In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case.
Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade python3-perf | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.59-52.142Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-debuginfo | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-preempt-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub