CVE-2021-47186

2024-04-1019:15:47

Debian Security Bug Tracker

security-tracker.debian.org

linux kernel vulnerability

cve-2021-47186

null pointer

tipc_crypto_key_xmit

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: tipc: check for null after calling kmemdup kmemdup can return a null pointer so need to check for it, otherwise the null key will be dereferenced later in tipc_crypto_key_xmit as can be seen in the trace [1]. [1] https://syzkaller.appspot.com/bug?id=bca180abb29567b189efdbdb34cbf7ba851c2a58

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 5.15.5-1linux_5.15.5-1_all.deb
Debian11alllinux< 5.10.84-1linux_5.10.84-1_all.deb
Debian999alllinux< 5.15.5-1linux_5.15.5-1_all.deb
Debian13alllinux< 5.15.5-1linux_5.15.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 5.15.5-1	linux_5.15.5-1_all.deb
Debian	11	all	linux	< 5.10.84-1	linux_5.10.84-1_all.deb
Debian	999	all	linux	< 5.15.5-1	linux_5.15.5-1_all.deb
Debian	13	all	linux	< 5.15.5-1	linux_5.15.5-1_all.deb