CVE-2021-47101

EUVD-2021-33749

04.03.2024, 18:15

In the Linux kernel, the following vulnerability has been resolved:

asix: fix uninit-value in asix_mdio_read()

asix_read_cmd() may read less than sizeof(smsr) bytes and in this case
smsr will be uninitialized.

Fail log:
BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]
BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497
BUG: KMSAN: uninit-value in asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497
asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline]
asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497
asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.1 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	4.9 ≤ 𝑥 < 5.15.12
linux	linux_kernel	5.16:rc1
linux	linux_kernel	5.16:rc2
linux	linux_kernel	5.16:rc3
linux	linux_kernel	5.16:rc4
linux	linux_kernel	5.16:rc5
linux	linux_kernel	5.16:rc6

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
bullseye	vulnerable
bullseye (security)	vulnerable
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

bionic	ignored
focal	needed
jammy	not-affected
mantic	not-affected
noble	not-affected
trusty	not-affected
xenial	not-affected

linux-allwinner-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-aws

bionic	ignored
focal	needed
jammy	not-affected
mantic	not-affected
noble	not-affected
trusty	not-affected
xenial	not-affected

linux-aws-5.0

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-aws-5.11

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-aws-5.13

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-aws-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-aws-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-aws-5.3

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-aws-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-aws-5.8

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-aws-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-aws-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-aws-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-hwe

focal	dne
jammy	dne
mantic	dne
noble	dne
xenial	ignored

linux-azure

bionic	ignored
focal	needed
jammy	not-affected
mantic	not-affected
noble	not-affected
trusty	ignored
xenial	ignored

linux-azure-4.15

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-azure-5.11

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-azure-5.13

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-azure-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-azure-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-azure-5.3

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-azure-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-azure-5.8

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-azure-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-azure-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-azure-edge

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-azure-fde

focal	ignored
jammy	not-affected
mantic	dne
noble	dne

linux-azure-fde-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-azure-fde-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-azure-fde-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-azure-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-bluefield

focal	needed
jammy	dne
mantic	dne
noble	dne

linux-fips

focal	dne
jammy	dne
mantic	dne
noble	dne

linux-gcp

bionic	ignored
focal	needed
jammy	not-affected
mantic	not-affected
noble	not-affected
xenial	ignored

linux-gcp-4.15

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-gcp-5.11

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-gcp-5.13

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-gcp-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-gcp-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-gcp-5.3

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-gcp-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-gcp-5.8

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-gcp-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-gcp-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-gcp-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gke

focal	ignored
jammy	not-affected
mantic	dne
noble	not-affected

linux-gke-4.15

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-gke-5.15

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-gke-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-gkeop

focal	needed
jammy	not-affected
mantic	dne
noble	dne

linux-gkeop-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-gkeop-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-hwe

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne
xenial	ignored

linux-hwe-5.11

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-hwe-5.13

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-hwe-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-hwe-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-hwe-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-hwe-5.8

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-hwe-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-hwe-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-hwe-edge

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne
xenial	ignored

linux-ibm

focal	needed
jammy	not-affected
mantic	ignored
noble	not-affected

linux-ibm-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-ibm-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-intel

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-intel-5.13

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-intel-iot-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-intel-iotg

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-intel-iotg-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-iot

focal	needed
jammy	dne
mantic	dne
noble	dne

linux-kvm

bionic	ignored
focal	needed
jammy	not-affected
mantic	dne
noble	dne
xenial	not-affected

linux-laptop

focal	dne
jammy	dne
mantic	not-affected
noble	dne

linux-lowlatency

focal	dne
jammy	not-affected
mantic	not-affected
noble	not-affected

linux-lowlatency-hwe-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-lowlatency-hwe-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-lowlatency-hwe-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-lowlatency-hwe-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-lowlatency-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-lts-xenial

focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	not-affected

linux-nvidia

focal	dne
jammy	not-affected
mantic	dne
noble	not-affected

linux-nvidia-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-nvidia-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-nvidia-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-nvidia-lowlatency

bionic	dne
focal	dne
jammy	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oem

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-oem-5.10

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-oem-5.13

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-oem-5.14

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-oem-5.17

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-oem-5.6

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-oem-6.0

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-oem-6.1

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-oem-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-oem-6.8

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oracle

bionic	ignored
focal	needed
jammy	not-affected
mantic	not-affected
noble	not-affected
xenial	ignored

linux-oracle-5.0

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-oracle-5.11

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-oracle-5.13

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-oracle-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-oracle-5.3

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-oracle-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-oracle-5.8

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-oracle-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi

focal	needed
jammy	not-affected
mantic	not-affected
noble	not-affected

linux-raspi-5.4

bionic	ignored
focal	dne
jammy	dne
mantic	dne
noble	dne

linux-raspi-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi2

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-realtime

bionic	dne
focal	dne
jammy	ignored
noble	dne
trusty	dne
xenial	dne

linux-riscv

focal	ignored
jammy	ignored
mantic	not-affected
noble	not-affected

linux-riscv-5.11

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-riscv-5.15

focal	not-affected
jammy	dne
mantic	dne
noble	dne

linux-riscv-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-riscv-5.8

focal	ignored
jammy	dne
mantic	dne
noble	dne

linux-riscv-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-riscv-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-starfive

focal	dne
jammy	dne
mantic	not-affected
noble	dne

linux-starfive-5.19

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-starfive-6.2

focal	dne
jammy	ignored
mantic	dne
noble	dne

linux-starfive-6.5

focal	dne
jammy	not-affected
mantic	dne
noble	dne

linux-xilinx-zynqmp

focal	needed
jammy	not-affected
mantic	dne
noble	dne

Common Weakness Enumeration

CWE-908 - Use of Uninitialized Resource
The software uses or accesses a resource that has not been initialized.

References

https://git.kernel.org/stable/c/8035b1a2a37a29d8c717ef84fca8fe7278bc9f03

https://git.kernel.org/stable/c/d259f621c85949f30cc578cac813b82bb5169f56

https://git.kernel.org/stable/c/8035b1a2a37a29d8c717ef84fca8fe7278bc9f03

https://git.kernel.org/stable/c/d259f621c85949f30cc578cac813b82bb5169f56