In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade rvUpgrade libperfUpgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-extra | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 13, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade perf-debuginfoUpgrade rvUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade libperf-debuginfoUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade rtlaUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfo | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-apmUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-245-genericUpgrade linux-image-gcp-4.15Upgrade linux-image-oracle-4.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1188-awsUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-azure-fips-4.15Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-aws-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-1195-azureUpgrade linux-image-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-4.4.0-276-genericUpgrade linux-image-kvmUpgrade linux-image-aws-fips-4.15 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub