Vulnerability-Lookup

SUSE-SU-2024:1454-1

Vulnerability from csaf_suse - Published: 2024-04-26 15:11 - Updated: 2024-04-26 15:11

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556). - CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560). - CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561). - CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060). - CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442). - CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468). - CVE-2021-46930: Fixed a list_head check warning caused by uninitialization of list_head in usb mtu3 (bsc#1220484). - CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554). - CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580). - CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583). - CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566). - CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662). - CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615). - CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521). - CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528). - CVE-2021-46961: Fixed an error on not enabling irqs when handling spurious interrups in irqchip/gic-v3 (bsc#1220529). - CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532). - CVE-2021-46963: Fixed a denial of service in qla2xxx_mqueuecommand() in scsi qla2xxx (bsc#1220536) - CVE-2021-46971: Fixed unconditional security_locked_down() call in perf/core (bsc#1220697). - CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611). - CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631). - CVE-2021-46988: Fixed release page in error path to avoid BUG_ON in userfaultfd (bsc#1220706). - CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743). - CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575). - CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638). - CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625). - CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669). - CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751). - CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641). - CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794). - CVE-2021-47020: Fixed a memory leak in stream config error path in soundwire stream (bsc#1220785). - CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687). - CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640). - CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692). - CVE-2021-47051: Fixed a PM reference leak in lpspi_prepare_xfer_hardware() in spi fsl-lpspi (bsc#1220764). - CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768). - CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769). - CVE-2021-47058: Fixed a possible user-after-free in set debugfs_name in regmap (bsc#1220779). - CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure _after_ sync'ing SRCU (bsc#1220745). - CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777). - CVE-2021-47065: Fixed an array overrun in rtw_get_tx_power_params() in rtw88 (bsc#1220749). - CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739). - CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826). - CVE-2021-47070: Fixed a memory leak in error handling paths on memory allocated by vmbus_alloc_ring in uio_hv_generic (bsc#1220829). - CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846). - CVE-2021-47073: Fixed a oops on rmmod dell_smbios exit_dell_smbios_wmi() in platform/x86 dell-smbios-wmi (bsc#1220850). - CVE-2021-47077: Fixed a NULL pointer dereference when in shost_data (bsc#1220861). - CVE-2021-47082: Fixed a double free in tun_free_netdev in tun (bsc#1220969). - CVE-2021-47109: Fixed an overflow in neighbour table in neighbour (bsc#1221534). - CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532). - CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541). - CVE-2021-47114: Fixed a data corruption by fallocate in ocfs2 (bsc#1221548). - CVE-2021-47117: Fixed a crash in ext4_es_cache_extent as ext4_split_extent_at failed in ext4 (bsc#1221575). - CVE-2021-47118: Fixed an use-after-free in init task's struct pid in pid (bsc#1221605). - CVE-2021-47119: Fixed a memory leak in ext4_fill_super in ext4 (bsc#1221608). - CVE-2021-47120: Fixed a NULL pointer dereference on disconnect in HID magicmouse (bsc#1221606). - CVE-2021-47138: Fixed an out-of-bound memory access during clearing filters in cxgb4 (bsc#1221934). - CVE-2021-47139: Fixed a race condition that lead to oops in netdevice registration in net hns3 (bsc#1221935). - CVE-2021-47141: Fixed a null pointer dereference on priv->msix_vectors when driver is unloaded in gve (bsc#1221949). - CVE-2021-47142: Fixed an use-after-free on ttm->sg in drm/amdgpu (bsc#1221952). - CVE-2021-47144: Fixed a refcount leak in amdgpufb_create in drm/amd/amdgpu (bsc#1221989). - CVE-2021-47153: Fixed an out-of-range memory access during bus reset in the case of a block transaction in i2c/i801 (bsc#1221969). - CVE-2021-47161: Fixed a resource leak in an error handling path in the error handling path of the probe function in spi spi-fsl-dspi (bsc#1221966). - CVE-2021-47165: Fixed a NULL pointer dereference when component was not probed during shutdown in drm/mesonhe (bsc#1221965). - CVE-2021-47166: Fixed a data corruption of pg_bytes_written in nfs_do_recoalesce() in nfs (bsc#1221998). - CVE-2021-47167: Fixed an oopsable condition in __nfs_pageio_add_request() in nfs (bsc#1221991). - CVE-2021-47168: Fixed an incorrect limit in filelayout_decode_layout() in nfs (bsc#1222002). - CVE-2021-47169: Fixed a NULL pointer dereference in rp2_probe in serial rp2 (bsc#1222000). - CVE-2021-47170: Fixed a WARN about excessively large memory allocations in usb usbfs (bsc#1222004). - CVE-2021-47171: Fixed a memory leak in smsc75xx_bind in net usb (bsc#1221994). - CVE-2021-47172: Fixed a potential overflow due to non sequential channel numbers in adc/ad7124 (bsc#1221992). - CVE-2021-47173: Fixed a memory leak in uss720_probe in misc/uss720 (bsc#1221993). - CVE-2021-47177: Fixed a sysfs leak in alloc_iommu() in iommu/vt-d (bsc#1221997). - CVE-2021-47179: Fixed a NULL pointer dereference in pnfs_mark_matching_lsegs_return() in nfsv4 (bsc#1222001). - CVE-2021-47180: Fixed a memory leak in nci_allocate_device nfcmrvl_disconnect in nfc nci (bsc#1221999). - CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660). - CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664). - CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669). - CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706). - CVE-2022-0487: Fixed an use-after-free vulnerability in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2022-4744: Fixed a double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2022-48626: Fixed a potential use-after-free on remove path in moxart (bsc#1220366). - CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). - CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456). - CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514). - CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length in nvmet-tcp (bsc#1220320). - CVE-2023-52469: Fixed an use-after-free in kv_parse_power_table in drivers/amd/pm (bsc#1220411). - CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413). - CVE-2023-52474: Fixed a data corruption in user SDMA requests in IB/hfi1 (bsc#1220445). - CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703). - CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790). - CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883). - CVE-2023-52500: Fixed leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command in scsi in pm80xx (bsc#1220883). - CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836). - CVE-2023-52572: Fixed UAF in cifs_demultiplex_thread() in cifs (bsc#1220946). - CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871). - CVE-2023-52583: Fixed deadlock or deadcode of misusing dget() inside ceph (bsc#1221058). - CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088). - CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044). - CVE-2023-52607: Fixed null-pointer dereference in pgtable_cache_add kasprintf() in powerpc/mm (bsc#1221061). - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117). - CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562). - CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987). - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races (bsc#1218447). - CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988). - CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989). - CVE-2023-7042: Fixed a null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in net (bsc#1218336). - CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479). - CVE-2024-22099: Fixed a null pointer dereference in /net/bluetooth/rfcomm/core.C in bluetooth (bsc#1219170). - CVE-2024-26600: Fixed null pointer dereference for SRP in phy-omap-usb2 (bsc#1220340). - CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293). - CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830). - CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422). - CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585). The following non-security bugs were fixed: - doc/README.SUSE: Update information about module support status (jsc#PED-5759) - usb: hub: Guard against accesses to uninitialized BOS descriptors (git-fixes). - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (bsc#1219264). - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).

Patchnames: SUSE-2024-1454,SUSE-SLE-Module-Live-Patching-15-SP2-2024-1454,SUSE-SLE-Product-HA-15-SP2-2024-1454,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1454,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1454,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1454

CVE-2020-36780

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:cluster-md-kmp-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:dlm-kmp-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:gfs2-kmp-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP2:ocfs2-kmp-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-devel-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-docs-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-macros-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-source-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-devel-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-devel-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-devel-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_188-default-1-150200.5.3.3.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_188-default-1-150200.5.3.3.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP2:kernel-livepatch-5_3_18-150200_24_188-default-1-150200.5.3.3.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-devel-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-docs-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-macros-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-obs-build-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-preempt-devel-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-source-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-syms-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.188.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.188.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-base-5.3.18-150200.24.188.1.150200.9.95.3.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-devel-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-devel-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-devel-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-docs-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-macros-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-obs-build-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-obs-build-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-preempt-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-preempt-devel-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-source-5.3.18-150200.24.188.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-syms-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-syms-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:reiserfs-kmp-default-5.3.18-150200.24.188.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:reiserfs-kmp-default-5.3.18-150200.24.188.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2020-36782

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2020-36783

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-23134

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2021-46909

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46921

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46930

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46938

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46939

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46943

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46944

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46950

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46951

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46958

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46960

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46961

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46962

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46963

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46971

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46981

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46984

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46988

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46990

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46991

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46992

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-46998

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47000

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact low

CVE-2021-47006

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47013

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47015

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47020

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47034

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47045

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47049

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47051

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47055

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47056

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47058

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47061

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47063

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47065

6.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47068

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2021-47069

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47070

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47071

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47073

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47077

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47082

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47109

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47112

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47114

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47117

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47118

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47119

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47120

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47138

4.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47139

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47141

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47142

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47144

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47153

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47161

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47165

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47166

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47167

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47168

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47169

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47170

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47171

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47172

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47173

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47177

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47179

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47180

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47181

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47183

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47185

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2021-47189

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2022-0487

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2022-4744

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2022-48626

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-0160

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-1192

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-28746

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-35827

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52454

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52469

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52470

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52474

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52476

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52477

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52500

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52509

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2023-52572

0 (None)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52575

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52583

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52590

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52591

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2023-52607

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-52628

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2023-6270

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-6356

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-6531

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact important

CVE-2023-6535

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-6536

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-7042

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2023-7192

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2024-22099

5.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2024-26600

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2024-26614

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2024-26642

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2024-26704

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

CVE-2024-26733

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 93 products, the same list as for CVE-2020-36780

Threats

Impact moderate

References

488 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2024…	self
https://bugzilla.suse.com/1186060	self
https://bugzilla.suse.com/1192145	self
https://bugzilla.suse.com/1194516	self
https://bugzilla.suse.com/1208995	self
https://bugzilla.suse.com/1209635	self
https://bugzilla.suse.com/1209657	self
https://bugzilla.suse.com/1212514	self
https://bugzilla.suse.com/1213456	self
https://bugzilla.suse.com/1217987	self
https://bugzilla.suse.com/1217988	self
https://bugzilla.suse.com/1217989	self
https://bugzilla.suse.com/1218336	self
https://bugzilla.suse.com/1218447	self
https://bugzilla.suse.com/1218479	self
https://bugzilla.suse.com/1218562	self
https://bugzilla.suse.com/1219170	self
https://bugzilla.suse.com/1219264	self
https://bugzilla.suse.com/1220320	self
https://bugzilla.suse.com/1220340	self
https://bugzilla.suse.com/1220366	self
https://bugzilla.suse.com/1220411	self
https://bugzilla.suse.com/1220413	self
https://bugzilla.suse.com/1220442	self
https://bugzilla.suse.com/1220445	self
https://bugzilla.suse.com/1220468	self
https://bugzilla.suse.com/1220484	self
https://bugzilla.suse.com/1220521	self
https://bugzilla.suse.com/1220528	self
https://bugzilla.suse.com/1220529	self
https://bugzilla.suse.com/1220532	self
https://bugzilla.suse.com/1220536	self
https://bugzilla.suse.com/1220554	self
https://bugzilla.suse.com/1220556	self
https://bugzilla.suse.com/1220560	self
https://bugzilla.suse.com/1220561	self
https://bugzilla.suse.com/1220566	self
https://bugzilla.suse.com/1220575	self
https://bugzilla.suse.com/1220580	self
https://bugzilla.suse.com/1220583	self
https://bugzilla.suse.com/1220611	self
https://bugzilla.suse.com/1220615	self
https://bugzilla.suse.com/1220625	self
https://bugzilla.suse.com/1220631	self
https://bugzilla.suse.com/1220638	self
https://bugzilla.suse.com/1220640	self
https://bugzilla.suse.com/1220641	self
https://bugzilla.suse.com/1220662	self
https://bugzilla.suse.com/1220669	self
https://bugzilla.suse.com/1220687	self
https://bugzilla.suse.com/1220692	self
https://bugzilla.suse.com/1220697	self
https://bugzilla.suse.com/1220703	self
https://bugzilla.suse.com/1220706	self
https://bugzilla.suse.com/1220739	self
https://bugzilla.suse.com/1220743	self
https://bugzilla.suse.com/1220745	self
https://bugzilla.suse.com/1220749	self
https://bugzilla.suse.com/1220751	self
https://bugzilla.suse.com/1220764	self
https://bugzilla.suse.com/1220768	self
https://bugzilla.suse.com/1220769	self
https://bugzilla.suse.com/1220777	self
https://bugzilla.suse.com/1220779	self
https://bugzilla.suse.com/1220785	self
https://bugzilla.suse.com/1220790	self
https://bugzilla.suse.com/1220794	self
https://bugzilla.suse.com/1220826	self
https://bugzilla.suse.com/1220829	self
https://bugzilla.suse.com/1220836	self
https://bugzilla.suse.com/1220846	self
https://bugzilla.suse.com/1220850	self
https://bugzilla.suse.com/1220861	self
https://bugzilla.suse.com/1220871	self
https://bugzilla.suse.com/1220883	self
https://bugzilla.suse.com/1220946	self
https://bugzilla.suse.com/1220969	self
https://bugzilla.suse.com/1221044	self
https://bugzilla.suse.com/1221058	self
https://bugzilla.suse.com/1221061	self
https://bugzilla.suse.com/1221077	self
https://bugzilla.suse.com/1221088	self
https://bugzilla.suse.com/1221293	self
https://bugzilla.suse.com/1221532	self
https://bugzilla.suse.com/1221534	self
https://bugzilla.suse.com/1221541	self
https://bugzilla.suse.com/1221548	self
https://bugzilla.suse.com/1221575	self
https://bugzilla.suse.com/1221605	self
https://bugzilla.suse.com/1221606	self
https://bugzilla.suse.com/1221608	self
https://bugzilla.suse.com/1221830	self
https://bugzilla.suse.com/1221934	self
https://bugzilla.suse.com/1221935	self
https://bugzilla.suse.com/1221949	self
https://bugzilla.suse.com/1221952	self
https://bugzilla.suse.com/1221965	self
https://bugzilla.suse.com/1221966	self
https://bugzilla.suse.com/1221969	self
https://bugzilla.suse.com/1221989	self
https://bugzilla.suse.com/1221991	self
https://bugzilla.suse.com/1221992	self
https://bugzilla.suse.com/1221993	self
https://bugzilla.suse.com/1221994	self
https://bugzilla.suse.com/1221997	self
https://bugzilla.suse.com/1221998	self
https://bugzilla.suse.com/1221999	self
https://bugzilla.suse.com/1222000	self
https://bugzilla.suse.com/1222001	self
https://bugzilla.suse.com/1222002	self
https://bugzilla.suse.com/1222004	self
https://bugzilla.suse.com/1222117	self
https://bugzilla.suse.com/1222422	self
https://bugzilla.suse.com/1222585	self
https://bugzilla.suse.com/1222619	self
https://bugzilla.suse.com/1222660	self
https://bugzilla.suse.com/1222664	self
https://bugzilla.suse.com/1222669	self
https://bugzilla.suse.com/1222706	self
https://www.suse.com/security/cve/CVE-2020-36780/	self
https://www.suse.com/security/cve/CVE-2020-36782/	self
https://www.suse.com/security/cve/CVE-2020-36783/	self
https://www.suse.com/security/cve/CVE-2021-23134/	self
https://www.suse.com/security/cve/CVE-2021-46909/	self
https://www.suse.com/security/cve/CVE-2021-46921/	self
https://www.suse.com/security/cve/CVE-2021-46930/	self
https://www.suse.com/security/cve/CVE-2021-46938/	self
https://www.suse.com/security/cve/CVE-2021-46939/	self
https://www.suse.com/security/cve/CVE-2021-46943/	self
https://www.suse.com/security/cve/CVE-2021-46944/	self
https://www.suse.com/security/cve/CVE-2021-46950/	self
https://www.suse.com/security/cve/CVE-2021-46951/	self
https://www.suse.com/security/cve/CVE-2021-46958/	self
https://www.suse.com/security/cve/CVE-2021-46960/	self
https://www.suse.com/security/cve/CVE-2021-46961/	self
https://www.suse.com/security/cve/CVE-2021-46962/	self
https://www.suse.com/security/cve/CVE-2021-46963/	self
https://www.suse.com/security/cve/CVE-2021-46971/	self
https://www.suse.com/security/cve/CVE-2021-46981/	self
https://www.suse.com/security/cve/CVE-2021-46984/	self
https://www.suse.com/security/cve/CVE-2021-46988/	self
https://www.suse.com/security/cve/CVE-2021-46990/	self
https://www.suse.com/security/cve/CVE-2021-46991/	self
https://www.suse.com/security/cve/CVE-2021-46992/	self
https://www.suse.com/security/cve/CVE-2021-46998/	self
https://www.suse.com/security/cve/CVE-2021-47000/	self
https://www.suse.com/security/cve/CVE-2021-47006/	self
https://www.suse.com/security/cve/CVE-2021-47013/	self
https://www.suse.com/security/cve/CVE-2021-47015/	self
https://www.suse.com/security/cve/CVE-2021-47020/	self
https://www.suse.com/security/cve/CVE-2021-47034/	self
https://www.suse.com/security/cve/CVE-2021-47045/	self
https://www.suse.com/security/cve/CVE-2021-47049/	self
https://www.suse.com/security/cve/CVE-2021-47051/	self
https://www.suse.com/security/cve/CVE-2021-47055/	self
https://www.suse.com/security/cve/CVE-2021-47056/	self
https://www.suse.com/security/cve/CVE-2021-47058/	self
https://www.suse.com/security/cve/CVE-2021-47061/	self
https://www.suse.com/security/cve/CVE-2021-47063/	self
https://www.suse.com/security/cve/CVE-2021-47065/	self
https://www.suse.com/security/cve/CVE-2021-47068/	self
https://www.suse.com/security/cve/CVE-2021-47069/	self
https://www.suse.com/security/cve/CVE-2021-47070/	self
https://www.suse.com/security/cve/CVE-2021-47071/	self
https://www.suse.com/security/cve/CVE-2021-47073/	self
https://www.suse.com/security/cve/CVE-2021-47077/	self
https://www.suse.com/security/cve/CVE-2021-47082/	self
https://www.suse.com/security/cve/CVE-2021-47109/	self
https://www.suse.com/security/cve/CVE-2021-47110/	self
https://www.suse.com/security/cve/CVE-2021-47112/	self
https://www.suse.com/security/cve/CVE-2021-47114/	self
https://www.suse.com/security/cve/CVE-2021-47117/	self
https://www.suse.com/security/cve/CVE-2021-47118/	self
https://www.suse.com/security/cve/CVE-2021-47119/	self
https://www.suse.com/security/cve/CVE-2021-47120/	self
https://www.suse.com/security/cve/CVE-2021-47138/	self
https://www.suse.com/security/cve/CVE-2021-47139/	self
https://www.suse.com/security/cve/CVE-2021-47141/	self
https://www.suse.com/security/cve/CVE-2021-47142/	self
https://www.suse.com/security/cve/CVE-2021-47144/	self
https://www.suse.com/security/cve/CVE-2021-47153/	self
https://www.suse.com/security/cve/CVE-2021-47161/	self
https://www.suse.com/security/cve/CVE-2021-47165/	self
https://www.suse.com/security/cve/CVE-2021-47166/	self
https://www.suse.com/security/cve/CVE-2021-47167/	self
https://www.suse.com/security/cve/CVE-2021-47168/	self
https://www.suse.com/security/cve/CVE-2021-47169/	self
https://www.suse.com/security/cve/CVE-2021-47170/	self
https://www.suse.com/security/cve/CVE-2021-47171/	self
https://www.suse.com/security/cve/CVE-2021-47172/	self
https://www.suse.com/security/cve/CVE-2021-47173/	self
https://www.suse.com/security/cve/CVE-2021-47177/	self
https://www.suse.com/security/cve/CVE-2021-47179/	self
https://www.suse.com/security/cve/CVE-2021-47180/	self
https://www.suse.com/security/cve/CVE-2021-47181/	self
https://www.suse.com/security/cve/CVE-2021-47183/	self
https://www.suse.com/security/cve/CVE-2021-47185/	self
https://www.suse.com/security/cve/CVE-2021-47189/	self
https://www.suse.com/security/cve/CVE-2022-0487/	self
https://www.suse.com/security/cve/CVE-2022-4744/	self
https://www.suse.com/security/cve/CVE-2022-48626/	self
https://www.suse.com/security/cve/CVE-2023-0160/	self
https://www.suse.com/security/cve/CVE-2023-1192/	self
https://www.suse.com/security/cve/CVE-2023-28746/	self
https://www.suse.com/security/cve/CVE-2023-35827/	self
https://www.suse.com/security/cve/CVE-2023-52454/	self
https://www.suse.com/security/cve/CVE-2023-52469/	self
https://www.suse.com/security/cve/CVE-2023-52470/	self
https://www.suse.com/security/cve/CVE-2023-52474/	self
https://www.suse.com/security/cve/CVE-2023-52476/	self
https://www.suse.com/security/cve/CVE-2023-52477/	self
https://www.suse.com/security/cve/CVE-2023-52500/	self
https://www.suse.com/security/cve/CVE-2023-52509/	self
https://www.suse.com/security/cve/CVE-2023-52572/	self
https://www.suse.com/security/cve/CVE-2023-52575/	self
https://www.suse.com/security/cve/CVE-2023-52583/	self
https://www.suse.com/security/cve/CVE-2023-52590/	self
https://www.suse.com/security/cve/CVE-2023-52591/	self
https://www.suse.com/security/cve/CVE-2023-52607/	self
https://www.suse.com/security/cve/CVE-2023-52628/	self
https://www.suse.com/security/cve/CVE-2023-6270/	self
https://www.suse.com/security/cve/CVE-2023-6356/	self
https://www.suse.com/security/cve/CVE-2023-6531/	self
https://www.suse.com/security/cve/CVE-2023-6535/	self
https://www.suse.com/security/cve/CVE-2023-6536/	self
https://www.suse.com/security/cve/CVE-2023-7042/	self
https://www.suse.com/security/cve/CVE-2023-7192/	self
https://www.suse.com/security/cve/CVE-2024-22099/	self
https://www.suse.com/security/cve/CVE-2024-26600/	self
https://www.suse.com/security/cve/CVE-2024-26614/	self
https://www.suse.com/security/cve/CVE-2024-26642/	self
https://www.suse.com/security/cve/CVE-2024-26704/	self
https://www.suse.com/security/cve/CVE-2024-26733/	self
https://www.suse.com/security/cve/CVE-2020-36780	external
https://bugzilla.suse.com/1220556	external
https://www.suse.com/security/cve/CVE-2020-36782	external
https://bugzilla.suse.com/1220560	external
https://www.suse.com/security/cve/CVE-2020-36783	external
https://bugzilla.suse.com/1220561	external
https://www.suse.com/security/cve/CVE-2021-23134	external
https://bugzilla.suse.com/1186060	external
https://bugzilla.suse.com/1186061	external
https://bugzilla.suse.com/1220739	external
https://www.suse.com/security/cve/CVE-2021-46909	external
https://bugzilla.suse.com/1220442	external
https://www.suse.com/security/cve/CVE-2021-46921	external
https://bugzilla.suse.com/1220468	external
https://www.suse.com/security/cve/CVE-2021-46930	external
https://bugzilla.suse.com/1220484	external
https://www.suse.com/security/cve/CVE-2021-46938	external
https://bugzilla.suse.com/1220554	external
https://www.suse.com/security/cve/CVE-2021-46939	external
https://bugzilla.suse.com/1220580	external
https://www.suse.com/security/cve/CVE-2021-46943	external
https://bugzilla.suse.com/1220583	external
https://www.suse.com/security/cve/CVE-2021-46944	external
https://bugzilla.suse.com/1220566	external
https://www.suse.com/security/cve/CVE-2021-46950	external
https://bugzilla.suse.com/1220662	external
https://www.suse.com/security/cve/CVE-2021-46951	external
https://bugzilla.suse.com/1220615	external
https://www.suse.com/security/cve/CVE-2021-46958	external
https://bugzilla.suse.com/1220521	external
https://www.suse.com/security/cve/CVE-2021-46960	external
https://bugzilla.suse.com/1220528	external
https://www.suse.com/security/cve/CVE-2021-46961	external
https://bugzilla.suse.com/1220529	external
https://www.suse.com/security/cve/CVE-2021-46962	external
https://bugzilla.suse.com/1220532	external
https://www.suse.com/security/cve/CVE-2021-46963	external
https://bugzilla.suse.com/1220536	external
https://www.suse.com/security/cve/CVE-2021-46971	external
https://bugzilla.suse.com/1220697	external
https://www.suse.com/security/cve/CVE-2021-46981	external
https://bugzilla.suse.com/1220611	external
https://www.suse.com/security/cve/CVE-2021-46984	external
https://bugzilla.suse.com/1220631	external
https://www.suse.com/security/cve/CVE-2021-46988	external
https://bugzilla.suse.com/1220706	external
https://www.suse.com/security/cve/CVE-2021-46990	external
https://bugzilla.suse.com/1220743	external
https://www.suse.com/security/cve/CVE-2021-46991	external
https://bugzilla.suse.com/1220575	external
https://www.suse.com/security/cve/CVE-2021-46992	external
https://bugzilla.suse.com/1220638	external
https://www.suse.com/security/cve/CVE-2021-46998	external
https://bugzilla.suse.com/1220625	external
https://www.suse.com/security/cve/CVE-2021-47000	external
https://bugzilla.suse.com/1220669	external
https://www.suse.com/security/cve/CVE-2021-47006	external
https://bugzilla.suse.com/1220751	external
https://www.suse.com/security/cve/CVE-2021-47013	external
https://bugzilla.suse.com/1220641	external
https://www.suse.com/security/cve/CVE-2021-47015	external
https://bugzilla.suse.com/1220794	external
https://www.suse.com/security/cve/CVE-2021-47020	external
https://bugzilla.suse.com/1220785	external
https://www.suse.com/security/cve/CVE-2021-47034	external
https://bugzilla.suse.com/1220687	external
https://www.suse.com/security/cve/CVE-2021-47045	external
https://bugzilla.suse.com/1220640	external
https://www.suse.com/security/cve/CVE-2021-47049	external
https://bugzilla.suse.com/1220692	external
https://www.suse.com/security/cve/CVE-2021-47051	external
https://bugzilla.suse.com/1220764	external
https://www.suse.com/security/cve/CVE-2021-47055	external
https://bugzilla.suse.com/1220768	external
https://www.suse.com/security/cve/CVE-2021-47056	external
https://bugzilla.suse.com/1220769	external
https://www.suse.com/security/cve/CVE-2021-47058	external
https://bugzilla.suse.com/1220779	external
https://www.suse.com/security/cve/CVE-2021-47061	external
https://bugzilla.suse.com/1220745	external
https://www.suse.com/security/cve/CVE-2021-47063	external
https://bugzilla.suse.com/1220777	external
https://www.suse.com/security/cve/CVE-2021-47065	external
https://bugzilla.suse.com/1220749	external
https://www.suse.com/security/cve/CVE-2021-47068	external
https://bugzilla.suse.com/1220739	external
https://bugzilla.suse.com/1221130	external
https://www.suse.com/security/cve/CVE-2021-47069	external
https://bugzilla.suse.com/1220826	external
https://www.suse.com/security/cve/CVE-2021-47070	external
https://bugzilla.suse.com/1220829	external
https://www.suse.com/security/cve/CVE-2021-47071	external
https://bugzilla.suse.com/1220846	external
https://www.suse.com/security/cve/CVE-2021-47073	external
https://bugzilla.suse.com/1220850	external
https://www.suse.com/security/cve/CVE-2021-47077	external
https://bugzilla.suse.com/1220861	external
https://www.suse.com/security/cve/CVE-2021-47082	external
https://bugzilla.suse.com/1220969	external
https://www.suse.com/security/cve/CVE-2021-47109	external
https://bugzilla.suse.com/1221534	external
https://www.suse.com/security/cve/CVE-2021-47110	external
https://bugzilla.suse.com/1221532	external
https://www.suse.com/security/cve/CVE-2021-47112	external
https://bugzilla.suse.com/1221541	external
https://www.suse.com/security/cve/CVE-2021-47114	external
https://bugzilla.suse.com/1221548	external
https://www.suse.com/security/cve/CVE-2021-47117	external
https://bugzilla.suse.com/1221575	external
https://www.suse.com/security/cve/CVE-2021-47118	external
https://bugzilla.suse.com/1221605	external
https://www.suse.com/security/cve/CVE-2021-47119	external
https://bugzilla.suse.com/1221608	external
https://www.suse.com/security/cve/CVE-2021-47120	external
https://bugzilla.suse.com/1221606	external
https://www.suse.com/security/cve/CVE-2021-47138	external
https://bugzilla.suse.com/1221934	external
https://www.suse.com/security/cve/CVE-2021-47139	external
https://bugzilla.suse.com/1221935	external
https://www.suse.com/security/cve/CVE-2021-47141	external
https://bugzilla.suse.com/1221949	external
https://www.suse.com/security/cve/CVE-2021-47142	external
https://bugzilla.suse.com/1221952	external
https://www.suse.com/security/cve/CVE-2021-47144	external
https://bugzilla.suse.com/1221989	external
https://www.suse.com/security/cve/CVE-2021-47153	external
https://bugzilla.suse.com/1221969	external
https://www.suse.com/security/cve/CVE-2021-47161	external
https://bugzilla.suse.com/1221966	external
https://www.suse.com/security/cve/CVE-2021-47165	external
https://bugzilla.suse.com/1221965	external
https://www.suse.com/security/cve/CVE-2021-47166	external
https://bugzilla.suse.com/1221998	external
https://bugzilla.suse.com/1224785	external
https://www.suse.com/security/cve/CVE-2021-47167	external
https://bugzilla.suse.com/1221991	external
https://bugzilla.suse.com/1224785	external
https://www.suse.com/security/cve/CVE-2021-47168	external
https://bugzilla.suse.com/1222002	external
https://www.suse.com/security/cve/CVE-2021-47169	external
https://bugzilla.suse.com/1222000	external
https://www.suse.com/security/cve/CVE-2021-47170	external
https://bugzilla.suse.com/1222004	external
https://www.suse.com/security/cve/CVE-2021-47171	external
https://bugzilla.suse.com/1221994	external
https://www.suse.com/security/cve/CVE-2021-47172	external
https://bugzilla.suse.com/1221992	external
https://www.suse.com/security/cve/CVE-2021-47173	external
https://bugzilla.suse.com/1221993	external
https://www.suse.com/security/cve/CVE-2021-47177	external
https://bugzilla.suse.com/1221997	external
https://www.suse.com/security/cve/CVE-2021-47179	external
https://bugzilla.suse.com/1222001	external
https://bugzilla.suse.com/1224785	external
https://www.suse.com/security/cve/CVE-2021-47180	external
https://bugzilla.suse.com/1221999	external
https://www.suse.com/security/cve/CVE-2021-47181	external
https://bugzilla.suse.com/1222660	external
https://www.suse.com/security/cve/CVE-2021-47183	external
https://bugzilla.suse.com/1222664	external
https://www.suse.com/security/cve/CVE-2021-47185	external
https://bugzilla.suse.com/1222669	external
https://www.suse.com/security/cve/CVE-2021-47189	external
https://bugzilla.suse.com/1222706	external
https://www.suse.com/security/cve/CVE-2022-0487	external
https://bugzilla.suse.com/1194516	external
https://bugzilla.suse.com/1195949	external
https://bugzilla.suse.com/1198615	external
https://www.suse.com/security/cve/CVE-2022-4744	external
https://bugzilla.suse.com/1209635	external
https://bugzilla.suse.com/1209672	external
https://bugzilla.suse.com/1211833	external
https://www.suse.com/security/cve/CVE-2022-48626	external
https://bugzilla.suse.com/1220366	external
https://www.suse.com/security/cve/CVE-2023-0160	external
https://bugzilla.suse.com/1209657	external
https://www.suse.com/security/cve/CVE-2023-1192	external
https://bugzilla.suse.com/1208995	external
https://www.suse.com/security/cve/CVE-2023-28746	external
https://bugzilla.suse.com/1213456	external
https://bugzilla.suse.com/1221323	external
https://www.suse.com/security/cve/CVE-2023-35827	external
https://bugzilla.suse.com/1212514	external
https://bugzilla.suse.com/1224298	external
https://bugzilla.suse.com/1224878	external
https://www.suse.com/security/cve/CVE-2023-52454	external
https://bugzilla.suse.com/1220320	external
https://www.suse.com/security/cve/CVE-2023-52469	external
https://bugzilla.suse.com/1220411	external
https://www.suse.com/security/cve/CVE-2023-52470	external
https://bugzilla.suse.com/1220413	external
https://www.suse.com/security/cve/CVE-2023-52474	external
https://bugzilla.suse.com/1220445	external
https://www.suse.com/security/cve/CVE-2023-52476	external
https://bugzilla.suse.com/1220703	external
https://www.suse.com/security/cve/CVE-2023-52477	external
https://bugzilla.suse.com/1220790	external
https://www.suse.com/security/cve/CVE-2023-52500	external
https://bugzilla.suse.com/1220883	external
https://www.suse.com/security/cve/CVE-2023-52509	external
https://bugzilla.suse.com/1220836	external
https://bugzilla.suse.com/1223290	external
https://www.suse.com/security/cve/CVE-2023-52572	external
https://bugzilla.suse.com/1220946	external
https://www.suse.com/security/cve/CVE-2023-52575	external
https://bugzilla.suse.com/1220871	external
https://www.suse.com/security/cve/CVE-2023-52583	external
https://bugzilla.suse.com/1221058	external
https://www.suse.com/security/cve/CVE-2023-52590	external
https://bugzilla.suse.com/1221088	external
https://www.suse.com/security/cve/CVE-2023-52591	external
https://bugzilla.suse.com/1221044	external
https://bugzilla.suse.com/1221578	external
https://bugzilla.suse.com/1221598	external
https://www.suse.com/security/cve/CVE-2023-52607	external
https://bugzilla.suse.com/1221061	external
https://www.suse.com/security/cve/CVE-2023-52628	external
https://bugzilla.suse.com/1222117	external
https://bugzilla.suse.com/1222118	external
https://www.suse.com/security/cve/CVE-2023-6270	external
https://bugzilla.suse.com/1218562	external
https://bugzilla.suse.com/1218813	external
https://bugzilla.suse.com/1221578	external
https://bugzilla.suse.com/1221598	external
https://bugzilla.suse.com/1223016	external
https://bugzilla.suse.com/1227675	external
https://www.suse.com/security/cve/CVE-2023-6356	external
https://bugzilla.suse.com/1217987	external
https://www.suse.com/security/cve/CVE-2023-6531	external
https://bugzilla.suse.com/1218447	external
https://bugzilla.suse.com/1218487	external
https://www.suse.com/security/cve/CVE-2023-6535	external
https://bugzilla.suse.com/1217988	external
https://www.suse.com/security/cve/CVE-2023-6536	external
https://bugzilla.suse.com/1217989	external
https://www.suse.com/security/cve/CVE-2023-7042	external
https://bugzilla.suse.com/1218336	external
https://www.suse.com/security/cve/CVE-2023-7192	external
https://bugzilla.suse.com/1218479	external
https://bugzilla.suse.com/1227675	external
https://www.suse.com/security/cve/CVE-2024-22099	external
https://bugzilla.suse.com/1219170	external
https://www.suse.com/security/cve/CVE-2024-26600	external
https://bugzilla.suse.com/1220340	external
https://www.suse.com/security/cve/CVE-2024-26614	external
https://bugzilla.suse.com/1221293	external
https://www.suse.com/security/cve/CVE-2024-26642	external
https://bugzilla.suse.com/1221830	external
https://www.suse.com/security/cve/CVE-2024-26704	external
https://bugzilla.suse.com/1222422	external
https://www.suse.com/security/cve/CVE-2024-26733	external
https://bugzilla.suse.com/1222585	external

JSON

To clipboard

Loading 3.9 MB of JSON…

CVE-2020-36780 (GCVE-0-2020-36780)

Vulnerability from cvelistv5 – Published: 2024-02-28 08:13 – Updated: 2026-05-11 13:42

Title

i2c: sprd: fix reference leak when pm_runtime_get_sync fails

Summary

In the Linux kernel, the following vulnerability has been resolved: i2c: sprd: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in sprd_i2c_master_xfer() and sprd_i2c_remove(). However, pm_runtime_get_sync will increment the PM reference count even failed. Forgetting to putting operation will result in a reference leak here. Replace it with pm_runtime_resume_and_get to keep usage counter balanced.

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-03-04 16:18 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/7e1764312440c5df9…
https://git.kernel.org/stable/c/e547640cee7981fd7…
https://git.kernel.org/stable/c/9223505e938ba3db5…
https://git.kernel.org/stable/c/d3406ab52097328a3…
https://git.kernel.org/stable/c/3a4f326463117cee3…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 8b9ec0719834fe66146d138d62ed66cef025c864 , < 7e1764312440c5df9dfe6b436035a03673b0c1b9 (git) Affected: 8b9ec0719834fe66146d138d62ed66cef025c864 , < e547640cee7981fd751d2c9cde3a61bdb678b755 (git) Affected: 8b9ec0719834fe66146d138d62ed66cef025c864 , < 9223505e938ba3db5907e058f4209770cff2f2a7 (git) Affected: 8b9ec0719834fe66146d138d62ed66cef025c864 , < d3406ab52097328a3bc4cbe124bfd8f6d51fb86f (git) Affected: 8b9ec0719834fe66146d138d62ed66cef025c864 , < 3a4f326463117cee3adcb72999ca34a9aaafda93 (git)
Linux	Linux	Affected: 4.14 Unaffected: 0 , < 4.14 (semver) Unaffected: 5.4.119 , ≤ 5.4.* (semver) Unaffected: 5.10.37 , ≤ 5.10.* (semver) Unaffected: 5.11.21 , ≤ 5.11.* (semver) Unaffected: 5.12.4 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 4.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2020-36780",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-04T16:18:58.850647Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T14:31:32.102Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T17:37:07.320Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7e1764312440c5df9dfe6b436035a03673b0c1b9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e547640cee7981fd751d2c9cde3a61bdb678b755"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9223505e938ba3db5907e058f4209770cff2f2a7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d3406ab52097328a3bc4cbe124bfd8f6d51fb86f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3a4f326463117cee3adcb72999ca34a9aaafda93"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-sprd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7e1764312440c5df9dfe6b436035a03673b0c1b9",
              "status": "affected",
              "version": "8b9ec0719834fe66146d138d62ed66cef025c864",
              "versionType": "git"
            },
            {
              "lessThan": "e547640cee7981fd751d2c9cde3a61bdb678b755",
              "status": "affected",
              "version": "8b9ec0719834fe66146d138d62ed66cef025c864",
              "versionType": "git"
            },
            {
              "lessThan": "9223505e938ba3db5907e058f4209770cff2f2a7",
              "status": "affected",
              "version": "8b9ec0719834fe66146d138d62ed66cef025c864",
              "versionType": "git"
            },
            {
              "lessThan": "d3406ab52097328a3bc4cbe124bfd8f6d51fb86f",
              "status": "affected",
              "version": "8b9ec0719834fe66146d138d62ed66cef025c864",
              "versionType": "git"
            },
            {
              "lessThan": "3a4f326463117cee3adcb72999ca34a9aaafda93",
              "status": "affected",
              "version": "8b9ec0719834fe66146d138d62ed66cef025c864",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-sprd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.14"
            },
            {
              "lessThan": "4.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.119",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.37",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.21",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.119",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.37",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.21",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.4",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: sprd: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in sprd_i2c_master_xfer() and sprd_i2c_remove().\n\nHowever, pm_runtime_get_sync will increment the PM reference\ncount even failed. Forgetting to putting operation will result\nin a reference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:42:45.319Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7e1764312440c5df9dfe6b436035a03673b0c1b9"
        },
        {
          "url": "https://git.kernel.org/stable/c/e547640cee7981fd751d2c9cde3a61bdb678b755"
        },
        {
          "url": "https://git.kernel.org/stable/c/9223505e938ba3db5907e058f4209770cff2f2a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/d3406ab52097328a3bc4cbe124bfd8f6d51fb86f"
        },
        {
          "url": "https://git.kernel.org/stable/c/3a4f326463117cee3adcb72999ca34a9aaafda93"
        }
      ],
      "title": "i2c: sprd: fix reference leak when pm_runtime_get_sync fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2020-36780",
    "datePublished": "2024-02-28T08:13:02.875Z",
    "dateReserved": "2024-02-26T17:07:27.434Z",
    "dateUpdated": "2026-05-11T13:42:45.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2020-36782 (GCVE-0-2020-36782)

Vulnerability from cvelistv5 – Published: 2024-02-28 08:13 – Updated: 2026-05-11 13:42

Title

i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails

Summary

In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in lpi2c_imx_master_enable. However, pm_runtime_get_sync will increment the PM reference count even failed. Forgetting to putting operation will result in a reference leak here. Replace it with pm_runtime_resume_and_get to keep usage counter balanced.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-28 20:38 UTC

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/815859cb1d2302e74…
https://git.kernel.org/stable/c/cc49d206414240483…
https://git.kernel.org/stable/c/bb300acc867e937ed…
https://git.kernel.org/stable/c/b100650d80cd2292f…
https://git.kernel.org/stable/c/278e5bbdb9a94fa06…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 13d6eb20fc79a1e606307256dad4098375539a09 , < 815859cb1d2302e74f11bf6894bceace9ca9eb4a (git) Affected: 13d6eb20fc79a1e606307256dad4098375539a09 , < cc49d206414240483bb93ffa3d80243e6a776916 (git) Affected: 13d6eb20fc79a1e606307256dad4098375539a09 , < bb300acc867e937edc2a6898e92b21f88e4e4e66 (git) Affected: 13d6eb20fc79a1e606307256dad4098375539a09 , < b100650d80cd2292f6c152f5f2943b5944b3e8ce (git) Affected: 13d6eb20fc79a1e606307256dad4098375539a09 , < 278e5bbdb9a94fa063c0f9bcde2479d0b8042462 (git)
Linux	Linux	Affected: 4.16 Unaffected: 0 , < 4.16 (semver) Unaffected: 5.4.119 , ≤ 5.4.* (semver) Unaffected: 5.10.37 , ≤ 5.10.* (semver) Unaffected: 5.11.21 , ≤ 5.11.* (semver) Unaffected: 5.12.4 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-36782",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-28T20:38:48.650662Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:12:27.144Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T17:37:07.089Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/815859cb1d2302e74f11bf6894bceace9ca9eb4a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cc49d206414240483bb93ffa3d80243e6a776916"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/bb300acc867e937edc2a6898e92b21f88e4e4e66"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b100650d80cd2292f6c152f5f2943b5944b3e8ce"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/278e5bbdb9a94fa063c0f9bcde2479d0b8042462"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-imx-lpi2c.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "815859cb1d2302e74f11bf6894bceace9ca9eb4a",
              "status": "affected",
              "version": "13d6eb20fc79a1e606307256dad4098375539a09",
              "versionType": "git"
            },
            {
              "lessThan": "cc49d206414240483bb93ffa3d80243e6a776916",
              "status": "affected",
              "version": "13d6eb20fc79a1e606307256dad4098375539a09",
              "versionType": "git"
            },
            {
              "lessThan": "bb300acc867e937edc2a6898e92b21f88e4e4e66",
              "status": "affected",
              "version": "13d6eb20fc79a1e606307256dad4098375539a09",
              "versionType": "git"
            },
            {
              "lessThan": "b100650d80cd2292f6c152f5f2943b5944b3e8ce",
              "status": "affected",
              "version": "13d6eb20fc79a1e606307256dad4098375539a09",
              "versionType": "git"
            },
            {
              "lessThan": "278e5bbdb9a94fa063c0f9bcde2479d0b8042462",
              "status": "affected",
              "version": "13d6eb20fc79a1e606307256dad4098375539a09",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-imx-lpi2c.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "lessThan": "4.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.119",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.37",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.21",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.119",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.37",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.21",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.4",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "4.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in lpi2c_imx_master_enable.\n\nHowever, pm_runtime_get_sync will increment the PM reference\ncount even failed. Forgetting to putting operation will result\nin a reference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:42:47.653Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/815859cb1d2302e74f11bf6894bceace9ca9eb4a"
        },
        {
          "url": "https://git.kernel.org/stable/c/cc49d206414240483bb93ffa3d80243e6a776916"
        },
        {
          "url": "https://git.kernel.org/stable/c/bb300acc867e937edc2a6898e92b21f88e4e4e66"
        },
        {
          "url": "https://git.kernel.org/stable/c/b100650d80cd2292f6c152f5f2943b5944b3e8ce"
        },
        {
          "url": "https://git.kernel.org/stable/c/278e5bbdb9a94fa063c0f9bcde2479d0b8042462"
        }
      ],
      "title": "i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2020-36782",
    "datePublished": "2024-02-28T08:13:04.110Z",
    "dateReserved": "2024-02-26T17:07:27.435Z",
    "dateUpdated": "2026-05-11T13:42:47.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2020-36783 (GCVE-0-2020-36783)

Vulnerability from cvelistv5 – Published: 2024-02-28 08:13 – Updated: 2026-05-11 13:42

Title

i2c: img-scb: fix reference leak when pm_runtime_get_sync fails

Summary

In the Linux kernel, the following vulnerability has been resolved: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in functions img_i2c_xfer and img_i2c_init. However, pm_runtime_get_sync will increment the PM reference count even failed. Forgetting to putting operation will result in a reference leak here. Replace it with pm_runtime_resume_and_get to keep usage counter balanced.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-28 19:54 UTC

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/4734c4b1d9573c9d2…
https://git.kernel.org/stable/c/e80ae8bde41266d3b…
https://git.kernel.org/stable/c/96c4a03658d661666…
https://git.kernel.org/stable/c/7ee35cde1e810ad6c…
https://git.kernel.org/stable/c/223125e37af8a641e…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 93222bd9b966105f43418fd336654ad10045783a , < 4734c4b1d9573c9d20bbc46cf37dde095ee011b8 (git) Affected: 93222bd9b966105f43418fd336654ad10045783a , < e80ae8bde41266d3b8bf012460b6593851766006 (git) Affected: 93222bd9b966105f43418fd336654ad10045783a , < 96c4a03658d661666c360959aa80cdabfe2972ed (git) Affected: 93222bd9b966105f43418fd336654ad10045783a , < 7ee35cde1e810ad6ca589980b9ec2b7b62946a5b (git) Affected: 93222bd9b966105f43418fd336654ad10045783a , < 223125e37af8a641ea4a09747a6a52172fc4b903 (git)
Linux	Linux	Affected: 4.15 Unaffected: 0 , < 4.15 (semver) Unaffected: 5.4.119 , ≤ 5.4.* (semver) Unaffected: 5.10.37 , ≤ 5.10.* (semver) Unaffected: 5.11.21 , ≤ 5.11.* (semver) Unaffected: 5.12.4 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-36783",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-28T19:54:25.536386Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:12:26.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T17:37:07.393Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4734c4b1d9573c9d20bbc46cf37dde095ee011b8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e80ae8bde41266d3b8bf012460b6593851766006"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/96c4a03658d661666c360959aa80cdabfe2972ed"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7ee35cde1e810ad6ca589980b9ec2b7b62946a5b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/223125e37af8a641ea4a09747a6a52172fc4b903"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-img-scb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4734c4b1d9573c9d20bbc46cf37dde095ee011b8",
              "status": "affected",
              "version": "93222bd9b966105f43418fd336654ad10045783a",
              "versionType": "git"
            },
            {
              "lessThan": "e80ae8bde41266d3b8bf012460b6593851766006",
              "status": "affected",
              "version": "93222bd9b966105f43418fd336654ad10045783a",
              "versionType": "git"
            },
            {
              "lessThan": "96c4a03658d661666c360959aa80cdabfe2972ed",
              "status": "affected",
              "version": "93222bd9b966105f43418fd336654ad10045783a",
              "versionType": "git"
            },
            {
              "lessThan": "7ee35cde1e810ad6ca589980b9ec2b7b62946a5b",
              "status": "affected",
              "version": "93222bd9b966105f43418fd336654ad10045783a",
              "versionType": "git"
            },
            {
              "lessThan": "223125e37af8a641ea4a09747a6a52172fc4b903",
              "status": "affected",
              "version": "93222bd9b966105f43418fd336654ad10045783a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/busses/i2c-img-scb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.119",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.37",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.21",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.119",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.37",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.21",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.4",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: img-scb: fix reference leak when pm_runtime_get_sync fails\n\nThe PM reference count is not expected to be incremented on\nreturn in functions img_i2c_xfer and img_i2c_init.\n\nHowever, pm_runtime_get_sync will increment the PM reference\ncount even failed. Forgetting to putting operation will result\nin a reference leak here.\n\nReplace it with pm_runtime_resume_and_get to keep usage\ncounter balanced."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:42:48.841Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4734c4b1d9573c9d20bbc46cf37dde095ee011b8"
        },
        {
          "url": "https://git.kernel.org/stable/c/e80ae8bde41266d3b8bf012460b6593851766006"
        },
        {
          "url": "https://git.kernel.org/stable/c/96c4a03658d661666c360959aa80cdabfe2972ed"
        },
        {
          "url": "https://git.kernel.org/stable/c/7ee35cde1e810ad6ca589980b9ec2b7b62946a5b"
        },
        {
          "url": "https://git.kernel.org/stable/c/223125e37af8a641ea4a09747a6a52172fc4b903"
        }
      ],
      "title": "i2c: img-scb: fix reference leak when pm_runtime_get_sync fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2020-36783",
    "datePublished": "2024-02-28T08:13:04.755Z",
    "dateReserved": "2024-02-26T17:07:27.435Z",
    "dateUpdated": "2026-05-11T13:42:48.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-23134 (GCVE-0-2021-23134)

Vulnerability from cvelistv5 – Published: 2021-05-12 22:45 – Updated: 2024-09-17 03:38

Title

Linux kernel llcp_sock_bind/connect use-after-free

Summary

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Assigner

palo_alto mitre root

References

7 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/n…	x_refsource_MISC
https://www.openwall.com/lists/oss-security/2021/…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2021062…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Linux Kernel	Linux Kernel	Affected: unspecified , < 5.12.4 (custom)

Date Public

2021-05-11 00:00

Credits

Nadav Markus from Palo Alto Networks Or Cohen from Palo Alto Networks

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T18:58:26.357Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2021/05/11/4"
          },
          {
            "name": "FEDORA-2021-286375de1e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/"
          },
          {
            "name": "FEDORA-2021-05152dbcf5",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
          },
          {
            "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210625-0007/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Linux Kernel",
          "vendor": "Linux Kernel",
          "versions": [
            {
              "lessThan": "5.12.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Nadav Markus from Palo Alto Networks"
        },
        {
          "lang": "en",
          "value": "Or Cohen from Palo Alto Networks"
        }
      ],
      "datePublic": "2021-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-25T05:06:31.000Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2021/05/11/4"
        },
        {
          "name": "FEDORA-2021-286375de1e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/"
        },
        {
          "name": "FEDORA-2021-05152dbcf5",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
        },
        {
          "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210625-0007/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Apply the following patch:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Linux kernel llcp_sock_bind/connect use-after-free",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@paloaltonetworks.com",
          "DATE_PUBLIC": "2021-05-11T11:14:00.000Z",
          "ID": "CVE-2021-23134",
          "STATE": "PUBLIC",
          "TITLE": "Linux kernel llcp_sock_bind/connect use-after-free"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Linux Kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "5.12.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux Kernel"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Nadav Markus from Palo Alto Networks"
          },
          {
            "lang": "eng",
            "value": "Or Cohen from Palo Alto Networks"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-416 Use After Free"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d"
            },
            {
              "name": "https://www.openwall.com/lists/oss-security/2021/05/11/4",
              "refsource": "MISC",
              "url": "https://www.openwall.com/lists/oss-security/2021/05/11/4"
            },
            {
              "name": "FEDORA-2021-286375de1e",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/"
            },
            {
              "name": "FEDORA-2021-05152dbcf5",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/"
            },
            {
              "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html"
            },
            {
              "name": "[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210625-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210625-0007/"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Apply the following patch:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d"
          }
        ],
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2021-23134",
    "datePublished": "2021-05-12T22:45:13.253Z",
    "dateReserved": "2021-01-06T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:38:10.572Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-46909 (GCVE-0-2021-46909)

Vulnerability from cvelistv5 – Published: 2024-02-27 06:53 – Updated: 2026-05-11 13:44

Title

ARM: footbridge: fix PCI interrupt mapping

Summary

In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since commit 30fdfb929e82 ("PCI: Add a call to pci_assign_irq() in pci_device_probe()"), the PCI code will call the IRQ mapping function whenever a PCI driver is probed. If these are marked as __init, this causes an oops if a PCI driver is loaded or bound after the kernel has initialised.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-03-05 22:33 UTC

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/532747fd5c7aaa17e…
https://git.kernel.org/stable/c/2643da6aa57920d91…
https://git.kernel.org/stable/c/871b569a3e67f570d…
https://git.kernel.org/stable/c/1fc087fdb98d556b4…
https://git.kernel.org/stable/c/c3efce8cc98073396…
https://git.kernel.org/stable/c/30e3b4f256b4e366a…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 , < 532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf (git) Affected: 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 , < 2643da6aa57920d9159a1a579fb04f89a2b0d29a (git) Affected: 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 , < 871b569a3e67f570df9f5ba195444dc7c621293b (git) Affected: 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 , < 1fc087fdb98d556b416c82ed6e3964a30885f47a (git) Affected: 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 , < c3efce8cc9807339633ee30e39882f4c8626ee1d (git) Affected: 30fdfb929e82450bbf3d0e0aba56efbc29b52b52 , < 30e3b4f256b4e366a61658c294f6a21b8626dda7 (git)
Linux	Linux	Affected: 4.13 Unaffected: 0 , < 4.13 (semver) Unaffected: 4.14.232 , ≤ 4.14.* (semver) Unaffected: 4.19.189 , ≤ 4.19.* (semver) Unaffected: 5.4.114 , ≤ 5.4.* (semver) Unaffected: 5.10.32 , ≤ 5.10.* (semver) Unaffected: 5.11.16 , ≤ 5.11.* (semver) Unaffected: 5.12 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-46909",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-05T22:33:27.334758Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:13:15.270Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:42.879Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2643da6aa57920d9159a1a579fb04f89a2b0d29a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/871b569a3e67f570df9f5ba195444dc7c621293b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1fc087fdb98d556b416c82ed6e3964a30885f47a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c3efce8cc9807339633ee30e39882f4c8626ee1d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/30e3b4f256b4e366a61658c294f6a21b8626dda7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/arm/mach-footbridge/cats-pci.c",
            "arch/arm/mach-footbridge/ebsa285-pci.c",
            "arch/arm/mach-footbridge/netwinder-pci.c",
            "arch/arm/mach-footbridge/personal-pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf",
              "status": "affected",
              "version": "30fdfb929e82450bbf3d0e0aba56efbc29b52b52",
              "versionType": "git"
            },
            {
              "lessThan": "2643da6aa57920d9159a1a579fb04f89a2b0d29a",
              "status": "affected",
              "version": "30fdfb929e82450bbf3d0e0aba56efbc29b52b52",
              "versionType": "git"
            },
            {
              "lessThan": "871b569a3e67f570df9f5ba195444dc7c621293b",
              "status": "affected",
              "version": "30fdfb929e82450bbf3d0e0aba56efbc29b52b52",
              "versionType": "git"
            },
            {
              "lessThan": "1fc087fdb98d556b416c82ed6e3964a30885f47a",
              "status": "affected",
              "version": "30fdfb929e82450bbf3d0e0aba56efbc29b52b52",
              "versionType": "git"
            },
            {
              "lessThan": "c3efce8cc9807339633ee30e39882f4c8626ee1d",
              "status": "affected",
              "version": "30fdfb929e82450bbf3d0e0aba56efbc29b52b52",
              "versionType": "git"
            },
            {
              "lessThan": "30e3b4f256b4e366a61658c294f6a21b8626dda7",
              "status": "affected",
              "version": "30fdfb929e82450bbf3d0e0aba56efbc29b52b52",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/arm/mach-footbridge/cats-pci.c",
            "arch/arm/mach-footbridge/ebsa285-pci.c",
            "arch/arm/mach-footbridge/netwinder-pci.c",
            "arch/arm/mach-footbridge/personal-pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.13"
            },
            {
              "lessThan": "4.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.232",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.189",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.114",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.32",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.232",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.189",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.114",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.32",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.16",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: footbridge: fix PCI interrupt mapping\n\nSince commit 30fdfb929e82 (\"PCI: Add a call to pci_assign_irq() in\npci_device_probe()\"), the PCI code will call the IRQ mapping function\nwhenever a PCI driver is probed. If these are marked as __init, this\ncauses an oops if a PCI driver is loaded or bound after the kernel has\ninitialised."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:44:13.718Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/532747fd5c7aaa17ee5cf79f3e947c31eb0e35cf"
        },
        {
          "url": "https://git.kernel.org/stable/c/2643da6aa57920d9159a1a579fb04f89a2b0d29a"
        },
        {
          "url": "https://git.kernel.org/stable/c/871b569a3e67f570df9f5ba195444dc7c621293b"
        },
        {
          "url": "https://git.kernel.org/stable/c/1fc087fdb98d556b416c82ed6e3964a30885f47a"
        },
        {
          "url": "https://git.kernel.org/stable/c/c3efce8cc9807339633ee30e39882f4c8626ee1d"
        },
        {
          "url": "https://git.kernel.org/stable/c/30e3b4f256b4e366a61658c294f6a21b8626dda7"
        }
      ],
      "title": "ARM: footbridge: fix PCI interrupt mapping",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-46909",
    "datePublished": "2024-02-27T06:53:50.181Z",
    "dateReserved": "2024-02-25T13:45:52.718Z",
    "dateUpdated": "2026-05-11T13:44:13.718Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-46921 (GCVE-0-2021-46921)

Vulnerability from cvelistv5 – Published: 2024-02-27 09:36 – Updated: 2026-08-05 08:45

Title

locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

Summary

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queued_write_lock_slowpath() While this code is executed with the wait_lock held, a reader can acquire the lock without holding wait_lock. The writer side loops checking the value with the atomic_cond_read_acquire(), but only truly acquires the lock when the compare-and-exchange is completed successfully which isn’t ordered. This exposes the window between the acquire and the cmpxchg to an A-B-A problem which allows reads following the lock acquisition to observe values speculatively before the write lock is truly acquired. We've seen a problem in epoll where the reader does a xchg while holding the read lock, but the writer can see a value change out from under it. Writer | Reader -------------------------------------------------------------------------------- ep_scan_ready_list() | |- write_lock_irq() | |- queued_write_lock_slowpath() | |- atomic_cond_read_acquire() | | read_lock_irqsave(&ep->lock, flags); --> (observes value before unlock) | chain_epi_lockless() | | epi->next = xchg(&ep->ovflist, epi); | | read_unlock_irqrestore(&ep->lock, flags); | | | atomic_cmpxchg_relaxed() | |-- READ_ONCE(ep->ovflist); | A core can order the read of the ovflist ahead of the atomic_cmpxchg_relaxed(). Switching the cmpxchg to use acquire semantics addresses this issue at which point the atomic_cond_read can be switched to use relaxed semantics. [peterz: use try_cmpxchg()]

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-27 16:11 UTC

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/5902f9453a313be8f…
https://git.kernel.org/stable/c/82808cc026811fbc3…
https://git.kernel.org/stable/c/82fa9ced35d88581c…
https://git.kernel.org/stable/c/d558fcdb171397283…
https://git.kernel.org/stable/c/84a24bf8c52e66b7a…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: b519b56e378ee82caf9b079b04f5db87dedc3251 , < 5902f9453a313be8fe78cbd7e7ca9dba9319fc6e (git) Affected: b519b56e378ee82caf9b079b04f5db87dedc3251 , < 82808cc026811fbc3ecf0c0b267a12a339eead56 (git) Affected: b519b56e378ee82caf9b079b04f5db87dedc3251 , < 82fa9ced35d88581cffa4a1c856fc41fca96d80a (git) Affected: b519b56e378ee82caf9b079b04f5db87dedc3251 , < d558fcdb17139728347bccc60a16af3e639649d2 (git) Affected: b519b56e378ee82caf9b079b04f5db87dedc3251 , < 84a24bf8c52e66b7ac89ada5e3cfbe72d65c1896 (git)
Linux	Linux	Affected: 4.15 Unaffected: 0 , < 4.15 (semver) Unaffected: 4.19.189 , ≤ 4.19.* (semver) Unaffected: 5.4.115 , ≤ 5.4.* (semver) Unaffected: 5.10.33 , ≤ 5.10.* (semver) Unaffected: 5.11.17 , ≤ 5.11.* (semver) Unaffected: 5.12 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-46921",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-27T16:11:46.310286Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:22:01.427Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:42.848Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5902f9453a313be8fe78cbd7e7ca9dba9319fc6e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/82808cc026811fbc3ecf0c0b267a12a339eead56"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/82fa9ced35d88581cffa4a1c856fc41fca96d80a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d558fcdb17139728347bccc60a16af3e639649d2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/84a24bf8c52e66b7ac89ada5e3cfbe72d65c1896"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/locking/qrwlock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5902f9453a313be8fe78cbd7e7ca9dba9319fc6e",
              "status": "affected",
              "version": "b519b56e378ee82caf9b079b04f5db87dedc3251",
              "versionType": "git"
            },
            {
              "lessThan": "82808cc026811fbc3ecf0c0b267a12a339eead56",
              "status": "affected",
              "version": "b519b56e378ee82caf9b079b04f5db87dedc3251",
              "versionType": "git"
            },
            {
              "lessThan": "82fa9ced35d88581cffa4a1c856fc41fca96d80a",
              "status": "affected",
              "version": "b519b56e378ee82caf9b079b04f5db87dedc3251",
              "versionType": "git"
            },
            {
              "lessThan": "d558fcdb17139728347bccc60a16af3e639649d2",
              "status": "affected",
              "version": "b519b56e378ee82caf9b079b04f5db87dedc3251",
              "versionType": "git"
            },
            {
              "lessThan": "84a24bf8c52e66b7ac89ada5e3cfbe72d65c1896",
              "status": "affected",
              "version": "b519b56e378ee82caf9b079b04f5db87dedc3251",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/locking/qrwlock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.189",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.115",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.189",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.115",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.33",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.17",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlocking/qrwlock: Fix ordering in queued_write_lock_slowpath()\n\nWhile this code is executed with the wait_lock held, a reader can\nacquire the lock without holding wait_lock.  The writer side loops\nchecking the value with the atomic_cond_read_acquire(), but only truly\nacquires the lock when the compare-and-exchange is completed\nsuccessfully which isn\u2019t ordered. This exposes the window between the\nacquire and the cmpxchg to an A-B-A problem which allows reads\nfollowing the lock acquisition to observe values speculatively before\nthe write lock is truly acquired.\n\nWe\u0027ve seen a problem in epoll where the reader does a xchg while\nholding the read lock, but the writer can see a value change out from\nunder it.\n\n  Writer                                | Reader\n  --------------------------------------------------------------------------------\n  ep_scan_ready_list()                  |\n  |- write_lock_irq()                   |\n      |- queued_write_lock_slowpath()   |\n\t|- atomic_cond_read_acquire()   |\n\t\t\t\t        | read_lock_irqsave(\u0026ep-\u003elock, flags);\n     --\u003e (observes value before unlock) |  chain_epi_lockless()\n     |                                  |    epi-\u003enext = xchg(\u0026ep-\u003eovflist, epi);\n     |                                  | read_unlock_irqrestore(\u0026ep-\u003elock, flags);\n     |                                  |\n     |     atomic_cmpxchg_relaxed()     |\n     |-- READ_ONCE(ep-\u003eovflist);        |\n\nA core can order the read of the ovflist ahead of the\natomic_cmpxchg_relaxed(). Switching the cmpxchg to use acquire\nsemantics addresses this issue at which point the atomic_cond_read can\nbe switched to use relaxed semantics.\n\n[peterz: use try_cmpxchg()]"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is in queued_write_lock_slowpath() for rwlock_t; the demonstrated path is local epoll_wait \u2192 ep_send_events \u2192 ep_done_scan \u2192 write_lock_irq(), which requires local syscall access rather than network or physical reachability.\nAC:L - An unprivileged attacker can drive both sides of the race (epoll_wait as writer and concurrent fd events triggering ep_poll_callback as reader), forcing lock contention into the slowpath; Amazon observed this ordering failure in production on ARM, so success is not dependent on victim-controlled conditions.\nPR:L - epoll_create/epoll_ctl/epoll_wait and ordinary process activity that take rwlocks are available to unprivileged local users with no capabilities or user-namespace privilege escalation required.\nUI:N - Exploitation requires only attacker-controlled threads and file descriptors; no separate victim action such as mounting a filesystem or opening a crafted file is needed.\nS:U - Impact remains within the host kernel\u0027s privilege boundary (incorrect mutual exclusion and resulting memory/state corruption), with no VM-escape or other cross-authority scope change.\nC:H - Missing acquire semantics let a writer observe shared kernel state before the write lock is truly held, so protected structures (e.g. ep-\u003eovflist and any other rwlock-guarded data) can be read incorrectly; as a generic rwlock break this enables broad kernel info disclosure via corrupted/racy structure access.\nI:H - The writer then mutates state based on that stale view (e.g. ep_done_scan writing EP_UNACTIVE_PTR over an overflow chain it missed), and broken write-lock exclusivity on widely used rwlocks such as tasklist_lock can corrupt kernel pointer-rich structures, enabling integrity loss and control-flow primitives.\nA:H - Data races from broken qrwlock acquire on structures protected by rwlock_t (epoll lists, tasklist, and others on ARM64/Android) can yield list corruption, use-after-free, and kernel oops/panic under attacker-triggered contention."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:45:05.258Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5902f9453a313be8fe78cbd7e7ca9dba9319fc6e"
        },
        {
          "url": "https://git.kernel.org/stable/c/82808cc026811fbc3ecf0c0b267a12a339eead56"
        },
        {
          "url": "https://git.kernel.org/stable/c/82fa9ced35d88581cffa4a1c856fc41fca96d80a"
        },
        {
          "url": "https://git.kernel.org/stable/c/d558fcdb17139728347bccc60a16af3e639649d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/84a24bf8c52e66b7ac89ada5e3cfbe72d65c1896"
        }
      ],
      "title": "locking/qrwlock: Fix ordering in queued_write_lock_slowpath()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-46921",
    "datePublished": "2024-02-27T09:36:26.461Z",
    "dateReserved": "2024-02-25T13:45:52.719Z",
    "dateUpdated": "2026-08-05T08:45:05.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-46930 (GCVE-0-2021-46930)

Vulnerability from cvelistv5 – Published: 2024-02-27 09:43 – Updated: 2026-05-11 13:44

Title

usb: mtu3: fix list_head check warning

Summary

In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitialization of list_head. BUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4 Call trace: dump_backtrace+0x0/0x298 show_stack+0x24/0x34 dump_stack+0x130/0x1a8 print_address_description+0x88/0x56c __kasan_report+0x1b8/0x2a0 kasan_report+0x14/0x20 __asan_load8+0x9c/0xa0 __list_del_entry_valid+0x34/0xe4 mtu3_req_complete+0x4c/0x300 [mtu3] mtu3_gadget_stop+0x168/0x448 [mtu3] usb_gadget_unregister_driver+0x204/0x3a0 unregister_gadget_item+0x44/0xa4

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-27 20:52 UTC

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/585e2b244dda7ea73…
https://git.kernel.org/stable/c/3b6efe0b7ba03cc2a…
https://git.kernel.org/stable/c/249ddfbe00570d6dc…
https://git.kernel.org/stable/c/8c313e3bfd9adae8d…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 83374e035b6286731c5aa617844c7b724294c2a7 , < 585e2b244dda7ea733274e4b8fa27853d625d3bf (git) Affected: 83374e035b6286731c5aa617844c7b724294c2a7 , < 3b6efe0b7ba03cc2acf0694b46d6ff33c5b4c295 (git) Affected: 83374e035b6286731c5aa617844c7b724294c2a7 , < 249ddfbe00570d6dc76208e88017937d4d374c79 (git) Affected: 83374e035b6286731c5aa617844c7b724294c2a7 , < 8c313e3bfd9adae8d5c4ba1cc696dcbc86fbf9bf (git)
Linux	Linux	Affected: 5.2 Unaffected: 0 , < 5.2 (semver) Unaffected: 5.4.170 , ≤ 5.4.* (semver) Unaffected: 5.10.90 , ≤ 5.10.* (semver) Unaffected: 5.15.13 , ≤ 5.15.* (semver) Unaffected: 5.16 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-46930",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-27T20:52:42.615834Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:22:03.494Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:42.987Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/585e2b244dda7ea733274e4b8fa27853d625d3bf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3b6efe0b7ba03cc2acf0694b46d6ff33c5b4c295"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/249ddfbe00570d6dc76208e88017937d4d374c79"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8c313e3bfd9adae8d5c4ba1cc696dcbc86fbf9bf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/mtu3/mtu3_gadget.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "585e2b244dda7ea733274e4b8fa27853d625d3bf",
              "status": "affected",
              "version": "83374e035b6286731c5aa617844c7b724294c2a7",
              "versionType": "git"
            },
            {
              "lessThan": "3b6efe0b7ba03cc2acf0694b46d6ff33c5b4c295",
              "status": "affected",
              "version": "83374e035b6286731c5aa617844c7b724294c2a7",
              "versionType": "git"
            },
            {
              "lessThan": "249ddfbe00570d6dc76208e88017937d4d374c79",
              "status": "affected",
              "version": "83374e035b6286731c5aa617844c7b724294c2a7",
              "versionType": "git"
            },
            {
              "lessThan": "8c313e3bfd9adae8d5c4ba1cc696dcbc86fbf9bf",
              "status": "affected",
              "version": "83374e035b6286731c5aa617844c7b724294c2a7",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/mtu3/mtu3_gadget.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "lessThan": "5.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.170",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.170",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.90",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.13",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: mtu3: fix list_head check warning\n\nThis is caused by uninitialization of list_head.\n\nBUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4\n\nCall trace:\ndump_backtrace+0x0/0x298\nshow_stack+0x24/0x34\ndump_stack+0x130/0x1a8\nprint_address_description+0x88/0x56c\n__kasan_report+0x1b8/0x2a0\nkasan_report+0x14/0x20\n__asan_load8+0x9c/0xa0\n__list_del_entry_valid+0x34/0xe4\nmtu3_req_complete+0x4c/0x300 [mtu3]\nmtu3_gadget_stop+0x168/0x448 [mtu3]\nusb_gadget_unregister_driver+0x204/0x3a0\nunregister_gadget_item+0x44/0xa4"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:44:38.962Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/585e2b244dda7ea733274e4b8fa27853d625d3bf"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b6efe0b7ba03cc2acf0694b46d6ff33c5b4c295"
        },
        {
          "url": "https://git.kernel.org/stable/c/249ddfbe00570d6dc76208e88017937d4d374c79"
        },
        {
          "url": "https://git.kernel.org/stable/c/8c313e3bfd9adae8d5c4ba1cc696dcbc86fbf9bf"
        }
      ],
      "title": "usb: mtu3: fix list_head check warning",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-46930",
    "datePublished": "2024-02-27T09:43:58.710Z",
    "dateReserved": "2024-02-25T13:45:52.720Z",
    "dateUpdated": "2026-05-11T13:44:38.962Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-46938 (GCVE-0-2021-46938)

Vulnerability from cvelistv5 – Published: 2024-02-27 18:40 – Updated: 2026-05-11 13:44

Title

dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails

Summary

In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails When loading a device-mapper table for a request-based mapped device, and the allocation/initialization of the blk_mq_tag_set for the device fails, a following device remove will cause a double free. E.g. (dmesg): device-mapper: core: Cannot initialize queue for request-based dm-mq mapped device device-mapper: ioctl: unable to set up device queue for new table. Unable to handle kernel pointer dereference in virtual kernel address space Failing address: 0305e098835de000 TEID: 0305e098835de803 Fault in home space mode while using kernel ASCE. AS:000000025efe0007 R3:0000000000000024 Oops: 0038 ilc:3 [#1] SMP Modules linked in: ... lots of modules ... Supported: Yes, External CPU: 0 PID: 7348 Comm: multipathd Kdump: loaded Tainted: G W X 5.3.18-53-default #1 SLE15-SP3 Hardware name: IBM 8561 T01 7I2 (LPAR) Krnl PSW : 0704e00180000000 000000025e368eca (kfree+0x42/0x330) R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3 Krnl GPRS: 000000000000004a 000000025efe5230 c1773200d779968d 0000000000000000 000000025e520270 000000025e8d1b40 0000000000000003 00000007aae10000 000000025e5202a2 0000000000000001 c1773200d779968d 0305e098835de640 00000007a8170000 000003ff80138650 000000025e5202a2 000003e00396faa8 Krnl Code: 000000025e368eb8: c4180041e100 lgrl %r1,25eba50b8 000000025e368ebe: ecba06b93a55 risbg %r11,%r10,6,185,58 #000000025e368ec4: e3b010000008 ag %r11,0(%r1) >000000025e368eca: e310b0080004 lg %r1,8(%r11) 000000025e368ed0: a7110001 tmll %r1,1 000000025e368ed4: a7740129 brc 7,25e369126 000000025e368ed8: e320b0080004 lg %r2,8(%r11) 000000025e368ede: b904001b lgr %r1,%r11 Call Trace: [<000000025e368eca>] kfree+0x42/0x330 [<000000025e5202a2>] blk_mq_free_tag_set+0x72/0xb8 [<000003ff801316a8>] dm_mq_cleanup_mapped_device+0x38/0x50 [dm_mod] [<000003ff80120082>] free_dev+0x52/0xd0 [dm_mod] [<000003ff801233f0>] __dm_destroy+0x150/0x1d0 [dm_mod] [<000003ff8012bb9a>] dev_remove+0x162/0x1c0 [dm_mod] [<000003ff8012a988>] ctl_ioctl+0x198/0x478 [dm_mod] [<000003ff8012ac8a>] dm_ctl_ioctl+0x22/0x38 [dm_mod] [<000000025e3b11ee>] ksys_ioctl+0xbe/0xe0 [<000000025e3b127a>] __s390x_sys_ioctl+0x2a/0x40 [<000000025e8c15ac>] system_call+0xd8/0x2c8 Last Breaking-Event-Address: [<000000025e52029c>] blk_mq_free_tag_set+0x6c/0xb8 Kernel panic - not syncing: Fatal exception: panic_on_oops When allocation/initialization of the blk_mq_tag_set fails in dm_mq_init_request_queue(), it is uninitialized/freed, but the pointer is not reset to NULL; so when dev_remove() later gets into dm_mq_cleanup_mapped_device() it sees the pointer and tries to uninitialize and free it again. Fix this by setting the pointer to NULL in dm_mq_init_request_queue() error-handling. Also set it to NULL in dm_mq_cleanup_mapped_device().

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-28 20:28 UTC

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/8ae0185255eaf05bd…
https://git.kernel.org/stable/c/b42c0a33dfdd451d9…
https://git.kernel.org/stable/c/772b9f59657665af3…
https://git.kernel.org/stable/c/a992a283c0b77d0a7…
https://git.kernel.org/stable/c/1cb02dc76f4c0a274…
https://git.kernel.org/stable/c/6086f957416a6e872…
https://git.kernel.org/stable/c/d757bf4c69cda3c3a…
https://git.kernel.org/stable/c/8e947c8f4a5620df7…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < 8ae0185255eaf05bd66f4215c81e99bf01140fd9 (git) Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < b42c0a33dfdd451d9be62dd5de58c39f2750b6e3 (git) Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < 772b9f59657665af3b68d24d12b9d172d31f0dfb (git) Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < a992a283c0b77d0a7c2c348add0e6a21fb1dab67 (git) Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < 1cb02dc76f4c0a2749a02b26469512d6984252e9 (git) Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < 6086f957416a6e87236c06079fcaba7a3998aeca (git) Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < d757bf4c69cda3c3ab7f775dfabbf5a80e2f6f9d (git) Affected: 1c357a1e86a4227a6b6059f2de118ae47659cebc , < 8e947c8f4a5620df77e43c9c75310dc510250166 (git)
Linux	Linux	Affected: 4.6 Unaffected: 0 , < 4.6 (semver) Unaffected: 4.9.269 , ≤ 4.9.* (semver) Unaffected: 4.14.233 , ≤ 4.14.* (semver) Unaffected: 4.19.191 , ≤ 4.19.* (semver) Unaffected: 5.4.118 , ≤ 5.4.* (semver) Unaffected: 5.10.36 , ≤ 5.10.* (semver) Unaffected: 5.11.20 , ≤ 5.11.* (semver) Unaffected: 5.12.3 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-46938",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-28T20:28:43.150810Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:22:05.088Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:43.027Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8ae0185255eaf05bd66f4215c81e99bf01140fd9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b42c0a33dfdd451d9be62dd5de58c39f2750b6e3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/772b9f59657665af3b68d24d12b9d172d31f0dfb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a992a283c0b77d0a7c2c348add0e6a21fb1dab67"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1cb02dc76f4c0a2749a02b26469512d6984252e9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6086f957416a6e87236c06079fcaba7a3998aeca"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d757bf4c69cda3c3ab7f775dfabbf5a80e2f6f9d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8e947c8f4a5620df77e43c9c75310dc510250166"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/dm-rq.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8ae0185255eaf05bd66f4215c81e99bf01140fd9",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            },
            {
              "lessThan": "b42c0a33dfdd451d9be62dd5de58c39f2750b6e3",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            },
            {
              "lessThan": "772b9f59657665af3b68d24d12b9d172d31f0dfb",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            },
            {
              "lessThan": "a992a283c0b77d0a7c2c348add0e6a21fb1dab67",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            },
            {
              "lessThan": "1cb02dc76f4c0a2749a02b26469512d6984252e9",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            },
            {
              "lessThan": "6086f957416a6e87236c06079fcaba7a3998aeca",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            },
            {
              "lessThan": "d757bf4c69cda3c3ab7f775dfabbf5a80e2f6f9d",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            },
            {
              "lessThan": "8e947c8f4a5620df77e43c9c75310dc510250166",
              "status": "affected",
              "version": "1c357a1e86a4227a6b6059f2de118ae47659cebc",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/dm-rq.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.6"
            },
            {
              "lessThan": "4.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.269",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.233",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.191",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.36",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.269",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.233",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.191",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.118",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.36",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.20",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.3",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "4.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm rq: fix double free of blk_mq_tag_set in dev remove after table load fails\n\nWhen loading a device-mapper table for a request-based mapped device,\nand the allocation/initialization of the blk_mq_tag_set for the device\nfails, a following device remove will cause a double free.\n\nE.g. (dmesg):\n  device-mapper: core: Cannot initialize queue for request-based dm-mq mapped device\n  device-mapper: ioctl: unable to set up device queue for new table.\n  Unable to handle kernel pointer dereference in virtual kernel address space\n  Failing address: 0305e098835de000 TEID: 0305e098835de803\n  Fault in home space mode while using kernel ASCE.\n  AS:000000025efe0007 R3:0000000000000024\n  Oops: 0038 ilc:3 [#1] SMP\n  Modules linked in: ... lots of modules ...\n  Supported: Yes, External\n  CPU: 0 PID: 7348 Comm: multipathd Kdump: loaded Tainted: G        W      X    5.3.18-53-default #1 SLE15-SP3\n  Hardware name: IBM 8561 T01 7I2 (LPAR)\n  Krnl PSW : 0704e00180000000 000000025e368eca (kfree+0x42/0x330)\n             R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3\n  Krnl GPRS: 000000000000004a 000000025efe5230 c1773200d779968d 0000000000000000\n             000000025e520270 000000025e8d1b40 0000000000000003 00000007aae10000\n             000000025e5202a2 0000000000000001 c1773200d779968d 0305e098835de640\n             00000007a8170000 000003ff80138650 000000025e5202a2 000003e00396faa8\n  Krnl Code: 000000025e368eb8: c4180041e100       lgrl    %r1,25eba50b8\n             000000025e368ebe: ecba06b93a55       risbg   %r11,%r10,6,185,58\n            #000000025e368ec4: e3b010000008       ag      %r11,0(%r1)\n            \u003e000000025e368eca: e310b0080004       lg      %r1,8(%r11)\n             000000025e368ed0: a7110001           tmll    %r1,1\n             000000025e368ed4: a7740129           brc     7,25e369126\n             000000025e368ed8: e320b0080004       lg      %r2,8(%r11)\n             000000025e368ede: b904001b           lgr     %r1,%r11\n  Call Trace:\n   [\u003c000000025e368eca\u003e] kfree+0x42/0x330\n   [\u003c000000025e5202a2\u003e] blk_mq_free_tag_set+0x72/0xb8\n   [\u003c000003ff801316a8\u003e] dm_mq_cleanup_mapped_device+0x38/0x50 [dm_mod]\n   [\u003c000003ff80120082\u003e] free_dev+0x52/0xd0 [dm_mod]\n   [\u003c000003ff801233f0\u003e] __dm_destroy+0x150/0x1d0 [dm_mod]\n   [\u003c000003ff8012bb9a\u003e] dev_remove+0x162/0x1c0 [dm_mod]\n   [\u003c000003ff8012a988\u003e] ctl_ioctl+0x198/0x478 [dm_mod]\n   [\u003c000003ff8012ac8a\u003e] dm_ctl_ioctl+0x22/0x38 [dm_mod]\n   [\u003c000000025e3b11ee\u003e] ksys_ioctl+0xbe/0xe0\n   [\u003c000000025e3b127a\u003e] __s390x_sys_ioctl+0x2a/0x40\n   [\u003c000000025e8c15ac\u003e] system_call+0xd8/0x2c8\n  Last Breaking-Event-Address:\n   [\u003c000000025e52029c\u003e] blk_mq_free_tag_set+0x6c/0xb8\n  Kernel panic - not syncing: Fatal exception: panic_on_oops\n\nWhen allocation/initialization of the blk_mq_tag_set fails in\ndm_mq_init_request_queue(), it is uninitialized/freed, but the pointer\nis not reset to NULL; so when dev_remove() later gets into\ndm_mq_cleanup_mapped_device() it sees the pointer and tries to\nuninitialize and free it again.\n\nFix this by setting the pointer to NULL in dm_mq_init_request_queue()\nerror-handling. Also set it to NULL in dm_mq_cleanup_mapped_device()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:44:48.604Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8ae0185255eaf05bd66f4215c81e99bf01140fd9"
        },
        {
          "url": "https://git.kernel.org/stable/c/b42c0a33dfdd451d9be62dd5de58c39f2750b6e3"
        },
        {
          "url": "https://git.kernel.org/stable/c/772b9f59657665af3b68d24d12b9d172d31f0dfb"
        },
        {
          "url": "https://git.kernel.org/stable/c/a992a283c0b77d0a7c2c348add0e6a21fb1dab67"
        },
        {
          "url": "https://git.kernel.org/stable/c/1cb02dc76f4c0a2749a02b26469512d6984252e9"
        },
        {
          "url": "https://git.kernel.org/stable/c/6086f957416a6e87236c06079fcaba7a3998aeca"
        },
        {
          "url": "https://git.kernel.org/stable/c/d757bf4c69cda3c3ab7f775dfabbf5a80e2f6f9d"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e947c8f4a5620df77e43c9c75310dc510250166"
        }
      ],
      "title": "dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-46938",
    "datePublished": "2024-02-27T18:40:26.850Z",
    "dateReserved": "2024-02-25T13:45:52.721Z",
    "dateUpdated": "2026-05-11T13:44:48.604Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-46939 (GCVE-0-2021-46939)

Vulnerability from cvelistv5 – Published: 2024-02-27 18:40 – Updated: 2026-05-11 13:44

Title

tracing: Restructure trace_clock_global() to never block

Summary

In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure trace_clock_global() to never block It was reported that a fix to the ring buffer recursion detection would cause a hung machine when performing suspend / resume testing. The following backtrace was extracted from debugging that case: Call Trace: trace_clock_global+0x91/0xa0 __rb_reserve_next+0x237/0x460 ring_buffer_lock_reserve+0x12a/0x3f0 trace_buffer_lock_reserve+0x10/0x50 __trace_graph_return+0x1f/0x80 trace_graph_return+0xb7/0xf0 ? trace_clock_global+0x91/0xa0 ftrace_return_to_handler+0x8b/0xf0 ? pv_hash+0xa0/0xa0 return_to_handler+0x15/0x30 ? ftrace_graph_caller+0xa0/0xa0 ? trace_clock_global+0x91/0xa0 ? __rb_reserve_next+0x237/0x460 ? ring_buffer_lock_reserve+0x12a/0x3f0 ? trace_event_buffer_lock_reserve+0x3c/0x120 ? trace_event_buffer_reserve+0x6b/0xc0 ? trace_event_raw_event_device_pm_callback_start+0x125/0x2d0 ? dpm_run_callback+0x3b/0xc0 ? pm_ops_is_empty+0x50/0x50 ? platform_get_irq_byname_optional+0x90/0x90 ? trace_device_pm_callback_start+0x82/0xd0 ? dpm_run_callback+0x49/0xc0 With the following RIP: RIP: 0010:native_queued_spin_lock_slowpath+0x69/0x200 Since the fix to the recursion detection would allow a single recursion to happen while tracing, this lead to the trace_clock_global() taking a spin lock and then trying to take it again: ring_buffer_lock_reserve() { trace_clock_global() { arch_spin_lock() { queued_spin_lock_slowpath() { /* lock taken */ (something else gets traced by function graph tracer) ring_buffer_lock_reserve() { trace_clock_global() { arch_spin_lock() { queued_spin_lock_slowpath() { /* DEAD LOCK! */ Tracing should *never* block, as it can lead to strange lockups like the above. Restructure the trace_clock_global() code to instead of simply taking a lock to update the recorded "prev_time" simply use it, as two events happening on two different CPUs that calls this at the same time, really doesn't matter which one goes first. Use a trylock to grab the lock for updating the prev_time, and if it fails, simply try again the next time. If it failed to be taken, that means something else is already updating it. Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=212761

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-22 16:06 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/91ca6f6a91f679c86…
https://git.kernel.org/stable/c/859b47a43f5a0e5b9…
https://git.kernel.org/stable/c/1fca00920327be96f…
https://git.kernel.org/stable/c/d43d56dbf452ccecc…
https://git.kernel.org/stable/c/c64da3294a7d59a4b…
https://git.kernel.org/stable/c/a33614d52e97fc807…
https://git.kernel.org/stable/c/6e2418576228eeb12…
https://git.kernel.org/stable/c/2a1bd74b8186d7938…
https://git.kernel.org/stable/c/aafe104aa9096827a…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < 91ca6f6a91f679c8645d7f3307e03ce86ad518c4 (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < 859b47a43f5a0e5b9a92b621dc6ceaad39fb5c8b (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < 1fca00920327be96f3318224f502e4d5460f9545 (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < d43d56dbf452ccecc1ec735cd4b6840118005d7c (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < c64da3294a7d59a4bf6874c664c13be892f15f44 (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < a33614d52e97fc8077eb0b292189ca7d964cc534 (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < 6e2418576228eeb12e7ba82edb8f9500623942ff (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < 2a1bd74b8186d7938bf004f5603f25b84785f63e (git) Affected: 14131f2f98ac350ee9e73faed916d2238a8b6a0d , < aafe104aa9096827a429bc1358f8260ee565b7cc (git)
Linux	Linux	Affected: 2.6.30 Unaffected: 0 , < 2.6.30 (semver) Unaffected: 4.4.269 , ≤ 4.4.* (semver) Unaffected: 4.9.269 , ≤ 4.9.* (semver) Unaffected: 4.14.233 , ≤ 4.14.* (semver) Unaffected: 4.19.191 , ≤ 4.19.* (semver) Unaffected: 5.4.118 , ≤ 5.4.* (semver) Unaffected: 5.10.36 , ≤ 5.10.* (semver) Unaffected: 5.11.20 , ≤ 5.11.* (semver) Unaffected: 5.12.3 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-46939",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-22T16:06:58.628047Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-22T16:08:05.513Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:43.036Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/91ca6f6a91f679c8645d7f3307e03ce86ad518c4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/859b47a43f5a0e5b9a92b621dc6ceaad39fb5c8b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1fca00920327be96f3318224f502e4d5460f9545"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d43d56dbf452ccecc1ec735cd4b6840118005d7c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c64da3294a7d59a4bf6874c664c13be892f15f44"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a33614d52e97fc8077eb0b292189ca7d964cc534"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6e2418576228eeb12e7ba82edb8f9500623942ff"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2a1bd74b8186d7938bf004f5603f25b84785f63e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/aafe104aa9096827a429bc1358f8260ee565b7cc"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/trace/trace_clock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "91ca6f6a91f679c8645d7f3307e03ce86ad518c4",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "859b47a43f5a0e5b9a92b621dc6ceaad39fb5c8b",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "1fca00920327be96f3318224f502e4d5460f9545",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "d43d56dbf452ccecc1ec735cd4b6840118005d7c",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "c64da3294a7d59a4bf6874c664c13be892f15f44",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "a33614d52e97fc8077eb0b292189ca7d964cc534",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "6e2418576228eeb12e7ba82edb8f9500623942ff",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "2a1bd74b8186d7938bf004f5603f25b84785f63e",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            },
            {
              "lessThan": "aafe104aa9096827a429bc1358f8260ee565b7cc",
              "status": "affected",
              "version": "14131f2f98ac350ee9e73faed916d2238a8b6a0d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/trace/trace_clock.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.30"
            },
            {
              "lessThan": "2.6.30",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.269",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.269",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.233",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.191",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.36",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.269",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.269",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.233",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.191",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.118",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.36",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.20",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.3",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Restructure trace_clock_global() to never block\n\nIt was reported that a fix to the ring buffer recursion detection would\ncause a hung machine when performing suspend / resume testing. The\nfollowing backtrace was extracted from debugging that case:\n\nCall Trace:\n trace_clock_global+0x91/0xa0\n __rb_reserve_next+0x237/0x460\n ring_buffer_lock_reserve+0x12a/0x3f0\n trace_buffer_lock_reserve+0x10/0x50\n __trace_graph_return+0x1f/0x80\n trace_graph_return+0xb7/0xf0\n ? trace_clock_global+0x91/0xa0\n ftrace_return_to_handler+0x8b/0xf0\n ? pv_hash+0xa0/0xa0\n return_to_handler+0x15/0x30\n ? ftrace_graph_caller+0xa0/0xa0\n ? trace_clock_global+0x91/0xa0\n ? __rb_reserve_next+0x237/0x460\n ? ring_buffer_lock_reserve+0x12a/0x3f0\n ? trace_event_buffer_lock_reserve+0x3c/0x120\n ? trace_event_buffer_reserve+0x6b/0xc0\n ? trace_event_raw_event_device_pm_callback_start+0x125/0x2d0\n ? dpm_run_callback+0x3b/0xc0\n ? pm_ops_is_empty+0x50/0x50\n ? platform_get_irq_byname_optional+0x90/0x90\n ? trace_device_pm_callback_start+0x82/0xd0\n ? dpm_run_callback+0x49/0xc0\n\nWith the following RIP:\n\nRIP: 0010:native_queued_spin_lock_slowpath+0x69/0x200\n\nSince the fix to the recursion detection would allow a single recursion to\nhappen while tracing, this lead to the trace_clock_global() taking a spin\nlock and then trying to take it again:\n\nring_buffer_lock_reserve() {\n  trace_clock_global() {\n    arch_spin_lock() {\n      queued_spin_lock_slowpath() {\n        /* lock taken */\n        (something else gets traced by function graph tracer)\n          ring_buffer_lock_reserve() {\n            trace_clock_global() {\n              arch_spin_lock() {\n                queued_spin_lock_slowpath() {\n                /* DEAD LOCK! */\n\nTracing should *never* block, as it can lead to strange lockups like the\nabove.\n\nRestructure the trace_clock_global() code to instead of simply taking a\nlock to update the recorded \"prev_time\" simply use it, as two events\nhappening on two different CPUs that calls this at the same time, really\ndoesn\u0027t matter which one goes first. Use a trylock to grab the lock for\nupdating the prev_time, and if it fails, simply try again the next time.\nIf it failed to be taken, that means something else is already updating\nit.\n\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=212761"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:44:49.866Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/91ca6f6a91f679c8645d7f3307e03ce86ad518c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/859b47a43f5a0e5b9a92b621dc6ceaad39fb5c8b"
        },
        {
          "url": "https://git.kernel.org/stable/c/1fca00920327be96f3318224f502e4d5460f9545"
        },
        {
          "url": "https://git.kernel.org/stable/c/d43d56dbf452ccecc1ec735cd4b6840118005d7c"
        },
        {
          "url": "https://git.kernel.org/stable/c/c64da3294a7d59a4bf6874c664c13be892f15f44"
        },
        {
          "url": "https://git.kernel.org/stable/c/a33614d52e97fc8077eb0b292189ca7d964cc534"
        },
        {
          "url": "https://git.kernel.org/stable/c/6e2418576228eeb12e7ba82edb8f9500623942ff"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a1bd74b8186d7938bf004f5603f25b84785f63e"
        },
        {
          "url": "https://git.kernel.org/stable/c/aafe104aa9096827a429bc1358f8260ee565b7cc"
        }
      ],
      "title": "tracing: Restructure trace_clock_global() to never block",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-46939",
    "datePublished": "2024-02-27T18:40:27.471Z",
    "dateReserved": "2024-02-25T13:45:52.721Z",
    "dateUpdated": "2026-05-11T13:44:49.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2021-46943 (GCVE-0-2021-46943)

Vulnerability from cvelistv5 – Published: 2024-02-27 18:40 – Updated: 2026-05-11 13:44

Title

media: staging/intel-ipu3: Fix set_fmt error handling

Summary

In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix set_fmt error handling If there in an error during a set_fmt, do not overwrite the previous sizes with the invalid config. Without this patch, v4l2-compliance ends up allocating 4GiB of RAM and causing the following OOPs [ 38.662975] ipu3-imgu 0000:00:05.0: swiotlb buffer is full (sz: 4096 bytes) [ 38.662980] DMA: Out of SW-IOMMU space for 4096 bytes at device 0000:00:05.0 [ 38.663010] general protection fault: 0000 [#1] PREEMPT SMP

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-27 19:34 UTC

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/a03fb1e8a11065821…
https://git.kernel.org/stable/c/c6b81b897f6f9445d…
https://git.kernel.org/stable/c/34892ea938387d83f…
https://git.kernel.org/stable/c/6fb617e37a39db0a3…
https://git.kernel.org/stable/c/ad91849996f9dd797…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 6d5f26f2e045f2377b524516194657c00efbbce8 , < a03fb1e8a110658215a4cefc3e2ad53279e496a6 (git) Affected: 6d5f26f2e045f2377b524516194657c00efbbce8 , < c6b81b897f6f9445d57f8d47c4e060ec21556137 (git) Affected: 6d5f26f2e045f2377b524516194657c00efbbce8 , < 34892ea938387d83ffcfb7775ec55f0f80767916 (git) Affected: 6d5f26f2e045f2377b524516194657c00efbbce8 , < 6fb617e37a39db0a3eca4489431359d0bdf3b9bc (git) Affected: 6d5f26f2e045f2377b524516194657c00efbbce8 , < ad91849996f9dd79741a961fd03585a683b08356 (git)
Linux	Linux	Affected: 5.2 Unaffected: 0 , < 5.2 (semver) Unaffected: 5.4.118 , ≤ 5.4.* (semver) Unaffected: 5.10.36 , ≤ 5.10.* (semver) Unaffected: 5.11.20 , ≤ 5.11.* (semver) Unaffected: 5.12.3 , ≤ 5.12.* (semver) Unaffected: 5.13 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-46943",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-27T19:34:55.283543Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:21:04.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:42.870Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a03fb1e8a110658215a4cefc3e2ad53279e496a6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c6b81b897f6f9445d57f8d47c4e060ec21556137"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/34892ea938387d83ffcfb7775ec55f0f80767916"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6fb617e37a39db0a3eca4489431359d0bdf3b9bc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ad91849996f9dd79741a961fd03585a683b08356"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/staging/media/ipu3/ipu3-v4l2.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a03fb1e8a110658215a4cefc3e2ad53279e496a6",
              "status": "affected",
              "version": "6d5f26f2e045f2377b524516194657c00efbbce8",
              "versionType": "git"
            },
            {
              "lessThan": "c6b81b897f6f9445d57f8d47c4e060ec21556137",
              "status": "affected",
              "version": "6d5f26f2e045f2377b524516194657c00efbbce8",
              "versionType": "git"
            },
            {
              "lessThan": "34892ea938387d83ffcfb7775ec55f0f80767916",
              "status": "affected",
              "version": "6d5f26f2e045f2377b524516194657c00efbbce8",
              "versionType": "git"
            },
            {
              "lessThan": "6fb617e37a39db0a3eca4489431359d0bdf3b9bc",
              "status": "affected",
              "version": "6d5f26f2e045f2377b524516194657c00efbbce8",
              "versionType": "git"
            },
            {
              "lessThan": "ad91849996f9dd79741a961fd03585a683b08356",
              "status": "affected",
              "version": "6d5f26f2e045f2377b524516194657c00efbbce8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/staging/media/ipu3/ipu3-v4l2.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "lessThan": "5.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.118",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.36",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.11.*",
              "status": "unaffected",
              "version": "5.11.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.12.*",
              "status": "unaffected",
              "version": "5.12.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.118",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.36",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.11.20",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.12.3",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: staging/intel-ipu3: Fix set_fmt error handling\n\nIf there in an error during a set_fmt, do not overwrite the previous\nsizes with the invalid config.\n\nWithout this patch, v4l2-compliance ends up allocating 4GiB of RAM and\ncausing the following OOPs\n\n[   38.662975] ipu3-imgu 0000:00:05.0: swiotlb buffer is full (sz: 4096 bytes)\n[   38.662980] DMA: Out of SW-IOMMU space for 4096 bytes at device 0000:00:05.0\n[   38.663010] general protection fault: 0000 [#1] PREEMPT SMP"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:44:54.460Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a03fb1e8a110658215a4cefc3e2ad53279e496a6"
        },
        {
          "url": "https://git.kernel.org/stable/c/c6b81b897f6f9445d57f8d47c4e060ec21556137"
        },
        {
          "url": "https://git.kernel.org/stable/c/34892ea938387d83ffcfb7775ec55f0f80767916"
        },
        {
          "url": "https://git.kernel.org/stable/c/6fb617e37a39db0a3eca4489431359d0bdf3b9bc"
        },
        {
          "url": "https://git.kernel.org/stable/c/ad91849996f9dd79741a961fd03585a683b08356"
        }
      ],
      "title": "media: staging/intel-ipu3: Fix set_fmt error handling",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-46943",
    "datePublished": "2024-02-27T18:40:29.903Z",
    "dateReserved": "2024-02-25T13:45:52.721Z",
    "dateUpdated": "2026-05-11T13:44:54.460Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2024:1454-1

CVE-2020-36780 (GCVE-0-2020-36780)

CVE-2020-36782 (GCVE-0-2020-36782)

CVE-2020-36783 (GCVE-0-2020-36783)

CVE-2021-23134 (GCVE-0-2021-23134)

CVE-2021-46909 (GCVE-0-2021-46909)

CVE-2021-46921 (GCVE-0-2021-46921)

CVE-2021-46930 (GCVE-0-2021-46930)

CVE-2021-46938 (GCVE-0-2021-46938)

CVE-2021-46939 (GCVE-0-2021-46939)

CVE-2021-46943 (GCVE-0-2021-46943)

Tags

Sightings

Nomenclature

Related by attack behaviour