# Vulnerabilities published in 2021


- [CVE-2021-47185](https://insights.sbomify.com/CVE-2021-47185/): tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (medium 4.4)
- [CVE-2021-47184](https://insights.sbomify.com/CVE-2021-47184/): i40e: Fix NULL ptr dereference on VSI filter sync (high 8.8)
- [CVE-2021-47183](https://insights.sbomify.com/CVE-2021-47183/): scsi: lpfc: Fix link down processing to address NULL pointer dereference (high 8.8)
- [CVE-2021-47182](https://insights.sbomify.com/CVE-2021-47182/): scsi: core: Fix scsi_mode_sense() buffer length handling (medium 5.5)
- [CVE-2021-47181](https://insights.sbomify.com/CVE-2021-47181/): usb: musb: tusb6010: check return value after calling platform_get_resource() (medium 5.5)
- [CVE-2021-47180](https://insights.sbomify.com/CVE-2021-47180/): NFC: nci: fix memory leak in nci_allocate_device (medium 5.5)
- [CVE-2021-47179](https://insights.sbomify.com/CVE-2021-47179/): NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (high 7.5)
- [CVE-2021-47178](https://insights.sbomify.com/CVE-2021-47178/): scsi: target: core: Avoid smp_processor_id() in preemptible code (high 7.5)
- [CVE-2021-47177](https://insights.sbomify.com/CVE-2021-47177/): iommu/vt-d: Fix sysfs leak in alloc_iommu() (medium 5.5)
- [CVE-2021-47176](https://insights.sbomify.com/CVE-2021-47176/): s390/dasd: add missing discipline function (medium 5.5)
- [CVE-2021-47175](https://insights.sbomify.com/CVE-2021-47175/): net/sched: fq_pie: fix OOB access in the traffic path (high 7.8)
- [CVE-2021-47174](https://insights.sbomify.com/CVE-2021-47174/): netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version (medium 5.5)
- [CVE-2021-47173](https://insights.sbomify.com/CVE-2021-47173/): misc/uss720: fix memory leak in uss720_probe (medium 5.5)
- [CVE-2021-47172](https://insights.sbomify.com/CVE-2021-47172/): iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers (medium 5.5)
- [CVE-2021-47171](https://insights.sbomify.com/CVE-2021-47171/): net: usb: fix memory leak in smsc75xx_bind (medium 5.5)
- [CVE-2021-47170](https://insights.sbomify.com/CVE-2021-47170/): USB: usbfs: Don't WARN about excessively large memory allocations (medium 5.5)
- [CVE-2021-47169](https://insights.sbomify.com/CVE-2021-47169/): serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' (medium 5.5)
- [CVE-2021-47168](https://insights.sbomify.com/CVE-2021-47168/): NFS: fix an incorrect limit in filelayout_decode_layout() (critical 9.8)
- [CVE-2021-47167](https://insights.sbomify.com/CVE-2021-47167/): NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (medium 5.5)
- [CVE-2021-47166](https://insights.sbomify.com/CVE-2021-47166/): NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() (medium 5.5)
- [CVE-2021-47165](https://insights.sbomify.com/CVE-2021-47165/): drm/meson: fix shutdown crash when component not probed (medium 5.5)
- [CVE-2021-47164](https://insights.sbomify.com/CVE-2021-47164/): net/mlx5e: Fix null deref accessing lag dev (medium 5.5)
- [CVE-2021-47163](https://insights.sbomify.com/CVE-2021-47163/): tipc: wait and exit until all work queues are done (high 7.8)
- [CVE-2021-47162](https://insights.sbomify.com/CVE-2021-47162/): tipc: skb_linearize the head skb when reassembling msgs (critical 9.8)
- [CVE-2021-47161](https://insights.sbomify.com/CVE-2021-47161/): spi: spi-fsl-dspi: Fix a resource leak in an error handling path (medium 5.5)
- [CVE-2021-47160](https://insights.sbomify.com/CVE-2021-47160/): net: dsa: mt7530: fix VLAN traffic leaks (high 8.1)
- [CVE-2021-47159](https://insights.sbomify.com/CVE-2021-47159/): net: dsa: fix a crash if ->get_sset_count() fails (high 7.8)
- [CVE-2021-47158](https://insights.sbomify.com/CVE-2021-47158/): net: dsa: sja1105: add error handling in sja1105_setup() (high 7.8)
- [CVE-2021-47157](https://insights.sbomify.com/CVE-2021-47157/): The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling. (critical 9.8)
- [CVE-2021-47156](https://insights.sbomify.com/CVE-2021-47156/): The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which ( (medium 6.5)
- [CVE-2021-47155](https://insights.sbomify.com/CVE-2021-47155/): The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situati (critical 9.1)
- [CVE-2021-47154](https://insights.sbomify.com/CVE-2021-47154/): The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address stri (medium 6.3)
- [CVE-2021-47153](https://insights.sbomify.com/CVE-2021-47153/): i2c: i801: Don't generate an interrupt on bus reset (high 7.8)
- [CVE-2021-47152](https://insights.sbomify.com/CVE-2021-47152/): mptcp: fix data stream corruption (high 7.8)
- [CVE-2021-47151](https://insights.sbomify.com/CVE-2021-47151/): interconnect: qcom: bcm-voter: add a missing of_node_put() (medium 5.5)
- [CVE-2021-47150](https://insights.sbomify.com/CVE-2021-47150/): net: fec: fix the potential memory leak in fec_enet_init() (medium 5.5)
- [CVE-2021-47149](https://insights.sbomify.com/CVE-2021-47149/): net: fujitsu: fix potential null-ptr-deref (medium 5.5)
- [CVE-2021-47148](https://insights.sbomify.com/CVE-2021-47148/): octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context() (high 7.8)
- [CVE-2021-47147](https://insights.sbomify.com/CVE-2021-47147/): ptp: ocp: Fix a resource leak in an error handling path (medium 6.2)
- [CVE-2021-47146](https://insights.sbomify.com/CVE-2021-47146/): mld: fix panic in mld_newpack() (medium 5.5)
- [CVE-2021-47145](https://insights.sbomify.com/CVE-2021-47145/): btrfs: do not BUG_ON in link_to_fixup_dir (medium 5.5)
- [CVE-2021-47143](https://insights.sbomify.com/CVE-2021-47143/): net/smc: remove device from smcd_dev_list after failed device_add() (medium 5.5)
- [CVE-2021-47142](https://insights.sbomify.com/CVE-2021-47142/): drm/amdgpu: Fix a use-after-free (high 7.8)
- [CVE-2021-47141](https://insights.sbomify.com/CVE-2021-47141/): gve: Add NULL pointer checks when freeing irqs. (medium 5.5)
- [CVE-2021-47140](https://insights.sbomify.com/CVE-2021-47140/): iommu/amd: Clear DMA ops when switching domain (medium 5.3)
- [CVE-2021-47139](https://insights.sbomify.com/CVE-2021-47139/): net: hns3: put off calling register_netdev() until client initialize complete (medium 5.5)
- [CVE-2021-47138](https://insights.sbomify.com/CVE-2021-47138/): cxgb4: avoid accessing registers when clearing filters (high 7.1)
- [CVE-2021-47137](https://insights.sbomify.com/CVE-2021-47137/): net: lantiq: fix memory corruption in RX ring (critical 9.8)
- [CVE-2021-47136](https://insights.sbomify.com/CVE-2021-47136/): net: zero-initialize tc skb extension on allocation (high 8.6)
- [CVE-2021-47135](https://insights.sbomify.com/CVE-2021-47135/): mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report (high 7.8)
- [CVE-2021-47134](https://insights.sbomify.com/CVE-2021-47134/): efi/fdt: fix panic when no valid fdt found (medium 5.5)
- [CVE-2021-47133](https://insights.sbomify.com/CVE-2021-47133/): HID: amd_sfh: Fix memory leak in amd_sfh_work (medium 5.5)
- [CVE-2021-47132](https://insights.sbomify.com/CVE-2021-47132/): mptcp: fix sk_forward_memory corruption on retransmission (high 7.5)
- [CVE-2021-47131](https://insights.sbomify.com/CVE-2021-47131/): net/tls: Fix use-after-free after the TLS device goes down and up (high 8.1)
- [CVE-2021-47130](https://insights.sbomify.com/CVE-2021-47130/): nvmet: fix freeing unallocated p2pmem (high 7.5)
- [CVE-2021-47129](https://insights.sbomify.com/CVE-2021-47129/): netfilter: nft_ct: skip expectations for confirmed conntrack (high 7.8)
- [CVE-2021-47128](https://insights.sbomify.com/CVE-2021-47128/): bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks (medium 5.5)
- [CVE-2021-47127](https://insights.sbomify.com/CVE-2021-47127/): ice: track AF_XDP ZC enabled queues in bitmap (medium 5.5)
- [CVE-2021-47126](https://insights.sbomify.com/CVE-2021-47126/): ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (high 7.8)
- [CVE-2021-47125](https://insights.sbomify.com/CVE-2021-47125/): sch_htb: fix refcount leak in htb_parent_to_leaf_offload (medium 5.5)
- [CVE-2021-47124](https://insights.sbomify.com/CVE-2021-47124/): io_uring: fix link timeout refs (high 7.8)
- [CVE-2021-47123](https://insights.sbomify.com/CVE-2021-47123/): io_uring: fix ltout double free on completion race (high 7.8)
- [CVE-2021-47122](https://insights.sbomify.com/CVE-2021-47122/): net: caif: fix memory leak in caif_device_notify (medium 5.5)
- [CVE-2021-47121](https://insights.sbomify.com/CVE-2021-47121/): net: caif: fix memory leak in cfusbl_device_notify (medium 5.5)
- [CVE-2021-47120](https://insights.sbomify.com/CVE-2021-47120/): HID: magicmouse: fix NULL-deref on disconnect (medium 5.5)
- [CVE-2021-47119](https://insights.sbomify.com/CVE-2021-47119/): ext4: fix memory leak in ext4_fill_super (medium 5.5)
- [CVE-2021-47118](https://insights.sbomify.com/CVE-2021-47118/): pid: take a reference when initializing `cad_pid` (high 7.8)
- [CVE-2021-47117](https://insights.sbomify.com/CVE-2021-47117/): ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (medium 5.5)
- [CVE-2021-47116](https://insights.sbomify.com/CVE-2021-47116/): ext4: fix memory leak in ext4_mb_init_backend on error path. (medium 5.5)
- [CVE-2021-47114](https://insights.sbomify.com/CVE-2021-47114/): ocfs2: fix data corruption by fallocate (medium 5.5)
- [CVE-2021-47113](https://insights.sbomify.com/CVE-2021-47113/): btrfs: abort in rename_exchange if we fail to insert the second ref (high 7.1)
- [CVE-2021-47112](https://insights.sbomify.com/CVE-2021-47112/): x86/kvm: Teardown PV features on boot CPU as well (high 7.8)
- [CVE-2021-47111](https://insights.sbomify.com/CVE-2021-47111/): xen-netback: take a reference to the RX task thread (high 8.8)
- [CVE-2021-47110](https://insights.sbomify.com/CVE-2021-47110/): x86/kvm: Disable kvmclock on all CPUs on shutdown (high 7.1)
- [CVE-2021-47109](https://insights.sbomify.com/CVE-2021-47109/): neighbour: allow NUD_NOARP entries to be forced GCed (high 7.5)
- [CVE-2021-47108](https://insights.sbomify.com/CVE-2021-47108/): drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf (medium 5.5)
- [CVE-2021-47107](https://insights.sbomify.com/CVE-2021-47107/): NFSD: Fix READDIR buffer overflow (critical 9.8)
- [CVE-2021-47106](https://insights.sbomify.com/CVE-2021-47106/): netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() (high 7.8)
- [CVE-2021-47105](https://insights.sbomify.com/CVE-2021-47105/): ice: xsk: return xsk buffers back to pool when cleaning the ring (medium 5.5)
- [CVE-2021-47104](https://insights.sbomify.com/CVE-2021-47104/): IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (medium 5.5)
- [CVE-2021-47103](https://insights.sbomify.com/CVE-2021-47103/): inet: fully convert sk->sk_rx_dst to RCU rules (critical 9.8)
- [CVE-2021-47102](https://insights.sbomify.com/CVE-2021-47102/): net: marvell: prestera: fix incorrect structure access (high 7.1)
- [CVE-2021-47101](https://insights.sbomify.com/CVE-2021-47101/): asix: fix uninit-value in asix_mdio_read() (high 7.1)
- [CVE-2021-47100](https://insights.sbomify.com/CVE-2021-47100/): ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module (medium 5.5)
- [CVE-2021-47099](https://insights.sbomify.com/CVE-2021-47099/): veth: ensure skb entering GRO are not cloned. (high 7.8)
- [CVE-2021-47098](https://insights.sbomify.com/CVE-2021-47098/): hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations (high 7.8)
- [CVE-2021-47097](https://insights.sbomify.com/CVE-2021-47097/): Input: elantech - fix stack out of bound access in elantech_change_report_id() (high 7.1)
- [CVE-2021-47096](https://insights.sbomify.com/CVE-2021-47096/): ALSA: rawmidi - fix the uninitalized user_pversion (medium 4.0)
- [CVE-2021-47095](https://insights.sbomify.com/CVE-2021-47095/): ipmi: ssif: initialize ssif_info->client early (medium 5.5)
- [CVE-2021-47094](https://insights.sbomify.com/CVE-2021-47094/): KVM: x86/mmu: Don't advance iterator after restart due to yielding (high 7.8)
- [CVE-2021-47093](https://insights.sbomify.com/CVE-2021-47093/): platform/x86: intel_pmc_core: fix memleak on registration failure (medium 5.5)
- [CVE-2021-47092](https://insights.sbomify.com/CVE-2021-47092/): KVM: VMX: Always clear vmx->fail on emulation_required (medium 5.5)
- [CVE-2021-47091](https://insights.sbomify.com/CVE-2021-47091/): mac80211: fix locking in ieee80211_start_ap error path (medium 5.5)
- [CVE-2021-47090](https://insights.sbomify.com/CVE-2021-47090/): mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() (medium 5.5)
- [CVE-2021-47089](https://insights.sbomify.com/CVE-2021-47089/): kfence: fix memory leak when cat kfence objects (low 3.3)
- [CVE-2021-47088](https://insights.sbomify.com/CVE-2021-47088/): mm/damon/dbgfs: protect targets destructions with kdamond_lock (high 7.0)
- [CVE-2021-47087](https://insights.sbomify.com/CVE-2021-47087/): tee: optee: Fix incorrect page free bug (high 7.8)
- [CVE-2021-47086](https://insights.sbomify.com/CVE-2021-47086/): phonet/pep: refuse to enable an unbound pipe (medium 5.5)
- [CVE-2021-47083](https://insights.sbomify.com/CVE-2021-47083/): pinctrl: mediatek: fix global-out-of-bounds issue (high 7.1)
- [CVE-2021-47082](https://insights.sbomify.com/CVE-2021-47082/): tun: avoid double free in tun_free_netdev (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/50/