Riskcovery

CVE-2021-47096

ALSA: rawmidi - fix the uninitalized user_pversion

State
Published
Severity
4.0 Medium
Published
Mar 4, 2024
Updated
May 23, 2026
Reserved
Feb 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: rawmidi - fix the uninitalized user_pversion

The user_pversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc for the allocation.

The kernel ALSA sequencer code clears the file structure, so no additional fixes are required.

BugLink: https://github.com/alsa-project/alsa-lib/issues/178

Scores

CVSSScoreVectorSource
3.14.0 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 09d23174402da0f10e98da2c61bb5ac8e7d79fdd to before b398fcbe4de1e1100867fdb6f447c6fbc8fe7085Affected
  • 09d23174402da0f10e98da2c61bb5ac8e7d79fdd to before 39a8fc4971a00d22536aeb7d446ee4a97810611bAffected
  • 12d50801497235956fb3760be8530f4e44e4ce67Affected
  • 5.14.10 to before 5.15Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.12 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.