Null Pointer Dereference in hwmon (w83791d) in Linux Kernel
Summary
GSD-2021-1001655: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field. Affects Kernel versions < 516d9055039017a20a698103be2b556b4c976bb8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware management, device drivers, and system resource allocation. The hwmon subsystem within the kernel is responsible for monitoring and controlling hardware sensors, such as temperature, voltage, and fan speed sensors. One of the drivers in the hwmon subsystem is w83791d, which supports the W83791D chip commonly found on motherboards. This driver allows access to sensor data and provides control over fan speeds. However, a vulnerability has been identified in the w83791d driver that can lead to a null pointer dereference, potentially resulting in a system crash or other unexpected behavior.
Vulnerability Detail
The vulnerability in the w83791d driver arises from the presence of an unnecessary structure field. This field can be accessed without proper validation, leading to a null pointer dereference when certain conditions are met. An attacker could potentially exploit this vulnerability by sending specially crafted input to the affected system, triggering the null pointer dereference and causing a denial-of-service condition. The impact of this vulnerability may vary depending on the system's configuration and usage. However, it is important to note that the actual attack plausibility and specific consequences have not been proven at this time.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The null pointer dereference vulnerability in the hwmon (w83791d) driver of the Linux Kernel has been addressed in version v5.10.71. Users are strongly advised to update their Linux Kernel to this version or later to mitigate the potential risks associated with this vulnerability. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability may vary depending on the system's configuration and usage. It could potentially lead to a system crash or other unexpected behavior, resulting in a denial-of-service condition.
Exploiting this vulnerability typically requires local access to the affected system. However, it is always recommended to apply security patches promptly to mitigate potential risks.
There are no known instances of this vulnerability being exploited in the wild at this time. However, it is important to stay vigilant and apply security updates to protect against potential threats.
At the moment, there is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the patched version as soon as possible.
For more information about this vulnerability, you can refer to the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and the associated commit 516d9055039017a20a698103be2b556b4c976bb8.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
