CVE-2021-47612

Aliases:UBUNTU-CVE-2021-47612DEBIAN-CVE-2021-47612
Advisory lineage Upstream: 0 Downstream: 11
Modified
Published: 19 Jun 2024, 14:58
Last modified:11 May 2026, 13:57

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.22% LOW
0% probability +0.21%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Jun 2024, 14:58
Published
Vulnerability first disclosed
11 May 2026, 13:57
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfc_genl_dump_devices_done When kmalloc in nfc_genl_dump_devices() fails then nfc_genl_dump_devices_done() segfaults as below KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 5.16.0-rc4-01180-g2a987e65025e-dirty #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-6.fc35 04/01/2014 Workqueue: events netlink_sock_destruct_work RIP: 0010:klist_iter_exit+0x26/0x80 Call Trace: <TASK> class_dev_iter_exit+0x15/0x20 nfc_genl_dump_devices_done+0x3b/0x50 genl_lock_done+0x84/0xd0 netlink_sock_destruct+0x8f/0x270 __sk_destruct+0x64/0x3b0 sk_destruct+0xa8/0xd0 __sk_free+0x2e8/0x3d0 sk_free+0x51/0x90 netlink_sock_destruct_work+0x1c/0x20 process_one_work+0x411/0x710 worker_thread+0x6fd/0xa80

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.22%• Percentile: 13%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • debian•linux

    < 5.10.92-1 | < 5.15.15-1 | < 5.15.15-1 | < 5.15.15-1

  • ubuntu•linux

    all | < 4.15.0-169.177 | < 5.4.0-105.119

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    all | < 4.15.0-1121.129 | < 5.4.0-1069.73

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1069.73~18.04.1

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.2

    all

  • ubuntu•linux-aws-fips

    < 4.15.0-2061.63 | all | < 5.4.0-1069.73+fips2

  • ubuntu•linux-aws-hwe

    < 4.15.0-1120.128~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1131.144~14.04.1 | < 4.15.0-1131.144~16.04.1 | all | < 5.4.0-1073.76

  • ubuntu•linux-azure-4.15

    < 4.15.0-1131.144

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.19

    all

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1073.76~18.04.1

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.2

    all

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    all

  • ubuntu•linux-azure-fde-5.15

    < 5.15.0-1114.123~20.04.1

  • ubuntu•linux-azure-fde-5.19

    all

  • ubuntu•linux-azure-fde-6.2

    all

  • ubuntu•linux-azure-fips

    < 4.15.0-2043.47 | all | < 5.4.0-1073.76+fips1

  • ubuntu•linux-bluefield

    all | < 5.4.0-1032.35

  • ubuntu•linux-fips

    all | < 4.15.0-1078.87 | < 5.4.0-1046.52

  • ubuntu•linux-gcp

    < 4.15.0-1116.130~16.04.1 | all | < 5.4.0-1068.72

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1116.130

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.19

    all

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1068.72~18.04.1

  • ubuntu•linux-gcp-5.8

    all

  • ubuntu•linux-gcp-6.2

    all

  • ubuntu•linux-gcp-fips

    < 4.15.0-2026.28 | all | < 5.4.0-1067.71~20.04.1

  • ubuntu•linux-gke

    all

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.15

    all

  • ubuntu•linux-gke-5.4

    all

  • ubuntu•linux-gkeop

    < 5.4.0-1037.38

  • ubuntu•linux-gkeop-5.4

    all

  • ubuntu•linux-hwe

    < 4.15.0-169.177~16.04.1 | all

  • ubuntu•linux-hwe-5.11

    all

  • ubuntu•linux-hwe-5.13

    all

Showing first 50 affected entries in server-rendered view.

References (12)