Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-47404 Details

Description

In the Linux kernel, the following vulnerability has been resolved: HID: betop: fix slab-out-of-bounds Write in betop_probe Syzbot reported slab-out-of-bounds Write bug in hid-betopff driver. The problem is the driver assumes the device must have an input report but some malicious devices violate this assumption. So this patch checks hid_device's input is non empty before it's been used.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/1c83c38dec83d57bc18d0c01d82c413d3b34ccb9	kernel.org	Patch
https://git.kernel.org/stable/c/1e4ce418b1cb1a810256b5fb3fd33d22d1325993	kernel.org	Patch
https://git.kernel.org/stable/c/6fc4476dda58f6c00097c7ddec3b772513f57525	kernel.org	Patch
https://git.kernel.org/stable/c/708107b80aa616976d1c5fa60ac0c1390749db5e	kernel.org	Patch
https://git.kernel.org/stable/c/a4faa7153b87fbcfe4be15f4278676f79ca6e019	kernel.org	Patch
https://git.kernel.org/stable/c/bb8b72374db69afa25a5b65cf1c092860c6fe914	kernel.org	Patch
https://git.kernel.org/stable/c/dedfc35a2de2bae9fa3da8210a05bfd515f83fee	kernel.org	Patch
https://git.kernel.org/stable/c/fe9bb925e7096509711660d39c0493a1546e9550	kernel.org	Patch
https://git.kernel.org/stable/c/1c83c38dec83d57bc18d0c01d82c413d3b34ccb9	CVE	Patch
https://git.kernel.org/stable/c/1e4ce418b1cb1a810256b5fb3fd33d22d1325993	CVE	Patch
https://git.kernel.org/stable/c/6fc4476dda58f6c00097c7ddec3b772513f57525	CVE	Patch
https://git.kernel.org/stable/c/708107b80aa616976d1c5fa60ac0c1390749db5e	CVE	Patch
https://git.kernel.org/stable/c/a4faa7153b87fbcfe4be15f4278676f79ca6e019	CVE	Patch
https://git.kernel.org/stable/c/bb8b72374db69afa25a5b65cf1c092860c6fe914	CVE	Patch
https://git.kernel.org/stable/c/dedfc35a2de2bae9fa3da8210a05bfd515f83fee	CVE	Patch
https://git.kernel.org/stable/c/fe9bb925e7096509711660d39c0493a1546e9550	CVE	Patch

see all 16 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]

Affected Products

Product	Versions
linux linux kernel	< 4.4.286 >= 4.5, < 4.9.285 >= 4.10, < 4.14.249 >= 4.15, < 4.19.209 >= 4.20, < 5.4.151
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:5.15:rc1:::::: cpe:2.3:o:linux:linux_kernel:5.15:rc2:::::: cpe:2.3:o:linux:linux_kernel:5.15:rc3:::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Dec 24, 2024	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 28, 2024	CVE Modified	kernel.org
May 21, 2024	New CVE Received	kernel.org