PT-2021-26585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.15 Description A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26614

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.17 Description The issue is related to the SCSI core in the Linux Kernel, where the LLD module reference count is put after the SCSI device is released. The actual impact and attack plausibility have not ye...

PT-2021-26649

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.17 through 5.14 Description: A potential issue exists in the Linux Kernel, specifically related to a mismatch between reconstructed freelist depth and count in the slub allocator. The actual impact and attack...

PT-2021-30649

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26396

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.292 Description The issue is related to the SCSI core in the Linux Kernel, where the LLD module reference count is put after the SCSI device is released. The actual impact and attack plausibility have not ye...

PT-2021-26437

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.255 Description The issue is related to the SCSI core in the Linux Kernel, where the LLD module reference count is put after the SCSI device is released. The actual impact and attack plausibility have not y...

PT-2021-26452

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description A potential issue exists in the Linux Kernel, specifically related to a mismatch between reconstructed freelist depth and count in the slub module. The actual impact and attack plausibility...

PT-2021-26460

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.216 Description The issue is related to the SCSI core in the Linux Kernel, where the LLD module reference count is put after the SCSI device is released. The actual impact and attack plausibility have not y...

PT-2021-26678

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to the SCSI core in the Linux Kernel, where the LLD module reference count is put after the SCSI device is released. The actual impact and attack plausibility have not yet...

PT-2021-26654

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2021-1912

Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

GHSA-M342-FF57-4JCC Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`

Impact The shape inference functions for SparseCountSparseOutput can trigger a read outside of bounds of heap allocated array: python import tensorflow as tf @tf.function def func: return tf.rawops.SparseCountSparseOutput indices=1, values=1, denseshape=10, weights=, binaryoutput= True func The...

GHSA-9CRF-C6QR-R273 Integer division by 0 in `tf.raw_ops.AllToAll`

Impact The shape inference code for AllToAll can be made to execute a division by 0: python import tensorflow as tf @tf.function def func: return tf.rawops.AllToAll input=0.0, 0.1652, 0.6543, groupassignment=1, -1, concatdimension=0, splitdimension=0, splitcount=0 func This occurs whenever the...

binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

USN-5137-1: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

PYSEC-2021-825

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

CVE-2021-41218

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

PYSEC-2021-410

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

PYSEC-2021-410

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

PYSEC-2021-825

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...