In the Linux kernel, the following vulnerability has been resolved:
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignment]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-headers | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.75-79.358Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-cavium | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linuxUpgrade linux-hwe-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-bluefield | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub