PT-2024-11292 · Linux+6 · Linux Kernel+6
Jens Axboe
·
Published
2021-07-24
·
Updated
2024-12-23
·
CVE-2021-47289
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A NULL pointer dereference issue has been resolved in the Linux kernel. The problem occurred when the
acpi dev put() function was called on a possibly NULL pointer, which was not handled correctly by the helper inline function. This issue was caused by a change in the for each acpi dev match() function. To fix this, the acpi dev put() function has been modified to silently accept a NULL pointer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Rocky Linux
Suse