CVE-2021-38206 — NULL Pointer Dereference in Kernel

CWE-476 — NULL Pointer Dereference8 documents7 sources
Severity
5.5MEDIUMNVD
OSV6.5
EPSS
0.1%
top 79.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Linux KernelDebian LinuxMsrc Cbl2 Kernel 5.10.78.1-1 ON CBL Mariner 2.0+1 more
Timeline
PublishedAug 8
Latest updateMay 24

Description

The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶NVDlinux/linux_kernel< 5.12.13
▶Debianlinux/linux_kernel< 5.10.46-1+3
▶debiandebian/linux< linux 5.10.46-1 (bookworm)

Patches

Patch: cdn.kernel.org ↗Patch: github.com ↗Patch: cdn.kernel.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-pmfg-qv3m-chqh: The mac80211 subsystem in the Linux kernel before 5↗2022-05-24
▶
OSV
linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-hwe-5.11, linux-kvm, linux-oracle, linux-oracle-5.11, linux-raspi vulnerabilities↗2021-09-08
▶
OSV
CVE-2021-38206: The mac80211 subsystem in the Linux kernel before 5↗2021-08-08
▶

📋Vendor Advisories

4
Ubuntu
Linux kernel vulnerabilities↗2021-09-08
▶
Microsoft
The mac80211 subsystem in the Linux kernel before 5.12.13 when a device supporting only 5 GHz is used allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by↗2021-08-10
▶
Red Hat
kernel: NULL pointer dereference in the radiotap parser by injecting a frame with 802.11a rates in mac80211 subsystem↗2021-05-31
▶
Debian
CVE-2021-38206: linux - The mac80211 subsystem in the Linux kernel before 5.12.13, when a device support...↗2021
▶
CVE-2021-38206 — NULL Pointer Dereference in Kernel | cvebase