VDB
CVE-2021-47432
CVE-2021-47432
PUBLISHED
CVSS 5.5 MEDIUM
lib/generic-radix-tree.c: Don't overflow in peek()
Reported by linux · Published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode numbers throughout most of the 64 bit inode space, that triggered some corner case bugs, in particular some integer overflows related to the radix tree code. Oops.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| kernel-livepatch-6.1.66-91.160 | Amazon Linux | 1.0-0.amzn2023 |
| kernel-libbpf | Amazon Linux | 6.1.66-91.160.amzn2023 |
| linux_kernel | linux | 6.6.3, 6.5.13, 6.1.64 |
| Linux | Linux | ec298b958cb0c40d70c68079da933c8f31c5134c, 784d01f9bbc282abb0c5ade5beb98a87f50343ac, 5.1 |
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | ba20ba2e3743bac786dff777954c11930256075e, ba20ba2e3743bac786dff777954c11930256075e, ba20ba2e3743bac786dff777954c11930256075e |
| Linux | Linux | 5.1, 0, 6.1.64 |
| amazon:2023 | kernel-livepatch-6.1.66-91.160 | 0 |
| amazon:2023 | kernel-libbpf | 0 |
| Linux | Linux | *, 6.6.3, 6.7 |
| amazon:2023 | kernel-modules-extra | 0 |
| linux | linux_kernel | 5.1, 5.1, 5.1 |
| amazon:2023 | kernel-libbpf-static | 0 |
| amazon:2023 | python3-perf | 0 |
| amazon:2023 | kernel-devel | 0 |
| amazon:2023 | kernel | 0 |
| amazon:2023 | kernel-headers | 0 |
| amazon:2023 | kernel-libbpf-devel | 0 |
| amazon:2023 | kernel-tools | 0 |
| amazon:2023 | kernel-tools-devel | 0 |
| amazon:2023 | perf | 0 |
| amazon:2023 | bpftool | 0 |
Timeline
- May 21, 2024 CVE Published
- May 22, 2024 EPSS Score (30 in total, the first dated here)
- Apr 2, 2026 Distribution Patch (180 in total, the first dated here)
- Apr 2, 2026 Security Advisory (273 in total, the first dated here)
- Jul 13, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2021-47432
vulnetix vdb fixes CVE-2021-47432Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-47432/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart