Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 4.4.292 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7fPatch
- https://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5Patch
- https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7Patch
- https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57ePatch
- https://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761fPatch
- https://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1Patch
- https://git.kernel.org/stable/c/b2fa1f52d22c5455217b294629346ad23a744945Patch
- https://git.kernel.org/stable/c/e7fb722586a2936b37bdff096c095c30ca06404dPatch
- https://git.kernel.org/stable/c/e96a1866b40570b5950cda8602c2819189c62a48Patch
- https://git.kernel.org/stable/c/156ce5bb6cc43a80a743810199defb1dc3f55b7fPatch
- https://git.kernel.org/stable/c/6e80e9314f8bb52d9eabe1907698718ff01120f5Patch
- https://git.kernel.org/stable/c/86d4aedcbc69c0f84551fb70f953c24e396de2d7Patch
- https://git.kernel.org/stable/c/9ec33a9b8790c212cc926a88c5e2105f97f3f57ePatch
- https://git.kernel.org/stable/c/afbd40f425227e661d991757e11cc4db024e761fPatch
- https://git.kernel.org/stable/c/b0ddff8d68f2e43857a84dce54c3deab181c8ae1Patch
FAQ
What is CVE-2021-47478?
CVE-2021-47478 is a vulnerability with a CVSS score of 9.1 (CRITICAL). In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data b...
How severe is CVE-2021-47478?
CVE-2021-47478 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-47478?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.