CVE-2021-47477

comedi: dt9812: fix DMA buffers on stack

State: Published
Severity: 5.3 Medium
Published: May 22, 2024
Updated: May 11, 2026
Reserved: May 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

comedi: dt9812: fix DMA buffers on stack

USB transfer buffers are typically mapped for DMA and must not be allocated on the stack or transfers will fail.

Allocate proper transfer buffers in the various command helpers and return an error on short transfers instead of acting on random stack data.

Note that this also fixes a stack info leak on systems where DMA is not used as 32 bytes are always sent to the device regardless of how short the command is.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	63274cd7d38a3322d90b66a5bc976de1fb899051 to before a6af69768d5cb4b2528946d53be5fa19ade37723Affected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 365a346cda82f51d835c49136a00a9df8a78c7f2Affected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 8a52bc480992c7c9da3ebfea456af731f50a4b97Affected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 39ea61037ae78f14fa121228dd962ea3280eacf3Affected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 3efb7af8ac437085b6c776e5b54830b149d86efeAffected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 786f5b03450454557ff858a8bead5d7c0cbf78d6Affected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 3ac273d154d634e2034508a14db82a95d7ad12edAffected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 20cebb8b620dc987e55ddc46801de986e081757eAffected 63274cd7d38a3322d90b66a5bc976de1fb899051 to before 536de747bc48262225889a533db6650731ab25d3Affected
LinuxLinux	2.6.29Affected before 2.6.29Not affected 4.4.292 through 4.4.Not affected 4.9.290 through 4.9.Not affected 4.14.255 through 4.14.Not affected 4.19.217 through 4.19.Not affected 5.4.159 through 5.4.Not affected 5.10.79 through 5.10.Not affected 5.14.18 through 5.14.Not affected 5.15.2 through 5.15.Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

63274cd7d38a3322d90b66a5bc976de1fb899051 to before a6af69768d5cb4b2528946d53be5fa19ade37723Affected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 365a346cda82f51d835c49136a00a9df8a78c7f2Affected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 8a52bc480992c7c9da3ebfea456af731f50a4b97Affected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 39ea61037ae78f14fa121228dd962ea3280eacf3Affected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 3efb7af8ac437085b6c776e5b54830b149d86efeAffected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 786f5b03450454557ff858a8bead5d7c0cbf78d6Affected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 3ac273d154d634e2034508a14db82a95d7ad12edAffected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 20cebb8b620dc987e55ddc46801de986e081757eAffected
63274cd7d38a3322d90b66a5bc976de1fb899051 to before 536de747bc48262225889a533db6650731ab25d3Affected

LinuxLinux

2.6.29Affected
before 2.6.29Not affected
4.4.292 through 4.4.*Not affected
4.9.290 through 4.9.*Not affected
4.14.255 through 4.14.*Not affected
4.19.217 through 4.19.*Not affected
5.4.159 through 5.4.*Not affected
5.10.79 through 5.10.*Not affected
5.14.18 through 5.14.*Not affected
5.15.2 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.