CVE-2021-47307

A vulnerability was found in the Linux kernel's CIFS module, where the cifs_compose_mount_options() function can dereference a NULL pointer if it encounters a NULL node_name parameter. This issue could potentially lead to system crash or unexpected behavior due to the improper handling of null values.

This vulnerability is rated as a moderate severity because the risk arises from the possibility of NULL pointer dereferencing, which can cause crashes or instability in the CIFS filesystem handling, it does not directly expose sensitive information or allow unauthorized access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.