Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47404

HID: betop: fix slab-out-of-bounds Write in betop_probe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betop_probe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption. So this patch checks hid_device's input is non empty before it's been used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < a4faa7153b87fbcfe4be15f4278676f79ca6e019affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 6fc4476dda58f6c00097c7ddec3b772513f57525affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 1c83c38dec83d57bc18d0c01d82c413d3b34ccb9affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < bb8b72374db69afa25a5b65cf1c092860c6fe914affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < fe9bb925e7096509711660d39c0493a1546e9550affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < dedfc35a2de2bae9fa3da8210a05bfd515f83feeaffected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 708107b80aa616976d1c5fa60ac0c1390749db5eaffected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to < 1e4ce418b1cb1a810256b5fb3fd33d22d1325993affected

Linux Linux

Default version status: affected

  • 4.0affected
  • 0 to < 4.0unaffected
  • 4.4.286 to ≤ 4.4.*unaffected
  • 4.9.285 to ≤ 4.9.*unaffected
  • 4.14.249 to ≤ 4.14.*unaffected
  • 4.19.209 to ≤ 4.19.*unaffected
  • 5.4.151 to ≤ 5.4.*unaffected
  • 5.10.71 to ≤ 5.10.*unaffected
  • 5.14.10 to ≤ 5.14.*unaffected
  • 5.15 to ≤ *unaffected

References