Vulnerability-Lookup

SUSE-SU-2024:2183-1

Vulnerability from csaf_suse - Published: 2024-06-24 17:04 - Updated: 2024-06-24 17:04

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355). - CVE-2021-47500: Fixed trigger reference couting (bsc#1225360). - CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208). - CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411). - CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174). - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420). - CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201). - CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354) - CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301) - CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934). - CVE-2023-52871: Handle a second device without data corruption (bsc#1225534) - CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084). - CVE-2024-27413: Fix incorrect allocation size (bsc#1224438). - CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928). - CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954) - CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888). - CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169). - CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729). The following non-security bugs were fixed: - NFC: nxp: add NXP1002 (bsc#1185589). - PCI: rpaphp: Add MODULE_DESCRIPTION (bsc#1176869 ltc#188243). - af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384). - af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384). - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384). - btrfs: do not start relocation until in progress drops are done (bsc#1222251). - md: Replace snprintf with scnprintf (git-fixes). - netfilter: nf_tables: GC transaction race with abort path (git-fixes). - netfilter: nf_tables: GC transaction race with netns dismantle (git-fixes). - netfilter: nf_tables: defer gc run if previous batch is still pending (git-fixes). - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (git-fixes). - netfilter: nf_tables: fix kdoc warnings after gc rework (git-fixes). - netfilter: nf_tables: fix memleak when more than 255 elements expired (git-fixes). - netfilter: nf_tables: mark newset as dead on transaction abort (git-fixes). - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (git-fixes). - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (git-fixes). - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (git-fixes). - netfilter: nf_tables: skip dead set elements in netlink dump (git-fixes). - netfilter: nf_tables: use correct lock to protect gc_list (git-fixes). - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (git-fixes). - netfilter: nft_set_rbtree: Add missing expired checks (git-fixes). - netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match (git-fixes). - netfilter: nft_set_rbtree: Detect partial overlaps on insertion (git-fixes). - netfilter: nft_set_rbtree: Do not account for expired elements on insertion (git-fixes). - netfilter: nft_set_rbtree: Drop spurious condition for overlap detection on insertion (git-fixes). - netfilter: nft_set_rbtree: Handle outcomes of tree rotations in overlap detection (git-fixes). - netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start() (git-fixes). - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (git-fixes). - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets (git-fixes). - netfilter: nft_set_rbtree: fix null deref on element insertion (git-fixes). - netfilter: nft_set_rbtree: fix overlap expiration walk (git-fixes). - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (git-fixes). - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (git-fixes). - netfilter: nft_set_rbtree: skip end interval element from gc (git-fixes). - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (git-fixes). - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (git-fixes). - x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (bsc#1215356).

Patchnames: SUSE-2024-2183,SUSE-SLE-Module-Live-Patching-15-SP2-2024-2183,SUSE-SLE-Product-HA-15-SP2-2024-2183,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2183,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2183,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2183

CVE-2021-3743

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-devel-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-docs-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-macros-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-source-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-devel-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-devel-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-devel-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_194-default-1-150200.5.3.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_194-default-1-150200.5.3.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_194-default-1-150200.5.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-devel-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-docs-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-macros-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-source-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.194.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.194.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-base-5.3.18-150200.24.194.1.150200.9.99.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-devel-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-devel-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-devel-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-docs-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-macros-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-obs-build-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-obs-build-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-preempt-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-preempt-devel-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-source-5.3.18-150200.24.194.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-syms-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-syms-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:reiserfs-kmp-default-5.3.18-150200.24.194.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:reiserfs-kmp-default-5.3.18-150200.24.194.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2021-39698

7.4 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-43056

6.8 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-43527

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47104

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47220

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47229

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47231

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47236

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47240

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47246

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact low

CVE-2021-47252

0 (None)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47254

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47255

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47259

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47260

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47261

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47267

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47269

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47270

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47274

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47275

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47276

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47280

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47284

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47285

0 (None)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47288

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47289

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47296

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47301

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47302

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47305

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47307

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47308

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47314

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact low

CVE-2021-47315

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact low

CVE-2021-47320

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47321

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47323

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47324

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47330

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47332

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47333

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47334

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47338

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47341

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47344

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47347

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47350

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47354

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47356

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47369

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47375

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47378

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47381

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47382

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47383

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47388

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47391

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47393

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47395

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47396

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47399

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47402

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47404

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47405

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47416

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact low

CVE-2021-47423

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47424

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47425

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47431

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47434

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47436

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47441

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47442

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47443

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47445

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47456

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47460

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47464

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47465

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47468

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47473

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact low

CVE-2021-47482

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact low

CVE-2021-47483

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47485

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47495

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47496

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47497

0 (None)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47500

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47505

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47506

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47511

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47516

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47522

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47538

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47541

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47542

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47562

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2021-47563

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2021-47565

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2022-20132

4.9 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2022-48673

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-0160

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-1829

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2023-2176

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2023-4244

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2023-47233

4.3 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-52433

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2023-52581

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-52591

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2023-52654

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-52655

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-52686

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-52840

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2023-52871

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2023-52880

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2023-6531

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2024-26581

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2024-26643

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2024-26828

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2024-26925

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2024-26929

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2024-26930

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2024-27398

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2024-27413

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact important

CVE-2024-35811

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2024-35895

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

CVE-2024-35914

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2021-3743

Threats

Impact moderate

References

590 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2024…	self
https://bugzilla.suse.com/1065729	self
https://bugzilla.suse.com/1151927	self
https://bugzilla.suse.com/1154353	self
https://bugzilla.suse.com/1156395	self
https://bugzilla.suse.com/1174585	self
https://bugzilla.suse.com/1176869	self
https://bugzilla.suse.com/1184631	self
https://bugzilla.suse.com/1185589	self
https://bugzilla.suse.com/1185902	self
https://bugzilla.suse.com/1188616	self
https://bugzilla.suse.com/1188772	self
https://bugzilla.suse.com/1189883	self
https://bugzilla.suse.com/1190795	self
https://bugzilla.suse.com/1191452	self
https://bugzilla.suse.com/1192107	self
https://bugzilla.suse.com/1194288	self
https://bugzilla.suse.com/1196956	self
https://bugzilla.suse.com/1200619	self
https://bugzilla.suse.com/1208813	self
https://bugzilla.suse.com/1209657	self
https://bugzilla.suse.com/1210335	self
https://bugzilla.suse.com/1210629	self
https://bugzilla.suse.com/1215356	self
https://bugzilla.suse.com/1215420	self
https://bugzilla.suse.com/1216702	self
https://bugzilla.suse.com/1217169	self
https://bugzilla.suse.com/1220137	self
https://bugzilla.suse.com/1220144	self
https://bugzilla.suse.com/1220754	self
https://bugzilla.suse.com/1220877	self
https://bugzilla.suse.com/1220960	self
https://bugzilla.suse.com/1221044	self
https://bugzilla.suse.com/1221829	self
https://bugzilla.suse.com/1222251	self
https://bugzilla.suse.com/1222619	self
https://bugzilla.suse.com/1223084	self
https://bugzilla.suse.com/1223384	self
https://bugzilla.suse.com/1223390	self
https://bugzilla.suse.com/1223934	self
https://bugzilla.suse.com/1224099	self
https://bugzilla.suse.com/1224174	self
https://bugzilla.suse.com/1224438	self
https://bugzilla.suse.com/1224482	self
https://bugzilla.suse.com/1224511	self
https://bugzilla.suse.com/1224592	self
https://bugzilla.suse.com/1224831	self
https://bugzilla.suse.com/1224832	self
https://bugzilla.suse.com/1224834	self
https://bugzilla.suse.com/1224841	self
https://bugzilla.suse.com/1224843	self
https://bugzilla.suse.com/1224846	self
https://bugzilla.suse.com/1224849	self
https://bugzilla.suse.com/1224854	self
https://bugzilla.suse.com/1224859	self
https://bugzilla.suse.com/1224882	self
https://bugzilla.suse.com/1224888	self
https://bugzilla.suse.com/1224889	self
https://bugzilla.suse.com/1224891	self
https://bugzilla.suse.com/1224892	self
https://bugzilla.suse.com/1224893	self
https://bugzilla.suse.com/1224904	self
https://bugzilla.suse.com/1224907	self
https://bugzilla.suse.com/1224909	self
https://bugzilla.suse.com/1224916	self
https://bugzilla.suse.com/1224917	self
https://bugzilla.suse.com/1224922	self
https://bugzilla.suse.com/1224923	self
https://bugzilla.suse.com/1224924	self
https://bugzilla.suse.com/1224928	self
https://bugzilla.suse.com/1224953	self
https://bugzilla.suse.com/1224954	self
https://bugzilla.suse.com/1224961	self
https://bugzilla.suse.com/1224963	self
https://bugzilla.suse.com/1224965	self
https://bugzilla.suse.com/1224966	self
https://bugzilla.suse.com/1224968	self
https://bugzilla.suse.com/1224981	self
https://bugzilla.suse.com/1224982	self
https://bugzilla.suse.com/1224984	self
https://bugzilla.suse.com/1224987	self
https://bugzilla.suse.com/1224990	self
https://bugzilla.suse.com/1224993	self
https://bugzilla.suse.com/1224996	self
https://bugzilla.suse.com/1224997	self
https://bugzilla.suse.com/1225026	self
https://bugzilla.suse.com/1225030	self
https://bugzilla.suse.com/1225058	self
https://bugzilla.suse.com/1225060	self
https://bugzilla.suse.com/1225084	self
https://bugzilla.suse.com/1225091	self
https://bugzilla.suse.com/1225112	self
https://bugzilla.suse.com/1225113	self
https://bugzilla.suse.com/1225140	self
https://bugzilla.suse.com/1225143	self
https://bugzilla.suse.com/1225164	self
https://bugzilla.suse.com/1225177	self
https://bugzilla.suse.com/1225181	self
https://bugzilla.suse.com/1225192	self
https://bugzilla.suse.com/1225193	self
https://bugzilla.suse.com/1225201	self
https://bugzilla.suse.com/1225206	self
https://bugzilla.suse.com/1225207	self
https://bugzilla.suse.com/1225208	self
https://bugzilla.suse.com/1225214	self
https://bugzilla.suse.com/1225223	self
https://bugzilla.suse.com/1225224	self
https://bugzilla.suse.com/1225232	self
https://bugzilla.suse.com/1225238	self
https://bugzilla.suse.com/1225244	self
https://bugzilla.suse.com/1225251	self
https://bugzilla.suse.com/1225256	self
https://bugzilla.suse.com/1225261	self
https://bugzilla.suse.com/1225262	self
https://bugzilla.suse.com/1225263	self
https://bugzilla.suse.com/1225301	self
https://bugzilla.suse.com/1225303	self
https://bugzilla.suse.com/1225318	self
https://bugzilla.suse.com/1225321	self
https://bugzilla.suse.com/1225326	self
https://bugzilla.suse.com/1225327	self
https://bugzilla.suse.com/1225328	self
https://bugzilla.suse.com/1225336	self
https://bugzilla.suse.com/1225341	self
https://bugzilla.suse.com/1225346	self
https://bugzilla.suse.com/1225351	self
https://bugzilla.suse.com/1225354	self
https://bugzilla.suse.com/1225355	self
https://bugzilla.suse.com/1225360	self
https://bugzilla.suse.com/1225366	self
https://bugzilla.suse.com/1225367	self
https://bugzilla.suse.com/1225384	self
https://bugzilla.suse.com/1225390	self
https://bugzilla.suse.com/1225393	self
https://bugzilla.suse.com/1225400	self
https://bugzilla.suse.com/1225404	self
https://bugzilla.suse.com/1225411	self
https://bugzilla.suse.com/1225427	self
https://bugzilla.suse.com/1225437	self
https://bugzilla.suse.com/1225448	self
https://bugzilla.suse.com/1225453	self
https://bugzilla.suse.com/1225455	self
https://bugzilla.suse.com/1225499	self
https://bugzilla.suse.com/1225500	self
https://bugzilla.suse.com/1225534	self
https://www.suse.com/security/cve/CVE-2021-3743/	self
https://www.suse.com/security/cve/CVE-2021-39698/	self
https://www.suse.com/security/cve/CVE-2021-43056/	self
https://www.suse.com/security/cve/CVE-2021-43527/	self
https://www.suse.com/security/cve/CVE-2021-47104/	self
https://www.suse.com/security/cve/CVE-2021-47220/	self
https://www.suse.com/security/cve/CVE-2021-47229/	self
https://www.suse.com/security/cve/CVE-2021-47231/	self
https://www.suse.com/security/cve/CVE-2021-47236/	self
https://www.suse.com/security/cve/CVE-2021-47239/	self
https://www.suse.com/security/cve/CVE-2021-47240/	self
https://www.suse.com/security/cve/CVE-2021-47246/	self
https://www.suse.com/security/cve/CVE-2021-47252/	self
https://www.suse.com/security/cve/CVE-2021-47254/	self
https://www.suse.com/security/cve/CVE-2021-47255/	self
https://www.suse.com/security/cve/CVE-2021-47259/	self
https://www.suse.com/security/cve/CVE-2021-47260/	self
https://www.suse.com/security/cve/CVE-2021-47261/	self
https://www.suse.com/security/cve/CVE-2021-47267/	self
https://www.suse.com/security/cve/CVE-2021-47269/	self
https://www.suse.com/security/cve/CVE-2021-47270/	self
https://www.suse.com/security/cve/CVE-2021-47274/	self
https://www.suse.com/security/cve/CVE-2021-47275/	self
https://www.suse.com/security/cve/CVE-2021-47276/	self
https://www.suse.com/security/cve/CVE-2021-47280/	self
https://www.suse.com/security/cve/CVE-2021-47284/	self
https://www.suse.com/security/cve/CVE-2021-47285/	self
https://www.suse.com/security/cve/CVE-2021-47288/	self
https://www.suse.com/security/cve/CVE-2021-47289/	self
https://www.suse.com/security/cve/CVE-2021-47296/	self
https://www.suse.com/security/cve/CVE-2021-47301/	self
https://www.suse.com/security/cve/CVE-2021-47302/	self
https://www.suse.com/security/cve/CVE-2021-47305/	self
https://www.suse.com/security/cve/CVE-2021-47307/	self
https://www.suse.com/security/cve/CVE-2021-47308/	self
https://www.suse.com/security/cve/CVE-2021-47314/	self
https://www.suse.com/security/cve/CVE-2021-47315/	self
https://www.suse.com/security/cve/CVE-2021-47320/	self
https://www.suse.com/security/cve/CVE-2021-47321/	self
https://www.suse.com/security/cve/CVE-2021-47323/	self
https://www.suse.com/security/cve/CVE-2021-47324/	self
https://www.suse.com/security/cve/CVE-2021-47330/	self
https://www.suse.com/security/cve/CVE-2021-47332/	self
https://www.suse.com/security/cve/CVE-2021-47333/	self
https://www.suse.com/security/cve/CVE-2021-47334/	self
https://www.suse.com/security/cve/CVE-2021-47338/	self
https://www.suse.com/security/cve/CVE-2021-47341/	self
https://www.suse.com/security/cve/CVE-2021-47344/	self
https://www.suse.com/security/cve/CVE-2021-47347/	self
https://www.suse.com/security/cve/CVE-2021-47350/	self
https://www.suse.com/security/cve/CVE-2021-47354/	self
https://www.suse.com/security/cve/CVE-2021-47356/	self
https://www.suse.com/security/cve/CVE-2021-47369/	self
https://www.suse.com/security/cve/CVE-2021-47375/	self
https://www.suse.com/security/cve/CVE-2021-47378/	self
https://www.suse.com/security/cve/CVE-2021-47381/	self
https://www.suse.com/security/cve/CVE-2021-47382/	self
https://www.suse.com/security/cve/CVE-2021-47383/	self
https://www.suse.com/security/cve/CVE-2021-47388/	self
https://www.suse.com/security/cve/CVE-2021-47391/	self
https://www.suse.com/security/cve/CVE-2021-47393/	self
https://www.suse.com/security/cve/CVE-2021-47395/	self
https://www.suse.com/security/cve/CVE-2021-47396/	self
https://www.suse.com/security/cve/CVE-2021-47399/	self
https://www.suse.com/security/cve/CVE-2021-47402/	self
https://www.suse.com/security/cve/CVE-2021-47404/	self
https://www.suse.com/security/cve/CVE-2021-47405/	self
https://www.suse.com/security/cve/CVE-2021-47416/	self
https://www.suse.com/security/cve/CVE-2021-47423/	self
https://www.suse.com/security/cve/CVE-2021-47424/	self
https://www.suse.com/security/cve/CVE-2021-47425/	self
https://www.suse.com/security/cve/CVE-2021-47431/	self
https://www.suse.com/security/cve/CVE-2021-47434/	self
https://www.suse.com/security/cve/CVE-2021-47436/	self
https://www.suse.com/security/cve/CVE-2021-47441/	self
https://www.suse.com/security/cve/CVE-2021-47442/	self
https://www.suse.com/security/cve/CVE-2021-47443/	self
https://www.suse.com/security/cve/CVE-2021-47445/	self
https://www.suse.com/security/cve/CVE-2021-47456/	self
https://www.suse.com/security/cve/CVE-2021-47460/	self
https://www.suse.com/security/cve/CVE-2021-47464/	self
https://www.suse.com/security/cve/CVE-2021-47465/	self
https://www.suse.com/security/cve/CVE-2021-47468/	self
https://www.suse.com/security/cve/CVE-2021-47473/	self
https://www.suse.com/security/cve/CVE-2021-47482/	self
https://www.suse.com/security/cve/CVE-2021-47483/	self
https://www.suse.com/security/cve/CVE-2021-47485/	self
https://www.suse.com/security/cve/CVE-2021-47495/	self
https://www.suse.com/security/cve/CVE-2021-47496/	self
https://www.suse.com/security/cve/CVE-2021-47497/	self
https://www.suse.com/security/cve/CVE-2021-47500/	self
https://www.suse.com/security/cve/CVE-2021-47505/	self
https://www.suse.com/security/cve/CVE-2021-47506/	self
https://www.suse.com/security/cve/CVE-2021-47511/	self
https://www.suse.com/security/cve/CVE-2021-47516/	self
https://www.suse.com/security/cve/CVE-2021-47522/	self
https://www.suse.com/security/cve/CVE-2021-47538/	self
https://www.suse.com/security/cve/CVE-2021-47541/	self
https://www.suse.com/security/cve/CVE-2021-47542/	self
https://www.suse.com/security/cve/CVE-2021-47562/	self
https://www.suse.com/security/cve/CVE-2021-47563/	self
https://www.suse.com/security/cve/CVE-2021-47565/	self
https://www.suse.com/security/cve/CVE-2022-20132/	self
https://www.suse.com/security/cve/CVE-2022-48673/	self
https://www.suse.com/security/cve/CVE-2023-0160/	self
https://www.suse.com/security/cve/CVE-2023-1829/	self
https://www.suse.com/security/cve/CVE-2023-2176/	self
https://www.suse.com/security/cve/CVE-2023-4244/	self
https://www.suse.com/security/cve/CVE-2023-47233/	self
https://www.suse.com/security/cve/CVE-2023-52433/	self
https://www.suse.com/security/cve/CVE-2023-52581/	self
https://www.suse.com/security/cve/CVE-2023-52591/	self
https://www.suse.com/security/cve/CVE-2023-52654/	self
https://www.suse.com/security/cve/CVE-2023-52655/	self
https://www.suse.com/security/cve/CVE-2023-52686/	self
https://www.suse.com/security/cve/CVE-2023-52840/	self
https://www.suse.com/security/cve/CVE-2023-52871/	self
https://www.suse.com/security/cve/CVE-2023-52880/	self
https://www.suse.com/security/cve/CVE-2023-6531/	self
https://www.suse.com/security/cve/CVE-2024-26581/	self
https://www.suse.com/security/cve/CVE-2024-26643/	self
https://www.suse.com/security/cve/CVE-2024-26828/	self
https://www.suse.com/security/cve/CVE-2024-26925/	self
https://www.suse.com/security/cve/CVE-2024-26929/	self
https://www.suse.com/security/cve/CVE-2024-26930/	self
https://www.suse.com/security/cve/CVE-2024-27398/	self
https://www.suse.com/security/cve/CVE-2024-27413/	self
https://www.suse.com/security/cve/CVE-2024-35811/	self
https://www.suse.com/security/cve/CVE-2024-35895/	self
https://www.suse.com/security/cve/CVE-2024-35914/	self
https://www.suse.com/security/cve/CVE-2021-3743	external
https://bugzilla.suse.com/1189883	external
https://www.suse.com/security/cve/CVE-2021-39698	external
https://bugzilla.suse.com/1196956	external
https://bugzilla.suse.com/1196959	external
https://bugzilla.suse.com/1209225	external
https://www.suse.com/security/cve/CVE-2021-43056	external
https://bugzilla.suse.com/1192107	external
https://www.suse.com/security/cve/CVE-2021-43527	external
https://bugzilla.suse.com/1193170	external
https://bugzilla.suse.com/1193331	external
https://bugzilla.suse.com/1193378	external
https://bugzilla.suse.com/1194288	external
https://bugzilla.suse.com/1199301	external
https://bugzilla.suse.com/1225630	external
https://www.suse.com/security/cve/CVE-2021-47104	external
https://bugzilla.suse.com/1220960	external
https://www.suse.com/security/cve/CVE-2021-47220	external
https://bugzilla.suse.com/1224859	external
https://www.suse.com/security/cve/CVE-2021-47229	external
https://bugzilla.suse.com/1224854	external
https://www.suse.com/security/cve/CVE-2021-47231	external
https://bugzilla.suse.com/1224849	external
https://www.suse.com/security/cve/CVE-2021-47236	external
https://bugzilla.suse.com/1224841	external
https://www.suse.com/security/cve/CVE-2021-47239	external
https://bugzilla.suse.com/1224846	external
https://www.suse.com/security/cve/CVE-2021-47240	external
https://bugzilla.suse.com/1224843	external
https://www.suse.com/security/cve/CVE-2021-47246	external
https://bugzilla.suse.com/1224831	external
https://www.suse.com/security/cve/CVE-2021-47252	external
https://bugzilla.suse.com/1224882	external
https://www.suse.com/security/cve/CVE-2021-47254	external
https://bugzilla.suse.com/1224888	external
https://bugzilla.suse.com/1227559	external
https://www.suse.com/security/cve/CVE-2021-47255	external
https://bugzilla.suse.com/1224832	external
https://www.suse.com/security/cve/CVE-2021-47259	external
https://bugzilla.suse.com/1224953	external
https://bugzilla.suse.com/1227653	external
https://www.suse.com/security/cve/CVE-2021-47260	external
https://bugzilla.suse.com/1224834	external
https://www.suse.com/security/cve/CVE-2021-47261	external
https://bugzilla.suse.com/1224954	external
https://bugzilla.suse.com/1227751	external
https://www.suse.com/security/cve/CVE-2021-47267	external
https://bugzilla.suse.com/1224993	external
https://www.suse.com/security/cve/CVE-2021-47269	external
https://bugzilla.suse.com/1224996	external
https://www.suse.com/security/cve/CVE-2021-47270	external
https://bugzilla.suse.com/1224997	external
https://www.suse.com/security/cve/CVE-2021-47274	external
https://bugzilla.suse.com/1224990	external
https://www.suse.com/security/cve/CVE-2021-47275	external
https://bugzilla.suse.com/1224965	external
https://www.suse.com/security/cve/CVE-2021-47276	external
https://bugzilla.suse.com/1224966	external
https://www.suse.com/security/cve/CVE-2021-47280	external
https://bugzilla.suse.com/1224982	external
https://www.suse.com/security/cve/CVE-2021-47284	external
https://bugzilla.suse.com/1224987	external
https://www.suse.com/security/cve/CVE-2021-47285	external
https://bugzilla.suse.com/1224981	external
https://www.suse.com/security/cve/CVE-2021-47288	external
https://bugzilla.suse.com/1224889	external
https://www.suse.com/security/cve/CVE-2021-47289	external
https://bugzilla.suse.com/1224984	external
https://www.suse.com/security/cve/CVE-2021-47296	external
https://bugzilla.suse.com/1224891	external
https://www.suse.com/security/cve/CVE-2021-47301	external
https://bugzilla.suse.com/1224916	external
https://www.suse.com/security/cve/CVE-2021-47302	external
https://bugzilla.suse.com/1224917	external
https://www.suse.com/security/cve/CVE-2021-47305	external
https://bugzilla.suse.com/1224968	external
https://www.suse.com/security/cve/CVE-2021-47307	external
https://bugzilla.suse.com/1224961	external
https://www.suse.com/security/cve/CVE-2021-47308	external
https://bugzilla.suse.com/1224963	external
https://www.suse.com/security/cve/CVE-2021-47314	external
https://bugzilla.suse.com/1224893	external
https://www.suse.com/security/cve/CVE-2021-47315	external
https://bugzilla.suse.com/1224892	external
https://www.suse.com/security/cve/CVE-2021-47320	external
https://bugzilla.suse.com/1225058	external
https://www.suse.com/security/cve/CVE-2021-47321	external
https://bugzilla.suse.com/1225060	external
https://www.suse.com/security/cve/CVE-2021-47323	external
https://bugzilla.suse.com/1225026	external
https://bugzilla.suse.com/1227557	external
https://www.suse.com/security/cve/CVE-2021-47324	external
https://bugzilla.suse.com/1225030	external
https://bugzilla.suse.com/1225038	external
https://www.suse.com/security/cve/CVE-2021-47330	external
https://bugzilla.suse.com/1225084	external
https://www.suse.com/security/cve/CVE-2021-47332	external
https://bugzilla.suse.com/1225091	external
https://www.suse.com/security/cve/CVE-2021-47333	external
https://bugzilla.suse.com/1225113	external
https://www.suse.com/security/cve/CVE-2021-47334	external
https://bugzilla.suse.com/1225112	external
https://www.suse.com/security/cve/CVE-2021-47338	external
https://bugzilla.suse.com/1224924	external
https://www.suse.com/security/cve/CVE-2021-47341	external
https://bugzilla.suse.com/1224923	external
https://www.suse.com/security/cve/CVE-2021-47344	external
https://bugzilla.suse.com/1224922	external
https://www.suse.com/security/cve/CVE-2021-47347	external
https://bugzilla.suse.com/1225177	external
https://bugzilla.suse.com/1225305	external
https://www.suse.com/security/cve/CVE-2021-47350	external
https://bugzilla.suse.com/1225181	external
https://www.suse.com/security/cve/CVE-2021-47354	external
https://bugzilla.suse.com/1225140	external
https://www.suse.com/security/cve/CVE-2021-47356	external
https://bugzilla.suse.com/1225143	external
https://www.suse.com/security/cve/CVE-2021-47369	external
https://bugzilla.suse.com/1225164	external
https://bugzilla.suse.com/1227324	external
https://www.suse.com/security/cve/CVE-2021-47375	external
https://bugzilla.suse.com/1225193	external
https://bugzilla.suse.com/1225194	external
https://www.suse.com/security/cve/CVE-2021-47378	external
https://bugzilla.suse.com/1225201	external
https://bugzilla.suse.com/1225202	external
https://www.suse.com/security/cve/CVE-2021-47381	external
https://bugzilla.suse.com/1225206	external
https://www.suse.com/security/cve/CVE-2021-47382	external
https://bugzilla.suse.com/1225207	external
https://www.suse.com/security/cve/CVE-2021-47383	external
https://bugzilla.suse.com/1225208	external
https://bugzilla.suse.com/1225211	external
https://www.suse.com/security/cve/CVE-2021-47388	external
https://bugzilla.suse.com/1225214	external
https://www.suse.com/security/cve/CVE-2021-47391	external
https://bugzilla.suse.com/1225318	external
https://bugzilla.suse.com/1225319	external
https://www.suse.com/security/cve/CVE-2021-47393	external
https://bugzilla.suse.com/1225321	external
https://www.suse.com/security/cve/CVE-2021-47395	external
https://bugzilla.suse.com/1225326	external
https://www.suse.com/security/cve/CVE-2021-47396	external
https://bugzilla.suse.com/1225327	external
https://www.suse.com/security/cve/CVE-2021-47399	external
https://bugzilla.suse.com/1225328	external
https://www.suse.com/security/cve/CVE-2021-47402	external
https://bugzilla.suse.com/1225301	external
https://bugzilla.suse.com/1225302	external
https://www.suse.com/security/cve/CVE-2021-47404	external
https://bugzilla.suse.com/1225303	external
https://www.suse.com/security/cve/CVE-2021-47405	external
https://bugzilla.suse.com/1225238	external
https://www.suse.com/security/cve/CVE-2021-47416	external
https://bugzilla.suse.com/1225189	external
https://bugzilla.suse.com/1225336	external
https://www.suse.com/security/cve/CVE-2021-47423	external
https://bugzilla.suse.com/1225366	external
https://www.suse.com/security/cve/CVE-2021-47424	external
https://bugzilla.suse.com/1225367	external
https://www.suse.com/security/cve/CVE-2021-47425	external
https://bugzilla.suse.com/1225223	external
https://www.suse.com/security/cve/CVE-2021-47431	external
https://bugzilla.suse.com/1225390	external
https://www.suse.com/security/cve/CVE-2021-47434	external
https://bugzilla.suse.com/1225232	external
https://www.suse.com/security/cve/CVE-2021-47436	external
https://bugzilla.suse.com/1225244	external
https://www.suse.com/security/cve/CVE-2021-47441	external
https://bugzilla.suse.com/1225224	external
https://www.suse.com/security/cve/CVE-2021-47442	external
https://bugzilla.suse.com/1225263	external
https://www.suse.com/security/cve/CVE-2021-47443	external
https://bugzilla.suse.com/1225262	external
https://www.suse.com/security/cve/CVE-2021-47445	external
https://bugzilla.suse.com/1225261	external
https://www.suse.com/security/cve/CVE-2021-47456	external
https://bugzilla.suse.com/1225256	external
https://www.suse.com/security/cve/CVE-2021-47460	external
https://bugzilla.suse.com/1225251	external
https://www.suse.com/security/cve/CVE-2021-47464	external
https://bugzilla.suse.com/1225393	external
https://www.suse.com/security/cve/CVE-2021-47465	external
https://bugzilla.suse.com/1225341	external
https://bugzilla.suse.com/1227904	external
https://www.suse.com/security/cve/CVE-2021-47468	external
https://bugzilla.suse.com/1225346	external
https://www.suse.com/security/cve/CVE-2021-47473	external
https://bugzilla.suse.com/1225192	external
https://www.suse.com/security/cve/CVE-2021-47482	external
https://bugzilla.suse.com/1224909	external
https://www.suse.com/security/cve/CVE-2021-47483	external
https://bugzilla.suse.com/1224907	external
https://bugzilla.suse.com/1224908	external
https://www.suse.com/security/cve/CVE-2021-47485	external
https://bugzilla.suse.com/1224904	external
https://www.suse.com/security/cve/CVE-2021-47495	external
https://bugzilla.suse.com/1225351	external
https://www.suse.com/security/cve/CVE-2021-47496	external
https://bugzilla.suse.com/1225354	external
https://bugzilla.suse.com/1227656	external
https://www.suse.com/security/cve/CVE-2021-47497	external
https://bugzilla.suse.com/1225355	external
https://bugzilla.suse.com/1227655	external
https://www.suse.com/security/cve/CVE-2021-47500	external
https://bugzilla.suse.com/1225360	external
https://bugzilla.suse.com/1227698	external
https://www.suse.com/security/cve/CVE-2021-47505	external
https://bugzilla.suse.com/1225400	external
https://bugzilla.suse.com/1227652	external
https://www.suse.com/security/cve/CVE-2021-47506	external
https://bugzilla.suse.com/1225404	external
https://bugzilla.suse.com/1227497	external
https://www.suse.com/security/cve/CVE-2021-47511	external
https://bugzilla.suse.com/1225411	external
https://bugzilla.suse.com/1227700	external
https://www.suse.com/security/cve/CVE-2021-47516	external
https://bugzilla.suse.com/1225427	external
https://www.suse.com/security/cve/CVE-2021-47522	external
https://bugzilla.suse.com/1225437	external
https://www.suse.com/security/cve/CVE-2021-47538	external
https://bugzilla.suse.com/1225448	external
https://www.suse.com/security/cve/CVE-2021-47541	external
https://bugzilla.suse.com/1225453	external
https://bugzilla.suse.com/1225454	external
https://www.suse.com/security/cve/CVE-2021-47542	external
https://bugzilla.suse.com/1225455	external
https://www.suse.com/security/cve/CVE-2021-47562	external
https://bugzilla.suse.com/1225499	external
https://www.suse.com/security/cve/CVE-2021-47563	external
https://bugzilla.suse.com/1225500	external
https://bugzilla.suse.com/1227695	external
https://www.suse.com/security/cve/CVE-2021-47565	external
https://bugzilla.suse.com/1225384	external
https://www.suse.com/security/cve/CVE-2022-20132	external
https://bugzilla.suse.com/1200619	external
https://bugzilla.suse.com/1212287	external
https://www.suse.com/security/cve/CVE-2022-48673	external
https://bugzilla.suse.com/1223934	external
https://bugzilla.suse.com/1223940	external
https://www.suse.com/security/cve/CVE-2023-0160	external
https://bugzilla.suse.com/1209657	external
https://www.suse.com/security/cve/CVE-2023-1829	external
https://bugzilla.suse.com/1210335	external
https://bugzilla.suse.com/1210619	external
https://bugzilla.suse.com/1217444	external
https://bugzilla.suse.com/1217531	external
https://bugzilla.suse.com/1220886	external
https://bugzilla.suse.com/1228311	external
https://www.suse.com/security/cve/CVE-2023-2176	external
https://bugzilla.suse.com/1210629	external
https://bugzilla.suse.com/1210630	external
https://bugzilla.suse.com/1213842	external
https://www.suse.com/security/cve/CVE-2023-4244	external
https://bugzilla.suse.com/1215420	external
https://bugzilla.suse.com/1215424	external
https://www.suse.com/security/cve/CVE-2023-47233	external
https://bugzilla.suse.com/1216702	external
https://bugzilla.suse.com/1224592	external
https://www.suse.com/security/cve/CVE-2023-52433	external
https://bugzilla.suse.com/1220137	external
https://bugzilla.suse.com/1245982	external
https://www.suse.com/security/cve/CVE-2023-52581	external
https://bugzilla.suse.com/1220877	external
https://www.suse.com/security/cve/CVE-2023-52591	external
https://bugzilla.suse.com/1221044	external
https://bugzilla.suse.com/1221578	external
https://bugzilla.suse.com/1221598	external
https://www.suse.com/security/cve/CVE-2023-52654	external
https://bugzilla.suse.com/1224099	external
https://www.suse.com/security/cve/CVE-2023-52655	external
https://bugzilla.suse.com/1217169	external
https://www.suse.com/security/cve/CVE-2023-52686	external
https://bugzilla.suse.com/1224682	external
https://www.suse.com/security/cve/CVE-2023-52840	external
https://bugzilla.suse.com/1224928	external
https://www.suse.com/security/cve/CVE-2023-52871	external
https://bugzilla.suse.com/1225534	external
https://bugzilla.suse.com/1227475	external
https://www.suse.com/security/cve/CVE-2023-52880	external
https://bugzilla.suse.com/1222619	external
https://www.suse.com/security/cve/CVE-2023-6531	external
https://bugzilla.suse.com/1218447	external
https://bugzilla.suse.com/1218487	external
https://www.suse.com/security/cve/CVE-2024-26581	external
https://bugzilla.suse.com/1220144	external
https://www.suse.com/security/cve/CVE-2024-26643	external
https://bugzilla.suse.com/1221829	external
https://www.suse.com/security/cve/CVE-2024-26828	external
https://bugzilla.suse.com/1223084	external
https://bugzilla.suse.com/1223363	external
https://www.suse.com/security/cve/CVE-2024-26925	external
https://bugzilla.suse.com/1223390	external
https://bugzilla.suse.com/1224175	external
https://www.suse.com/security/cve/CVE-2024-26929	external
https://bugzilla.suse.com/1223715	external
https://bugzilla.suse.com/1223716	external
https://www.suse.com/security/cve/CVE-2024-26930	external
https://bugzilla.suse.com/1223626	external
https://bugzilla.suse.com/1223681	external
https://www.suse.com/security/cve/CVE-2024-27398	external
https://bugzilla.suse.com/1224174	external
https://bugzilla.suse.com/1225013	external
https://www.suse.com/security/cve/CVE-2024-27413	external
https://bugzilla.suse.com/1224438	external
https://bugzilla.suse.com/1225315	external
https://www.suse.com/security/cve/CVE-2024-35811	external
https://bugzilla.suse.com/1224592	external
https://www.suse.com/security/cve/CVE-2024-35895	external
https://bugzilla.suse.com/1224511	external
https://www.suse.com/security/cve/CVE-2024-35914	external
https://bugzilla.suse.com/1224482	external

