CVE-2021-47436
kernel: usb: musb: dsps: Fix the probe error path
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 22, 2024
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's MUSB DSPS driver. Incomplete cleanup during device initialization failure leaves an allocated platform device unregistered in the system. A local user could exploit this flaw to cause a NULL pointer dereference, leading to a system crash and a Denial of Service (DoS).
Statement
This vulnerability is rated as Low severity for Red Hat products because exploitation requires specialized embedded hardware, restricting the blast radius to non-standard environments with no remote vector. The flaw stems from an improper probe cleanup sequence in the Texas Instruments MUSB controller subsystem, which can trigger a kernel panic during boot. Standard enterprise installations do not typically configure or use this driver by default, substantially mitigating the risk.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference