CVE-2021-47270 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadgets null ptr deref on 10gbps cabling. This avoids a null pointer dereference in f_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm} by simply reusing the 5gbps config for 10gbps.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/10770d2ac0094b053c8897d96d7b2737cd72f7c5
https://git.kernel.org/stable/c/4b289a0f3033f465b4fd51ba995251a7867a2aa2
https://git.kernel.org/stable/c/8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee
https://git.kernel.org/stable/c/90c4d05780d47e14a50e11a7f17373104cd47d25
https://git.kernel.org/stable/c/b4903f7fdc484628d0b8022daf86e2439d3ab4db
https://git.kernel.org/stable/c/beb1e67a5ca8d69703c776db9000527f44c0c93c
https://git.kernel.org/stable/c/f17aae7c4009160f0630a91842a281773976a5bc
https://lore.kernel.org/linux-cve-announce/2024052150-CVE-2021-47270-700e@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47270
https://www.cve.org/CVERecord?id=CVE-2021-47270

History

Wed, 11 Sep 2024 18:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:19:59.874Z

Updated: 2024-09-11T17:32:47.414Z

Reserved: 2024-05-21T13:27:52.127Z

Link: CVE-2021-47270

Vulnrichment

Updated: 2024-08-04T05:32:08.023Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T15:15:15.540

