CVE-2021-47186

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tipc: check for null after calling kmemdup

kmemdup can return a null pointer so need to check for it, otherwise the null key will be dereferenced later in tipc_crypto_key_xmit as can be seen in the trace [1].

[1] https://syzkaller.appspot.com/bug?id=bca180abb29567b189efdbdb34cbf7ba851c2a58

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9, < a7d91625863d4ffed63b993b5e6dc1298b6430c9; >= 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9, < 9404c4145542c23019a80ab1bb2ecf73cd057b10; >= 1ef6f7c9390ff5308c940ff8d0a53533a4673ad9, < 3e6db079751afd527bf3db32314ae938dc571916
LinuxLinux5.10
linuxlinux_kernel>= 1da177e4c3f4, < a7d91625863d; >= 1da177e4c3f4, < 9404c4145542; >= 1da177e4c3f4, < 3e6db079751a

References

Timeline

Published
Apr 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-471875.5In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency CVE-2021-471885.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The following has been obCVE-2021-471897.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory ordering between normal and ordered work functions OCVE-2021-471905.5In the Linux kernel, the following vulnerability has been resolved: perf bpf: Avoid memory leak from perf_env__insert_btf() perf_env__inseCVE-2021-471917.1In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() The followCVE-2021-471925.3In the Linux kernel, the following vulnerability has been resolved: scsi: core: sysfs: Fix hang when device state is set via sysfs This fiCVE-2021-471935.5In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix memory leak during rmmod Driver failed to release alCVE-2021-471947.8In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the usCVE-2021-471955.5In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free of the add_lock mutex Commit 6098475d4cb4 ("spCVE-2021-471967.8In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send and receive CQ before forwarding to the driver PreCVE-2021-471975.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() Prior to CVE-2021-471987.8In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine An error is
CVE-2021-47186: Medium severity, CVSS 5.5 | Vulnix