PT-2024-11308 · Linux+2 · Linux Kernel+2

Paulo Alcantara · Published 2021-07-09 · Updated 2024-12-26 · CVE-2021-47307

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a NULL dereference in the cifs compose mount options() function. The optional @ref parameter might contain a NULL node name, which could lead to a NULL dereference. This issue has been resolved by preventing the dereferencing of the node name in the cifs compose mount options() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-07391

CVE-2021-47307

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:1979-1

SUSE-SU-2024:1983-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2183-1

SUSE-SU-2024:2184-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 669

• https://git.kernel.org/stable/c/f7d1fa65e74263d11f90ddd33b4d4cd905a93759 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1983-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1979-1 · Vendor Advisory
• https://git.kernel.org/stable/c/03313d1c3a2f086bb60920607ab79ac8f8578306 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47307 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2183-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47307 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2184-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ae3d181f4e912f51af7776ea165f199b16fc165d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2010-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47307 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47307 · Vendor Advisory
• https://git.kernel.org/stable/c/e58c162789becede894d3e94c0ce6695a2ef5796 · Patch