CVE-2021-46906

Advisory lineage Upstream: 0 Downstream: 9
Modified
Published: 26 Feb 2024, 17:20
Last modified:11 May 2026, 13:44

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Feb 2024, 17:20
Published
Vulnerability first disclosed
11 May 2026, 13:44
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix info leak in hid_submit_ctrl In hid_submit_ctrl(), the way of calculating the report length doesn't take into account that report->size can be zero. When running the syzkaller reproducer, a report of size 0 causes hid_submit_ctrl) to calculate transfer_buffer_length as 16384. When this urb is passed to the usb core layer, KMSAN reports an info leak of 16384 bytes. To fix this, first modify hid_report_len() to account for the zero report size case by using DIV_ROUND_UP for the division. Then, call it from hid_submit_ctrl().

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Trends

Current EPSS score: 0.01%• Percentile: 1%

Techniques & Countermeasures

  • CWE-668•Exposure of Resource to Wrong Sphere

    The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

Affected Systems

  • linux•linux

    ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c5d3c142f2d57d40c55e65d5622d319125a45366 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 41b1e71a2c57366b08dcca1a28b0d45ca69429ce | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 8c064eece9a51856f3f275104520c7e3017fc5c0 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 0e280502be1b003c3483ae03fc60dea554fcfa82 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7f5a4b24cdbd7372770a02f23e347d7d9a9ac8f1 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b1e3596416d74ce95cc0b7b38472329a3818f8a9 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 21883bff0fd854e07429a773ff18f1e9658f50e8 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6be388f4a35d2ce5ef7dbf635a8964a5da7f799f | 2.6.12

  • linux•linux_kernel

    < 4.4.274 | ≥ 4.5.0, < 4.9.274 | ≥ 4.10.0, < 4.14.238 | ≥ 4.15.0, < 4.19.196 | ≥ 4.20.0, < 5.4.127 | ≥ 5.5.0, < 5.10.45 | ≥ 5.11.0, < 5.12.12

References (8)