CVEvulnerability
CVE-2021-47096
4.0 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-03-04
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-908
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: rawmidi - fix the uninitalized user_pversion
The user_pversion was uninitialized for the user space file structure
in the open function, because the file private structure use
kmalloc for the allocation.
The kernel ALSA sequencer code clears the file structure, so no additional
fixes are required.
BugLink: https://github.com/alsa-project/alsa-lib/issues/178
Affected configurations
• linux linux kernel (>= 5.15 < 5.15.12)
• linux linux kernel 5.16
Related
Weakness · CWE (1)
- CWE-908 Use of Uninitialized Resource weakness
References
- https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b Patch
- https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085 Patch
- https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b Patch
- https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085 Patch