JSON

To clipboard

Loading 4.5 MB of JSON…

CVE-2021-3743 (GCVE-0-2021-3743)

Vulnerability from cvelistv5 – Published: 2022-03-04 15:52 – Updated: 2024-08-03 17:01

Summary

An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Severity

No CVSS data available.

CWE

CWE-125 - - Out-of-bounds Read

Assigner

redhat redhat root

References

8 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1997961	x_refsource_MISC
https://lists.openwall.net/netdev/2021/08/17/124	x_refsource_MISC
https://www.openwall.com/lists/oss-security/2021/…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/n…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://github.com/torvalds/linux/commit/7e78c597…	x_refsource_MISC
https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022040…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Kernel	Affected: Affects linux kernel v5.14.0-rc6 and above.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:01:08.327Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1997961"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.openwall.net/netdev/2021/08/17/124"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2021/08/27/2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e78c597c3eb"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7e78c597c3ebfd0cb329aa09a838734147e4f117"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/7e78c597c3ebfd0cb329aa09a838734147e4f117"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220407-0007/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Affects linux kernel v5.14.0-rc6 and above."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 - Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-07-25T16:36:35.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1997961"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.openwall.net/netdev/2021/08/17/124"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2021/08/27/2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e78c597c3eb"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7e78c597c3ebfd0cb329aa09a838734147e4f117"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/7e78c597c3ebfd0cb329aa09a838734147e4f117"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220407-0007/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2021-3743",
    "datePublished": "2022-03-04T15:52:55.000Z",
    "dateReserved": "2021-08-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:01:08.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-39698 (GCVE-0-2021-39698)

Vulnerability from cvelistv5 – Published: 2022-03-16 14:04 – Updated: 2024-08-04 02:13

Summary

In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel

Severity

No CVSS data available.

CWE

Elevation of privilege

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/security/bulletin/2022-03-01	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Android	Affected: Android kernel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:13:37.664Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2022-03-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Android",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Android kernel"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-16T14:04:14.000Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://source.android.com/security/bulletin/2022-03-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@android.com",
          "ID": "CVE-2021-39698",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Android",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android kernel"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-185125206References: Upstream kernel"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://source.android.com/security/bulletin/2022-03-01",
              "refsource": "MISC",
              "url": "https://source.android.com/security/bulletin/2022-03-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2021-39698",
    "datePublished": "2022-03-16T14:04:14.000Z",
    "dateReserved": "2021-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:13:37.664Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-43056 (GCVE-0-2021-43056)

Vulnerability from cvelistv5 – Published: 2021-10-28 03:13 – Updated: 2024-08-04 03:47

Summary

An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://git.kernel.org/linus/cdeb5d7d890e14f3b70e…	x_refsource_MISC
https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.f…	x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2021/10/28/1	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T03:47:13.219Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/linus/cdeb5d7d890e14f3b70e8087e745c4a6a7d9f337"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf%40mpe.ellerman.id.au/T/#u"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15"
          },
          {
            "name": "[oss-security] 20211028 Re: Linux kernel: powerpc: KVM guest can trigger host crash on Power8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/10/28/1"
          },
          {
            "name": "FEDORA-2021-4320606094",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBM4FP3IT3JZ2O7EBS7TEOG657N4ZGRE/"
          },
          {
            "name": "FEDORA-2021-ed8c2e1098",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRAIS3PG4EV5WFLYESR6FXWM4BJJGWVA/"
          },
          {
            "name": "FEDORA-2021-4fed2b55c4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AA7EAPPKWG4LMTQQLNNSKATY6ST2KQFE/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-04T03:06:31.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/linus/cdeb5d7d890e14f3b70e8087e745c4a6a7d9f337"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf%40mpe.ellerman.id.au/T/#u"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15"
        },
        {
          "name": "[oss-security] 20211028 Re: Linux kernel: powerpc: KVM guest can trigger host crash on Power8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/10/28/1"
        },
        {
          "name": "FEDORA-2021-4320606094",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBM4FP3IT3JZ2O7EBS7TEOG657N4ZGRE/"
        },
        {
          "name": "FEDORA-2021-ed8c2e1098",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRAIS3PG4EV5WFLYESR6FXWM4BJJGWVA/"
        },
        {
          "name": "FEDORA-2021-4fed2b55c4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AA7EAPPKWG4LMTQQLNNSKATY6ST2KQFE/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-43056",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/linus/cdeb5d7d890e14f3b70e8087e745c4a6a7d9f337",
              "refsource": "MISC",
              "url": "https://git.kernel.org/linus/cdeb5d7d890e14f3b70e8087e745c4a6a7d9f337"
            },
            {
              "name": "https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf@mpe.ellerman.id.au/T/#u",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf@mpe.ellerman.id.au/T/#u"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15"
            },
            {
              "name": "[oss-security] 20211028 Re: Linux kernel: powerpc: KVM guest can trigger host crash on Power8",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/10/28/1"
            },
            {
              "name": "FEDORA-2021-4320606094",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BBM4FP3IT3JZ2O7EBS7TEOG657N4ZGRE/"
            },
            {
              "name": "FEDORA-2021-ed8c2e1098",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RRAIS3PG4EV5WFLYESR6FXWM4BJJGWVA/"
            },
            {
              "name": "FEDORA-2021-4fed2b55c4",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AA7EAPPKWG4LMTQQLNNSKATY6ST2KQFE/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-43056",
    "datePublished": "2021-10-28T03:13:44.000Z",
    "dateReserved": "2021-10-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T03:47:13.219Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-43527 (GCVE-0-2021-43527)

Vulnerability from cvelistv5 – Published: 2021-12-08 00:00 – Updated: 2024-08-04 03:55

Summary

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.

Severity

No CVSS data available.

CWE

Memory corruption via DER-encoded DSA and RSA-PSS signatures

Assigner

mozilla mitre root

References

9 references

URL	Tags
https://www.mozilla.org/security/advisories/mfsa2…
https://bugzilla.mozilla.org/show_bug.cgi?id=1737470
https://ftp.mozilla.org/pub/security/nss/releases…
https://ftp.mozilla.org/pub/security/nss/releases…
https://www.oracle.com/security-alerts/cpuapr2022.html
https://security.netapp.com/advisory/ntap-2021122…
https://cert-portal.siemens.com/productcert/pdf/s…
https://www.starwindsoftware.com/security/sw-2022…
https://security.gentoo.org/glsa/202212-05	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Mozilla	NSS	Affected: unspecified , < 3.73 (custom) Affected: unspecified , < 3.68.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T03:55:29.297Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2021-51/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1737470"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_73_RTM/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20211229-0002/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.starwindsoftware.com/security/sw-20220802-0001/"
          },
          {
            "name": "GLSA-202212-05",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202212-05"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "NSS",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "3.73",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "3.68.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \\#7, or PKCS \\#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS \u003c 3.73 and NSS \u003c 3.68.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption via DER-encoded DSA and RSA-PSS signatures",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-19T00:00:00.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2021-51/"
        },
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1737470"
        },
        {
          "url": "https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_73_RTM/"
        },
        {
          "url": "https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20211229-0002/"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf"
        },
        {
          "url": "https://www.starwindsoftware.com/security/sw-20220802-0001/"
        },
        {
          "name": "GLSA-202212-05",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202212-05"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2021-43527",
    "datePublished": "2021-12-08T00:00:00.000Z",
    "dateReserved": "2021-11-08T00:00:00.000Z",
    "dateUpdated": "2024-08-04T03:55:29.297Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-47104 (GCVE-0-2021-47104)

Vulnerability from cvelistv5 – Published: 2024-03-04 18:15 – Updated: 2026-05-23 15:19

Title

IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()

Summary

In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() The wrong goto label was used for the error case and missed cleanup of the pkt allocation. Addresses-Coverity-ID: 1493352 ("Resource leak")

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-03-04 20:32 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/1ced0a3015a95c6a6…
https://git.kernel.org/stable/c/76b648063eb36c72d…
https://git.kernel.org/stable/c/d53456492b5d02033…
https://git.kernel.org/stable/c/0aaec9c5f60754b56…
https://git.kernel.org/stable/c/79dcbd8176152b860…
https://git.kernel.org/stable/c/7cf6466e00a77b0a9…
https://git.kernel.org/stable/c/aefcc25f3a0cd28a8…
https://git.kernel.org/stable/c/bee90911e0138c76e…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: bda41654b6e0c125a624ca35d6d20beb8015b5d0 , < 1ced0a3015a95c6a6db45e37250912c4c86697ab (git) Affected: 3f57c3f67fd93b4da86aeffea1ca32c484d054ad , < 76b648063eb36c72dfc0a6896de8a0a7d2c7841c (git) Affected: 60833707b968d5ae02a75edb7886dcd4a957cf0d , < d53456492b5d02033c73dfa0f3b94c86337791ba (git) Affected: 73d2892148aa4397a885b4f4afcfc5b27a325c42 , < 0aaec9c5f60754b56f84460ea439b8c5e91f4caa (git) Affected: 0f8cdfff06829a0b0348b6debc29ff6a61967724 , < 79dcbd8176152b860028b62f81a635d987365752 (git) Affected: c3e17e58f571f34c51aeb17274ed02c2ed5cf780 , < 7cf6466e00a77b0a914b7b2c28a1fc7947d55e59 (git) Affected: d39bf40e55e666b5905fdbd46a0dced030ce87be , < aefcc25f3a0cd28a87d11d41d30419a12cd26a34 (git) Affected: d39bf40e55e666b5905fdbd46a0dced030ce87be , < bee90911e0138c76ee67458ac0d58b38a3190f65 (git) Affected: 0d4395477741608d123dad51def9fe50b7ebe952 (git) Affected: 4.4.292 , < 4.4.297 (semver) Affected: 4.9.290 , < 4.9.295 (semver) Affected: 4.14.255 , < 4.14.260 (semver) Affected: 4.19.216 , < 4.19.223 (semver) Affected: 5.4.157 , < 5.4.169 (semver) Affected: 5.10.77 , < 5.10.89 (semver) Affected: 5.14.16 , < 5.15 (semver)
Linux	Linux	Affected: 5.15 Unaffected: 0 , < 5.15 (semver) Unaffected: 4.4.297 , ≤ 4.4.* (semver) Unaffected: 4.9.295 , ≤ 4.9.* (semver) Unaffected: 4.14.260 , ≤ 4.14.* (semver) Unaffected: 4.19.223 , ≤ 4.19.* (semver) Unaffected: 5.4.169 , ≤ 5.4.* (semver) Unaffected: 5.10.89 , ≤ 5.10.* (semver) Unaffected: 5.15.12 , ≤ 5.15.* (semver) Unaffected: 5.16 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47104",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-04T20:32:54.348631Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:22:07.588Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:24:39.970Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697ab"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d53456492b5d02033c73dfa0f3b94c86337791ba"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caa"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/79dcbd8176152b860028b62f81a635d987365752"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7cf6466e00a77b0a914b7b2c28a1fc7947d55e59"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/aefcc25f3a0cd28a87d11d41d30419a12cd26a34"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/bee90911e0138c76ee67458ac0d58b38a3190f65"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/hw/qib/qib_user_sdma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1ced0a3015a95c6a6db45e37250912c4c86697ab",
              "status": "affected",
              "version": "bda41654b6e0c125a624ca35d6d20beb8015b5d0",
              "versionType": "git"
            },
            {
              "lessThan": "76b648063eb36c72dfc0a6896de8a0a7d2c7841c",
              "status": "affected",
              "version": "3f57c3f67fd93b4da86aeffea1ca32c484d054ad",
              "versionType": "git"
            },
            {
              "lessThan": "d53456492b5d02033c73dfa0f3b94c86337791ba",
              "status": "affected",
              "version": "60833707b968d5ae02a75edb7886dcd4a957cf0d",
              "versionType": "git"
            },
            {
              "lessThan": "0aaec9c5f60754b56f84460ea439b8c5e91f4caa",
              "status": "affected",
              "version": "73d2892148aa4397a885b4f4afcfc5b27a325c42",
              "versionType": "git"
            },
            {
              "lessThan": "79dcbd8176152b860028b62f81a635d987365752",
              "status": "affected",
              "version": "0f8cdfff06829a0b0348b6debc29ff6a61967724",
              "versionType": "git"
            },
            {
              "lessThan": "7cf6466e00a77b0a914b7b2c28a1fc7947d55e59",
              "status": "affected",
              "version": "c3e17e58f571f34c51aeb17274ed02c2ed5cf780",
              "versionType": "git"
            },
            {
              "lessThan": "aefcc25f3a0cd28a87d11d41d30419a12cd26a34",
              "status": "affected",
              "version": "d39bf40e55e666b5905fdbd46a0dced030ce87be",
              "versionType": "git"
            },
            {
              "lessThan": "bee90911e0138c76ee67458ac0d58b38a3190f65",
              "status": "affected",
              "version": "d39bf40e55e666b5905fdbd46a0dced030ce87be",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0d4395477741608d123dad51def9fe50b7ebe952",
              "versionType": "git"
            },
            {
              "lessThan": "4.4.297",
              "status": "affected",
              "version": "4.4.292",
              "versionType": "semver"
            },
            {
              "lessThan": "4.9.295",
              "status": "affected",
              "version": "4.9.290",
              "versionType": "semver"
            },
            {
              "lessThan": "4.14.260",
              "status": "affected",
              "version": "4.14.255",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.223",
              "status": "affected",
              "version": "4.19.216",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.169",
              "status": "affected",
              "version": "5.4.157",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.89",
              "status": "affected",
              "version": "5.10.77",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15",
              "status": "affected",
              "version": "5.14.16",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/hw/qib/qib_user_sdma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.15"
            },
            {
              "lessThan": "5.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.297",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.295",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.260",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.223",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.169",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.89",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.297",
                  "versionStartIncluding": "4.4.292",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.295",
                  "versionStartIncluding": "4.9.290",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.260",
                  "versionStartIncluding": "4.14.255",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.223",
                  "versionStartIncluding": "4.19.216",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.169",
                  "versionStartIncluding": "5.4.157",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.89",
                  "versionStartIncluding": "5.10.77",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.12",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.14.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()\n\nThe wrong goto label was used for the error case and missed cleanup of the\npkt allocation.\n\nAddresses-Coverity-ID: 1493352 (\"Resource leak\")"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:19:19.643Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697ab"
        },
        {
          "url": "https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841c"
        },
        {
          "url": "https://git.kernel.org/stable/c/d53456492b5d02033c73dfa0f3b94c86337791ba"
        },
        {
          "url": "https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caa"
        },
        {
          "url": "https://git.kernel.org/stable/c/79dcbd8176152b860028b62f81a635d987365752"
        },
        {
          "url": "https://git.kernel.org/stable/c/7cf6466e00a77b0a914b7b2c28a1fc7947d55e59"
        },
        {
          "url": "https://git.kernel.org/stable/c/aefcc25f3a0cd28a87d11d41d30419a12cd26a34"
        },
        {
          "url": "https://git.kernel.org/stable/c/bee90911e0138c76ee67458ac0d58b38a3190f65"
        }
      ],
      "title": "IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47104",
    "datePublished": "2024-03-04T18:15:13.370Z",
    "dateReserved": "2024-03-04T18:12:48.835Z",
    "dateUpdated": "2026-05-23T15:19:19.643Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47220 (GCVE-0-2021-47220)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:19 – Updated: 2024-10-03 15:01

