# Vulnerabilities published in 2021


- [CVE-2021-47495](https://insights.sbomify.com/CVE-2021-47495/): usbnet: sanity check for maxpacket (medium 5.5)
- [CVE-2021-47494](https://insights.sbomify.com/CVE-2021-47494/): cfg80211: fix management registrations locking (high 7.8)
- [CVE-2021-47493](https://insights.sbomify.com/CVE-2021-47493/): ocfs2: fix race between searching chunks and release journal_head from buffer_head (high 7.8)
- [CVE-2021-47492](https://insights.sbomify.com/CVE-2021-47492/): mm, thp: bail out early in collapse_file for writeback page (high 7.8)
- [CVE-2021-47491](https://insights.sbomify.com/CVE-2021-47491/): mm: khugepaged: skip huge page collapse for special files (medium 5.5)
- [CVE-2021-47490](https://insights.sbomify.com/CVE-2021-47490/): drm/ttm: fix memleak in ttm_transfered_destroy (medium 5.5)
- [CVE-2021-47489](https://insights.sbomify.com/CVE-2021-47489/): drm/amdgpu: Fix even more out of bound writes from debugfs (high 7.8)
- [CVE-2021-47486](https://insights.sbomify.com/CVE-2021-47486/): riscv, bpf: Fix potential NULL dereference (high 7.5)
- [CVE-2021-47485](https://insights.sbomify.com/CVE-2021-47485/): IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (high 7.8)
- [CVE-2021-47484](https://insights.sbomify.com/CVE-2021-47484/): octeontx2-af: Fix possible null pointer dereference. (medium 5.5)
- [CVE-2021-47483](https://insights.sbomify.com/CVE-2021-47483/): regmap: Fix possible double-free in regcache_rbtree_exit() (high 7.8)
- [CVE-2021-47482](https://insights.sbomify.com/CVE-2021-47482/): net: batman-adv: fix error handling (medium 5.3)
- [CVE-2021-47481](https://insights.sbomify.com/CVE-2021-47481/): RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR (medium 5.5)
- [CVE-2021-47480](https://insights.sbomify.com/CVE-2021-47480/): scsi: core: Put LLD module refcnt after SCSI device is released (medium 5.5)
- [CVE-2021-47479](https://insights.sbomify.com/CVE-2021-47479/): staging: rtl8712: fix use-after-free in rtl8712_dl_fw (high 7.0)
- [CVE-2021-47478](https://insights.sbomify.com/CVE-2021-47478/): isofs: Fix out of bound access for corrupted isofs image (critical 9.1)
- [CVE-2021-47477](https://insights.sbomify.com/CVE-2021-47477/): comedi: dt9812: fix DMA buffers on stack (medium 5.3)
- [CVE-2021-47476](https://insights.sbomify.com/CVE-2021-47476/): comedi: ni_usb6501: fix NULL-deref in command paths (medium 4.6)
- [CVE-2021-47475](https://insights.sbomify.com/CVE-2021-47475/): comedi: vmk80xx: fix transfer-buffer overflows (high 7.8)
- [CVE-2021-47474](https://insights.sbomify.com/CVE-2021-47474/): comedi: vmk80xx: fix bulk-buffer overflow (high 7.8)
- [CVE-2021-47473](https://insights.sbomify.com/CVE-2021-47473/): scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() (medium 5.5)
- [CVE-2021-47471](https://insights.sbomify.com/CVE-2021-47471/): drm: mxsfb: Fix NULL pointer dereference crash on unload (medium 5.5)
- [CVE-2021-47470](https://insights.sbomify.com/CVE-2021-47470/): mm, slub: fix potential use-after-free in slab_debugfs_fops (high 7.8)
- [CVE-2021-47468](https://insights.sbomify.com/CVE-2021-47468/): isdn: mISDN: Fix sleeping function called from invalid context (medium 5.5)
- [CVE-2021-47467](https://insights.sbomify.com/CVE-2021-47467/): kunit: fix reference count leak in kfree_at_end (medium 5.3)
- [CVE-2021-47466](https://insights.sbomify.com/CVE-2021-47466/): mm, slub: fix potential memoryleak in kmem_cache_open() (medium 5.5)
- [CVE-2021-47465](https://insights.sbomify.com/CVE-2021-47465/): KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (high 7.1)
- [CVE-2021-47464](https://insights.sbomify.com/CVE-2021-47464/): audit: fix possible null-pointer dereference in audit_filter_rules (high 7.4)
- [CVE-2021-47463](https://insights.sbomify.com/CVE-2021-47463/): mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem() (medium 5.5)
- [CVE-2021-47462](https://insights.sbomify.com/CVE-2021-47462/): mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() (medium 5.5)
- [CVE-2021-47461](https://insights.sbomify.com/CVE-2021-47461/): userfaultfd: fix a race between writeprotect and exit_mmap() (high 7.8)
- [CVE-2021-47460](https://insights.sbomify.com/CVE-2021-47460/): ocfs2: fix data corruption after conversion from inline format (medium 5.5)
- [CVE-2021-47459](https://insights.sbomify.com/CVE-2021-47459/): can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (high 7.8)
