Description
In the Linux kernel, the following vulnerability has been resolved: Input: adp5589-keys - fix NULL pointer dereference We register a devm action to call adp5589_clear_config() and then pass the i2c client as argument so that we can call i2c_get_clientdata() in order to get our device object. However, i2c_set_clientdata() is only being set at the end of the probe function which means that we'll get a NULL pointer dereference in case the probe function fails early.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
30df385e35a48f773b85117fc490152c2395e45b to < 4449fedb8a710043fc0925409eba844c192d4337affected30df385e35a48f773b85117fc490152c2395e45b to < 34e304cc53ae5d3c8e3f08b41dd11e0d4f3e01edaffected30df385e35a48f773b85117fc490152c2395e45b to < 7c3f04223aaf82489472d614c6decee5a1ce8d7faffected30df385e35a48f773b85117fc490152c2395e45b to < 9a38791ee79bd17d225c15a6d1479448be127a59affected30df385e35a48f773b85117fc490152c2395e45b to < 122b160561f6429701a0559a0f39b0ae309488c6affected30df385e35a48f773b85117fc490152c2395e45b to < fb5cc65f973661241e4a2b7390b429aa7b330c69affected
Linux Linux
Default version status: affected
5.11affected0 to < 5.11unaffected5.15.168 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.55 to ≤ 6.6.*unaffected6.10.14 to ≤ 6.10.*unaffected6.11.3 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4449fedb8a710043fc0925409eba844c192d4337 ↗
- https://git.kernel.org/stable/c/34e304cc53ae5d3c8e3f08b41dd11e0d4f3e01ed ↗
- https://git.kernel.org/stable/c/7c3f04223aaf82489472d614c6decee5a1ce8d7f ↗
- https://git.kernel.org/stable/c/9a38791ee79bd17d225c15a6d1479448be127a59 ↗
- https://git.kernel.org/stable/c/122b160561f6429701a0559a0f39b0ae309488c6 ↗
- https://git.kernel.org/stable/c/fb5cc65f973661241e4a2b7390b429aa7b330c69 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