Riskcovery

CVE-2021-47164

net/mlx5e: Fix null deref accessing lag dev

State
Published
Severity
Not scored
Published
Mar 25, 2024
Updated
May 11, 2026
Reserved
Mar 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix null deref accessing lag dev

It could be the lag dev is null so stop processing the event. In bond_enslave() the active/backup slave being set before setting the upper dev so first event is without an upper dev. After setting the upper dev with bond_master_upper_dev_link() there is a second event and in that event we have an upper dev.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7e51891a237f9ea319f53f9beb83afb0077d88e6 to before 2e4b0b95a489259f9d35a3db17023061f8f3d587Affected
  • 7e51891a237f9ea319f53f9beb83afb0077d88e6 to before bdfd3593a8248eea6ecfcbf7b47b56b86515672dAffected
  • 7e51891a237f9ea319f53f9beb83afb0077d88e6 to before 83026d83186bc48bb41ee4872f339b83f31dfc55Affected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.10.42 through 5.10.*Not affected
  • 5.12.9 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.