UVI-2021-1000435 bus: qcom: Put child node before return

bus: qcom: Put child node before return This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000477 ACPI: scan: Fix a memory leak in an error handling path

ACPI: scan: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.269 by commit...

UVI-2021-1000100 media: dvbdev: Fix memory leak in dvb_media_device_free()

media: dvbdev: Fix memory leak in dvbmediadevicefree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000157 ovl: fix leaked dentry

ovl: fix leaked dentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.35 by commit 71d58457a8afc650da5d3292a7f7029317654d95, it was...

UVI-2021-1000410 i40e: Fix use-after-free in i40e_client_subtask()

i40e: Fix use-after-free in i40eclientsubtask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

UVI-2021-1000420 bnxt_en: Fix RX consumer index logic in the error path.

bnxten: Fix RX consumer index logic in the error path. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000041 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

UVI-2021-1000205 powerpc/64s: Fix crashes when toggling entry flush barrier

powerpc/64s: Fix crashes when toggling entry flush barrier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000344 wlcore: Fix buffer overrun by snprintf due to incorrect buffer size

wlcore: Fix buffer overrun by snprintf due to incorrect buffer size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000235 mt76: mt7921: fix possible invalid register access

mt76: mt7921: fix possible invalid register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000370 media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()

media: atomisp: Fix use after free in atomispalloccssstatbufs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1002301 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

scsi: lpfc: Fix listadd corruption in lpfcdraintxq This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002288 perf bpf: Avoid memory leak from perf_env__insert_btf()

perf bpf: Avoid memory leak from perfenvinsertbtf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002167 ptp: Fix possible memory leak in ptp_clock_register()

ptp: Fix possible memory leak in ptpclockregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002100 can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv

can: j1939: j1939netdevstart: fix UAF for rxkref of j1939priv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002062 drm/ttm: fix memleak in ttm_transfered_destroy

drm/ttm: fix memleak in ttmtransfereddestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...

UVI-2021-1001881 mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()

mm/mempolicy: do not allow illegal MPOLFNUMABALANCING | MPOLLOCAL in mbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1001836 net: mdiobus: Fix memory leak in __mdiobus_register

net: mdiobus: Fix memory leak in mdiobusregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

UVI-2021-1001825 drm/msm: Fix null pointer dereference on pointer edp

drm/msm: Fix null pointer dereference on pointer edp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.155 by commit...

UVI-2021-1001801 isdn: mISDN: Fix sleeping function called from invalid context

isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit...

UVI-2021-1001787 net: mdiobus: Fix memory leak in __mdiobus_register

net: mdiobus: Fix memory leak in mdiobusregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.253 by commit...

UVI-2021-1001773 net: encx24j600: check error in devm_regmap_init_encx24j600

net: encx24j600: check error in devmregmapinitencx24j600 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.290 by commit...

UVI-2021-1001686 i40e: Fix freeing of uninitialized misc IRQ vector

i40e: Fix freeing of uninitialized misc IRQ vector This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit...

UVI-2021-1001645 net: hns3: do not allow call hns3_nic_net_open repeatedly

net: hns3: do not allow call hns3nicnetopen repeatedly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

UVI-2021-1001601 cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

cpufreq: schedutil: Destroy mutex before kobjectput frees the memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.151 by commit...

UVI-2021-1001576 drm/amdgpu: fix gart.bo pin_count leak

drm/amdgpu: fix gart.bo pincount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.154 by commit 83d857d6b0967b6709cd38750c3ce2ed8ced1a9...

UVI-2021-1001560 sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb

sctp: break out if skbheaderpointer returns NULL in sctprcvootb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.209 by commit...

UVI-2021-1001554 usb: dwc2: check return value after calling platform_get_resource()

usb: dwc2: check return value after calling platformgetresource This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.210 by commit...

UVI-2021-1001538 crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

crypto: ccp - fix resource leaks in ccprunaesgcmcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

UVI-2021-1001529 netfilter: ipset: Fix oversized kvmalloc() calls

netfilter: ipset: Fix oversized kvmalloc calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

UVI-2021-1001518 tty: Fix out-of-bound vmalloc access in imageblit

tty: Fix out-of-bound vmalloc access in imageblit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.285 by commit...

UVI-2021-1001301 drm/sched: Avoid data corruptions

drm/sched: Avoid data corruptions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit 0687411e2a8858262de2fc4a1d576016fd77292e. F...

UVI-2021-1001278 usb: common: usb-conn-gpio: fix NULL pointer dereference of charger

usb: common: usb-conn-gpio: fix NULL pointer dereference of charger This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

UVI-2021-1001254 scsi: libfc: Fix array index out of bound exception

scsi: libfc: Fix array index out of bound exception This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.53 by commit...

UVI-2021-1001251 igc: Fix use-after-free error during reset

igc: Fix use-after-free error during reset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...

UVI-2021-1001247 bpf, sockmap: Fix potential memory leak on unlikely error case

bpf, sockmap: Fix potential memory leak on unlikely error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...

UVI-2021-1001176 bus: mhi: core: Validate channel ID when processing command completions

bus: mhi: core: Validate channel ID when processing command completions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

UVI-2021-1001097 mac80211: remove warning in ieee80211_get_sband()

mac80211: remove warning in ieee80211getsband This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.274 by commit...

UVI-2021-1000992 phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()

phy: phy-mtk-tphy: Fix some resource leaks in mtkphyinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000968 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

UVI-2021-1000965 NFS: Fix a potential NULL dereference in nfs_get_client()

NFS: Fix a potential NULL dereference in nfsgetclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000873 drm: Lock pointer access in drm_master_release()

drm: Lock pointer access in drmmasterrelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

UVI-2021-1000865 NFS: Fix use-after-free in nfs4_init_client()

NFS: Fix use-after-free in nfs4initclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...

UVI-2021-1000811 ext4: fix memory leak in ext4_fill_super

ext4: fix memory leak in ext4fillsuper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

UVI-2021-1000795 perf probe: Fix NULL pointer dereference in convert_variable_location()

perf probe: Fix NULL pointer dereference in convertvariablelocation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

UVI-2021-1000749 net: caif: fix memory leak in caif_device_notify

net: caif: fix memory leak in caifdevicenotify This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.125 by commit...

UVI-2021-1000733 ocfs2: fix data corruption by fallocate

ocfs2: fix data corruption by fallocate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.236 by commit...

UVI-2021-1000606 net: usb: fix memory leak in smsc75xx_bind

net: usb: fix memory leak in smsc75xxbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit...

UVI-2021-1000522 Bluetooth: SMP: Fail if remote and local public keys are identical

Bluetooth: SMP: Fail if remote and local public keys are identical This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.40 by commit...

UVI-2021-1000321 userfaultfd: release page in error path to avoid BUG_ON

userfaultfd: release page in error path to avoid BUGON This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...