Ubuntu.comUB:CVE-2021-46950CVE-2021-46950
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
In the Linux kernel, the following vulnerability has been resolved:
md/raid1: properly indicate failure when ending a failed write request This
patch addresses a data corruption bug in raid1 arrays using bitmaps.
Without this fix, the bitmap bits for the failed I/O end up being cleared.
Since we are in the failure leg of raid1_end_write_request, the request
either needs to be retried (R1BIO_WriteError) or failed (R1BIO_Degraded).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws-5.4 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-aws-hwe | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-azure-4.15 | < any | UNKNOWN |
References
git.kernel.org/linus/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd (5.13-rc1)
git.kernel.org/stable/c/12216d0919b64ee2ea5dc7a50e455670f44383d5
git.kernel.org/stable/c/2417b9869b81882ab90fd5ed1081a1cb2d4db1dd
git.kernel.org/stable/c/538244fba59fde17186322776247cd9c05be86dd
git.kernel.org/stable/c/59452e551784b7a57a45d971727e9db63b192515
git.kernel.org/stable/c/661061a45e32d8b2cc0e306da9f169ad44011382
git.kernel.org/stable/c/6920cef604fa57f9409e3960413e9cc11f5c5a40
git.kernel.org/stable/c/a6e17cab00fc5bf85472434c52ac751426257c6f
launchpad.net/bugs/cve/CVE-2021-46950
nvd.nist.gov/vuln/detail/CVE-2021-46950
security-tracker.debian.org/tracker/CVE-2021-46950
www.cve.org/CVERecord?id=CVE-2021-46950
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%