CVE-2021-47518

nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

State
Published
Severity
Not scored
Published
May 24, 2024
Updated
May 11, 2026
Reserved
May 24, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

The done() netlink callback nfc_genl_dump_ses_done() should check if received argument is non-NULL, because its allocation could fail earlier in dumpit() (nfc_genl_dump_ses()).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before 87cdb8789c38e44ae5454aafe277997c950d00edAffected
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before 69bb79a8f5bb9f436b6f1434ca9742591b7bbe18Affected
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before 811a7576747760bcaf60502f096d1e6e91d566faAffected
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before 3b861a40325eac9c4c13b6c53874ad90617e944dAffected
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before 48fcd08fdbe05e35b650a252ec2a2d96057a1c7aAffected
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before 83ea620a1be840bf05089a5061fb8323ca42f38cAffected
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before fae9705d281091254d4a81fa2da9d22346097dcaAffected
  • ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95 to before 4cd8371a234d051f9c9557fcbb1f8c523b1c0d10Affected
LinuxLinux
  • 3.12Affected
  • before 3.12Not affected
  • 4.4.295 through 4.4.*Not affected
  • 4.9.293 through 4.9.*Not affected
  • 4.14.258 through 4.14.*Not affected
  • 4.19.221 through 4.19.*Not affected
  • 5.4.165 through 5.4.*Not affected
  • 5.10.85 through 5.10.*Not affected
  • 5.15.8 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.