CVE Database
/

CVE-2021-46904

Back to search

CVE-2021-46904

Published: Feb 25, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix null-ptr-deref during tty device unregistration Multiple ttys try to claim the same the minor number causing a double unregistration of the same device. The first unregistration succeeds but the next one results in a null-ptr-deref. The get_free_serial_index() function returns an available minor number but doesn't assign it immediately. The assignment is done by the caller later. But before this assignment, calls to get_free_serial_index() would return the same minor number. Fix this by modifying get_free_serial_index to assign the minor number immediately after one is found to be and rename it to obtain_minor() to better reflect what it does. Similary, rename set_serial_by_index() to release_minor() and modify it to free up the minor number of the given hso_serial. Every obtain_minor() should have corresponding release_minor() call.

VendorProductVersions

Linux

Linux

affected
72dc1c096c7051a48ab1dbb12f71976656b55eb5 - < a462067d7c8e6953a733bf5ade8db947b1bb5449
affected
72dc1c096c7051a48ab1dbb12f71976656b55eb5 - < 145c89c441d27696961752bf51b323f347601bee
affected
72dc1c096c7051a48ab1dbb12f71976656b55eb5 - < caf5ac93b3b5d5fac032fc11fbea680e115421b4
affected
72dc1c096c7051a48ab1dbb12f71976656b55eb5 - < 92028d7a31e55d53e41cff679156b9432cffcb36
affected
72dc1c096c7051a48ab1dbb12f71976656b55eb5 - < 4a2933c88399c0ebc738db39bbce3ae89786d723

+3 more versions

Linux

Linux

affected
2.6.27
unaffected
0 - < 2.6.27
unaffected
4.4.268 - <= 4.4.*
unaffected
4.9.268 - <= 4.9.*
unaffected
4.14.232 - <= 4.14.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now