CVE-2021-47446CWE-908

CVE-2021-47446

High · published May 22, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/a4xx: fix error handling in a4xx_gpu_init()

This code returns 1 on error instead of a negative error. It leads to

an Oops in the caller. A second problem is that the check for

"if (ret != -ENODATA)" cannot be true because "ret" is set to 1.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-908 · Use of Uninitialized Resource
Published
2024-05-22T11:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 5.11, < 5.14.145.14.14
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 22 MAY 06:19Z
    drm/msm/a4xx: fix error handling in a4xx_gpu_init()
    cvelistv5