GSD-2021-1002488 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3infoblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by...

GSD-2021-1002477 net/sched: sch_ets: don't peek at classes beyond 'nbands'

net/sched: schets: don't peek at classes beyond 'nbands' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

GSD-2021-1002473 ice: fix vsi->txq_map sizing

ice: fix vsi-txqmap sizing This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit 1eb5395add786613c7c5579d3947aa0b8f0ec241, it was...

GSD-2021-1002470 ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

ARM: socfpga: Fix crash with CONFIGFORTIRYSOURCE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

GSD-2021-1002469 proc/vmcore: fix clearing user buffer by properly using clear_user()

proc/vmcore: fix clearing user buffer by properly using clearuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

GSD-2021-1002460 ALSA: pcm: oss: Limit the period size to 16MB

ALSA: pcm: oss: Limit the period size to 16MB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.165 by commit...

GSD-2021-1002452 serial: core: fix transmit-buffer reset and memleak

serial: core: fix transmit-buffer reset and memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

GSD-2021-1002451 xhci: Fix commad ring abort, write all 64 bits to CRCR register.

xhci: Fix commad ring abort, write all 64 bits to CRCR register. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

GSD-2021-1002440 atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait

atlantic: Fix OOB read and write in hwatlutilsfwrpcwait This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.164 by commit...

GSD-2021-1002418 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.220 by commit...

GSD-2021-1002401 nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

nfc: fix potential NULL pointer deref in nfcgenldumpsesdone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.258 by commit...

GSD-2021-1002371 ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

ARM: socfpga: Fix crash with CONFIGFORTIRYSOURCE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.292 by commit...

GSD-2021-1002370 proc/vmcore: fix clearing user buffer by properly using clear_user()

proc/vmcore: fix clearing user buffer by properly using clearuser This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.292 by commit...

GSD-2021-1002361 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()

net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.294 by commit...

DBeaver XML External Entity Injection Vulnerability

DBeaver is a free multi-platform database tool for developers, Sql programmers, database administrators and analysts from the DBeaver team in the U.S. An XML external entity injection vulnerability exists in DBeaver, which stems from a web-based system or product that does not set the correct...

MediaTek Apusys 资源管理错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A resource management error vulnerability exists in MediaTek Apusys, which arises from the product's apusys component making duplicate references to freed memory. An attacker could use this vulnerability to cause a...

MediaTek Apusys资源管理错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A resource management error vulnerability exists in MediaTek Apusys, which arises from the product's apusys component making duplicate references to freed memory. An attacker could use this vulnerability to cause a...

openSUSE 15 Security Update : python-pip (openSUSE-SU-2021:4002-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:4002-1 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to...

MediaTek Apusys 资源管理错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A resource management error vulnerability exists in MediaTek Apusys, which arises from the product's apusys component making duplicate references to freed memory. An attacker could use this vulnerability to cause a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.8.24 security update

Red Hat OpenShift Container Platform release 4.8.24 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which...