NetSight
medium5.5

CVE-2021-46905

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead. Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.189
from 4.20.0 before 5.4.115
from 5.5.0 before 5.10.33
from 5.11.0 before 5.11.17
Version 5.12

Weakness classification

References