Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-46923
HistoryFeb 27, 2024 - 12:00 a.m.

CVE-2021-46923

2024-02-2700:00:00
ubuntu.com
ubuntu.com
3
linux kernel
vulnerability
fs/mount_setattr

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In the Linux kernel, the following vulnerability has been resolved:
fs/mount_setattr: always cleanup mount_kattr Make sure that
finish_mount_kattr() is called after mount_kattr was succesfully built in
both the success and failure case to prevent leaking any references we took
when we built it. We returned early if path lookup failed thereby risking
to leak an additional reference we took when building mount_kattr when an
idmapped mount was requested.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%