CVE-2021-47387

CVE-2021-47387 is a Linux kernel vulnerability in the cpufreq: schedutil governor related to freeing sugov_tunables. The original sugov_tunables_free() was split: sugov_clear_global_tunables() clears the global_tunables, and a new sugov_tunables_free() is used as kobj_type::release to safely free...

CVE-2021-47385

CVE-2021-47385 is a Linux kernel hwmon issue affecting the w83792d driver (and related subclients) where a NULL pointer dereference could occur if a value read from the device matches certain bit patterns. The root cause is dereferencing a NULL after reading val; the advisory notes that the patch...

CVE-2021-47381

The CVE-2021-47381 vulnerability is addressed in the Linux kernel under the ASoC: SOF component. The issue involved the DSP oops stack dump output contents, with the fix targeting the @buf argument passed to hex_dump_to_buffer() and the stack address used in the dump error output. The patch preve...

CVE-2021-47380

The CVE-2021-47380 issue affects the Linux kernel's HID AMD SFH driver. The vulnerability arises from a potential NULL pointer dereference when devm_add_action_or_reset() is invoked during registration, because the related data isn’t initialized yet. The provided patches move data initialization ...

CVE-2021-47365

The CVE-2021-47365 issue affects Linux kernel afs: a loop in afs_extend_writeback() could leak pages when expanding a writeback, due to removing the cleanup loop after switching from find_get_pages_contig() to xarray scanning. The fix adds an early-break handling that places the page on a referen...

CVE-2021-47356

The Linux kernel is vulnerable to a use-after-free flaw in the mISDN hardware support driver, specifically within the HFC_cleanup() function of the drivers/isdn/hardware/mISDN/hfcpci.c module. The issue arises because the module's remove path calls del_timer(), which does not wait for the timer h...

CVE-2021-47357

CVE-2021-47357 : In the Linux kernel, the atm: iphase removal path calls del_timer(), which can leave a timer handler running after the driver remove completes, causing a possible use-after-free. The fix uses del_timer_sync() to wait for the timer handler to finish and prevent rescheduling. Conne...

CVE-2021-47352

CVE-2021-47352 affects the Linux kernel’s virtio-net code. The issue arises from missing validation of the length reported by a device, which could lead to data corruption or loss. Affected context is confirmed by MiracleLinux/Nessus advisories that reference “virtio-net: Add validation for used ...

CVE-2021-47350

The Linux kernel on the powerpc platform is vulnerable to a lockup condition during a kernel exec fault . The issue stems from the is_exec_fault() function returning false because it incorrectly reads current->thread.regs->trap, which contains a user-space trap. On the 603 processor , speci...

CVE-2021-47348

The Linux kernel contains a vulnerability in the drm/amd/display component where the code incorrectly reads 8 bytes instead of the required 5 bytes from the target field. This memory over-read can result in data corruption if the trailing 3 bytes are non-zero. The issue was resolved by implementi...

CVE-2021-47347

CVE-2021-47347 affects the Linux kernel component related to the wl1251 driver. The vulnerability arises from a buffer overflow in wl1251_cmd_scan where memcpy is invoked without validating the input length. The issue is fixed by adding a length check to ensure the copied data stays within the ma...

CVE-2021-47343

CVE-2021-47343 concerns the Linux kernel dm_btree_remove path (drivers/md/persistent-data/dm-btree-remove.c). In remove_raw(), IO read errors can leave shadow_spine.root uninitialized and still be assigned to new_root at function end, and for dm-thin, pmd->details_root/details_root can become ...

CVE-2021-47328

CVE-2021-47328 corresponds to a Linux kernel vulnerability in the SCSI/iSCSI subsystem. The issue is a use-after-free condition in the iscsi_conn structure during resets if an unbind_target call has not occurred, allowing a race where iscsi_conn_teardown frees a connection while EH threads may st...

CVE-2021-47327

The Linux kernel contains a vulnerability in the iommu/arm-smmu driver where the arm_smmu_rpm_get() function causes a refcount leak of the "smmu" device. This occurs because the function calls pm_runtime_get_sync() , which increments the refcount even if the return value is less than 0. In certai...

CVE-2021-47325

CVE-2021-47325 concerns the Linux kernel’s iommu/arm-smmu subsystem. The issue is a refcount leak in arm_smmu_iova_to_phys_hard() where, on several error paths, the refcount of the underlying smmu object, increased by arm_smmu_rpm_get(), is not decremented. The fixed workaround described in the p...

CVE-2021-47320

CVE-2021-47320 is a Linux kernel vulnerability describing an ACL memory leak in the NFS code path. The issue centers on leaked entries in acl memory when creating posix_acl_create() paths, specifically in the NFS routines nfs3_proc_create() and nfs3_proc_mknod() error handling. The connected Ness...

CVE-2021-47321

CVE-2021-47321 : Linux kernel watchdog use-after-free due to del_timer() not waiting for the timer handler. The issue occurs in the driver remove path, where a timer may still be running after removal, risking a use-after-free. The fixed path uses del_timer_sync() to wait for the timer handler to...

CVE-2021-47318

CVE-2021-47318 concerns the Linux kernel’s topology management. The vulnerability arises in arch_topology where topology_scale_freq_tick() may dereference a pointer to a previously cleared scale_freq_data , due to missing protection before the data is freed. The issue is localized to the kernel’s...

CVE-2021-47313

The Linux kernel contains a memory leak vulnerability in the cpufreq: CPPC component, specifically within the cppc_cpufreq_cpu_init function. The issue occurs because the system allocates resources but fails to free them during policy ->init() failures. This results in uncontrolled resource co...

CVE-2021-47308

CVE-2021-47308 affects the Linux kernel SCSI libfc component, specifically fc_rport_prli_resp(), where an array index out-of-bounds condition was fixed. The vulnerability has a High impact (CVSS 3.1 base score 8.8) with adjacent/adversarial access, no user interaction, and requires no privileges....