Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro The GET_INSTANCE_ID macro that caused a kernel panic when accessing sysfs attributes: 1. Off-by-one error: The loop condition used '<=' instead of '<', causing access beyond array bounds. Since array indices are 0-based and go from 0 to instances_count-1, the loop should use '<'. 2. Missing NULL check: The code dereferenced attr_name_kobj->name without checking if attr_name_kobj was NULL, causing a null pointer dereference in min_length_show() and other attribute show functions. The panic occurred when fwupd tried to read BIOS configuration attributes: Oops: general protection fault [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:min_length_show+0xcf/0x1d0 [hp_bioscfg] Add a NULL check for attr_name_kobj before dereferencing and corrects the loop boundary to match the pattern used elsewhere in the driver.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5f94f181ca25d8c5b77beb2da0cb466ddb6ece29 to < eb5ff1025c92117d5d1cc728bcfa294abe484da1affected5f94f181ca25d8c5b77beb2da0cb466ddb6ece29 to < eba49c1dee9c5e514ca18e52c545bba524e8a045affected5f94f181ca25d8c5b77beb2da0cb466ddb6ece29 to < 193922a23d7294085a47d7719fdb7d66ad0a236faffected5f94f181ca25d8c5b77beb2da0cb466ddb6ece29 to < 25150715e0b049b99df664daf05dab12f41c3e13affected
Linux Linux
Default version status: affected
6.6affected0 to < 6.6unaffected6.6.122 to ≤ 6.6.*unaffected6.12.68 to ≤ 6.12.*unaffected6.18.8 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected