UVI-2021-1000555 tipc: wait and exit until all work queues are done

tipc: wait and exit until all work queues are done This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

UVI-2021-1000550 net: dsa: fix a crash if ->get_sset_count() fails

net: dsa: fix a crash if -getssetcount fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

UVI-2021-1000503 platform/x86: ideapad-laptop: fix a NULL pointer dereference

platform/x86: ideapad-laptop: fix a NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

UVI-2021-1000494 btrfs: fix removed dentries still existing after log is synced

btrfs: fix removed dentries still existing after log is synced This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

UVI-2021-1000301 drm/amdgpu: Init GFX10_ADDR_CONFIG for VCN v3 in DPG mode.

drm/amdgpu: Init GFX10ADDRCONFIG for VCN v3 in DPG mode. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000358 RDMA/qedr: Fix error return code in qedr_iw_connect()

RDMA/qedr: Fix error return code in qedriwconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000225 net: Only allow init netns to set default tcp cong to a restricted algo

net: Only allow init netns to set default tcp cong to a restricted algo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000396 KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit

KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000156 s390/zcrypt: fix zcard and zqueue hot-unplug memleak

s390/zcrypt: fix zcard and zqueue hot-unplug memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

UVI-2021-1000290 mtd: require write permissions for locking and badblock ioctls

mtd: require write permissions for locking and badblock ioctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000066 tpm: efi: Use local variable for calculating final log size

tpm: efi: Use local variable for calculating final log size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000178 cifs: Return correct error code from smb2_get_enc_key

cifs: Return correct error code from smb2getenckey This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

UVI-2021-1000240 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000378 spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails

spi: spi-zynqmp-gqspi: return -ENOMEM if dmamapsingle fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000056 usb: dwc3: core: Do core softreset when switch mode

usb: dwc3: core: Do core softreset when switch mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000098 usb: dwc3: core: Do core softreset when switch mode

usb: dwc3: core: Do core softreset when switch mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000454 liquidio: Fix unintented sign extension of a left shift of a u16

liquidio: Fix unintented sign extension of a left shift of a u16 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000476 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

crypto: qat - ADFSTATUSPFRUNNING should be set after adfdevinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by commit...

UVI-2021-1000019 ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled

ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

UVI-2021-1000445 hfsplus: prevent corruption in shrinking truncate

hfsplus: prevent corruption in shrinking truncate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000097 media: staging/intel-ipu3: Fix set_fmt error handling

media: staging/intel-ipu3: Fix setfmt error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000183 ACPI: custom_method: fix potential use-after-free issue

ACPI: custommethod: fix potential use-after-free issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...

denial of service in parse_duration version up to 2.1.0

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29932. Reason: This candidate is a duplicate of CVE-2021-29932. Notes: All CVE users should reference CVE-2021-29932 instead of this candidate...

UVI-2021-1002351 thermal: Fix NULL pointer dereferences in of_thermal_ functions

thermal: Fix NULL pointer dereferences in ofthermal functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.4 by commit...

UVI-2021-1002292 scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()

scsi: scsidebug: Fix out-of-bound read in respreadcap16 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002285 net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()

net/mlx5e: nullify cq-dbg pointer in mlx5debugcqremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002267 tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc

tty: ttybuffer: Fix the softlockup issue in flushtoldisc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...

UVI-2021-1002238 ALSA: gus: fix null pointer dereference on pointer block

ALSA: gus: fix null pointer dereference on pointer block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.256 by commit...

UVI-2021-1002154 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

nvmem: Fix shift-out-of-bound UBSAN with byte size cells This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002152 xhci: Fix command ring pointer corruption while aborting a command

xhci: Fix command ring pointer corruption while aborting a command This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002128 drm/amdgpu: Fix even more out of bound writes from debugfs

drm/amdgpu: Fix even more out of bound writes from debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002120 net/tls: Fix flipped sign in tls_err_abort() calls

net/tls: Fix flipped sign in tlserrabort calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002074 comedi: dt9812: fix DMA buffers on stack

comedi: dt9812: fix DMA buffers on stack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.79 by commit...

UVI-2021-1002059 cfg80211: fix management registrations locking

cfg80211: fix management registrations locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...

UVI-2021-1002046 KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()

KVM: PPC: Book3S HV: Fix stack handling in idlekvmstartguest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

UVI-2021-1001997 xhci: Fix command ring pointer corruption while aborting a command

xhci: Fix command ring pointer corruption while aborting a command This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.155 by commit...

UVI-2021-1001988 regmap: Fix possible double-free in regcache_rbtree_exit()

regmap: Fix possible double-free in regcacherbtreeexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.215 by commit...

UVI-2021-1001984 isdn: mISDN: Fix sleeping function called from invalid context

isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit...

UVI-2021-1001979 can: peak_pci: peak_pci_remove(): fix UAF

can: peakpci: peakpciremove: fix UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit adbda14730aacce41c0d3596415aa39ad63eafd...

UVI-2021-1001967 scsi: core: Put LLD module refcnt after SCSI device is released

scsi: core: Put LLD module refcnt after SCSI device is released This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.255 by commit...

UVI-2021-1001946 scsi: core: Put LLD module refcnt after SCSI device is released

scsi: core: Put LLD module refcnt after SCSI device is released This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.290 by commit...

UVI-2021-1001944 regmap: Fix possible double-free in regcache_rbtree_exit()

regmap: Fix possible double-free in regcacherbtreeexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.289 by commit...

UVI-2021-1001926 scsi: core: Put LLD module refcnt after SCSI device is released

scsi: core: Put LLD module refcnt after SCSI device is released This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.292 by commit...

UVI-2021-1001909 usb: musb: dsps: Fix the probe error path

usb: musb: dsps: Fix the probe error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

UVI-2021-1001908 iio: adis16475: fix deadlock on frequency set

iio: adis16475: fix deadlock on frequency set This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

UVI-2021-1001874 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1001859 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work

net: dsa: microchip: Added the condition for scheduling kszmibreadwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...

UVI-2021-1001846 ocfs2: mount fails with buffer overflow in strlen

ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

UVI-2021-1001737 hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field

hwmon: w83793 Fix NULL pointer dereference by removing unnecessary structure field This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by...

UVI-2021-1001591 ipack: ipoctal: fix stack information leak

ipack: ipoctal: fix stack information leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.151 by commit...