01 Record

CVE-2021-47274

tracing: Correct the length check which causes memory corruption

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

tracing: Correct the length check which causes memory corruption

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.75% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 52.2% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-21 14:20Z2 YR AGO

Last updated

2026-08-05 08:47Z1 MO AGO

Reserved

2024-05-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase
CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

ac9f675eccb838e45af35f7011f5df5eaad917599d1e0a2be8a213f5ecfec2dd

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2e584b1a02eeb860e286d39bc408b25ebc5ec844 to < edcce01e0e50840a9aa6a70baed21477bdd2c9f9, e46d433754420b4d6513ca389403de88a0910279 to < 2d598902799886d67947406f26ee8e5fd2ca097f, 0572fc6a510add9029b113239eaabf4b5bce8ec9 to < 31ceae385556c37e4d286cb6378696448f566883, a0997a86f5c0085e183ddee5fb72091d584d3d16 to < d63f00ec908b3be635ead5d6029cc94246e1f38d, 7c93d8cff582c459350d6f8906eea6e4cd60d959 to < 43c32c22254b9328d7abb1c2b0f689dc67838e60, b220c049d5196dd94d992dd2dc8cba1a5e6123bf to < b16a249eca2230c2cd66fa1d4b94743bd9b6ef92, b220c049d5196dd94d992dd2dc8cba1a5e6123bf to < 3e08a9f9760f4a70d633c328a76408e62d6f80a3, 4.9.258 to < 4.9.273, 4.14.222 to < 4.14.237, 4.19.177 to < 4.19.195, 5.4.99 to < 5.4.126, 5.10.17 to < 5.10.44, 5.11—

linuxlinux_kernel2e584b1a02ee to < edcce01e0e50, e46d43375442 to < 2d5989027998, 0572fc6a510a to < 31ceae385556, a0997a86f5c0 to < d63f00ec908b, 7c93d8cff582 to < 43c32c22254b, b220c049d519 to < b16a249eca22, b220c049d519 to < 3e08a9f9760f, 5.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/edcce01e0e50840a9aa6a70baed21477bdd2c9f9
git.kernel.orghttps://git.kernel.org/stable/c/2d598902799886d67947406f26ee8e5fd2ca097f
git.kernel.orghttps://git.kernel.org/stable/c/31ceae385556c37e4d286cb6378696448f566883
git.kernel.orghttps://git.kernel.org/stable/c/d63f00ec908b3be635ead5d6029cc94246e1f38d
git.kernel.orghttps://git.kernel.org/stable/c/43c32c22254b9328d7abb1c2b0f689dc67838e60
git.kernel.orghttps://git.kernel.org/stable/c/b16a249eca2230c2cd66fa1d4b94743bd9b6ef92
git.kernel.orghttps://git.kernel.org/stable/c/3e08a9f9760f4a70d633c328a76408e62d6f80a3

01 Record index

CVE-2021-47274

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2021-47274

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References