From 3c0ed555ed2697280cc2079748936653d15226e2 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Wed, 27 Oct 2021 20:44:16 +0200 Subject: Sync some CVEs for linux with kernel-sec tracking --- data/CVE/list | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/data/CVE/list b/data/CVE/list index 5707dd4f77..4057c7c98f 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -2796,6 +2796,8 @@ CVE-2021-42328 RESERVED CVE-2021-42327 (dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu ...) - linux + [buster] - linux (Vulnerability introduced later) + [stretch] - linux (Vulnerability introduced later) NOTE: https://lists.freedesktop.org/archives/amd-gfx/2021-October/070170.html CVE-2021-42326 (Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of ...) {DLA-2787-1} @@ -7183,6 +7185,7 @@ CVE-2021-40440 (Microsoft Dynamics Business Central Cross-site Scripting Vulnera CVE-2021-3764 [DoS in ccp_run_aes_gcm_cmd() function] RESERVED - linux 5.14.12-1 + [stretch] - linux (Vulnerability introduced later) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1997467 NOTE: https://git.kernel.org/linus/505d9dcb0f7ddf9d075e729523a33d38642ae680 (5.15-rc4) CVE-2021-3763 @@ -7867,6 +7870,7 @@ CVE-2021-3745 CVE-2021-3744 [crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()] RESERVED - linux 5.14.12-1 + [stretch] - linux (Vulnerability introduced later) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2000627 NOTE: https://git.kernel.org/linus/505d9dcb0f7ddf9d075e729523a33d38642ae680 (5.15-rc4) CVE-2021-40153 (squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the file ...) -- cgit v1.2.3