CVE-2021-47003

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential null dereference on a pointer status in the Linux kernel's dmaengine: idxd component. There are calls to idxd cmd exec that pass a null status pointer, and a recent commit has added an assignment to *status that can end up with a null pointer dereference. The function expects a null status pointer sometimes, as there is a later assignment to *status where status is first null checked. The issue is fixed by null checking status before making the assignment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.