Riskcovery

CVE-2021-46930

usb: mtu3: fix list_head check warning

State
Published
Severity
Not scored
Published
Feb 27, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: mtu3: fix list_head check warning

This is caused by uninitialization of list_head.

BUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4

Call trace: dump_backtrace+0x0/0x298 show_stack+0x24/0x34 dump_stack+0x130/0x1a8 print_address_description+0x88/0x56c __kasan_report+0x1b8/0x2a0 kasan_report+0x14/0x20 __asan_load8+0x9c/0xa0 __list_del_entry_valid+0x34/0xe4 mtu3_req_complete+0x4c/0x300 [mtu3] mtu3_gadget_stop+0x168/0x448 [mtu3] usb_gadget_unregister_driver+0x204/0x3a0 unregister_gadget_item+0x44/0xa4

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 83374e035b6286731c5aa617844c7b724294c2a7 to before 585e2b244dda7ea733274e4b8fa27853d625d3bfAffected
  • 83374e035b6286731c5aa617844c7b724294c2a7 to before 3b6efe0b7ba03cc2acf0694b46d6ff33c5b4c295Affected
  • 83374e035b6286731c5aa617844c7b724294c2a7 to before 249ddfbe00570d6dc76208e88017937d4d374c79Affected
  • 83374e035b6286731c5aa617844c7b724294c2a7 to before 8c313e3bfd9adae8d5c4ba1cc696dcbc86fbf9bfAffected
LinuxLinux
  • 5.2Affected
  • before 5.2Not affected
  • 5.4.170 through 5.4.*Not affected
  • 5.10.90 through 5.10.*Not affected
  • 5.15.13 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.