# Vulnerabilities published in 2021


- [CVE-2021-46981](https://insights.sbomify.com/CVE-2021-46981/): nbd: Fix NULL pointer in flush_workqueue (medium 5.5)
- [CVE-2021-46980](https://insights.sbomify.com/CVE-2021-46980/): usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 (high 7.1)
- [CVE-2021-46979](https://insights.sbomify.com/CVE-2021-46979/): iio: core: fix ioctl handlers removal (medium 5.5)
- [CVE-2021-46978](https://insights.sbomify.com/CVE-2021-46978/): KVM: nVMX: Always make an attempt to map eVMCS after migration (high 7.8)
- [CVE-2021-46977](https://insights.sbomify.com/CVE-2021-46977/): KVM: VMX: Disable preemption when probing user return MSRs (high 7.8)
- [CVE-2021-46976](https://insights.sbomify.com/CVE-2021-46976/): drm/i915: Fix crash in auto_retire (medium 5.5)
- [CVE-2021-46974](https://insights.sbomify.com/CVE-2021-46974/): bpf: Fix masking negation logic upon negative dst register (high 7.1)
- [CVE-2021-46973](https://insights.sbomify.com/CVE-2021-46973/): net: qrtr: Avoid potential use after free in MHI send (high 7.8)
- [CVE-2021-46972](https://insights.sbomify.com/CVE-2021-46972/): ovl: fix leaked dentry (medium 5.5)
- [CVE-2021-46971](https://insights.sbomify.com/CVE-2021-46971/): perf/core: Fix unconditional security_locked_down() call (low 3.3)
- [CVE-2021-46970](https://insights.sbomify.com/CVE-2021-46970/): bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue (medium 5.5)
- [CVE-2021-46969](https://insights.sbomify.com/CVE-2021-46969/): bus: mhi: core: Fix invalid error returning in mhi_queue (high 7.8)
- [CVE-2021-46968](https://insights.sbomify.com/CVE-2021-46968/): s390/zcrypt: fix zcard and zqueue hot-unplug memleak (medium 5.5)
- [CVE-2021-46967](https://insights.sbomify.com/CVE-2021-46967/): vhost-vdpa: fix vm_flags for virtqueue doorbell mapping (high 7.8)
- [CVE-2021-46966](https://insights.sbomify.com/CVE-2021-46966/): ACPI: custom_method: fix potential use-after-free issue (high 7.8)
- [CVE-2021-46965](https://insights.sbomify.com/CVE-2021-46965/): mtd: physmap: physmap-bt1-rom: Fix unintentional stack access (high 7.1)
- [CVE-2021-46964](https://insights.sbomify.com/CVE-2021-46964/): scsi: qla2xxx: Reserve extra IRQ vectors (medium 5.5)
- [CVE-2021-46963](https://insights.sbomify.com/CVE-2021-46963/): scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (high 7.8)
- [CVE-2021-46962](https://insights.sbomify.com/CVE-2021-46962/): mmc: uniphier-sd: Fix a resource leak in the remove function (medium 5.5)
- [CVE-2021-46961](https://insights.sbomify.com/CVE-2021-46961/): irqchip/gic-v3: Do not enable irqs when handling spurious interrups (medium 5.5)
- [CVE-2021-46960](https://insights.sbomify.com/CVE-2021-46960/): cifs: Return correct error code from smb2_get_enc_key (high 7.5)
- [CVE-2021-46959](https://insights.sbomify.com/CVE-2021-46959/): spi: Fix use-after-free with devm_spi_alloc_* (high 7.8)
- [CVE-2021-46958](https://insights.sbomify.com/CVE-2021-46958/): btrfs: fix race between transaction aborts and fsyncs leading to use-after-free (high 7.8)
- [CVE-2021-46957](https://insights.sbomify.com/CVE-2021-46957/): riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe (medium 5.5)
- [CVE-2021-46956](https://insights.sbomify.com/CVE-2021-46956/): virtiofs: fix memory leak in virtio_fs_probe() (medium 5.5)
- [CVE-2021-46955](https://insights.sbomify.com/CVE-2021-46955/): openvswitch: fix stack OOB read while fragmenting IPv4 packets (high 8.2)
- [CVE-2021-46954](https://insights.sbomify.com/CVE-2021-46954/): net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (high 7.1)
- [CVE-2021-46953](https://insights.sbomify.com/CVE-2021-46953/): ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (medium 6.7)
- [CVE-2021-46952](https://insights.sbomify.com/CVE-2021-46952/): NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds (high 7.1)
- [CVE-2021-46951](https://insights.sbomify.com/CVE-2021-46951/): tpm: efi: Use local variable for calculating final log size (medium 5.5)
- [CVE-2021-46950](https://insights.sbomify.com/CVE-2021-46950/): md/raid1: properly indicate failure when ending a failed write request (high 7.8)
- [CVE-2021-46949](https://insights.sbomify.com/CVE-2021-46949/): sfc: farch: fix TX queue lookup in TX flush done handling (medium 5.5)