Modified: 2024-05-21T16:54:26.047

Link: CVE-2021-47270

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47270 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47270", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T13:27:52.127Z", "datePublished": "2024-05-21T14:19:59.874Z", "dateUpdated": "2024-09-11T17:32:47.414Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:05:01.567Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: fix various gadgets null ptr deref on 10gbps cabling.\n\nThis avoids a null pointer dereference in\nf_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm}\nby simply reusing the 5gbps config for 10gbps."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/usb/gadget/function/f_ecm.c", "drivers/usb/gadget/function/f_eem.c", "drivers/usb/gadget/function/f_hid.c", "drivers/usb/gadget/function/f_loopback.c", "drivers/usb/gadget/function/f_printer.c", "drivers/usb/gadget/function/f_rndis.c", "drivers/usb/gadget/function/f_serial.c", "drivers/usb/gadget/function/f_sourcesink.c", "drivers/usb/gadget/function/f_subset.c", "drivers/usb/gadget/function/f_tcm.c"], "versions": [{"version": "eaef50c76057", "lessThan": "beb1e67a5ca8", "status": "affected", "versionType": "git"}, {"version": "eaef50c76057", "lessThan": "8cd5f45c1b76", "status": "affected", "versionType": "git"}, {"version": "eaef50c76057", "lessThan": "10770d2ac009", "status": "affected", "versionType": "git"}, {"version": "eaef50c76057", "lessThan": "b4903f7fdc48", "status": "affected", "versionType": "git"}, {"version": "eaef50c76057", "lessThan": "4b289a0f3033", "status": "affected", "versionType": "git"}, {"version": "eaef50c76057", "lessThan": "f17aae7c4009", "status": "affected", "versionType": "git"}, {"version": "eaef50c76057", "lessThan": "90c4d05780d4", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/usb/gadget/function/f_ecm.c", "drivers/usb/gadget/function/f_eem.c", "drivers/usb/gadget/function/f_hid.c", "drivers/usb/gadget/function/f_loopback.c", "drivers/usb/gadget/function/f_printer.c", "drivers/usb/gadget/function/f_rndis.c", "drivers/usb/gadget/function/f_serial.c", "drivers/usb/gadget/function/f_sourcesink.c", "drivers/usb/gadget/function/f_subset.c", "drivers/usb/gadget/function/f_tcm.c"], "versions": [{"version": "4.6", "status": "affected"}, {"version": "0", "lessThan": "4.6", "status": "unaffected", "versionType": "custom"}, {"version": "4.9.273", "lessThanOrEqual": "4.9.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.14.237", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.195", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.126", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.44", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.12.11", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/beb1e67a5ca8d69703c776db9000527f44c0c93c"}, {"url": "https://git.kernel.org/stable/c/8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee"}, {"url": "https://git.kernel.org/stable/c/10770d2ac0094b053c8897d96d7b2737cd72f7c5"}, {"url": "https://git.kernel.org/stable/c/b4903f7fdc484628d0b8022daf86e2439d3ab4db"}, {"url": "https://git.kernel.org/stable/c/4b289a0f3033f465b4fd51ba995251a7867a2aa2"}, {"url": "https://git.kernel.org/stable/c/f17aae7c4009160f0630a91842a281773976a5bc"}, {"url": "https://git.kernel.org/stable/c/90c4d05780d47e14a50e11a7f17373104cd47d25"}], "title": "usb: fix various gadgets null ptr deref on 10gbps cabling.", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.023Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/beb1e67a5ca8d69703c776db9000527f44c0c93c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/10770d2ac0094b053c8897d96d7b2737cd72f7c5", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b4903f7fdc484628d0b8022daf86e2439d3ab4db", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4b289a0f3033f465b4fd51ba995251a7867a2aa2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f17aae7c4009160f0630a91842a281773976a5bc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/90c4d05780d47e14a50e11a7f17373104cd47d25", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47270", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:39:41.783429Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:32:47.414Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/beb1e67a5ca8d69703c776db9000527f44c0c93c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/10770d2ac0094b053c8897d96d7b2737cd72f7c5", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b4903f7fdc484628d0b8022daf86e2439d3ab4db", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4b289a0f3033f465b4fd51ba995251a7867a2aa2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f17aae7c4009160f0630a91842a281773976a5bc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/90c4d05780d47e14a50e11a7f17373104cd47d25", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.023Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47270", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T15:39:41.783429Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:12.416Z"}}], "cna": {"title": "usb: fix various gadgets null ptr deref on 10gbps cabling.", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "eaef50c76057", "lessThan": "beb1e67a5ca8", "versionType": "git"}, {"status": "affected", "version": "eaef50c76057", "lessThan": "8cd5f45c1b76", "versionType": "git"}, {"status": "affected", "version": "eaef50c76057", "lessThan": "10770d2ac009", "versionType": "git"}, {"status": "affected", "version": "eaef50c76057", "lessThan": "b4903f7fdc48", "versionType": "git"}, {"status": "affected", "version": "eaef50c76057", "lessThan": "4b289a0f3033", "versionType": "git"}, {"status": "affected", "version": "eaef50c76057", "lessThan": "f17aae7c4009", "versionType": "git"}, {"status": "affected", "version": "eaef50c76057", "lessThan": "90c4d05780d4", "versionType": "git"}], "programFiles": ["drivers/usb/gadget/function/f_ecm.c", "drivers/usb/gadget/function/f_eem.c", "drivers/usb/gadget/function/f_hid.c", "drivers/usb/gadget/function/f_loopback.c", "drivers/usb/gadget/function/f_printer.c", "drivers/usb/gadget/function/f_rndis.c", "drivers/usb/gadget/function/f_serial.c", "drivers/usb/gadget/function/f_sourcesink.c", "drivers/usb/gadget/function/f_subset.c", "drivers/usb/gadget/function/f_tcm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.6"}, {"status": "unaffected", "version": "0", "lessThan": "4.6", "versionType": "custom"}, {"status": "unaffected", "version": "4.9.273", "versionType": "custom", "lessThanOrEqual": "4.9.*"}, {"status": "unaffected", "version": "4.14.237", "versionType": "custom", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.195", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.126", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.44", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.12.11", "versionType": "custom", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/usb/gadget/function/f_ecm.c", "drivers/usb/gadget/function/f_eem.c", "drivers/usb/gadget/function/f_hid.c", "drivers/usb/gadget/function/f_loopback.c", "drivers/usb/gadget/function/f_printer.c", "drivers/usb/gadget/function/f_rndis.c", "drivers/usb/gadget/function/f_serial.c", "drivers/usb/gadget/function/f_sourcesink.c", "drivers/usb/gadget/function/f_subset.c", "drivers/usb/gadget/function/f_tcm.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/beb1e67a5ca8d69703c776db9000527f44c0c93c"}, {"url": "https://git.kernel.org/stable/c/8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee"}, {"url": "https://git.kernel.org/stable/c/10770d2ac0094b053c8897d96d7b2737cd72f7c5"}, {"url": "https://git.kernel.org/stable/c/b4903f7fdc484628d0b8022daf86e2439d3ab4db"}, {"url": "https://git.kernel.org/stable/c/4b289a0f3033f465b4fd51ba995251a7867a2aa2"}, {"url": "https://git.kernel.org/stable/c/f17aae7c4009160f0630a91842a281773976a5bc"}, {"url": "https://git.kernel.org/stable/c/90c4d05780d47e14a50e11a7f17373104cd47d25"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: fix various gadgets null ptr deref on 10gbps cabling.\n\nThis avoids a null pointer dereference in\nf_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm}\nby simply reusing the 5gbps config for 10gbps."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:05:01.567Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47270", "state": "PUBLISHED", "dateUpdated": "2024-09-11T17:32:47.414Z", "dateReserved": "2024-05-21T13:27:52.127Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T14:19:59.874Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}