CVE-2021-47269
published 2024-05-21CVE-2021-47269: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: ep0: fix NULL pointer exception
There is no validation of the index from dwc3_wIndex_to_dep() and we might
be referring a non-existing ep and trigger a NULL pointer exception. In
certain configurations we might use fewer eps and the index might wrongly
indicate a larger ep index than existing.
By adding this validation from the patch we can actually report a wrong
index back to the caller.
In our usecase we are using a composite device on an older kernel, but
upstream might use this fix also. Unfortunately, I cannot describe the
hardware for others to reproduce the issue as it is a proprietary
implementation.
[ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4
[ 82.966891] Mem abort info:
[ 82.969663] ESR = 0x96000006
[ 82.972703] Exception class = DABT (current EL), IL = 32 bits
[ 82.978603] SET = 0, FnV = 0
[ 82.981642] EA = 0, S1PTW = 0
[ 82.984765] Data abort info:
[ 82.987631] ISV = 0, ISS = 0x00000006
[ 82.991449] CM = 0, WnR = 0
[ 82.994409] user pgtable: 4k pages, 39-bit VAs, pgdp = 00000000c6210ccc
[ 83.000999] [00000000000000a4] pgd=0000000053aa5003, pud=0000000053aa5003, pmd=0000000000000000
[ 83.009685] Internal error: Oops: 96000006 [#1] PREEMPT SMP
[ 83.026433] Process irq/62-dwc3 (pid: 303, stack limit = 0x000000003985154c)
[ 83.033470] CPU: 0 PID: 303 Comm: irq/62-dwc3 Not tainted 4.19.124 #1
[ 83.044836] pstate: 60000085 (nZCv daIf -PAN -UAO)
[ 83.049628] pc : dwc3_ep0_handle_feature+0x414/0x43c
[ 83.054558] lr : dwc3_ep0_interrupt+0x3b4/0xc94
...
[ 83.141788] Call trace:
[ 83.144227] dwc3_ep0_handle_feature+0x414/0x43c
[ 83.148823] dwc3_ep0_interrupt+0x3b4/0xc94
[ 83.181546] ---[ end trace aac6b5267d84c32f ]---
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < 96b74a99d360235c24052f1d060e64ac53f43528 | 96b74a99d360235c24052f1d060e64ac53f43528 |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < 60156089f07e724e4dc8483702d5e1ede4522749 | 60156089f07e724e4dc8483702d5e1ede4522749 |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < 990dc90750772622d44ca2ea6652c521e6f67e16 | 990dc90750772622d44ca2ea6652c521e6f67e16 |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < bd551e7c85939de2182010273450bfa78c3742fc | bd551e7c85939de2182010273450bfa78c3742fc |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < 366369b89bedd59b1425386e8d4a18a466e420e4 | 366369b89bedd59b1425386e8d4a18a466e420e4 |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < 470403639114895e2697c766fbe17be8d0e9b67a | 470403639114895e2697c766fbe17be8d0e9b67a |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < 788755756dd4a6aba1de479fec20b0fa600e7f19 | 788755756dd4a6aba1de479fec20b0fa600e7f19 |
| linux | linux | >= 6a1e3ef45fb0c4d79cbb5190c8fc59263c630b0e < d00889080ab60051627dab1d85831cd9db750e2a | d00889080ab60051627dab1d85831cd9db750e2a |
| linux | linux_kernel | < 4.4.273 | 4.4.273 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 4.4.0-276.310 | 4.4.0-276.310 |
| linux | linux_kernel | >= 4.10 < 4.14.237 | 4.14.237 |
| linux | linux_kernel | >= 4.15 < 4.19.195 | 4.19.195 |
| linux | linux_kernel | >= 4.20 < 5.4.126 | 5.4.126 |
| linux | linux_kernel | >= 4.5 < 4.9.273 | 4.9.273 |
| linux | linux_kernel | >= 5.11 < 5.12.11 | 5.12.11 |
| linux | linux_kernel | >= 5.5 < 5.10.44 | 5.10.44 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
linux-fips vulnerabilities
osv·2025-12-15·CVSS 5.5
[MEDIUM] linux-fips vulnerabilities
linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- ACPI drivers;
- Hardware monitoring drivers;
- InfiniBand drivers;
- MTD block device drivers;
- Network drivers;
- DesignWare USB3 driver;
- Ceph distributed file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File systems infrastructure;
- Tracing infrastructure;
- Appletalk network protocol;
- IPv6 networking;
- Netfilter;
(CVE-2021-47146, CVE-2021-47269, CVE-2021-47385, CVE-2021-47634,
CVE-2022-49026, CVE-2024-49935, CVE-2024-50067, CVE-2024-50095,
CVE-2024-50179, CVE-2024-53112, CVE-2024-53217, CVE-2025-21715,
CVE-2025-21722, CVE-
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2025-12-15·CVSS 5.5
[MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- ACPI drivers;
- Hardware monitoring drivers;
- InfiniBand drivers;
- MTD block device drivers;
- Network drivers;
- DesignWare USB3 driver;
- Ceph distributed file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File systems infrastructure;
- Tracing infrastructure;
- Appletalk network protocol;
- IPv6 networking;
- Netfilter;
(CVE-2021-47146, CVE-2021-47269, CVE-2021-47385, CVE-2021-47634,
CVE-2022-49026, CVE-2024-49935, CVE-2024-50067, CVE-2024-50095,
CVE-2024-50179, CVE-2024-53112, CVE-2024-53217, C
OSV
CVE-2021-47269: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index fro
osv·2024-05-21·CVSS 5.5
CVE-2021-47269 [MEDIUM] CVE-2021-47269: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index fro
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3_wIndex_to_dep() and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer eps and the index might wrongly indicate a larger ep index than existing. By adding this validation from the patch we can actually report a wrong index back to the caller. In our usecase we are using a composite device on an older kernel, but upstream might use this fix also. Unfortunately, I cannot describe the hardware for others to reproduce the issue as it is a proprietary implementation. [ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4 [ 82.9
GHSA
GHSA-qp63-w47q-g9vj: In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: ep0: fix NULL pointer exception
There is no validation of the index f
ghsa_unreviewed·2024-05-21
CVE-2021-47269 [MEDIUM] CWE-476 GHSA-qp63-w47q-g9vj: In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: ep0: fix NULL pointer exception
There is no validation of the index f
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: ep0: fix NULL pointer exception
There is no validation of the index from dwc3_wIndex_to_dep() and we might
be referring a non-existing ep and trigger a NULL pointer exception. In
certain configurations we might use fewer eps and the index might wrongly
indicate a larger ep index than existing.
