Vulnerability in Kernel Package (hwmon: w83792d)
Summary
UVI-2021-1001658: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field. Affects Kernel versions < 1499bb2c3a87a2efea0065adab2bd66badee61c3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing various hardware devices and providing an interface between the hardware and software layers. One of the modules within the Kernel package is hwmon, which handles monitoring and control of hardware sensors. The w83792d module specifically deals with monitoring sensors on certain hardware platforms. This vulnerability affects the w83792d module and can lead to a NULL pointer dereference due to the presence of an unnecessary structure field.
Vulnerability Detail
The vulnerability in the w83792d module of the Kernel package arises from the existence of an unnecessary structure field. This field can cause a NULL pointer dereference, potentially leading to a system crash or other unexpected behavior. An attacker may be able to exploit this vulnerability to execute arbitrary code or escalate privileges. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability has been addressed in the Linux Kernel version v5.10.71 through commit 1499bb2c3a87a2efea0065adab2bd66badee61c3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the w83792d module of the Kernel package has been addressed in version v5.10.71 through commit 1499bb2c3a87a2efea0065adab2bd66badee61c3. It is crucial to update the Kernel package to the fixed version to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from a system crash to potential execution of arbitrary code or privilege escalation.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will provide real-time alerts for any open-source vulnerabilities.
No specific workaround has been provided for this vulnerability. It is recommended to update the Kernel package to the fixed version.
The vulnerability is present in versions of the Kernel package prior to v5.10.71. Updating to version v5.10.71 or later will address the vulnerability.
There is no evidence of active exploitation of this vulnerability at the moment. However, it is important to apply the necessary updates to mitigate any potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
