PT-2024-11278 · Linux+1 · Linux Kernel+1

Published

2021-06-04

·

Updated

2024-12-26

·

CVE-2021-47273

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the initialization of the usb2 PHY glue in the Linux kernel when only PHY1 is used, such as on the Odroid-HC4 device. The regmap init code uses the usb2 ports without initializing the PHY1 regmap entry, leading to a kernel NULL pointer dereference. The call trace includes functions like regmap update bits base and dwc3 meson g12a usb2 init phy. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

Related Identifiers

BDU:2025-07384
CVE-2021-47273

Affected Products

Astra Linux
Linux Kernel