CVE-2021-47083

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47083
In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desc[eint_n]' size globle-out-of-bounds issue.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d Patch
https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed Patch
https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f Patch
https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69 Patch
https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d Patch
https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed Patch
https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f Patch
https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*
History

16 Jan 2025, 17:24

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*
CWE CWE-125
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
References () https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d - () https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d - Patch
References () https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed - () https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed - Patch
References () https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f - () https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f - Patch
References () https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69 - () https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69 - Patch

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d - () https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d -
References () https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed - () https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed -
References () https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f - () https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f -
References () https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69 - () https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: pinctrl: mediatek: soluciona el problema global fuera de los límites Cuando el número eint virtual eint es mayor que el número gpio, puede producir un tamaño 'desc[eint_n]' globle-out- cuestión de fuera de los límites.

04 Mar 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-04 18:15

Updated : 2025-01-16 17:24

NVD link : CVE-2021-47083

Mitre link : CVE-2021-47083

CVE.ORG link : CVE-2021-47083

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read