CVE-2021-47096

MEDIUM4.0

ALSA: rawmidi - fix the uninitalized user_pversion

Published Mar 4, 2024

Modified 4 months ago

Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: rawmidi - fix the uninitalized user_pversion

The user_pversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc for the allocation.

The kernel ALSA sequencer code clears the file structure, so no additional fixes are required.

BugLink: https://github.com/alsa-project/alsa-lib/issues/178

References

WEB

https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b

WEB

https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2021-47096

CVSS Analysis

CVSS v3.1

4.0

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

NoneA:N

4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Ecosystems

Timeline

PublishedMar 4, 2024

ModifiedMay 23, 2026

CVE-2021-47096 | Mondoo Vulnerability Intelligence