Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-47486

riscv, bpf: Fix potential NULL dereference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpf_jit_binary_free() function requires a non-NULL argument. When the RISC-V BPF JIT fails to converge in NR_JIT_ITERATIONS steps, jit_data->header will be NULL, which triggers a NULL dereference. Avoid this by checking the argument, prior calling the function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa to < cac6b043cea3e120f4fccec16f7381747cbfdc0daffected
  • ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa to < e1b80a5ebe5431caeb20f88c32d4a024777a2d41affected
  • ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa to < 27de809a3d83a6199664479ebb19712533d6fd9baffected

Linux Linux

Default version status: affected

  • 5.7affected
  • 0 to < 5.7unaffected
  • 5.10.77 to ≤ 5.10.*unaffected
  • 5.14.16 to ≤ 5.14.*unaffected
  • 5.15 to ≤ *unaffected

References