CVE-2021-47289

ACPI: fix NULL pointer dereference

published May 21, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ACPI: fix NULL pointer dereference

Commit 71f642833284 ("ACPI: utils: Fix reference counting in

for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer

that was possibly NULL. That fails miserably, because that helper

inline function is not set up to handle that case.

Just make acpi_dev_put() silently accept a NULL pointer, rather than

calling down to put_device() with an invalid offset off that NULL

pointer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Published
2024-05-21T14:35Z
EPSS history
Timeline
  • 21 MAY 14:35Z
    ACPI: fix NULL pointer dereference
    cvelistv5