#VU90852 Input validation error in Linux kernel - CVE-2021-47495

Cybersecurity Help s.r.o.

Published: 2024-06-03 | Updated: 2025-05-14

Vulnerability identifier: #VU90852

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47495

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the drivers/net/usb/usbnet.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: 4.4 - 4.4.290, 4.9 - 4.9.288, 4.14 - 4.14.253, 4.19 - 4.19.214, 5.4 - 5.4.156, 5.10 - 5.10.76, 5.14 - 5.14.15-300.fc35, 5.15 rc1 - 5.15 rc7

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

Latest bulletins with this vulnerability

Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17

Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18

Red Hat Enterprise Linux 9 update for kernel

Anolis OS update for kernel

Multiple vulnerabilities in Dell Cloud Tiering Appliance

Multiple vulnerabilities in Dell Secure Connect Gateway

Multiple vulnerabilities in IBM Technical Suppport Appliance

Multiple vulnerabilities in IBM QRadar Network Packet Capture

Multiple vulnerabilities in IBM Cloud Pak for Business Automation

Multiple vulnerabilities in Juniper Secure Analytics (JSA)