In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case.
Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-modules | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debug-kvm | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-default-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub