CVE-2021-47120

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: magicmouse: fix NULL-deref on disconnect

Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned success instead of -ENODEV when the check failed. This means that the remove callback will dereference the never-initialised driver data pointer when the driver is later unbound (e.g. on USB disconnect).

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 9d7b18668956c411a422d04c712994c5fdb23a4b, < 368c5d45a87e1bcc7f1e98e0c255c37b7b12c5d6; >= 9d7b18668956c411a422d04c712994c5fdb23a4b, < b5d013c4c76b276890135b5d32803c4c63924b77; >= 9d7b18668956c411a422d04c712994c5fdb23a4b, < 9cf27473f21913a3eaf4702dd2a25415afd5f33f; >= 9d7b18668956c411a422d04c712994c5fdb23a4b, < 4b4f6cecca446abcb686c6e6c451d4f1ec1a7497
LinuxLinux4.20

References

Timeline

Published
Mar 15, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-471215.5In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in cfusbl_device_notify In case of caif_enrCVE-2021-471225.5In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caif_device_notify In case of caif_enrolCVE-2021-471237.8In the Linux kernel, the following vulnerability has been resolved: io_uring: fix ltout double free on completion race Always remove linkeCVE-2021-471245.5In the Linux kernel, the following vulnerability has been resolved: io_uring: fix link timeout refs WARNING: CPU: 0 PID: 10242 at lib/refcCVE-2021-471255.5In the Linux kernel, the following vulnerability has been resolved: sch_htb: fix refcount leak in htb_parent_to_leaf_offload The commit aeCVE-2021-471267.8In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions RCVE-2021-471275.5In the Linux kernel, the following vulnerability has been resolved: ice: track AF_XDP ZC enabled queues in bitmap Commit c7a219048e45 ("icCVE-2021-471285.5In the Linux kernel, the following vulnerability has been resolved: bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks ComCVE-2021-471297.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: skip expectations for confirmed conntrack nft_ct_exCVE-2021-471307.5In the Linux kernel, the following vulnerability has been resolved: nvmet: fix freeing unallocated p2pmem In case p2p device was found butCVE-2021-471317.8In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix use-after-free after the TLS device goes down and up WhenCVE-2021-471327.1In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sk_forward_memory corruption on retransmission MPTCP sk_for
CVE-2021-47120: Medium severity, CVSS 5.5 | Vulnix