Null Dereference in parse dev addr in net: ieee802154
Summary
GSD-2021-1000968: net: ieee802154: fix null deref in parse dev addr. Affects Kernel versions < c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: ieee802154 package is a part of the Linux Kernel ecosystem. It provides support for IEEE 802.15.4 wireless networks, which are commonly used in low-power, low-data-rate applications such as wireless sensor networks. This package allows devices to communicate with each other using the IEEE 802.15.4 standard. However, a vulnerability has been discovered in the package that can lead to a null dereference in the parse dev addr function.
Vulnerability Detail
The vulnerability in the net: ieee802154 package arises from a null dereference in the parse dev addr function. This means that under certain conditions, the function may attempt to access memory using a null pointer, leading to a crash or potentially exploitable behavior. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.10.45 by commit c7836de2cadd88bc2f20f2c5a3d4ef4c73aef627.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The net: ieee802154 package in the Linux Kernel is vulnerable to a null dereference in the parse dev addr function. This vulnerability has been fixed in Linux Kernel version v5.10.45. It is recommended to update the kernel to the latest version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net: ieee802154 package is a part of the Linux Kernel ecosystem and provides support for IEEE 802.15.4 wireless networks.
A null dereference occurs when a program attempts to access memory using a null pointer, leading to a crash or potentially exploitable behavior.
The impact of this vulnerability is not yet proven. However, it has the potential to cause crashes or exploitable behavior.
To fix this vulnerability, update the Linux Kernel to version v5.10.45 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
