CVE-2021-47559

net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()

State
Published
Severity
7.5 High
Published
May 24, 2024
Updated
Aug 5, 2026
Reserved
May 24, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()

Coverity reports a possible NULL dereferencing problem:

in smc_vlan_by_tcpsk(): 6. returned_null: netdev_lower_get_next returns NULL (checked 29 out of 30 times). 7. var_assigned: Assigning: ndev = NULL return value from netdev_lower_get_next. 1623 ndev = (struct net_device *)netdev_lower_get_next(ndev, &lower); CID 1468509 (#1 of 1): Dereference null return value (NULL_RETURNS) 8. dereference: Dereferencing a pointer that might be NULL ndev when calling is_vlan_dev. 1624 if (is_vlan_dev(ndev)) {

Remove the manual implementation and use netdev_walk_all_lower_dev() to iterate over the lower devices. While on it remove an obsolete function parameter comment.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cb9d43f6775457cac75544bc4197f26ac2b6f294 to before c94cbd262b6aa3b54d73a1ed1f9c0d19df57f4ffAffected
  • cb9d43f6775457cac75544bc4197f26ac2b6f294 to before bb851d0fb02547d03cd40106b5f2391c4fed6ed1Affected
  • cb9d43f6775457cac75544bc4197f26ac2b6f294 to before 587acad41f1bc48e16f42bb2aca63bf323380be8Affected
LinuxLinux
  • 4.18Affected
  • before 4.18Not affected
  • 5.10.83 through 5.10.*Not affected
  • 5.15.6 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.