cbcvebase.
CVE-2021-47511
published 2024-05-24

CVE-2021-47511: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.1th percentile
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers. This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.15.15-1 (bookworm)linux 5.15.15-1 (bookworm)
linuxlinux——
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < be8869d388593e57223ad39297c8e54be632f2f2be8869d388593e57223ad39297c8e54be632f2f2
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 502e1146873d870f87da3b8f93d6bf2de5f38d0c502e1146873d870f87da3b8f93d6bf2de5f38d0c
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8af815ab052eaf74addbbfb556d63ce2137c0e1b8af815ab052eaf74addbbfb556d63ce2137c0e1b
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f96c0959c1ee92adc911c10d6ec209af50105049f96c0959c1ee92adc911c10d6ec209af50105049
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f12c8a7515f641885677960af450082569a87243f12c8a7515f641885677960af450082569a87243
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 02b2b691b77cd7b951fa7b6c9d44d4e472cdc82302b2b691b77cd7b951fa7b6c9d44d4e472cdc823
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc
linuxlinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9d2479c960875ca1239bcb899f386970c13d9cfe9d2479c960875ca1239bcb899f386970c13d9cfe
linuxlinux_kernel< 4.4.2954.4.295
linuxlinux_kernel——
linuxlinux_kernel>= 0 < 5.10.92-15.10.92-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 4.10 < 4.14.2584.14.258
linuxlinux_kernel>= 4.15 < 4.19.2214.19.221
linuxlinux_kernel>= 4.20 < 5.4.1655.4.165
linuxlinux_kernel>= 4.5 < 4.9.2934.9.293
linuxlinux_kernel>= 5.11 < 5.15.85.15.8
linuxlinux_kernel>= 5.5 < 5.10.855.10.85

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.