# Vulnerabilities published in 2021


- [CVE-2021-47602](https://insights.sbomify.com/CVE-2021-47602/): mac80211: track only QoS data frames for admission control (medium 5.5)
- [CVE-2021-47601](https://insights.sbomify.com/CVE-2021-47601/): tee: amdtee: fix an IS_ERR() vs NULL bug (medium 5.5)
- [CVE-2021-47600](https://insights.sbomify.com/CVE-2021-47600/): dm btree remove: fix use after free in rebalance_children() (high 7.8)
- [CVE-2021-47599](https://insights.sbomify.com/CVE-2021-47599/): btrfs: use latest_dev in btrfs_show_devname (medium 4.7)
- [CVE-2021-47598](https://insights.sbomify.com/CVE-2021-47598/): sch_cake: do not call cake_destroy() from cake_init() (high 7.8)
- [CVE-2021-47597](https://insights.sbomify.com/CVE-2021-47597/): inet_diag: fix kernel-infoleak for UDP sockets (medium 5.5)
- [CVE-2021-47596](https://insights.sbomify.com/CVE-2021-47596/): net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (high 7.8)
- [CVE-2021-47595](https://insights.sbomify.com/CVE-2021-47595/): net/sched: sch_ets: don't remove idle classes from the round-robin list (medium 5.5)
- [CVE-2021-47594](https://insights.sbomify.com/CVE-2021-47594/): mptcp: never allow the PM to close a listener subflow (medium 5.5)
- [CVE-2021-47593](https://insights.sbomify.com/CVE-2021-47593/): mptcp: clear 'kern' flag from fallback sockets (medium 5.5)
- [CVE-2021-47592](https://insights.sbomify.com/CVE-2021-47592/): net: stmmac: fix tc flower deletion for VLAN priority Rx steering (medium 5.5)
- [CVE-2021-47591](https://insights.sbomify.com/CVE-2021-47591/): mptcp: remove tcp ulp setsockopt support (medium 5.5)
- [CVE-2021-47590](https://insights.sbomify.com/CVE-2021-47590/): mptcp: fix deadlock in __mptcp_push_pending() (medium 5.5)
- [CVE-2021-47589](https://insights.sbomify.com/CVE-2021-47589/): igbvf: fix double free in `igbvf_probe` (high 7.8)
- [CVE-2021-47588](https://insights.sbomify.com/CVE-2021-47588/): sit: do not call ipip6_dev_free() from sit_init_net() (high 7.8)
- [CVE-2021-47587](https://insights.sbomify.com/CVE-2021-47587/): net: systemport: Add global locking for descriptor lifecycle (critical 9.8)
- [CVE-2021-47586](https://insights.sbomify.com/CVE-2021-47586/): net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup (medium 5.5)
- [CVE-2021-47585](https://insights.sbomify.com/CVE-2021-47585/): btrfs: fix memory leak in __add_inode_ref() (medium 5.5)
- [CVE-2021-47584](https://insights.sbomify.com/CVE-2021-47584/): iocost: Fix divide-by-zero on donation from low hweight cgroup (medium 5.5)
- [CVE-2021-47583](https://insights.sbomify.com/CVE-2021-47583/): media: mxl111sf: change mutex_init() location (medium 5.5)
- [CVE-2021-47582](https://insights.sbomify.com/CVE-2021-47582/): USB: core: Make do_proc_control() and do_proc_bulk() killable (medium 5.5)
- [CVE-2021-47580](https://insights.sbomify.com/CVE-2021-47580/): scsi: scsi_debug: Fix type in min_t to avoid stack OOB (high 7.1)
- [CVE-2021-47579](https://insights.sbomify.com/CVE-2021-47579/): ovl: fix warning in ovl_create_real() (medium 5.5)
- [CVE-2021-47578](https://insights.sbomify.com/CVE-2021-47578/): scsi: scsi_debug: Don't call kcalloc() if size arg is zero (medium 5.5)
- [CVE-2021-47577](https://insights.sbomify.com/CVE-2021-47577/): io-wq: check for wq exit after adding new worker task_work (high 7.8)
- [CVE-2021-47576](https://insights.sbomify.com/CVE-2021-47576/): scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (high 7.8)
- [CVE-2021-47572](https://insights.sbomify.com/CVE-2021-47572/): net: nexthop: fix null pointer dereference when IPv6 is not enabled (medium 5.5)
- [CVE-2021-47571](https://insights.sbomify.com/CVE-2021-47571/): staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (high 7.8)
- [CVE-2021-47570](https://insights.sbomify.com/CVE-2021-47570/): staging: r8188eu: fix a memory leak in rtw_wx_read32() (medium 5.5)
- [CVE-2021-47569](https://insights.sbomify.com/CVE-2021-47569/): io_uring: fail cancellation for EXITING tasks (medium 5.5)
- [CVE-2021-47568](https://insights.sbomify.com/CVE-2021-47568/): ksmbd: fix memleak in get_file_stream_info() (medium 5.5)
- [CVE-2021-47567](https://insights.sbomify.com/CVE-2021-47567/): powerpc/32: Fix hardlockup on vmap stack overflow (medium 5.5)
- [CVE-2021-47566](https://insights.sbomify.com/CVE-2021-47566/): proc/vmcore: fix clearing user buffer by properly using clear_user() (high 7.8)
