CVE-2021-47164

net/mlx5e: Fix null deref accessing lag dev

published March 25, 2024

CVSS
—
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix null deref accessing lag dev

It could be the lag dev is null so stop processing the event.

In bond_enslave() the active/backup slave being set before setting the

upper dev so first event is without an upper dev.

After setting the upper dev with bond_master_upper_dev_link() there is

a second event and in that event we have an upper dev.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Published
2024-03-25T09:16Z
EPSS history
Timeline
  • 25 MAR 09:16Z
    net/mlx5e: Fix null deref accessing lag dev
    cvelistv5