In the Linux kernel, the following vulnerability has been resolved:
ACPI: fix NULL pointer dereference
Commit 71f642833284 ("ACPI: utils: Fix reference counting in foreachacpidevmatch()") started doing "acpidevput()" on a pointer that was possibly NULL. That fails miserably, because that helper inline function is not set up to handle that case.
Just make acpidevput() silently accept a NULL pointer, rather than calling down to put_device() with an invalid offset off that NULL pointer.
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.139"
}
]
},
{
"events": [
{
"introduced": "5.5"
},
{
"fixed": "5.10.57"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.13.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.14-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.14-rc2"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47289.json"