CVE-2021-47270

Summary

In the Linux kernel, the following vulnerability has been resolved:

usb: fix various gadgets null ptr deref on 10gbps cabling.

This avoids a null pointer dereference in f_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm} by simply reusing the 5gbps config for 10gbps.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxeaef50c760576bca70b87fdc26eb87a3660529f8 < beb1e67a5ca8d69703c776db9000527f44c0c93caffected
LinuxLinuxeaef50c760576bca70b87fdc26eb87a3660529f8 < 8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7eeaffected
LinuxLinuxeaef50c760576bca70b87fdc26eb87a3660529f8 < 10770d2ac0094b053c8897d96d7b2737cd72f7c5affected
LinuxLinuxeaef50c760576bca70b87fdc26eb87a3660529f8 < b4903f7fdc484628d0b8022daf86e2439d3ab4dbaffected
LinuxLinuxeaef50c760576bca70b87fdc26eb87a3660529f8 < 4b289a0f3033f465b4fd51ba995251a7867a2aa2affected
LinuxLinuxeaef50c760576bca70b87fdc26eb87a3660529f8 < f17aae7c4009160f0630a91842a281773976a5bcaffected
LinuxLinuxeaef50c760576bca70b87fdc26eb87a3660529f8 < 90c4d05780d47e14a50e11a7f17373104cd47d25affected
LinuxLinux4.6affected
LinuxLinux0 < 4.6unaffected
LinuxLinux4.9.273 <= 4.9.*unaffected
LinuxLinux4.14.237 <= 4.14.*unaffected
LinuxLinux4.19.195 <= 4.19.*unaffected
LinuxLinux5.4.126 <= 5.4.*unaffected
LinuxLinux5.10.44 <= 5.10.*unaffected
LinuxLinux5.12.11 <= 5.12.*unaffected
LinuxLinux5.13 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References