CVE-2021-47083 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desc[eint_n]' size globle-out-of-bounds issue.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d
https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed
https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f
https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69
https://lore.kernel.org/linux-cve-announce/2024030454-CVE-2021-47083-eab5@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47083
https://www.cve.org/CVERecord?id=CVE-2021-47083

History

Mon, 04 Nov 2024 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-04T18:06:20.100Z

Updated: 2024-11-04T11:59:06.454Z

Reserved: 2024-02-29T22:33:44.298Z

Link: CVE-2021-47083

Vulnrichment

Updated: 2024-08-04T05:24:39.666Z

NVD

Status : Awaiting Analysis

Published: 2024-03-04T18:15:07.193

Modified: 2024-03-05T13:41:01.900

Link: CVE-2021-47083

Redhat

Severity : Moderate

Publid Date: 2024-03-04T00:00:00Z

Links: CVE-2021-47083 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47083", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-29T22:33:44.298Z", "datePublished": "2024-03-04T18:06:20.100Z", "dateUpdated": "2024-11-04T11:59:06.454Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T11:59:06.454Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: mediatek: fix global-out-of-bounds issue\n\nWhen eint virtual eint number is greater than gpio number,\nit maybe produce 'desc[eint_n]' size globle-out-of-bounds issue."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/pinctrl/mediatek/pinctrl-mtk-common-v2.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "f373298e1bf0", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "441d3873664d", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "fb563baa3eb8", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "2d5446da5ace", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/pinctrl/mediatek/pinctrl-mtk-common-v2.c"], "versions": [{"version": "5.4.169", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.89", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.12", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.16", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f"}, {"url": "https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed"}, {"url": "https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69"}, {"url": "https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d"}], "title": "pinctrl: mediatek: fix global-out-of-bounds issue", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47083", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-04T19:54:49.113562Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T17:22:07.207Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.666Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.666Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47083", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-04T19:54:49.113562Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T15:20:41.256Z"}}], "cna": {"title": "pinctrl: mediatek: fix global-out-of-bounds issue", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "f373298e1bf0", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "441d3873664d", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "fb563baa3eb8", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "2d5446da5ace", "versionType": "git"}], "programFiles": ["drivers/pinctrl/mediatek/pinctrl-mtk-common-v2.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "5.4.169", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.89", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.12", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/pinctrl/mediatek/pinctrl-mtk-common-v2.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f"}, {"url": "https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed"}, {"url": "https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69"}, {"url": "https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: mediatek: fix global-out-of-bounds issue\n\nWhen eint virtual eint number is greater than gpio number,\nit maybe produce 'desc[eint_n]' size globle-out-of-bounds issue."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T11:59:06.454Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47083", "state": "PUBLISHED", "dateUpdated": "2024-11-04T11:59:06.454Z", "dateReserved": "2024-02-29T22:33:44.298Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-03-04T18:06:20.100Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}