CVE-2021-47385
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
21/05/2024
Last modified:
23/12/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field<br />
<br />
If driver read val value sufficient for<br />
(val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7))<br />
from device then Null pointer dereference occurs.<br />
(It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers)<br />
Also lm75[] does not serve a purpose anymore after switching to<br />
devm_i2c_new_dummy_device() in w83791d_detect_subclients().<br />
<br />
The patch fixes possible NULL pointer dereference by removing lm75[].<br />
<br />
Found by Linux Driver Verification project (linuxtesting.org).<br />
<br />
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.4.151 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.5 (including) | 5.10.71 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.14.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/0f36b88173f028e372668ae040ab1a496834d278
- https://git.kernel.org/stable/c/1499bb2c3a87a2efea0065adab2bd66badee61c3
- https://git.kernel.org/stable/c/200ced5ba724d8bbf29dfac4ed1e17a39ccaccd1
- https://git.kernel.org/stable/c/24af1fe376e22c42238a4a604d31e46c486876c3
- https://git.kernel.org/stable/c/0f36b88173f028e372668ae040ab1a496834d278
- https://git.kernel.org/stable/c/1499bb2c3a87a2efea0065adab2bd66badee61c3
- https://git.kernel.org/stable/c/200ced5ba724d8bbf29dfac4ed1e17a39ccaccd1
- https://git.kernel.org/stable/c/24af1fe376e22c42238a4a604d31e46c486876c3



