CVE-2021-47332

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.3

Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the ALSA component. The problem arises when the function free pages exact() is called with a NULL address, which can lead to a system compromise. The issue is resolved by adding a proper NULL check to avoid possible errors.

Recommendations As a temporary workaround, consider adding a NULL check before calling the free pages exact() function to prevent potential system compromise. Upgrade to a version of the Linux kernel that is 5.13.3 or later to fully resolve the issue.