# Vulnerabilities published in 2021


- [CVE-2021-47288](https://insights.sbomify.com/CVE-2021-47288/): media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (high 7.1)
- [CVE-2021-47287](https://insights.sbomify.com/CVE-2021-47287/): driver core: auxiliary bus: Fix memory leak when driver_register() fail (medium 5.5)
- [CVE-2021-47286](https://insights.sbomify.com/CVE-2021-47286/): bus: mhi: core: Validate channel ID when processing command completions (high 7.8)
- [CVE-2021-47284](https://insights.sbomify.com/CVE-2021-47284/): isdn: mISDN: netjet: Fix crash in nj_probe: (medium 4.7)
- [CVE-2021-47283](https://insights.sbomify.com/CVE-2021-47283/): net:sfc: fix non-freed irq in legacy irq mode (medium 5.5)
- [CVE-2021-47282](https://insights.sbomify.com/CVE-2021-47282/): spi: bcm2835: Fix out-of-bounds access with more than 4 slaves (high 7.8)
- [CVE-2021-47281](https://insights.sbomify.com/CVE-2021-47281/): ALSA: seq: Fix race of snd_seq_timer_open() (high 7.8)
- [CVE-2021-47280](https://insights.sbomify.com/CVE-2021-47280/): drm: Fix use-after-free read in drm_getunique() (high 7.0)
- [CVE-2021-47279](https://insights.sbomify.com/CVE-2021-47279/): usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2021-47278](https://insights.sbomify.com/CVE-2021-47278/): bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove() (high 7.8)
- [CVE-2021-47277](https://insights.sbomify.com/CVE-2021-47277/): kvm: avoid speculation-based attacks from out-of-range memslot accesses (high 7.1)
- [CVE-2021-47276](https://insights.sbomify.com/CVE-2021-47276/): ftrace: Do not blindly read the ip address in ftrace_bug() (medium 5.5)
- [CVE-2021-47275](https://insights.sbomify.com/CVE-2021-47275/): bcache: avoid oversized read request in cache missing code path (medium 5.5)
- [CVE-2021-47274](https://insights.sbomify.com/CVE-2021-47274/): tracing: Correct the length check which causes memory corruption (high 7.8)
- [CVE-2021-47273](https://insights.sbomify.com/CVE-2021-47273/): usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled (medium 5.5)
- [CVE-2021-47272](https://insights.sbomify.com/CVE-2021-47272/): usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL (medium 5.5)
- [CVE-2021-47271](https://insights.sbomify.com/CVE-2021-47271/): usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler (medium 5.5)
- [CVE-2021-47270](https://insights.sbomify.com/CVE-2021-47270/): usb: fix various gadgets null ptr deref on 10gbps cabling. (medium 5.5)
- [CVE-2021-47269](https://insights.sbomify.com/CVE-2021-47269/): usb: dwc3: ep0: fix NULL pointer exception (medium 5.5)
- [CVE-2021-47268](https://insights.sbomify.com/CVE-2021-47268/): usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port (high 7.8)
- [CVE-2021-47267](https://insights.sbomify.com/CVE-2021-47267/): usb: fix various gadget panics on 10gbps cabling (medium 6.3)
- [CVE-2021-47266](https://insights.sbomify.com/CVE-2021-47266/): RDMA/ipoib: Fix warning caused by destroying non-initial netns (medium 5.5)
- [CVE-2021-47265](https://insights.sbomify.com/CVE-2021-47265/): RDMA: Verify port when creating flow rule (medium 5.5)
- [CVE-2021-47264](https://insights.sbomify.com/CVE-2021-47264/): ASoC: core: Fix Null-point-dereference in fmt_single_name() (medium 5.5)
- [CVE-2021-47263](https://insights.sbomify.com/CVE-2021-47263/): gpio: wcd934x: Fix shift-out-of-bounds error (medium 5.5)
- [CVE-2021-47262](https://insights.sbomify.com/CVE-2021-47262/): KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message (high 7.1)
- [CVE-2021-47261](https://insights.sbomify.com/CVE-2021-47261/): IB/mlx5: Fix initializing CQ fragments buffer (high 7.8)
- [CVE-2021-47260](https://insights.sbomify.com/CVE-2021-47260/): NFS: Fix a potential NULL dereference in nfs_get_client() (medium 5.5)
- [CVE-2021-47259](https://insights.sbomify.com/CVE-2021-47259/): NFS: Fix use-after-free in nfs4_init_client() (high 7.8)
- [CVE-2021-47258](https://insights.sbomify.com/CVE-2021-47258/): scsi: core: Fix error handling of scsi_host_alloc() (medium 5.5)
- [CVE-2021-47257](https://insights.sbomify.com/CVE-2021-47257/): net: ieee802154: fix null deref in parse dev addr (medium 5.5)
- [CVE-2021-47256](https://insights.sbomify.com/CVE-2021-47256/): mm/memory-failure: make sure wait for page writeback in memory_failure (medium 5.5)
- [CVE-2021-47255](https://insights.sbomify.com/CVE-2021-47255/): kvm: LAPIC: Restore guard to prevent illegal APIC register access (high 7.1)
- [CVE-2021-47254](https://insights.sbomify.com/CVE-2021-47254/): gfs2: Fix use-after-free in gfs2_glock_shrink_scan (high 7.8)
- [CVE-2021-47253](https://insights.sbomify.com/CVE-2021-47253/): drm/amd/display: Fix potential memory leak in DMUB hw_init (medium 5.5)
- [CVE-2021-47252](https://insights.sbomify.com/CVE-2021-47252/): batman-adv: Avoid WARN_ON timing related checks (medium 5.5)
- [CVE-2021-47251](https://insights.sbomify.com/CVE-2021-47251/): mac80211: fix skb length check in ieee80211_scan_rx() (high 7.8)
- [CVE-2021-47250](https://insights.sbomify.com/CVE-2021-47250/): net: ipv4: fix memory leak in netlbl_cipsov4_add_std (medium 5.5)
- [CVE-2021-47249](https://insights.sbomify.com/CVE-2021-47249/): net: rds: fix memory leak in rds_recvmsg (medium 5.5)
- [CVE-2021-47248](https://insights.sbomify.com/CVE-2021-47248/): udp: fix race between close() and udp_abort() (high 7.8)
- [CVE-2021-47247](https://insights.sbomify.com/CVE-2021-47247/): net/mlx5e: Fix use-after-free of encap entry in neigh update handler (high 7.8)
- [CVE-2021-47246](https://insights.sbomify.com/CVE-2021-47246/): net/mlx5e: Fix page reclaim for dead peer hairpin (medium 5.5)
- [CVE-2021-47245](https://insights.sbomify.com/CVE-2021-47245/): netfilter: synproxy: Fix out of bounds when parsing TCP options (high 8.2)
- [CVE-2021-47244](https://insights.sbomify.com/CVE-2021-47244/): mptcp: Fix out of bounds when parsing TCP options (high 8.2)
- [CVE-2021-47243](https://insights.sbomify.com/CVE-2021-47243/): sch_cake: Fix out of bounds when parsing TCP options and header (high 7.1)
- [CVE-2021-47242](https://insights.sbomify.com/CVE-2021-47242/): mptcp: fix soft lookup in subflow_error_report() (high 7.5)
- [CVE-2021-47241](https://insights.sbomify.com/CVE-2021-47241/): ethtool: strset: fix message length calculation (high 7.5)
- [CVE-2021-47240](https://insights.sbomify.com/CVE-2021-47240/): net: qrtr: fix OOB Read in qrtr_endpoint_post (high 8.4)
- [CVE-2021-47239](https://insights.sbomify.com/CVE-2021-47239/): net: usb: fix possible use-after-free in smsc75xx_bind (high 7.8)
- [CVE-2021-47238](https://insights.sbomify.com/CVE-2021-47238/): net: ipv4: fix memory leak in ip_mc_add1_src (medium 5.5)
