CVE-2021-47351

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2021-47351", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T14:28:16.985Z", "datePublished": "2024-05-21T14:35:55.806Z", "dateUpdated": "2026-08-05T08:47:23.774Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T08:47:23.774Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix races between xattr_{set|get} and listxattr operations\n\nUBIFS may occur some problems with concurrent xattr_{set|get} and\nlistxattr operations, such as assertion failure, memory corruption,\nstale xattr value[1].\n\nFix it by importing a new rw-lock in @ubifs_inode to serilize write\noperations on xattr, concurrent read operations are still effective,\njust like ext4.\n\n[1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The bug is reached via local setxattr/getxattr/listxattr syscalls into UBIFS xattr handlers on a mounted filesystem, not via network packet processing or physical device attachment.\nAC:L - The attacker controls both sides of the race by running concurrent setxattr and listxattr threads against the same inode and can retry indefinitely until the size check is bypassed, so success does not depend on conditions outside attacker influence.\nPR:L - An unprivileged local user who can create or write a regular file on a mounted UBIFS volume can set user.* xattrs and list them; no root or init-namespace capabilities are required.\nUI:N - UBIFS is commonly already mounted as root or data storage on embedded, IoT, and similar devices; the attacker drives setxattr/listxattr from their own processes with no victim mount or open required.\nS:U - Impact is confined to the host kernel heap and UBIFS mount within the same OS security authority; this is not a VM escape, IOMMU bypass, or other cross-boundary scope change.\nC:H - Racing listxattr against setxattr causes an out-of-bounds write into the kernel kvmalloc list buffer, which is heap memory corruption that can be leveraged for arbitrary kernel memory disclosure.\nI:H - The overflow copies attacker-chosen xattr name bytes past the end of the kernel buffer, yielding a controlled heap write primitive suitable for corruption and privilege escalation.\nA:H - The same race triggers ubifs_assert failures (default remount-ro, optionally panic) and heap corruption that can oops/panic the kernel, denying availability of the system or filesystem."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ubifs/super.c", "fs/ubifs/ubifs.h", "fs/ubifs/xattr.c"], "versions": [{"version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08", "status": "affected", "versionType": "git"}, {"version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "38dde03eb239605f428f3f1e4baa73d4933a4cc6", "status": "affected", "versionType": "git"}, {"version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "9558612cb829f2c022b788f55d6b8437d5234a82", "status": "affected", "versionType": "git"}, {"version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "c0756f75c22149d20fcb7d8409827cee905eb386", "status": "affected", "versionType": "git"}, {"version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "f4e3634a3b642225a530c292fdb1e8a4007507f5", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ubifs/super.c", "fs/ubifs/ubifs.h", "fs/ubifs/xattr.c"], "versions": [{"version": "2.6.27", "status": "affected"}, {"version": "0", "lessThan": "2.6.27", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.133", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.51", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.18", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13.3", "lessThanOrEqual": "5.13.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.14", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "5.4.133"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "5.10.51"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "5.12.18"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "5.13.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "5.14"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08"}, {"url": "https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6"}, {"url": "https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82"}, {"url": "https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386"}, {"url": "https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5"}], "title": "ubifs: Fix races between xattr_{set|get} and listxattr operations", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-11T19:01:36.389057Z", "id": "CVE-2021-47351", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T19:01:45.807Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.560Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.560Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47351", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-11T19:01:36.389057Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T19:01:42.497Z"}}], "cna": {"title": "ubifs: Fix races between xattr_{set|get} and listxattr operations", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The bug is reached via local setxattr/getxattr/listxattr syscalls into UBIFS xattr handlers on a mounted filesystem, not via network packet processing or physical device attachment.\nAC:L - The attacker controls both sides of the race by running concurrent setxattr and listxattr threads against the same inode and can retry indefinitely until the size check is bypassed, so success does not depend on conditions outside attacker influence.\nPR:L - An unprivileged local user who can create or write a regular file on a mounted UBIFS volume can set user.* xattrs and list them; no root or init-namespace capabilities are required.\nUI:N - UBIFS is commonly already mounted as root or data storage on embedded, IoT, and similar devices; the attacker drives setxattr/listxattr from their own processes with no victim mount or open required.\nS:U - Impact is confined to the host kernel heap and UBIFS mount within the same OS security authority; this is not a VM escape, IOMMU bypass, or other cross-boundary scope change.\nC:H - Racing listxattr against setxattr causes an out-of-bounds write into the kernel kvmalloc list buffer, which is heap memory corruption that can be leveraged for arbitrary kernel memory disclosure.\nI:H - The overflow copies attacker-chosen xattr name bytes past the end of the kernel buffer, yielding a controlled heap write primitive suitable for corruption and privilege escalation.\nA:H - The same race triggers ubifs_assert failures (default remount-ro, optionally panic) and heap corruption that can oops/panic the kernel, denying availability of the system or filesystem."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08", "versionType": "git"}, {"status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "38dde03eb239605f428f3f1e4baa73d4933a4cc6", "versionType": "git"}, {"status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "9558612cb829f2c022b788f55d6b8437d5234a82", "versionType": "git"}, {"status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "c0756f75c22149d20fcb7d8409827cee905eb386", "versionType": "git"}, {"status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "lessThan": "f4e3634a3b642225a530c292fdb1e8a4007507f5", "versionType": "git"}], "programFiles": ["fs/ubifs/super.c", "fs/ubifs/ubifs.h", "fs/ubifs/xattr.