CVE-2021-47120 : In the Linux kernel, the following vulnerability has been resolved: HID: magicm

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL-deref on disconnect Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned success instead of -ENODEV when the check failed. This means that the remove callback will dereference the never-initialised driver data pointer when the driver is later unbound (e.g. on USB disconnect).

Published 2024-03-15 21:15:07

Updated 2025-01-07 18:00:30

Source Linux

View at NVD, CVE.org

Products affected by CVE-2021-47120

Linux » Linux Kernel
Versions from including (>=) 5.11 and before (<) 5.12.10
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.20 and before (<) 5.4.125
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5 and before (<) 5.10.43
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.13 Update RC1
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.13 Update RC2
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.13 Update RC3
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.13 Update RC4
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-47120

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-47120

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST	2025-01-07
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-47120

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-47120

https://git.kernel.org/stable/c/4b4f6cecca446abcb686c6e6c451d4f1ec1a7497

HID: magicmouse: fix NULL-deref on disconnect - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/368c5d45a87e1bcc7f1e98e0c255c37b7b12c5d6

HID: magicmouse: fix NULL-deref on disconnect - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/b5d013c4c76b276890135b5d32803c4c63924b77

HID: magicmouse: fix NULL-deref on disconnect - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/9cf27473f21913a3eaf4702dd2a25415afd5f33f

HID: magicmouse: fix NULL-deref on disconnect - kernel/git/stable/linux.git - Linux kernel stable tree
Patch

Jump to

Vulnerability Details : CVE-2021-47120

Products affected by CVE-2021-47120

Exploit prediction scoring system (EPSS) score for CVE-2021-47120

CVSS scores for CVE-2021-47120

CWE ids for CVE-2021-47120

References for CVE-2021-47120