CVE-2021-47263
MediumIn the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1) which is not right, and this was caught by below usban check UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
CVSS 3.1 score
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
The following references provide additional information about CVE-2021-47263 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840
-
PatchKernel patch commithttps://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862
-
PatchKernel patch commithttps://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634
Frequently asked questions
-
What is CVE-2021-47263?
CVE-2021-47263 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . CVE-2021-47263 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2021-47263?
CVE-2021-47263 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. -
Is there a patch available for CVE-2021-47263?
No patch is currently available for CVE-2021-47263. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
-
Is CVE-2021-47263 actively exploited?
No — CVE-2021-47263 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.