Vulnerability · Published May 21, 2024 · Assigned by Linux
CVE-2021-47432lib/generic-radix-tree.c: Don't overflow in peek()
Medium 5.5
In plain English
A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 83.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading new inode numbers throughout most of the 64 bit inode space, that triggered some corner case bugs, in particular some integer overflows related to the radix tree code. Oops.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-core | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-debug | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-devel | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-doc | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-headers | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-modules | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-rt | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-kvm | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux:8 | kernel-tools | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | perf | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| AlmaLinux:8 | python3-perf | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
| Debian:12 | linux | 6.1.64-1 | DEBIAN-CVE-2021-47432 |
| Debian:13 | linux | 6.5.13-1 | DEBIAN-CVE-2021-47432 |
| Debian:14 | linux | 6.5.13-1 | DEBIAN-CVE-2021-47432 |
| Rocky Linux:8 | kernel | 0:4.18.0-553.22.1.el8_10 | RLSA-2024:7000 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-553.22.1.rt7.363.el8_10 | RLSA-2024:7001 |
| Ubuntu:22.04:LTS | linux | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-aws | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-azure | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-azure-fde | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-gcp | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-gke | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-gkeop | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-ibm | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-intel-iotg | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-kvm | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-lowlatency | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-nvidia | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | 6.5.0-1014.14 | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-oracle | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-raspi | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2021-47432 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | no fix listed | UBUNTU-CVE-2021-47432 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | ba20ba2e3743bac786dff777954c11930256075e – before 784d01f9bbc282abb0c5ade5beb98a87f50343acba20ba2e3743bac786dff777954c11930256075e – before ec298b958cb0c40d70c68079da933c8f31c5134cba20ba2e3743bac786dff777954c11930256075e – before aa7f1827953100cdde0795289a80c6c077bfe437ba20ba2e3743bac786dff777954c11930256075e – before 9492261ff2460252cf2d8de89cdf854c7e2b28a0 |
| Linux | Linux | 5.1 |