CVE-2021-47405
published 2024-05-21CVE-2021-47405: In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free raw_report buffers in usbhid_stop Free the unsent raw_report buffers when…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.25%
16.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: free raw_report buffers in usbhid_stop
Free the unsent raw_report buffers when the device is removed.
Fixes a memory leak reported by syzbot at:
https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418ab47
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.12-1 (bookworm) | linux 5.14.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < 7ce4e49146612261265671b1d30d117139021030 | 7ce4e49146612261265671b1d30d117139021030 |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < efc5c8d29256955cc90d8d570849b2d6121ed09f | efc5c8d29256955cc90d8d570849b2d6121ed09f |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < c3156fea4d8a0e643625dff69a0421e872d1fdae | c3156fea4d8a0e643625dff69a0421e872d1fdae |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < 764ac04de056801dfe52a716da63f6e7018e7f3b | 764ac04de056801dfe52a716da63f6e7018e7f3b |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < 965147067fa1bedff3ae1f07ce3f89f1a14d2df3 | 965147067fa1bedff3ae1f07ce3f89f1a14d2df3 |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < f7ac4d24e1610b92689946fa88177673f1e88a3f | f7ac4d24e1610b92689946fa88177673f1e88a3f |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < 2b704864c92dcec2b295f276fcfbfb81d9831f81 | 2b704864c92dcec2b295f276fcfbfb81d9831f81 |
| linux | linux | >= f129ea6d1efe0eddcbb1f0faaec5623788ad9e58 < f7744fa16b96da57187dc8e5634152d3b63d72de | f7744fa16b96da57187dc8e5634152d3b63d72de |
| linux | linux_kernel | < 4.4.286 | 4.4.286 |
| linux | linux_kernel | >= 0 < 5.10.84-1 | 5.10.84-1 |
| linux | linux_kernel | >= 0 < 5.14.12-1 | 5.14.12-1 |
| linux | linux_kernel | >= 0 < 5.14.12-1 | 5.14.12-1 |
| linux | linux_kernel | >= 0 < 5.14.12-1 | 5.14.12-1 |
| linux | linux_kernel | >= 4.10 < 4.14.249 | 4.14.249 |
| linux | linux_kernel | >= 4.15 < 4.19.209 | 4.19.209 |
| linux | linux_kernel | >= 4.20 < 5.4.151 | 5.4.151 |
| linux | linux_kernel | >= 4.5 < 4.9.285 | 4.9.285 |
| linux | linux_kernel | >= 5.11 < 5.14.10 | 5.14.10 |
| linux | linux_kernel | >= 5.5 < 5.10.71 | 5.10.71 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cwgg-8744-62hw: In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: free raw_report buffers in usbhid_stop
Free the unsent raw_report b
ghsa_unreviewed·2024-05-21
CVE-2021-47405 [MEDIUM] CWE-401 GHSA-cwgg-8744-62hw: In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: free raw_report buffers in usbhid_stop
Free the unsent raw_report b
In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: free raw_report buffers in usbhid_stop
Free the unsent raw_report buffers when the device is removed.
Fixes a memory leak reported by syzbot at:
https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418ab47
OSV
CVE-2021-47405: In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free raw_report buffers in usbhid_stop Free the unsent raw_report buf
osv·2024-05-21·CVSS 5.5
CVE-2021-47405 [MEDIUM] CVE-2021-47405: In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free raw_report buffers in usbhid_stop Free the unsent raw_report buf
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free raw_report buffers in usbhid_stop Free the unsent raw_report buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418ab47
Red Hat
kernel: HID: usbhid: free raw_report buffers in usbhid_stop
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2021-47405 [MEDIUM] CWE-402 kernel: HID: usbhid: free raw_report buffers in usbhid_stop
kernel: HID: usbhid: free raw_report buffers in usbhid_stop
In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: free raw_report buffers in usbhid_stop
Free the unsent raw_report buffers when the device is removed.
Fixes a memory leak reported by syzbot at:
https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418ab47
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise
Debian
CVE-2021-47405: linux - In the Linux kernel, the following vulnerability has been resolved: HID: usbhid...
vendor_debian·2021·CVSS 5.5
CVE-2021-47405 [MEDIUM] CVE-2021-47405: linux - In the Linux kernel, the following vulnerability has been resolved: HID: usbhid...
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: free raw_report buffers in usbhid_stop Free the unsent raw_report buffers when the device is removed. Fixes a memory leak reported by syzbot at: https://syzkaller.appspot.com/bug?id=7b4fa7cb1a7c2d3342a2a8a6c53371c8c418ab47
Scope: local
bookworm: resolved (fixed in 5.14.12-1)
bullseye: resolved (fixed in 5.10.84-1)
forky: resolved (fixed in 5.14.12-1)
sid: resolved (fixed in 5.14.12-1)
trixie: resolved (fixed in 5.14.12-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2b704864c92dcec2b295f276fcfbfb81d9831f81https://git.kernel.org/stable/c/764ac04de056801dfe52a716da63f6e7018e7f3bhttps://git.kernel.org/stable/c/7ce4e49146612261265671b1d30d117139021030https://git.kernel.org/stable/c/965147067fa1bedff3ae1f07ce3f89f1a14d2df3https://git.kernel.org/stable/c/c3156fea4d8a0e643625dff69a0421e872d1fdaehttps://git.kernel.org/stable/c/efc5c8d29256955cc90d8d570849b2d6121ed09fhttps://git.kernel.org/stable/c/f7744fa16b96da57187dc8e5634152d3b63d72dehttps://git.kernel.org/stable/c/f7ac4d24e1610b92689946fa88177673f1e88a3fhttps://git.kernel.org/stable/c/2b704864c92dcec2b295f276fcfbfb81d9831f81https://git.kernel.org/stable/c/764ac04de056801dfe52a716da63f6e7018e7f3bhttps://git.kernel.org/stable/c/7ce4e49146612261265671b1d30d117139021030https://git.kernel.org/stable/c/965147067fa1bedff3ae1f07ce3f89f1a14d2df3https://git.kernel.org/stable/c/c3156fea4d8a0e643625dff69a0421e872d1fdaehttps://git.kernel.org/stable/c/efc5c8d29256955cc90d8d570849b2d6121ed09fhttps://git.kernel.org/stable/c/f7744fa16b96da57187dc8e5634152d3b63d72dehttps://git.kernel.org/stable/c/f7ac4d24e1610b92689946fa88177673f1e88a3f
2024-05-21
Published