NetSight
critical9.1

CVE-2021-47478

In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corru…

Impact

In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.292
from 4.5 before 4.9.290
from 4.10 before 4.14.255
from 4.15 before 4.19.217
from 4.20 before 5.4.159
from 5.5 before 5.10.79

Weakness classification

References