PT-2021-22480 · Unknown+1 · Jpns Kernel+2

Frankenderman · Published 2021-09-21 · Updated 2021-09-29 · CVE-2021-39230

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Butter (affected versions not specified)

Description The issue is related to a kernel error in the JPNS kernel, which is being discontinued. There are no workarounds available. Affected users are recommended to update to the Trinity kernel.

Recommendations Update to the Trinity kernel. At the moment, there is no information about a newer version that contains a fix for this vulnerability, aside from updating to the Trinity kernel.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-39230

GHSA-4538-4G86-XF6J

Affected Products

Butter

Jpns Kernel

Trinity Kernel

References · 5

• https://github.com/FrankEnderman/Butter/commit/a4fd717e848306f04f2823ea5f617e4da9f5bbdb · Patch
• https://osv.dev/vulnerability/CVE-2021-39230 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39230 · Security Note
• https://github.com/FrankEnderman/Butter/security/advisories/GHSA-4538-4g86-xf6j · Note
• https://t.me/cibsecurity/29194 · Telegram Post