Wind River Support Network

HomeDefectsLIN1019-11176
Not to be fixed

LIN1019-11176 : Security Advisory - linux - CVE-2021-47003

Created: Feb 28, 2024    Updated: Mar 22, 2024
Resolved Date: Mar 22, 2024
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix potential null dereference on pointer status

There are calls to idxd_cmd_exec that pass a null status pointer however
a recent commit has added an assignment to *status that can end up
with a null pointer dereference.  The function expects a null status
pointer sometimes as there is a later assignment to *status where
status is first null checked.  Fix the issue by null checking status
before making the assignment.

Addresses-Coverity: ("Explicit null dereferenced")

CREATE(Triage):(User=admin) CVE-2021-47003 (https://nvd.nist.gov/vuln/detail/CVE-2021-47003)
Live chat
Online