Loading story…
CVE-2021-47101 affects the Linux kernel's ASIX USB networking driver in drivers/net/usb/asix_common.c. A short response from asix_read_cmd() in asix_mdio_read() can leave the smsr buffer uninitialized before asix_check_host_enable() uses it, potentially exposing uninitialized memory data or causing availability impacts through local exploitation. The flaw was introduced in Linux 4.9 and is fixed upstream in kernel versions 5.15.12 and 5.16 and later.
Red Hat rates the issue at CVSS 6.0, while NVD assigns 7.1. Fixes are available for standard and real-time kernels in Red Hat Enterprise Linux 8 and the standard kernel in RHEL 9, including RHEL 9.4 Extended Update Support; the RHEL 9 kernel-rt package remains affected. Organizations using ASIX USB network adapters should deploy the latest vendor-supported kernel updates rather than cherry-picking individual patches.
See affected versions and whether adversaries are exploiting it.
6 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:7000 for the RHEL 8 standard kernel and RHSA-2024:7001 for the RHEL 8 real-time kernel to address CVE-2021-47101.
Red Hat published its record for CVE-2021-47101, describing a use-of-uninitialized-variable vulnerability in the Linux kernel ASIX USB network driver.
Red Hat released RHSA-2025:3935 to address CVE-2021-47101 in the Red Hat Enterprise Linux 9.4 Extended Update Support kernel.
Red Hat released RHSA-2024:9315 to fix CVE-2021-47101 in the standard Red Hat Enterprise Linux 9 kernel.
Linux kernel versions 5.15.12 and 5.16 fixed the ASIX asix_mdio_read() uninitialized-value condition through commits d259f621c859 and 8035b1a2a37a, respectively.
The uninitialized-value flaw in the ASIX USB networking driver's asix_mdio_read() function was introduced in Linux kernel version 4.9 by commit d9fe64e51114.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CVE-2024-26638 is a low-severity flaw in the Linux kernel's Network Block Device (NBD) driver, introduced in kernel version 5.19. Incomplete initialization of a `struct msghdr` in the NBD reply-receive path can expose the uninitialized `msg_get_inq` field during `tcp_recvmsg` processing, triggering a KMSAN uninitialized-value error and affecting system availability. Exploitation requires local access and high privileges; Red Hat assigns a CVSS 3.1 score of 4.4. The upstream issue is fixed in Linux 6.1.76, 6.6.15, 6.7.3, 6.8, and later stable releases. Red Hat has issued fixes for affected Red Hat Enterprise Linux 8, RHEL 9, and RHEL 9.4 Extended Update Support packages, while RHEL 8 and RHEL 9 real-time kernels remain affected; unsupported RHEL 6 and 7 variants should be considered potentially affected. Organizations should update to vendor-supported current kernel releases rather than cherry-picking the individual upstream patch.
Aug 26, 2026
**CVE-2021-47527** affects the Linux kernel serial core (`drivers/tty/serial/serial_core.c`) because a UART transmit buffer was not freed and reset when a port was finally closed after conversion to `tty_port_close()`. A local low-privileged user could subsequently cause operations waiting for the buffer to drain to hang indefinitely, transmit stale buffered data after a port restart, or leak memory if an open serial-port driver is unbound. Red Hat rates the uncontrolled-resource-consumption issue as CVSS 5.5, with availability impact as the primary risk. The flaw was introduced in Linux kernel 4.9 and fixed upstream in versions 4.9.292, 4.14.257, 4.19.220, 5.4.164, 5.10.84, 5.15.7, and 5.16. Red Hat shipped fixes for affected RHEL 8 kernel and `kernel-rt` packages in advisories RHSA-2024:7000 and RHSA-2024:7001, and later addressed RHEL 9.4 Extended Update Support; RHEL 9 kernel and `kernel-rt` packages remained listed as affected in the referenced Red Hat status.
Aug 26, 2026
**CVE-2022-48760** is a Linux kernel USB-core synchronization flaw that can leave processes indefinitely blocked in `usb_kill_urb()` on SMP systems. Insufficient memory ordering between concurrent `usb_kill_urb()` and `__usb_hcd_giveback_urb()` operations can cause a USB request block completion wake-up to be missed; equivalent store-buffering patterns also affect `usb_poison_urb()` and the failure path of `usb_hcd_submit_urb()`. The upstream fix adds full memory barriers through `smp_mb__after_atomic()` and is available in kernel versions 4.4.302, 4.9.300, 4.14.265, 4.19.228, 5.4.176, 5.10.96, 5.15.19, 5.16.5, and 5.17 or later. Red Hat rated the issue Low severity (CVSS 4.1) and released RHEL 8 kernel and kernel-rt updates in **RHSA-2024:7000** and **RHSA-2024:7001**; RHEL 9 fixes remain deferred, while RHEL 6 and 7 are outside support scope.
Aug 26, 2026