VULNERABILITY INTELLIGENCE

CVE-2021-47002

CVSS score5.5 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-02-28
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null pointer dereference in svc_rqst_free() When alloc_pages_node() returns null in svc_rqst_alloc(), the null rq_scratch_page pointer will be dereferenced when calling put_page() in svc_rqst_free(). Fix it by adding a null check. Addresses-Coverity: ("Dereference after null check")

Weakness classification

  • nvd@nist.gov: CWE-476

Primary references