CVE-2021-47478

CriticalCVSS 9.1

Published: 22/05/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.68%

49th percentile - higher than 49% of all known CVEs

Summary

In the Linux kernel, the isofs module has an out-of-bounds access when reading a corrupted ISO image. The fix adds a sanity check on the directory entry length before using it.

Risk Assessment

The vulnerability may lead to out-of-bounds memory reads, potentially causing system crashes or exposure of sensitive data.

Recommendation

Apply the Linux kernel update containing the fix for CVE-2021-47478.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.