In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-modules-extraUpgrade kernel-develUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernelUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade libperfUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-core | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-rtUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade dtb-apple | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-virtualUpgrade linux-image-azure-4.15Upgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-4.15.0-1195-azureUpgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-4.15Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-aws-4.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-4.4.0-276-genericUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-azureUpgrade linux-image-oracle-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1188-awsUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1187-awsUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcp-4.15Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-aws-hwe | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub