CVE-2021-47495 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: usbnet: sanity check for maxpacket maxpacket of 0 makes no sense and oopses as we need to divide by it. Give up. V2: fixed typo in log and stylistic issues

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Redhat	Enterprise Linux

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.8.1.rt7.349.el8_10	cpe:/a:redhat:enterprise_linux:8::nfv	RHSA-2024:4352	2024-07-08T00:00:00Z
kernel-0:4.18.0-553.8.1.el8_10	cpe:/o:redhat:enterprise_linux:8	RHSA-2024:4211	2024-07-02T00:00:00Z

References

Link	Providers
https://git.kernel.org/stable/c/002d82227c0abe29118cf80f7e2f396b22d448ed
https://git.kernel.org/stable/c/397430b50a363d8b7bdda00522123f82df6adc5e
https://git.kernel.org/stable/c/492140e45d2bf27c1014243f8616a9b612144e20
https://git.kernel.org/stable/c/524f333e98138d909a0a0c574a9ff6737dce2767
https://git.kernel.org/stable/c/693ecbe8f799405f8775719deedb1f76265d375a
https://git.kernel.org/stable/c/74b3b27cf9fecce00cd8918b7882fd81191d0aa4
https://git.kernel.org/stable/c/7e8b6a4f18edee070213cb6a77118e8a412253c5
https://git.kernel.org/stable/c/b9eba0a4a527e04d712f0e0401e5391ef124b33e
https://lore.kernel.org/linux-cve-announce/2024052242-CVE-2021-47495-a5f8@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47495
https://www.cve.org/CVERecord?id=CVE-2021-47495

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-22T08:19:42.732Z

Updated: 2024-08-04T05:39:59.809Z

Reserved: 2024-05-22T06:20:56.202Z

Link: CVE-2021-47495

Vulnrichment

Updated: 2024-08-04T05:39:59.809Z

NVD

Status : Awaiting Analysis

Published: 2024-05-22T09:15:11.353

Modified: 2024-05-22T12:46:53.887

Link: CVE-2021-47495

Redhat

Severity : Low

Publid Date: 2024-05-22T00:00:00Z

Links: CVE-2021-47495 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47495", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-22T06:20:56.202Z", "datePublished": "2024-05-22T08:19:42.732Z", "dateUpdated": "2024-08-04T05:39:59.809Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:08:57.263Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbnet: sanity check for maxpacket\n\nmaxpacket of 0 makes no sense and oopses as we need to divide\nby it. Give up.\n\nV2: fixed typo in log and stylistic issues"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/usb/usbnet.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "b9eba0a4a527", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "524f333e9813", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "74b3b27cf9fe", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "002d82227c0a", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "492140e45d2b", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "693ecbe8f799", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "7e8b6a4f18ed", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "397430b50a36", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/usb/usbnet.c"], "versions": [{"version": "4.4.291", "lessThanOrEqual": "4.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.9.289", "lessThanOrEqual": "4.9.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.14.254", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.215", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.157", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.77", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.14.16", "lessThanOrEqual": "5.14.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.15", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/b9eba0a4a527e04d712f0e0401e5391ef124b33e"}, {"url": "https://git.kernel.org/stable/c/524f333e98138d909a0a0c574a9ff6737dce2767"}, {"url": "https://git.kernel.org/stable/c/74b3b27cf9fecce00cd8918b7882fd81191d0aa4"}, {"url": "https://git.kernel.org/stable/c/002d82227c0abe29118cf80f7e2f396b22d448ed"}, {"url": "https://git.kernel.org/stable/c/492140e45d2bf27c1014243f8616a9b612144e20"}, {"url": "https://git.kernel.org/stable/c/693ecbe8f799405f8775719deedb1f76265d375a"}, {"url": "https://git.kernel.org/stable/c/7e8b6a4f18edee070213cb6a77118e8a412253c5"}, {"url": "https://git.kernel.org/stable/c/397430b50a363d8b7bdda00522123f82df6adc5e"}], "title": "usbnet: sanity check for maxpacket", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47495", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-22T15:49:07.936135Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:15:06.481Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:39:59.809Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b9eba0a4a527e04d712f0e0401e5391ef124b33e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/524f333e98138d909a0a0c574a9ff6737dce2767", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/74b3b27cf9fecce00cd8918b7882fd81191d0aa4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/002d82227c0abe29118cf80f7e2f396b22d448ed", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/492140e45d2bf27c1014243f8616a9b612144e20", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/693ecbe8f799405f8775719deedb1f76265d375a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7e8b6a4f18edee070213cb6a77118e8a412253c5", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/397430b50a363d8b7bdda00522123f82df6adc5e", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b9eba0a4a527e04d712f0e0401e5391ef124b33e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/524f333e98138d909a0a0c574a9ff6737dce2767", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/74b3b27cf9fecce00cd8918b7882fd81191d0aa4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/002d82227c0abe29118cf80f7e2f396b22d448ed", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/492140e45d2bf27c1014243f8616a9b612144e20", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/693ecbe8f799405f8775719deedb1f76265d375a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7e8b6a4f18edee070213cb6a77118e8a412253c5", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/397430b50a363d8b7bdda00522123f82df6adc5e", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:39:59.809Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47495", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-22T15:49:07.936135Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:25.542Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "usbnet: sanity check for maxpacket", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "b9eba0a4a527", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "524f333e9813", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "74b3b27cf9fe", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "002d82227c0a", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "492140e45d2b", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "693ecbe8f799", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "7e8b6a4f18ed", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "397430b50a36", "versionType": "git"}], "programFiles": ["drivers/net/usb/usbnet.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "4.4.291", "versionType": "custom", "lessThanOrEqual": "4.4.*"}, {"status": "unaffected", "version": "4.9.289", "versionType": "custom", "lessThanOrEqual": "4.9.*"}, {"status": "unaffected", "version": "4.14.254", "versionType": "custom", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.215", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.157", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.77", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.14.16", "versionType": "custom", "lessThanOrEqual": "5.14.*"}, {"status": "unaffected", "version": "5.15", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/usb/usbnet.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/b9eba0a4a527e04d712f0e0401e5391ef124b33e"}, {"url": "https://git.kernel.org/stable/c/524f333e98138d909a0a0c574a9ff6737dce2767"}, {"url": "https://git.kernel.org/stable/c/74b3b27cf9fecce00cd8918b7882fd81191d0aa4"}, {"url": "https://git.kernel.org/stable/c/002d82227c0abe29118cf80f7e2f396b22d448ed"}, {"url": "https://git.kernel.org/stable/c/492140e45d2bf27c1014243f8616a9b612144e20"}, {"url": "https://git.kernel.org/stable/c/693ecbe8f799405f8775719deedb1f76265d375a"}, {"url": "https://git.kernel.org/stable/c/7e8b6a4f18edee070213cb6a77118e8a412253c5"}, {"url": "https://git.kernel.org/stable/c/397430b50a363d8b7bdda00522123f82df6adc5e"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbnet: sanity check for maxpacket\n\nmaxpacket of 0 makes no sense and oopses as we need to divide\nby it. Give up.\n\nV2: fixed typo in log and stylistic issues"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:08:57.263Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47495", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:39:59.809Z", "dateReserved": "2024-05-22T06:20:56.202Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-22T08:19:42.732Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}