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2024-10-03T15:01:37.407Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47220",
    "datePublished": "2024-05-21T14:19:26.895Z",
    "dateRejected": "2024-10-03T15:01:37.407Z",
    "dateReserved": "2024-04-10T18:59:19.528Z",
    "dateUpdated": "2024-10-03T15:01:37.407Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-47229 (GCVE-0-2021-47229)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:19 – Updated: 2026-05-11 13:50

Title

PCI: aardvark: Fix kernel panic during PIO transfer

Summary

In the Linux kernel, the following vulnerability has been resolved: PCI: aardvark: Fix kernel panic during PIO transfer Trying to start a new PIO transfer by writing value 0 in PIO_START register when previous transfer has not yet completed (which is indicated by value 1 in PIO_START) causes an External Abort on CPU, which results in kernel panic: SError Interrupt on CPU0, code 0xbf000002 -- SError Kernel panic - not syncing: Asynchronous SError Interrupt To prevent kernel panic, it is required to reject a new PIO transfer when previous one has not finished yet. If previous PIO transfer is not finished yet, the kernel may issue a new PIO request only if the previous PIO transfer timed out. In the past the root cause of this issue was incorrectly identified (as it often happens during link retraining or after link down event) and special hack was implemented in Trusted Firmware to catch all SError events in EL3, to ignore errors with code 0xbf000002 and not forwarding any other errors to kernel and instead throw panic from EL3 Trusted Firmware handler. Links to discussion and patches about this issue: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=3c7dcdac5c50 https://lore.kernel.org/linux-pci/20190316161243.29517-1-repk@triplefau.lt/ https://lore.kernel.org/linux-pci/971be151d24312cc533989a64bd454b4@www.loen.fr/ https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/1541 But the real cause was the fact that during link retraining or after link down event the PIO transfer may take longer time, up to the 1.44s until it times out. This increased probability that a new PIO transfer would be issued by kernel while previous one has not finished yet. After applying this change into the kernel, it is possible to revert the mentioned TF-A hack and SError events do not have to be caught in TF-A EL3.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 15:40 UTC

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/400e6b1860c8be613…
https://git.kernel.org/stable/c/b00a9aaa4be20ad6e…
https://git.kernel.org/stable/c/4c90f90a91d75c3c7…
https://git.kernel.org/stable/c/1a1dbc4473974867f…
https://git.kernel.org/stable/c/3d213a4ddf49a860b…
https://git.kernel.org/stable/c/f18139966d072dab8…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 8c39d710363c14ecb09219332869707395d1d495 , < 400e6b1860c8be61388d0b77814c53260f96e17a (git) Affected: 8c39d710363c14ecb09219332869707395d1d495 , < b00a9aaa4be20ad6e3311fb78a485eae0899e89a (git) Affected: 8c39d710363c14ecb09219332869707395d1d495 , < 4c90f90a91d75c3c73dd633827c90e8746d9f54d (git) Affected: 8c39d710363c14ecb09219332869707395d1d495 , < 1a1dbc4473974867fe8c5f195c17b341c8e82867 (git) Affected: 8c39d710363c14ecb09219332869707395d1d495 , < 3d213a4ddf49a860be6e795482c17f87e0c82b2a (git) Affected: 8c39d710363c14ecb09219332869707395d1d495 , < f18139966d072dab8e4398c95ce955a9742e04f7 (git)
Linux	Linux	Affected: 4.8 Unaffected: 0 , < 4.8 (semver) Unaffected: 4.14.240 , ≤ 4.14.* (semver) Unaffected: 4.19.198 , ≤ 4.19.* (semver) Unaffected: 5.4.128 , ≤ 5.4.* (semver) Unaffected: 5.10.46 , ≤ 5.10.* (semver) Unaffected: 5.12.13 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:07.485Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/400e6b1860c8be61388d0b77814c53260f96e17a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b00a9aaa4be20ad6e3311fb78a485eae0899e89a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4c90f90a91d75c3c73dd633827c90e8746d9f54d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1a1dbc4473974867fe8c5f195c17b341c8e82867"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3d213a4ddf49a860be6e795482c17f87e0c82b2a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f18139966d072dab8e4398c95ce955a9742e04f7"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47229",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:40:07.082341Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:12.955Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/pci/controller/pci-aardvark.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "400e6b1860c8be61388d0b77814c53260f96e17a",
              "status": "affected",
              "version": "8c39d710363c14ecb09219332869707395d1d495",
              "versionType": "git"
            },
            {
              "lessThan": "b00a9aaa4be20ad6e3311fb78a485eae0899e89a",
              "status": "affected",
              "version": "8c39d710363c14ecb09219332869707395d1d495",
              "versionType": "git"
            },
            {
              "lessThan": "4c90f90a91d75c3c73dd633827c90e8746d9f54d",
              "status": "affected",
              "version": "8c39d710363c14ecb09219332869707395d1d495",
              "versionType": "git"
            },
            {
              "lessThan": "1a1dbc4473974867fe8c5f195c17b341c8e82867",
              "status": "affected",
              "version": "8c39d710363c14ecb09219332869707395d1d495",
              "versionType": "git"
            },
            {
              "lessThan": "3d213a4ddf49a860be6e795482c17f87e0c82b2a",
              "status": "affected",
              "version": "8c39d710363c14ecb09219332869707395d1d495",
              "versionType": "git"
            },
            {
              "lessThan": "f18139966d072dab8e4398c95ce955a9742e04f7",
              "status": "affected",
              "version": "8c39d710363c14ecb09219332869707395d1d495",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/pci/controller/pci-aardvark.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.240",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.240",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.198",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.128",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.46",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.13",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: aardvark: Fix kernel panic during PIO transfer\n\nTrying to start a new PIO transfer by writing value 0 in PIO_START register\nwhen previous transfer has not yet completed (which is indicated by value 1\nin PIO_START) causes an External Abort on CPU, which results in kernel\npanic:\n\n    SError Interrupt on CPU0, code 0xbf000002 -- SError\n    Kernel panic - not syncing: Asynchronous SError Interrupt\n\nTo prevent kernel panic, it is required to reject a new PIO transfer when\nprevious one has not finished yet.\n\nIf previous PIO transfer is not finished yet, the kernel may issue a new\nPIO request only if the previous PIO transfer timed out.\n\nIn the past the root cause of this issue was incorrectly identified (as it\noften happens during link retraining or after link down event) and special\nhack was implemented in Trusted Firmware to catch all SError events in EL3,\nto ignore errors with code 0xbf000002 and not forwarding any other errors\nto kernel and instead throw panic from EL3 Trusted Firmware handler.\n\nLinks to discussion and patches about this issue:\nhttps://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=3c7dcdac5c50\nhttps://lore.kernel.org/linux-pci/20190316161243.29517-1-repk@triplefau.lt/\nhttps://lore.kernel.org/linux-pci/971be151d24312cc533989a64bd454b4@www.loen.fr/\nhttps://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/1541\n\nBut the real cause was the fact that during link retraining or after link\ndown event the PIO transfer may take longer time, up to the 1.44s until it\ntimes out. This increased probability that a new PIO transfer would be\nissued by kernel while previous one has not finished yet.\n\nAfter applying this change into the kernel, it is possible to revert the\nmentioned TF-A hack and SError events do not have to be caught in TF-A EL3."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:50:27.543Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/400e6b1860c8be61388d0b77814c53260f96e17a"
        },
        {
          "url": "https://git.kernel.org/stable/c/b00a9aaa4be20ad6e3311fb78a485eae0899e89a"
        },
        {
          "url": "https://git.kernel.org/stable/c/4c90f90a91d75c3c73dd633827c90e8746d9f54d"
        },
        {
          "url": "https://git.kernel.org/stable/c/1a1dbc4473974867fe8c5f195c17b341c8e82867"
        },
        {
          "url": "https://git.kernel.org/stable/c/3d213a4ddf49a860be6e795482c17f87e0c82b2a"
        },
        {
          "url": "https://git.kernel.org/stable/c/f18139966d072dab8e4398c95ce955a9742e04f7"
        }
      ],
      "title": "PCI: aardvark: Fix kernel panic during PIO transfer",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47229",
    "datePublished": "2024-05-21T14:19:32.995Z",
    "dateReserved": "2024-04-10T18:59:19.530Z",
    "dateUpdated": "2026-05-11T13:50:27.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47231 (GCVE-0-2021-47231)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:19 – Updated: 2026-05-11 13:50

