# Vulnerabilities published in 2021


- [CVE-2021-47390](https://insights.sbomify.com/CVE-2021-47390/): KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() (high 8.8)
- [CVE-2021-47389](https://insights.sbomify.com/CVE-2021-47389/): KVM: SVM: fix missing sev_decommission in sev_receive_start (medium 5.1)
- [CVE-2021-47388](https://insights.sbomify.com/CVE-2021-47388/): mac80211: fix use-after-free in CCMP/GCMP RX (high 8.8)
- [CVE-2021-47387](https://insights.sbomify.com/CVE-2021-47387/): cpufreq: schedutil: Use kobject release() method to free sugov_tunables (medium 5.5)
- [CVE-2021-47386](https://insights.sbomify.com/CVE-2021-47386/): hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (high 7.8)
- [CVE-2021-47385](https://insights.sbomify.com/CVE-2021-47385/): hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (medium 5.5)
- [CVE-2021-47384](https://insights.sbomify.com/CVE-2021-47384/): hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (medium 5.3)
- [CVE-2021-47383](https://insights.sbomify.com/CVE-2021-47383/): tty: Fix out-of-bound vmalloc access in imageblit (high 7.8)
- [CVE-2021-47382](https://insights.sbomify.com/CVE-2021-47382/): s390/qeth: fix deadlock during failing recovery (medium 4.7)
- [CVE-2021-47381](https://insights.sbomify.com/CVE-2021-47381/): ASoC: SOF: Fix DSP oops stack dump output contents (medium 5.5)
- [CVE-2021-47380](https://insights.sbomify.com/CVE-2021-47380/): HID: amd_sfh: Fix potential NULL pointer dereference (high 7.8)
- [CVE-2021-47379](https://insights.sbomify.com/CVE-2021-47379/): blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (high 7.8)
- [CVE-2021-47378](https://insights.sbomify.com/CVE-2021-47378/): nvme-rdma: destroy cm id before destroy qp to avoid use after free (critical 9.8)
- [CVE-2021-47376](https://insights.sbomify.com/CVE-2021-47376/): bpf: Add oversize check before call kvcalloc() (medium 5.5)
- [CVE-2021-47375](https://insights.sbomify.com/CVE-2021-47375/): blktrace: Fix uaf in blk_trace access after removing by sysfs (medium 6.2)
- [CVE-2021-47374](https://insights.sbomify.com/CVE-2021-47374/): dma-debug: prevent an error message from causing runtime problems (high 7.5)
- [CVE-2021-47373](https://insights.sbomify.com/CVE-2021-47373/): irqchip/gic-v3-its: Fix potential VPE leak on error (medium 5.5)
- [CVE-2021-47372](https://insights.sbomify.com/CVE-2021-47372/): net: macb: fix use after free on rmmod (high 7.8)
- [CVE-2021-47371](https://insights.sbomify.com/CVE-2021-47371/): nexthop: Fix memory leaks in nexthop notification chain listeners (high 7.1)
- [CVE-2021-47370](https://insights.sbomify.com/CVE-2021-47370/): mptcp: ensure tx skbs always have the MPTCP ext (medium 5.5)
- [CVE-2021-47369](https://insights.sbomify.com/CVE-2021-47369/): s390/qeth: fix NULL deref in qeth_clear_working_pool_list() (medium 5.5)
- [CVE-2021-47368](https://insights.sbomify.com/CVE-2021-47368/): enetc: Fix illegal access when reading affinity_hint (high 7.1)
- [CVE-2021-47367](https://insights.sbomify.com/CVE-2021-47367/): virtio-net: fix pages leaking when building skb in big mode (medium 5.5)
- [CVE-2021-47366](https://insights.sbomify.com/CVE-2021-47366/): afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server (high 7.1)
- [CVE-2021-47365](https://insights.sbomify.com/CVE-2021-47365/): afs: Fix page leak (medium 5.5)
- [CVE-2021-47364](https://insights.sbomify.com/CVE-2021-47364/): comedi: Fix memory leak in compat_insnlist() (medium 5.5)
- [CVE-2021-47363](https://insights.sbomify.com/CVE-2021-47363/): nexthop: Fix division by zero while replacing a resilient group (medium 5.5)
- [CVE-2021-47362](https://insights.sbomify.com/CVE-2021-47362/): drm/amd/pm: Update intermediate power state for SI (medium 5.5)
- [CVE-2021-47361](https://insights.sbomify.com/CVE-2021-47361/): mcb: fix error handling in mcb_alloc_bus() (high 7.8)
- [CVE-2021-47360](https://insights.sbomify.com/CVE-2021-47360/): binder: make sure fd closes complete (medium 5.5)
- [CVE-2021-47359](https://insights.sbomify.com/CVE-2021-47359/): cifs: Fix soft lockup during fsstress (medium 5.5)
- [CVE-2021-47358](https://insights.sbomify.com/CVE-2021-47358/): staging: greybus: uart: fix tty use after free (high 7.8)
- [CVE-2021-47357](https://insights.sbomify.com/CVE-2021-47357/): atm: iphase: fix possible use-after-free in ia_module_exit() (high 7.8)
- [CVE-2021-47356](https://insights.sbomify.com/CVE-2021-47356/): mISDN: fix possible use-after-free in HFC_cleanup() (high 7.7)
- [CVE-2021-47355](https://insights.sbomify.com/CVE-2021-47355/): atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (high 7.8)
- [CVE-2021-47354](https://insights.sbomify.com/CVE-2021-47354/): drm/sched: Avoid data corruptions (high 7.1)
- [CVE-2021-47353](https://insights.sbomify.com/CVE-2021-47353/): udf: Fix NULL pointer dereference in udf_symlink function (medium 5.5)
- [CVE-2021-47352](https://insights.sbomify.com/CVE-2021-47352/): virtio-net: Add validation for used length (high 8.4)
- [CVE-2021-47351](https://insights.sbomify.com/CVE-2021-47351/): ubifs: Fix races between xattr_{set|get} and listxattr operations (high 7.8)
- [CVE-2021-47350](https://insights.sbomify.com/CVE-2021-47350/): powerpc/mm: Fix lockup on kernel exec fault (medium 5.5)
- [CVE-2021-47349](https://insights.sbomify.com/CVE-2021-47349/): mwifiex: bring down link before deleting interface (medium 5.5)
- [CVE-2021-47348](https://insights.sbomify.com/CVE-2021-47348/): drm/amd/display: Avoid HDCP over-read and corruption (critical 9.1)
- [CVE-2021-47347](https://insights.sbomify.com/CVE-2021-47347/): wl1251: Fix possible buffer overflow in wl1251_cmd_scan (high 7.8)
- [CVE-2021-47346](https://insights.sbomify.com/CVE-2021-47346/): coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() (high 7.1)
- [CVE-2021-47345](https://insights.sbomify.com/CVE-2021-47345/): RDMA/cma: Fix rdma_resolve_route() memory leak (medium 5.5)
- [CVE-2021-47344](https://insights.sbomify.com/CVE-2021-47344/): media: zr364xx: fix memory leak in zr364xx_start_readpipe (medium 5.5)
- [CVE-2021-47343](https://insights.sbomify.com/CVE-2021-47343/): dm btree remove: assign new_root only when removal succeeds (high 7.8)
- [CVE-2021-47342](https://insights.sbomify.com/CVE-2021-47342/): ext4: fix possible UAF when remounting r/o a mmp-protected file system (high 7.8)
- [CVE-2021-47341](https://insights.sbomify.com/CVE-2021-47341/): KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (high 7.8)
- [CVE-2021-47340](https://insights.sbomify.com/CVE-2021-47340/): jfs: fix GPF in diFree (medium 5.5)
- [CVE-2021-47339](https://insights.sbomify.com/CVE-2021-47339/): media: v4l2-core: explicitly clear ioctl input data (medium 5.5)
- [CVE-2021-47338](https://insights.sbomify.com/CVE-2021-47338/): fbmem: Do not delete the mode that is still in use (high 7.8)
- [CVE-2021-47337](https://insights.sbomify.com/CVE-2021-47337/): scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (medium 5.5)
- [CVE-2021-47336](https://insights.sbomify.com/CVE-2021-47336/): smackfs: restrict bytes count in smk_set_cipso() (high 7.8)
- [CVE-2021-47335](https://insights.sbomify.com/CVE-2021-47335/): f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances (medium 5.5)
- [CVE-2021-47334](https://insights.sbomify.com/CVE-2021-47334/): misc/libmasm/module: Fix two use after free in ibmasm_init_one (high 7.8)
- [CVE-2021-47333](https://insights.sbomify.com/CVE-2021-47333/): misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (medium 5.5)
- [CVE-2021-47332](https://insights.sbomify.com/CVE-2021-47332/): ALSA: usx2y: Don't call free_pages_exact() with NULL address (medium 5.5)
- [CVE-2021-47331](https://insights.sbomify.com/CVE-2021-47331/): usb: common: usb-conn-gpio: fix NULL pointer dereference of charger (medium 5.5)
- [CVE-2021-47330](https://insights.sbomify.com/CVE-2021-47330/): tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (medium 5.5)
- [CVE-2021-47329](https://insights.sbomify.com/CVE-2021-47329/): scsi: megaraid_sas: Fix resource leak in case of probe failure (medium 6.2)
- [CVE-2021-47328](https://insights.sbomify.com/CVE-2021-47328/): scsi: iscsi: Fix conn use after free during resets (critical 9.8)
- [CVE-2021-47327](https://insights.sbomify.com/CVE-2021-47327/): iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (high 7.1)
- [CVE-2021-47325](https://insights.sbomify.com/CVE-2021-47325/): iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (medium 5.5)
- [CVE-2021-47324](https://insights.sbomify.com/CVE-2021-47324/): watchdog: Fix possible use-after-free in wdt_startup() (high 8.8)
- [CVE-2021-47323](https://insights.sbomify.com/CVE-2021-47323/): watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (high 8.8)
- [CVE-2021-47322](https://insights.sbomify.com/CVE-2021-47322/): NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT (high 7.8)
- [CVE-2021-47321](https://insights.sbomify.com/CVE-2021-47321/): watchdog: Fix possible use-after-free by calling del_timer_sync() (high 7.8)
- [CVE-2021-47320](https://insights.sbomify.com/CVE-2021-47320/): nfs: fix acl memory leak of posix_acl_create() (medium 5.5)
- [CVE-2021-47319](https://insights.sbomify.com/CVE-2021-47319/): virtio-blk: Fix memory leak among suspend/resume procedure (medium 5.5)
- [CVE-2021-47318](https://insights.sbomify.com/CVE-2021-47318/): arch_topology: Avoid use-after-free for scale_freq_data (high 7.8)
- [CVE-2021-47317](https://insights.sbomify.com/CVE-2021-47317/): powerpc/bpf: Fix detecting BPF atomic instructions (high 7.8)
- [CVE-2021-47316](https://insights.sbomify.com/CVE-2021-47316/): nfsd: fix NULL dereference in nfs3svc_encode_getaclres (high 7.5)
- [CVE-2021-47315](https://insights.sbomify.com/CVE-2021-47315/): memory: fsl_ifc: fix leak of IO mapping on probe failure (medium 5.5)
- [CVE-2021-47314](https://insights.sbomify.com/CVE-2021-47314/): memory: fsl_ifc: fix leak of private memory on probe failure (medium 5.5)
- [CVE-2021-47313](https://insights.sbomify.com/CVE-2021-47313/): cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init (high 8.4)
- [CVE-2021-47312](https://insights.sbomify.com/CVE-2021-47312/): netfilter: nf_tables: Fix dereference of null pointer flow (medium 5.5)
- [CVE-2021-47311](https://insights.sbomify.com/CVE-2021-47311/): net: qcom/emac: fix UAF in emac_remove (high 7.8)
- [CVE-2021-47310](https://insights.sbomify.com/CVE-2021-47310/): net: ti: fix UAF in tlan_remove_one (high 7.8)
- [CVE-2021-47309](https://insights.sbomify.com/CVE-2021-47309/): net: validate lwtstate->data before returning from skb_tunnel_info() (high 7.8)
- [CVE-2021-47308](https://insights.sbomify.com/CVE-2021-47308/): scsi: libfc: Fix array index out of bound exception (high 8.8)
- [CVE-2021-47307](https://insights.sbomify.com/CVE-2021-47307/): cifs: prevent NULL deref in cifs_compose_mount_options() (high 7.5)
- [CVE-2021-47306](https://insights.sbomify.com/CVE-2021-47306/): net: fddi: fix UAF in fza_probe (high 7.8)
- [CVE-2021-47305](https://insights.sbomify.com/CVE-2021-47305/): dma-buf/sync_file: Don't leak fences on merge failure (medium 5.5)
- [CVE-2021-47304](https://insights.sbomify.com/CVE-2021-47304/): tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (medium 5.5)
- [CVE-2021-47303](https://insights.sbomify.com/CVE-2021-47303/): bpf: Track subprog poke descriptors correctly and fix use-after-free (high 7.8)
- [CVE-2021-47302](https://insights.sbomify.com/CVE-2021-47302/): igc: Fix use-after-free error during reset (high 7.8)
- [CVE-2021-47301](https://insights.sbomify.com/CVE-2021-47301/): igb: Fix use-after-free error during reset (high 7.8)
- [CVE-2021-47300](https://insights.sbomify.com/CVE-2021-47300/): bpf: Fix tail_call_reachable rejection for interpreter when jit failed (high 7.8)
- [CVE-2021-47299](https://insights.sbomify.com/CVE-2021-47299/): xdp, net: Fix use-after-free in bpf_xdp_link_release (medium 5.5)
- [CVE-2021-47298](https://insights.sbomify.com/CVE-2021-47298/): bpf, sockmap: Fix potential memory leak on unlikely error case (medium 5.5)
- [CVE-2021-47297](https://insights.sbomify.com/CVE-2021-47297/): net: fix uninit-value in caif_seqpkt_sendmsg (medium 5.5)
- [CVE-2021-47296](https://insights.sbomify.com/CVE-2021-47296/): KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (high 7.8)
- [CVE-2021-47295](https://insights.sbomify.com/CVE-2021-47295/): net: sched: fix memory leak in tcindex_partial_destroy_work (high 7.5)
- [CVE-2021-47294](https://insights.sbomify.com/CVE-2021-47294/): netrom: Decrease sock refcount when sock timers expire (medium 5.5)
- [CVE-2021-47293](https://insights.sbomify.com/CVE-2021-47293/): net/sched: act_skbmod: Skip non-Ethernet packets (high 7.8)
- [CVE-2021-47292](https://insights.sbomify.com/CVE-2021-47292/): io_uring: fix memleak in io_init_wq_offload() (medium 5.5)
- [CVE-2021-47291](https://insights.sbomify.com/CVE-2021-47291/): ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (high 7.8)
- [CVE-2021-47290](https://insights.sbomify.com/CVE-2021-47290/): scsi: target: Fix NULL dereference on XCOPY completion (high 7.5)
- [CVE-2021-47289](https://insights.sbomify.com/CVE-2021-47289/): ACPI: fix NULL pointer dereference (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/48/