Log in Start free

Vulnerability · Published Feb 26, 2025 · Assigned by Linux

CVE-2021-47652video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 82.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:fb_destroy_modelist+0x38/0x100 ... Call Trace: ufx_usb_probe.cold+0x2b5/0xac1 [smscufx] usb_probe_interface+0x1aa/0x3c0 [usbcore] really_probe+0x167/0x460 ... ret_from_fork+0x1f/0x30 If fb_alloc_cmap() fails in ufx_usb_probe(), fb_destroy_modelist() will be called to destroy modelist in the error handling path. But modelist has not been initialized yet, so it will result in null-ptr-deref. Initialize modelist before calling fb_alloc_cmap() to fix this bug.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.17.3-1DEBIAN-CVE-2021-47652
Debian:13linux5.17.3-1DEBIAN-CVE-2021-47652
Debian:14linux5.17.3-1DEBIAN-CVE-2021-47652
Ubuntu:22.04:LTSlinux5.15.0-37.39UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-aws5.15.0-1011.14UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-azure5.15.0-1010.12UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-gcp5.15.0-1008.12UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-gke5.15.0-1008.10UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-ibm5.15.0-1007.8UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1008.11UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-kvm5.15.0-1010.11UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-37.39UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-oracle5.15.0-1009.12UBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-raspi5.15.0-1011.13UBUNTU-CVE-2021-47652
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-47652
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2021-47652

Affected products (as reported)

VendorProductVersions
Linux Linux 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before d1b6a1f0c23b7164250479bf92e2893291dca5393c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 0fd28daec73525382e5c992db8743bf76e42cd5c3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before dd3a6cc7385b89ec2303f39dfc3bafa4e24cec4b3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before da8b269cc0a2526ebeaccbe2484c999eb0f822cf3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 64ec3e678d76419f207b9cdd338dda438ca10b1c3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before c420b540db4b5d69de0a36d8b9d9a6a79a04f05a3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before d396c651e2b508b6179bb678cc029f3becbf51703c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 9280ef235b05e8f19f8bc6d547b992f0a0ef398d
Linux Linux 3.2

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References