ReviewHigh

CVE-2021-40490

solidfire baseboard management controller, linux kernel

A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

PRIORITY ASSESSMENT

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.30%

Technical severityCVSS 7

A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

Product: solidfire baseboard management controller, linux kernel
Affected versions: >= 3.8 < 4.4.284, >= 4.5 < 4.9.283, >= 4.10 < 4.14.247, >= 4.15 < 4.19.207, >= 4.20 < 5.4.145, >= 5.5 < 5.10.63, >= 5.11 < 5.13.15, >= 5.14 < 5.14.2, 33, 34, 9.0, 11.0
Fixed versions: 4.4.284, 4.9.283, 4.14.247, 4.19.207, 5.4.145, 5.10.63, 5.13.15, 5.14.2

Confirm exposure before applying a vendor-supported change.

1
Identify
Confirm that solidfire baseboard management controller, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.