Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47218

selinux: fix NULL-pointer dereference when hashtab allocation fails

Description

In the Linux kernel, the following vulnerability has been resolved: selinux: fix NULL-pointer dereference when hashtab allocation fails When the hash table slot array allocation fails in hashtab_init(), h->size is left initialized with a non-zero value, but the h->htable pointer is NULL. This may then cause a NULL pointer dereference, since the policydb code relies on the assumption that even after a failed hashtab_init(), hashtab_map() and hashtab_destroy() can be safely called on it. Yet, these detect an empty hashtab only by looking at the size. Fix this by making sure that hashtab_init() always leaves behind a valid empty hashtab when the allocation fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 03414a49ad5f3c56988c36d2070e402ffa17feaf to < b17dd53cac769dd13031b0ca34f90cc65e523fabaffected
  • 03414a49ad5f3c56988c36d2070e402ffa17feaf to < 83c8ab8503adf56bf68dafc7a382f4946c87da79affected
  • 03414a49ad5f3c56988c36d2070e402ffa17feaf to < dc27f3c5d10c58069672215787a96b4fae01818baffected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.10.82 to ≤ 5.10.*unaffected
  • 5.15.5 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References