In the Linux kernel, the following vulnerability has been resolved:

isofs: Fix out of bound access for corrupted isofs image

When isofs image is suitably corrupted isofs_read_inode() can read data
beyond the end of buffer. Sanity-check the directory entry length before
using it.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00012.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 156ce5bb6cc43a80a743810199defb1dc3f55b7f
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 9ec33a9b8790c212cc926a88c5e2105f97f3f57e
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< afbd40f425227e661d991757e11cc4db024e761f
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< b0ddff8d68f2e43857a84dce54c3deab181c8ae1
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 6e80e9314f8bb52d9eabe1907698718ff01120f5
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 86d4aedcbc69c0f84551fb70f953c24e396de2d7
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< b2fa1f52d22c5455217b294629346ad23a744945
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< e7fb722586a2936b37bdff096c095c30ca06404d
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< e96a1866b40570b5950cda8602c2819189c62a48
Linux Linux affected
Version Status Constraints
2.6.12 affected
—
0 unaffected
< 2.6.12
4.4.292 unaffected
≤ 4.4.*
4.9.290 unaffected
≤ 4.9.*
4.14.255 unaffected
≤ 4.14.*
4.19.217 unaffected
≤ 4.19.*
5.4.159 unaffected
≤ 5.4.*
5.10.79 unaffected
≤ 5.10.*
5.14.18 unaffected
≤ 5.14.*
5.15.2 unaffected
≤ 5.15.*
5.16 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7f cve-icon cve-icon
https://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5 cve-icon cve-icon
https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7 cve-icon cve-icon
https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57e cve-icon cve-icon
https://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761f cve-icon cve-icon
https://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1 cve-icon cve-icon
https://git.kernel.org/stable/c/b2fa1f52d22c5455217b294629346ad23a744945 cve-icon cve-icon
https://git.kernel.org/stable/c/e7fb722586a2936b37bdff096c095c30ca06404d cve-icon cve-icon
https://git.kernel.org/stable/c/e96a1866b40570b5950cda8602c2819189c62a48 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052237-CVE-2021-47478-c124@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47478 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47478 cve-icon
History

Wed, 02 Apr 2025 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 07 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Mon, 04 Nov 2024 12:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-18T11:37:37.785Z

Reserved: 2024-05-22T06:20:56.200Z

Link: CVE-2021-47478

cve-icon Vulnrichment

Updated: 2024-08-04T05:39:59.618Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-22T09:15:09.747

Modified: 2025-04-02T15:09:59.787

Link: CVE-2021-47478

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-22T00:00:00Z

Links: CVE-2021-47478 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses