Riskcovery

CVE-2021-47404

HID: betop: fix slab-out-of-bounds Write in betop_probe

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: betop: fix slab-out-of-bounds Write in betop_probe

Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption.

So this patch checks hid_device's input is non empty before it's been used.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before a4faa7153b87fbcfe4be15f4278676f79ca6e019Affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before 6fc4476dda58f6c00097c7ddec3b772513f57525Affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before 1c83c38dec83d57bc18d0c01d82c413d3b34ccb9Affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before bb8b72374db69afa25a5b65cf1c092860c6fe914Affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before fe9bb925e7096509711660d39c0493a1546e9550Affected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before dedfc35a2de2bae9fa3da8210a05bfd515f83feeAffected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before 708107b80aa616976d1c5fa60ac0c1390749db5eAffected
  • 52cd7785f3cdd2724f4efb5b21dbc75d6f9ccef4 to before 1e4ce418b1cb1a810256b5fb3fd33d22d1325993Affected
LinuxLinux
  • 4.0Affected
  • before 4.0Not affected
  • 4.4.286 through 4.4.*Not affected
  • 4.9.285 through 4.9.*Not affected
  • 4.14.249 through 4.14.*Not affected
  • 4.19.209 through 4.19.*Not affected
  • 5.4.151 through 5.4.*Not affected
  • 5.10.71 through 5.10.*Not affected
  • 5.14.10 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.