← Back

CVE-2021-3659

nvd nist
Published: Aug 22, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.

Affected (14)

Linux
1 product
Linux Kernel
Fedoraproject
1 product
Fedora
Redhat
12 products
Enterprise Linux
Enterprise Linux For Ibm Z Systems
Enterprise Linux For Ibm Z Systems Eus
Enterprise Linux For Real Time
Enterprise Linux For Real Time For Nfv
Enterprise Linux For Real Time For Nfv Tus
Enterprise Linux For Real Time Tus
Enterprise Linux Server Aus
Enterprise Linux Server Eus
Enterprise Linux Server Tus
Codeready Linux Builder
Virtualization Host
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Before 5.12
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 34
Configuration C
10 vulnerable
Vulnerable SoftwareAffected Versions
Enterprise Linux
Version 7.0
Enterprise Linux For Ibm Z Systems
Version 8.0
Enterprise Linux For Ibm Z Systems Eus
Version 8.6
Enterprise Linux For Real Time
Version 8.0
Enterprise Linux For Real Time For Nfv
Version 8.0
Enterprise Linux For Real Time For Nfv Tus
Version 8.6
Enterprise Linux For Real Time Tus
Version 8.6
Enterprise Linux Server Aus
Version 8.6
Enterprise Linux Server Eus
Version 8.6
Enterprise Linux Server Tus
Version 8.6
Configuration D
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Codeready Linux Builder
All versions
Running on/withPlatform Versions
Redhat
Enterprise Linux Eus
Version 8.6
Redhat
Enterprise Linux For Power Little Endian
Version 8.0
Redhat
Enterprise Linux For Power Little Endian Eus
Version 8.6
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Virtualization Host
Version 4.0
Running on/withPlatform Versions
Redhat
Enterprise Linux
Version 8.0

Related CWEs

CWE-252
Unchecked Return Value
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (6)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingPatchThird Party Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.