Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0025 16.3 —
AFFECTED Product Versions Fixed Linux ae03b6b1c880a03d4771257336dc3bca156dd51b – — Linux 5.0 – 4.14.233
TIMELINE Feb 27 Reserved by Linux Feb 27 Published (CNA: Linux) Aug 4 RESCORED — CVE-2021-46974 (Linux). CVSS 7.1 → 5.5 (NVD).
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix masking negation logic upon negative dst register The negation logic for the case where the off_reg is sitting in the dst register is not correct given then we cannot just invert the add to a sub or vice versa. As a fix, perform the final bitwise and-op unconditionally into AX from the off_reg, then move the pointer from the src to dst and finally use AX as the source for the original pointer arithmetic operation such that the inversion yields a correct result. The single non-AX mov in between is possible given constant blinding is retaining it as it's not an immediate based operation.
| Date | Event | Detail |
|---|---|---|
| February 27, 2024 | Reserved | Reserved by Linux |
| February 27, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2021-46974 (Linux). CVSS 7.1 → 5.5 (NVD). |
Authoritative record: CVE-2021-46974 at cve.org
Vendors: linux
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2021-46974 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.