Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47186

tipc: check for null after calling kmemdup

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tipc: check for null after calling kmemdup kmemdup can return a null pointer so need to check for it, otherwise the null key will be dereferenced later in tipc_crypto_key_xmit as can be seen in the trace [1]. [1] https://syzkaller.appspot.com/bug?id=bca180abb29567b189efdbdb34cbf7ba851c2a58

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9 to < a7d91625863d4ffed63b993b5e6dc1298b6430c9affected
  • 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9 to < 9404c4145542c23019a80ab1bb2ecf73cd057b10affected
  • 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9 to < 3e6db079751afd527bf3db32314ae938dc571916affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.82 to ≤ 5.10.*unaffected
  • 5.15.5 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References