NetSight
medium5.5

CVE-2021-47353

In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udf_symlink function In function udf_symlink, epos.bh …

Impact

In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udf_symlink function In function udf_symlink, epos.bh is assigned with the value returned by udf_tgetblk. The function udf_tgetblk is defined in udf/misc.c and returns the value of sb_getblk function that could be NULL. Then, epos.bh is used without any check, causing a possible NULL pointer dereference when sb_getblk fails. This fix adds a check to validate the value of epos.bh.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.276
from 4.5 before 4.9.276
from 4.10 before 4.14.240
from 4.15 before 4.19.198
from 4.20 before 5.4.133
from 5.5 before 5.10.51

Weakness classification

References