CVEvulnerability

CVE-2021-46905

5.5 MEDIUM Published 2024-02-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-02-26
Last modified
2026-06-17
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead. Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().

Affected configurations

• linux linux kernel (< 4.19.189) • linux linux kernel (>= 4.20.0 < 5.4.115) • linux linux kernel (>= 5.5.0 < 5.10.33) • linux linux kernel (>= 5.11.0 < 5.11.17) • linux linux kernel 5.12

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References