CVE-2021-47120: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL-deref on disconnect Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned success instead of -ENODEV when the check failed. This means that the remove callback will dereference the never-initialised driver data pointer when the driver is later unbound (e.g. on USB disconnect).

Affected products

• Linux Linux Kernel: from 4.20, before 5.4.125 (fixed in 5.4.125); from 5.5, before 5.10.43 (fixed in 5.10.43); from 5.11, before 5.12.10 (fixed in 5.12.10); version 5.13 only

Published 2024-03-15. Last modified 2026-06-17.