CVE-2021-47651

soc: qcom: rpmpd: Check for null return of devm_kcalloc

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: qcom: rpmpd: Check for null return of devm_kcalloc

Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 755dbc3d73789ac9f0017c729abf5e4b153bf799Affected bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before b5d6eba71997b6d661935d2b15094ac7f9f6132dAffected bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 724376c30af5a57686b223dbcd6188e07d2a1de2Affected bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 84b89fa877ad576e9ee8130f412cfd592f274508Affected bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 31b5124d742969ea8bf7a1360596f548ca23e770Affected bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 5a811126d38f9767a20cc271b34db7c8efc5a46cAffected
LinuxLinux	5.1Affected before 5.1Not affected 5.4.189 through 5.4.Not affected 5.10.110 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.*Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 755dbc3d73789ac9f0017c729abf5e4b153bf799Affected
bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before b5d6eba71997b6d661935d2b15094ac7f9f6132dAffected
bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 724376c30af5a57686b223dbcd6188e07d2a1de2Affected
bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 84b89fa877ad576e9ee8130f412cfd592f274508Affected
bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 31b5124d742969ea8bf7a1360596f548ca23e770Affected
bbe3a66c3f5a65fb3d702351bac2a6033944d389 to before 5a811126d38f9767a20cc271b34db7c8efc5a46cAffected

LinuxLinux

5.1Affected
before 5.1Not affected
5.4.189 through 5.4.*Not affected
5.10.110 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.