Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in power_supply_get_battery_info when kmalloc() fail to allocate memory in kasprintf(), propname will be NULL, strcmp() called by of_get_property() will cause null pointer dereference. So return ENOMEM if kasprintf() return NULL pointer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 3afb50d7125bcdbf71df843134e96ceffc78c8b8 before 8ea68b4e3fa9392ef9dae303abc8735a033c280f; affected 3afb50d7125bcdbf71df843134e96ceffc78c8b8 before 5beadb55f4e36fafe5d6df5dcd5f85d803f3f134; affected 3afb50d7125bcdbf71df843134e96ceffc78c8b8 before d21534ab4fd7883e1c8037a76671d4e8b6ea14cb; affected 3afb50d7125bcdbf71df843134e96ceffc78c8b8 before 279af90e65cbdb3e5c4519b0043324d7876bc5ec; affected 3afb50d7125bcdbf71df843134e96ceffc78c8b8 before b8131efb89d9f837c9244f900f0fc2699fd1181d; affected 3afb50d7125bcdbf71df843134e96ceffc78c8b8 before 104bb8a663451404a26331263ce5b96c34504049 |
| Linux / Linux | affected 5.0; unaffected 0 before 5.0; unaffected 5.4.229 through 5.4.*; unaffected 5.10.163 through 5.10.*; unaffected 5.15.86 through 5.15.*; unaffected 6.0.16 through 6.0.*; unaffected 6.1.2 through 6.1.*; unaffected 6.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/8ea68b4e3fa9392ef9dae303abc8735a033c280f
- https://git.kernel.org/stable/c/5beadb55f4e36fafe5d6df5dcd5f85d803f3f134
- https://git.kernel.org/stable/c/d21534ab4fd7883e1c8037a76671d4e8b6ea14cb
- https://git.kernel.org/stable/c/279af90e65cbdb3e5c4519b0043324d7876bc5ec
- https://git.kernel.org/stable/c/b8131efb89d9f837c9244f900f0fc2699fd1181d
- https://git.kernel.org/stable/c/104bb8a663451404a26331263ce5b96c34504049