CVE Database›Document archive›CVE-2021-47436

CVE-2021-47436

kernel: usb: musb: dsps: Fix the probe error path

Loading…

Severity

Low

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · May 22, 2024

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's MUSB DSPS driver. Incomplete cleanup during device initialization failure leaves an allocated platform device unregistered in the system. A local user could exploit this flaw to cause a NULL pointer dereference, leading to a system crash and a Denial of Service (DoS).

Statement

This vulnerability is rated as Low severity for Red Hat products because exploitation requires specialized embedded hardware, restricting the blast radius to non-standard environments with no remote vector. The flaw stems from an improper probe cleanup sequence in the Texas Instruments MUSB controller subsystem, which can trigger a kernel panic during boot. Standard enterprise installations do not typically configure or use this driver by default, substantially mitigating the risk.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference