Lucene search

K

RedhatCVELIST:CVE-2021-4155

HistoryAug 24, 2022 - 3:10 p.m.

CVE-2021-4155

2022-08-2415:10:19

CWE-131

redhat

www.cve.org

2

data leak

xfs

filesystem

AI Score

6.6

Confidence

High

EPSS

0

Percentile

5.1%

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in Kernel v5.16"
      }
    ]
  }
]

References

access.redhat.com/security/cve/CVE-2021-4155

bugzilla.redhat.com/show_bug.cgi?id=2034813

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79

security-tracker.debian.org/tracker/CVE-2021-4155

www.openwall.com/lists/oss-security/2022/01/10/1

AI Score

6.6

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2021-4155