vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-47270

usb: fix various gadgets null ptr deref on 10gbps cabling.

MEDIUM
5.5
CVSS Score
Published: May 21, 2024 at 02:19 PM UTC
Updated: June 17, 2026 at 04:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: usb: fix various gadgets null ptr deref on 10gbps cabling. This avoids a null pointer dereference in f_{ecm,eem,hid,loopback,printer,rndis,serial,sourcesink,subset,tcm} by simply reusing the 5gbps config for 10gbps.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
4.10 ≤ v < 4.14.2374.15 ≤ v < 4.19.1954.20 ≤ v < 5.4.1264.6 ≤ v < 4.14.2374.6 ≤ v < 4.19.1954.6 ≤ v < 4.9.2734.6 ≤ v < 5.10.444.6 ≤ v < 5.12.114.6 ≤ v < 5.134.6 ≤ v < 5.4.1265.11 ≤ v < 5.12.115.5 ≤ v < 5.10.445.13 rc15.13 rc25.13 rc35.13 rc45.13 rc5eaef50c760576bca70b87fdc26eb87a3660529f8
Vendor states this is fixed in 10770d2ac0094b053c8897d96d7b2737cd72f7c5 (fixed)
Vendor states this is fixed in 4b289a0f3033f465b4fd51ba995251a7867a2aa2 (fixed)
Vendor states this is fixed in 8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee (fixed)
Vendor states this is fixed in 90c4d05780d47e14a50e11a7f17373104cd47d25 (fixed)
Vendor states this is fixed in b4903f7fdc484628d0b8022daf86e2439d3ab4db (fixed)
Vendor states this is fixed in beb1e67a5ca8d69703c776db9000527f44c0c93c (fixed)
Vendor states this is fixed in f17aae7c4009160f0630a91842a281773976a5bc (fixed)
Vendor states this is fixed in 4.14.237 (unaffected)
Vendor states this is fixed in 4.19.195 (unaffected)
Vendor states this is fixed in 4.6 (unaffected)
Vendor states this is fixed in 4.9.273 (unaffected)
Vendor states this is fixed in 5.10.44 (unaffected)
Vendor states this is fixed in 5.12.11 (unaffected)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 5.4.126 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/10770d2ac0094b053c8897d96d7b2737cd72f7c5
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4b289a0f3033f465b4fd51ba995251a7867a2aa2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8cd5f45c1b769e3e9e0f4325dd08b6c3749dc7ee
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/90c4d05780d47e14a50e11a7f17373104cd47d25
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b4903f7fdc484628d0b8022daf86e2439d3ab4db
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/beb1e67a5ca8d69703c776db9000527f44c0c93c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f17aae7c4009160f0630a91842a281773976a5bc

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card