CVE-2021-47631

ARM: davinci: da850-evm: Avoid NULL pointer dereference

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 01:54 AM UTC
Updated: June 17, 2026 at 04:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850_evm_config_emac() when booting multi_v5_defconfig in QEMU under the palmetto-bmc machine: Unable to handle kernel NULL pointer dereference at virtual address 00000020 pgd = (ptrval) [00000020] *pgd=00000000 Internal error: Oops: 5 [#1] PREEMPT ARM Modules linked in: CPU: 0 PID: 1 Comm: swapper Not tainted 5.15.0 #1 Hardware name: Generic DT based system PC is at da850_evm_config_emac+0x1c/0x120 LR is at do_one_initcall+0x50/0x1e0 The emac_pdata pointer in soc_info is NULL because davinci_soc_info only gets populated on davinci machines but da850_evm_config_emac() is called on all machines via device_initcall(). Move the rmii_en assignment below the machine check so that it is only dereferenced when running on a supported SoC.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.33 ≤ v < 4.14.2762.6.33 ≤ v < 4.19.2392.6.33 ≤ v < 4.9.3112.6.33 ≤ v < 5.10.1122.6.33 ≤ v < 5.15.352.6.33 ≤ v < 5.17.42.6.33 ≤ v < 5.182.6.33 ≤ v < 5.4.1904.10 ≤ v < 4.14.2764.15 ≤ v < 4.19.2394.20 ≤ v < 5.4.1905.11 ≤ v < 5.15.355.16 ≤ v < 5.17.45.5 ≤ v < 5.10.1125.18 rc15.18 rc2bae105879f2f2404155da6f50b3636193d228a62
Vendor states this is fixed in 0940795c6834fbe7705acc5c3d4b2f7a5f67527a (fixed)
Vendor states this is fixed in 0a312ec66a03133d28570f07bc52749ccfef54da (fixed)
Vendor states this is fixed in 83a1cde5c74bfb44b49cb2a940d044bb2380f4ea (fixed)
Vendor states this is fixed in 89931d4762572aaee6edbe5673d41f8082de110f (fixed)
Vendor states this is fixed in a12b356d45cbb6e8a1b718d1436b3d6239a862f3 (fixed)
Vendor states this is fixed in c06f476e5b74bcabb8c4a2fba55864a37e62843b (fixed)
Vendor states this is fixed in c5628533a3ece64235d04fe11ec44d2be99e423d (fixed)
Vendor states this is fixed in c64e2ed5cc376e137e572babfd2edc38b2cfb61b (fixed)
Vendor states this is fixed in 2.6.33 (unaffected)
Vendor states this is fixed in 4.14.276 (unaffected)
Vendor states this is fixed in 4.19.239 (unaffected)
Vendor states this is fixed in 4.9.311 (unaffected)
Vendor states this is fixed in 5.10.112 (unaffected)
Vendor states this is fixed in 5.15.35 (unaffected)
Vendor states this is fixed in 5.17.4 (unaffected)
Vendor states this is fixed in 5.18 (unaffected)
Vendor states this is fixed in 5.4.190 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0940795c6834fbe7705acc5c3d4b2f7a5f67527a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0a312ec66a03133d28570f07bc52749ccfef54da
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/83a1cde5c74bfb44b49cb2a940d044bb2380f4ea
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/89931d4762572aaee6edbe5673d41f8082de110f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a12b356d45cbb6e8a1b718d1436b3d6239a862f3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c06f476e5b74bcabb8c4a2fba55864a37e62843b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c5628533a3ece64235d04fe11ec44d2be99e423d
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c64e2ed5cc376e137e572babfd2edc38b2cfb61b

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card