What’s Vulnerable › Vulnerabilities

CVE-2021-39230: Error in JPNS kernel of Butter

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-21 · updated 2026-06-17
• Weakness: CWE-20

Description

Butter is a system usability utility. Due to a kernel error the JPNS kernel is being discontinued. Affected users are recommend to update to the Trinity kernel. There are no workarounds.

Affected products

• FrankEnderman Butter: before 1.5 — fixed in 1.5

How to fix

Upgrade to a fixed version: FrankEnderman Butter 1.5. Check the vendor advisory for mitigations.

References

• https://github.com/FrankEnderman/Butter/commit/a4fd717e848306f04f2823ea5f617e4da9f5bbdb
• https://github.com/FrankEnderman/Butter/security/advisories/GHSA-4538-4g86-xf6j
• https://github.com/FrankEnderman/Butter/commit/a4fd717e848306f04f2823ea5f617e4da9f5bbdb
• https://github.com/FrankEnderman/Butter/security/advisories/GHSA-4538-4g86-xf6j

Get alerted when CVE-2021-39230 or the next vulnerability affects your stack