CVE-2021-47186

tipc: check for null after calling kmemdup

published April 10, 2024

CVSS
—
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tipc: check for null after calling kmemdup

kmemdup can return a null pointer so need to check for it, otherwise

the null key will be dereferenced later in tipc_crypto_key_xmit as

can be seen in the trace [1].

[1] https://syzkaller.appspot.com/bug?id=bca180abb29567b189efdbdb34cbf7ba851c2a58

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Published
2024-04-10T18:56Z
EPSS history
Timeline
  • 10 APR 18:56Z
    tipc: check for null after calling kmemdup
    cvelistv5