Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47002

SUNRPC: Fix null pointer dereference in svc_rqst_free()

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null pointer dereference in svc_rqst_free() When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page pointer will be dereferenced when calling put_page() in svc_rqst_free(). Fix it by adding a null check. Addresses-Coverity: ("Dereference after null check")

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 79e4e0d489c8e72b9efa388e504a036eec1550c6 to < 3de81c1e84bf84803308da3272a829a7655c5336affected
  • 5191955d6fc65e6d4efe8f4f10a6028298f57281 to < 1e10f58f1c9a6b667b045513c7a4e6111c24fe7caffected
  • 5191955d6fc65e6d4efe8f4f10a6028298f57281 to < c664aaec9aee544538a78ba4893a44bc73a6d742affected
  • 5191955d6fc65e6d4efe8f4f10a6028298f57281 to < b9f83ffaa0c096b4c832a43964fe6bff3acffe10affected
  • 5.10.220 to < 5.10.221affected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.10.221 to ≤ 5.10.*unaffected
  • 5.11.22 to ≤ 5.11.*unaffected
  • 5.12.5 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References