CVE-2021-47476
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
comedi: ni_usb6501: fix NULL-deref in command paths
In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | 58478143771b20ab219937b1c30a706590a59224 | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | aa39738423503825625853b643b9e99d11c23816 | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | df7b1238f3b599a0b9284249772cdfd1ea83a632 | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | bc51111bf6e8e7b6cc94b133e4c291273a16acd1 | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | b0156b7c9649d8f55a2ce3d3258509f1b2a181c3 | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | ef143dc0c3defe56730ecd3a9de7b3e1d7e557c1 | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | 4a9d43cb5d5f39fa39fc1da438517004cc95f7ea | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | d6a727a681a39ae4f73081a9bedb45d14f95bdd1 | Unavailable | None listed |
| a03bb00e50ab4c07107da58a52a0bff7943f360c | affected | git | 907767da8f3a925b060c740e0b5c92ea7dbec440 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.18 | Unavailable | None listed |
| 4.4.292 | unaffected | semver | Unavailable | 4.4.* | None listed |
| 4.9.290 | unaffected | semver | Unavailable | 4.9.* | None listed |
| 4.14.255 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.217 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.159 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.79 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.14.18 | unaffected | semver | Unavailable | 5.14.* | None listed |
| 5.15.2 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 5.16 | unaffected | original_commit_for_fix | Unavailable | * | None listed |