CVE-2021-46930

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: mtu3: fix list_head check warning

This is caused by uninitialization of list_head.

BUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4

Call trace: dump_backtrace+0x0/0x298 show_stack+0x24/0x34 dump_stack+0x130/0x1a8 print_address_description+0x88/0x56c __kasan_report+0x1b8/0x2a0 kasan_report+0x14/0x20 __asan_load8+0x9c/0xa0 __list_del_entry_valid+0x34/0xe4 mtu3_req_complete+0x4c/0x300 [mtu3] mtu3_gadget_stop+0x168/0x448 [mtu3] usb_gadget_unregister_driver+0x204/0x3a0 unregister_gadget_item+0x44/0xa4

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 83374e035b6286731c5aa617844c7b724294c2a7, < 585e2b244dda7ea733274e4b8fa27853d625d3bf; >= 83374e035b6286731c5aa617844c7b724294c2a7, < 3b6efe0b7ba03cc2acf0694b46d6ff33c5b4c295; >= 83374e035b6286731c5aa617844c7b724294c2a7, < 249ddfbe00570d6dc76208e88017937d4d374c79; >= 83374e035b6286731c5aa617844c7b724294c2a7, < 8c313e3bfd9adae8d5c4ba1cc696dcbc86fbf9bf
LinuxLinux5.2

References

Timeline

Published
Feb 27, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-469315.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq FunctiCVE-2021-469325.5In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot CVE-2021-469335.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clearCVE-2021-469343.3In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warnCVE-2021-469355.5In the Linux kernel, the following vulnerability has been resolved: binder: fix async_free_space accounting for empty parcels In 4.13, comCVE-2021-469367.8In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue wCVE-2021-469375.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' DCVE-2021-469387.8In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blk_mq_tag_set in dev remove after table loadCVE-2021-469395.5In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure trace_clock_global() to never block It was reportCVE-2021-469405.5In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting TCVE-2021-469415.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the CVE-2021-469425.5In the Linux kernel, the following vulnerability has been resolved: io_uring: fix shared sqpoll cancellation hangs [ 736.982891] INFO: ta
CVE-2021-46930: Medium severity, CVSS 5.5 | Vulnix