Denial of service in Linux kernel usb hso

1) NULL pointer dereference

EUVDB-ID: #VU87991

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46905

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error on disconnect regression within the hso_serial_tty_unregister() functin in drivers/net/usb/hso.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Linux kernel: 4.4 - 5.13 rc5

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:4.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.0:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.0-57:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.6:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.4.7:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/5c17cfe155d21954b4c7e2a78fa771cebcd86725
https://git.kernel.org/stable/c/d7fad2ce15bdbbd0fec3ebe999fd7cab2267f53e
https://git.kernel.org/stable/c/90642ee9eb581a13569b1c0bd57e85d962215273
https://git.kernel.org/stable/c/0f000005da31f6947f843ce6b3e3a960540c6e00
https://git.kernel.org/stable/c/41c44e1f3112d7265dae522c026399b2a42d19ef
https://git.kernel.org/stable/c/2ad5692db72874f02b9ad551d26345437ea4f7f3
https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.232
https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.189
https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.268
https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.268
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.33
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.17
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.1
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.115

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.