CVE-2021-47096: ALSA: rawmidi - fix the uninitalized user_pversion
In the Linux kernel, the following vulnerability has been resolved:
ALSA: rawmidi - fix the uninitalized userpversion
The userpversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc for the allocation.
The kernel ALSA sequencer code clears the file structure, so no additional fixes are required.
BugLink: https://github.com/alsa-project/alsa-lib/issues/178
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47096?
CVE-2021-47096 has a medium severity level due to the potential for uninitialized memory use affecting user space processes.
How do I fix CVE-2021-47096?
To fix CVE-2021-47096, update the Linux kernel to the latest stable version where the vulnerability has been resolved.
Which versions of the Linux kernel are affected by CVE-2021-47096?
CVE-2021-47096 affects various versions of the Linux kernel prior to the patch that addresses the uninitialized user_pversion issue.
What types of attacks can exploit CVE-2021-47096?
CVE-2021-47096 could potentially be exploited to cause denial of service or execute arbitrary code in user space.
Is CVE-2021-47096 specific to any particular distribution of Linux?
CVE-2021-47096 is not specific to any Linux distribution; it affects the underlying Linux kernel used by various distributions.