CVE-2021-47211
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A vulnerability has been identified in the Linux kernel related to null pointer dereference in the ALSA usb-audio module. This issue has been resolved by adding a null check before dereferencing the cs_desc pointer.
Risk Assessment
Potential null pointer dereference may lead to system crashes or unexpected behavior of applications using ALSA. Organizations should be aware of the risks associated with system instability.
Recommendation
It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and conduct stability tests after the update.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix null pointer dereference on pointer cs_desc The pointer cs_desc return from snd_usb_find_clock_source could be null, so there is a potential null pointer dereference issue. Fix this by adding a null check before dereference.