CVE-2021-47476

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the comedi driver, specifically the ni usb6501 component, which lacks proper sanity checks on USB transfer buffer sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501 port command() and ni6501 counter command() if a malicious device has smaller max-packet sizes than expected. The vulnerability can be exploited when doing descriptor fuzz testing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.