CVE-2021-46905
MEDIUMLinux Kernel < 4.19.189 - NULL Pointer Dereference in HSO Serial Device Table
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead. Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().
References (9)
Core 9
Core References
Scores
CVSS v3
5.5
EPSS
0.0026
EPSS Percentile
17.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (23)
Linux/Linux
< 5.12
Linux/Linux
145c89c441d27696961752bf51b323f347601bee - 0c71d4c89559f72cec2592d078681a843bce570e
Linux/Linux
388d05f70f1ee0cac4a2068fd295072f1a44152a - 0f000005da31f6947f843ce6b3e3a960540c6e00
Linux/Linux
4.19.187 - 4.19.189
Linux/Linux
4.19.189 - 4.19.*
Linux/Linux
4a2933c88399c0ebc738db39bbce3ae89786d723 - d7fad2ce15bdbbd0fec3ebe999fd7cab2267f53e
Linux/Linux
5.10.30 - 5.10.33
Linux/Linux
5.10.33 - 5.10.*
Linux/Linux
5.11.14 - 5.11.17
Linux/Linux
5.11.17 - 5.11.*
... and 13 more
Published
Feb 26, 2024
Tracked Since
Feb 18, 2026