In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbdrequestendio(), READCOMPLETEDWITH_ERROR is passed to __reqmod() with a NULL peerdevice: __reqmod(req, what, NULL, &m); The READCOMPLETEDWITHERROR handler then unconditionally passes this NULL peerdevice to drbdsetoutofsync(), which dereferences it, causing a null-pointer dereference. Fix this by obtaining the peerdevice via firstpeerdevice(device), matching how drbdreqdestroy() handles the same situation.