CVE-2021-47002: SUNRPC: Fix null pointer dereference in svc_rqst_free()
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix null pointer dereference in svcrqstfree()
When allocpagesnode() returns null in svcrqstalloc(), the null rqscratchpage pointer will be dereferenced when calling putpage() in svcrqstfree(). Fix it by adding a null check.
Addresses-Coverity: ("Dereference after null check")
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47002?
CVE-2021-47002 has been classified with a moderate severity level due to the potential for denial of service from null pointer dereference.
How do I fix CVE-2021-47002?
To fix CVE-2021-47002, upgrade the Linux kernel to versions higher than 5.10.221, 5.11.22, or 5.12.5 where the vulnerability has been resolved.
What are the affected versions for CVE-2021-47002?
CVE-2021-47002 affects Linux kernel versions below 5.10.221, between 5.11 and 5.11.22, and between 5.12 and 5.12.5.
What type of vulnerability is CVE-2021-47002?
CVE-2021-47002 is a null pointer dereference vulnerability found in the Linux kernel's SUNRPC component.
What systems are impacted by CVE-2021-47002?
CVE-2021-47002 impacts any systems running the affected versions of the Linux kernel that leverage the SUNRPC protocol.