What is CVE-2021-46926?

CVE-2021-46926 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-02-27.

How severe is CVE-2021-46926?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Is CVE-2021-46926 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux

CVE-2021-46926

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead to issues where the graph walk continues and eventually fails, but the pointer was set already. This patch changes the logic so that the information provided to the caller is set when a controller is found.

EPSS: 0.002 (11.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions 6f11586f4896ee448262747788a0a3faf0fe9066, 5.3, 0
Linux Linux_kernel

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2021-46926?: CVE-2021-46926 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-02-27.
How severe is CVE-2021-46926?: Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2021-46926 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.