Riskcovery

CVE-2021-47474

comedi: vmk80xx: fix bulk-buffer overflow

State
Published
Severity
Not scored
Published
May 22, 2024
Updated
May 11, 2026
Reserved
May 22, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

comedi: vmk80xx: fix bulk-buffer overflow

The driver is using endpoint-sized buffers but must not assume that the tx and rx buffers are of equal size or a malicious device could overflow the slab-allocated receive buffer when doing bulk transfers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before e0e6a63fd97ad95fe05dfd77268a1952551e11a7Affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before 7cfb35db607760698d299fd1cf7402dfa8f09973Affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before 0866dcaa828c21bc2f94dac00e086078f11b5772Affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before 063f576c43d589a4c153554b681d32b3f8317c7bAffected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before 1ae4715121a57bc6fa29fd992127b01907f2f993Affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before b7fd7f3387f070215e6be341e68eb5c087eeecc0Affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before 7b0e356189327287d0eb98ec081bd6dd97068cd3Affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before 47b4636ebdbeba2044b3db937c4d2b6a4fe3d0f2Affected
  • 985cafccbf9b7f862aa1c5ee566801e18b5161fb to before 78cdfd62bd54af615fba9e3ca1ba35de39d3871dAffected
LinuxLinux
  • 2.6.31Affected
  • before 2.6.31Not affected
  • 4.4.292 through 4.4.*Not affected
  • 4.9.290 through 4.9.*Not affected
  • 4.14.255 through 4.14.*Not affected
  • 4.19.217 through 4.19.*Not affected
  • 5.4.159 through 5.4.*Not affected
  • 5.10.79 through 5.10.*Not affected
  • 5.14.18 through 5.14.*Not affected
  • 5.15.2 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.