What’s Vulnerable › Vulnerabilities

CVE-2021-47257: net: ieee802154: fix null deref in parse dev addr

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type.

Affected products

• Linux kernel: before 4.9.274; from 4.10 before 4.14.238; from 4.15 before 4.19.196; from 4.20 before 5.4.127; from 5.5 before 5.10.45; from 5.11 before 5.12.12 — fixed in 4.14.238, 4.19.196, 4.9.274, 5.10.45, 5.12.12, 5.4.127

How to fix

Upgrade to a fixed version: Linux kernel 4.14.238, 4.19.196, 4.9.274, 5.10.45. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1f95741981c899c4724647291fec5faa3c777185
• https://git.kernel.org/stable/c/5f728ec65485625e30f46e5b4917ff023ad29ea0
• https://git.kernel.org/stable/c/9fdd04918a452980631ecc499317881c1d120b70
• https://git.kernel.org/stable/c/c6998ccfefa652bac3f9b236821e392af43efa1e
• https://git.kernel.org/stable/c/c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627
• https://git.kernel.org/stable/c/d0f47648b87b6d5f204cb7f3cbce6d36dab85a67
• https://git.kernel.org/stable/c/fdd51e34f45311ab6e48d2147cbc2904731b9993
• https://git.kernel.org/stable/c/1f95741981c899c4724647291fec5faa3c777185
• https://git.kernel.org/stable/c/5f728ec65485625e30f46e5b4917ff023ad29ea0
• https://git.kernel.org/stable/c/9fdd04918a452980631ecc499317881c1d120b70
• https://git.kernel.org/stable/c/c6998ccfefa652bac3f9b236821e392af43efa1e
• https://git.kernel.org/stable/c/c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627

Get alerted when CVE-2021-47257 or the next vulnerability affects your stack