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2.6.27"}, {"status": "unaffected", "version": "0", "lessThan": "2.6.27", "versionType": "semver"}, {"status": "unaffected", "version": "5.4.133", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.51", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.12.18", "versionType": "semver", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13.3", "versionType": "semver", "lessThanOrEqual": "5.13.*"}, {"status": "unaffected", "version": "5.14", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ubifs/super.c", "fs/ubifs/ubifs.h", "fs/ubifs/xattr.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08"}, {"url": "https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6"}, {"url": "https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82"}, {"url": "https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386"}, {"url": "https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix races between xattr_{set|get} and listxattr operations\n\nUBIFS may occur some problems with concurrent xattr_{set|get} and\nlistxattr operations, such as assertion failure, memory corruption,\nstale xattr value[1].\n\nFix it by importing a new rw-lock in @ubifs_inode to serilize write\noperations on xattr, concurrent read operations are still effective,\njust like ext4.\n\n[1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com"}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.133", "versionStartIncluding": "2.6.27"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.51", "versionStartIncluding": "2.6.27"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.12.18", "versionStartIncluding": "2.6.27"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.13.3", "versionStartIncluding": "2.6.27"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.14", "versionStartIncluding": "2.6.27"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T08:47:23.774Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47351", "state": "PUBLISHED", "dateUpdated": "2026-08-05T08:47:23.774Z", "dateReserved": "2024-05-21T14:28:16.985Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T14:35:55.806Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/ubifs/super.c", "fs/ubifs/ubifs.h", "fs/ubifs/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08", "status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "versionType": "git"}, {"lessThan": "38dde03eb239605f428f3f1e4baa73d4933a4cc6", "status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "versionType": "git"}, {"lessThan": "9558612cb829f2c022b788f55d6b8437d5234a82", "status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "versionType": "git"}, {"lessThan": "c0756f75c22149d20fcb7d8409827cee905eb386", "status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "versionType": "git"}, {"lessThan": "f4e3634a3b642225a530c292fdb1e8a4007507f5", "status": "affected", "version": "1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/ubifs/super.c", "fs/ubifs/ubifs.h", "fs/ubifs/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.27"}, {"lessThan": "2.6.27", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.133", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.51", "versionType": "semver"}, {"lessThanOrEqual": "5.12.*", "status": "unaffected", "version": "5.12.18", "versionType": "semver"}, {"lessThanOrEqual": "5.13.*", "status": "unaffected", "version": "5.13.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "5.14", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "1294CBBF-0C34-4217-91B6-A4A44E42A4DC", "versionEndExcluding": "5.4.133", "versionStartIncluding": "2.6.27", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "93289127-DFB3-4515-89DD-50521FF8B7FF", "versionEndExcluding": "5.10.51", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "79D13C82-E06F-4A70-A3D1-C09494FBC94D", "versionEndExcluding": "5.12.18", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "853187F6-707A-487B-95C0-621B5211B43C", "versionEndExcluding": "5.13.3", "versionStartIncluding": "5.13", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix races between xattr_{set|get} and listxattr operations\n\nUBIFS may occur some problems with concurrent xattr_{set|get} and\nlistxattr operations, such as assertion failure, memory corruption,\nstale xattr value[1].\n\nFix it by importing a new rw-lock in @ubifs_inode to serilize write\noperations on xattr, concurrent read operations are still effective,\njust like ext4.\n\n[1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com"}, {"lang": "es", "value": " En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ubifs: corrige ejecuci\u00f3ns entre las operaciones xattr_{set|get} y listxattr. UBIFS puede producir algunos problemas con las operaciones xattr_{set|get} y listxattr simult\u00e1neas, como fallas de aserci\u00f3n y corrupci\u00f3n de memoria. , valor xattr obsoleto [1]. Soluc\u00f3nelo importando un nuevo rw-lock en @ubifs_inode para serializar las operaciones de escritura en xattr, las operaciones de lectura simult\u00e1neas siguen siendo efectivas, al igual que ext4. [1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com"}], "id": "CVE-2021-47351", "lastModified": "2026-08-04T10:16:59.280", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2021-47351", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-06-11T19:01:36.389057Z", "version": "2.0.3"}}]}, "published": "2024-05-21T15:15:21.553", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-617"}, {"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ubifs: Fix races between xattr_{set|get} and listxattr operations", "id": "2282402", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282402"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-362", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nubifs: Fix races between xattr_{set|get} and listxattr operations\nUBIFS may occur some problems with concurrent xattr_{set|get} and\nlistxattr operations, such as assertion failure, memory corruption,\nstale xattr value[1].\nFix it by importing a new rw-lock in @ubifs_inode to serilize write\noperations on xattr, concurrent read operations are still effective,\njust like ext4.\n[1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com", "A vulnerability was found in the Linux kernel's UBIFS file system, where concurrent operations to set or get extended attributes (xattrs) and list xattrs could lead to assertion failures or memory corruption. This problem arises because the system does not properly handle simultaneous read and write requests, potentially causing stale xattr values or other inconsistencies."], "mitigation": {"lang": "en:us", "value": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible."}, "name": "CVE-2021-47351", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47351\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47351\nhttps://lore.kernel.org/linux-cve-announce/2024052140-CVE-2021-47351-8e6c@gregkh/T"], "threat_severity": "Moderate"}

{}