# Vulnerabilities published in 2021


- [CVE-2021-47081](https://insights.sbomify.com/CVE-2021-47081/): habanalabs/gaudi: Fix a potential use after free in gaudi_memset_device_memory (high 7.8)
- [CVE-2021-47080](https://insights.sbomify.com/CVE-2021-47080/): RDMA/core: Prevent divide-by-zero error triggered by the user (medium 5.5)
- [CVE-2021-47079](https://insights.sbomify.com/CVE-2021-47079/): platform/x86: ideapad-laptop: fix a NULL pointer dereference (medium 5.5)
- [CVE-2021-47078](https://insights.sbomify.com/CVE-2021-47078/): RDMA/rxe: Clear all QP fields if creation failed (high 7.8)
- [CVE-2021-47077](https://insights.sbomify.com/CVE-2021-47077/): scsi: qedf: Add pointer checks in qedf_update_link_speed() (medium 5.5)
- [CVE-2021-47076](https://insights.sbomify.com/CVE-2021-47076/): RDMA/rxe: Return CQE error if invalid lkey was supplied (medium 5.5)
- [CVE-2021-47075](https://insights.sbomify.com/CVE-2021-47075/): nvmet: fix memory leak in nvmet_alloc_ctrl() (medium 5.3)
- [CVE-2021-47074](https://insights.sbomify.com/CVE-2021-47074/): nvme-loop: fix memory leak in nvme_loop_create_ctrl() (medium 5.5)
- [CVE-2021-47073](https://insights.sbomify.com/CVE-2021-47073/): platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (medium 5.5)
- [CVE-2021-47072](https://insights.sbomify.com/CVE-2021-47072/): btrfs: fix removed dentries still existing after log is synced (medium 5.5)
- [CVE-2021-47071](https://insights.sbomify.com/CVE-2021-47071/): uio_hv_generic: Fix a memory leak in error handling paths (medium 5.5)
- [CVE-2021-47070](https://insights.sbomify.com/CVE-2021-47070/): uio_hv_generic: Fix another memory leak in error handling paths (medium 5.5)
- [CVE-2021-47069](https://insights.sbomify.com/CVE-2021-47069/): ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (high 7.8)
- [CVE-2021-47068](https://insights.sbomify.com/CVE-2021-47068/): net/nfc: fix use-after-free llcp_sock_bind/connect (high 7.8)
- [CVE-2021-47067](https://insights.sbomify.com/CVE-2021-47067/): soc/tegra: regulators: Fix locking up when voltage-spread is out of range (medium 5.5)
- [CVE-2021-47066](https://insights.sbomify.com/CVE-2021-47066/): async_xor: increase src_offs when dropping destination page (high 7.1)
- [CVE-2021-47065](https://insights.sbomify.com/CVE-2021-47065/): rtw88: Fix array overrun in rtw_get_tx_power_params() (high 7.8)
- [CVE-2021-47064](https://insights.sbomify.com/CVE-2021-47064/): mt76: fix potential DMA mapping leak (medium 5.3)
- [CVE-2021-47063](https://insights.sbomify.com/CVE-2021-47063/): drm: bridge/panel: Cleanup connector on bridge detach (high 7.8)
- [CVE-2021-47062](https://insights.sbomify.com/CVE-2021-47062/): KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs (medium 5.5)
- [CVE-2021-47061](https://insights.sbomify.com/CVE-2021-47061/): KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (high 7.8)
- [CVE-2021-47060](https://insights.sbomify.com/CVE-2021-47060/): KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (high 7.8)
- [CVE-2021-47059](https://insights.sbomify.com/CVE-2021-47059/): crypto: sun8i-ss - fix result memory leak on error path (medium 5.5)
- [CVE-2021-47058](https://insights.sbomify.com/CVE-2021-47058/): regmap: set debugfs_name to NULL after it is freed (high 7.8)
- [CVE-2021-47057](https://insights.sbomify.com/CVE-2021-47057/): crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map (medium 5.5)
- [CVE-2021-47056](https://insights.sbomify.com/CVE-2021-47056/): crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (medium 5.5)
- [CVE-2021-47055](https://insights.sbomify.com/CVE-2021-47055/): mtd: require write permissions for locking and badblock ioctls (high 7.1)
- [CVE-2021-47054](https://insights.sbomify.com/CVE-2021-47054/): bus: qcom: Put child node before return (medium 5.5)
- [CVE-2021-47053](https://insights.sbomify.com/CVE-2021-47053/): crypto: sun8i-ss - Fix memory leak of pad (medium 5.5)
- [CVE-2021-47052](https://insights.sbomify.com/CVE-2021-47052/): crypto: sa2ul - Fix memory leak of rxd (medium 5.5)
- [CVE-2021-47051](https://insights.sbomify.com/CVE-2021-47051/): spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (medium 5.5)
- [CVE-2021-47050](https://insights.sbomify.com/CVE-2021-47050/): memory: renesas-rpc-if: fix possible NULL pointer dereference of resource (medium 5.5)
- [CVE-2021-47049](https://insights.sbomify.com/CVE-2021-47049/): Drivers: hv: vmbus: Use after free in __vmbus_open() (high 8.4)
- [CVE-2021-47048](https://insights.sbomify.com/CVE-2021-47048/): spi: spi-zynqmp-gqspi: fix use-after-free in zynqmp_qspi_exec_op (high 7.8)
- [CVE-2021-47047](https://insights.sbomify.com/CVE-2021-47047/): spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails (medium 5.5)
- [CVE-2021-47046](https://insights.sbomify.com/CVE-2021-47046/): drm/amd/display: Fix off by one in hdmi_14_process_transaction() (high 7.8)
- [CVE-2021-47045](https://insights.sbomify.com/CVE-2021-47045/): scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() (medium 5.5)
- [CVE-2021-47044](https://insights.sbomify.com/CVE-2021-47044/): sched/fair: Fix shift-out-of-bounds in load_balance() (high 7.7)
- [CVE-2021-47043](https://insights.sbomify.com/CVE-2021-47043/): media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' (medium 5.5)
- [CVE-2021-47042](https://insights.sbomify.com/CVE-2021-47042/): drm/amd/display: Free local data after use (medium 5.5)
- [CVE-2021-47041](https://insights.sbomify.com/CVE-2021-47041/): nvmet-tcp: fix incorrect locking in state_change sk callback (high 7.5)
- [CVE-2021-47040](https://insights.sbomify.com/CVE-2021-47040/): io_uring: fix overflows checks in provide buffers (high 7.8)
- [CVE-2021-47039](https://insights.sbomify.com/CVE-2021-47039/): ataflop: potential out of bounds in do_format() (high 7.1)
- [CVE-2021-47038](https://insights.sbomify.com/CVE-2021-47038/): Bluetooth: avoid deadlock between hci_dev->lock and socket lock (medium 5.5)
- [CVE-2021-47037](https://insights.sbomify.com/CVE-2021-47037/): ASoC: q6afe-clocks: fix reprobing of the driver (medium 5.5)
- [CVE-2021-47036](https://insights.sbomify.com/CVE-2021-47036/): udp: skip L4 aggregation for UDP tunnel packets (critical 9.8)
- [CVE-2021-47035](https://insights.sbomify.com/CVE-2021-47035/): iommu/vt-d: Remove WO permissions on second-level paging entries (high 8.8)
- [CVE-2021-47034](https://insights.sbomify.com/CVE-2021-47034/): powerpc/64s: Fix pte update for kernel memory on radix (medium 4.4)
- [CVE-2021-47033](https://insights.sbomify.com/CVE-2021-47033/): mt76: mt7615: fix tx skb dma unmap (medium 5.5)
- [CVE-2021-47032](https://insights.sbomify.com/CVE-2021-47032/): mt76: mt7915: fix tx skb dma unmap (medium 5.5)
- [CVE-2021-47031](https://insights.sbomify.com/CVE-2021-47031/): mt76: mt7921: fix memory leak in mt7921_coredump_work (medium 4.3)
- [CVE-2021-47030](https://insights.sbomify.com/CVE-2021-47030/): mt76: mt7615: fix memory leak in mt7615_coredump_work (medium 5.5)
- [CVE-2021-47029](https://insights.sbomify.com/CVE-2021-47029/): mt76: connac: fix kernel warning adding monitor interface (medium 5.5)
- [CVE-2021-47028](https://insights.sbomify.com/CVE-2021-47028/): mt76: mt7915: fix txrate reporting (high 7.1)
- [CVE-2021-47027](https://insights.sbomify.com/CVE-2021-47027/): mt76: mt7921: fix kernel crash when the firmware fails to download (medium 5.5)
- [CVE-2021-47026](https://insights.sbomify.com/CVE-2021-47026/): RDMA/rtrs-clt: destroy sysfs after removing session from active list (high 7.8)
- [CVE-2021-47025](https://insights.sbomify.com/CVE-2021-47025/): iommu/mediatek: Always enable the clk on resume (high 7.8)
- [CVE-2021-47024](https://insights.sbomify.com/CVE-2021-47024/): vsock/virtio: free queued packets when closing socket (medium 5.5)
- [CVE-2021-47023](https://insights.sbomify.com/CVE-2021-47023/): net: marvell: prestera: fix port event handling on init (high 8.2)
- [CVE-2021-47022](https://insights.sbomify.com/CVE-2021-47022/): mt76: mt7615: fix memleak when mt7615_unregister_device() (medium 5.5)
- [CVE-2021-47021](https://insights.sbomify.com/CVE-2021-47021/): mt76: mt7915: fix memleak when mt7915_unregister_device() (medium 5.5)
- [CVE-2021-47020](https://insights.sbomify.com/CVE-2021-47020/): soundwire: stream: fix memory leak in stream config error path (medium 5.5)
- [CVE-2021-47019](https://insights.sbomify.com/CVE-2021-47019/): mt76: mt7921: fix possible invalid register access (medium 5.5)
- [CVE-2021-47018](https://insights.sbomify.com/CVE-2021-47018/): powerpc/64: Fix the definition of the fixmap area (medium 5.5)
- [CVE-2021-47017](https://insights.sbomify.com/CVE-2021-47017/): ath10k: Fix a use after free in ath10k_htc_send_bundle (high 8.8)
- [CVE-2021-47016](https://insights.sbomify.com/CVE-2021-47016/): m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (medium 5.5)
- [CVE-2021-47015](https://insights.sbomify.com/CVE-2021-47015/): bnxt_en: Fix RX consumer index logic in the error path. (medium 5.5)
- [CVE-2021-47014](https://insights.sbomify.com/CVE-2021-47014/): net/sched: act_ct: fix wild memory access when clearing fragments (high 7.8)
- [CVE-2021-47013](https://insights.sbomify.com/CVE-2021-47013/): net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (critical 9.8)
- [CVE-2021-47012](https://insights.sbomify.com/CVE-2021-47012/): RDMA/siw: Fix a use after free in siw_alloc_mr (high 7.8)
- [CVE-2021-47011](https://insights.sbomify.com/CVE-2021-47011/): mm: memcontrol: slab: fix obtain a reference to a freeing memcg (high 7.8)
- [CVE-2021-47010](https://insights.sbomify.com/CVE-2021-47010/): net: Only allow init netns to set default tcp cong to a restricted algo (high 7.8)
- [CVE-2021-47009](https://insights.sbomify.com/CVE-2021-47009/): KEYS: trusted: Fix memory leak on object td (medium 5.5)
- [CVE-2021-47008](https://insights.sbomify.com/CVE-2021-47008/): KVM: SVM: Make sure GHCB is mapped before updating (medium 5.5)
- [CVE-2021-47007](https://insights.sbomify.com/CVE-2021-47007/): f2fs: fix panic during f2fs_resize_fs() (medium 5.5)
- [CVE-2021-47006](https://insights.sbomify.com/CVE-2021-47006/): ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook (medium 5.5)
- [CVE-2021-47005](https://insights.sbomify.com/CVE-2021-47005/): PCI: endpoint: Fix NULL pointer dereference for ->get_features() (medium 5.5)
- [CVE-2021-47004](https://insights.sbomify.com/CVE-2021-47004/): f2fs: fix to avoid touching checkpointed data in get_victim() (high 7.1)
- [CVE-2021-47003](https://insights.sbomify.com/CVE-2021-47003/): dmaengine: idxd: Fix potential null dereference on pointer status (medium 5.5)
- [CVE-2021-47002](https://insights.sbomify.com/CVE-2021-47002/): SUNRPC: Fix null pointer dereference in svc_rqst_free() (medium 5.5)
- [CVE-2021-47001](https://insights.sbomify.com/CVE-2021-47001/): xprtrdma: Fix cwnd update ordering (high 7.5)
- [CVE-2021-47000](https://insights.sbomify.com/CVE-2021-47000/): ceph: fix inode leak on getattr error in __fh_to_dentry (low 3.3)
- [CVE-2021-46999](https://insights.sbomify.com/CVE-2021-46999/): sctp: do asoc update earlier in sctp_sf_do_dupcook_a (critical 9.8)
- [CVE-2021-46998](https://insights.sbomify.com/CVE-2021-46998/): ethernet:enic: Fix a use after free bug in enic_hard_start_xmit (high 7.8)
- [CVE-2021-46997](https://insights.sbomify.com/CVE-2021-46997/): arm64: entry: always set GIC_PRIO_PSR_I_SET during entry (medium 5.5)
- [CVE-2021-46996](https://insights.sbomify.com/CVE-2021-46996/): netfilter: nftables: Fix a memleak from userdata error path in new objects (medium 5.5)
- [CVE-2021-46995](https://insights.sbomify.com/CVE-2021-46995/): can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe (medium 5.5)
- [CVE-2021-46994](https://insights.sbomify.com/CVE-2021-46994/): can: mcp251x: fix resume from sleep before interface was brought up (medium 5.5)
- [CVE-2021-46993](https://insights.sbomify.com/CVE-2021-46993/): sched: Fix out-of-bound access in uclamp (high 7.8)
- [CVE-2021-46992](https://insights.sbomify.com/CVE-2021-46992/): netfilter: nftables: avoid overflows in nft_hash_buckets() (high 7.8)
- [CVE-2021-46991](https://insights.sbomify.com/CVE-2021-46991/): i40e: Fix use-after-free in i40e_client_subtask() (high 7.8)
- [CVE-2021-46990](https://insights.sbomify.com/CVE-2021-46990/): powerpc/64s: Fix crashes when toggling entry flush barrier (medium 5.5)
- [CVE-2021-46989](https://insights.sbomify.com/CVE-2021-46989/): hfsplus: prevent corruption in shrinking truncate (high 7.1)
- [CVE-2021-46988](https://insights.sbomify.com/CVE-2021-46988/): userfaultfd: release page in error path to avoid BUG_ON (medium 5.5)
- [CVE-2021-46987](https://insights.sbomify.com/CVE-2021-46987/): btrfs: fix deadlock when cloning inline extents and using qgroups (medium 5.5)
- [CVE-2021-46986](https://insights.sbomify.com/CVE-2021-46986/): usb: dwc3: gadget: Free gadget structure only after freeing endpoints (medium 5.5)
- [CVE-2021-46985](https://insights.sbomify.com/CVE-2021-46985/): ACPI: scan: Fix a memory leak in an error handling path (medium 5.5)
- [CVE-2021-46984](https://insights.sbomify.com/CVE-2021-46984/): kyber: fix out of bounds access when preempted (high 7.8)
- [CVE-2021-46983](https://insights.sbomify.com/CVE-2021-46983/): nvmet-rdma: Fix NULL deref when SEND is completed with error (high 7.5)
- [CVE-2021-46982](https://insights.sbomify.com/CVE-2021-46982/): f2fs: compress: fix race condition of overwrite vs truncate (medium 4.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/51/