SB20240531378 - NULL pointer dereference in Linux kernel hwmon driver
Published: May 31, 2024 Updated: May 14, 2025
Security Bulletin ID
SB20240531378
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2021-47385)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the w83792d_detect_subclients() function in drivers/hwmon/w83792d.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/200ced5ba724d8bbf29dfac4ed1e17a39ccaccd1
- https://git.kernel.org/stable/c/1499bb2c3a87a2efea0065adab2bd66badee61c3
- https://git.kernel.org/stable/c/24af1fe376e22c42238a4a604d31e46c486876c3
- https://git.kernel.org/stable/c/0f36b88173f028e372668ae040ab1a496834d278
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.71
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.151