SB2024053071 - Memory leak in Linux kernel usbhid driver
Published: May 30, 2024 Updated: May 14, 2025
Security Bulletin ID
SB2024053071
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2021-47405)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the hid_ctrl() and usbhid_stop() functions in drivers/hid/usbhid/hid-core.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/7ce4e49146612261265671b1d30d117139021030
- https://git.kernel.org/stable/c/efc5c8d29256955cc90d8d570849b2d6121ed09f
- https://git.kernel.org/stable/c/c3156fea4d8a0e643625dff69a0421e872d1fdae
- https://git.kernel.org/stable/c/764ac04de056801dfe52a716da63f6e7018e7f3b
- https://git.kernel.org/stable/c/965147067fa1bedff3ae1f07ce3f89f1a14d2df3
- https://git.kernel.org/stable/c/f7ac4d24e1610b92689946fa88177673f1e88a3f
- https://git.kernel.org/stable/c/2b704864c92dcec2b295f276fcfbfb81d9831f81
- https://git.kernel.org/stable/c/f7744fa16b96da57187dc8e5634152d3b63d72de
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.249
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.209
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.286
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.285
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.71
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.151