In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.75-79.358Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headers | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 13, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade libperfUpgrade perf-debuginfoUpgrade rvUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade python3-perfUpgrade python3-perf-debuginfo | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-source-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1187-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-aws-hweUpgrade linux-image-fipsUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-fipsUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-gcp-4.15Upgrade linux-image-azureUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-4.4.0-1188-awsUpgrade linux-image-oracle-4.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-1195-azureUpgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-aws-4.15Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-fips-4.15Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-azure-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-azure-fips-4.15Upgrade linux-image-4.4.0-276-genericUpgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub