MSC-2021-1688

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

PT-2021-27103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description The issue is related to a potential security problem in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have not ye...

PT-2021-27146

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to a potential security vulnerability in the Linux Kernel, where the function ipip6 dev free is called from sit init net. The actual impact and attack plausibility have n...

CVE-2021-38007

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

GSD-2021-1002603 scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()

scsi: pm80xx: Do not call scsiremovehost in pm8001alloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

GSD-2021-1002584 HID: bigbenff: prevent null pointer dereference

HID: bigbenff: prevent null pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

GSD-2021-1002581 serial: liteuart: fix use-after-free and memleak on unbind

serial: liteuart: fix use-after-free and memleak on unbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

GSD-2021-1002577 xhci: Fix commad ring abort, write all 64 bits to CRCR register.

xhci: Fix commad ring abort, write all 64 bits to CRCR register. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

GSD-2021-1002576 x86/xen: Add xenpv_restore_regs_and_return_to_usermode()

x86/xen: Add xenpvrestoreregsandreturntousermode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

GSD-2021-1002572 drm/msm/devfreq: Fix OPP refcnt leak

drm/msm/devfreq: Fix OPP refcnt leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit a4eb55901df1dce8c6944438bbdf57caf08911e2,...

GSD-2021-1002543 ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()

ethtool: ioctl: fix potential NULL deref in ethtoolsetcoalesce This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002532 ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE

ARM: socfpga: Fix crash with CONFIGFORTIRYSOURCE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002511 ALSA: pcm: oss: Fix negative period/buffer sizes

ALSA: pcm: oss: Fix negative period/buffer sizes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002510 net/sched: fq_pie: prevent dismantle issue

net/sched: fqpie: prevent dismantle issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002508 seg6: fix the iif in the IPv6 socket control block

seg6: fix the iif in the IPv6 socket control block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002505 HID: bigbenff: prevent null pointer dereference

HID: bigbenff: prevent null pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002504 can: pch_can: pch_can_rx_normal: fix use after free

can: pchcan: pchcanrxnormal: fix use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.85 by commit...

GSD-2021-1002500 xhci: Fix commad ring abort, write all 64 bits to CRCR register.

xhci: Fix commad ring abort, write all 64 bits to CRCR register. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit...

GSD-2021-1002483 drm/amd/amdgpu: fix potential memleak

drm/amd/amdgpu: fix potential memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.84 by commit c746945fb6bcbe3863c9ea6369c7ef376e38e5e...

GSD-2021-1002453 can: pch_can: pch_can_rx_normal: fix use after free

can: pchcan: pchcanrxnormal: fix use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.165 by commit...