CVE-2021-47485: linux Classic Buffer Overflow
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2021-47485DEBIAN-CVE-2021-47485
Published 22-05-2024Last modified 05-08-2026
Vulnerability summary
CVE-2021-47485 is a high (CVSS 7.8) Classic Buffer Overflow vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.7% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 15 · Related 15Timeline
- 22-05-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
14%
Versus all other CVEs
30-day change
0.00 pp
From 0.24% on 19-09-2026
19-09-202619-10-2026
EPSS score0.24%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu87 products
- linuxAll versions (No fix recorded) | < 4.4.0-277.311 | < 4.15.0-169.177 | < 5.4.0-92.103
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.4.0-1151.157 | < 4.4.0-1189.204 | < 4.15.0-1121.129 | < 5.4.0-1061.64
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < bda41654b6e0c125a624ca35d6d20beb8015b5d0 | ≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < 3f57c3f67fd93b4da86aeffea1ca32c484d054ad | ≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < 60833707b968d5ae02a75edb7886dcd4a957cf0d | ≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < 73d2892148aa4397a885b4f4afcfc5b27a325c42 | ≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < 0f8cdfff06829a0b0348b6debc29ff6a61967724 | ≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < c3e17e58f571f34c51aeb17274ed02c2ed5cf780 | ≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < 0d4395477741608d123dad51def9fe50b7ebe952 | ≥ f931551bafe1f10ded7f5282e2aa162c267a2e5d, < d39bf40e55e666b5905fdbd46a0dced030ce87be | 2.6.35
- linux_kernel≥ 2.6.35, < 4.4.292 | ≥ 4.5, < 4.9.290 | ≥ 4.10, < 4.14.255 | ≥ 4.15, < 4.19.216 | ≥ 4.20, < 5.4.157 | ≥ 5.5, < 5.10.77 | ≥ 5.11, < 5.14.16 | 5.15:rc1 | 5.15:rc2 | 5.15:rc3 | 5.15:rc4 | 5.15:rc5 | 5.15:rc6 | 5.15:rc7
Debian1 product
- linux< 5.15.3-1
3 vendors · 90 products
