NetSight
IP …
high7.8

CVE-2021-47404

In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betop_probe Syzbot reported slab-out-of-bounds …

Impact

In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betop_probe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption. So this patch checks hid_device's input is non empty before it's been used.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.286
from 4.5 before 4.9.285
from 4.10 before 4.14.249
from 4.15 before 4.19.209
from 4.20 before 5.4.151
from 5.5 before 5.10.71

Weakness classification

CWE-787

References