In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignments]
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-docUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extra | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-devel | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt-livepatch-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-ibmUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-awsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-azure-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub