CVE-2021-47263
In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1) which is not right, and this was caught by below usban…
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1) which is not right, and this was caught by below usban check UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.22% probability · 13th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840Patch
- https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862Patch
- https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634Patch
- https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840Patch
- https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862Patch
- https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.