Lucene search

K
redhatcveRedhat.comRH:CVE-2021-47351
HistoryMay 22, 2024 - 11:26 a.m.

CVE-2021-47351

2024-05-2211:26:31
redhat.com
access.redhat.com
5
linux kernel
ubifs
vulnerability fix
xattr set
xattr get
listxattr operations
rw-lock
memory corruption

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattr_{set|get} and listxattr operations UBIFS may occur some problems with concurrent xattr_{set|get} and listxattr operations, such as assertion failure, memory corruption, stale xattr value[1]. Fix it by importing a new rw-lock in @ubifs_inode to serilize write operations on xattr, concurrent read operations are still effective, just like ext4. [1] https://lore.kernel.org/linux-mtd/[email protected]

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%