CVE-2021-47320: linux
CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2021-47320DEBIAN-CVE-2021-47320
Published 21-05-2024Last modified 11-05-2026
Vulnerability summary
CVE-2021-47320 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.3% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.26%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 8 · Related 8Timeline
- 21-05-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: nfs: fix acl memory leak of posix_acl_create() When looking into another nfs xfstests report, I found acl and default_acl in nfs3_proc_create() and nfs3_proc_mknod() error paths are possibly leaked. Fix them in advance.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
0.00 pp
From 0.26% on 18-09-2026
18-09-202618-10-2026
EPSS score0.26%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu87 products
- linux< 4.4.0-267.301 | < 4.15.0-156.163 | < 5.4.0-88.99
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1142.148 | < 4.4.0-1180.195 | < 4.15.0-1111.118 | < 5.4.0-1057.60
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 2e3960f276b4574a9bb0dfa31a7497302f6363b2 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < cef9d9acb7c80ed6bace894b6334557fd493863b | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 8a2b308a54c5ec224fedc753617f99b29ffcd883 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 0704f617040c397ae73c1f88f3956787ec5d6529 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < d0b32dc1409f7e65e4fcc34e236462268e69a357 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 4b515308ab875c7e8ada8e606fe0c64762da5ed4 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 687cf32865b2d6960214bce523f2afac58dd3cd2 | ≥ 013cdf1088d7235da9477a2375654921d9b9ba9f, < 1fcb6fcd74a222d9ead54d405842fc763bb86262 | 3.14
- linux_kernel≥ 3.14, < 4.4.276 | ≥ 4.5, < 4.9.276 | ≥ 4.10, < 4.14.240 | ≥ 4.15, < 4.19.198 | ≥ 4.20, < 5.4.134 | ≥ 5.5, < 5.10.52 | ≥ 5.11, < 5.12.19 | ≥ 5.13, < 5.13.4
Debian1 product
- linux< 5.14.6-1
3 vendors · 90 products