VulnerabilityAnalyzed
CVE-2021-47149
In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18x_get_hwinfo(), if ioremap fails there will be NULL pointer deref.
MEDIUM 5.5EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18x_get_hwinfo(), if ioremap fails there will be NULL pointer deref. To fix this, check the return value of ioremap and return -1 to the caller in case of failure.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.23% probability · 13th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/22049c3d40f08facd1867548716a484dad6b3251Patch
- https://git.kernel.org/stable/c/52202be1cd996cde6e8969a128dc27ee45a7cb5ePatch
- https://git.kernel.org/stable/c/6dbf1101594f7c76990b63c35b5a40205a914b6bPatch
- https://git.kernel.org/stable/c/71723a796ab7881f491d663c6cd94b29be5fba50Patch
- https://git.kernel.org/stable/c/7883d3895d0fbb0ba9bff0f8665f99974b45210fPatch
- https://git.kernel.org/stable/c/b92170e209f7746ed72eaac98f2c2f4b9af734e6Patch
- https://git.kernel.org/stable/c/c4f1c23edbe921ab2ecd6140d700e756cd44c5f7Patch
- https://git.kernel.org/stable/c/f14bf57a08779a5dee9936f63ada0149ea89c5e6Patch
- https://git.kernel.org/stable/c/22049c3d40f08facd1867548716a484dad6b3251Patch
- https://git.kernel.org/stable/c/52202be1cd996cde6e8969a128dc27ee45a7cb5ePatch
- https://git.kernel.org/stable/c/6dbf1101594f7c76990b63c35b5a40205a914b6bPatch
- https://git.kernel.org/stable/c/71723a796ab7881f491d663c6cd94b29be5fba50Patch
- https://git.kernel.org/stable/c/7883d3895d0fbb0ba9bff0f8665f99974b45210fPatch
- https://git.kernel.org/stable/c/b92170e209f7746ed72eaac98f2c2f4b9af734e6Patch
- https://git.kernel.org/stable/c/c4f1c23edbe921ab2ecd6140d700e756cd44c5f7Patch
- https://git.kernel.org/stable/c/f14bf57a08779a5dee9936f63ada0149ea89c5e6Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.