What’s Vulnerable › Vulnerabilities

CVE-2021-47096: ALSA: rawmidi - fix the uninitalized user_pversion

• Severity: medium (CVSS 4.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-04 · updated 2026-06-17
• Weakness: CWE-908

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion The user_pversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc for the allocation. The kernel ALSA sequencer code clears the file structure, so no additional fixes are required. BugLink: https://github.com/alsa-project/alsa-lib/issues/178

Affected products

• Linux kernel: from 5.15 before 5.15.12; 5.16-rc1, 5.16-rc2, 5.16-rc3, 5.16-rc4, 5.16-rc5, 5.16-rc6 — fixed in 5.15.12

How to fix

Upgrade to a fixed version: Linux kernel 5.15.12. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b
• https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085
• https://git.kernel.org/stable/c/39a8fc4971a00d22536aeb7d446ee4a97810611b
• https://git.kernel.org/stable/c/b398fcbe4de1e1100867fdb6f447c6fbc8fe7085

Get alerted when CVE-2021-47096 or the next vulnerability affects your stack