Riskcovery

CVE-2021-47186

tipc: check for null after calling kmemdup

State
Published
Severity
Not scored
Published
Apr 10, 2024
Updated
May 11, 2026
Reserved
Mar 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tipc: check for null after calling kmemdup

kmemdup can return a null pointer so need to check for it, otherwise the null key will be dereferenced later in tipc_crypto_key_xmit as can be seen in the trace [1].

[1] https://syzkaller.appspot.com/bug?id=bca180abb29567b189efdbdb34cbf7ba851c2a58

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9 to before a7d91625863d4ffed63b993b5e6dc1298b6430c9Affected
  • 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9 to before 9404c4145542c23019a80ab1bb2ecf73cd057b10Affected
  • 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9 to before 3e6db079751afd527bf3db32314ae938dc571916Affected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.82 through 5.10.*Not affected
  • 5.15.5 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.