PT-2024-11331

CVE-2021-47332

·

Published

2021-05-17

·

Updated

2024-12-24

Description by

CVSS 4.0
5.7
Medium
MetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.3
Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the ALSA component. The problem arises when the function free pages exact() is called with a NULL address, which can lead to a system compromise. The issue is resolved by adding a proper NULL check to avoid possible errors.
Recommendations As a temporary workaround, consider adding a NULL check before calling the free pages exact() function to prevent potential system compromise. Upgrade to a version of the Linux kernel that is 5.13.3 or later to fully resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2024_2185-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2185-1
Found an issue in the description? Have something to add? Feel free to write us 👾