By adding this validation from the patch we can actually report a wrong
index back to the caller.
In our usecase we are using a composite device on an older kernel, but
upstream might use this fix also. Unfortunately, I cannot describe the
hardware for others to reproduce the issue as it is a proprietary
implementation.
[ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4
[
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2025-12-15·CVSS 5.5
CVE-2024-49935 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- ACPI drivers;
- Hardware monitoring drivers;
- InfiniBand drivers;
- MTD block device drivers;
- Network drivers;
- DesignWare USB3 driver;
- Ceph distributed file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File systems infrastructure;
- Tracing infrastructure;
- Appletalk network protocol;
- IPv6 networking;
- Netfilter;
(CVE-2021-47146, CVE-2021-47269, CVE-2021-47385, CVE-2021-47634,
CVE-2022-49026, CVE-2024-49935, CVE-2024-50067, CVE-2024-50095,
CVE-2024-
Ubuntu
Linux kernel (FIPS) vulnerabilities
vendor_ubuntu·2025-12-15·CVSS 5.5
CVE-2024-50179 [MEDIUM] Linux kernel (FIPS) vulnerabilities
Title: Linux kernel (FIPS) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- ACPI drivers;
- Hardware monitoring drivers;
- InfiniBand drivers;
- MTD block device drivers;
- Network drivers;
- DesignWare USB3 driver;
- Ceph distributed file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File systems infrastructure;
- Tracing infrastructure;
- Appletalk network protocol;
- IPv6 networking;
- Netfilter;
(CVE-2021-47146, CVE-2021-47269, CVE-2021-47385, CVE-2021-47634,
CVE-2022-49026, CVE-2024-49935, CVE-2024-50067, CVE-2024-50095,
CV
Red Hat
kernel: usb: dwc3: ep0: fix NULL pointer exception
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2021-47269 [MEDIUM] CWE-476 kernel: usb: dwc3: ep0: fix NULL pointer exception
kernel: usb: dwc3: ep0: fix NULL pointer exception
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: ep0: fix NULL pointer exception
There is no validation of the index from dwc3_wIndex_to_dep() and we might
be referring a non-existing ep and trigger a NULL pointer exception. In
certain configurations we might use fewer eps and the index might wrongly
indicate a larger ep index than existing.
By adding this validation from the patch we can actually report a wrong
index back to the caller.
In our usecase we are using a composite device on an older kernel, but
upstream might use this fix also. Unfortunately, I cannot describe the
hardware for others to reproduce the issue as it is a proprietary
implementation.
[ 82.958261] Unable to handle kernel NULL pointer de
Debian
CVE-2021-47269: linux - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ...
vendor_debian·2021·CVSS 5.5
CVE-2021-47269 [MEDIUM] CVE-2021-47269: linux - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ...
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3_wIndex_to_dep() and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer eps and the index might wrongly indicate a larger ep index than existing. By adding this validation from the patch we can actually report a wrong index back to the caller. In our usecase we are using a composite device on an older kernel, but upstream might use this fix also. Unfortunately, I cannot describe the hardware for others to reproduce the issue as it is a proprietary implementation. [ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4 [ 82.9
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/366369b89bedd59b1425386e8d4a18a466e420e4https://git.kernel.org/stable/c/470403639114895e2697c766fbe17be8d0e9b67ahttps://git.kernel.org/stable/c/60156089f07e724e4dc8483702d5e1ede4522749https://git.kernel.org/stable/c/788755756dd4a6aba1de479fec20b0fa600e7f19https://git.kernel.org/stable/c/96b74a99d360235c24052f1d060e64ac53f43528https://git.kernel.org/stable/c/990dc90750772622d44ca2ea6652c521e6f67e16https://git.kernel.org/stable/c/bd551e7c85939de2182010273450bfa78c3742fchttps://git.kernel.org/stable/c/d00889080ab60051627dab1d85831cd9db750e2ahttps://git.kernel.org/stable/c/366369b89bedd59b1425386e8d4a18a466e420e4https://git.kernel.org/stable/c/470403639114895e2697c766fbe17be8d0e9b67ahttps://git.kernel.org/stable/c/60156089f07e724e4dc8483702d5e1ede4522749https://git.kernel.org/stable/c/788755756dd4a6aba1de479fec20b0fa600e7f19https://git.kernel.org/stable/c/96b74a99d360235c24052f1d060e64ac53f43528https://git.kernel.org/stable/c/990dc90750772622d44ca2ea6652c521e6f67e16https://git.kernel.org/stable/c/bd551e7c85939de2182010273450bfa78c3742fchttps://git.kernel.org/stable/c/d00889080ab60051627dab1d85831cd9db750e2a
2024-05-21
Published