CVE-2021-47478
published 2024-05-22CVE-2021-47478: In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably…
PriorityP343critical9.1CVSS 3.1
AVNACLPRNUINSUCHINAH
EPSS
0.69%
52.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is suitably corrupted isofs_read_inode() can read data
beyond the end of buffer. Sanity-check the directory entry length before
using it.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.3-1 (bookworm) | linux 5.15.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 156ce5bb6cc43a80a743810199defb1dc3f55b7f | 156ce5bb6cc43a80a743810199defb1dc3f55b7f |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9ec33a9b8790c212cc926a88c5e2105f97f3f57e | 9ec33a9b8790c212cc926a88c5e2105f97f3f57e |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < afbd40f425227e661d991757e11cc4db024e761f | afbd40f425227e661d991757e11cc4db024e761f |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b0ddff8d68f2e43857a84dce54c3deab181c8ae1 | b0ddff8d68f2e43857a84dce54c3deab181c8ae1 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6e80e9314f8bb52d9eabe1907698718ff01120f5 | 6e80e9314f8bb52d9eabe1907698718ff01120f5 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 86d4aedcbc69c0f84551fb70f953c24e396de2d7 | 86d4aedcbc69c0f84551fb70f953c24e396de2d7 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b2fa1f52d22c5455217b294629346ad23a744945 | b2fa1f52d22c5455217b294629346ad23a744945 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e7fb722586a2936b37bdff096c095c30ca06404d | e7fb722586a2936b37bdff096c095c30ca06404d |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e96a1866b40570b5950cda8602c2819189c62a48 | e96a1866b40570b5950cda8602c2819189c62a48 |
| linux | linux_kernel | < 4.4.292 | 4.4.292 |
| linux | linux_kernel | >= 0 < 5.10.84-1 | 5.10.84-1 |
| linux | linux_kernel | >= 0 < 5.15.3-1 | 5.15.3-1 |
| linux | linux_kernel | >= 0 < 5.15.3-1 | 5.15.3-1 |
| linux | linux_kernel | >= 0 < 5.15.3-1 | 5.15.3-1 |
| linux | linux_kernel | >= 4.10 < 4.14.255 | 4.14.255 |
| linux | linux_kernel | >= 4.15 < 4.19.217 | 4.19.217 |
| linux | linux_kernel | >= 4.20 < 5.4.159 | 5.4.159 |
| linux | linux_kernel | >= 4.5 < 4.9.290 | 4.9.290 |
| linux | linux_kernel | >= 5.11 < 5.14.18 | 5.14.18 |
| linux | linux_kernel | >= 5.15 < 5.15.2 | 5.15.2 |
| linux | linux_kernel | >= 5.5 < 5.10.79 | 5.10.79 |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2021-47478: In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suita
osv·2024-05-22·CVSS 5.5
CVE-2021-47478 [MEDIUM] CVE-2021-47478: In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suita
In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.
GHSA
GHSA-rh2v-79c5-2v68: In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is sui
ghsa_unreviewed·2024-05-22
CVE-2021-47478 [MEDIUM] CWE-125 GHSA-rh2v-79c5-2v68: In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is sui
In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is suitably corrupted isofs_read_inode() can read data
beyond the end of buffer. Sanity-check the directory entry length before
using it.
Red Hat
kernel: isofs: Fix out of bound access for corrupted isofs image
vendor_redhat·2024-05-22·CVSS 5.5
CVE-2021-47478 [MEDIUM] CWE-125 kernel: isofs: Fix out of bound access for corrupted isofs image
kernel: isofs: Fix out of bound access for corrupted isofs image
In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is suitably corrupted isofs_read_inode() can read data
beyond the end of buffer. Sanity-check the directory entry length before
using it.
A vulnerability was found in the Linux kernel in the isofs_read_inode() where a missing sanity check on the length of a directory entry can lead to an out-of-bounds access. This vulnerability could lead to memory corruption or crashes.
Statement: Red Hat Enterprise Linux is not impacted by this CVE, as the vulnerability in question does not affect the specific versions or configurations of the Linux kernel used in its distributions. This ensures th
Debian
CVE-2021-47478: linux - In the Linux kernel, the following vulnerability has been resolved: isofs: Fix ...
vendor_debian·2021·CVSS 5.5
CVE-2021-47478 [MEDIUM] CVE-2021-47478: linux - In the Linux kernel, the following vulnerability has been resolved: isofs: Fix ...
In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.
Scope: local
bookworm: resolved (fixed in 5.15.3-1)
bullseye: resolved (fixed in 5.10.84-1)
forky: resolved (fixed in 5.15.3-1)
sid: resolved (fixed in 5.15.3-1)
trixie: resolved (fixed in 5.15.3-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7fhttps://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57ehttps://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761fhttps://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1https://git.kernel.org/stable/c/b2fa1f52d22c5455217b294629346ad23a744945https://git.kernel.org/stable/c/e7fb722586a2936b37bdff096c095c30ca06404dhttps://git.kernel.org/stable/c/e96a1866b40570b5950cda8602c2819189c62a48https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7fhttps://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57ehttps://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761fhttps://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1https://git.kernel.org/stable/c/b2fa1f52d22c5455217b294629346ad23a744945https://git.kernel.org/stable/c/e7fb722586a2936b37bdff096c095c30ca06404dhttps://git.kernel.org/stable/c/e96a1866b40570b5950cda8602c2819189c62a48
2024-05-22
Published