CVE-2021-47263

MEDIUM

Linux Kernel 5.6-5.10.44 5.12.11-5.12.* 5.13 - Shift-Out-of-Bounds Error in GPIO WCD934x Driver

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: wcd934x: Fix shift-out-of-bounds error bit-mask for pins 0 to 4 is BIT(0) to BIT(4) however we ended up with BIT(n - 1) which is not right, and this was caught by below usban check UBSAN: shift-out-of-bounds in drivers/gpio/gpio-wcd934x.c:34:14

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/e0b518a2eb44d8a74c19e50f79a8ed393e96d634

Patch

https://git.kernel.org/stable/c/dd55331d493b7ea75c5db1f24d6822946fde2862

Patch

https://git.kernel.org/stable/c/dbec64b11c65d74f31427e2b9d5746fbf17bf840

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 13.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (10)

Linux/Linux < 5.6

Linux/Linux 5.10.44 - 5.10.*

Linux/Linux 5.12.11 - 5.12.*

Linux/Linux 5.13

Linux/Linux 5.6

Linux/Linux 59c324683400b41caa6d85b091e812ee3d5415c3 - dbec64b11c65d74f31427e2b9d5746fbf17bf840

Linux/Linux 59c324683400b41caa6d85b091e812ee3d5415c3 - dd55331d493b7ea75c5db1f24d6822946fde2862

Linux/Linux 59c324683400b41caa6d85b091e812ee3d5415c3 - e0b518a2eb44d8a74c19e50f79a8ed393e96d634

linux/linux_kernel 5.13 rc1 (5 CPE variants)

linux/linux_kernel 5.6 - 5.10.44

Published May 21, 2024

Tracked Since Feb 18, 2026