In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignments]
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade bpftool | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-defaultUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinx | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-azure-fde-5.15Upgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub