What is CVE-2021-47101?

CVE-2021-47101 is a high-severity vulnerability in Linux, classified under Use of Uninitialized Resource. CVSS score: 7.1/10. Published 2024-03-04.

How severe is CVE-2021-47101?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Linux

CVE-2021-47101

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 BUG: KMSAN: uninit-value in asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497 asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497

EPSS: 0.002 (12.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

Affected products

Linux — versions d9fe64e511144c1ee7d7555b4111f09dde9692ef, 4.9, 0
Linux Linux_kernel — versions 5.16

Weakness classification (CWE)

CWE-908 — Use of Uninitialized Resource

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2021-47101?: CVE-2021-47101 is a high-severity vulnerability in Linux, classified under Use of Uninitialized Resource. CVSS score: 7.1/10. Published 2024-03-04.
How severe is CVE-2021-47101?: High severity. CVSS v3 base score is 7.1 out of 10.