CVE-2021-47270 usb: fix various gadgets null ptr deref on 10gbps cabling.

2024-05-2114:19:59

Linux

www.cve.org

usb

vulnerability

linux

kernel

10gbps

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

In the Linux kernel, the following vulnerability has been resolved:

usb: fix various gadgets null ptr deref on 10gbps cabling.

This avoids a null pointer dereference in
f_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm}
by simply reusing the 5gbps config for 10gbps.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/gadget/function/f_ecm.c",
      "drivers/usb/gadget/function/f_eem.c",
      "drivers/usb/gadget/function/f_hid.c",
      "drivers/usb/gadget/function/f_loopback.c",
      "drivers/usb/gadget/function/f_printer.c",
      "drivers/usb/gadget/function/f_rndis.c",
      "drivers/usb/gadget/function/f_serial.c",
      "drivers/usb/gadget/function/f_sourcesink.c",
      "drivers/usb/gadget/function/f_subset.c",
      "drivers/usb/gadget/function/f_tcm.c"
    ],
    "versions": [
      {
        "version": "eaef50c76057",
        "lessThan": "beb1e67a5ca8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "eaef50c76057",
        "lessThan": "8cd5f45c1b76",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "eaef50c76057",
        "lessThan": "10770d2ac009",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "eaef50c76057",
        "lessThan": "b4903f7fdc48",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "eaef50c76057",
        "lessThan": "4b289a0f3033",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "eaef50c76057",
        "lessThan": "f17aae7c4009",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "eaef50c76057",
        "lessThan": "90c4d05780d4",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/gadget/function/f_ecm.c",
      "drivers/usb/gadget/function/f_eem.c",
      "drivers/usb/gadget/function/f_hid.c",
      "drivers/usb/gadget/function/f_loopback.c",
      "drivers/usb/gadget/function/f_printer.c",
      "drivers/usb/gadget/function/f_rndis.c",
      "drivers/usb/gadget/function/f_serial.c",
      "drivers/usb/gadget/function/f_sourcesink.c",
      "drivers/usb/gadget/function/f_subset.c",
      "drivers/usb/gadget/function/f_tcm.c"
    ],
    "versions": [
      {
        "version": "4.6",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.6",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.9.273",
        "lessThanOrEqual": "4.9.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.14.237",
        "lessThanOrEqual": "4.14.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.195",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.126",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.44",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.12.11",
        "lessThanOrEqual": "5.12.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.13",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]