CVE-2021-47003

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47003
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxd_cmd_exec that pass a null status pointer however a recent commit has added an assignment to *status that can end up with a null pointer dereference. The function expects a null status pointer sometimes as there is a later assignment to *status where status is first null checked. Fix the issue by null checking status before making the assignment. Addresses-Coverity: ("Explicit null dereferenced")

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97 Patch
https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120 Patch
https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9 Patch
https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa Patch
https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97 Patch
https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120 Patch
https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9 Patch
https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Dec 2024, 18:25

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97 - () https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97 - Patch
References () https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120 - () https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120 - Patch
References () https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9 - () https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9 - Patch
References () https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa - () https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: dmaengine: idxd: corrige una posible desreferencia nula en el estado del puntero. Hay llamadas a idxd_cmd_exec que pasan un puntero de estado nulo, sin embargo, una confirmación reciente agregó una asignación a *status que puede terminar con una desreferencia de puntero nulo. La función espera un puntero de estado nulo a veces, ya que hay una asignación posterior a *status donde el estado se verifica por primera vez como nulo. Solucione el problema verificando el estado nulo antes de realizar la asignación. Direcciones-Cobertura: ("Nulo explícito desreferenciado")
References () https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97 - () https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97 -
References () https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120 - () https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120 -
References () https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9 - () https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9 -
References () https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa - () https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa -

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2024-12-09 18:25

NVD link : CVE-2021-47003

Mitre link : CVE-2021-47003

CVE.ORG link : CVE-2021-47003

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference