PT-2024-11211 · Linux+1 · Linux Kernel+1

Published 2021-05-18 · Updated 2024-08-19 · CVE-2021-47164

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null dereference vulnerability has been resolved in the Linux kernel, specifically in the net/mlx5e module. The issue occurs when the lag dev is null, and the code attempts to access it, causing a null dereference. This happens in the bond enslave() function, where the active/backup slave is set before setting the upper dev, resulting in the first event being processed without an upper dev. After setting the upper dev with bond master upper dev link(), a second event is triggered, and in this event, an upper dev is present.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-07363

CVE-2021-47164

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Linux Kernel

Suse

References · 344

• https://osv.dev/vulnerability/CVE-2021-47164 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47164 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47164 · Vendor Advisory
• https://git.kernel.org/stable/c/2e4b0b95a489259f9d35a3db17023061f8f3d587 · Patch
• https://cve.org/CVERecord?id=CVE-2021-47164 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47164 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47164 · Vendor Advisory
• https://git.kernel.org/stable/c/83026d83186bc48bb41ee4872f339b83f31dfc55 · Patch
• https://git.kernel.org/stable/c/bdfd3593a8248eea6ecfcbf7b47b56b86515672d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47164 · Security Note
• https://bdu.fstec.ru/vul/2025-07363 · Security Note
• https://bugzilla.suse.com/1221990 · Note
• https://suse.com/security/cve/CVE-2020-36781 · Note