What’s Vulnerable › Vulnerabilities

CVE-2021-47380: HID: amd_sfh: Fix potential NULL pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-08-04
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Fix potential NULL pointer dereference devm_add_action_or_reset() can suddenly invoke amd_mp2_pci_remove() at registration that will cause NULL pointer dereference since corresponding data is not initialized yet. The patch moves initialization of data before devm_add_action_or_reset(). Found by Linux Driver Verification project (linuxtesting.org). [jkosina@suse.cz: rebase]

Affected products

• Linux kernel: before 5.14.10; 5.15-rc1, 5.15-rc2, 5.15-rc3 — fixed in 5.14.10

How to fix

Upgrade to a fixed version: Linux kernel 5.14.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/283e4bee701dfcd409dd293f19a268bb2bc8ff38
• https://git.kernel.org/stable/c/d46ef750ed58cbeeba2d9a55c99231c30a172764
• https://git.kernel.org/stable/c/283e4bee701dfcd409dd293f19a268bb2bc8ff38
• https://git.kernel.org/stable/c/d46ef750ed58cbeeba2d9a55c99231c30a172764

Get alerted when CVE-2021-47380 or the next vulnerability affects your stack