In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignments]
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-core | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-debug-devel | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-azureUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-default-vdso | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15Upgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-azureUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linuxUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub