SB20240603124 - Input validation error in Linux kernel comedi drivers driver
Published: June 3, 2024 Updated: May 14, 2025
Security Bulletin ID
SB20240603124
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2021-47476)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the sizeof() and ni6501_find_endpoints() functions in drivers/staging/comedi/drivers/ni_usb6501.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/58478143771b20ab219937b1c30a706590a59224
- https://git.kernel.org/stable/c/aa39738423503825625853b643b9e99d11c23816
- https://git.kernel.org/stable/c/df7b1238f3b599a0b9284249772cdfd1ea83a632
- https://git.kernel.org/stable/c/bc51111bf6e8e7b6cc94b133e4c291273a16acd1
- https://git.kernel.org/stable/c/b0156b7c9649d8f55a2ce3d3258509f1b2a181c3
- https://git.kernel.org/stable/c/ef143dc0c3defe56730ecd3a9de7b3e1d7e557c1
- https://git.kernel.org/stable/c/4a9d43cb5d5f39fa39fc1da438517004cc95f7ea
- https://git.kernel.org/stable/c/d6a727a681a39ae4f73081a9bedb45d14f95bdd1
- https://git.kernel.org/stable/c/907767da8f3a925b060c740e0b5c92ea7dbec440
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.255
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.217
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.292
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.290
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.79
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.18
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.159