CVE-2021-46905

MEDIUM

Linux Kernel < 4.19.189 - NULL Pointer Dereference in HSO Serial Device Table

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead. Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().

Scores

CVSS v3 5.5
EPSS 0.0026
EPSS Percentile 17.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (23)
Linux/Linux < 5.12
Linux/Linux 145c89c441d27696961752bf51b323f347601bee - 0c71d4c89559f72cec2592d078681a843bce570e
Linux/Linux 388d05f70f1ee0cac4a2068fd295072f1a44152a - 0f000005da31f6947f843ce6b3e3a960540c6e00
Linux/Linux 4.19.187 - 4.19.189
Linux/Linux 4.19.189 - 4.19.*
Linux/Linux 4a2933c88399c0ebc738db39bbce3ae89786d723 - d7fad2ce15bdbbd0fec3ebe999fd7cab2267f53e
Linux/Linux 5.10.30 - 5.10.33
Linux/Linux 5.10.33 - 5.10.*
Linux/Linux 5.11.14 - 5.11.17
Linux/Linux 5.11.17 - 5.11.*
... and 13 more
Published Feb 26, 2024
Tracked Since Feb 18, 2026