In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
If driver read tmp value sufficient for (tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignments]
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernelUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extra | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade bpftoolUpgrade python-perf | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade perf | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-amdUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-default | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-raspi-5.4Upgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub