UVI-2021-1002151 net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path

net/mlx5e: Fix memory leak in mlx5coredestroycq error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002150 misc: fastrpc: Add missing lock before accessing find_vma()

misc: fastrpc: Add missing lock before accessing findvma This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002149 dm rq: don't queue request to blk-mq during DM suspend

dm rq: don't queue request to blk-mq during DM suspend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002148 drm/msm: Avoid potential overflow in timeout_to_jiffies()

drm/msm: Avoid potential overflow in timeouttojiffies This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002147 dm: fix mempool NULL pointer race when completing IO

dm: fix mempool NULL pointer race when completing IO This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002146 media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()

media: firewire: firedtv-avc: fix a buffer overflow in avccapmt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.17 by commit...

UVI-2021-1002145 isofs: Fix out of bound access for corrupted isofs image

isofs: Fix out of bound access for corrupted isofs image This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

UVI-2021-1002144 scsi: core: Put LLD module refcnt after SCSI device is released

scsi: core: Put LLD module refcnt after SCSI device is released This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.17 by commit...

UVI-2021-1002143 comedi: vmk80xx: fix bulk-buffer overflow

comedi: vmk80xx: fix bulk-buffer overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

UVI-2021-1002142 comedi: ni_usb6501: fix NULL-deref in command paths

comedi: niusb6501: fix NULL-deref in command paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

UVI-2021-1002141 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

UVI-2021-1002140 comedi: dt9812: fix DMA buffers on stack

comedi: dt9812: fix DMA buffers on stack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

UVI-2021-1002139 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

UVI-2021-1002138 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR

RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002137 net: batman-adv: fix error handling

net: batman-adv: fix error handling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit a8f7359259dd5923adc6129284fdad12fc5db347,...

UVI-2021-1002136 regmap: Fix possible double-free in regcache_rbtree_exit()

regmap: Fix possible double-free in regcacherbtreeexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002135 ice: check whether PTP is initialized in ice_ptp_release()

ice: check whether PTP is initialized in iceptprelease This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002134 octeontx2-af: Fix possible null pointer dereference.

octeontx2-af: Fix possible null pointer dereference. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002133 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002132 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

IB/qib: Protect from buffer overflow in struct qibusersdmapkt fields This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002131 riscv, bpf: Fix potential NULL dereference

riscv, bpf: Fix potential NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002130 drm/amdgpu: fix out of bounds write

drm/amdgpu: fix out of bounds write This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit d3ed72495a59fbfb9377450c8dfe94389a6509a7...

UVI-2021-1002129 cgroup: Fix memory leak caused by missing cgroup_bpf_offline

cgroup: Fix memory leak caused by missing cgroupbpfoffline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002128 drm/amdgpu: Fix even more out of bound writes from debugfs

drm/amdgpu: Fix even more out of bound writes from debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002127 drm/ttm: fix memleak in ttm_transfered_destroy

drm/ttm: fix memleak in ttmtransfereddestroy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002126 mm: khugepaged: skip huge page collapse for special files

mm: khugepaged: skip huge page collapse for special files This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002125 mm, thp: bail out early in collapse_file for writeback page

mm, thp: bail out early in collapsefile for writeback page This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002124 mm: filemap: check if THP has hwpoisoned subpage for PMD page fault

mm: filemap: check if THP has hwpoisoned subpage for PMD page fault This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002123 ocfs2: fix race between searching chunks and release journal_head from buffer_head

ocfs2: fix race between searching chunks and release journalhead from bufferhead This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by...

UVI-2021-1002122 cfg80211: fix management registrations locking

cfg80211: fix management registrations locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002121 usbnet: sanity check for maxpacket

usbnet: sanity check for maxpacket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit 7e8b6a4f18edee070213cb6a77118e8a412253c5...

UVI-2021-1002120 net/tls: Fix flipped sign in tls_err_abort() calls

net/tls: Fix flipped sign in tlserrabort calls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002119 net: mdiobus: Fix memory leak in __mdiobus_register

net: mdiobus: Fix memory leak in mdiobusregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002118 s390/pci: fix zpci_zdev_put() on reserve

s390/pci: fix zpcizdevput on reserve This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit 4e5d794a2743f5a1e13ee1066ce37711f2696044...

UVI-2021-1002117 isdn: mISDN: Fix sleeping function called from invalid context

isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002116 scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()

scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002115 kunit: fix reference count leak in kfree_at_end

kunit: fix reference count leak in kfreeatend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002114 drm: mxsfb: Fix NULL pointer dereference crash on unload

drm: mxsfb: Fix NULL pointer dereference crash on unload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002113 isdn: cpai: check ctr->cnr to avoid array index out of bound

isdn: cpai: check ctr-cnr to avoid array index out of bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002112 mm, slub: fix potential use-after-free in slab_debugfs_fops

mm, slub: fix potential use-after-free in slabdebugfsfops This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002111 mm, slub: fix potential memoryleak in kmem_cache_open()

mm, slub: fix potential memoryleak in kmemcacheopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002110 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002109 powerpc/idle: Don't corrupt back chain when going idle

powerpc/idle: Don't corrupt back chain when going idle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002108 KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()

KVM: PPC: Book3S HV: Fix stack handling in idlekvmstartguest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002107 audit: fix possible null-pointer dereference in audit_filter_rules

audit: fix possible null-pointer dereference in auditfilterrules This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002106 blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu

blk-cgroup: blkcgroupbiostart should use irq-safe operations on blkg-iostatcpu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commi...

UVI-2021-1002105 mm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()

mm/secretmem: fix NULL page-mapping dereference in pageissecretmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002104 mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()

mm/mempolicy: do not allow illegal MPOLFNUMABALANCING | MPOLLOCAL in mbind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002103 ocfs2: mount fails with buffer overflow in strlen

ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

UVI-2021-1002102 userfaultfd: fix a race between writeprotect and exit_mmap()

userfaultfd: fix a race between writeprotect and exitmmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...