Latest CVE Feed
-
5.5
MEDIUMCVE-2021-47514
In the Linux kernel, the following vulnerability has been resolved: devlink: fix netns refcount leak in devlink_nl_cmd_reload() While preparing my patch series adding netns refcount tracking, I spotted bugs in devlink_nl_cmd_reload() Some error paths f... Read more
Affected Products : linux_kernel- Published: May. 24, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2021-47511
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values a... Read more
Affected Products : linux_kernel- Published: May. 24, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47405
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free raw_report buffers in usbhid_stop Free the unsent raw_report buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Feb. 03, 2025
-
5.5
MEDIUMCVE-2021-47418
In the Linux kernel, the following vulnerability has been resolved: net_sched: fix NULL deref in fifo_set_limit() syzbot reported another NULL deref in fifo_set_limit() [1] I could repro the issue with : unshare -n tc qd add dev lo root handle 1:0 tbf... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 31, 2024
-
5.5
MEDIUMCVE-2021-47367
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix pages leaking when building skb in big mode We try to use build_skb() if we had sufficient tailroom. But we forget to release the unused pages chained via private in big... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Apr. 02, 2025
-
5.5
MEDIUMCVE-2021-47362
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during dpm initialization. During the subsequent initialization, set_power_state gets called to... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 26, 2024
-
5.5
MEDIUMCVE-2021-47330
In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serial_cs: Fix a memory leak in error handling path In the probe function, if the final 'serial_config()' fails, 'info' is leaking. Add a resource handling path to f... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 24, 2024
-
5.5
MEDIUMCVE-2021-47297
In the Linux kernel, the following vulnerability has been resolved: net: fix uninit-value in caif_seqpkt_sendmsg When nr_segs equal to zero in iovec_from_user, the object msg->msg_iter.iov is uninit stack memory in caif_seqpkt_sendmsg which is defined i... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Apr. 02, 2025
-
5.5
MEDIUMCVE-2021-47337
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix bad pointer dereference when ehandler kthread is invalid Commit 66a834d09293 ("scsi: core: Fix error handling of scsi_host_alloc()") changed the allocation logic to call... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 24, 2024
-
5.5
MEDIUMCVE-2021-47269
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3_wIndex_to_dep() and we might be referring a non-existing ep and trigger a NULL pointer exception... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 24, 2024
-
5.5
MEDIUMCVE-2021-47249
In the Linux kernel, the following vulnerability has been resolved: net: rds: fix memory leak in rds_recvmsg Syzbot reported memory leak in rds. The problem was in unputted refcount in case of error. int rds_recvmsg(struct socket *sock, struct msghdr *... Read more
Affected Products : linux_kernel- Published: May. 21, 2024
- Modified: Dec. 30, 2024
-
5.5
MEDIUMCVE-2021-47209
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent dead task groups from regaining cfs_rq's Kevin is reporting crashes which point to a use-after-free of a cfs_rq in update_blocked_averages(). Initial debugging revea... Read more
Affected Products : linux_kernel- Published: Apr. 10, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2021-47199
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT, Fix multiple allocations and memleak of mod acts CT clear action offload adds additional mod hdr actions to the flow's original mod actions in order to clear the register... Read more
Affected Products : linux_kernel- Published: Apr. 10, 2024
- Modified: Jan. 14, 2025
-
5.5
MEDIUMCVE-2021-47171
In the Linux kernel, the following vulnerability has been resolved: net: usb: fix memory leak in smsc75xx_bind Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation. backtrace: [... Read more
Affected Products : linux_kernel- Published: Mar. 25, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47166
In the Linux kernel, the following vulnerability has been resolved: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() The value of mirror->pg_bytes_written should only be updated after a successful attempt to flush out the requests... Read more
Affected Products : linux_kernel- Published: Mar. 25, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2021-47164
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev is null so stop processing the event. In bond_enslave() the active/backup slave being set before setting the upper de... Read more
Affected Products : linux_kernel- Published: Mar. 25, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-47141
In the Linux kernel, the following vulnerability has been resolved: gve: Add NULL pointer checks when freeing irqs. When freeing notification blocks, we index priv->msix_vectors. If we failed to allocate priv->msix_vectors (see abort_with_msix_vectors) ... Read more
Affected Products : linux_kernel- Published: Mar. 25, 2024
- Modified: Dec. 20, 2024
-
5.5
MEDIUMCVE-2021-47120
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL-deref on disconnect Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned suc... Read more
Affected Products : linux_kernel- Published: Mar. 15, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2021-47108
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf In commit 41ca9caaae0b ("drm/mediatek: hdmi: Add check for CEA modes only") a check for CEA modes was added to function ... Read more
Affected Products : linux_kernel- Published: Mar. 04, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2021-47092
In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Always clear vmx->fail on emulation_required Revert a relatively recent change that set vmx->fail if the vCPU is in L2 and emulation_required is true, as that behavior is comp... Read more
Affected Products : linux_kernel- Published: Mar. 04, 2024
- Modified: Feb. 14, 2025