- [CVE-2021-47237](https://insights.sbomify.com/CVE-2021-47237/): net: hamradio: fix memory leak in mkiss_close (medium 5.5)
- [CVE-2021-47236](https://insights.sbomify.com/CVE-2021-47236/): net: cdc_eem: fix tx fixup skb leak (medium 5.5)
- [CVE-2021-47235](https://insights.sbomify.com/CVE-2021-47235/): net: ethernet: fix potential use-after-free in ec_bhf_remove (high 7.8)
- [CVE-2021-47234](https://insights.sbomify.com/CVE-2021-47234/): phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() (medium 5.5)
- [CVE-2021-47233](https://insights.sbomify.com/CVE-2021-47233/): regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL (medium 5.5)
- [CVE-2021-47232](https://insights.sbomify.com/CVE-2021-47232/): can: j1939: fix Use-after-Free, hold skb ref while in use (critical 9.8)
- [CVE-2021-47231](https://insights.sbomify.com/CVE-2021-47231/): can: mcba_usb: fix memory leak in mcba_usb (medium 5.5)
- [CVE-2021-47230](https://insights.sbomify.com/CVE-2021-47230/): KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (medium 6.6)
- [CVE-2021-47229](https://insights.sbomify.com/CVE-2021-47229/): PCI: aardvark: Fix kernel panic during PIO transfer (medium 5.5)
- [CVE-2021-47228](https://insights.sbomify.com/CVE-2021-47228/): x86/ioremap: Map EFI-reserved memory as encrypted for SEV (medium 6.2)
- [CVE-2021-47227](https://insights.sbomify.com/CVE-2021-47227/): x86/fpu: Prevent state corruption in __fpu__restore_sig() (medium 5.5)
- [CVE-2021-47226](https://insights.sbomify.com/CVE-2021-47226/): x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer (high 7.1)
- [CVE-2021-47225](https://insights.sbomify.com/CVE-2021-47225/): mac80211: fix deadlock in AP/VLAN handling (medium 5.5)
- [CVE-2021-47224](https://insights.sbomify.com/CVE-2021-47224/): net: ll_temac: Make sure to free skb when it is completely used (high 7.8)
- [CVE-2021-47223](https://insights.sbomify.com/CVE-2021-47223/): net: bridge: fix vlan tunnel dst null pointer dereference (medium 5.5)
- [CVE-2021-47222](https://insights.sbomify.com/CVE-2021-47222/): net: bridge: fix vlan tunnel dst refcnt when egressing (high 7.8)
- [CVE-2021-47221](https://insights.sbomify.com/CVE-2021-47221/): mm/slub: actually fix freelist pointer vs redzoning (medium 5.5)
- [CVE-2021-47219](https://insights.sbomify.com/CVE-2021-47219/): scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (high 7.1)
- [CVE-2021-47218](https://insights.sbomify.com/CVE-2021-47218/): selinux: fix NULL-pointer dereference when hashtab allocation fails (medium 5.5)
- [CVE-2021-47217](https://insights.sbomify.com/CVE-2021-47217/): x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (medium 5.5)
- [CVE-2021-47216](https://insights.sbomify.com/CVE-2021-47216/): scsi: advansys: Fix kernel pointer leak (medium 5.5)
- [CVE-2021-47215](https://insights.sbomify.com/CVE-2021-47215/): net/mlx5e: kTLS, Fix crash in RX resync flow (critical 9.8)
- [CVE-2021-47214](https://insights.sbomify.com/CVE-2021-47214/): hugetlb, userfaultfd: fix reservation restore on userfaultfd error (medium 5.5)
- [CVE-2021-47212](https://insights.sbomify.com/CVE-2021-47212/): net/mlx5: Update error handler for UCTX and UMEM (medium 5.5)
- [CVE-2021-47211](https://insights.sbomify.com/CVE-2021-47211/): ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (medium 5.5)
- [CVE-2021-47210](https://insights.sbomify.com/CVE-2021-47210/): usb: typec: tipd: Remove WARN_ON in tps6598x_block_read (medium 5.5)
- [CVE-2021-47209](https://insights.sbomify.com/CVE-2021-47209/): sched/fair: Prevent dead task groups from regaining cfs_rq's (high 7.8)
- [CVE-2021-47208](https://insights.sbomify.com/CVE-2021-47208/): Denial of service in mojolicious:mojolicious (medium 4.3)
- [CVE-2021-47207](https://insights.sbomify.com/CVE-2021-47207/): ALSA: gus: fix null pointer dereference on pointer block (medium 5.5)
- [CVE-2021-47206](https://insights.sbomify.com/CVE-2021-47206/): usb: host: ohci-tmio: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2021-47205](https://insights.sbomify.com/CVE-2021-47205/): clk: sunxi-ng: Unregister clocks/resets when unbinding (medium 5.5)
- [CVE-2021-47204](https://insights.sbomify.com/CVE-2021-47204/): net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove (high 7.8)
- [CVE-2021-47203](https://insights.sbomify.com/CVE-2021-47203/): scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (high 8.8)
- [CVE-2021-47202](https://insights.sbomify.com/CVE-2021-47202/): thermal: Fix NULL pointer dereferences in of_thermal_ functions (medium 5.5)
- [CVE-2021-47201](https://insights.sbomify.com/CVE-2021-47201/): iavf: free q_vectors before queues in iavf_disable_vf (high 7.8)
- [CVE-2021-47200](https://insights.sbomify.com/CVE-2021-47200/): drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap (high 7.8)
- [CVE-2021-47199](https://insights.sbomify.com/CVE-2021-47199/): net/mlx5e: CT, Fix multiple allocations and memleak of mod acts (medium 5.5)
- [CVE-2021-47198](https://insights.sbomify.com/CVE-2021-47198/): scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine (high 7.8)
- [CVE-2021-47197](https://insights.sbomify.com/CVE-2021-47197/): net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (high 7.8)
- [CVE-2021-47196](https://insights.sbomify.com/CVE-2021-47196/): RDMA/core: Set send and receive CQ before forwarding to the driver (high 7.8)
- [CVE-2021-47195](https://insights.sbomify.com/CVE-2021-47195/): spi: fix use-after-free of the add_lock mutex (medium 5.5)
- [CVE-2021-47194](https://insights.sbomify.com/CVE-2021-47194/): cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (high 7.8)
- [CVE-2021-47193](https://insights.sbomify.com/CVE-2021-47193/): scsi: pm80xx: Fix memory leak during rmmod (medium 5.5)
- [CVE-2021-47192](https://insights.sbomify.com/CVE-2021-47192/): scsi: core: sysfs: Fix hang when device state is set via sysfs (medium 5.3)
- [CVE-2021-47191](https://insights.sbomify.com/CVE-2021-47191/): scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() (high 7.1)
- [CVE-2021-47190](https://insights.sbomify.com/CVE-2021-47190/): perf bpf: Avoid memory leak from perf_env__insert_btf() (medium 5.5)
- [CVE-2021-47189](https://insights.sbomify.com/CVE-2021-47189/): btrfs: fix memory ordering between normal and ordered work functions (high 7.8)
- [CVE-2021-47188](https://insights.sbomify.com/CVE-2021-47188/): scsi: ufs: core: Improve SCSI abort handling (high 7.8)
- [CVE-2021-47187](https://insights.sbomify.com/CVE-2021-47187/): arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency (medium 5.5)
- [CVE-2021-47186](https://insights.sbomify.com/CVE-2021-47186/): tipc: check for null after calling kmemdup (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/49/