5.5

CVE-2021-47149: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2021-47149DEBIAN-CVE-2021-47149
Published 25-03-2024Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2021-47149 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.4% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 7
SUSE-SU-2024:1643-1SUSE-SU-2024:1646-1SUSE-SU-2024:1870-1USN-7797-1USN-7797-2USN-7797-3

Timeline

  1. 25-03-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18x_get_hwinfo(), if ioremap fails there will be NULL pointer deref. To fix this, check the return value of ioremap and return -1 to the caller in case of failure.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu86 products
  • linuxAll versions (No fix recorded) | < 4.4.0-273.307 | < 4.15.0-151.157 | < 5.4.0-80.90
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1148.154 | < 4.4.0-1186.201 | < 4.15.0-1109.116 | < 5.4.0-1054.57
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b92170e209f7746ed72eaac98f2c2f4b9af734e6 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6dbf1101594f7c76990b63c35b5a40205a914b6b | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c4f1c23edbe921ab2ecd6140d700e756cd44c5f7 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7883d3895d0fbb0ba9bff0f8665f99974b45210f | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 22049c3d40f08facd1867548716a484dad6b3251 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 71723a796ab7881f491d663c6cd94b29be5fba50 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < f14bf57a08779a5dee9936f63ada0149ea89c5e6 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 52202be1cd996cde6e8969a128dc27ee45a7cb5e | 2.6.12
  • linux_kernel< 4.4.271 | ≥ 4.5, < 4.9.271 | ≥ 4.10, < 4.14.235 | ≥ 4.15, < 4.19.193 | ≥ 4.20, < 5.4.124 | ≥ 5.5, < 5.10.42 | ≥ 5.11, < 5.12.9 | 5.13:rc1 | 5.13:rc2
Debian1 product
  • linux< 5.14.6-1

3 vendors · 89 products

References

15 links
Show all 15 references