Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47289

ACPI: fix NULL pointer dereference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case. Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fe066621c7966fe47fa17c6be6fd81adb3c0509f to < 38f54217b423c0101d03a00feec6fb8ec608b12eaffected
  • fe066621c7966fe47fa17c6be6fd81adb3c0509f to < cae3fa3d8165761f3000f523b11cfa1cd35206bcaffected
  • fe066621c7966fe47fa17c6be6fd81adb3c0509f to < ccf23a0888077a25a0793a746c3941db2a7562e4affected
  • fe066621c7966fe47fa17c6be6fd81adb3c0509f to < fc68f42aa737dc15e7665a4101d4168aadb8e4c4affected

Linux Linux

Default version status: affected

  • 5.2affected
  • 0 to < 5.2unaffected
  • 5.4.139 to ≤ 5.4.*unaffected
  • 5.10.57 to ≤ 5.10.*unaffected
  • 5.13.6 to ≤ 5.13.*unaffected
  • 5.14 to ≤ *unaffected

References