{"id":"CVE-2021-46906","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: usbhid: fix info leak in hid_submit_ctrl\n\nIn hid_submit_ctrl(), the way of calculating the report length doesn't\ntake into account that report-\u003esize can be zero. When running the\nsyzkaller reproducer, a report of size 0 causes hid_submit_ctrl) to\ncalculate transfer_buffer_length as 16384. When this urb is passed to\nthe usb core layer, KMSAN reports an info leak of 16384 bytes.\n\nTo fix this, first modify hid_report_len() to account for the zero\nreport size case by using DIV_ROUND_UP for the division. Then, call it\nfrom hid_submit_ctrl().","modified":"2026-03-15T22:00:16.798443Z","published":"2024-02-26T18:15:07.160Z","related":["SUSE-SU-2024:0856-1","SUSE-SU-2024:0857-1","SUSE-SU-2024:0925-1","SUSE-SU-2024:0926-1","SUSE-SU-2024:0975-1","SUSE-SU-2024:0976-1"],"references":[{"type":"FIX","url":"https://git.kernel.org/stable/c/41b1e71a2c57366b08dcca1a28b0d45ca69429ce"},{"type":"FIX","url":"https://git.kernel.org/stable/c/6be388f4a35d2ce5ef7dbf635a8964a5da7f799f"},{"type":"FIX","url":"https://git.kernel.org/stable/c/7f5a4b24cdbd7372770a02f23e347d7d9a9ac8f1"},{"type":"FIX","url":"https://git.kernel.org/stable/c/8c064eece9a51856f3f275104520c7e3017fc5c0"},{"type":"FIX","url":"https://git.kernel.org/stable/c/b1e3596416d74ce95cc0b7b38472329a3818f8a9"},{"type":"FIX","url":"https://git.kernel.org/stable/c/c5d3c142f2d57d40c55e65d5622d319125a45366"},{"type":"FIX","url":"https://git.kernel.org/stable/c/0e280502be1b003c3483ae03fc60dea554fcfa82"},{"type":"FIX","url":"https://git.kernel.org/stable/c/21883bff0fd854e07429a773ff18f1e9658f50e8"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46906.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"4.4.274"}]},{"events":[{"introduced":"4.5.0"},{"fixed":"4.9.274"}]},{"events":[{"introduced":"4.10.0"},{"fixed":"4.14.238"}]},{"events":[{"introduced":"4.15.0"},{"fixed":"4.19.196"}]},{"events":[{"introduced":"4.20.0"},{"fixed":"5.4.127"}]},{"events":[{"introduced":"5.5.0"},{"fixed":"5.10.45"}]},{"events":[{"introduced":"5.11.0"},{"fixed":"5.12.12"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}