First published: Fri Mar 01 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ideapad-laptop: fix a NULL pointer dereference The third parameter of dytc_cql_command should not be NULL since it will be dereferenced immediately.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=5.12<5.12.7 | |
Linux Kernel | =5.13-rc1 | |
Linux Kernel | =5.13-rc2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-47079 has been assigned a severity rating that may vary depending on the specific Linux kernel version affected.
To fix CVE-2021-47079, users should update their Linux kernel to a version that is not vulnerable, specifically a version beyond 5.12.7.
CVE-2021-47079 affects Linux kernel versions from 5.12 up to 5.12.7 and also includes 5.13-rc1 and 5.13-rc2.
CVE-2021-47079 is a NULL pointer dereference vulnerability occurring in the ideapad-laptop driver, which can lead to system instability.
While the best option is to apply patches, temporary mitigations may involve disabling the affected driver until the kernel is updated.