CVE-2021-0924
kernel: out-of-bounds read due to a missing bounds check in xhci_vendor_get_ops() of xhci.c
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 3, 2021
Updated · November 22, 2025
Description
An out-of-bounds (OOB) memory access flaw was found in xhci_vendor_get_ops in drivers/usb/host/xhci.c in the Linux kernel's xhci platform drivers. In this flaw, a local attacker with user privileges may cause an escalation of privilege due to a missing sanity check.
Statement
There was no shipped kernel version that was seen affected by this problem. These files are not built in our source code.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-125 · Out-of-bounds Read