CVE-2021-47003

dmaengine: idxd: Fix potential null dereference on pointer status

State
Published
Severity
Not scored
Published
Feb 28, 2024
Updated
May 23, 2026
Reserved
Feb 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix potential null dereference on pointer status

There are calls to idxd_cmd_exec that pass a null status pointer however a recent commit has added an assignment to *status that can end up with a null pointer dereference. The function expects a null status pointer sometimes as there is a later assignment to *status where status is first null checked. Fix the issue by null checking status before making the assignment.

Addresses-Coverity: ("Explicit null dereferenced")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 40e3b5c128645d2ddad12310c7be98758cafb2b0 to before 5756f757c72501ef1a16f5f63f940623044180e9Affected
  • 89e3becd8f821e507052e012d2559dcda59f538e to before 2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97Affected
  • 89e3becd8f821e507052e012d2559dcda59f538e to before 7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfaAffected
  • 89e3becd8f821e507052e012d2559dcda59f538e to before 28ac8e03c43dfc6a703aa420d18222540b801120Affected
  • 5.10.17 to before 5.10.38Affected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.10.38 through 5.10.*Not affected
  • 5.11.22 through 5.11.*Not affected
  • 5.12.5 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.