CVE-2021-47307

cifs: prevent NULL deref in cifs_compose_mount_options()

State: Published
Severity: 7.5 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: prevent NULL deref in cifs_compose_mount_options()

The optional @ref parameter might contain an NULL node_name, so prevent dereferencing it in cifs_compose_mount_options().

Addresses-Coverity: 1476408 ("Explicit null dereferenced")

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2c55608f28444c3f33b10312881384c470ceed56 to before f7d1fa65e74263d11f90ddd33b4d4cd905a93759Affected 2c55608f28444c3f33b10312881384c470ceed56 to before e58c162789becede894d3e94c0ce6695a2ef5796Affected 2c55608f28444c3f33b10312881384c470ceed56 to before ae3d181f4e912f51af7776ea165f199b16fc165dAffected 2c55608f28444c3f33b10312881384c470ceed56 to before 03313d1c3a2f086bb60920607ab79ac8f8578306Affected
LinuxLinux	2.6.28Affected before 2.6.28Not affected 5.4.135 through 5.4.Not affected 5.10.53 through 5.10.Not affected 5.13.5 through 5.13.*Not affected 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.