CVE-2021-47289: ACPI: fix NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in foreachacpidevmatch()") started doing "acpidevput()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case.
Just make acpidevput() silently accept a NULL pointer, rather than calling down to putdevice() with an invalid offset off that NULL pointer.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
The Linux kernel CVE team has assigned CVE-2021-47289 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052122-CVE-2021-47289-7cbb@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47289?
CVE-2021-47289 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2021-47289?
You should apply the appropriate patches provided by your Linux distribution.
What systems are affected by CVE-2021-47289?
CVE-2021-47289 affects various versions of the Linux kernel, particularly those before the fixed versions mentioned.
What could happen if CVE-2021-47289 is exploited?
Exploitation of CVE-2021-47289 could lead to a NULL pointer dereference which may result in system crashes.
Is CVE-2021-47289 publicly known?
Yes, CVE-2021-47289 is a publicly disclosed vulnerability in the Linux kernel.