What’s Vulnerable › Vulnerabilities

CVE-2021-47083: pinctrl: mediatek: fix global-out-of-bounds issue

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-04 · updated 2026-08-04
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number is greater than gpio number, it maybe produce 'desc[eint_n]' size globle-out-of-bounds issue.

Affected products

• Linux kernel: before 5.4.169; from 5.5 before 5.10.89; from 5.11 before 5.15.12; 5.16-rc1, 5.16-rc2, 5.16-rc3, 5.16-rc4, 5.16-rc5, 5.16-rc6 — fixed in 5.10.89, 5.15.12, 5.4.169

How to fix

Upgrade to a fixed version: Linux kernel 5.10.89, 5.15.12, 5.4.169. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d
• https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed
• https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f
• https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69
• https://git.kernel.org/stable/c/2d5446da5acecf9c67db1c9d55ae2c3e5de01f8d
• https://git.kernel.org/stable/c/441d3873664d170982922c5d2fc01fa89d9439ed
• https://git.kernel.org/stable/c/f373298e1bf0c6ea097c0bcc558dc43ad53e421f
• https://git.kernel.org/stable/c/fb563baa3eb8e7a15f2cff3c2695e2cca0493e69

Get alerted when CVE-2021-47083 or the next vulnerability affects your stack