Riskcovery

CVE-2021-47432

lib/generic-radix-tree.c: Don't overflow in peek()

State
Published
Severity
5.5 Medium
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

lib/generic-radix-tree.c: Don't overflow in peek()

When we started spreading new inode numbers throughout most of the 64 bit inode space, that triggered some corner case bugs, in particular some integer overflows related to the radix tree code. Oops.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ba20ba2e3743bac786dff777954c11930256075e to before 784d01f9bbc282abb0c5ade5beb98a87f50343acAffected
  • ba20ba2e3743bac786dff777954c11930256075e to before ec298b958cb0c40d70c68079da933c8f31c5134cAffected
  • ba20ba2e3743bac786dff777954c11930256075e to before aa7f1827953100cdde0795289a80c6c077bfe437Affected
  • ba20ba2e3743bac786dff777954c11930256075e to before 9492261ff2460252cf2d8de89cdf854c7e2b28a0Affected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 6.1.64 through 6.1.*Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.