Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2021-47476
HistoryMay 22, 2024 - 9:15 a.m.

CVE-2021-47476

2024-05-2209:15:09
Debian Security Bug Tracker
security-tracker.debian.org
2
comedi
ni_usb6501
null-deref
fix
unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%