In the Linux kernel, the following vulnerability has been resolved:
can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe
When we converted this code to use dev_err_probe() we accidentally
removed a return. It means that if devm_clk_get() it will lead to an
Oops when we call clk_get_rate() on the next line.
References
Configurations
History
06 Dec 2024, 14:55
Type | Values Removed | Values Added |
---|---|---|
References | () https://git.kernel.org/stable/c/15f8f96ec7fc35024d4e03296e4d838fcea33d83 - Patch | |
References | () https://git.kernel.org/stable/c/4cc7faa406975b460aa674606291dea197c1210c - Patch | |
CWE | CWE-476 | |
First Time |
Linux linux Kernel
Linux |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
21 Nov 2024, 06:35
Type | Values Removed | Values Added |
---|---|---|
References | () https://git.kernel.org/stable/c/15f8f96ec7fc35024d4e03296e4d838fcea33d83 - | |
References | () https://git.kernel.org/stable/c/4cc7faa406975b460aa674606291dea197c1210c - |
28 Feb 2024, 09:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-02-28 09:15
Updated : 2024-12-06 14:55
NVD link : CVE-2021-46995
Mitre link : CVE-2021-46995
CVE.ORG link : CVE-2021-46995
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference