CVE-2021-47495

usbnet: sanity check for maxpacket

At a glance

Severity: Not available
EPSS: EPSS 0.21 % · percentile 12 (2026-10-27)
State: PUBLISHED
Published: 2024-05-22
Updated: 2026-05-11
Assigner: Linux
NVD status: Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: usbnet: sanity check for maxpacket maxpacket of 0 makes no sense and oopses as we need to divide by it. Give up. V2: fixed typo in log and stylistic issues

Scores

Version	Score	Vector	Scored by
CVSS 3.1	MEDIUM 5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

CWE-369

European references

ENISA EUVD · EUVD-2021-34499
GCVE · GCVE-0-2021-47495

CERT-FR advisories

CERTFR-2026-AVI-1165 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
CERTFR-2025-AVI-1057 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
CERTFR-2025-AVI-0466 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
CERTFR-2025-AVI-0279 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
CERTFR-2024-AVI-0903 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
CERTFR-2024-AVI-0741 — Multiples vulnérabilités dans Juniper Secure Analytics · cert.ssi.gouv.fr
CERTFR-2024-AVI-0720 — Multiples vulnérabilités dans IBM QRadar SIEM · cert.ssi.gouv.fr
CERTFR-2024-AVI-0577 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
CERTFR-2024-AVI-0526 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2024-AVI-0496 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 4.4.291
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.5 < 4.9.289
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.10 < 4.14.254
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.15 < 4.19.215
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.20 < 5.4.157
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.5 < 5.10.77
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.11 < 5.14.16
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*

Affected products

Product	Versions
Linux · Linux	affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b9eba0a4a527e04d712f0e0401e5391ef124b33e ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 524f333e98138d909a0a0c574a9ff6737dce2767 ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 74b3b27cf9fecce00cd8918b7882fd81191d0aa4 ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 002d82227c0abe29118cf80f7e2f396b22d448ed ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 492140e45d2bf27c1014243f8616a9b612144e20 ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 693ecbe8f799405f8775719deedb1f76265d375a
Linux · Linux	affected 2.6.12 ; unaffected 0 < 2.6.12 ; unaffected 4.4.291 ≤ 4.4.* ; unaffected 4.9.289 ≤ 4.9.* ; unaffected 4.14.254 ≤ 4.14.* ; unaffected 4.19.215 ≤ 4.19.*

Product

Versions

Linux · Linux

affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b9eba0a4a527e04d712f0e0401e5391ef124b33e ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 524f333e98138d909a0a0c574a9ff6737dce2767 ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 74b3b27cf9fecce00cd8918b7882fd81191d0aa4 ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 002d82227c0abe29118cf80f7e2f396b22d448ed ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 492140e45d2bf27c1014243f8616a9b612144e20 ; affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 693ecbe8f799405f8775719deedb1f76265d375a

Linux · Linux

affected 2.6.12 ; unaffected 0 < 2.6.12 ; unaffected 4.4.291 ≤ 4.4.* ; unaffected 4.9.289 ≤ 4.9.* ; unaffected 4.14.254 ≤ 4.14.* ; unaffected 4.19.215 ≤ 4.19.*

References

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD