CVE-2021-47486: Linux Kernel

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpf_jit_binary_free() function requires a non-NULL argument. When the RISC-V BPF JIT fails to converge in NR_JIT_ITERATIONS steps, jit_data->header will be NULL, which triggers a NULL dereference. Avoid this by checking the argument, prior calling the function.

Affected products

• Linux Linux Kernel: from 5.7, before 5.10.77 (fixed in 5.10.77); from 5.11, before 5.14.16 (fixed in 5.14.16); version 5.15 only

Published 2024-05-22. Last modified 2026-06-17.