What’s Vulnerable › Vulnerabilities

CVE-2021-47495: usbnet: sanity check for maxpacket

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-22 · updated 2026-06-17
• Weakness: CWE-369

Description

In the Linux kernel, the following vulnerability has been resolved: usbnet: sanity check for maxpacket maxpacket of 0 makes no sense and oopses as we need to divide by it. Give up. V2: fixed typo in log and stylistic issues

Affected products

• Linux kernel: before 4.4.291; from 4.5 before 4.9.289; from 4.10 before 4.14.254; from 4.15 before 4.19.215; from 4.20 before 5.4.157; from 5.5 before 5.10.77 — fixed in 4.14.254, 4.19.215, 4.4.291, 4.9.289, 5.10.77, 5.14.16

How to fix

Upgrade to a fixed version: Linux kernel 4.14.254, 4.19.215, 4.4.291, 4.9.289. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/002d82227c0abe29118cf80f7e2f396b22d448ed
• https://git.kernel.org/stable/c/397430b50a363d8b7bdda00522123f82df6adc5e
• https://git.kernel.org/stable/c/492140e45d2bf27c1014243f8616a9b612144e20
• https://git.kernel.org/stable/c/524f333e98138d909a0a0c574a9ff6737dce2767
• https://git.kernel.org/stable/c/693ecbe8f799405f8775719deedb1f76265d375a
• https://git.kernel.org/stable/c/74b3b27cf9fecce00cd8918b7882fd81191d0aa4
• https://git.kernel.org/stable/c/7e8b6a4f18edee070213cb6a77118e8a412253c5
• https://git.kernel.org/stable/c/b9eba0a4a527e04d712f0e0401e5391ef124b33e
• https://git.kernel.org/stable/c/002d82227c0abe29118cf80f7e2f396b22d448ed
• https://git.kernel.org/stable/c/397430b50a363d8b7bdda00522123f82df6adc5e
• https://git.kernel.org/stable/c/492140e45d2bf27c1014243f8616a9b612144e20
• https://git.kernel.org/stable/c/524f333e98138d909a0a0c574a9ff6737dce2767

Get alerted when CVE-2021-47495 or the next vulnerability affects your stack