CVE-2021-47289
published 2024-05-21CVE-2021-47289: In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix reference…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in
for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer
that was possibly NULL. That fails miserably, because that helper
inline function is not set up to handle that case.
Just make acpi_dev_put() silently accept a NULL pointer, rather than
calling down to put_device() with an invalid offset off that NULL
pointer.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= fe066621c7966fe47fa17c6be6fd81adb3c0509f < 38f54217b423c0101d03a00feec6fb8ec608b12e | 38f54217b423c0101d03a00feec6fb8ec608b12e |
| linux | linux | >= fe066621c7966fe47fa17c6be6fd81adb3c0509f < cae3fa3d8165761f3000f523b11cfa1cd35206bc | cae3fa3d8165761f3000f523b11cfa1cd35206bc |
| linux | linux | >= fe066621c7966fe47fa17c6be6fd81adb3c0509f < ccf23a0888077a25a0793a746c3941db2a7562e4 | ccf23a0888077a25a0793a746c3941db2a7562e4 |
| linux | linux | >= fe066621c7966fe47fa17c6be6fd81adb3c0509f < fc68f42aa737dc15e7665a4101d4168aadb8e4c4 | fc68f42aa737dc15e7665a4101d4168aadb8e4c4 |
| linux | linux_kernel | < 5.4.139 | 5.4.139 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.70-1 | 5.10.70-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 5.11 < 5.13.6 | 5.13.6 |
| linux | linux_kernel | >= 5.5 < 5.10.57 | 5.10.57 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ACPI: fix NULL pointer dereference
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2021-47289 [MEDIUM] CWE-476 kernel: ACPI: fix NULL pointer dereference
kernel: ACPI: fix NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in
for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer
that was possibly NULL. That fails miserably, because that helper
inline function is not set up to handle that case.
Just make acpi_dev_put() silently accept a NULL pointer, rather than
calling down to put_device() with an invalid offset off that NULL
pointer.
A vulnerability was found in the Linux kernel’s ACPI subsystem, where the acpi_dev_put() function could attempt to operate on a NULL pointer, leads to a system crash due to a NULL pointer dereference, causing instability when managing ACPI devices.
Mitigati
Debian
CVE-2021-47289: linux - In the Linux kernel, the following vulnerability has been resolved: ACPI: fix N...
vendor_debian·2021·CVSS 5.5
CVE-2021-47289 [MEDIUM] CVE-2021-47289: linux - In the Linux kernel, the following vulnerability has been resolved: ACPI: fix N...
In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case. Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.70-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
OSV
CVE-2021-47289: In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix referenc
osv·2024-05-21·CVSS 5.5
CVE-2021-47289 [MEDIUM] CVE-2021-47289: In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix referenc
In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case. Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
GHSA
GHSA-85h7-g6vm-p392: In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix refere
ghsa_unreviewed·2024-05-21
CVE-2021-47289 [MEDIUM] CWE-476 GHSA-85h7-g6vm-p392: In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix refere
In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in
for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer
that was possibly NULL. That fails miserably, because that helper
inline function is not set up to handle that case.
Just make acpi_dev_put() silently accept a NULL pointer, rather than
calling down to put_device() with an invalid offset off that NULL
pointer.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/38f54217b423c0101d03a00feec6fb8ec608b12ehttps://git.kernel.org/stable/c/cae3fa3d8165761f3000f523b11cfa1cd35206bchttps://git.kernel.org/stable/c/ccf23a0888077a25a0793a746c3941db2a7562e4https://git.kernel.org/stable/c/fc68f42aa737dc15e7665a4101d4168aadb8e4c4https://git.kernel.org/stable/c/38f54217b423c0101d03a00feec6fb8ec608b12ehttps://git.kernel.org/stable/c/cae3fa3d8165761f3000f523b11cfa1cd35206bchttps://git.kernel.org/stable/c/ccf23a0888077a25a0793a746c3941db2a7562e4https://git.kernel.org/stable/c/fc68f42aa737dc15e7665a4101d4168aadb8e4c4
2024-05-21
Published