Tracker / CVE-2021-46905
CVE-2021-46905
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead. Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · … → 4.19.189 |
| linux | linux_kernel · 4.20.0 → 5.4.115 |
| linux | linux_kernel · 5.11.0 → 5.11.17 |
| linux | linux_kernel · 5.5.0 → 5.10.33 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.