Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case. Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected fe066621c7966fe47fa17c6be6fd81adb3c0509f before 38f54217b423c0101d03a00feec6fb8ec608b12e; affected fe066621c7966fe47fa17c6be6fd81adb3c0509f before cae3fa3d8165761f3000f523b11cfa1cd35206bc; affected fe066621c7966fe47fa17c6be6fd81adb3c0509f before ccf23a0888077a25a0793a746c3941db2a7562e4; affected fe066621c7966fe47fa17c6be6fd81adb3c0509f before fc68f42aa737dc15e7665a4101d4168aadb8e4c4 |
| Linux / Linux | affected 5.2; unaffected 0 before 5.2; unaffected 5.4.139 through 5.4.*; unaffected 5.10.57 through 5.10.*; unaffected 5.13.6 through 5.13.*; unaffected 5.14 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/38f54217b423c0101d03a00feec6fb8ec608b12e
- https://git.kernel.org/stable/c/cae3fa3d8165761f3000f523b11cfa1cd35206bc
- https://git.kernel.org/stable/c/ccf23a0888077a25a0793a746c3941db2a7562e4
- https://git.kernel.org/stable/c/fc68f42aa737dc15e7665a4101d4168aadb8e4c4
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.