Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.5

    MEDIUM
    CVE-2021-47149

    In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18x_get_hwinfo(), if ioremap fails there will be NULL pointer deref. To fix this, check the return value of ioremap and return -1 to th... Read more

    Affected Products : linux_kernel
    • Published: Mar. 25, 2024
    • Modified: Dec. 12, 2024
  • 5.5

    MEDIUM
    CVE-2021-47117

    In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed We got follow bug_on when run fsstress with injecting IO fault: [130747.323114] kernel BUG at fs/ext4/extents_sta... Read more

    Affected Products : linux_kernel
    • Published: Mar. 15, 2024
    • Modified: Feb. 27, 2025
  • 5.5

    MEDIUM
    CVE-2021-47105

    In the Linux kernel, the following vulnerability has been resolved: ice: xsk: return xsk buffers back to pool when cleaning the ring Currently we only NULL the xdp_buff pointer in the internal SW ring but we never give it back to the xsk buffer pool. Th... Read more

    Affected Products : linux_kernel
    • Published: Mar. 04, 2024
    • Modified: Feb. 14, 2025
  • 5.5

    MEDIUM
    CVE-2021-47124

    In the Linux kernel, the following vulnerability has been resolved: io_uring: fix link timeout refs WARNING: CPU: 0 PID: 10242 at lib/refcount.c:28 refcount_warn_saturate+0x15b/0x1a0 lib/refcount.c:28 RIP: 0010:refcount_warn_saturate+0x15b/0x1a0 lib/ref... Read more

    Affected Products : linux_kernel
    • Published: Mar. 15, 2024
    • Modified: Mar. 13, 2025
  • 5.5

    MEDIUM
    CVE-2021-47066

    In the Linux kernel, the following vulnerability has been resolved: async_xor: increase src_offs when dropping destination page Now we support sharing one page if PAGE_SIZE is not equal stripe size. To support this, it needs to support calculating xor v... Read more

    Affected Products : linux_kernel
    • Published: Feb. 29, 2024
    • Modified: Jan. 09, 2025
  • 5.5

    MEDIUM
    CVE-2021-47146

    In the Linux kernel, the following vulnerability has been resolved: mld: fix panic in mld_newpack() mld_newpack() doesn't allow to allocate high order page, only order-0 allocation is allowed. If headroom size is too large, a kernel panic could occur in... Read more

    Affected Products : linux_kernel
    • Published: Mar. 25, 2024
    • Modified: Dec. 20, 2024
  • 5.5

    MEDIUM
    CVE-2021-47113

    In the Linux kernel, the following vulnerability has been resolved: btrfs: abort in rename_exchange if we fail to insert the second ref Error injection stress uncovered a problem where we'd leave a dangling inode ref if we failed during a rename_exchang... Read more

    Affected Products : linux_kernel
    • Published: Mar. 15, 2024
    • Modified: Mar. 13, 2025
  • 5.5

    MEDIUM
    CVE-2021-47042

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Free local data after use Fixes the following memory leak in dc_link_construct(): unreferenced object 0xffffa03e81471400 (size 1024): comm "amd_module_load", pid 2486,... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Dec. 06, 2024
  • 5.5

    MEDIUM
    CVE-2021-47062

    In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs Use the kvm_for_each_vcpu() helper to iterate over vCPUs when encrypting VMSAs for SEV, which effectively switches t... Read more

    Affected Products : linux_kernel
    • Published: Feb. 29, 2024
    • Modified: Dec. 10, 2024
  • 5.5

    MEDIUM
    CVE-2021-47050

    In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix possible NULL pointer dereference of resource The platform_get_resource_byname() can return NULL which would be immediately dereferenced by resource_size(). ... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Dec. 09, 2024
  • 5.5

    MEDIUM
    CVE-2021-47038

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid deadlock between hci_dev->lock and socket lock Commit eab2404ba798 ("Bluetooth: Add BT_PHY socket option") added a dependency between socket lock and hci_dev->lock that... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Dec. 06, 2024
  • 5.5

    MEDIUM
    CVE-2021-47047

    In the Linux kernel, the following vulnerability has been resolved: spi: spi-zynqmp-gqspi: return -ENOMEM if dma_map_single fails The spi controller supports 44-bit address space on AXI in DMA mode, so set dma_addr_t width to 44-bit to avoid using a swi... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Jan. 10, 2025
  • 5.5

    MEDIUM
    CVE-2024-27806

    This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to ... Read more

    Affected Products : macos iphone_os tvos watchos ipados
    • Published: Jun. 10, 2024
    • Modified: Mar. 14, 2025
  • 5.5

    MEDIUM
    CVE-2021-47037

    In the Linux kernel, the following vulnerability has been resolved: ASoC: q6afe-clocks: fix reprobing of the driver Q6afe-clocks driver can get reprobed. For example if the APR services are restarted after the firmware crash. However currently Q6afe-clo... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Jun. 04, 2025
  • 5.5

    MEDIUM
    CVE-2021-47093

    In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel_pmc_core: fix memleak on registration failure In case device registration fails during module initialisation, the platform device structure needs to be freed using p... Read more

    Affected Products : linux_kernel
    • Published: Mar. 04, 2024
    • Modified: Jan. 14, 2025
  • 5.5

    MEDIUM
    CVE-2021-47108

    In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf In commit 41ca9caaae0b ("drm/mediatek: hdmi: Add check for CEA modes only") a check for CEA modes was added to function ... Read more

    Affected Products : linux_kernel
    • Published: Mar. 04, 2024
    • Modified: Jan. 07, 2025
  • 5.5

    MEDIUM
    CVE-2021-47035

    In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Jan. 24, 2025
  • 5.5

    MEDIUM
    CVE-2021-47024

    In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot [1], there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Dec. 06, 2024
  • 5.5

    MEDIUM
    CVE-2021-47015

    In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RX consumer index logic in the error path. In bnxt_rx_pkt(), the RX buffers are expected to complete in order. If the RX consumer index indicates an out of order buffer com... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Jan. 08, 2025
  • 5.5

    MEDIUM
    CVE-2021-47051

    In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to putting operation will result in... Read more

    Affected Products : linux_kernel
    • Published: Feb. 28, 2024
    • Modified: Dec. 09, 2024
Showing 20 of 293437 Results