← Back to CVEs

CVE-2021-47096

MEDIUM

4.0

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion The user_pversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc for the allocation. The kernel ALSA sequencer code clears the file structure, so no additional fixes are required. BugLink: https://github.com/alsa-project/alsa-lib/issues/178

CVE Details

CVSS v3.1 Score4.0

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published3/4/2024

Last Modified4/8/2025

Sourcenvd

Honeypot Sightings0

Affected Products

linux:linux_kernel

Weaknesses (CWE)

CWE-908

References

https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.