CVE-2021-47096 ALSA: rawmidi - fix the uninitalized user_pversion

2024-03-0418:10:48

Linux

github.com

linux kernel

alsa

rawmidi

user_pversion

uninitalized

vulnerability

kmalloc

alsa sequencer

buglink

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

ALSA: rawmidi - fix the uninitalized user_pversion

The user_pversion was uninitialized for the user space file structure
in the open function, because the file private structure use
kmalloc for the allocation.

The kernel ALSA sequencer code clears the file structure, so no additional
fixes are required.

BugLink: https://github.com/alsa-project/alsa-lib/issues/178

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "09d23174402d",
        "lessThan": "b398fcbe4de1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "09d23174402d",
        "lessThan": "39a8fc4971a0",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "sound/core/rawmidi.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.15"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.15",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "5.15.12",
        "versionType": "custom",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "5.16",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "sound/core/rawmidi.c"
    ],
    "defaultStatus": "affected"
  }
]