In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignment]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade bpftool-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-core | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade dtb-lgUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-ibmUpgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-azure-fde-5.15Upgrade linux-awsUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-hwe-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub