CVE-2021-47353

udf: Fix NULL pointer dereference in udf_symlink function

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

udf: Fix NULL pointer dereference in udf_symlink function

In function udf_symlink, epos.bh is assigned with the value returned

by udf_tgetblk. The function udf_tgetblk is defined in udf/misc.c

and returns the value of sb_getblk function that could be NULL.

Then, epos.bh is used without any check, causing a possible

NULL pointer dereference when sb_getblk fails.

This fix adds a check to validate the value of epos.bh.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Published
2024-05-21T14:35Z
EPSS history
Timeline
  • 21 MAY 14:35Z
    udf: Fix NULL pointer dereference in udf_symlink function
    cvelistv5