- [CVE-2021-47458](https://insights.sbomify.com/CVE-2021-47458/): ocfs2: mount fails with buffer overflow in strlen (high 7.1)
- [CVE-2021-47457](https://insights.sbomify.com/CVE-2021-47457/): can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() (medium 5.5)
- [CVE-2021-47456](https://insights.sbomify.com/CVE-2021-47456/): can: peak_pci: peak_pci_remove(): fix UAF (high 8.4)
- [CVE-2021-47455](https://insights.sbomify.com/CVE-2021-47455/): ptp: Fix possible memory leak in ptp_clock_register() (medium 5.5)
- [CVE-2021-47454](https://insights.sbomify.com/CVE-2021-47454/): powerpc/smp: do not decrement idle task preempt count in CPU offline (medium 5.5)
- [CVE-2021-47453](https://insights.sbomify.com/CVE-2021-47453/): ice: Avoid crash from unnecessary IDA free (medium 5.5)
- [CVE-2021-47452](https://insights.sbomify.com/CVE-2021-47452/): netfilter: nf_tables: skip netdev events generated on netns removal (medium 5.5)
- [CVE-2021-47451](https://insights.sbomify.com/CVE-2021-47451/): netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value (high 7.8)
- [CVE-2021-47450](https://insights.sbomify.com/CVE-2021-47450/): KVM: arm64: Fix host stage-2 PGD refcount (high 8.8)
- [CVE-2021-47449](https://insights.sbomify.com/CVE-2021-47449/): ice: fix locking for Tx timestamp tracking flush (high 7.1)
- [CVE-2021-47448](https://insights.sbomify.com/CVE-2021-47448/): mptcp: fix possible stall on recvmsg() (high 7.5)
- [CVE-2021-47447](https://insights.sbomify.com/CVE-2021-47447/): drm/msm/a3xx: fix error handling in a3xx_gpu_init() (high 7.8)
- [CVE-2021-47446](https://insights.sbomify.com/CVE-2021-47446/): drm/msm/a4xx: fix error handling in a4xx_gpu_init() (high 7.8)
- [CVE-2021-47445](https://insights.sbomify.com/CVE-2021-47445/): drm/msm: Fix null pointer dereference on pointer edp (medium 5.5)
- [CVE-2021-47444](https://insights.sbomify.com/CVE-2021-47444/): drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read (medium 5.5)
- [CVE-2021-47443](https://insights.sbomify.com/CVE-2021-47443/): NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (medium 5.5)
- [CVE-2021-47442](https://insights.sbomify.com/CVE-2021-47442/): NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (medium 5.5)
- [CVE-2021-47441](https://insights.sbomify.com/CVE-2021-47441/): mlxsw: thermal: Fix out-of-bounds memory accesses (high 7.3)
- [CVE-2021-47440](https://insights.sbomify.com/CVE-2021-47440/): net: encx24j600: check error in devm_regmap_init_encx24j600 (low 2.3)
- [CVE-2021-47439](https://insights.sbomify.com/CVE-2021-47439/): net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work (medium 5.5)
- [CVE-2021-47438](https://insights.sbomify.com/CVE-2021-47438/): net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (high 7.1)
- [CVE-2021-47437](https://insights.sbomify.com/CVE-2021-47437/): iio: adis16475: fix deadlock on frequency set (medium 5.5)
- [CVE-2021-47436](https://insights.sbomify.com/CVE-2021-47436/): usb: musb: dsps: Fix the probe error path (medium 5.5)
- [CVE-2021-47435](https://insights.sbomify.com/CVE-2021-47435/): dm: fix mempool NULL pointer race when completing IO (medium 4.7)
- [CVE-2021-47434](https://insights.sbomify.com/CVE-2021-47434/): xhci: Fix command ring pointer corruption while aborting a command (medium 5.5)
- [CVE-2021-47433](https://insights.sbomify.com/CVE-2021-47433/): btrfs: fix abort logic in btrfs_replace_file_extents (high 8.1)
- [CVE-2021-47432](https://insights.sbomify.com/CVE-2021-47432/): lib/generic-radix-tree.c: Don't overflow in peek() (medium 5.5)
- [CVE-2021-47431](https://insights.sbomify.com/CVE-2021-47431/): drm/amdgpu: fix gart.bo pin_count leak (medium 5.5)
- [CVE-2021-47430](https://insights.sbomify.com/CVE-2021-47430/): x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n (low 3.3)
- [CVE-2021-47429](https://insights.sbomify.com/CVE-2021-47429/): powerpc/64s: Fix unrecoverable MCE calling async handler from NMI (medium 5.5)
- [CVE-2021-47428](https://insights.sbomify.com/CVE-2021-47428/): powerpc/64s: fix program check interrupt emergency stack path (medium 5.5)
- [CVE-2021-47427](https://insights.sbomify.com/CVE-2021-47427/): scsi: iscsi: Fix iscsi_task use after free (critical 9.8)
- [CVE-2021-47426](https://insights.sbomify.com/CVE-2021-47426/): bpf, s390: Fix potential memory leak about jit_data (medium 5.5)
- [CVE-2021-47425](https://insights.sbomify.com/CVE-2021-47425/): i2c: acpi: fix resource leak in reconfiguration device addition (medium 5.5)
- [CVE-2021-47424](https://insights.sbomify.com/CVE-2021-47424/): i40e: Fix freeing of uninitialized misc IRQ vector (medium 5.5)
- [CVE-2021-47423](https://insights.sbomify.com/CVE-2021-47423/): drm/nouveau/debugfs: fix file release memory leak (medium 5.5)
- [CVE-2021-47422](https://insights.sbomify.com/CVE-2021-47422/): drm/nouveau/kms/nv50-: fix file release memory leak (medium 5.5)
- [CVE-2021-47421](https://insights.sbomify.com/CVE-2021-47421/): drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume (high 7.8)
- [CVE-2021-47420](https://insights.sbomify.com/CVE-2021-47420/): drm/amdkfd: fix a potential ttm->sg memory leak (medium 5.5)
- [CVE-2021-47419](https://insights.sbomify.com/CVE-2021-47419/): net/sched: sch_taprio: properly cancel timer from taprio_destroy() (high 7.8)
- [CVE-2021-47418](https://insights.sbomify.com/CVE-2021-47418/): net_sched: fix NULL deref in fifo_set_limit() (medium 5.5)
- [CVE-2021-47417](https://insights.sbomify.com/CVE-2021-47417/): libbpf: Fix memory leak in strset (medium 5.5)
- [CVE-2021-47416](https://insights.sbomify.com/CVE-2021-47416/): phy: mdio: fix memory leak (medium 5.5)
- [CVE-2021-47415](https://insights.sbomify.com/CVE-2021-47415/): iwlwifi: mvm: Fix possible NULL dereference (medium 5.5)
- [CVE-2021-47414](https://insights.sbomify.com/CVE-2021-47414/): riscv: Flush current cpu icache before other cpus (medium 5.5)
- [CVE-2021-47413](https://insights.sbomify.com/CVE-2021-47413/): usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle (medium 5.5)
- [CVE-2021-47412](https://insights.sbomify.com/CVE-2021-47412/): block: don't call rq_qos_ops->done_bio if the bio isn't tracked (high 7.8)
- [CVE-2021-47410](https://insights.sbomify.com/CVE-2021-47410/): drm/amdkfd: fix svm_migrate_fini warning (medium 5.5)
- [CVE-2021-47409](https://insights.sbomify.com/CVE-2021-47409/): usb: dwc2: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2021-47408](https://insights.sbomify.com/CVE-2021-47408/): netfilter: conntrack: serialize hash resizes and cleanups (medium 4.7)
- [CVE-2021-47407](https://insights.sbomify.com/CVE-2021-47407/): KVM: x86: Handle SRCU initialization failure during page track init (medium 5.5)
- [CVE-2021-47406](https://insights.sbomify.com/CVE-2021-47406/): ext4: add error checking to ext4_ext_replay_set_iblocks() (medium 5.5)
- [CVE-2021-47405](https://insights.sbomify.com/CVE-2021-47405/): HID: usbhid: free raw_report buffers in usbhid_stop (medium 5.5)
- [CVE-2021-47404](https://insights.sbomify.com/CVE-2021-47404/): HID: betop: fix slab-out-of-bounds Write in betop_probe (high 7.8)
- [CVE-2021-47403](https://insights.sbomify.com/CVE-2021-47403/): ipack: ipoctal: fix module reference leak (high 7.1)
- [CVE-2021-47402](https://insights.sbomify.com/CVE-2021-47402/): net: sched: flower: protect fl_walk() with rcu (high 7.8)
- [CVE-2021-47401](https://insights.sbomify.com/CVE-2021-47401/): ipack: ipoctal: fix stack information leak (high 7.1)
- [CVE-2021-47400](https://insights.sbomify.com/CVE-2021-47400/): net: hns3: do not allow call hns3_nic_net_open repeatedly (high 7.8)
- [CVE-2021-47399](https://insights.sbomify.com/CVE-2021-47399/): ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup (medium 5.5)
- [CVE-2021-47398](https://insights.sbomify.com/CVE-2021-47398/): RDMA/hfi1: Fix kernel pointer leak (medium 5.5)
- [CVE-2021-47397](https://insights.sbomify.com/CVE-2021-47397/): sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (high 7.5)
- [CVE-2021-47396](https://insights.sbomify.com/CVE-2021-47396/): mac80211-hwsim: fix late beacon hrtimer handling (medium 5.5)
- [CVE-2021-47395](https://insights.sbomify.com/CVE-2021-47395/): mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (medium 5.5)
- [CVE-2021-47394](https://insights.sbomify.com/CVE-2021-47394/): netfilter: nf_tables: unlink table before deleting it (high 7.8)
- [CVE-2021-47393](https://insights.sbomify.com/CVE-2021-47393/): hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (high 7.1)
- [CVE-2021-47392](https://insights.sbomify.com/CVE-2021-47392/): RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure (medium 5.5)
- [CVE-2021-47391](https://insights.sbomify.com/CVE-2021-47391/): RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/47/