Read the docs
TI-2021-16615 Aliases CVE-2021-39230

Error in JPNS kernel of Butter

Priority LOW 39CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Butter is a system usability utility. Due to a kernel error the JPNS kernel is being discontinued. Affected users are recommend to update to the Trinity kernel. There are no workarounds.

Why it matters now

EPSS 0.00763 55th percentileScored 2026-11-07
Fix Fixed Butter (FrankEnderman): 1.5

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
FrankEndermanButterbefore 1.51.5Patch availableCNA
  • Butter VendorFrankEnderman Affected before 1.5 Fixed in 1.5 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:butter_project:butter:*:*:*:*:*:*:*:*before 1.5VulnerableButter Project
  • cpe:2.3:a:butter_project:butter:*:*:*:*:*:*:*:* Versions before 1.5 Vulnerable ·Butter Project

Remediation

  • Fix · CNA Butter (FrankEnderman) Fixed in 1.5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-39230

References

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences