huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2021-23445: datatables.net: contents of array not escaped by HTML escape entities function
Component: datatables.net
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Public date: 2021-09-27T00:00:00+00:00

An improper neutralization of input vulnerability was found in datatables.net. If an array is passed to the HTML escape entities function, it does not have its contents escaped, possibly leading to cross site scripting (XSS).

Statement: The improper neutralization of input vulnerability in DataTables.net is considered a moderate severity issue because, while it allows for potential cross-site scripting (XSS) attacks, it requires specific conditions to be exploited effectively. An attacker must have the ability to inject malicious input into the system, and the application must pass this input to the HTML escape entities function without proper validation. Although XSS can lead to significant security risks, such as session hijacking and data theft, the impact is somewhat mitigated by the necessity of these preconditions. Moreover, this vulnerability does not compromise the underlying server or database directly, limiting its scope primarily to client-side exploitation.

Affected upstream versions: unspecified < 1.11.3
Fixed upstream versions: 1.11.3
Upstream repository: https://github.com/DataTables/Dist-DataTables
Upstream fix commit: 59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b
CVE-2021-23566: nanoid: Information disclosure via valueOf() function
Component: nanoid
Severity: Moderate
CWE: CWE-212 (Improper Removal of Sensitive Information Before Storage or Transfer)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Public date: 2022-01-21T00:00:00+00:00

A flaw was found in the nanoid library where the valueOf() function allows the reproduction of the last id generated. This flaw allows an attacker to expose sensitive information.


Affected upstream versions: unspecified < 3.1.31
Fixed upstream versions: 3.1.31
Upstream repository: https://github.com/ai/nanoid
Upstream fix commit: 2b7bd9332bc49b6330c7ddb08e5c661833db2575
CVE-2021-23648: sanitize-url: XSS due to improper sanitization in sanitizeUrl function
Component: sanitize-url
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Public date: 2022-02-22T00:00:00+00:00

A flaw was found in sanitize-url due to improper sanitization in the sanitizeUrl function. This issue causes vulnerability to Cross-site Scripting in sanitize-url.


Affected upstream versions: unspecified < 6.0.0
Fixed upstream versions: 6.0.0
Upstream repository: https://github.com/braintree/sanitize-url
Upstream fix commit: e5afda45d9833682b705f73fc2c1265d34832183
CVE-2021-23840: openssl: integer overflow in CipherUpdate
Component: openssl
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-02-16T00:00:00+00:00

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash.

Statement: This flaw only affects applications which are compiled with OpenSSL and using  EVP_CipherUpdate, EVP_EncryptUpdate or EVP_DecryptUpdate functions. When specially-crafted values are passed to these functions, it can cause the application to crash or behave incorrectly.

OpenSSL in Red Hat Enterprise Linux 9 was marked as not affected as its already fixed in RHEL9 Alpha release.

Affected upstream versions: Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i), Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)
Fixed upstream versions: OpenSSL_1_1_1j
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1
CVE-2021-23841: openssl: NULL pointer dereference in X509_issuer_and_serial_hash()
Component: openssl
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-02-16T00:00:00+00:00

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack.

Statement: This is a a null pointer dereference in the X509_issuer_and_serial_hash()  function, which can result in crash if called by an application compiled with OpenSSL, by passing a specially-crafted certificate. OpenSSL internally does not use this function.

Affected upstream versions: Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i), Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)
Fixed upstream versions: OpenSSL_1_1_1j
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 122a19ab48091c657f7cb1fb3af9fc07bd557bbf
CVE-2021-26708: kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c
Component: kernel
Severity: Important
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2021-02-05T00:00:00+00:00

A flaw was found in the Linux kernel. Wrong locking in the AF_VSOCK socket can cause a local privilege escalation, bypassing SMEP and SMAP. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Statement: This issue does affect the Red Hat Enterprise Linux 8 kernel versions kernel-4.18.0-240 onwards, starting with Red Hat Enterprise Linux 8.3 GA, which introduced VSOCK multi-transport support. Prior Red Hat Enterprise Linux kernel versions are not affected by this issue.

Affected upstream versions: n/a
Fixed upstream versions: v5.11
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: c518adafa39f37858697ac9309c6cf1805581446
CVE-2021-26926: jasper: Out of bounds read in jp2_decode() in jp2_dec.c
Component: jasper
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2021-01-29T00:00:00+00:00

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.


Affected upstream versions: jasper 2.0.25
Fixed upstream versions: mdadams-experimental-version-1
Upstream repository: https://github.com/jasper-software/jasper
Upstream fix commit: 41f214b121b837fa30d9ca5f2430212110f5cd9b
CVE-2021-26927: jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c
Component: jasper
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2021-01-29T00:00:00+00:00

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.


Affected upstream versions: before 2.0.25
Fixed upstream versions: mdadams-experimental-version-1
Upstream repository: https://github.com/jasper-software/jasper
Upstream fix commit: 41f214b121b837fa30d9ca5f2430212110f5cd9b
CVE-2021-27135: xterm: crash when processing combining characters
Component: xterm
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 9.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Public date: 2021-02-10T00:00:00+00:00

A flaw was found in xterm. A specially crafted sequence of combining characters causes an out of bounds write leading to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.


Affected upstream versions: n/a
Fixed upstream versions: xterm-365d
Upstream repository: https://github.com/ThomasDickey/xterm-snapshots
Upstream fix commit: 82ba55b8f994ab30ff561a347b82ea340ba7075c
CVE-2021-27291: python-pygments: ReDoS in multiple lexers
Component: python-pygments
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-01-11T00:00:00+00:00

A denial of service attack was discovered against pygments.  Some of the regular expressions used to tokenise source code for highlighting have exponential complexity.  A specially crafted input file could cause pygments to take effectively infinite time to parse, consuming CPU resources and denying access to the service.


Affected upstream versions: n/a
Fixed upstream versions: 2.7.4
Upstream repository: https://github.com/pygments/pygments
Upstream fix commit: 2e7e8c4a7b318f4032493773732754e418279a14
CVE-2021-27292: nodejs-ua-parser-js: ReDoS via malicious User-Agent header
Component: nodejs-ua-parser-js
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-02-11T00:00:00+00:00

A regular expression denial of service (ReDoS) vulnerability was found in the npm library `ua-parser-js`. If a supplied user agent matches the `Noble` string and contains many spaces then the regex will conduct backtracking, taking an ever increasing amount of time depending on the number of spaces supplied. An attacker can use this vulnerability to potentially craft a malicious user agent resulting in a denial of service.

Statement: While some components do package a vulnerable version of ua-parser-js, access to them requires OpenShift OAuth credentials and hence have been marked with a Low impact. This applies to the following products:
  - OpenShift Container Platform (OCP)
  - OpenShift ServiceMesh (OSSM) 
  - Red Hat OpenShift Jaeger (RHOSJ)
  - Red Hat OpenShift Logging

The OCP presto-container does ship the vulnerable component, however since OCP 4.6 the Metering product has been deprecated [1], set as wont-fix and may be fixed in a future release.

Red Hat Advanced Cluster Management for Kubernetes (RHACM) ships graphql-tools that pulls 0.7.23 version of ua-parser-js that uses the affected code.

[1] - https://access.redhat.com/solutions/5707561

Affected upstream versions: n/a
Fixed upstream versions: 2.7.4
Upstream repository: https://github.com/pygments/pygments
Upstream fix commit: 2e7e8c4a7b318f4032493773732754e418279a14
CVE-2021-27363: kernel: iscsi: unrestricted access to sessions and handles
Component: kernel
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Public date: 2021-03-05T00:00:00+00:00

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system.


Affected upstream versions: n/a
Fixed upstream versions: v5.12
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 688e8128b7a92df982709a4137ea4588d16f24aa
CVE-2021-27364: kernel: out-of-bounds read in libiscsi module
Component: kernel
Severity: Important
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Public date: 2021-03-05T00:00:00+00:00

A flaw was found in the Linux kernel. An out-of-bounds read was discovered in the libiscsi module that could lead to reading kernel memory or a crash. The highest threat from this vulnerability is to data confidentiality as well as system availability.

