-1000281](https://insights.sbomify.com/GSD-2021-1000281/): memory: renesas-rpc-if: fix possible NULL pointer dereference of resource (not scored)
- [GSD-2021-1000280](https://insights.sbomify.com/GSD-2021-1000280/): spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (not scored)
- [GSD-2021-1000279](https://insights.sbomify.com/GSD-2021-1000279/): btrfs: zoned: bail out in btrfs_alloc_chunk for bad input (not scored)
- [GSD-2021-1000278](https://insights.sbomify.com/GSD-2021-1000278/): spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/37/