Log in Start free

Vulnerability · Published May 22, 2024 · Assigned by Linux

CVE-2021-47476comedi: ni_usb6501: fix NULL-deref in command paths

Medium 4.6

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.6Medium
Exploit odds (30 days)0.4%top 66.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.15.3-1DEBIAN-CVE-2021-47476
Debian:13linux5.15.3-1DEBIAN-CVE-2021-47476
Debian:14linux5.15.3-1DEBIAN-CVE-2021-47476
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-47476
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-47476
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-47476

Affected products (as reported)

VendorProductVersions
Linux Linux a03bb00e50ab4c07107da58a52a0bff7943f360c – before 58478143771b20ab219937b1c30a706590a59224a03bb00e50ab4c07107da58a52a0bff7943f360c – before aa39738423503825625853b643b9e99d11c23816a03bb00e50ab4c07107da58a52a0bff7943f360c – before df7b1238f3b599a0b9284249772cdfd1ea83a632a03bb00e50ab4c07107da58a52a0bff7943f360c – before bc51111bf6e8e7b6cc94b133e4c291273a16acd1a03bb00e50ab4c07107da58a52a0bff7943f360c – before b0156b7c9649d8f55a2ce3d3258509f1b2a181c3a03bb00e50ab4c07107da58a52a0bff7943f360c – before ef143dc0c3defe56730ecd3a9de7b3e1d7e557c1a03bb00e50ab4c07107da58a52a0bff7943f360c – before 4a9d43cb5d5f39fa39fc1da438517004cc95f7eaa03bb00e50ab4c07107da58a52a0bff7943f360c – before d6a727a681a39ae4f73081a9bedb45d14f95bdd1
Linux Linux 3.18

Weakness: CWE-476 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References