CVE-2021-46905

net: hso: fix NULL-deref on disconnect regression

published February 25, 2024

CVSS
—
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: hso: fix NULL-deref on disconnect regression

Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device

unregistration") fixed the racy minor allocation reported by syzbot, but

introduced an unconditional NULL-pointer dereference on every disconnect

instead.

Specifically, the serial device table must no longer be accessed after

the minor has been released by hso_serial_tty_unregister().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Published
2024-02-25T14:03Z
EPSS history
Timeline
  • 25 FEB 14:03Z
    net: hso: fix NULL-deref on disconnect regression
    cvelistv5