Loading story…
CVE-2021-47097 is a stack out-of-bounds read in the Linux kernel's Elantech input-device driver. During Elantech/PS/2 mouse initialization, elantech_change_report_id() supplied a two-byte param[] buffer to the PSMOUSE_CMD_GETINFO path, which accesses three bytes; KASAN confirmed the invalid stack access. A local attacker may be able to crash the host or disclose internal kernel information. The upstream fix expands the buffer to three bytes.
Affected upstream release lines include Linux 5.4 before 5.4.169, 5.10 before 5.10.89, and releases from 5.11 before fixes in 5.15.12 and 5.16. Red Hat rates the flaw as moderate severity with CVSS 6.0, while NVD assigns 7.1. Red Hat issued fixes for RHEL 8 kernel and kernel-rt through RHSA-2024:7000 and RHSA-2024:7001; its advisory lists RHEL 9 kernel and kernel-rt as affected, requiring appropriate updated kernel packages when available.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2024:7000 for the RHEL 8 kernel and RHSA-2024:7001 for the RHEL 8 kernel-rt package, remediating CVE-2021-47097. RHEL 9 kernel and kernel-rt remained listed as affected.
Zack Miele reported the CVE-2021-47097 vulnerability record to Red Hat's tracking system.
The Linux kernel CVE team published CVE-2021-47097 for a one-byte stack out-of-bounds read in the Elantech driver's elantech_change_report_id() function. The disclosed fix expands the local param[] array from two bytes to three bytes; fixed kernel releases include 5.4.169, 5.10.89, 5.15.12, and 5.16.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourceredhat.com
Open sourcelore.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**CVE-2022-48619** is a moderate-severity denial-of-service flaw in the Linux kernel input subsystem's `input_set_capability()` function. The function failed to validate event codes against the bitmap bounds for the specified event type, allowing a low-privileged local attacker to cause a kernel panic. Red Hat assigned a CVSS v3.1 score of 5.5, reflecting high availability impact with no confidentiality or integrity impact. Upstream fixed the defect in Linux kernel 5.17.10 through commit `409353cbe9fe48f6bc196114c442b1cff05a39bc`, which adds per-event-type maximum-code validation and rejects invalid values. Red Hat remediated affected RHEL 8 kernel and `kernel-rt` packages through advisories **RHSA-2024:7000** and **RHSA-2024:7001**; RHEL 9 variants are not affected, while RHEL 6 and 7 are outside support scope.
Aug 26, 2026
Red Hat released kernel updates for **RHEL 9** and **RHEL 10** addressing several locally exploitable Linux kernel flaws, including `CVE-2025-21647` in the `sch_cake` traffic-control scheduler. An underflow in per-host bulk-flow fairness counters could lead to an out-of-bounds read, potentially exposing kernel memory or crashing the system; Red Hat assigned it a CVSS 3.1 score of 7.1. The upstream correction adds centralized bounds checking for counter access. The updates also remediate denial-of-service issues in the mt76 `mt7925` Wi-Fi driver (`CVE-2024-57989`), HID core (`CVE-2024-57986`), IDPF driver (`CVE-2024-58057`), and Realtek Bluetooth setup path (`CVE-2024-57987`). These flaws can trigger NULL-pointer dereferences, CPU-workqueue starvation, or system crashes under local attack conditions. RHEL 9 `kernel-rt` remains affected or will not fix for several listed issues; organizations should apply the applicable kernel errata and reboot systems to activate the patched kernel.
Aug 26, 2026
A **moderate-severity** Linux kernel vulnerability, tracked as `CVE-2026-43051`, was fixed in the Wacom HID driver after maintainers found that malformed Bluetooth HID reports could trigger an out-of-bounds read in `wacom_intuos_bt_irq()`. The bug affected handling of report IDs `0x03` and `0x04`, where insufficient bounds checking allowed a malicious or compromised nearby Bluetooth device to send short reports that caused the kernel to read past the received buffer while copying data into the Wacom structure. The issue could lead to sensitive memory disclosure and system crashes. The fix adds explicit length validation for the affected report types and warning logs when undersized reports are received, with upstream patches released across multiple stable kernel branches from **5.10.253 through 7.0**. Red Hat said updates were issued for affected kernel packages in **RHEL 8, 9, and 10**, while some **RHEL 7** and **RHEL 9 `kernel-rt`** variants remained affected at publication; **RHEL 6** was not impacted because the vulnerable code was not present. Red Hat scored the flaw **CVSS 7.1**, while `cve.org` listed **8.1**.
Aug 25, 2026