cbcvebase.
CVE-2021-47331
published 2024-05-21

CVE-2021-47331: In the Linux kernel, the following vulnerability has been resolved: usb: common: usb-conn-gpio: fix NULL pointer dereference of charger When power on system…

PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.6th percentile
In the Linux kernel, the following vulnerability has been resolved: usb: common: usb-conn-gpio: fix NULL pointer dereference of charger When power on system with OTG cable, IDDIG's interrupt arises before the charger registration, it will cause a NULL pointer dereference, fix the issue by registering the power supply before requesting IDDIG/VBUS irq.

Affected

13 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.14.6-1 (bookworm)linux 5.14.6-1 (bookworm)
linuxlinux——
linuxlinux>= e3ee0e740c3887d2293e8d54a8707218d70d86ca < 8e8d910e9a3a7fba86140aff4924c30955ab228b8e8d910e9a3a7fba86140aff4924c30955ab228b
linuxlinux>= e3ee0e740c3887d2293e8d54a8707218d70d86ca < 436906fd248e018403bcda61a9311d9af02912f1436906fd248e018403bcda61a9311d9af02912f1
linuxlinux>= e3ee0e740c3887d2293e8d54a8707218d70d86ca < 1a133a0996d6b4c83509d570ed4edcba34c44f251a133a0996d6b4c83509d570ed4edcba34c44f25
linuxlinux>= e3ee0e740c3887d2293e8d54a8707218d70d86ca < 880287910b1892ed2cb38977893b947382a09d21880287910b1892ed2cb38977893b947382a09d21
linuxlinux_kernel< 5.10.525.10.52
linuxlinux_kernel>= 0 < 5.10.70-15.10.70-1
linuxlinux_kernel>= 0 < 5.14.6-15.14.6-1
linuxlinux_kernel>= 0 < 5.14.6-15.14.6-1
linuxlinux_kernel>= 0 < 5.14.6-15.14.6-1
linuxlinux_kernel>= 5.11 < 5.12.195.12.19
linuxlinux_kernel>= 5.13 < 5.13.45.13.4

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.