- [CVE-2021-47565](https://insights.sbomify.com/CVE-2021-47565/): scsi: mpt3sas: Fix kernel panic during drive powercycle test (high 7.8)
- [CVE-2021-47564](https://insights.sbomify.com/CVE-2021-47564/): net: marvell: prestera: fix double free issue on err path (high 7.8)
- [CVE-2021-47563](https://insights.sbomify.com/CVE-2021-47563/): ice: avoid bpf_prog refcount underflow (medium 5.5)
- [CVE-2021-47562](https://insights.sbomify.com/CVE-2021-47562/): ice: fix vsi->txq_map sizing (medium 5.5)
- [CVE-2021-47561](https://insights.sbomify.com/CVE-2021-47561/): i2c: virtio: disable timeout handling (high 7.8)
- [CVE-2021-47560](https://insights.sbomify.com/CVE-2021-47560/): mlxsw: spectrum: Protect driver from buggy firmware (medium 5.5)
- [CVE-2021-47559](https://insights.sbomify.com/CVE-2021-47559/): net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() (high 7.5)
- [CVE-2021-47558](https://insights.sbomify.com/CVE-2021-47558/): net: stmmac: Disable Tx queues when reconfiguring the interface (medium 5.5)
- [CVE-2021-47557](https://insights.sbomify.com/CVE-2021-47557/): net/sched: sch_ets: don't peek at classes beyond 'nbands' (medium 5.5)
- [CVE-2021-47556](https://insights.sbomify.com/CVE-2021-47556/): ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() (medium 5.5)
- [CVE-2021-47555](https://insights.sbomify.com/CVE-2021-47555/): net: vlan: fix underflow for the real_dev refcnt (high 7.8)
- [CVE-2021-47554](https://insights.sbomify.com/CVE-2021-47554/): vdpa_sim: avoid putting an uninitialized iova_domain (medium 5.5)
- [CVE-2021-47553](https://insights.sbomify.com/CVE-2021-47553/): sched/scs: Reset task stack state in bringup_cpu() (high 7.8)
- [CVE-2021-47552](https://insights.sbomify.com/CVE-2021-47552/): blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() (high 7.8)
- [CVE-2021-47551](https://insights.sbomify.com/CVE-2021-47551/): drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again (high 7.8)
- [CVE-2021-47550](https://insights.sbomify.com/CVE-2021-47550/): drm/amd/amdgpu: fix potential memleak (medium 5.5)
- [CVE-2021-47549](https://insights.sbomify.com/CVE-2021-47549/): sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl (high 7.8)
- [CVE-2021-47548](https://insights.sbomify.com/CVE-2021-47548/): ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (critical 9.8)
- [CVE-2021-47547](https://insights.sbomify.com/CVE-2021-47547/): net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound (medium 4.4)
- [CVE-2021-47546](https://insights.sbomify.com/CVE-2021-47546/): ipv6: fix memory leak in fib6_rule_suppress (medium 5.5)
- [CVE-2021-47544](https://insights.sbomify.com/CVE-2021-47544/): tcp: fix page frag corruption on page fault (critical 9.8)
- [CVE-2021-47542](https://insights.sbomify.com/CVE-2021-47542/): net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() (medium 5.5)
- [CVE-2021-47541](https://insights.sbomify.com/CVE-2021-47541/): net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() (high 7.8)
- [CVE-2021-47540](https://insights.sbomify.com/CVE-2021-47540/): mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode (medium 5.5)
- [CVE-2021-47539](https://insights.sbomify.com/CVE-2021-47539/): rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (medium 5.5)
- [CVE-2021-47538](https://insights.sbomify.com/CVE-2021-47538/): rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (medium 5.5)
- [CVE-2021-47537](https://insights.sbomify.com/CVE-2021-47537/): octeontx2-af: Fix a memleak bug in rvu_mbox_init() (medium 5.5)
- [CVE-2021-47536](https://insights.sbomify.com/CVE-2021-47536/): net/smc: fix wrong list_del in smc_lgr_cleanup_early (critical 9.8)
- [CVE-2021-47535](https://insights.sbomify.com/CVE-2021-47535/): drm/msm/a6xx: Allocate enough space for GMU registers (high 7.8)
- [CVE-2021-47534](https://insights.sbomify.com/CVE-2021-47534/): drm/vc4: kms: Add missing drm_crtc_commit_put (medium 4.1)
- [CVE-2021-47533](https://insights.sbomify.com/CVE-2021-47533/): drm/vc4: kms: Clear the HVS FIFO commit pointer once done (high 7.8)
- [CVE-2021-47532](https://insights.sbomify.com/CVE-2021-47532/): drm/msm/devfreq: Fix OPP refcnt leak (medium 5.5)
- [CVE-2021-47531](https://insights.sbomify.com/CVE-2021-47531/): drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP (medium 5.5)
- [CVE-2021-47530](https://insights.sbomify.com/CVE-2021-47530/): drm/msm: Fix wait_fence submitqueue leak (medium 5.5)
- [CVE-2021-47529](https://insights.sbomify.com/CVE-2021-47529/): iwlwifi: Fix memory leaks in error handling path (medium 5.5)
- [CVE-2021-47528](https://insights.sbomify.com/CVE-2021-47528/): usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init() (medium 5.5)
- [CVE-2021-47527](https://insights.sbomify.com/CVE-2021-47527/): serial: core: fix transmit-buffer reset and memleak (medium 5.5)
- [CVE-2021-47526](https://insights.sbomify.com/CVE-2021-47526/): serial: liteuart: Fix NULL pointer dereference in ->remove() (medium 5.5)
- [CVE-2021-47525](https://insights.sbomify.com/CVE-2021-47525/): serial: liteuart: fix use-after-free and memleak on unbind (high 7.8)
- [CVE-2021-47524](https://insights.sbomify.com/CVE-2021-47524/): serial: liteuart: fix minor-number leak on probe errors (medium 5.5)
- [CVE-2021-47523](https://insights.sbomify.com/CVE-2021-47523/): IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (medium 5.5)
- [CVE-2021-47522](https://insights.sbomify.com/CVE-2021-47522/): HID: bigbenff: prevent null pointer dereference (medium 5.5)
- [CVE-2021-47521](https://insights.sbomify.com/CVE-2021-47521/): can: sja1000: fix use after free in ems_pcmcia_add_card() (high 7.8)
- [CVE-2021-47520](https://insights.sbomify.com/CVE-2021-47520/): can: pch_can: pch_can_rx_normal: fix use after free (high 8.8)
- [CVE-2021-47519](https://insights.sbomify.com/CVE-2021-47519/): can: m_can: m_can_read_fifo: fix memory leak in error branch (high 7.5)
- [CVE-2021-47518](https://insights.sbomify.com/CVE-2021-47518/): nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (medium 5.5)
- [CVE-2021-47517](https://insights.sbomify.com/CVE-2021-47517/): ethtool: do not perform operations on net devices being unregistered (high 7.8)
- [CVE-2021-47516](https://insights.sbomify.com/CVE-2021-47516/): nfp: Fix memory leak in nfp_cpp_area_cache_add() (medium 5.5)
- [CVE-2021-47515](https://insights.sbomify.com/CVE-2021-47515/): seg6: fix the iif in the IPv6 socket control block (high 7.5)
- [CVE-2021-47514](https://insights.sbomify.com/CVE-2021-47514/): devlink: fix netns refcount leak in devlink_nl_cmd_reload() (medium 5.5)
- [CVE-2021-47513](https://insights.sbomify.com/CVE-2021-47513/): net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering (medium 5.5)
- [CVE-2021-47512](https://insights.sbomify.com/CVE-2021-47512/): net/sched: fq_pie: prevent dismantle issue (high 7.8)
- [CVE-2021-47511](https://insights.sbomify.com/CVE-2021-47511/): ALSA: pcm: oss: Fix negative period/buffer sizes (medium 5.5)
- [CVE-2021-47510](https://insights.sbomify.com/CVE-2021-47510/): btrfs: fix re-dirty process of tree-log nodes (medium 5.5)
- [CVE-2021-47509](https://insights.sbomify.com/CVE-2021-47509/): ALSA: pcm: oss: Limit the period size to 16MB (medium 5.5)
- [CVE-2021-47508](https://insights.sbomify.com/CVE-2021-47508/): btrfs: free exchange changeset on failures (medium 5.5)
- [CVE-2021-47507](https://insights.sbomify.com/CVE-2021-47507/): nfsd: Fix nsfd startup race (again) (medium 4.7)
- [CVE-2021-47506](https://insights.sbomify.com/CVE-2021-47506/): nfsd: fix use-after-free due to delegation race (critical 9.8)
- [CVE-2021-47505](https://insights.sbomify.com/CVE-2021-47505/): aio: fix use-after-free due to missing POLLFREE handling (high 7.8)
- [CVE-2021-47503](https://insights.sbomify.com/CVE-2021-47503/): scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() (medium 6.2)
- [CVE-2021-47502](https://insights.sbomify.com/CVE-2021-47502/): ASoC: codecs: wcd934x: handle channel mappping list correctly (high 7.8)
- [CVE-2021-47501](https://insights.sbomify.com/CVE-2021-47501/): i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (medium 5.5)
- [CVE-2021-47500](https://insights.sbomify.com/CVE-2021-47500/): iio: mma8452: Fix trigger reference couting (high 7.8)
- [CVE-2021-47499](https://insights.sbomify.com/CVE-2021-47499/): iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove (medium 5.5)
- [CVE-2021-47498](https://insights.sbomify.com/CVE-2021-47498/): dm rq: don't queue request to blk-mq during DM suspend (medium 5.5)
- [CVE-2021-47497](https://insights.sbomify.com/CVE-2021-47497/): nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (high 7.8)
- [CVE-2021-47496](https://insights.sbomify.com/CVE-2021-47496/): net/tls: Fix flipped sign in tls_err_abort() calls (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/46/