NetSight
IP …
high7.5

CVE-2021-47486

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpf_jit_binary_free() function requires a no…

Impact

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpf_jit_binary_free() function requires a non-NULL argument. When the RISC-V BPF JIT fails to converge in NR_JIT_ITERATIONS steps, jit_data->header will be NULL, which triggers a NULL dereference. Avoid this by checking the argument, prior calling the function.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.7 before 5.10.77
from 5.11 before 5.14.16
Version 5.15

Weakness classification

CWE-476

References