CVE-2021-47332: ALSA: usx2y: Don't call free_pages_exact() with NULL address
First published: Tue May 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Don't call free_pages_exact() with NULL address Unlike some other functions, we can't pass NULL pointer to free_pages_exact(). Add a proper NULL check for avoiding possible Oops.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <5.4.134 | |
| Linux Linux kernel | >=5.5<5.10.52 | |
| Linux Linux kernel | >=5.11<5.12.19 | |
| Linux Linux kernel | >=5.13<5.13.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/88262229b778f4f7a896da828d966f94dcb35d19
- https://git.kernel.org/stable/c/7d7f30cf182e55023fa8fde4c084b2d37c6be69d
- https://git.kernel.org/stable/c/bee295f5e03510252d18b25cc1d26230256eb87a
- https://git.kernel.org/stable/c/82e5ee742fdd8874fe996181b87fafe1eb5f1196
- https://git.kernel.org/stable/c/cae0cf651adccee2c3f376e78f30fbd788d0829f
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/remedy
- agent/softwarecombine
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/tags
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/5.5
- version/linux linux kernel/5.11
- version/linux linux kernel/5.13