CVE-2021-47257

net: ieee802154: fix null deref in parse dev addr

State: Published
Severity: 5.5 Medium
Published: May 21, 2024
Updated: May 11, 2026
Reserved: Apr 10, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ieee802154: fix null deref in parse dev addr

Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	a26c5fd7622d4951425131d54a8c99f076fe2068 to before 1f95741981c899c4724647291fec5faa3c777185Affected a26c5fd7622d4951425131d54a8c99f076fe2068 to before c6998ccfefa652bac3f9b236821e392af43efa1eAffected a26c5fd7622d4951425131d54a8c99f076fe2068 to before 5f728ec65485625e30f46e5b4917ff023ad29ea0Affected a26c5fd7622d4951425131d54a8c99f076fe2068 to before d0f47648b87b6d5f204cb7f3cbce6d36dab85a67Affected a26c5fd7622d4951425131d54a8c99f076fe2068 to before c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627Affected a26c5fd7622d4951425131d54a8c99f076fe2068 to before fdd51e34f45311ab6e48d2147cbc2904731b9993Affected a26c5fd7622d4951425131d54a8c99f076fe2068 to before 9fdd04918a452980631ecc499317881c1d120b70Affected
LinuxLinux	4.4Affected before 4.4Not affected 4.9.274 through 4.9.Not affected 4.14.238 through 4.14.Not affected 4.19.196 through 4.19.Not affected 5.4.127 through 5.4.Not affected 5.10.45 through 5.10.Not affected 5.12.12 through 5.12.Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

a26c5fd7622d4951425131d54a8c99f076fe2068 to before 1f95741981c899c4724647291fec5faa3c777185Affected
a26c5fd7622d4951425131d54a8c99f076fe2068 to before c6998ccfefa652bac3f9b236821e392af43efa1eAffected
a26c5fd7622d4951425131d54a8c99f076fe2068 to before 5f728ec65485625e30f46e5b4917ff023ad29ea0Affected
a26c5fd7622d4951425131d54a8c99f076fe2068 to before d0f47648b87b6d5f204cb7f3cbce6d36dab85a67Affected
a26c5fd7622d4951425131d54a8c99f076fe2068 to before c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627Affected
a26c5fd7622d4951425131d54a8c99f076fe2068 to before fdd51e34f45311ab6e48d2147cbc2904731b9993Affected
a26c5fd7622d4951425131d54a8c99f076fe2068 to before 9fdd04918a452980631ecc499317881c1d120b70Affected

LinuxLinux

4.4Affected
before 4.4Not affected
4.9.274 through 4.9.*Not affected
4.14.238 through 4.14.*Not affected
4.19.196 through 4.19.*Not affected
5.4.127 through 5.4.*Not affected
5.10.45 through 5.10.*Not affected
5.12.12 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.