Title

can: mcba_usb: fix memory leak in mcba_usb

Summary

In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: fix memory leak in mcba_usb Syzbot reported memory leak in SocketCAN driver for Microchip CAN BUS Analyzer Tool. The problem was in unfreed usb_coherent. In mcba_usb_start() 20 coherent buffers are allocated and there is nothing, that frees them: 1) In callback function the urb is resubmitted and that's all 2) In disconnect function urbs are simply killed, but URB_FREE_BUFFER is not set (see mcba_usb_start) and this flag cannot be used with coherent buffers. Fail log: | [ 1354.053291][ T8413] mcba_usb 1-1:0.0 can0: device disconnected | [ 1367.059384][ T8420] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmem) So, all allocated buffers should be freed with usb_free_coherent() explicitly NOTE: The same pattern for allocating and freeing coherent buffers is used in drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-31 18:50 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/89df95ce32be204ee…
https://git.kernel.org/stable/c/a115198caaab6d663…
https://git.kernel.org/stable/c/6f87c0e21ad20dd3d…
https://git.kernel.org/stable/c/6bd3d80d1f019cefa…
https://git.kernel.org/stable/c/d0760a4ef85697bc7…
https://git.kernel.org/stable/c/91c02557174be7f72…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 51f3baad7de943780ce0c17bd7975df567dd6e14 , < 89df95ce32be204eef2e7d4b2f6fb552fb191a68 (git) Affected: 51f3baad7de943780ce0c17bd7975df567dd6e14 , < a115198caaab6d663bef75823a3c5f0802306d60 (git) Affected: 51f3baad7de943780ce0c17bd7975df567dd6e14 , < 6f87c0e21ad20dd3d22108e33db1c552dfa352a0 (git) Affected: 51f3baad7de943780ce0c17bd7975df567dd6e14 , < 6bd3d80d1f019cefa7011056c54b323f1d8b8e83 (git) Affected: 51f3baad7de943780ce0c17bd7975df567dd6e14 , < d0760a4ef85697bc756d06eae17ae27f3f055401 (git) Affected: 51f3baad7de943780ce0c17bd7975df567dd6e14 , < 91c02557174be7f72e46ed7311e3bea1939840b0 (git)
Linux	Linux	Affected: 4.12 Unaffected: 0 , < 4.12 (semver) Unaffected: 4.14.238 , ≤ 4.14.* (semver) Unaffected: 4.19.196 , ≤ 4.19.* (semver) Unaffected: 5.4.128 , ≤ 5.4.* (semver) Unaffected: 5.10.46 , ≤ 5.10.* (semver) Unaffected: 5.12.13 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:07.366Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/89df95ce32be204eef2e7d4b2f6fb552fb191a68"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a115198caaab6d663bef75823a3c5f0802306d60"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6f87c0e21ad20dd3d22108e33db1c552dfa352a0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6bd3d80d1f019cefa7011056c54b323f1d8b8e83"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d0760a4ef85697bc756d06eae17ae27f3f055401"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/91c02557174be7f72e46ed7311e3bea1939840b0"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-47231",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-31T18:50:07.041810Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T19:45:06.470Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/can/usb/mcba_usb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "89df95ce32be204eef2e7d4b2f6fb552fb191a68",
              "status": "affected",
              "version": "51f3baad7de943780ce0c17bd7975df567dd6e14",
              "versionType": "git"
            },
            {
              "lessThan": "a115198caaab6d663bef75823a3c5f0802306d60",
              "status": "affected",
              "version": "51f3baad7de943780ce0c17bd7975df567dd6e14",
              "versionType": "git"
            },
            {
              "lessThan": "6f87c0e21ad20dd3d22108e33db1c552dfa352a0",
              "status": "affected",
              "version": "51f3baad7de943780ce0c17bd7975df567dd6e14",
              "versionType": "git"
            },
            {
              "lessThan": "6bd3d80d1f019cefa7011056c54b323f1d8b8e83",
              "status": "affected",
              "version": "51f3baad7de943780ce0c17bd7975df567dd6e14",
              "versionType": "git"
            },
            {
              "lessThan": "d0760a4ef85697bc756d06eae17ae27f3f055401",
              "status": "affected",
              "version": "51f3baad7de943780ce0c17bd7975df567dd6e14",
              "versionType": "git"
            },
            {
              "lessThan": "91c02557174be7f72e46ed7311e3bea1939840b0",
              "status": "affected",
              "version": "51f3baad7de943780ce0c17bd7975df567dd6e14",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/can/usb/mcba_usb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.12"
            },
            {
              "lessThan": "4.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.196",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.238",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.196",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.128",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.46",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.13",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "4.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: mcba_usb: fix memory leak in mcba_usb\n\nSyzbot reported memory leak in SocketCAN driver for Microchip CAN BUS\nAnalyzer Tool. The problem was in unfreed usb_coherent.\n\nIn mcba_usb_start() 20 coherent buffers are allocated and there is\nnothing, that frees them:\n\n1) In callback function the urb is resubmitted and that\u0027s all\n2) In disconnect function urbs are simply killed, but URB_FREE_BUFFER\n   is not set (see mcba_usb_start) and this flag cannot be used with\n   coherent buffers.\n\nFail log:\n| [ 1354.053291][ T8413] mcba_usb 1-1:0.0 can0: device disconnected\n| [ 1367.059384][ T8420] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmem)\n\nSo, all allocated buffers should be freed with usb_free_coherent()\nexplicitly\n\nNOTE:\nThe same pattern for allocating and freeing coherent buffers\nis used in drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:50:29.828Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/89df95ce32be204eef2e7d4b2f6fb552fb191a68"
        },
        {
          "url": "https://git.kernel.org/stable/c/a115198caaab6d663bef75823a3c5f0802306d60"
        },
        {
          "url": "https://git.kernel.org/stable/c/6f87c0e21ad20dd3d22108e33db1c552dfa352a0"
        },
        {
          "url": "https://git.kernel.org/stable/c/6bd3d80d1f019cefa7011056c54b323f1d8b8e83"
        },
        {
          "url": "https://git.kernel.org/stable/c/d0760a4ef85697bc756d06eae17ae27f3f055401"
        },
        {
          "url": "https://git.kernel.org/stable/c/91c02557174be7f72e46ed7311e3bea1939840b0"
        }
      ],
      "title": "can: mcba_usb: fix memory leak in mcba_usb",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47231",
    "datePublished": "2024-05-21T14:19:34.413Z",
    "dateReserved": "2024-04-10T18:59:19.530Z",
    "dateUpdated": "2026-05-11T13:50:29.828Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47236 (GCVE-0-2021-47236)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:19 – Updated: 2026-05-11 13:50

Title

net: cdc_eem: fix tx fixup skb leak

Summary

In the Linux kernel, the following vulnerability has been resolved: net: cdc_eem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb. fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-17 17:38 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/f12554b0ff639e746…
https://git.kernel.org/stable/c/14184ec5c958b589b…
https://git.kernel.org/stable/c/1bcacd6088d61c0ac…
https://git.kernel.org/stable/c/f4e6a7f19c82f39b1…
https://git.kernel.org/stable/c/81de2ed06df8b5451…
https://git.kernel.org/stable/c/05b2b9f7d24b5663d…
https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4…
https://git.kernel.org/stable/c/c3b26fdf1b32f91c7…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < f12554b0ff639e74612cc01b3b4a049e098d2d65 (git) Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < 14184ec5c958b589ba934da7363a2877879204df (git) Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < 1bcacd6088d61c0ac6a990d87975600a81f3247e (git) Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < f4e6a7f19c82f39b1803e91c54718f0d7143767d (git) Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < 81de2ed06df8b5451e050fe6a318af3263dbff3f (git) Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < 05b2b9f7d24b5663d9b47427fe1555bdafd3ea02 (git) Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88 (git) Affected: 9f722c0978b04acba209f8ca1896ad05814bc3a3 , < c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7 (git)
Linux	Linux	Affected: 2.6.30 Unaffected: 0 , < 2.6.30 (semver) Unaffected: 4.4.274 , ≤ 4.4.* (semver) Unaffected: 4.9.274 , ≤ 4.9.* (semver) Unaffected: 4.14.238 , ≤ 4.14.* (semver) Unaffected: 4.19.196 , ≤ 4.19.* (semver) Unaffected: 5.4.128 , ≤ 5.4.* (semver) Unaffected: 5.10.46 , ≤ 5.10.* (semver) Unaffected: 5.12.13 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47236",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-17T17:38:01.951930Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-17T17:39:57.883Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:07.941Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/cdc_eem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f12554b0ff639e74612cc01b3b4a049e098d2d65",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            },
            {
              "lessThan": "14184ec5c958b589ba934da7363a2877879204df",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            },
            {
              "lessThan": "1bcacd6088d61c0ac6a990d87975600a81f3247e",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            },
            {
              "lessThan": "f4e6a7f19c82f39b1803e91c54718f0d7143767d",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            },
            {
              "lessThan": "81de2ed06df8b5451e050fe6a318af3263dbff3f",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            },
            {
              "lessThan": "05b2b9f7d24b5663d9b47427fe1555bdafd3ea02",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            },
            {
              "lessThan": "b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            },
            {
              "lessThan": "c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7",
              "status": "affected",
              "version": "9f722c0978b04acba209f8ca1896ad05814bc3a3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/cdc_eem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.30"
            },
            {
              "lessThan": "2.6.30",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.274",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.274",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.196",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.274",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.274",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.238",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.196",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.128",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.46",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.13",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cdc_eem: fix tx fixup skb leak\n\nwhen usbnet transmit a skb, eem fixup it in eem_tx_fixup(),\nif skb_copy_expand() failed, it return NULL,\nusbnet_start_xmit() will have no chance to free original skb.\n\nfix it by free orginal skb in eem_tx_fixup() first,\nthen check skb clone status, if failed, return NULL to usbnet."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:50:35.712Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f12554b0ff639e74612cc01b3b4a049e098d2d65"
        },
        {
          "url": "https://git.kernel.org/stable/c/14184ec5c958b589ba934da7363a2877879204df"
        },
        {
          "url": "https://git.kernel.org/stable/c/1bcacd6088d61c0ac6a990d87975600a81f3247e"
        },
        {
          "url": "https://git.kernel.org/stable/c/f4e6a7f19c82f39b1803e91c54718f0d7143767d"
        },
        {
          "url": "https://git.kernel.org/stable/c/81de2ed06df8b5451e050fe6a318af3263dbff3f"
        },
        {
          "url": "https://git.kernel.org/stable/c/05b2b9f7d24b5663d9b47427fe1555bdafd3ea02"
        },
        {
          "url": "https://git.kernel.org/stable/c/b4f7a9fc9d094c0c4a66f2ad7c37b1dbe9e78f88"
        },
        {
          "url": "https://git.kernel.org/stable/c/c3b26fdf1b32f91c7a3bc743384b4a298ab53ad7"
        }
      ],
      "title": "net: cdc_eem: fix tx fixup skb leak",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47236",
    "datePublished": "2024-05-21T14:19:37.724Z",
    "dateReserved": "2024-04-10T18:59:19.531Z",
    "dateUpdated": "2026-05-11T13:50:35.712Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-47239 (GCVE-0-2021-47239)

