CVE-2021-47478

Published: May 22, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.

Affected (8)

Products: Linux: Linux Kernel

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 4.4.292
Linux Linux Kernel	From 4.10 to 4.14.255
Linux Linux Kernel	From 4.15 to 4.19.217
Linux Linux Kernel	From 4.20 to 5.4.159
Linux Linux Kernel	From 4.5 to 4.9.290
Linux Linux Kernel	From 5.11 to 5.14.18
Linux Linux Kernel	From 5.15 to 5.15.2
Linux Linux Kernel	From 5.5 to 5.10.79

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (18)

https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7f

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761f

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/b2fa1f52d22c5455217b294629346ad23a744945

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e7fb722586a2936b37bdff096c095c30ca06404d

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e96a1866b40570b5950cda8602c2819189c62a48

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7f

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57e

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761f

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/b2fa1f52d22c5455217b294629346ad23a744945

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/e7fb722586a2936b37bdff096c095c30ca06404d

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/e96a1866b40570b5950cda8602c2819189c62a48

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.