In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case.
Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-core | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-debug | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub