PT-2024-11331
CVE-2021-47332
·
Published
2021-05-17
·
Updated
2024-12-24
Description by
CVSS 4.0
5.7
MediumMetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.13.3
Description
A null pointer dereference issue has been identified in the Linux kernel, specifically in the ALSA component. The problem arises when the function
free pages exact() is called with a NULL address, which can lead to a system compromise. The issue is resolved by adding a proper NULL check to avoid possible errors.Recommendations
As a temporary workaround, consider adding a NULL check before calling the
free pages exact() function to prevent potential system compromise.
Upgrade to a version of the Linux kernel that is 5.13.3 or later to fully resolve the issue.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