CVE-2021-47134: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: efi/fdt: fix panic when no valid fdt found setup_arch() would invoke efi_init()->efi_get_fdt_params(). If no valid fdt found then initial_boot_params will be null. So we should stop further fdt processing here. I encountered this issue on risc-v.

Affected products

• Linux Linux Kernel: from 5.10, before 5.10.43 (fixed in 5.10.43); from 5.11, before 5.12.10 (fixed in 5.12.10); version 5.13 only

Published 2024-03-15. Last modified 2026-06-17.