In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade libperfUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-docUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matched | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-devel | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-develUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-rt-debug-modules | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdso | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-276-genericUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-azure-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1195-azureUpgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-gcpUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-aws-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-fips-4.15Upgrade linux-image-virtualUpgrade linux-image-azure-fips-4.15Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-4.4.0-1188-awsUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-oracle-4.15Upgrade linux-image-azureUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-gcp-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-aws-lts-18.04 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub