CVE-2021-47432
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode numbers throughout most of the 64 bit inode space, that triggered some corner case bugs, in…
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode numbers throughout most of the 64 bit inode space, that triggered some corner case bugs, in particular some integer overflows related to the radix tree code. Oops.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.26% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/784d01f9bbc282abb0c5ade5beb98a87f50343acPatch
- https://git.kernel.org/stable/c/9492261ff2460252cf2d8de89cdf854c7e2b28a0Patch
- https://git.kernel.org/stable/c/aa7f1827953100cdde0795289a80c6c077bfe437Patch
- https://git.kernel.org/stable/c/ec298b958cb0c40d70c68079da933c8f31c5134cPatch
- https://git.kernel.org/stable/c/784d01f9bbc282abb0c5ade5beb98a87f50343acPatch
- https://git.kernel.org/stable/c/9492261ff2460252cf2d8de89cdf854c7e2b28a0Patch
- https://git.kernel.org/stable/c/aa7f1827953100cdde0795289a80c6c077bfe437Patch
- https://git.kernel.org/stable/c/ec298b958cb0c40d70c68079da933c8f31c5134cPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.