Description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix potential null dereference on pointer status
There are calls to idxd_cmd_exec that pass a null status pointer however a recent commit has added an assignment to *status that can end up with a null pointer dereference. The function expects a null status pointer sometimes as there is a later assignment to *status where status is first null checked. Fix the issue by null checking status before making the assignment.
Addresses-Coverity: ("Explicit null dereferenced")
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 40e3b5c128645d2ddad12310c7be98758cafb2b0, < 5756f757c72501ef1a16f5f63f940623044180e9; >= 89e3becd8f821e507052e012d2559dcda59f538e, < 2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97; >= 89e3becd8f821e507052e012d2559dcda59f538e, < 7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa; >= 89e3becd8f821e507052e012d2559dcda59f538e, < 28ac8e03c43dfc6a703aa420d18222540b801120; >= 5.10.17, < 5.10.38 |
| Linux | Linux | 5.11 |
References
- https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97Patch
- https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120Patch
- https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9Patch
- https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfaPatch
- https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97Patch
- https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120Patch
- https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9Patch
- https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfaPatch
Timeline
- Published
- Feb 28, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed