SB20240531403 - NULL pointer dereference in Linux kernel hwmon driver
Published: May 31, 2024 Updated: May 14, 2025
Security Bulletin ID
SB20240531403
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2021-47384)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the TEMP_TO_REG() and w83793_detect_subclients() functions in drivers/hwmon/w83793.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/6cb01fe630eaffc5a2c3f7364436caddba286623
- https://git.kernel.org/stable/c/7c4fd5de39f273626a2b0f3a446d2cc85cd47616
- https://git.kernel.org/stable/c/746011193f44f97f8784edcf8327c587946745fc
- https://git.kernel.org/stable/c/dd4d747ef05addab887dc8ff0d6ab9860bbcd783
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.71
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.151