CVE-2021-47523

CVE-2021-47523 affects the Linux kernel’s IB/hfi1 path. The issue is a leak of rcvhdrtail_dummy_kvaddr which is allocated in hfi1_init() and can be overwritten on a reinit path, leading to a memory leak. The fix moves the allocation to hfi1_alloc_devdata() and deallocation to hfi1_free_devdata(),...

CVE-2021-47522

CVE-2021-47522 affects the Linux kernel HID bigbenff handling in uhid. When emulating the device, if no output reports exist, report_field may be NULL, risking a NULL pointer dereference. The issue has been resolved in the Linux kernel (as described in connected Astra Linux advisory blocks). Impa...

CVE-2021-47519

CVE-2021-47519 concerns the Linux kernel CAN subsystem, specifically a memory leak in can/m_can_read_fifo. According to connected sources, if the second call to m_can_fifo_read() fails, code paths jump to an out_fail label and return before freeing the skb created by alloc_can_skb(), resulting in...

CVE-2021-47520

Summary (CVE-2021-47520): A Linux kernel issue in can: pch_can: pch_can_rx_normal leads to a use-after-free when dereferencing skb after netif_receive_skb(skb); the can_frame cf aliases skb memory and is dereferenced immediately after. The documented fix is a reordering of lines to prevent derefe...

CVE-2021-47515

CVE-2021-47515 relates to a Linux kernel seg6/IPv6 SRH encapsulation issue where the IPv6 socket CB iif was cleared when an IPv4 packet is encapsulated in an IPv6+SRH header. The root cause is that the IP6CB(skb) is cleared (memset) during SRH ip4ip6 encapsulation, and since skb->cb memory is ...

CVE-2021-47514

CVE-2021-47514 : In the Linux kernel, there is a vulnerability in the devlink netns refcount handling, specifically a leak in netns refcounts in devlink_nl_cmd_reload(). The root cause is that some error paths forgot to release a netns refcount during the devlink_reload() flow. The patch fixes th...

CVE-2021-47512

CVE-2021-47512 is a Linux kernel vulnerability in the net/sched fq_pie implementation. The root cause is that fq_pie_destroy() did not copy the timer handling logic from pie_destroy() and other qdiscs, potentially allowing a timer to rearm after del_timer_sync(&q->adapt_timer). The issue has b...

CVE-2021-47511

The CVE-2021-47511 issue affects the Linux kernel ALSA: pcm: oss path, where period size calculation could produce negative values treated as positive due to size_t. The OSS layer could pass an oversized period/buffer to lower layers. The authenticated fix changes handling to ssize_t with proper ...

CVE-2021-47509

CVE-2021-47509 affects the Linux kernel ALSA: pcm: oss, where the period size could be exhaustively allocated due to an overly large 31-bit limit. The fix sets a practical period-size limit of 16 MB to prevent memory exhaustion from temporary OSS buffers. This remediation is reflected in multiple...

CVE-2021-47506

CVE-2021-47506 – Linux kernel: nfsd delegation use-after-free fix Affected component: Linux kernel NFS server (nfsd) delegation handling. The vulnerability arises when a delegation break is processed after a call to vfs_setlease. A callback (nfsd4_cb_recall_prepare) adds the delegation to del_rec...

CVE-2021-47502

The CVE-2021-47502 issue relates to the Linux kernel ASoC codecs for wcd934x where channel mapping was mishandled when adding channels to multiple dai channel lists. The root cause was that channels could be added to more than one dai channel list or deleted from a list when not present, risking ...

CVE-2021-47501

CVE-2021-47501 affects the Linux kernel i40e driver. A NULL pointer dereference in i40e_dbg_dump_desc could crash when dumping VFs VSI RX/TX descriptors via debugfs. The root cause is missing VSI-type validation during dump; the fix adds a check to ensure the VSI type is correct before dumping RX...

CVE-2021-47499

CVE-2021-47499 – Linux kernel, iio: accel: kxcjk-1013 : The issue was a memory leak in the probe path for iio_triggered_buffer_setup, caused when ACPI type is ACPI_SMO8500 and data->dready_trig was not set, preventing freeing of allocated memory. The root cause is the probe-path logic leaving ...

CVE-2024-22588

CVE-2024-22588 concerns Kwik, where the commit 745fd4e2 does not discard unused encryption keys. Affected software is Kwik (QUIC protocol implementation). Root cause: retention of unused encryption keys rather than discarding them, as described across multiple sources (GitHub advisory, Red Hat en...

CVE-2024-33809

PingCAP TiDB v7.5.1 is affected by a buffer overflow vulnerability. The issue arises from reading a string from a column while the offset field in the column is not initialized, which can lead to database crashes and denial of service. The CVE entry notes a vulnerability in TiDB’s handling of col...

CVE-2024-35340

CVE-2024-35340 affects Tenda FH1206 (version 1.2.0.8(8155)). The vulnerability is a command injection via the cmdinput parameter at ip/goform/formexeCommand, with CVSSv3.1 base score 8.6 (High) and impact on confidentiality (H) and integrity/availability (L). Connected advisories indicate exploit...

CVE-2024-35339

The CVE-2024-35339 entry concerns Tenda FH1206, affected version 1.2.0.8(8155), with a command injection vulnerability exposed via the mac parameter at ip/goform/WriteFacMac. The issue is described as allowing remote command execution and is supported by multiple sources. The CVSSv3.1 vector indi...

CVE-2024-35592

CVE-2024-35592 affects Box-IM, specifically version 2.0. The vulnerability is an arbitrary file upload in the Upload function that enables arbitrary code execution via a crafted PDF file. The available sources indicate a high-severity impact (CVSS 3.1: 9.6, CRITICAL) with network vector, no privi...

CVE-2024-35591

CVE-2024-35591 affects O2OA version 8.3.8. The issue is an arbitrary file upload vulnerability in the application that allows an attacker to execute arbitrary code by uploading a crafted PDF file. The available connected sources describe the vulnerable component as the O2OA upload handling, with ...

CVE-2024-35595

CVE-2024-35595 affects Xintongda OA v2023.12.30.1 with an arbitrary file upload flaw in the File Preview function. The root cause is an upload handling weakness that can let an attacker craft a PDF to execute arbitrary code on the host. The connected PT-2024-26566 entry corroborates the affected ...