CVE-2021-38204: Debian Linux

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.

Affected products

• Debian Debian Linux: version 9.0 only
• Linux Linux Kernel: before 5.13.6 (fixed in 5.13.6)

Published 2021-08-08. Last modified 2026-06-17.