In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-tools | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-tools-debuginfo | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-modulesUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade rvUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade perfUpgrade bpftool-debuginfoUpgrade libperfUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-core | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dtb-amdUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade dtb-apmUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade dlm-kmp-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-aws-fipsUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-aws-hweUpgrade linux-image-genericUpgrade linux-image-gcp-4.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1188-awsUpgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-fipsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-4.15Upgrade linux-image-azureUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-4.4.0-276-genericUpgrade linux-image-4.15.0-1195-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-fipsUpgrade linux-image-aws-4.15Upgrade linux-image-gcpUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-azure-fips-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-4.15Upgrade linux-image-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub