CVE-2021-47486

riscv, bpf: Fix potential NULL dereference

State: Published
Severity: 7.5 High
Published: May 22, 2024
Updated: May 11, 2026
Reserved: May 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv, bpf: Fix potential NULL dereference

The bpf_jit_binary_free() function requires a non-NULL argument. When the RISC-V BPF JIT fails to converge in NR_JIT_ITERATIONS steps, jit_data->header will be NULL, which triggers a NULL dereference. Avoid this by checking the argument, prior calling the function.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa to before cac6b043cea3e120f4fccec16f7381747cbfdc0dAffected ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa to before e1b80a5ebe5431caeb20f88c32d4a024777a2d41Affected ca6cb5447ceca6a87d6b62c9e5d41042c34f7ffa to before 27de809a3d83a6199664479ebb19712533d6fd9bAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.77 through 5.10.Not affected 5.14.16 through 5.14.Not affected 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.