CVE-2021-47511

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47511
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers. This patch changes the code to handle with ssize_t and adds the proper error checks appropriately.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc Patch
https://git.kernel.org/stable/c/02b2b691b77cd7b951fa7b6c9d44d4e472cdc823 Patch
https://git.kernel.org/stable/c/502e1146873d870f87da3b8f93d6bf2de5f38d0c Patch
https://git.kernel.org/stable/c/8af815ab052eaf74addbbfb556d63ce2137c0e1b Patch
https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f386970c13d9cfe Patch
https://git.kernel.org/stable/c/be8869d388593e57223ad39297c8e54be632f2f2 Patch
https://git.kernel.org/stable/c/f12c8a7515f641885677960af450082569a87243 Patch
https://git.kernel.org/stable/c/f96c0959c1ee92adc911c10d6ec209af50105049 Patch
https://git.kernel.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc Patch
https://git.kernel.org/stable/c/02b2b691b77cd7b951fa7b6c9d44d4e472cdc823 Patch
https://git.kernel.org/stable/c/502e1146873d870f87da3b8f93d6bf2de5f38d0c Patch
https://git.kernel.org/stable/c/8af815ab052eaf74addbbfb556d63ce2137c0e1b Patch
https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f386970c13d9cfe Patch
https://git.kernel.org/stable/c/be8869d388593e57223ad39297c8e54be632f2f2 Patch
https://git.kernel.org/stable/c/f12c8a7515f641885677960af450082569a87243 Patch
https://git.kernel.org/stable/c/f96c0959c1ee92adc911c10d6ec209af50105049 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
History

29 Sep 2025, 17:09

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc - () https://git.kernel.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc - Patch
References () https://git.kernel.org/stable/c/02b2b691b77cd7b951fa7b6c9d44d4e472cdc823 - () https://git.kernel.org/stable/c/02b2b691b77cd7b951fa7b6c9d44d4e472cdc823 - Patch
References () https://git.kernel.org/stable/c/502e1146873d870f87da3b8f93d6bf2de5f38d0c - () https://git.kernel.org/stable/c/502e1146873d870f87da3b8f93d6bf2de5f38d0c - Patch
References () https://git.kernel.org/stable/c/8af815ab052eaf74addbbfb556d63ce2137c0e1b - () https://git.kernel.org/stable/c/8af815ab052eaf74addbbfb556d63ce2137c0e1b - Patch
References () https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f386970c13d9cfe - () https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f386970c13d9cfe - Patch
References () https://git.kernel.org/stable/c/be8869d388593e57223ad39297c8e54be632f2f2 - () https://git.kernel.org/stable/c/be8869d388593e57223ad39297c8e54be632f2f2 - Patch
References () https://git.kernel.org/stable/c/f12c8a7515f641885677960af450082569a87243 - () https://git.kernel.org/stable/c/f12c8a7515f641885677960af450082569a87243 - Patch
References () https://git.kernel.org/stable/c/f96c0959c1ee92adc911c10d6ec209af50105049 - () https://git.kernel.org/stable/c/f96c0959c1ee92adc911c10d6ec209af50105049 - Patch

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc - () https://git.kernel.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc -
References () https://git.kernel.org/stable/c/02b2b691b77cd7b951fa7b6c9d44d4e472cdc823 - () https://git.kernel.org/stable/c/02b2b691b77cd7b951fa7b6c9d44d4e472cdc823 -
References () https://git.kernel.org/stable/c/502e1146873d870f87da3b8f93d6bf2de5f38d0c - () https://git.kernel.org/stable/c/502e1146873d870f87da3b8f93d6bf2de5f38d0c -
References () https://git.kernel.org/stable/c/8af815ab052eaf74addbbfb556d63ce2137c0e1b - () https://git.kernel.org/stable/c/8af815ab052eaf74addbbfb556d63ce2137c0e1b -
References () https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f386970c13d9cfe - () https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f386970c13d9cfe -
References () https://git.kernel.org/stable/c/be8869d388593e57223ad39297c8e54be632f2f2 - () https://git.kernel.org/stable/c/be8869d388593e57223ad39297c8e54be632f2f2 -
References () https://git.kernel.org/stable/c/f12c8a7515f641885677960af450082569a87243 - () https://git.kernel.org/stable/c/f12c8a7515f641885677960af450082569a87243 -
References () https://git.kernel.org/stable/c/f96c0959c1ee92adc911c10d6ec209af50105049 - () https://git.kernel.org/stable/c/f96c0959c1ee92adc911c10d6ec209af50105049 -

04 Nov 2024, 21:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: pcm: oss: corrige tamaños de período/búfer negativos El cálculo del tamaño del período en la capa OSS puede recibir un valor negativo como error, pero el código allí asume solo los valores positivos y manejarlos con size_t. Debido a esto, es posible que se pase un valor demasiado grande a las capas inferiores. Este parche cambia el código para manejar con ssize_t y agrega las comprobaciones de errores adecuadas.

24 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-24 15:15

Updated : 2025-09-29 17:09

NVD link : CVE-2021-47511

Mitre link : CVE-2021-47511

CVE.ORG link : CVE-2021-47511

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo