CVE-2021-47476

In the Linux kernel, the following vulnerability has been resolved: comedi: ni_usb6501: fix NULL-deref in command paths The driver uses endpoint-sized USB transfer buffers but had no sanity checks on the sizes. This can lead to zero-size-pointer dereferences or overflowed transfer buffers in ni6501_port_command() and ni6501_counter_command() if a (malicious) device has smaller max-packet sizes than expected (or when doing descriptor fuzz testing). Add the missing sanity checks to probe().

• linux linux kernel (>= 3.18 < 4.4.292) • linux linux kernel (>= 4.5 < 4.9.290) • linux linux kernel (>= 4.10 < 4.14.255) • linux linux kernel (>= 4.15 < 4.19.217) • linux linux kernel (>= 4.20 < 5.4.159) • linux linux kernel (>= 5.5 < 5.10.79) • linux linux kernel (>= 5.11 < 5.14.18) • linux linux kernel (>= 5.15 < 5.15.2)