CVE-2021-47003: dmaengine: idxd: Fix potential null dereference on pointer status
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix potential null dereference on pointer status
There are calls to idxdcmdexec that pass a null status pointer however a recent commit has added an assignment to status that can end up with a null pointer dereference. The function expects a null status pointer sometimes as there is a later assignment to status where status is first null checked. Fix the issue by null checking status before making the assignment.
Addresses-Coverity: ("Explicit null dereferenced")
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47003?
CVE-2021-47003 has a moderate severity rating due to the potential null dereference issue that could affect system stability.
How do I fix CVE-2021-47003?
To fix CVE-2021-47003, update the Linux kernel to the latest stable version that is beyond the affected versions.
Which versions of the Linux kernel are affected by CVE-2021-47003?
CVE-2021-47003 affects Linux kernel versions between 5.10.17 and 5.10.38, as well as 5.11 and 5.12 up to 5.12.5.
Can CVE-2021-47003 lead to system crashes?
Yes, CVE-2021-47003 could potentially lead to system crashes due to the null dereference issue.
Is CVE-2021-47003 a local or remote vulnerability?
CVE-2021-47003 is considered a local vulnerability as it requires local access for exploitation.