5.5

CVE-2021-47320: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2021-47320DEBIAN-CVE-2021-47320
Published 21-05-2024Last modified 11-05-2026

Vulnerability summary

CVE-2021-47320 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.3% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.26%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 8

Timeline

  1. 21-05-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: nfs: fix acl memory leak of posix_acl_create() When looking into another nfs xfstests report, I found acl and default_acl in nfs3_proc_create() and nfs3_proc_mknod() error paths are possibly leaked. Fix them in advance.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.26%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

0.00 pp

From 0.26% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu87 products
  • linux< 4.4.0-267.301 | < 4.15.0-156.163 | < 5.4.0-88.99
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1142.148 | < 4.4.0-1180.195 | < 4.15.0-1111.118 | < 5.4.0-1057.60
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 2e3960f276b4574a9bb0dfa31a7497302f6363b2 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < cef9d9acb7c80ed6bace894b6334557fd493863b | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 8a2b308a54c5ec224fedc753617f99b29ffcd883 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 0704f617040c397ae73c1f88f3956787ec5d6529 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < d0b32dc1409f7e65e4fcc34e236462268e69a357 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 4b515308ab875c7e8ada8e606fe0c64762da5ed4 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 687cf32865b2d6960214bce523f2afac58dd3cd2 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 1fcb6fcd74a222d9ead54d405842fc763bb86262 | 3.14
  • linux_kernel≥ 3.14, < 4.4.276 | ≥ 4.5, < 4.9.276 | ≥ 4.10, < 4.14.240 | ≥ 4.15, < 4.19.198 | ≥ 4.20, < 5.4.134 | ≥ 5.5, < 5.10.52 | ≥ 5.11, < 5.12.19 | ≥ 5.13, < 5.13.4
Debian1 product
  • linux< 5.14.6-1

3 vendors · 90 products

References

15 links
Show all 15 references