CVE-2021-47270

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: fix various gadgets null ptr deref on 10gbps cabling.

This avoids a null pointer dereference in f_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm} by simply reusing the 5gbps config for 10gbps.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= eaef50c760576bca70b87fdc26eb87a3660529f8, < beb1e67a5ca8d69703c776db9000527f44c0c93c; >= eaef50c760576bca70b87fdc26eb87a3660529f8, < 8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee; >= eaef50c760576bca70b87fdc26eb87a3660529f8, < 10770d2ac0094b053c8897d96d7b2737cd72f7c5; >= eaef50c760576bca70b87fdc26eb87a3660529f8, < b4903f7fdc484628d0b8022daf86e2439d3ab4db; >= eaef50c760576bca70b87fdc26eb87a3660529f8, < 4b289a0f3033f465b4fd51ba995251a7867a2aa2; >= eaef50c760576bca70b87fdc26eb87a3660529f8, < f17aae7c4009160f0630a91842a281773976a5bc; >= eaef50c760576bca70b87fdc26eb87a3660529f8, < 90c4d05780d47e14a50e11a7f17373104cd47d25
LinuxLinux4.6

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-472715.5In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler Patch fixesCVE-2021-472725.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL CVE-2021-472735.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled WheCVE-2021-472747.8In the Linux kernel, the following vulnerability has been resolved: tracing: Correct the length check which causes memory corruption We'veCVE-2021-472755.5In the Linux kernel, the following vulnerability has been resolved: bcache: avoid oversized read request in cache missing code path In theCVE-2021-472765.5In the Linux kernel, the following vulnerability has been resolved: ftrace: Do not blindly read the ip address in ftrace_bug() It was repoCVE-2021-472777.1In the Linux kernel, the following vulnerability has been resolved: kvm: avoid speculation-based attacks from out-of-range memslot accessesCVE-2021-472787.8In the Linux kernel, the following vulnerability has been resolved: bus: mhi: pci_generic: Fix possible use-after-free in mhi_pci_remove() CVE-2021-472795.5In the Linux kernel, the following vulnerability has been resolved: usb: misc: brcmstb-usb-pinmap: check return value after calling platforCVE-2021-472807.0In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drm_getunique() There is a time-of-cheCVE-2021-472817.0In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix race of snd_seq_timer_open() The timer instance per queCVE-2021-472827.8In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit
CVE-2021-47270: Medium severity, CVSS 5.5 | Vulnix