CVE-2021-47003

dmaengine: idxd: Fix potential null dereference on pointer status

MEDIUM
5.5
CVSS Score
Published: February 28, 2024 at 08:13 AM UTC
Updated: June 17, 2026 at 04:16 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxd_cmd_exec that pass a null status pointer however a recent commit has added an assignment to *status that can end up with a null pointer dereference. The function expects a null status pointer sometimes as there is a later assignment to *status where status is first null checked. Fix the issue by null checking status before making the assignment. Addresses-Coverity: ("Explicit null dereferenced")

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.10.17 ≤ v < 5.10.385.11 ≤ v < 5.11.225.11 ≤ v < 5.12.55.11 ≤ v < 5.135.12 ≤ v < 5.12.540e3b5c128645d2ddad12310c7be98758cafb2b05.10.175.1189e3becd8f821e507052e012d2559dcda59f538e
Vendor states this is fixed in 2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97 (fixed)
Vendor states this is fixed in 28ac8e03c43dfc6a703aa420d18222540b801120 (fixed)
Vendor states this is fixed in 5756f757c72501ef1a16f5f63f940623044180e9 (fixed)
Vendor states this is fixed in 7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa (fixed)
Vendor states this is fixed in 5.10.38 (unaffected)
Vendor states this is fixed in 5.11 (unaffected)
Vendor states this is fixed in 5.11.22 (unaffected)
Vendor states this is fixed in 5.12.5 (unaffected)
Vendor states this is fixed in 5.13 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2280b4cc29d8cdd2be3d1b2d1ea4f958e2131c97
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/28ac8e03c43dfc6a703aa420d18222540b801120
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5756f757c72501ef1a16f5f63f940623044180e9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7bc402f843e7817a4a808e7b9ab0bcd7ffd55bfa

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card