CVE-2021-47083: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47083 is a vulnerability in the Linux kernel's MediaTek pinctrl driver that was discovered and resolved in 2021. The issue affects the pinctrl subsystem, specifically in the mediatek component, where a global out-of-bounds condition could occur when the eint virtual eint number is greater than the gpio number (CVE Mitre).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) in the MediaTek pinctrl driver. The problem occurs in the mtk_xt_get_gpio_n function within the pinctrl-mtk-common-v2.c file, where accessing desc[eint_n] could result in a global out-of-bounds condition when the eint virtual eint number exceeds the gpio number. The vulnerability has been assigned a CVSS v3.1 base score of 7.1, indicating a moderate severity level (Red Hat).

The vulnerability could potentially lead to unauthorized access to memory locations outside the intended boundaries, which may result in information disclosure or system instability. The issue affects the confidentiality and availability of the system, with high impact ratings for both aspects (Red Hat).

The vulnerability requires local access with low attack complexity and low privileges to exploit. The attack vector is local, and no user interaction is required for exploitation (Red Hat).

The vulnerability has been fixed in the Linux kernel through a patch that adds a boundary check before accessing the desc array. The fix ensures that the eint_n value is compared against hw->soc->npins to prevent out-of-bounds access. Multiple stable kernel versions have received the fix through backported patches (Kernel Git).