CVE - CVE-2021-47652

CVE-ID
CVE-2021-47652	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:fb_destroy_modelist+0x38/0x100 ... Call Trace: ufx_usb_probe.cold+0x2b5/0xac1 [smscufx] usb_probe_interface+0x1aa/0x3c0 [usbcore] really_probe+0x167/0x460 ... ret_from_fork+0x1f/0x30 If fb_alloc_cmap() fails in ufx_usb_probe(), fb_destroy_modelist() will be called to destroy modelist in the error handling path. But modelist has not been initialized yet, so it will result in null-ptr-deref. Initialize modelist before calling fb_alloc_cmap() to fix this bug.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0fd28daec73525382e5c992db8743bf76e42cd5c URL:https://git.kernel.org/stable/c/0fd28daec73525382e5c992db8743bf76e42cd5c MISC:https://git.kernel.org/stable/c/1791f487f877a9e83d81c8677bd3e7b259e7cb27 URL:https://git.kernel.org/stable/c/1791f487f877a9e83d81c8677bd3e7b259e7cb27 MISC:https://git.kernel.org/stable/c/64ec3e678d76419f207b9cdd338dda438ca10b1c URL:https://git.kernel.org/stable/c/64ec3e678d76419f207b9cdd338dda438ca10b1c MISC:https://git.kernel.org/stable/c/9280ef235b05e8f19f8bc6d547b992f0a0ef398d URL:https://git.kernel.org/stable/c/9280ef235b05e8f19f8bc6d547b992f0a0ef398d MISC:https://git.kernel.org/stable/c/c420b540db4b5d69de0a36d8b9d9a6a79a04f05a URL:https://git.kernel.org/stable/c/c420b540db4b5d69de0a36d8b9d9a6a79a04f05a MISC:https://git.kernel.org/stable/c/d1b6a1f0c23b7164250479bf92e2893291dca539 URL:https://git.kernel.org/stable/c/d1b6a1f0c23b7164250479bf92e2893291dca539 MISC:https://git.kernel.org/stable/c/d396c651e2b508b6179bb678cc029f3becbf5170 URL:https://git.kernel.org/stable/c/d396c651e2b508b6179bb678cc029f3becbf5170 MISC:https://git.kernel.org/stable/c/da8b269cc0a2526ebeaccbe2484c999eb0f822cf URL:https://git.kernel.org/stable/c/da8b269cc0a2526ebeaccbe2484c999eb0f822cf MISC:https://git.kernel.org/stable/c/dd3a6cc7385b89ec2303f39dfc3bafa4e24cec4b URL:https://git.kernel.org/stable/c/dd3a6cc7385b89ec2303f39dfc3bafa4e24cec4b
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)