SB20240531386 - NULL pointer dereference in Linux kernel usb dwc3 driver
Published: May 31, 2024 Updated: May 14, 2025
Security Bulletin ID
SB20240531386
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2021-47269)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the dwc3_wIndex_to_dep() function in drivers/usb/dwc3/ep0.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/96b74a99d360235c24052f1d060e64ac53f43528
- https://git.kernel.org/stable/c/60156089f07e724e4dc8483702d5e1ede4522749
- https://git.kernel.org/stable/c/990dc90750772622d44ca2ea6652c521e6f67e16
- https://git.kernel.org/stable/c/bd551e7c85939de2182010273450bfa78c3742fc
- https://git.kernel.org/stable/c/366369b89bedd59b1425386e8d4a18a466e420e4
- https://git.kernel.org/stable/c/470403639114895e2697c766fbe17be8d0e9b67a
- https://git.kernel.org/stable/c/788755756dd4a6aba1de479fec20b0fa600e7f19
- https://git.kernel.org/stable/c/d00889080ab60051627dab1d85831cd9db750e2a
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.237
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.195
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.273
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.273
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.11
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.126