- [CVE-2021-46948](https://insights.sbomify.com/CVE-2021-46948/): sfc: farch: fix TX queue lookup in TX event handling (high 7.5)
- [CVE-2021-46947](https://insights.sbomify.com/CVE-2021-46947/): sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues (medium 5.5)
- [CVE-2021-46945](https://insights.sbomify.com/CVE-2021-46945/): ext4: always panic when errors=panic is specified (medium 5.5)
- [CVE-2021-46944](https://insights.sbomify.com/CVE-2021-46944/): media: staging/intel-ipu3: Fix memory leak in imu_fmt (medium 5.5)
- [CVE-2021-46943](https://insights.sbomify.com/CVE-2021-46943/): media: staging/intel-ipu3: Fix set_fmt error handling (high 7.8)
- [CVE-2021-46942](https://insights.sbomify.com/CVE-2021-46942/): io_uring: fix shared sqpoll cancellation hangs (medium 5.5)
- [CVE-2021-46941](https://insights.sbomify.com/CVE-2021-46941/): usb: dwc3: core: Do core softreset when switch mode (medium 5.5)
- [CVE-2021-46940](https://insights.sbomify.com/CVE-2021-46940/): tools/power turbostat: Fix offset overflow issue in index converting (medium 5.5)
- [CVE-2021-46939](https://insights.sbomify.com/CVE-2021-46939/): tracing: Restructure trace_clock_global() to never block (medium 5.5)
- [CVE-2021-46938](https://insights.sbomify.com/CVE-2021-46938/): dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (high 7.8)
- [CVE-2021-46937](https://insights.sbomify.com/CVE-2021-46937/): mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' (medium 5.5)
- [CVE-2021-46936](https://insights.sbomify.com/CVE-2021-46936/): net: fix use-after-free in tw_timer_handler (high 7.8)
- [CVE-2021-46935](https://insights.sbomify.com/CVE-2021-46935/): binder: fix async_free_space accounting for empty parcels (medium 5.5)
- [CVE-2021-46934](https://insights.sbomify.com/CVE-2021-46934/): i2c: validate user data in compat ioctl (low 3.3)
- [CVE-2021-46933](https://insights.sbomify.com/CVE-2021-46933/): usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (high 7.8)
- [CVE-2021-46932](https://insights.sbomify.com/CVE-2021-46932/): Input: appletouch - initialize work before device registration (medium 5.5)
- [CVE-2021-46931](https://insights.sbomify.com/CVE-2021-46931/): net/mlx5e: Wrap the tx reporter dump callback to extract the sq (medium 5.5)
- [CVE-2021-46930](https://insights.sbomify.com/CVE-2021-46930/): usb: mtu3: fix list_head check warning (medium 5.5)
- [CVE-2021-46929](https://insights.sbomify.com/CVE-2021-46929/): sctp: use call_rcu to free endpoint (high 7.8)
- [CVE-2021-46928](https://insights.sbomify.com/CVE-2021-46928/): parisc: Clear stale IIR value on instruction access rights trap (medium 5.5)
- [CVE-2021-46927](https://insights.sbomify.com/CVE-2021-46927/): nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert (medium 5.5)
- [CVE-2021-46926](https://insights.sbomify.com/CVE-2021-46926/): ALSA: hda: intel-sdw-acpi: harden detection of controller (medium 5.5)
- [CVE-2021-46925](https://insights.sbomify.com/CVE-2021-46925/): net/smc: fix kernel panic caused by race of smc_sock (high 7.8)
- [CVE-2021-46924](https://insights.sbomify.com/CVE-2021-46924/): NFC: st21nfca: Fix memory leak in device probe and remove (medium 5.5)
- [CVE-2021-46923](https://insights.sbomify.com/CVE-2021-46923/): fs/mount_setattr: always cleanup mount_kattr (medium 5.5)
- [CVE-2021-46922](https://insights.sbomify.com/CVE-2021-46922/): KEYS: trusted: Fix TPM reservation for seal/unseal (high 7.8)
- [CVE-2021-46921](https://insights.sbomify.com/CVE-2021-46921/): locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (high 7.8)
- [CVE-2021-46920](https://insights.sbomify.com/CVE-2021-46920/): dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback (medium 5.5)
- [CVE-2021-46919](https://insights.sbomify.com/CVE-2021-46919/): dmaengine: idxd: fix wq size store permission state (medium 5.5)
- [CVE-2021-46918](https://insights.sbomify.com/CVE-2021-46918/): dmaengine: idxd: clear MSIX permission entry on shutdown (medium 5.5)
- [CVE-2021-46917](https://insights.sbomify.com/CVE-2021-46917/): dmaengine: idxd: fix wq cleanup of WQCFG registers (medium 5.5)
- [CVE-2021-46916](https://insights.sbomify.com/CVE-2021-46916/): ixgbe: Fix NULL pointer dereference in ethtool loopback test (medium 5.5)
- [CVE-2021-46915](https://insights.sbomify.com/CVE-2021-46915/): netfilter: nft_limit: avoid possible divide error in nft_limit_init (medium 5.5)
- [CVE-2021-46914](https://insights.sbomify.com/CVE-2021-46914/): ixgbe: fix unbalanced device enable/disable in suspend/resume (medium 5.5)
- [CVE-2021-46913](https://insights.sbomify.com/CVE-2021-46913/): netfilter: nftables: clone set element expression template (high 7.8)
- [CVE-2021-46912](https://insights.sbomify.com/CVE-2021-46912/): net: Make tcp_allowed_congestion_control readonly in non-init netns (high 7.3)
- [CVE-2021-46911](https://insights.sbomify.com/CVE-2021-46911/): ch_ktls: Fix kernel panic (critical 9.8)
- [CVE-2021-46910](https://insights.sbomify.com/CVE-2021-46910/): ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled (high 7.0)
- [CVE-2021-46909](https://insights.sbomify.com/CVE-2021-46909/): ARM: footbridge: fix PCI interrupt mapping (medium 5.5)
- [CVE-2021-46908](https://insights.sbomify.com/CVE-2021-46908/): bpf: Use correct permission flag for mixed signed bounds arithmetic (high 7.1)
- [CVE-2021-46906](https://insights.sbomify.com/CVE-2021-46906/): HID: usbhid: fix info leak in hid_submit_ctrl (medium 5.5)
- [CVE-2021-46905](https://insights.sbomify.com/CVE-2021-46905/): net: hso: fix NULL-deref on disconnect regression (medium 5.5)
- [CVE-2021-46904](https://insights.sbomify.com/CVE-2021-46904/): net: hso: fix null-ptr-deref during tty device unregistration (medium 5.5)
- [CVE-2021-46903](https://insights.sbomify.com/CVE-2021-46903/): Missing authorization in meinbergglobal:lantime firmware (medium 6.5)
- [CVE-2021-46902](https://insights.sbomify.com/CVE-2021-46902/): Path traversal in meinbergglobal:lantime firmware (high 7.2)
- [CVE-2021-46901](https://insights.sbomify.com/CVE-2021-46901/): Memory corruption in cetic:cetic-6lbr (high 7.5)
- [CVE-2021-46900](https://insights.sbomify.com/CVE-2021-46900/): Weak cryptography in sympa:sympa (high 7.5)
- [CVE-2021-46899](https://insights.sbomify.com/CVE-2021-46899/): Misconfiguration in antonymale:synctrayzor (high 7.8)
- [CVE-2021-46898](https://insights.sbomify.com/CVE-2021-46898/): Django Grappelli Open Redirect vulnerability (medium 6.1)
- [CVE-2021-46897](https://insights.sbomify.com/CVE-2021-46897/): Wagtail CRX CodeRed Extensions vulnerable to Path Traversal (medium 6.5)
- [CVE-2021-46896](https://insights.sbomify.com/CVE-2021-46896/): Memory corruption in dronecode:px4 drone autopilot (high 7.5)
- [CVE-2021-46895](https://insights.sbomify.com/CVE-2021-46895/): Security feature bypass in EMUI (critical 9.1)
- [CVE-2021-46894](https://insights.sbomify.com/CVE-2021-46894/): Use after free in EMUI (critical 9.8)
- [CVE-2021-46893](https://insights.sbomify.com/CVE-2021-46893/): Other in EMUI (high 7.5)
- [CVE-2021-46892](https://insights.sbomify.com/CVE-2021-46892/): Weak cryptography in EMUI (high 7.5)
- [CVE-2021-46891](https://insights.sbomify.com/CVE-2021-46891/): Missing authorization in EMUI (critical 9.8)
- [CVE-2021-46890](https://insights.sbomify.com/CVE-2021-46890/): Missing authorization in EMUI (critical 9.8)
- [CVE-2021-46889](https://insights.sbomify.com/CVE-2021-46889/): Cross-site scripting in 10web:photo gallery (medium 6.1)
- [CVE-2021-46888](https://insights.sbomify.com/CVE-2021-46888/): Cross-site scripting in hledger:hledger (medium 5.4)
- [CVE-2021-46887](https://insights.sbomify.com/CVE-2021-46887/): Memory corruption in EMUI (critical 9.8)
- [CVE-2021-46886](https://insights.sbomify.com/CVE-2021-46886/): Integer overflow in EMUI (high 7.5)
- [CVE-2021-46885](https://insights.sbomify.com/CVE-2021-46885/): Integer overflow in EMUI (high 7.5)
- [CVE-2021-46884](https://insights.sbomify.com/CVE-2021-46884/): Integer overflow in EMUI (high 7.5)
- [CVE-2021-46883](https://insights.sbomify.com/CVE-2021-46883/): Integer overflow in EMUI (high 7.5)
- [CVE-2021-46882](https://insights.sbomify.com/CVE-2021-46882/): Integer overflow in EMUI (high 7.5)
- [CVE-2021-46881](https://insights.sbomify.com/CVE-2021-46881/): Integer overflow in EMUI (high 7.5)
- [CVE-2021-46880](https://insights.sbomify.com/CVE-2021-46880/): Security feature bypass in openbsd:libressl (critical 9.8)
- [CVE-2021-46879](https://insights.sbomify.com/CVE-2021-46879/): Memory corruption in treasuredata:fluent bit (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/52/