PT-2025-7963 · Linux+3 · Linux Kernel+3
Hulk Robot
+1
·
Published
2025-02-26
·
Updated
2025-05-21
·
CVE-2021-47652
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null pointer dereference issue has been identified in the Linux kernel, specifically in the
ufx usb probe() function. This issue occurs when fb alloc cmap() fails, leading to a call to fb destroy modelist() before the modelist has been initialized, resulting in a null pointer dereference. The error handling path in ufx usb probe() is the source of the problem.Recommendations
To resolve this issue, initialize the modelist before calling
fb alloc cmap() in the ufx usb probe() function. This can be achieved by reordering the initialization and allocation calls to ensure that modelist is properly set up before attempting to allocate resources.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse