UVI-2021-1000525 Bluetooth: SMP: Fail if remote and local public keys are identical

Bluetooth: SMP: Fail if remote and local public keys are identical This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.234 by commit...

UVI-2021-1000521 Bluetooth: SMP: Fail if remote and local public keys are identical

Bluetooth: SMP: Fail if remote and local public keys are identical This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

UVI-2021-1000515 platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios

platform/x86: dell-smbios-wmi: Fix oops on rmmod dellsmbios This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.122 by commit...

UVI-2021-1000514 RDMA/core: Prevent divide-by-zero error triggered by the user

RDMA/core: Prevent divide-by-zero error triggered by the user This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.40 by commit...

UVI-2021-1000501 RDMA/rxe: Clear all QP fields if creation failed

RDMA/rxe: Clear all QP fields if creation failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

UVI-2021-1000434 soundwire: stream: fix memory leak in stream config error path

soundwire: stream: fix memory leak in stream config error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000342 RDMA/siw: Fix a use after free in siw_alloc_mr

RDMA/siw: Fix a use after free in siwallocmr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000118 scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()

scsi: qla2xxx: Fix crash in qla2xxxmqueuecommand This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000359 RDMA/rtrs-clt: destroy sysfs after removing session from active list

RDMA/rtrs-clt: destroy sysfs after removing session from active list This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000444 powerpc/64s: Fix crashes when toggling entry flush barrier

powerpc/64s: Fix crashes when toggling entry flush barrier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000014 ixgbe: fix unbalanced device enable/disable in suspend/resume

ixgbe: fix unbalanced device enable/disable in suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

default search paths use Terraform Registry for custom providers in Terraform version 0.15.3

In Hashicorp Terraform version 0.15.3 the default search paths use Terraform Registry for custom providers if they exist in the terraform plan which can be attacked via code processed by the CI/CD pipeline using "terraform plan" resulting in Remote code Execution, exfiltration of environmental...

UVI-2021-1000092 thermal/drivers/cpufreq_cooling: Fix slab OOB issue

thermal/drivers/cpufreqcooling: Fix slab OOB issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000436 mtd: require write permissions for locking and badblock ioctls

mtd: require write permissions for locking and badblock ioctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000327 netfilter: nftables: Fix a memleak from userdata error path in new objects

netfilter: nftables: Fix a memleak from userdata error path in new objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

UVI-2021-1000351 i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails

i2c: stm32f7: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000310 KVM: VMX: Disable preemption when probing user return MSRs

KVM: VMX: Disable preemption when probing user return MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

UVI-2021-1000190 KVM: VMX: Disable preemption when probing user return MSRs

KVM: VMX: Disable preemption when probing user return MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000479 powerpc/64s: Fix crashes when toggling entry flush barrier

powerpc/64s: Fix crashes when toggling entry flush barrier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.269 by commit...

UVI-2021-1000125 net: qrtr: Avoid potential use after free in MHI send

net: qrtr: Avoid potential use after free in MHI send This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.19 by commit...

UVI-2021-1000074 riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe

riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000278 spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails

spi: spi-zynqmp-gqspi: return -ENOMEM if dmamapsingle fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000107 NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds

NFS: fscontext: validate UDP retrans to prevent shift out-of-bounds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000057 io_uring: fix shared sqpoll cancellation hangs

iouring: fix shared sqpoll cancellation hangs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

UVI-2021-1000376 drm/amd/display: Fix off by one in hdmi_14_process_transaction()

drm/amd/display: Fix off by one in hdmi14processtransaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000166 net: hso: fix NULL-deref on disconnect regression

net: hso: fix NULL-deref on disconnect regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

UVI-2021-1000287 m68k: mvme147,mvme16x: Don't wipe PCC timer config bits

m68k: mvme147,mvme16x: Don't wipe PCC timer config bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000319 ACPI: scan: Fix a memory leak in an error handling path

ACPI: scan: Fix a memory leak in an error handling path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

UVI-2021-1000267 bcache: Use 64-bit arithmetic instead of 32-bit

bcache: Use 64-bit arithmetic instead of 32-bit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000211 arm64: entry: always set GIC_PRIO_PSR_I_SET during entry

arm64: entry: always set GICPRIOPSRISET during entry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

UVI-2021-1000122 bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue

bus: mhi: pcigeneric: Remove WQMEMRECLAIM flag from state workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000123 s390/zcrypt: fix zcard and zqueue hot-unplug memleak

s390/zcrypt: fix zcard and zqueue hot-unplug memleak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

UVI-2021-1000245 i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails

i2c: imx-lpi2c: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000033 netfilter: nft_limit: avoid possible divide error in nft_limit_init

netfilter: nftlimit: avoid possible divide error in nftlimitinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

UVI-2021-1002346 usb: typec: tipd: Remove WARN_ON in tps6598x_block_read

usb: typec: tipd: Remove WARNON in tps6598xblockread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002326 net/ipa: ipa_resource: Fix wrong for loop range

net/ipa: iparesource: Fix wrong for loop range This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002290 ALSA: gus: fix null pointer dereference on pointer block

ALSA: gus: fix null pointer dereference on pointer block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002289 f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()

f2fs: fix incorrect return value in f2fssanitycheckckpt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002280 NFC: add NCI_UNREG flag to eliminate the race

NFC: add NCIUNREG flag to eliminate the race This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002262 scsi: core: sysfs: Fix hang when device state is set via sysfs

scsi: core: sysfs: Fix hang when device state is set via sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...

UVI-2021-1002257 btrfs: fix memory ordering between normal and ordered work functions

btrfs: fix memory ordering between normal and ordered work functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...

UVI-2021-1002250 tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc

tty: ttybuffer: Fix the softlockup issue in flushtoldisc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...

UVI-2021-1002245 btrfs: fix memory ordering between normal and ordered work functions

btrfs: fix memory ordering between normal and ordered work functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...

UVI-2021-1002229 tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc

tty: ttybuffer: Fix the softlockup issue in flushtoldisc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.291 by commit...

UVI-2021-1002165 netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value

netfilter: xtIDLETIMER: fix panic that occurs when timertype has garbage value This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002148 drm/msm: Avoid potential overflow in timeout_to_jiffies()

drm/msm: Avoid potential overflow in timeouttojiffies This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002127 drm/ttm: fix memleak in ttm_transfered_destroy

drm/ttm: fix memleak in ttmtransfereddestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002117 isdn: mISDN: Fix sleeping function called from invalid context

isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002110 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002066 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...