NULL pointer dereference in Linux kernel usb dwc2 driver

1) NULL pointer dereference

EUVDB-ID: #VU92067

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47409

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the dwc2_hcd_init() function in drivers/usb/dwc2/hcd.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 4.14 - 5.15 rc7

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:4.14:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.0:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.0:rc1:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.6:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:4.14.7:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/4b7f4a0eb92bf37bea4cd838c7f83ea42823ca8b
https://git.kernel.org/stable/c/a7182993dd8e09f96839ddc3ac54f9b37370d282
https://git.kernel.org/stable/c/8b9c1c33e51d0959f2aec573dfbac0ffd3f5c0b7
https://git.kernel.org/stable/c/2754fa3b73df7d0ae042f3ed6cfd9df9042f6262
https://git.kernel.org/stable/c/337f00a0bc62d7cb7d10ec0b872c79009a1641df
https://git.kernel.org/stable/c/856e6e8e0f9300befa87dde09edb578555c99a82
https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.250
https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.210
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.72
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.152

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.