PT-2025-7963 · Linux+3 · Linux Kernel+3
Hulk Robot
+1
·
Publicado
2025-02-26
·
Atualizado
2025-05-21
·
CVE-2021-47652
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null pointer dereference issue has been identified in the Linux kernel, specifically in the
ufx usb probe() function. This issue occurs when fb alloc cmap() fails, leading to a call to fb destroy modelist() before the modelist has been initialized, resulting in a null pointer dereference. The error handling path in ufx usb probe() is the source of the problem.Recommendations
To resolve this issue, initialize the modelist before calling
fb alloc cmap() in the ufx usb probe() function. This can be achieved by reordering the initialization and allocation calls to ensure that modelist is properly set up before attempting to allocate resources.Exploit
Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Red Os
Suse