Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 52 of 273.
- CVE-2021-46981 nbd: Fix NULL pointer in flush_workqueue
- CVE-2021-46980 usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4
- CVE-2021-46979 iio: core: fix ioctl handlers removal
- CVE-2021-46978 KVM: nVMX: Always make an attempt to map eVMCS after migration
- CVE-2021-46977 KVM: VMX: Disable preemption when probing user return MSRs
- CVE-2021-46976 drm/i915: Fix crash in auto_retire
- CVE-2021-46974 bpf: Fix masking negation logic upon negative dst register
- CVE-2021-46973 net: qrtr: Avoid potential use after free in MHI send
- CVE-2021-46972 ovl: fix leaked dentry
- CVE-2021-46971 perf/core: Fix unconditional security_locked_down() call
- CVE-2021-46970 bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue
- CVE-2021-46969 bus: mhi: core: Fix invalid error returning in mhi_queue
- CVE-2021-46968 s390/zcrypt: fix zcard and zqueue hot-unplug memleak
- CVE-2021-46967 vhost-vdpa: fix vm_flags for virtqueue doorbell mapping
- CVE-2021-46966 ACPI: custom_method: fix potential use-after-free issue
- CVE-2021-46965 mtd: physmap: physmap-bt1-rom: Fix unintentional stack access
- CVE-2021-46964 scsi: qla2xxx: Reserve extra IRQ vectors
- CVE-2021-46963 scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
- CVE-2021-46962 mmc: uniphier-sd: Fix a resource leak in the remove function
- CVE-2021-46961 irqchip/gic-v3: Do not enable irqs when handling spurious interrups
- CVE-2021-46960 cifs: Return correct error code from smb2_get_enc_key
- CVE-2021-46959 spi: Fix use-after-free with devm_spi_alloc_*
- CVE-2021-46958 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free
- CVE-2021-46957 riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe
- CVE-2021-46956 virtiofs: fix memory leak in virtio_fs_probe()
- CVE-2021-46955 openvswitch: fix stack OOB read while fragmenting IPv4 packets
- CVE-2021-46954 net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets
- CVE-2021-46953 ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
- CVE-2021-46952 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
- CVE-2021-46951 tpm: efi: Use local variable for calculating final log size
- CVE-2021-46950 md/raid1: properly indicate failure when ending a failed write request
- CVE-2021-46949 sfc: farch: fix TX queue lookup in TX flush done handling
- CVE-2021-46948 sfc: farch: fix TX queue lookup in TX event handling
- CVE-2021-46947 sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues
- CVE-2021-46945 ext4: always panic when errors=panic is specified
- CVE-2021-46944 media: staging/intel-ipu3: Fix memory leak in imu_fmt
- CVE-2021-46943 media: staging/intel-ipu3: Fix set_fmt error handling
- CVE-2021-46942 io_uring: fix shared sqpoll cancellation hangs
- CVE-2021-46941 usb: dwc3: core: Do core softreset when switch mode
- CVE-2021-46940 tools/power turbostat: Fix offset overflow issue in index converting
- CVE-2021-46939 tracing: Restructure trace_clock_global() to never block
- CVE-2021-46938 dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
- CVE-2021-46937 mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'
- CVE-2021-46936 net: fix use-after-free in tw_timer_handler
- CVE-2021-46935 binder: fix async_free_space accounting for empty parcels
- CVE-2021-46934 i2c: validate user data in compat ioctl
- CVE-2021-46933 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- CVE-2021-46932 Input: appletouch - initialize work before device registration
- CVE-2021-46931 net/mlx5e: Wrap the tx reporter dump callback to extract the sq
- CVE-2021-46930 usb: mtu3: fix list_head check warning
- CVE-2021-46929 sctp: use call_rcu to free endpoint
- CVE-2021-46928 parisc: Clear stale IIR value on instruction access rights trap
- CVE-2021-46927 nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert
- CVE-2021-46926 ALSA: hda: intel-sdw-acpi: harden detection of controller
- CVE-2021-46925 net/smc: fix kernel panic caused by race of smc_sock
- CVE-2021-46924 NFC: st21nfca: Fix memory leak in device probe and remove
- CVE-2021-46923 fs/mount_setattr: always cleanup mount_kattr
- CVE-2021-46922 KEYS: trusted: Fix TPM reservation for seal/unseal
- CVE-2021-46921 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
- CVE-2021-46920 dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback
- CVE-2021-46919 dmaengine: idxd: fix wq size store permission state
- CVE-2021-46918 dmaengine: idxd: clear MSIX permission entry on shutdown
- CVE-2021-46917 dmaengine: idxd: fix wq cleanup of WQCFG registers
- CVE-2021-46916 ixgbe: Fix NULL pointer dereference in ethtool loopback test
- CVE-2021-46915 netfilter: nft_limit: avoid possible divide error in nft_limit_init
- CVE-2021-46914 ixgbe: fix unbalanced device enable/disable in suspend/resume
- CVE-2021-46913 netfilter: nftables: clone set element expression template
- CVE-2021-46912 net: Make tcp_allowed_congestion_control readonly in non-init netns
- CVE-2021-46911 ch_ktls: Fix kernel panic
- CVE-2021-46910 ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled
- CVE-2021-46909 ARM: footbridge: fix PCI interrupt mapping
- CVE-2021-46908 bpf: Use correct permission flag for mixed signed bounds arithmetic
- CVE-2021-46906 HID: usbhid: fix info leak in hid_submit_ctrl
- CVE-2021-46905 net: hso: fix NULL-deref on disconnect regression
- CVE-2021-46904 net: hso: fix null-ptr-deref during tty device unregistration
- CVE-2021-46903 Missing authorization in meinbergglobal:lantime firmware
- CVE-2021-46902 Path traversal in meinbergglobal:lantime firmware
- CVE-2021-46901 Memory corruption in cetic:cetic-6lbr
- CVE-2021-46900 Weak cryptography in sympa:sympa
- CVE-2021-46899 Misconfiguration in antonymale:synctrayzor
- CVE-2021-46898 Django Grappelli Open Redirect vulnerability
- CVE-2021-46897 Wagtail CRX CodeRed Extensions vulnerable to Path Traversal
- CVE-2021-46896 Memory corruption in dronecode:px4 drone autopilot
- CVE-2021-46895 Security feature bypass in EMUI
- CVE-2021-46894 Use after free in EMUI
- CVE-2021-46893 Other in EMUI
- CVE-2021-46892 Weak cryptography in EMUI
- CVE-2021-46891 Missing authorization in EMUI
- CVE-2021-46890 Missing authorization in EMUI
- CVE-2021-46889 Cross-site scripting in 10web:photo gallery
- CVE-2021-46888 Cross-site scripting in hledger:hledger
- CVE-2021-46887 Memory corruption in EMUI
- CVE-2021-46886 Integer overflow in EMUI
- CVE-2021-46885 Integer overflow in EMUI
- CVE-2021-46884 Integer overflow in EMUI
- CVE-2021-46883 Integer overflow in EMUI
- CVE-2021-46882 Integer overflow in EMUI
- CVE-2021-46881 Integer overflow in EMUI
- CVE-2021-46880 Security feature bypass in openbsd:libressl
- CVE-2021-46879 Memory corruption in treasuredata:fluent bit