UVI-2021-1001596 mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap

mac80211: limit injected vht mcs/nss in ieee80211parsetxradiotap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.151 by commit...

UVI-2021-1001543 xen/balloon: use a kernel thread instead a workqueue

xen/balloon: use a kernel thread instead a workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

UVI-2021-1001521 mcb: fix error handling in mcb_alloc_bus()

mcb: fix error handling in mcballocbus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.285 by commit...

UVI-2021-1001395 coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()

coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.198 by commit...

UVI-2021-1001393 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.198 by commit...

UVI-2021-1001390 smackfs: restrict bytes count in smk_set_cipso()

smackfs: restrict bytes count in smksetcipso This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.198 by commit...

UVI-2021-1001096 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.274 by commit...

UVI-2021-1001045 scsi: core: Fix error handling of scsi_host_alloc()

scsi: core: Fix error handling of scsihostalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

UVI-2021-1000932 net: ll_temac: Fix TX BD buffer overwrite

net: lltemac: Fix TX BD buffer overwrite This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

UVI-2021-1000821 x86/kvm: Teardown PV features on boot CPU as well

x86/kvm: Teardown PV features on boot CPU as well This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

UVI-2021-1000789 neighbour: allow NUD_NOARP entries to be forced GCed

neighbour: allow NUDNOARP entries to be forced GCed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commit...

UVI-2021-1000588 btrfs: do not BUG_ON in link_to_fixup_dir

btrfs: do not BUGON in linktofixupdir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.42 by commit 7e13db503918820e6333811cdc6f151dcea5090...

UVI-2021-1000244 i2c: sprd: fix reference leak when pm_runtime_get_sync fails

i2c: sprd: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000147 btrfs: fix race between transaction aborts and fsyncs leading to use-after-free

btrfs: fix race between transaction aborts and fsyncs leading to use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by comm...

UVI-2021-1000206 sched: Fix out-of-bound access in uclamp

sched: Fix out-of-bound access in uclamp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000196 nvmet-rdma: Fix NULL deref when SEND is completed with error

nvmet-rdma: Fix NULL deref when SEND is completed with error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000364 liquidio: Fix unintented sign extension of a left shift of a u16

liquidio: Fix unintented sign extension of a left shift of a u16 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000292 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000461 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1002336 scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()

scsi: scsidebug: Fix out-of-bound read in respreadcap16 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002324 iavf: free q_vectors before queues in iavf_disable_vf

iavf: free qvectors before queues in iavfdisablevf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002321 net/mlx5e: kTLS, Fix crash in RX resync flow

net/mlx5e: kTLS, Fix crash in RX resync flow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002318 net/mlx5e: CT, Fix multiple allocations and memleak of mod acts

net/mlx5e: CT, Fix multiple allocations and memleak of mod acts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002226 btrfs: fix memory ordering between normal and ordered work functions

btrfs: fix memory ordering between normal and ordered work functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.291 by commit...

UVI-2021-1002144 scsi: core: Put LLD module refcnt after SCSI device is released

scsi: core: Put LLD module refcnt after SCSI device is released This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.17 by commit...

UVI-2021-1001932 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

nvmem: Fix shift-out-of-bound UBSAN with byte size cells This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.288 by commit...

UVI-2021-1001897 drm/msm/a3xx: fix error handling in a3xx_gpu_init()

drm/msm/a3xx: fix error handling in a3xxgpuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

UVI-2021-1001739 tty: Fix out-of-bound vmalloc access in imageblit

tty: Fix out-of-bound vmalloc access in imageblit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001731 KVM: SVM: fix missing sev_decommission in sev_receive_start

KVM: SVM: fix missing sevdecommission in sevreceivestart This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001727 RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure

RDMA/cma: Fix listener leak in rdmacmalistenonall failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001406 dma-buf/sync_file: Don't leak fences on merge failure

dma-buf/syncfile: Don't leak fences on merge failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.241 by commit...

UVI-2021-1001291 coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()

coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...

UVI-2021-1001219 RDMA/cma: Fix rdma_resolve_route() memory leak

RDMA/cma: Fix rdmaresolveroute memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...

UVI-2021-1001108 i2c: robotfuzz-osif: fix control-request directions

i2c: robotfuzz-osif: fix control-request directions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.238 by commit...

UVI-2021-1001057 netfilter: nf_tables: initialize set before expression setup

netfilter: nftables: initialize set before expression setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1000957 usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port

usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by...

UVI-2021-1000930 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.128 by commit...

UVI-2021-1000881 IB/mlx5: Fix initializing CQ fragments buffer

IB/mlx5: Fix initializing CQ fragments buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

UVI-2021-1000822 xen-netback: take a reference to the RX task thread

xen-netback: take a reference to the RX task thread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

UVI-2021-1000468 ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by...

UVI-2021-1000424 i2c: img-scb: fix reference leak when pm_runtime_get_sync fails

i2c: img-scb: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000204 i40e: Fix use-after-free in i40e_client_subtask()

i40e: Fix use-after-free in i40eclientsubtask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000055 tracing: Restructure trace_clock_global() to never block

tracing: Restructure traceclockglobal to never block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000129 netfilter: conntrack: Make global sysctls readonly in non-init netns

netfilter: conntrack: Make global sysctls readonly in non-init netns This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.19 by commit...

UVI-2021-1000208 can: mcp251x: fix resume from sleep before interface was brought up

can: mcp251x: fix resume from sleep before interface was brought up This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000117 scsi: qla2xxx: Reserve extra IRQ vectors

scsi: qla2xxx: Reserve extra IRQ vectors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000239 iommu/mediatek: Always enable the clk on resume

iommu/mediatek: Always enable the clk on resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1002329 sched/fair: Prevent dead task groups from regaining cfs_rq's

sched/fair: Prevent dead task groups from regaining cfsrq's This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002306 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002276 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...