CVE-2021-47263
published 2024-05-21CVE-2021-47263: In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4)…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
13.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
gpio: wcd934x: Fix shift-out-of-bounds error
bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1)
which is not right, and this was caught by below usban check
UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 59c324683400b41caa6d85b091e812ee3d5415c3 < e0b518a2eb44d8a74c19e50f79a8ed393e96d634 | e0b518a2eb44d8a74c19e50f79a8ed393e96d634 |
| linux | linux | >= 59c324683400b41caa6d85b091e812ee3d5415c3 < dd55331d493b7ea75c5db1f24d6822946fde2862 | dd55331d493b7ea75c5db1f24d6822946fde2862 |
| linux | linux | >= 59c324683400b41caa6d85b091e812ee3d5415c3 < dbec64b11c65d74f31427e2b9d5746fbf17bf840 | dbec64b11c65d74f31427e2b9d5746fbf17bf840 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 5.11 < 5.12.11 | 5.12.11 |
| linux | linux_kernel | >= 5.6 < 5.10.44 | 5.10.44 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4mwj-7h55-4fvc: In the Linux kernel, the following vulnerability has been resolved:
gpio: wcd934x: Fix shift-out-of-bounds error
bit-mask for pins 0 to 4 is BIT(0)
ghsa_unreviewed·2024-05-21
CVE-2021-47263 [MEDIUM] GHSA-4mwj-7h55-4fvc: In the Linux kernel, the following vulnerability has been resolved:
gpio: wcd934x: Fix shift-out-of-bounds error
bit-mask for pins 0 to 4 is BIT(0)
In the Linux kernel, the following vulnerability has been resolved:
gpio: wcd934x: Fix shift-out-of-bounds error
bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1)
which is not right, and this was caught by below usban check
UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
OSV
CVE-2021-47263: In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to
osv·2024-05-21·CVSS 5.5
CVE-2021-47263 [MEDIUM] CVE-2021-47263: In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to
In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1) which is not right, and this was caught by below usban check UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
Red Hat
kernel: gpio: wcd934x: Fix shift-out-of-bounds error
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2021-47263 [MEDIUM] CWE-1335 kernel: gpio: wcd934x: Fix shift-out-of-bounds error
kernel: gpio: wcd934x: Fix shift-out-of-bounds error
In the Linux kernel, the following vulnerability has been resolved:
gpio: wcd934x: Fix shift-out-of-bounds error
bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1)
which is not right, and this was caught by below usban check
UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not
Debian
CVE-2021-47263: linux - In the Linux kernel, the following vulnerability has been resolved: gpio: wcd93...
vendor_debian·2021·CVSS 5.5
CVE-2021-47263 [MEDIUM] CVE-2021-47263: linux - In the Linux kernel, the following vulnerability has been resolved: gpio: wcd93...
In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1) which is not right, and this was caught by below usban check UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
Scope: local
bookworm: resolved (fixed in 5.10.46-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.10.46-1)
sid: resolved (fixed in 5.10.46-1)
trixie: resolved (fixed in 5.10.46-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634
2024-05-21
Published