CVE - CVE-2021-47404

CVE-ID
CVE-2021-47404	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betop_probe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption. So this patch checks hid_device's input is non empty before it's been used.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1c83c38dec83d57bc18d0c01d82c413d3b34ccb9 URL:https://git.kernel.org/stable/c/1c83c38dec83d57bc18d0c01d82c413d3b34ccb9 MISC:https://git.kernel.org/stable/c/1e4ce418b1cb1a810256b5fb3fd33d22d1325993 URL:https://git.kernel.org/stable/c/1e4ce418b1cb1a810256b5fb3fd33d22d1325993 MISC:https://git.kernel.org/stable/c/6fc4476dda58f6c00097c7ddec3b772513f57525 URL:https://git.kernel.org/stable/c/6fc4476dda58f6c00097c7ddec3b772513f57525 MISC:https://git.kernel.org/stable/c/708107b80aa616976d1c5fa60ac0c1390749db5e URL:https://git.kernel.org/stable/c/708107b80aa616976d1c5fa60ac0c1390749db5e MISC:https://git.kernel.org/stable/c/a4faa7153b87fbcfe4be15f4278676f79ca6e019 URL:https://git.kernel.org/stable/c/a4faa7153b87fbcfe4be15f4278676f79ca6e019 MISC:https://git.kernel.org/stable/c/bb8b72374db69afa25a5b65cf1c092860c6fe914 URL:https://git.kernel.org/stable/c/bb8b72374db69afa25a5b65cf1c092860c6fe914 MISC:https://git.kernel.org/stable/c/dedfc35a2de2bae9fa3da8210a05bfd515f83fee URL:https://git.kernel.org/stable/c/dedfc35a2de2bae9fa3da8210a05bfd515f83fee MISC:https://git.kernel.org/stable/c/fe9bb925e7096509711660d39c0493a1546e9550 URL:https://git.kernel.org/stable/c/fe9bb925e7096509711660d39c0493a1546e9550
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.