Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47433
HistoryMay 22, 2024 - 12:00 a.m.

CVE-2021-47433

2024-05-2200:00:00
ubuntu.com
ubuntu.com
1
linux
kernel
btrfs
file system
vulnerability
error injection
testing
abort logic

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: btrfs:
fix abort logic in btrfs_replace_file_extents Error injection testing
uncovered a case where we’d end up with a corrupt file system with a
missing extent in the middle of a file. This occurs because the if
statement to decide if we should abort is wrong. The only way we would
abort in this case is if we got a ret != -EOPNOTSUPP and we called from the
file clone code. However the prealloc code uses this path too. Instead we
need to abort if there is an error, and the only error we don’t abort on
is -EOPNOTSUPP and only if we came from the clone file code.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%