CVE-2021-47207

ALSA: gus: fix null pointer dereference on pointer block

State: Published
Severity: Not scored
Published: Apr 10, 2024
Updated: May 11, 2026
Reserved: Mar 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: gus: fix null pointer dereference on pointer block

The pointer block return from snd_gf1_dma_next_block could be null, so there is a potential null pointer dereference issue. Fix this by adding a null check before dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e28e083dcdf03a18a083f8a47b6bb6b1604b5beAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cb09c760c201f82df83babc92a5ffea0a01807fcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 542fa721594a02d2aee0370a764d306ef48d030cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab4c1ebc40f699f48346f634d7b72b9c5193f315Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6d2cefdd05c4810c416fb8d384b5c377bd977bcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ac6cd87d8ddd36c43620f82c4d65b058f725f0fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 16721797dcef2c7c030ffe73a07f39a65f9323c3Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a0d21bb3279476c777434c40d969ea88ca64f9aaAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.4.293 through 4.4.Not affected 4.9.291 through 4.9.Not affected 4.14.256 through 4.14.Not affected 4.19.218 through 4.19.Not affected 5.4.162 through 5.4.Not affected 5.10.82 through 5.10.Not affected 5.15.5 through 5.15.*Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e28e083dcdf03a18a083f8a47b6bb6b1604b5beAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cb09c760c201f82df83babc92a5ffea0a01807fcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 542fa721594a02d2aee0370a764d306ef48d030cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab4c1ebc40f699f48346f634d7b72b9c5193f315Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c6d2cefdd05c4810c416fb8d384b5c377bd977bcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ac6cd87d8ddd36c43620f82c4d65b058f725f0fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 16721797dcef2c7c030ffe73a07f39a65f9323c3Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a0d21bb3279476c777434c40d969ea88ca64f9aaAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.4.293 through 4.4.*Not affected
4.9.291 through 4.9.*Not affected
4.14.256 through 4.14.*Not affected
4.19.218 through 4.19.*Not affected
5.4.162 through 5.4.*Not affected
5.10.82 through 5.10.*Not affected
5.15.5 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.