In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case.
Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extra | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.59-52.142Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade bpftool | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfo | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade reiserfs-kmp-default | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub