LiveActive security incident?Get immediate response
CVE Record

CVE-2021-47645: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com

In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com On the case tmp_dcim=1, the index of buffer is miscalculated. This generate a NULL pointer dereference later. So let's fix the calcul and add a check to prevent this to reappear.

MediumCVSS 5.5Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2021-47645 is a Linux kernel availability issue in the staging media zoran driver. A miscalculated buffer index can later cause a NULL pointer dereference. The published CVSS is 5.5, local access is required, and the stated impact is denial of service, not data theft or code execution.

Executive priority

Treat this as a moderate-priority Linux reliability risk. It needs normal kernel patch management attention, especially on systems with media hardware or staging drivers, but the supplied evidence does not indicate internet-scale exposure or active exploitation.

Technical view

The flaw is CWE-476 in zoran_reap_stat_com. When tmp_dcim equals 1, the driver calculates the wrong buffer index, leading to a later NULL pointer dereference. The CVSS vector is AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. Linux stable commits are referenced as the resolution.

Likely exposure

Exposure is most relevant to Linux systems running affected kernel builds where the staging media zoran driver is present or reachable. The source bundle lists Linux as affected, with kernel version references including 2.6.12, 5.2, 5.10, 5.10.110, 5.15.33, 5.16.19, 5.17.2, and 5.18.

Exploitation context

The sources do not report active exploitation, and KEV is false. The CVSS vector indicates a local, low-privilege attacker could trigger an availability impact without user interaction. The provided evidence does not support remote exploitation, confidentiality impact, integrity impact, or privilege escalation claims.

Researcher notes

The key evidence is narrow: a buffer index calculation error in media staging zoran leading to NULL pointer dereference. The bundle provides stable kernel commit references but not distribution package advisories, exploit reports, or detailed configuration prevalence. Validate applicability against actual kernel configuration and vendor backports.

Mitigation direction

  • Apply vendor kernel updates that include the referenced Linux stable fixes.
  • Prioritize systems exposing or using the zoran staging media driver.
  • If patching is delayed, review whether the affected driver can be disabled.
  • Track Linux distribution advisories for exact package-level fixed versions.
  • Avoid assuming all kernel builds include the affected driver configuration.

Validation and detection

  • Inventory running kernel versions across Linux assets.
  • Check whether the zoran staging media driver is built, loaded, or packaged.
  • Compare installed kernels against vendor advisories and referenced stable commits.
  • Confirm updated kernels are booted, not only installed.
  • Review local crash logs for unexplained NULL pointer dereference events in this driver area.
Prepared
Confidence
high
Sources
8

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cwe · low confidence lookup

CWE-476: Exact CWE lookup

Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2021-47645 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Medium
CVSS
5.5 (3.1)
Known Exploited
No
Published

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
3Timeline events
1ADP providers
7Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
5.5CVSS 3.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H1.83.6CISA-ADP

Vulnerability scoring details

Base CVSS 3.1 score

5.5Medium
CVSS 3.1 vector shape for CVE-2021-47645Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CISA-ADPCISA ADP Vulnrichment
cvssV3_1other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 61c3b19f7b9eb7c7838fd35f86566230fefd6550, 61c3b19f7b9eb7c7838fd35f86566230fefd6550, 61c3b19f7b9eb7c7838fd35f86566230fefd6550, 61c3b19f7b9eb7c7838fd35f86566230fefd6550, 61c3b19f7b9eb7c7838fd35f86566230fefd6550unaffected
LinuxLinux2.6.12, 5.10, 0, 5.2, 5.10.110, 5.15.33, 5.16.19, 5.17.2, 5.18affected
Weakness

CWE details

CWE-476

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.

CWE-476 · source CWE mapping

NULL Pointer Dereference

NULL Pointer Dereference represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.

Open CWE intelligenceSame-CWE CVEs