CVE-2021-47095

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ipmi: ssif: initialize ssif_info-&gt;client early<br /> <br /> During probe ssif_info-&gt;client is dereferenced in error path. However,<br /> it is set when some of the error checking has already been done. This<br /> causes following kernel crash if an error path is taken:<br /> <br /> [ 30.645593][ T674] ipmi_ssif 0-000e: ipmi_ssif: Not probing, Interface already present<br /> [ 30.657616][ T674] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000088<br /> ...<br /> [ 30.657723][ T674] pc : __dev_printk+0x28/0xa0<br /> [ 30.657732][ T674] lr : _dev_err+0x7c/0xa0<br /> ...<br /> [ 30.657772][ T674] Call trace:<br /> [ 30.657775][ T674] __dev_printk+0x28/0xa0<br /> [ 30.657778][ T674] _dev_err+0x7c/0xa0<br /> [ 30.657781][ T674] ssif_probe+0x548/0x900 [ipmi_ssif 62ce4b08badc1458fd896206d9ef69a3c31f3d3e]<br /> [ 30.657791][ T674] i2c_device_probe+0x37c/0x3c0<br /> ...<br /> <br /> Initialize ssif_info-&gt;client before any error path can be taken. Clear<br /> i2c_client data in the error path to prevent the dangling pointer from<br /> leaking.