CVE-2021-37652: Use After Free

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.BoostedTreesCreateEnsemble can result in a use after free error if an attacker supplies specially crafted arguments. The implementation uses a reference counted resource an...

GSD-2021-1001468 netrom: Decrease sock refcount when sock timers expire

netrom: Decrease sock refcount when sock timers expire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.277 by commit...

UVI-2021-1001468 netrom: Decrease sock refcount when sock timers expire

netrom: Decrease sock refcount when sock timers expire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.277 by commit...

GSD-2021-1001337 iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation

iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

UVI-2021-1001337 iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation

iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

UVI-2021-1001333 iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails

iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

GSD-2021-1001333 iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails

iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

GSD-2021-1001274 iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails

iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

UVI-2021-1001273 iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation

iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

GSD-2021-1001273 iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation

iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

GSD-2021-1001199 iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails

iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

GSD-2021-1001196 iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation

iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

UVI-2021-1001196 iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation

iommu/arm-smmu: Fix armsmmudevice refcount leak in address translation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

...

GSD-2021-1000802 sch_htb: fix refcount leak in htb_parent_to_leaf_offload

schhtb: fix refcount leak in htbparenttoleafoffload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

UVI-2021-1000802 sch_htb: fix refcount leak in htb_parent_to_leaf_offload

schhtb: fix refcount leak in htbparenttoleafoffload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4999-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4999-1 advisory. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A...

kernel: use-after-free in fs/block_dev.c

A use-after-free flaw was observed in blkdevget, in fs/blockdev.c after a call to blkdevget fails, and its refcount gets freed/released. This problem may cause a denial of service problem with a special user privilege, and may even lead to a confidentiality issue...

CVE-2021-0606

A flaw was found in the Linux kernel. The function drmsyncobjhandletofd first calls drmsyncobjfind which increments the refcount of the object on success. In all of the drmsyncobjhandletofd error paths, the refcount is decremented, but in the success path the refcount should remain at +1 as the...

PT-2024-11326 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A reference counting issue in the Linux kernel's iommu/arm-smmu component causes a refcount leak when arm smmu rpm get fails. The arm smmu rpm get function invokes pm runtime get sync,...