CVE-2021-47656

Summary (CVE-2021-47656): In the Linux kernel’s jffs2 subsystem, a use-after-free occurs in jffs2_clear_xattr_subsystem during mounting a jffs2 image when an abnormal block is encountered. The code path frees an xattr_ref object twice (UAF) due to a call sequence in jffs2_build_filesystem/jffs2_d...

CVE-2021-47656: Use After Free

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2clearxattrsubsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result...