CVE-2021-47207: ALSA: gus: fix null pointer dereference on pointer block
First published: Wed Apr 10 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: fix null pointer dereference on pointer block The pointer block return from snd_gf1_dma_next_block could be null, so there is a potential null pointer dereference issue. Fix this by adding a null check before dereference.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | <4.4.293 | |
| Linux Kernel | >=4.5<4.9.291 | |
| Linux Kernel | >=4.10<4.14.256 | |
| Linux Kernel | >=4.15<4.19.218 | |
| Linux Kernel | >=4.20<5.4.162 | |
| Linux Kernel | >=5.5<5.10.82 | |
| Linux Kernel | >=5.11<5.15.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/3e28e083dcdf03a18a083f8a47b6bb6b1604b5be
- https://git.kernel.org/stable/c/cb09c760c201f82df83babc92a5ffea0a01807fc
- https://git.kernel.org/stable/c/542fa721594a02d2aee0370a764d306ef48d030c
- https://git.kernel.org/stable/c/ab4c1ebc40f699f48346f634d7b72b9c5193f315
- https://git.kernel.org/stable/c/c6d2cefdd05c4810c416fb8d384b5c377bd977bc
- https://git.kernel.org/stable/c/1ac6cd87d8ddd36c43620f82c4d65b058f725f0f
- https://git.kernel.org/stable/c/16721797dcef2c7c030ffe73a07f39a65f9323c3
- https://git.kernel.org/stable/c/a0d21bb3279476c777434c40d969ea88ca64f9aa
Frequently Asked Questions
What is the severity of CVE-2021-47207?
CVE-2021-47207 has a moderate severity level due to the potential for null pointer dereference in the Linux kernel.
How do I fix CVE-2021-47207?
To fix CVE-2021-47207, update your Linux kernel to a version that is beyond the specified vulnerable ranges.
Which versions of the Linux kernel are affected by CVE-2021-47207?
CVE-2021-47207 affects multiple versions of the Linux kernel from 4.4 up to 5.15.5.
What type of vulnerability is CVE-2021-47207?
CVE-2021-47207 is a null pointer dereference vulnerability found in the ALSA subsystem of the Linux kernel.
Is CVE-2021-47207 present in all Linux distributions?
CVE-2021-47207 can be present in any Linux distribution that uses the vulnerable versions of the Linux kernel.
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/title
- agent/type
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/4.5
- version/linux kernel/4.10
- version/linux kernel/4.15
- version/linux kernel/4.20
- version/linux kernel/5.5
- version/linux kernel/5.11