In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignments]
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-develUpgrade perfUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debug-modules | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rt | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-azure-fde-5.15Upgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-fipsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-azure-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub