Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47120

HID: magicmouse: fix NULL-deref on disconnect

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL-deref on disconnect Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned success instead of -ENODEV when the check failed. This means that the remove callback will dereference the never-initialised driver data pointer when the driver is later unbound (e.g. on USB disconnect).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9d7b18668956c411a422d04c712994c5fdb23a4b to < 368c5d45a87e1bcc7f1e98e0c255c37b7b12c5d6affected
  • 9d7b18668956c411a422d04c712994c5fdb23a4b to < b5d013c4c76b276890135b5d32803c4c63924b77affected
  • 9d7b18668956c411a422d04c712994c5fdb23a4b to < 9cf27473f21913a3eaf4702dd2a25415afd5f33faffected
  • 9d7b18668956c411a422d04c712994c5fdb23a4b to < 4b4f6cecca446abcb686c6e6c451d4f1ec1a7497affected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.4.125 to ≤ 5.4.*unaffected
  • 5.10.43 to ≤ 5.10.*unaffected
  • 5.12.10 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References