Vulnerability from cvelistv5 – Published: 2024-05-21 14:19 – Updated: 2026-05-11 13:50

Title

net: usb: fix possible use-after-free in smsc75xx_bind

Summary

In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xx_bind The commit 46a8b29c6306 ("net: usb: fix memory leak in smsc75xx_bind") fails to clean up the work scheduled in smsc75xx_reset-> smsc75xx_set_multicast, which leads to use-after-free if the work is scheduled to start after the deallocation. In addition, this patch also removes a dangling pointer - dev->data[0]. This patch calls cancel_work_sync to cancel the scheduled work and set the dangling pointer to NULL.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 15:40 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/7cc8b2e05fcea6edd…
https://git.kernel.org/stable/c/64160d1741a3de520…
https://git.kernel.org/stable/c/c4e3be2e7742863e4…
https://git.kernel.org/stable/c/2fc8300c9cfa5167f…
https://git.kernel.org/stable/c/4252bf6c2b245f470…
https://git.kernel.org/stable/c/570a52cf3e01d19f7…
https://git.kernel.org/stable/c/14616c372a7be01a2…
https://git.kernel.org/stable/c/56b786d86694e079d…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 200dbfcad8011e50c3cec269ed7b980836eeb1fa , < 7cc8b2e05fcea6edd022d26e82091d781af8fd9b (git) Affected: 22c840596af0c09068b6cf948616e6496e59e07f , < 64160d1741a3de5204d1a822e058e0b4cc526504 (git) Affected: 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbc , < c4e3be2e7742863e454ce31faf8fd0109c00050b (git) Affected: 9e6a3eccb28779710cbbafc4f4258d92509c6d07 , < 2fc8300c9cfa5167fcb5b1a2a07db6f53e82f59b (git) Affected: b95fb96e6339e34694dd578fb6bde3575b01af17 , < 4252bf6c2b245f47011098113d405ffad6ad5d5b (git) Affected: 635ac38b36255d3cfb8312cf7c471334f4d537e0 , < 570a52cf3e01d19f7fd1a251dfc52b0cd86c13cb (git) Affected: 70c886ac93f87ae7214a0c69151a28a8075dd95b , < 14616c372a7be01a2fb8c56c9d8debd232b9e43d (git) Affected: 46a8b29c6306d8bbfd92b614ef65a47c900d8e70 , < 56b786d86694e079d8aad9b314e015cd4ac02a3d (git)
Linux	Linux	Affected: 4.4.271 , < 4.4.274 (semver) Affected: 4.9.271 , < 4.9.274 (semver) Affected: 4.14.235 , < 4.14.238 (semver) Affected: 4.19.193 , < 4.19.196 (semver) Affected: 5.4.124 , < 5.4.128 (semver) Affected: 5.10.42 , < 5.10.46 (semver) Affected: 5.12.9 , < 5.12.13 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:07.920Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7cc8b2e05fcea6edd022d26e82091d781af8fd9b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/64160d1741a3de5204d1a822e058e0b4cc526504"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c4e3be2e7742863e454ce31faf8fd0109c00050b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2fc8300c9cfa5167fcb5b1a2a07db6f53e82f59b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4252bf6c2b245f47011098113d405ffad6ad5d5b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/570a52cf3e01d19f7fd1a251dfc52b0cd86c13cb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/14616c372a7be01a2fb8c56c9d8debd232b9e43d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/56b786d86694e079d8aad9b314e015cd4ac02a3d"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47239",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:40:00.710972Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:12.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/smsc75xx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7cc8b2e05fcea6edd022d26e82091d781af8fd9b",
              "status": "affected",
              "version": "200dbfcad8011e50c3cec269ed7b980836eeb1fa",
              "versionType": "git"
            },
            {
              "lessThan": "64160d1741a3de5204d1a822e058e0b4cc526504",
              "status": "affected",
              "version": "22c840596af0c09068b6cf948616e6496e59e07f",
              "versionType": "git"
            },
            {
              "lessThan": "c4e3be2e7742863e454ce31faf8fd0109c00050b",
              "status": "affected",
              "version": "9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbc",
              "versionType": "git"
            },
            {
              "lessThan": "2fc8300c9cfa5167fcb5b1a2a07db6f53e82f59b",
              "status": "affected",
              "version": "9e6a3eccb28779710cbbafc4f4258d92509c6d07",
              "versionType": "git"
            },
            {
              "lessThan": "4252bf6c2b245f47011098113d405ffad6ad5d5b",
              "status": "affected",
              "version": "b95fb96e6339e34694dd578fb6bde3575b01af17",
              "versionType": "git"
            },
            {
              "lessThan": "570a52cf3e01d19f7fd1a251dfc52b0cd86c13cb",
              "status": "affected",
              "version": "635ac38b36255d3cfb8312cf7c471334f4d537e0",
              "versionType": "git"
            },
            {
              "lessThan": "14616c372a7be01a2fb8c56c9d8debd232b9e43d",
              "status": "affected",
              "version": "70c886ac93f87ae7214a0c69151a28a8075dd95b",
              "versionType": "git"
            },
            {
              "lessThan": "56b786d86694e079d8aad9b314e015cd4ac02a3d",
              "status": "affected",
              "version": "46a8b29c6306d8bbfd92b614ef65a47c900d8e70",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/smsc75xx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4.4.274",
              "status": "affected",
              "version": "4.4.271",
              "versionType": "semver"
            },
            {
              "lessThan": "4.9.274",
              "status": "affected",
              "version": "4.9.271",
              "versionType": "semver"
            },
            {
              "lessThan": "4.14.238",
              "status": "affected",
              "version": "4.14.235",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.196",
              "status": "affected",
              "version": "4.19.193",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.128",
              "status": "affected",
              "version": "5.4.124",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.46",
              "status": "affected",
              "version": "5.10.42",
              "versionType": "semver"
            },
            {
              "lessThan": "5.12.13",
              "status": "affected",
              "version": "5.12.9",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.274",
                  "versionStartIncluding": "4.4.271",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.274",
                  "versionStartIncluding": "4.9.271",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.238",
                  "versionStartIncluding": "4.14.235",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.196",
                  "versionStartIncluding": "4.19.193",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.128",
                  "versionStartIncluding": "5.4.124",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.46",
                  "versionStartIncluding": "5.10.42",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.13",
                  "versionStartIncluding": "5.12.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: fix possible use-after-free in smsc75xx_bind\n\nThe commit 46a8b29c6306 (\"net: usb: fix memory leak in smsc75xx_bind\")\nfails to clean up the work scheduled in smsc75xx_reset-\u003e\nsmsc75xx_set_multicast, which leads to use-after-free if the work is\nscheduled to start after the deallocation. In addition, this patch\nalso removes a dangling pointer - dev-\u003edata[0].\n\nThis patch calls cancel_work_sync to cancel the scheduled work and set\nthe dangling pointer to NULL."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:50:39.132Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7cc8b2e05fcea6edd022d26e82091d781af8fd9b"
        },
        {
          "url": "https://git.kernel.org/stable/c/64160d1741a3de5204d1a822e058e0b4cc526504"
        },
        {
          "url": "https://git.kernel.org/stable/c/c4e3be2e7742863e454ce31faf8fd0109c00050b"
        },
        {
          "url": "https://git.kernel.org/stable/c/2fc8300c9cfa5167fcb5b1a2a07db6f53e82f59b"
        },
        {
          "url": "https://git.kernel.org/stable/c/4252bf6c2b245f47011098113d405ffad6ad5d5b"
        },
        {
          "url": "https://git.kernel.org/stable/c/570a52cf3e01d19f7fd1a251dfc52b0cd86c13cb"
        },
        {
          "url": "https://git.kernel.org/stable/c/14616c372a7be01a2fb8c56c9d8debd232b9e43d"
        },
        {
          "url": "https://git.kernel.org/stable/c/56b786d86694e079d8aad9b314e015cd4ac02a3d"
        }
      ],
      "title": "net: usb: fix possible use-after-free in smsc75xx_bind",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47239",
    "datePublished": "2024-05-21T14:19:39.705Z",
    "dateReserved": "2024-04-10T18:59:19.532Z",
    "dateUpdated": "2026-05-11T13:50:39.132Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2024:2183-1

CVE-2021-3743 (GCVE-0-2021-3743)

CVE-2021-39698 (GCVE-0-2021-39698)

CVE-2021-43056 (GCVE-0-2021-43056)

CVE-2021-43527 (GCVE-0-2021-43527)

CVE-2021-47104 (GCVE-0-2021-47104)

CVE-2021-47220 (GCVE-0-2021-47220)

CVE-2021-47229 (GCVE-0-2021-47229)

CVE-2021-47231 (GCVE-0-2021-47231)

CVE-2021-47236 (GCVE-0-2021-47236)

CVE-2021-47239 (GCVE-0-2021-47239)

Tags

Sightings

Nomenclature

Related by attack behaviour