Vulnerability Details : CVE-2021-47101
In the Linux kernel, the following vulnerability has been resolved:
asix: fix uninit-value in asix_mdio_read()
asix_read_cmd() may read less than sizeof(smsr) bytes and in this case
smsr will be uninitialized.
Fail log:
BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]
BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497
BUG: KMSAN: uninit-value in asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497
asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]
asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497
asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497
Products affected by CVE-2021-47101
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-47101
0.01%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-47101
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.1
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
1.8
|
5.2
|
NIST | 2025-02-03 |
CWE ids for CVE-2021-47101
-
The product uses or accesses a resource that has not been initialized.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-47101
-
https://git.kernel.org/stable/c/d259f621c85949f30cc578cac813b82bb5169f56
asix: fix uninit-value in asix_mdio_read() - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/8035b1a2a37a29d8c717ef84fca8fe7278bc9f03
asix: fix uninit-value in asix_mdio_read() - kernel/git/stable/linux.git - Linux kernel stable treePatch
Jump to