CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
KernelLinuxnet/sched: act_ct: fix wild memory access when clearing fragmentsNo scoreKernelLinuxRDMA/siw: Fix a use after free in siw_alloc_mrNo scoreKernelLinuxmm: memcontrol: slab: fix obtain a reference to a freeing memcgNo scoreKernelLinuxnet: Only allow init netns to set default tcp cong to a restricted algoNo scoreKernelLinuxKVM: SVM: Make sure GHCB is mapped before updatingNo scoreKernelLinuxKEYS: trusted: Fix memory leak on object tdNo scoreKernelLinuxf2fs: fix panic during f2fs_resize_fs()No scoreKernelLinuxARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hookNo scoreKernelLinuxPCI: endpoint: Fix NULL pointer dereference for ->get_features()No scoreKernelLinuxdmaengine: idxd: Fix potential null dereference on pointer statusNo scoreKernelLinuxf2fs: fix to avoid touching checkpointed data in get_victim()No scoreKernelLinuxSUNRPC: Fix null pointer dereference in svc_rqst_free()No scoreKernelLinuxceph: fix inode leak on getattr error in __fh_to_dentryNo scoreKernelLinuxxprtrdma: Fix cwnd update orderingNo scoreKernelLinuxsctp: do asoc update earlier in sctp_sf_do_dupcook_aNo scoreKernelLinuxethernet:enic: Fix a use after free bug in enic_hard_start_xmitNo scoreKernelLinuxlibbpf: Fix signed overflow in ringbuf_process_ringNo scoreKernelLinuxarm64: entry: always set GIC_PRIO_PSR_I_SET during entryNo scoreKernelLinuxcan: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probeNo scoreKernelLinuxnetfilter: nftables: Fix a memleak from userdata error path in new objectsNo scoreKernelLinuxcan: mcp251x: fix resume from sleep before interface was brought upNo scoreKernelLinuxnetfilter: nftables: avoid overflows in nft_hash_buckets()No scoreKernelLinuxsched: Fix out-of-bound access in uclampNo scoreKernelLinuxpowerpc/64s: Fix crashes when toggling entry flush barrierNo scoreKernelLinuxi40e: Fix use-after-free in i40e_client_subtask()No scoreKernelLinuxhfsplus: prevent corruption in shrinking truncateNo scoreKernelLinuxuserfaultfd: release page in error path to avoid BUG_ONNo scoreKernelLinuxbtrfs: fix deadlock when cloning inline extents and using qgroupsNo scoreKernelLinuxACPI: scan: Fix a memory leak in an error handling pathNo scoreKernelLinuxusb: dwc3: gadget: Free gadget structure only after freeing endpointsNo scoreKernelLinuxkyber: fix out of bounds access when preemptedNo scoreKernelLinuxf2fs: compress: fix race condition of overwrite vs truncateNo scoreKernelLinuxnvmet-rdma: Fix NULL deref when SEND is completed with errorNo scoreKernelLinuxnbd: Fix NULL pointer in flush_workqueueNo scoreKernelLinuxusb: typec: ucsi: Retrieve all the PDOs instead of just the first 4No scoreKernelLinuxKVM: nVMX: Always make an attempt to map eVMCS after migrationNo scoreKernelLinuxiio: core: fix ioctl handlers removalNo scoreKernelLinuxdrm/i915: Fix crash in auto_retireNo scoreKernelLinuxKVM: VMX: Disable preemption when probing user return MSRsNo scoreKernelLinuxnet: hso: fix NULL-deref on disconnect regressionNo scoreKernelLinuxnet: hso: fix NULL-deref on disconnect regressionNo scoreKernelLinuxbpf: Fix masking negation logic upon negative dst registerNo scoreKernelLinuxbpf: Fix masking negation logic upon negative dst registerNo scoreKernelLinuxACPI: custom_method: fix potential use-after-free issueNo scoreKernelLinuxperf/core: Fix unconditional security_locked_down() callNo scoreKernelLinuxscsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()No scoreKernelLinuxmmc: uniphier-sd: Fix a resource leak in the remove functionNo scoreKernelLinuxirqchip/gic-v3: Do not enable irqs when handling spurious interrupsNo scoreKernelLinuxcifs: Return correct error code from smb2_get_enc_keyNo scoreKernelLinuxopenvswitch: fix stack OOB read while fragmenting IPv4 packetsNo score- Show moreLoading…