Kyle Meyer

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a NULL pointer dereference in the `upi fill topology()` function. To avoid out-of-bound access, the code now gets the logical socket id instead of the physical id in `discover upi topology()`. This change prevents a NULL pointer dereference in `upi fill topology()`. The vulnerability may allow an attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.