CVE-2021-47631

MEDIUM

Linux Kernel 2.6.33-4.9.311 - NULL Pointer Dereference in ARM davinci da850-evm EMAC Configuration

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850_evm_config_emac() when booting multi_v5_defconfig in QEMU under the palmetto-bmc machine: Unable to handle kernel NULL pointer dereference at virtual address 00000020 pgd = (ptrval) [00000020] *pgd=00000000 Internal error: Oops: 5 [#1] PREEMPT ARM Modules linked in: CPU: 0 PID: 1 Comm: swapper Not tainted 5.15.0 #1 Hardware name: Generic DT based system PC is at da850_evm_config_emac+0x1c/0x120 LR is at do_one_initcall+0x50/0x1e0 The emac_pdata pointer in soc_info is NULL because davinci_soc_info only gets populated on davinci machines but da850_evm_config_emac() is called on all machines via device_initcall(). Move the rmii_en assignment below the machine check so that it is only dereferenced when running on a supported SoC.

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 12.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (20)
Linux/Linux < 2.6.33
Linux/Linux 2.6.33
Linux/Linux 4.14.276 - 4.14.*
Linux/Linux 4.19.239 - 4.19.*
Linux/Linux 4.9.311 - 4.9.*
Linux/Linux 5.10.112 - 5.10.*
Linux/Linux 5.15.35 - 5.15.*
Linux/Linux 5.17.4 - 5.17.*
Linux/Linux 5.18
Linux/Linux 5.4.190 - 5.4.*
... and 10 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026