CVE-2021-46905: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead. Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().

Affected products

• Linux Linux Kernel: before 4.19.189 (fixed in 4.19.189); from 4.20.0, before 5.4.115 (fixed in 5.4.115); from 5.5.0, before 5.10.33 (fixed in 5.10.33); from 5.11.0, before 5.11.17 (fixed in 5.11.17); version 5.12 only

Published 2024-02-26. Last modified 2026-06-17.