What is CVE-2021-47096?

CVE-2021-47096 is a medium-severity vulnerability in Linux, classified under Use of Uninitialized Resource. CVSS score: 4.0/10. Published 2024-03-04.

How severe is CVE-2021-47096?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Vulnerability in Linux

CVE-2021-47096

In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion The user_pversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc for the allocation. The kernel ALSA sequencer code clears the file structure, so no additional fixes are required. BugLink: https://github.com/alsa-project/alsa-lib/issues/178

EPSS: 0.002 (11.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Linux — versions 5.14.10, 5.15.12, 12d50801497235956fb3760be8530f4e44e4ce67
Linux Linux_kernel — versions 5.16

Weakness classification (CWE)

CWE-908 — Use of Uninitialized Resource

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2021-47096?: CVE-2021-47096 is a medium-severity vulnerability in Linux, classified under Use of Uninitialized Resource. CVSS score: 4.0/10. Published 2024-03-04.
How severe is CVE-2021-47096?: Medium severity. CVSS v3 base score is 4.0 out of 10.