CVE-2021-47212

A vulnerability was found in the Linux kernel, affecting the Mellanox MLX5 driver. This issue involves improper error handling in the UCTX user context and UMEM user memory operations. When the system executes a destroy command during a fast unload flow, it should return a success code...

CVE-2021-47209

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent dead task groups from regaining cfsrq's Kevin is reporting crashes which point to a use-after-free of a cfsrq in updateblockedaverages. Initial debugging revealed that we've live cfsrq's onlist=1 in an about t...

CVE-2024-26816

A flaw was found in the Linux kernel due to improper handling of relocations in the .notes section of ELF files. This flaw allows an attacker to bypass security mechanisms or corrupt memory. Mitigation Mitigation for this issue is either not available or the currently available options do not mee...

CVE-2021-47219

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix out-of-bound read in respreporttgtpgs The following issue was observed running syzkaller: BUG: KASAN: slab-out-of-bounds in memcpy include/linux/string.h:377 inline BUG: KASAN: slab-out-of-bounds in...

CVE-2021-47201

In the Linux kernel, the following vulnerability has been resolved: iavf: free qvectors before queues in iavfdisablevf iavffreequeues clears adapter-numactivequeues, which iavffreeqvectors relies on, so swap the order of these two function calls in iavfdisablevf. This resolves a panic encountered...

CVE-2021-47210

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Remove WARNON in tps6598xblockread Calling tps6598xblockread with a higher than allowed len can be handled by just returning an error. There's no need to crash systems with panic-on-warn enabled...

CVE-2021-47183

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix link down processing to address NULL pointer dereference If an FC link down transition while PLOGIs are outstanding to fabric well known addresses, outstanding ABTS requests may result in a NULL pointer dereferenc...

CVE-2021-47184

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL ptr dereference on VSI filter sync Remove the reason of null pointer dereference in sync VSI filters. Added new I40EVSIRELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sy...

CVE-2021-47200

In the Linux kernel, the following vulnerability has been resolved: drm/prime: Fix use after free in mmap with drmgemttmmmap drmgemttmmmap drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drmgemprimemmap, that drop will free the gem object, and the...

CVE-2021-47201

In the Linux kernel, the following vulnerability has been resolved: iavf: free qvectors before queues in iavfdisablevf iavffreequeues clears adapter-numactivequeues, which iavffreeqvectors relies on, so swap the order of these two function calls in iavfdisablevf. This resolves a panic encountered...

CVE-2021-47218 selinux: fix NULL-pointer dereference when hashtab allocation fails

In the Linux kernel, the following vulnerability has been resolved: selinux: fix NULL-pointer dereference when hashtab allocation fails When the hash table slot array allocation fails in hashtabinit, h-size is left initialized with a non-zero value, but the h-htable pointer is NULL. This may then...

CVE-2021-47210

The CVE-2021-47210 issue affects the Linux kernel USB Type-C subsystem (tipd) specifically in tps6598x_block_read. The fix removes a WARN_ON and ensures that calls with length exceeding the allowed maximum return an error instead of triggering a crash under panic-on-warn. This change mitigates lo...

CVE-2021-47209

The CVE-2021-47209 vulnerability affects the Linux kernel sched/fair subsystem, where a race can let cfs_rq structures be re-added to a dying task group and freed while still linked. Concrete details in connected docs show the root cause lies with tg_unthrottle_up() invoked from sched_cfs_period_...

CVE-2021-47204 net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove

In the Linux kernel, the following vulnerability has been resolved: net: dpaa2-eth: fix use-after-free in dpaa2ethremove Access to netdev after freenetdev will cause use-after-free bug. Move debug log before freenetdev call to avoid it...

CVE-2021-47201 iavf: free q_vectors before queues in iavf_disable_vf

In the Linux kernel, the following vulnerability has been resolved: iavf: free qvectors before queues in iavfdisablevf iavffreequeues clears adapter-numactivequeues, which iavffreeqvectors relies on, so swap the order of these two function calls in iavfdisablevf. This resolves a panic encountered...

CVE-2021-47201

Summary (CVE-2021-47201) : In the Linux kernel, the iavf driver vulnerability is resolved by swapping the call order in iavf_disable_vf() so that iavf_free_queues() occurs after iavf_free_q_vectors(). The bug caused a panic when the interface was disabled and then re-enabled after PF communicatio...

CVE-2021-47191

CVE-2021-47191 affects the Linux kernel’s SCSI debug path (scsi_debug) and fixes an out-of-bounds read in resp_readcap16 caused by treating alloc_len as a signed int, which could lead to an OOB in sg_copy_buffer when handling large allocation lengths. The root cause is the incorrect type for allo...

CVE-2021-47184 i40e: Fix NULL ptr dereference on VSI filter sync

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL ptr dereference on VSI filter sync Remove the reason of null pointer dereference in sync VSI filters. Added new I40EVSIRELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sy...

CVE-2021-47185 tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc

In the Linux kernel, the following vulnerability has been resolved: tty: ttybuffer: Fix the softlockup issue in flushtoldisc When running ltp testcaseltp/testcases/kernel/pty/pty04.c with arm64, there is a soft lockup, which look like this one: Workqueue: eventsunbound flushtoldisc Call trace:...

CVE-2021-47181

The CVE-2021-47181 issue affects the Linux kernel code path for usb: musb: tusb6010. The root cause is a missing NULL check after platform_get_resource(), which can lead to a NULL pointer dereference if platform_get_resource() returns NULL. Public sources describe the vulnerability and impact as ...