Lucene search

K
osvGoogleOSV:CVE-2021-47404
HistoryMay 21, 2024 - 3:15 p.m.

CVE-2021-47404

2024-05-2115:15:00
Google
osv.dev
5
cve-2021-47404
syzbot reported
slab-out-of-bounds write
hid-betopff driver
input report
malicious devices
patch
hid_device

AI Score

6.7

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betop_probe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption. So this patch checks hid_device’s input is non empty before it’s been used.