H500E Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-26	CVE-2020-25669	A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. local low complexity linux debian netapp	7.8
2021-05-26	CVE-2020-25670	A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations. local low complexity linux fedoraproject netapp debian	7.8
2021-05-26	CVE-2020-25671	A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations. local low complexity linux fedoraproject netapp debian	7.8
2021-05-26	CVE-2020-25673	A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system. local low complexity linux fedoraproject netapp	5.5
2021-05-26	CVE-2021-22543	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products An issue was discovered in Linux: KVM through Improper handling of VM_IO\|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. local low complexity linux fedoraproject debian netapp CWE-119	7.8
2021-05-25	CVE-2021-33574	Use After Free vulnerability in multiple products The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. network low complexity gnu fedoraproject netapp debian CWE-416 critical	9.8
2021-05-25	CVE-2020-25672	A memory leak vulnerability was found in Linux kernel in llcp_sock_connect network low complexity linux fedoraproject debian netapp	7.5
2021-05-21	CVE-2021-31440	This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. local high complexity linux netapp	7.0
2021-05-17	CVE-2021-3483	A flaw was found in the Nosy driver in the Linux kernel. local low complexity linux debian netapp	7.8
2021-05-14	CVE-2019-25044	Use After Free vulnerability in multiple products The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. local low complexity linux netapp CWE-416	7.8