In the Linux kernel, the following vulnerability has been resolved:
efi/fdt: fix panic when no valid fdt found
setuparch() would invoke efiinit()->efigetfdtparams(). If no valid fdt found then initialboot_params will be null. So we should stop further fdt processing here. I encountered this issue on risc-v.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47134.json"
[
{
"events": [
{
"introduced": "5.10"
},
{
"fixed": "5.10.43"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.12.10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.13-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.13-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.13-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.13-rc4"
}
]
}
]