Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47164

net/mlx5e: Fix null deref accessing lag dev

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev is null so stop processing the event. In bond_enslave() the active/backup slave being set before setting the upper dev so first event is without an upper dev. After setting the upper dev with bond_master_upper_dev_link() there is a second event and in that event we have an upper dev.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7e51891a237f9ea319f53f9beb83afb0077d88e6 to < 2e4b0b95a489259f9d35a3db17023061f8f3d587affected
  • 7e51891a237f9ea319f53f9beb83afb0077d88e6 to < bdfd3593a8248eea6ecfcbf7b47b56b86515672daffected
  • 7e51891a237f9ea319f53f9beb83afb0077d88e6 to < 83026d83186bc48bb41ee4872f339b83f31dfc55affected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.10.42 to ≤ 5.10.*unaffected
  • 5.12.9 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References