The vulnerability in the cleanupTransaction() function of the fs/btrfs/transaction.c module of the btrfs file system support module in the Linux operating system allows a attacker to cause a service failure.

🗓️ 09 May 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

A vulnerability in cleanupTransaction() of the btrfs file system module allows reuse of freed memory and can cause a service failure on Linux.

Reporter	Title	Published	Views	Family All 172
ATTACKERKB	CVE-2021-46958	27 Feb 202419:04	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	2 May 202200:00	–	nessus
Tenable Nessus	SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:1454-1)	29 Apr 202400:00	–	nessus
Tenable Nessus	SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2024:1643-1)	15 May 202400:00	–	nessus
Tenable Nessus	SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:1646-1)	15 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2024:1648-1)	15 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:1870-1)	31 May 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-46958	7 Aug 202500:00	–	nessus
Amazon	Important: kernel	28 Jan 202200:00	–	amazon
Circl	CVE-2021-46958	28 Feb 202404:51	–	circl

Source	Link
git	www.git.kernel.org/stable/c/e2da98788369bfba1138bada72765c47989a4338
git	www.git.kernel.org/stable/c/a4794be7b00b7eda4b45fffd283ab7d76df7e5d6
git	www.git.kernel.org/stable/c/633f7f216663587f17601eaa1cf2ac3d5654874c
git	www.git.kernel.org/stable/c/061dde8245356d8864d29e25207aa4daa0be4d3c
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
lore	www.lore.kernel.org/linux-cve-announce/2024022718-CVE-2021-46958-53ff@gregkh/T/
git	www.git.kernel.org/linus/061dde8245356d8864d29e25207aa4daa0be4d3c
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024022718-CVE-2021-46958-53ff@gregkh/
git	www.git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/

09 May 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.6

CVSS 34.7

EPSS0.00231

btrfs file system cleanup transaction memory reuse freed memory service failure linux operating system