In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-debug-devel | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade perfUpgrade libperfUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-core | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1188-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-gcp-4.15Upgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1150-awsUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-oracle-4.15Upgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-genericUpgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-azure-fips-4.15Upgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-gcpUpgrade linux-image-aws-4.15Upgrade linux-image-4.15.0-1195-azureUpgrade linux-image-awsUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-azure-4.15Upgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-4.4.0-276-genericUpgrade linux-image-oracle-lts-18.04 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub