CVE-2021-47526

MEDIUM

Linux Kernel 5.11-5.15.6 - NULL Pointer Dereference in LiteUART Remove Function

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: Fix NULL pointer dereference in ->remove() drvdata has to be set in _probe() - otherwise platform_get_drvdata() causes null pointer dereference BUG in _remove().

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/189c99c629bbf85916c02c153f904649cc0a9d7f

Patch

https://git.kernel.org/stable/c/0f55f89d98c8b3e12b4f55f71c127a173e29557c

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 10.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-476

Status published

Products (7)

Linux/Linux < 5.11

Linux/Linux 1da81e5562fac8286567422cc56a7fbd0dc646d4 - 0f55f89d98c8b3e12b4f55f71c127a173e29557c

Linux/Linux 1da81e5562fac8286567422cc56a7fbd0dc646d4 - 189c99c629bbf85916c02c153f904649cc0a9d7f

Linux/Linux 5.11

Linux/Linux 5.15.7 - 5.15.*

Linux/Linux 5.16

linux/linux_kernel 5.11 - 5.15.7

Published May 24, 2024

Tracked Since Feb 18, 2026