CVE - CVE-2021-47386

CVE-ID
CVE-2021-47386	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients(). The patch fixes possible NULL pointer dereference by removing lm75[]. Found by Linux Driver Verification project (linuxtesting.org). [groeck: Dropped unnecessary continuation lines, fixed multi-line alignment]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/16887ae4e3defd2c4e7913b6c539f33eaf4eac5c URL:https://git.kernel.org/stable/c/16887ae4e3defd2c4e7913b6c539f33eaf4eac5c MISC:https://git.kernel.org/stable/c/44d3c480e4e2a75bf6296a18b4356157991ccd80 URL:https://git.kernel.org/stable/c/44d3c480e4e2a75bf6296a18b4356157991ccd80 MISC:https://git.kernel.org/stable/c/516d9055039017a20a698103be2b556b4c976bb8 URL:https://git.kernel.org/stable/c/516d9055039017a20a698103be2b556b4c976bb8 MISC:https://git.kernel.org/stable/c/943c15ac1b84d378da26bba41c83c67e16499ac4 URL:https://git.kernel.org/stable/c/943c15ac1b84d378da26bba41c83c67e16499ac4
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)