CVE-2021-47436

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.70

Description A vulnerability in the Linux kernel has been resolved, which was caused by an incorrect inversion of calls to dsps setup optional vbus irq() and dsps create musb pdev() without updating the error path. This led to a kernel crash due to a NULL pointer dereference on the Beagle Bone Black Wireless when using the USB Ethernet gadget driver. The issue occurred because dsps create musb pdev() allocates and registers a new platform device, which must be unregistered and freed with platform device unregister(), but this was missing upon dsps setup optional vbus irq() error.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the error path. At the moment, there is no information about a newer version that contains a fix for this vulnerability.