In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-headersUpgrade libperfUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade perfUpgrade rtlaUpgrade kernel-rt-kvmUpgrade kernel-uki-virtUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-64k-modules-core | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headers | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade perfUpgrade libperfUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade libperf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-devel-matched | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-armUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-syms-rt | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-oracle-4.15Upgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-gkeUpgrade linux-image-gcp-4.15Upgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1188-awsUpgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-awsUpgrade linux-image-4.4.0-276-genericUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-kvmUpgrade linux-image-azure-4.15Upgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-aws-4.15Upgrade linux-image-4.15.0-1195-azureUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcpUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fips-4.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1149-oracle | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub