UVI-2021-1001001 x86/fpu: Prevent state corruption in __fpu__restore_sig()

x86/fpu: Prevent state corruption in fpurestoresig This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1001000 x86/ioremap: Map EFI-reserved memory as encrypted for SEV

x86/ioremap: Map EFI-reserved memory as encrypted for SEV This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000999 KVM: X86: Fix x86_emulator slab cache leak

KVM: X86: Fix x86emulator slab cache leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000998 PCI: aardvark: Fix kernel panic during PIO transfer

PCI: aardvark: Fix kernel panic during PIO transfer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000997 KVM: x86: Immediately reset the MMU context when the SMM flag is cleared

KVM: x86: Immediately reset the MMU context when the SMM flag is cleared This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000996 can: mcba_usb: fix memory leak in mcba_usb

can: mcbausb: fix memory leak in mcbausb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000995 can: j1939: fix Use-after-Free, hold skb ref while in use

can: j1939: fix Use-after-Free, hold skb ref while in use This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000994 regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL

regulator: rt4801: Fix NULL pointer dereference if priv-enablegpios is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000993 can: bcm: fix infoleak in struct bcm_msg_head

can: bcm: fix infoleak in struct bcmmsghead This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000992 phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()

phy: phy-mtk-tphy: Fix some resource leaks in mtkphyinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000991 net: ethernet: fix potential use-after-free in ec_bhf_remove

net: ethernet: fix potential use-after-free in ecbhfremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000990 net: cdc_eem: fix tx fixup skb leak

net: cdceem: fix tx fixup skb leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit 05b2b9f7d24b5663d9b47427fe1555bdafd3ea02, ...

UVI-2021-1000989 net: hamradio: fix memory leak in mkiss_close

net: hamradio: fix memory leak in mkissclose This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000988 net: ipv4: fix memory leak in ip_mc_add1_src

net: ipv4: fix memory leak in ipmcadd1src This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000987 net: usb: fix possible use-after-free in smsc75xx_bind

net: usb: fix possible use-after-free in smsc75xxbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000986 bpf: Fix leakage under speculation on mispredicted branches

bpf: Fix leakage under speculation on mispredicted branches This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000985 net: qrtr: fix OOB Read in qrtr_endpoint_post

net: qrtr: fix OOB Read in qrtrendpointpost This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000984 ethtool: strset: fix message length calculation

ethtool: strset: fix message length calculation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000983 sch_cake: Fix out of bounds when parsing TCP options and header

schcake: Fix out of bounds when parsing TCP options and header This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000982 mptcp: Fix out of bounds when parsing TCP options

mptcp: Fix out of bounds when parsing TCP options This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000981 netfilter: synproxy: Fix out of bounds when parsing TCP options

netfilter: synproxy: Fix out of bounds when parsing TCP options This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000980 net/mlx5e: Fix page reclaim for dead peer hairpin

net/mlx5e: Fix page reclaim for dead peer hairpin This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000979 udp: fix race between close() and udp_abort()

udp: fix race between close and udpabort This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000978 net: rds: fix memory leak in rds_recvmsg

net: rds: fix memory leak in rdsrecvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000977 net: ipv4: fix memory leak in netlbl_cipsov4_add_std

net: ipv4: fix memory leak in netlblcipsov4addstd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000976 mac80211: fix skb length check in ieee80211_scan_rx()

mac80211: fix skb length check in ieee80211scanrx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000975 batman-adv: Avoid WARN_ON timing related checks

batman-adv: Avoid WARNON timing related checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000974 drm/amd/display: Fix potential memory leak in DMUB hw_init

drm/amd/display: Fix potential memory leak in DMUB hwinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

UVI-2021-1000973 kvm: LAPIC: Restore guard to prevent illegal APIC register access

kvm: LAPIC: Restore guard to prevent illegal APIC register access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000972 gfs2: Fix use-after-free in gfs2_glock_shrink_scan

gfs2: Fix use-after-free in gfs2glockshrinkscan This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

UVI-2021-1000971 mm/memory-failure: make sure wait for page writeback in memory_failure

mm/memory-failure: make sure wait for page writeback in memoryfailure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

UVI-2021-1000970 drm/tegra: sor: Do not leak runtime PM reference

drm/tegra: sor: Do not leak runtime PM reference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

UVI-2021-1000969 HID: usbhid: fix info leak in hid_submit_ctrl

HID: usbhid: fix info leak in hidsubmitctrl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

UVI-2021-1000968 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

UVI-2021-1000967 scsi: core: Fix error handling of scsi_host_alloc()

scsi: core: Fix error handling of scsihostalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000966 NFS: Fix use-after-free in nfs4_init_client()

NFS: Fix use-after-free in nfs4initclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000965 NFS: Fix a potential NULL dereference in nfs_get_client()

NFS: Fix a potential NULL dereference in nfsgetclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000964 IB/mlx5: Fix initializing CQ fragments buffer

IB/mlx5: Fix initializing CQ fragments buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000963 KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message

KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000962 perf: Fix data race between pin_count increment/decrement

perf: Fix data race between pincount increment/decrement This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000961 gpio: wcd934x: Fix shift-out-of-bounds error

gpio: wcd934x: Fix shift-out-of-bounds error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000960 ASoC: core: Fix Null-point-dereference in fmt_single_name()

ASoC: core: Fix Null-point-dereference in fmtsinglename This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000959 RDMA/ipoib: Fix warning caused by destroying non-initial netns

RDMA/ipoib: Fix warning caused by destroying non-initial netns This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000958 usb: fix various gadget panics on 10gbps cabling

usb: fix various gadget panics on 10gbps cabling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000957 usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port

usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by...

UVI-2021-1000956 usb: fix various gadgets null ptr deref on 10gbps cabling.

usb: fix various gadgets null ptr deref on 10gbps cabling. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000955 usb: dwc3: ep0: fix NULL pointer exception

usb: dwc3: ep0: fix NULL pointer exception This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000954 usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL

usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000953 usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled

usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

UVI-2021-1000952 tracing: Correct the length check which causes memory corruption

tracing: Correct the length check which causes memory corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...