CVE-2021-47542
published 2024-05-24CVE-2021-47542: In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.25%
16.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
In qlcnic_83xx_add_rings(), the indirect function of
ahw->hw_ops->alloc_mbx_args will be called to allocate memory for
cmd.req.arg, and there is a dereference of it in qlcnic_83xx_add_rings(),
which could lead to a NULL pointer dereference on failure of the
indirect function like qlcnic_83xx_alloc_mbx_args().
Fix this bug by adding a check of alloc_mbx_args(), this patch
imitates the logic of mbx_cmd()'s failure handling.
This bug was found by a static analyzer. The analysis employs
differential checking to identify inconsistent security operations
(e.g., checks or kfrees) between two code paths and confirms that the
inconsistent operations are not recovered in the current function or
the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false
positive or hard to trigger. Multiple researchers have cross-reviewed
the bug.
Builds with CONFIG_QLCNIC=m show no new warnings, and our
static analyzer no longer warns about this code.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.15-1 (bookworm) | linux 5.15.15-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < 3a061d54e260b701b538873b43e399d9b8b83e03 | 3a061d54e260b701b538873b43e399d9b8b83e03 |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < b4f217d6fcc00c3fdc0921a7691f30be7490b073 | b4f217d6fcc00c3fdc0921a7691f30be7490b073 |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < 550658a2d61e4eaf522c8ebc7fad76dc376bfb45 | 550658a2d61e4eaf522c8ebc7fad76dc376bfb45 |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < 57af54a56024435d83e44c78449513b414eb6edf | 57af54a56024435d83e44c78449513b414eb6edf |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < bbeb0325a7460ebf1e03f5e0bfc5c652fba9519f | bbeb0325a7460ebf1e03f5e0bfc5c652fba9519f |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < 15fa12c119f869173f9b710cbe6a4a14071d2105 | 15fa12c119f869173f9b710cbe6a4a14071d2105 |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < c5ef33c1489b2cd74368057fa00b5d2183bb5853 | c5ef33c1489b2cd74368057fa00b5d2183bb5853 |
| linux | linux | >= 7f9664525f9cb507de9198a395a111371413f230 < e2dabc4f7e7b60299c20a36d6a7b24ed9bf8e572 | e2dabc4f7e7b60299c20a36d6a7b24ed9bf8e572 |
| linux | linux_kernel | >= 0 < 5.10.84-1 | 5.10.84-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 4.4.0-258.292 | 4.4.0-258.292 |
| linux | linux_kernel | >= 3.9 < 4.4.294 | 4.4.294 |
| linux | linux_kernel | >= 4.10 < 4.14.257 | 4.14.257 |
| linux | linux_kernel | >= 4.15 < 4.19.220 | 4.19.220 |
| linux | linux_kernel | >= 4.20 < 5.4.164 | 5.4.164 |
| linux | linux_kernel | >= 4.5 < 4.9.292 | 4.9.292 |
| linux | linux_kernel | >= 5.11 < 5.15.7 | 5.15.7 |
| linux | linux_kernel | >= 5.5 < 5.10.84 | 5.10.84 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
vendor_redhat·2024-05-24·CVSS 5.5
CVE-2021-47542 [MEDIUM] CWE-476 kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
In the Linux kernel, the following vulnerability has been resolved:
net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
In qlcnic_83xx_add_rings(), the indirect function of
ahw->hw_ops->alloc_mbx_args will be called to allocate memory for
cmd.req.arg, and there is a dereference of it in qlcnic_83xx_add_rings(),
which could lead to a NULL pointer dereference on failure of the
indirect function like qlcnic_83xx_alloc_mbx_args().
Fix this bug by adding a check of alloc_mbx_args(), this patch
imitates the logic of mbx_cmd()'s failure handling.
This bug was found by a static analyzer. The analysis employs
differential checking to identify inconsistent security operations
(e.g., che
Debian
CVE-2021-47542: linux - In the Linux kernel, the following vulnerability has been resolved: net: qlogic...
vendor_debian·2021·CVSS 5.5
CVE-2021-47542 [MEDIUM] CVE-2021-47542: linux - In the Linux kernel, the following vulnerability has been resolved: net: qlogic...
In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In qlcnic_83xx_add_rings(), the indirect function of ahw->hw_ops->alloc_mbx_args will be called to allocate memory for cmd.req.arg, and there is a dereference of it in qlcnic_83xx_add_rings(), which could lead to a NULL pointer dereference on failure of the indirect function like qlcnic_83xx_alloc_mbx_args(). Fix this bug by adding a check of alloc_mbx_args(), this patch imitates the logic of mbx_cmd()'s failure handling. This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2024-08-21·CVSS 5.5
CVE-2024-22099 [MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux
Kernel contained a race condition, leading to a NULL pointer dereference.
An attacker could possibly use this to cause a denial of service (system
crash). (CVE-2024-22099)
It was discovered that a race condition existed in the Bluetooth subsystem
in the Linux kernel, leading to a null pointer dereference vulnerability. A
privileged local attacker could use this to possibly cause a denial of
service (system crash). (CVE-2024-24860)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- SuperH RISC architecture;
- User-Mode Linu
OSV
CVE-2021-47542: In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In
osv·2024-05-24·CVSS 5.5
CVE-2021-47542 [MEDIUM] CVE-2021-47542: In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In
In the Linux kernel, the following vulnerability has been resolved: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() In qlcnic_83xx_add_rings(), the indirect function of ahw->hw_ops->alloc_mbx_args will be called to allocate memory for cmd.req.arg, and there is a dereference of it in qlcnic_83xx_add_rings(), which could lead to a NULL pointer dereference on failure of the indirect function like qlcnic_83xx_alloc_mbx_args(). Fix this bug by adding a check of alloc_mbx_args(), this patch imitates the logic of mbx_cmd()'s failure handling. This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are
No detection rules found.
No public exploits indexed.
arXiv
Microservice Vulnerability Analysis: A Literature Review with Empirical Insights
arxiv_fulltext·2024-07-31
Microservice Vulnerability Analysis: A Literature Review with Empirical Insights
Microservice Vulnerability Analysis: A Literature Review with Empirical Insights
Raveen Kanishka Jayalath*
University of Adelaide, Australia
[email protected]
Hussain Ahmad* *Authors contributed equally to this work. Corresponding author.
University of Adelaide, Australia
[email protected]
Diksha Goel
CSIRO's Data61, Australia
[email protected]
3cmMuhammad Shuja Syed
3cmSLB, USA
[email protected]
Faheem Ullah
University of Adelaide, Australia
[email protected]
plain
## Abstract
Microservice architectures are revolutionizing both small businesses and large corporations, igniting a new era of innovation with their exceptional advantages in maintainability, reusability, and scalability. However, these benefits come w
Bugzilla
CVE-2021-47542 kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
bugzilla·2024-05-27·CVSS 5.5
CVE-2021-47542 [MEDIUM] CVE-2021-47542 kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
CVE-2021-47542 kernel: net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
In the Linux kernel, the following vulnerability has been resolved:
net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
The Linux kernel CVE team has assigned CVE-2021-47542 to this issue.
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024052439-CVE-2021-47542-125d@gregkh/T
Discussion:
The result of automatic check (that is developed by Alexander Larkin) for this CVE-2021-47542 is: CHECK Maybe valid. Check manually. with impact LOW (that is an approximation based on flags REMOTE NULLPTR WARNONLY NETWORK IMPROVEONLY ; these flags parsed automatically based on patch data). Such automatic check happens only for Low/Moderates (and only when not
https://git.kernel.org/stable/c/15fa12c119f869173f9b710cbe6a4a14071d2105https://git.kernel.org/stable/c/3a061d54e260b701b538873b43e399d9b8b83e03https://git.kernel.org/stable/c/550658a2d61e4eaf522c8ebc7fad76dc376bfb45https://git.kernel.org/stable/c/57af54a56024435d83e44c78449513b414eb6edfhttps://git.kernel.org/stable/c/b4f217d6fcc00c3fdc0921a7691f30be7490b073https://git.kernel.org/stable/c/bbeb0325a7460ebf1e03f5e0bfc5c652fba9519fhttps://git.kernel.org/stable/c/c5ef33c1489b2cd74368057fa00b5d2183bb5853https://git.kernel.org/stable/c/e2dabc4f7e7b60299c20a36d6a7b24ed9bf8e572https://git.kernel.org/stable/c/15fa12c119f869173f9b710cbe6a4a14071d2105https://git.kernel.org/stable/c/3a061d54e260b701b538873b43e399d9b8b83e03https://git.kernel.org/stable/c/550658a2d61e4eaf522c8ebc7fad76dc376bfb45https://git.kernel.org/stable/c/57af54a56024435d83e44c78449513b414eb6edfhttps://git.kernel.org/stable/c/b4f217d6fcc00c3fdc0921a7691f30be7490b073https://git.kernel.org/stable/c/bbeb0325a7460ebf1e03f5e0bfc5c652fba9519fhttps://git.kernel.org/stable/c/c5ef33c1489b2cd74368057fa00b5d2183bb5853https://git.kernel.org/stable/c/e2dabc4f7e7b60299c20a36d6a7b24ed9bf8e572
2024-05-24
Published