CVE-2021-47289

Advisory lineage Upstream: 0 Downstream: 10
Analyzed
Published: 21 May 2024, 14:35
Last modified:11 May 2026, 13:51

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 May 2024, 14:35
Published
Vulnerability first disclosed
11 May 2026, 13:51
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: fix NULL pointer dereference Commit 71f642833284 ("ACPI: utils: Fix reference counting in for_each_acpi_dev_match()") started doing "acpi_dev_put()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case. Just make acpi_dev_put() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 3%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ fe066621c7966fe47fa17c6be6fd81adb3c0509f, < 38f54217b423c0101d03a00feec6fb8ec608b12e | ≥ fe066621c7966fe47fa17c6be6fd81adb3c0509f, < cae3fa3d8165761f3000f523b11cfa1cd35206bc | ≥ fe066621c7966fe47fa17c6be6fd81adb3c0509f, < ccf23a0888077a25a0793a746c3941db2a7562e4 | ≥ fe066621c7966fe47fa17c6be6fd81adb3c0509f, < fc68f42aa737dc15e7665a4101d4168aadb8e4c4 | 5.2

  • linux•linux_kernel

    < 5.4.139 | ≥ 5.5, < 5.10.57 | ≥ 5.11, < 5.13.6 | 5.14:rc1 | 5.14:rc2

References (4)