Riskcovery

CVE-2021-47380

HID: amd_sfh: Fix potential NULL pointer dereference

State
Published
Severity
7.8 High
Published
May 21, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: amd_sfh: Fix potential NULL pointer dereference

devm_add_action_or_reset() can suddenly invoke amd_mp2_pci_remove() at registration that will cause NULL pointer dereference since corresponding data is not initialized yet. The patch moves initialization of data before devm_add_action_or_reset().

Found by Linux Driver Verification project (linuxtesting.org).

[jkosina@suse.cz: rebase]

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4f567b9f8141a86c7d878fadf136e5d1408e3e61 to before 283e4bee701dfcd409dd293f19a268bb2bc8ff38Affected
  • 4f567b9f8141a86c7d878fadf136e5d1408e3e61 to before d46ef750ed58cbeeba2d9a55c99231c30a172764Affected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.14.10 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.