Wind River Support Network

HomeDefectsLIN1019-6708
Fixed

LIN1019-6708 : Security Advisory - linux - CVE-2021-3587

Created: Jun 8, 2021    Updated: Jun 23, 2021
Resolved Date: Jun 23, 2021
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

There is a null pointer dereference in llcp_sock_getname in net/nfc/llcp_sock.c reproduced in linux-5.13.0-rc2. An unprivileged user can trigger this bug and cause denial of service.


https://seclists.org/oss-sec/2021/q2/177
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=4ac06a1e013c

CREATE(Triage):(User=admin) [CVE-2021-3587|https://nvd.nist.gov/vuln/detail/CVE-2021-3587]

CVEs


Live chat
Online