Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2021-46995 Details

Description

In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe When we converted this code to use dev_err_probe() we accidentally removed a return. It means that if devm_clk_get() it will lead to an Oops when we call clk_get_rate() on the next line.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/15f8f96ec7fc35024d4e03296e4d838fcea33d83 kernel.orgPatch
https://git.kernel.org/stable/c/4cc7faa406975b460aa674606291dea197c1210c kernel.orgPatch
https://git.kernel.org/stable/c/15f8f96ec7fc35024d4e03296e4d838fcea33d83 CVEPatch
https://git.kernel.org/stable/c/4cc7faa406975b460aa674606291dea197c1210c CVEPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-476NULL Pointer Dereference[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.12, < 5.12.5

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2021-46995
NVD Published Date:
Feb 28, 2024
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2021-46995 Details - Not Deferred