Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2021-47003
HistoryFeb 28, 2024 - 9:15 a.m.

CVE-2021-47003

2024-02-2809:15:38
Debian Security Bug Tracker
security-tracker.debian.org
8
linux kernel
vulnerability
cve-2021-47003
resolved
dmaengine
idxd
null dereference

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxd_cmd_exec that pass a null status pointer however a recent commit has added an assignment to *status that can end up with a null pointer dereference. The function expects a null status pointer sometimes as there is a later assignment to *status where status is first null checked. Fix the issue by null checking status before making the assignment. Addresses-Coverity: (“Explicit null dereferenced”)

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.5%