CVE-2021-47189

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory ordering between normal and ordered work functions Ordered work functions aren't guaranteed to be handled by the same thread which executed the normal work functions. The only way execution between normal/ordered functions is synchronized is via the WORK_DONE_BIT, unfortunately the used bitops don't guarantee any ordering whatsoever. This manifested as seemingly inexplicable crashes on ARM64, where async_chunk::inode is seen as non-null in async_cow_submit which causes submit_compressed_extents to be calle...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < bd660a20fea3ec60a49709ef5360f145ec0fe779, >= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < 637d652d351fd4f263ef302dc52f3971d314e500, >= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < 804a9d239ae9cbe88e861a7cd62319cc6ec7b136, >= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < ed058d735a70f4b063323f1a7bb33cda0f987513, >= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < 670f6b3867c8f0f11e5097f353b164cecfec6179, >= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < 6adbc07ebcaf8bead08b21687d49e0fc94400987, >= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < 47e6f9f69153247109042010f3a77579e9dc61ff, >= 08a9ff3264181986d1d692a4e6fce3669700c9f8 < 45da9c1767ac31857df572f0a909fbe88fd5a7e9, >= 3.15, >= 3.15 < 4.4.293, >= 4.5 < 4.9.291, >= 4.10 < 4.14.256, >= 4.15 < 4.19.218, >= 4.20 < 5.4.162, >= 5.5 < 5.10.82, >= 5.11 < 5.15.5, 5.16

Fixed versions

4.4.293, 4.9.291, 4.14.256, 4.19.218, 5.4.162, 5.10.82, 5.15.5

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Not available