What’s Vulnerable › Vulnerabilities

CVE-2021-47464: audit: fix possible null-pointer dereference in audit_filter_rules

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-22 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: audit: fix possible null-pointer dereference in audit_filter_rules Fix possible null-pointer dereference in audit_filter_rules. audit_filter_rules() error: we previously assumed 'ctx' could be null

Affected products

• Linux kernel: from 5.3 before 5.4.156; from 5.5 before 5.10.76; from 5.11 before 5.14.15; 5.15-rc1, 5.15-rc2, 5.15-rc3, 5.15-rc4, 5.15-rc5, 5.15-rc6 — fixed in 5.10.76, 5.14.15, 5.4.156

How to fix

Upgrade to a fixed version: Linux kernel 5.10.76, 5.14.15, 5.4.156. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/16802fa4c33eb1a8efb23f1e93365190e4047d05
• https://git.kernel.org/stable/c/4e9e46a700201b4c85081fd478c99c692a9aaa0d
• https://git.kernel.org/stable/c/6e3ee990c90494561921c756481d0e2125d8b895
• https://git.kernel.org/stable/c/d6f451f1f60c58d73038c7c3177066f8f084e2a2
• https://git.kernel.org/stable/c/16802fa4c33eb1a8efb23f1e93365190e4047d05
• https://git.kernel.org/stable/c/4e9e46a700201b4c85081fd478c99c692a9aaa0d
• https://git.kernel.org/stable/c/6e3ee990c90494561921c756481d0e2125d8b895
• https://git.kernel.org/stable/c/d6f451f1f60c58d73038c7c3177066f8f084e2a2

Get alerted when CVE-2021-47464 or the next vulnerability affects your stack