Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47003
HistoryFeb 28, 2024 - 12:00 a.m.

CVE-2021-47003

2024-02-2800:00:00
ubuntu.com
ubuntu.com
9
linux kernel
potential null dereference
vulnerability
dmaengine
idxd
pointer status
commit
issue fix
null pointer
dereference
coverity
explicit null
unix

AI Score

6.6

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix potential null dereference on pointer status There are
calls to idxd_cmd_exec that pass a null status pointer however a recent
commit has added an assignment to *status that can end up with a null
pointer dereference. The function expects a null status pointer sometimes
as there is a later assignment to *status where status is first null
checked. Fix the issue by null checking status before making the
assignment. Addresses-Coverity: (“Explicit null dereferenced”)

AI Score

6.6

Confidence

High

EPSS

0

Percentile

15.5%