CVE-2021-47612

nfc: fix segfault in nfc_genl_dump_devices_done

State: Published
Severity: Not scored
Published: Jun 19, 2024
Updated: May 11, 2026
Reserved: Jun 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: fix segfault in nfc_genl_dump_devices_done

When kmalloc in nfc_genl_dump_devices() fails then nfc_genl_dump_devices_done() segfaults as below

KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 5.16.0-rc4-01180-g2a987e65025e-dirty #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-6.fc35 04/01/2014 Workqueue: events netlink_sock_destruct_work RIP: 0010:klist_iter_exit+0x26/0x80 Call Trace: <TASK> class_dev_iter_exit+0x15/0x20 nfc_genl_dump_devices_done+0x3b/0x50 genl_lock_done+0x84/0xd0 netlink_sock_destruct+0x8f/0x270 __sk_destruct+0x64/0x3b0 sk_destruct+0xa8/0xd0 __sk_free+0x2e8/0x3d0 sk_free+0x51/0x90 netlink_sock_destruct_work+0x1c/0x20 process_one_work+0x411/0x710 worker_thread+0x6fd/0xa80

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before ea55b3797878752aa076b118afb727dcf79cac34Affected 4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before 214af18abbe39db05beb305b2d11e87d09a6529cAffected 4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before 6644989642844de830f9b072cd65c553cb55946cAffected 4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before 2a8845b9603c545fddd17862282dc4c4ce0971e3Affected 4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before d731ecc6f2eaec68f4ad1542283bbc7d07bd0112Affected 4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before c602863ad28ec86794cb4ab4edea5324f555f181Affected 4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before d89e4211b51752daf063d638af50abed2fd5f96dAffected 4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before fd79a0cbf0b2e34bcc45b13acf962e2032a82203Affected
LinuxLinux	3.1Affected before 3.1Not affected 4.4.296 through 4.4.Not affected 4.9.294 through 4.9.Not affected 4.14.259 through 4.14.Not affected 4.19.222 through 4.19.Not affected 5.4.167 through 5.4.Not affected 5.10.87 through 5.10.Not affected 5.15.10 through 5.15.*Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before ea55b3797878752aa076b118afb727dcf79cac34Affected
4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before 214af18abbe39db05beb305b2d11e87d09a6529cAffected
4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before 6644989642844de830f9b072cd65c553cb55946cAffected
4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before 2a8845b9603c545fddd17862282dc4c4ce0971e3Affected
4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before d731ecc6f2eaec68f4ad1542283bbc7d07bd0112Affected
4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before c602863ad28ec86794cb4ab4edea5324f555f181Affected
4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before d89e4211b51752daf063d638af50abed2fd5f96dAffected
4d12b8b129f170d0fc3188de1e51a2a1b0f87730 to before fd79a0cbf0b2e34bcc45b13acf962e2032a82203Affected

LinuxLinux

3.1Affected
before 3.1Not affected
4.4.296 through 4.4.*Not affected
4.9.294 through 4.9.*Not affected
4.14.259 through 4.14.*Not affected
4.19.222 through 4.19.*Not affected
5.4.167 through 5.4.*Not affected
5.10.87 through 5.10.*Not affected
5.15.10 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.