Statement: Red Hat Product Security is aware of this issue. Updates will be released as they become available.

Affected upstream versions: n/a
Fixed upstream versions: v5.12
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 688e8128b7a92df982709a4137ea4588d16f24aa
CVE-2021-27365: kernel: heap buffer overflow in the iSCSI subsystem
Component: kernel
Severity: Important
CWE: CWE-788 (Access of Memory Location After End of Buffer)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2021-03-05T00:00:00+00:00

A flaw was found in the Linux kernel. A heap buffer overflow in the iSCSI subsystem is triggered by setting an iSCSI string attribute to a value larger than one page and then trying to read it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.


Affected upstream versions: n/a
Fixed upstream versions: v5.12
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: ec98ea7070e94cc25a422ec97d1421e28d97b7ee
CVE-2021-27515: nodejs-url-parse: mishandling certain uses of backslash may lead to confidentiality compromise
Component: nodejs-url-parse
Severity: Moderate
CWE: CWE-1286 (Improper Validation of Syntactic Correctness of Input)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Public date: 2021-02-22T00:00:00+00:00

An input validation flaw exists in the node.js-url-parse, which results in the URL being incorrectly set to the document location protocol instead of the URL being passed as an argument. This flaw allows an attacker to bypass security checks on URLs. The highest threat from this vulnerability is to integrity. This is an incomplete fix for CVE-2020-8124.


Affected upstream versions: n/a
Fixed upstream versions: 1.5.0
Upstream repository: https://github.com/unshiftio/url-parse
Upstream fix commit: d1e7e8822f26e8a49794b757123b51386325b2b0
CVE-2021-27516: nodejs-urijs: mishandling certain uses of backslash may lead to confidentiality compromise
Component: nodejs-urijs
Severity: Important
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2021-02-22T00:00:00+00:00

A flaw was found in nodejs-urijs where URI.js (urijs) mishandles certain uses of the backslash such as http:\/ and interprets the URI as a relative path. The highest threat from this vulnerability is to confidentiality.

Statement: Red Hat Quay includes the urijs dependency in it's package.lock file but it's not used anywhere in the code.

Red Hat Advanced Cluster Management for Kubernetes uses Quay as a service, but not code from Quay that exists in RHACM.

Affected upstream versions: n/a
Fixed upstream versions: v1.19.6
Upstream repository: https://github.com/medialize/URI.js
Upstream fix commit: a1ad8bcbc39a4d136d7e252e76e957f3ece70839
CVE-2021-28091: lasso: XML signature wrapping vulnerability when parsing SAML responses
Component: lasso
Severity: Important
CWE: CWE-347 (Improper Verification of Cryptographic Signature)
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2021-06-01T12:30:00+00:00

An XML Signature Wrapping (XSW) vulnerability was found in Lasso. This flaw allows an attacker to modify a valid SAML response to include an unsigned SAML assertion, which may be used to impersonate another valid user recognized by the service using Lasso. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability.

Statement: Lasso is provided in Red Hat Enterprise Linux 7, and 8 only as a dependency of mod_auth_mellon, without development files. The way mod_auth_mellon uses Lasso makes it not vulnerable to this flaw, because SAML responses are additionally validated to have exactly one assertion, thus it is not possible for an attacker to include an unsigned SAML assertion after a signed valid one. For this reason this flaw has been rated as Moderate on Red Hat Enterprise Linux 8.

Red Hat Enterprise Linux 7 also provides a lasso-python package that can be used to create python applications that use Lasso, however Red Hat only ships ipsilon which uses it. Ipsilon does not use the vulnerable functions of Lasso. Considering the presence of lasso-python in Red Hat Enterprise Linux 7, this flaw has been rated as Important there.

Affected upstream versions: n/a
Upstream repository: https://git.entrouvert.org/lasso.git
Upstream fix commit: 076a37d7f0eb74001127481da2d355683693cde9
CVE-2021-28363: python-urllib3: HTTPS proxy host name not validated when using default SSLContext
Component: python-urllib3
Severity: Moderate
CWE: CWE-295 (Improper Certificate Validation)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2021-03-15T00:00:00+00:00

A flaw was found in python-urllib3. SSL certificate validation is omitted in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.

