Solidfire Baseboard Management Controller (Netapp) - vulnerabilities (CVEs)

26 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2021-09-19. Vendor: Netapp.

CVEs of Solidfire Baseboard Management Controller

CVE-2021-41073 - CVSS 7.8 (high), 2021-09-19: loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a…
CVE-2021-40490 - CVSS 7 (high), 2021-09-03: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
CVE-2021-22555 - CVSS 8.3 (high), 2021-07-07: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a…
CVE-2021-28691 - CVSS 7.8 (high), 2021-06-29: Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate…
CVE-2021-33200 - CVSS 7.8 (high), 2021-05-27: kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused…
CVE-2020-25669 - CVSS 7.8 (high), 2021-05-26: A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the…
CVE-2021-26708 - CVSS 7 (high), 2021-02-05: A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong…
CVE-2020-27786 - CVSS 7.8 (high), 2020-12-11: A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi…
CVE-2020-29573 - CVSS 7.5 (high), 2020-12-06: sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the…
CVE-2020-25221 - CVSS 7.8 (high), 2020-09-10: get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate…
CVE-2020-15852 - CVSS 7.8 (high), 2020-07-20: An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port…
CVE-2020-12659 - CVSS 6.7 (medium), 2020-05-05: An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN…
CVE-2020-12465 - CVSS 6.7 (medium), 2020-04-29: An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An…
CVE-2020-12464 - CVSS 6.7 (medium), 2020-04-29: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka…
CVE-2020-11884 - CVSS 7 (high), 2020-04-29: In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in…
CVE-2020-8648 - CVSS 7.1 (high), 2020-02-06: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2019-20054 - CVSS 5.5 (medium), 2019-12-28: In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka…
CVE-2019-19966 - CVSS 4.6 (medium), 2019-12-25: In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka…
CVE-2019-19947 - CVSS 4.6 (medium), 2019-12-24: In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c…
CVE-2019-19922 - CVSS 5.5 (medium), 2019-12-22: kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service…
CVE-2019-19447 - CVSS 7.8 (high), 2019-12-08: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in…
CVE-2019-19377 - CVSS 7.8 (high), 2019-11-29: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in…
CVE-2019-15223 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c…
CVE-2019-15212 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.
CVE-2019-15216 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the…
CVE-2019-15219 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the…
CVE-2019-15222 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c…
CVE-2019-15211 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c…
CVE-2019-15215 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the…
CVE-2019-15218 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the…
CVE-2019-15221 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c…
CVE-2019-15213 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the…
CVE-2019-15217 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the…
CVE-2019-15220 - CVSS 4.6 (medium), 2019-08-19: An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the…