CVE-2021-47002

SUNRPC: Fix null pointer dereference in svc_rqst_free()

State: Published
Severity: Not scored
Published: Feb 28, 2024
Updated: Oct 14, 2026
Reserved: Feb 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix null pointer dereference in svc_rqst_free()

When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page pointer will be dereferenced when calling put_page() in svc_rqst_free(). Fix it by adding a null check.

Addresses-Coverity: ("Dereference after null check")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	79e4e0d489c8e72b9efa388e504a036eec1550c6 to before 3de81c1e84bf84803308da3272a829a7655c5336Affected 5191955d6fc65e6d4efe8f4f10a6028298f57281 to before 1e10f58f1c9a6b667b045513c7a4e6111c24fe7cAffected 5191955d6fc65e6d4efe8f4f10a6028298f57281 to before c664aaec9aee544538a78ba4893a44bc73a6d742Affected 5191955d6fc65e6d4efe8f4f10a6028298f57281 to before b9f83ffaa0c096b4c832a43964fe6bff3acffe10Affected 5.10.220 to before 5.10.221Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.10.221 through 5.10.Not affected 5.11.22 through 5.11.Not affected 5.12.5 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

79e4e0d489c8e72b9efa388e504a036eec1550c6 to before 3de81c1e84bf84803308da3272a829a7655c5336Affected
5191955d6fc65e6d4efe8f4f10a6028298f57281 to before 1e10f58f1c9a6b667b045513c7a4e6111c24fe7cAffected
5191955d6fc65e6d4efe8f4f10a6028298f57281 to before c664aaec9aee544538a78ba4893a44bc73a6d742Affected
5191955d6fc65e6d4efe8f4f10a6028298f57281 to before b9f83ffaa0c096b4c832a43964fe6bff3acffe10Affected
5.10.220 to before 5.10.221Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.10.221 through 5.10.*Not affected
5.11.22 through 5.11.*Not affected
5.12.5 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.