CVE-2021-47257: net: ieee802154: fix null deref in parse dev addr
In the Linux kernel, the following vulnerability has been resolved:
net: ieee802154: fix null deref in parse dev addr
Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
net: ieee802154: fix null deref in parse dev addr
The Linux kernel CVE team has assigned CVE-2021-47257 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052146-CVE-2021-47257-1d1c@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47257?
CVE-2021-47257 has been classified as a medium severity vulnerability due to its potential to cause a null pointer dereference.
How do I fix CVE-2021-47257?
To fix CVE-2021-47257, update the Linux kernel to versions 4.9.274, 4.14.238, 4.19.196, 5.4.127, 5.10.45, 5.12.12, or 5.13.
What versions of the Linux kernel are affected by CVE-2021-47257?
CVE-2021-47257 affects multiple versions of the Linux kernel up to 5.13.
Which Linux distributions are impacted by CVE-2021-47257?
CVE-2021-47257 primarily affects systems running vulnerable versions of the Linux kernel from Red Hat distributions.
Can CVE-2021-47257 lead to system crashes?
Yes, CVE-2021-47257 can lead to system crashes due to null pointer dereference errors when the user sets the mode incorrectly.