CVE-2021-47263

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47263
In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1) which is not right, and this was caught by below usban check UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840 Patch
https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862 Patch
https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634 Patch
https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840 Patch
https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862 Patch
https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
History

30 Apr 2025, 14:59

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840 - () https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840 - Patch
References () https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862 - () https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862 - Patch
References () https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634 - () https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634 - Patch
CWE NVD-CWE-Other

21 Nov 2024, 06:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: gpio: wcd934x: corrección de error de desplazamiento fuera de los límites. La máscara de bits para los pines 0 a 4 es BIT(0) a BIT(4); sin embargo, terminamos con BIT( n - 1) lo cual no es correcto, y esto fue detectado por la siguiente verificación USB UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
References () https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840 - () https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840 -
References () https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862 - () https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862 -
References () https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634 - () https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634 -

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2025-04-30 14:59

NVD link : CVE-2021-47263

Mitre link : CVE-2021-47263

CVE.ORG link : CVE-2021-47263

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other