CVE-2021-47385
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7)) from device then Null pointer dereference occurs. (It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers) Also lm75[] does not serve a purpose anymore after switching to devm_i2c_new_dummy_device() in w83791d_detect_subclients(). The patch fixes possible NULL pointer dereference by removing lm75[]. Found by Linux Driver Verification project (linuxtesting.org). [groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| f64211151db4269341ee6432ce832ae3756725ad | affected | git | 200ced5ba724d8bbf29dfac4ed1e17a39ccaccd1 | Unavailable | None listed |
| f64211151db4269341ee6432ce832ae3756725ad | affected | git | 1499bb2c3a87a2efea0065adab2bd66badee61c3 | Unavailable | None listed |
| f64211151db4269341ee6432ce832ae3756725ad | affected | git | 24af1fe376e22c42238a4a604d31e46c486876c3 | Unavailable | None listed |
| f64211151db4269341ee6432ce832ae3756725ad | affected | git | 0f36b88173f028e372668ae040ab1a496834d278 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.4 | Unavailable | None listed |
| 5.4.151 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.71 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.14.10 | unaffected | semver | Unavailable | 5.14.* | None listed |
| 5.15 | unaffected | original_commit_for_fix | Unavailable | * | None listed |