Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 49 of 273.
- CVE-2021-47288 media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
- CVE-2021-47287 driver core: auxiliary bus: Fix memory leak when driver_register() fail
- CVE-2021-47286 bus: mhi: core: Validate channel ID when processing command completions
- CVE-2021-47284 isdn: mISDN: netjet: Fix crash in nj_probe:
- CVE-2021-47283 net:sfc: fix non-freed irq in legacy irq mode
- CVE-2021-47282 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves
- CVE-2021-47281 ALSA: seq: Fix race of snd_seq_timer_open()
- CVE-2021-47280 drm: Fix use-after-free read in drm_getunique()
- CVE-2021-47279 usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource()
- CVE-2021-47278 bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove()
- CVE-2021-47277 kvm: avoid speculation-based attacks from out-of-range memslot accesses
- CVE-2021-47276 ftrace: Do not blindly read the ip address in ftrace_bug()
- CVE-2021-47275 bcache: avoid oversized read request in cache missing code path
- CVE-2021-47274 tracing: Correct the length check which causes memory corruption
- CVE-2021-47273 usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled
- CVE-2021-47272 usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL
- CVE-2021-47271 usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler
- CVE-2021-47270 usb: fix various gadgets null ptr deref on 10gbps cabling.
- CVE-2021-47269 usb: dwc3: ep0: fix NULL pointer exception
- CVE-2021-47268 usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port
- CVE-2021-47267 usb: fix various gadget panics on 10gbps cabling
- CVE-2021-47266 RDMA/ipoib: Fix warning caused by destroying non-initial netns
- CVE-2021-47265 RDMA: Verify port when creating flow rule
- CVE-2021-47264 ASoC: core: Fix Null-point-dereference in fmt_single_name()
- CVE-2021-47263 gpio: wcd934x: Fix shift-out-of-bounds error
- CVE-2021-47262 KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message
- CVE-2021-47261 IB/mlx5: Fix initializing CQ fragments buffer
- CVE-2021-47260 NFS: Fix a potential NULL dereference in nfs_get_client()
- CVE-2021-47259 NFS: Fix use-after-free in nfs4_init_client()
- CVE-2021-47258 scsi: core: Fix error handling of scsi_host_alloc()
- CVE-2021-47257 net: ieee802154: fix null deref in parse dev addr
- CVE-2021-47256 mm/memory-failure: make sure wait for page writeback in memory_failure
- CVE-2021-47255 kvm: LAPIC: Restore guard to prevent illegal APIC register access
- CVE-2021-47254 gfs2: Fix use-after-free in gfs2_glock_shrink_scan
- CVE-2021-47253 drm/amd/display: Fix potential memory leak in DMUB hw_init
- CVE-2021-47252 batman-adv: Avoid WARN_ON timing related checks
- CVE-2021-47251 mac80211: fix skb length check in ieee80211_scan_rx()
- CVE-2021-47250 net: ipv4: fix memory leak in netlbl_cipsov4_add_std
- CVE-2021-47249 net: rds: fix memory leak in rds_recvmsg
- CVE-2021-47248 udp: fix race between close() and udp_abort()
- CVE-2021-47247 net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- CVE-2021-47246 net/mlx5e: Fix page reclaim for dead peer hairpin
- CVE-2021-47245 netfilter: synproxy: Fix out of bounds when parsing TCP options
- CVE-2021-47244 mptcp: Fix out of bounds when parsing TCP options
- CVE-2021-47243 sch_cake: Fix out of bounds when parsing TCP options and header
- CVE-2021-47242 mptcp: fix soft lookup in subflow_error_report()
- CVE-2021-47241 ethtool: strset: fix message length calculation
- CVE-2021-47240 net: qrtr: fix OOB Read in qrtr_endpoint_post
- CVE-2021-47239 net: usb: fix possible use-after-free in smsc75xx_bind
- CVE-2021-47238 net: ipv4: fix memory leak in ip_mc_add1_src
- CVE-2021-47237 net: hamradio: fix memory leak in mkiss_close
- CVE-2021-47236 net: cdc_eem: fix tx fixup skb leak
- CVE-2021-47235 net: ethernet: fix potential use-after-free in ec_bhf_remove
- CVE-2021-47234 phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
- CVE-2021-47233 regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL
- CVE-2021-47232 can: j1939: fix Use-after-Free, hold skb ref while in use
- CVE-2021-47231 can: mcba_usb: fix memory leak in mcba_usb
- CVE-2021-47230 KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
- CVE-2021-47229 PCI: aardvark: Fix kernel panic during PIO transfer
- CVE-2021-47228 x86/ioremap: Map EFI-reserved memory as encrypted for SEV
- CVE-2021-47227 x86/fpu: Prevent state corruption in __fpu__restore_sig()
- CVE-2021-47226 x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- CVE-2021-47225 mac80211: fix deadlock in AP/VLAN handling
- CVE-2021-47224 net: ll_temac: Make sure to free skb when it is completely used
- CVE-2021-47223 net: bridge: fix vlan tunnel dst null pointer dereference
- CVE-2021-47222 net: bridge: fix vlan tunnel dst refcnt when egressing
- CVE-2021-47221 mm/slub: actually fix freelist pointer vs redzoning
- CVE-2021-47219 scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
- CVE-2021-47218 selinux: fix NULL-pointer dereference when hashtab allocation fails
- CVE-2021-47217 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
- CVE-2021-47216 scsi: advansys: Fix kernel pointer leak
- CVE-2021-47215 net/mlx5e: kTLS, Fix crash in RX resync flow
- CVE-2021-47214 hugetlb, userfaultfd: fix reservation restore on userfaultfd error
- CVE-2021-47212 net/mlx5: Update error handler for UCTX and UMEM
- CVE-2021-47211 ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- CVE-2021-47210 usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- CVE-2021-47209 sched/fair: Prevent dead task groups from regaining cfs_rq's
- CVE-2021-47208 Denial of service in mojolicious:mojolicious
- CVE-2021-47207 ALSA: gus: fix null pointer dereference on pointer block
- CVE-2021-47206 usb: host: ohci-tmio: check return value after calling platform_get_resource()
- CVE-2021-47205 clk: sunxi-ng: Unregister clocks/resets when unbinding
- CVE-2021-47204 net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
- CVE-2021-47203 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- CVE-2021-47202 thermal: Fix NULL pointer dereferences in of_thermal_ functions
- CVE-2021-47201 iavf: free q_vectors before queues in iavf_disable_vf
- CVE-2021-47200 drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- CVE-2021-47199 net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
- CVE-2021-47198 scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
- CVE-2021-47197 net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
- CVE-2021-47196 RDMA/core: Set send and receive CQ before forwarding to the driver
- CVE-2021-47195 spi: fix use-after-free of the add_lock mutex
- CVE-2021-47194 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- CVE-2021-47193 scsi: pm80xx: Fix memory leak during rmmod
- CVE-2021-47192 scsi: core: sysfs: Fix hang when device state is set via sysfs
- CVE-2021-47191 scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
- CVE-2021-47190 perf bpf: Avoid memory leak from perf_env__insert_btf()
- CVE-2021-47189 btrfs: fix memory ordering between normal and ordered work functions
- CVE-2021-47188 scsi: ufs: core: Improve SCSI abort handling
- CVE-2021-47187 arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
- CVE-2021-47186 tipc: check for null after calling kmemdup