Statement: * Red Hat OpenShift Container Platform (OCP) 4 delivers the python-urllib3 package which includes a vulnerable version of urllib3 module, however from OCP 4.6 the python-urllib3 package is no longer shipped. OCP 4.5 is out of support scope for Moderate and Low impact vulnerabilities, hence is marked Out Of Support Scope.

* Red Hat CodeReady WorkSpaces 2 and Red Hat Gluster Storage 3 are not affected by this flaw because both the products does not ship a vulnerable version of urllib3.

Affected upstream versions: n/a
Fixed upstream versions: 1.26.4
Upstream repository: https://github.com/urllib3/urllib3
Upstream fix commit: 8d65ea1ecf6e2cdc27d42124e587c1b83a3118b0
CVE-2021-28650: gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory (incomplete CVE-2020-36241 fix)
Component: gnome-autoar
Severity: Low
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 3.9 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L)
Public date: 2021-03-01T00:00:00+00:00

autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.


Affected upstream versions: n/a
Fixed upstream versions: 0.3.1
Upstream repository: https://gitlab.gnome.org/GNOME/gnome-autoar
Upstream fix commit: 8109c368c6cfdb593faaf698c2bf5da32bb1ace4
CVE-2021-28662: squid: denial of service in HTTP response processing
Component: squid
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2021-05-10T00:00:00+00:00

An input validation flaw was found in Squid. This issue could allow a remote server to perform a denial of service against all clients using the proxy when delivering HTTP response messages. The highest threat from this vulnerability is to system availability.

Statement: The versions of `squid` as shipped with Red Hat Enterprise Linux 6 and 7 are not affected by this flaw, as the vulnerable code was introduced in a later version of the package.

Affected upstream versions: n/a
Fixed upstream versions: SQUID_6_0_1
Upstream repository: https://github.com/squid-cache/squid
Upstream fix commit: 051824924c709bd6162a378f746fb859454c674e
CVE-2021-28676: python-pillow: Infinite loop in FLI image reader
Component: python-pillow
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-04-01T00:00:00+00:00

A flaw was found in python-pillow. FliDecode.c did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load. This issue dates to the PIL fork. The highest threat from this vulnerability is to system availability.


Affected upstream versions: n/a
Fixed upstream versions: 8.2.0
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: bb6c11fb889e6c11b0ee122b828132ee763b5856
CVE-2021-28950: kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode
Component: kernel
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-03-04T00:00:00+00:00

A denial of service in the kernel side of the FUSE functionality can allow a local system to create a denial of service.


Affected upstream versions: n/a
Fixed upstream versions: v5.12
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 775c5033a0d164622d9d10dd0f0a5531639ed3ed
CVE-2021-28957: python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS
Component: python-lxml
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Public date: 2021-03-21T00:00:00+00:00

A flaw was found in python-lxml. The HTML5 formaction attribute is not input sanitized like the HTML action attribute is which can lead to a Cross-Site Scripting attack (XSS) when an application uses python-lxml to sanitize user inputs. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Statement: Web applications vulnerable to this flaw, where a XSS attack can be accomplished, are only those that use python-lxml to sanitize HTML input and that allow user data to be placed in the "formaction" attribute of a form button.

In Red Hat OpenStack Platform, because the flaw has a lower impact and the package is unlikely to be exploited in the RHOSP environment, no update will be provided at this time for the RHOSP python-lxml package.

For Ansible Tower and Ansible Automation Platform,  Lowering the impact from Moderate to Low as the vulnerable function i.e. lxml HTML Cleaner and the vulnerable attribute i.e. HTML FormAction are not being used.

Affected upstream versions: n/a
Upstream repository: https://github.com/lxml/lxml
Upstream fix commit: 10ec1b4e9f93713513a3264ed6158af22492f270
CVE-2021-28971: kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-03-22T00:00:00+00:00

A flaw was found in the Linux kernel. On some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled.


Affected upstream versions: n/a
Fixed upstream versions: v5.12
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: d88d05a9e0b6d9356e97129d4ff9942d765f46ea