Out-of-bounds Read Affecting kernel-bootwrapper package, versions *
Threat Intelligence
EPSS
0.05% (17th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RHEL7-KERNELBOOTWRAPPER-6403049
- published 6 Mar 2024
- disclosed 4 Mar 2024
Introduced: 4 Mar 2024
CVE-2021-47083 Open this link in a new tabHow to fix?
There is no fixed version for RHEL:7 kernel-bootwrapper.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-bootwrapper package and not the kernel-bootwrapper package as distributed by RHEL.
See How to fix? for RHEL:7 relevant fixed versions and status.
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: mediatek: fix global-out-of-bounds issue
When eint virtual eint number is greater than gpio number, it maybe produce 'desc[eint_n]' size globle-out-of-bounds issue.
References
- https://access.redhat.com/security/cve/CVE-2021-47083
- https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d
- https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed
- https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f
- https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69
CVSS Scores
version 3.1