GSD-2021-1001562 hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

hwmon: mlxreg-fan Return non-zero value when fan current state is enforced from sysfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.209 ...

PT-2021-26032

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and attac...

PT-2021-30027

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and attac...

PT-2021-30062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and attack...

PT-2021-30069

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83793 module. This problem arises from an unnecessary structure field. Although the actual impact...

PT-2021-30125

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83793 module. This problem has been identified but its actual impact and potential for exploitatio...

PT-2021-30200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83791d module. This problem has been identified but its actual impact and potential for exploitati...

PT-2021-30190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and attack...

PT-2021-30202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83793 module. This problem arises from an unnecessary structure field. Although the actual impact...

PT-2021-26205

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83791d module. This problem has been identified but its actual impact and potential for attack...

PT-2021-26207

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83793 module. This problem arises from an unnecessary structure field. Although the actual impac...

PT-2021-26120

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and attack...

PT-2021-26074

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83793 module. This problem has been identified but its actual impact and potential for exploitatio...

PT-2021-26067

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and attack...

PT-2021-26130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to a NULL pointer dereference in the hwmon driver, specifically in the w83793 module. This problem has been identified but its actual impact and potential for exploitatio...

PT-2021-30115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and attack...

PT-2021-26195

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the hwmon module, specifically the mlxreg-fan component, which returns a non-zero value when the fan current state is enforced from sysfs. The actual impact and atta...

PT-2024-11389

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the hwmon feature in the Linux kernel, specifically with the mlxreg-fan driver. The vulnerability occurs when the fan current state is enforced from sysfs and the...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.30 and fixes at least the following security issues: nfc: fix refcount leak in llcpsockbind CVE-2020-25670 nfc: fix refcount leak in llcpsockconnect CVE-2020-25671 nfc: fix memory leak in llcpsockconnect CVE-2020-25672 firewire: nosy: Fix a...

CVE-2020-12912

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access...