Vulnerability of the usb_charger_get_property() function in the drivers/usb/common/usb-conn-gpio.c module – The driver for supporting USB devices in Linux kernels allows a hacker to cause a service failure.

🗓️ 23 Jun 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerability in usb_charger_get_property() in usb-conn-gpio.c allows NULL pointer dereference, risking system failure.

Reporter	Title	Published	Views	Family All 17
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
Circl	CVE-2021-47331	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	21 May 202400:00	–	cnnvd
CVE	CVE-2021-47331	21 May 202414:35	–	cve
Cvelist	CVE-2021-47331 usb: common: usb-conn-gpio: fix NULL pointer dereference of charger	21 May 202414:35	–	cvelist
Debian CVE	CVE-2021-47331	21 May 202414:35	–	debiancve
NVD	CVE-2021-47331	21 May 202415:15	–	nvd
OSV	DEBIAN-CVE-2021-47331	21 May 202415:15	–	osv
OSV	UBUNTU-CVE-2021-47331	21 May 202415:15	–	osv
Positive Technologies	PT-2024-11330 · Linux +1 · Linux Kernel +1	21 May 202100:00	–	ptsecurity

Source	Link
git	www.git.kernel.org/stable/c/880287910b1892ed2cb38977893b947382a09d21
git	www.git.kernel.org/stable/c/436906fd248e018403bcda61a9311d9af02912f1
git	www.git.kernel.org/stable/c/8e8d910e9a3a7fba86140aff4924c30955ab228b
git	www.git.kernel.org/stable/c/1a133a0996d6b4c83509d570ed4edcba34c44f25
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024052134-CVE-2021-47331-283e@gregkh/
git	www.git.kernel.org/linus/880287910b1892ed2cb38977893b947382a09d21
git	www.git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.52
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.19

23 Jun 2025 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.6

CVSS 35.5

EPSS0.00041

usb_charger_get_property usb conn gpio null pointer system failure linux kernel