CVE-2021-46905

net: hso: fix NULL-deref on disconnect regression

State: Published
Severity: Not scored
Published: Feb 25, 2024
Updated: May 23, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hso: fix NULL-deref on disconnect regression

Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead.

Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a462067d7c8e6953a733bf5ade8db947b1bb5449 to before 5871761c5f0f20d6e98bf3b6bd7486d857589554Affected 145c89c441d27696961752bf51b323f347601bee to before 0c71d4c89559f72cec2592d078681a843bce570eAffected caf5ac93b3b5d5fac032fc11fbea680e115421b4 to before 24b699bea7553fc0b98dad9d864befb6005ac7f1Affected 92028d7a31e55d53e41cff679156b9432cffcb36 to before 5c17cfe155d21954b4c7e2a78fa771cebcd86725Affected 4a2933c88399c0ebc738db39bbce3ae89786d723 to before d7fad2ce15bdbbd0fec3ebe999fd7cab2267f53eAffected dc195928d7e4ec7b5cfc6cd10dc4c8d87a7c72ac to before 90642ee9eb581a13569b1c0bd57e85d962215273Affected 388d05f70f1ee0cac4a2068fd295072f1a44152a to before 0f000005da31f6947f843ce6b3e3a960540c6e00Affected 8a12f8836145ffe37e9c8733dce18c22fb668b66 to before 41c44e1f3112d7265dae522c026399b2a42d19efAffected 8a12f8836145ffe37e9c8733dce18c22fb668b66 to before 2ad5692db72874f02b9ad551d26345437ea4f7f3Affected 4.19.187 to before 4.19.189Affected 5.4.112 to before 5.4.115Affected 5.10.30 to before 5.10.33Affected 5.11.14 to before 5.11.17Affected
LinuxLinux	5.12Affected before 5.12Not affected 4.19.189 through 4.19.Not affected 5.4.115 through 5.4.Not affected 5.10.33 through 5.10.Not affected 5.11.17 through 5.11.Not affected 5.12.1 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

a462067d7c8e6953a733bf5ade8db947b1bb5449 to before 5871761c5f0f20d6e98bf3b6bd7486d857589554Affected
145c89c441d27696961752bf51b323f347601bee to before 0c71d4c89559f72cec2592d078681a843bce570eAffected
caf5ac93b3b5d5fac032fc11fbea680e115421b4 to before 24b699bea7553fc0b98dad9d864befb6005ac7f1Affected
92028d7a31e55d53e41cff679156b9432cffcb36 to before 5c17cfe155d21954b4c7e2a78fa771cebcd86725Affected
4a2933c88399c0ebc738db39bbce3ae89786d723 to before d7fad2ce15bdbbd0fec3ebe999fd7cab2267f53eAffected
dc195928d7e4ec7b5cfc6cd10dc4c8d87a7c72ac to before 90642ee9eb581a13569b1c0bd57e85d962215273Affected
388d05f70f1ee0cac4a2068fd295072f1a44152a to before 0f000005da31f6947f843ce6b3e3a960540c6e00Affected
8a12f8836145ffe37e9c8733dce18c22fb668b66 to before 41c44e1f3112d7265dae522c026399b2a42d19efAffected
8a12f8836145ffe37e9c8733dce18c22fb668b66 to before 2ad5692db72874f02b9ad551d26345437ea4f7f3Affected
4.19.187 to before 4.19.189Affected
5.4.112 to before 5.4.115Affected
5.10.30 to before 5.10.33Affected
5.11.14 to before 5.11.17Affected

LinuxLinux

5.12Affected
before 5.12Not affected
4.19.189 through 4.19.*Not affected
5.4.115 through 5.4.*Not affected
5.10.33 through 5.10.*Not affected
5.11.17 through 5.11.*Not affected
5.12.1 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.