CVE-2021-47656

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: jffs2: fix use-after-free in jffs2_clear_xattr_subsystem When we mount a jffs2 image, assume that the first few blocks of the image are normal and contain at least one xattr-related inode, but the next block is abnormal. As a result, an error is returned in jffs2_scan_eraseblock(). jffs2_clear_xattr_subsystem() is then called in jffs2_build_filesystem() and then again in jffs2_do_fill_super(). Finally we can observe the following report: ================================================================== BUG: KASAN: use-afte...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= aa98d7cf59b5b0764d3502662053489585faf2fe < 9150cb625b46f68d524f4cfd491f1aafc23e10a9, >= aa98d7cf59b5b0764d3502662053489585faf2fe < 3bd2454162ec6bbb5503233c804fce6e4b6dcec5, >= aa98d7cf59b5b0764d3502662053489585faf2fe < c3b07c875fa8f906f932976460fd14798596f101, >= aa98d7cf59b5b0764d3502662053489585faf2fe < 30bf7244acf32f19cb722c39f7bc1c2a9f300422, >= aa98d7cf59b5b0764d3502662053489585faf2fe < 7bb7428dd73991bf4b3a7a61b493ca50046c2b13, >= aa98d7cf59b5b0764d3502662053489585faf2fe < 7a75740206af5f17e9f3efa384211cba70213da1, >= aa98d7cf59b5b0764d3502662053489585faf2fe < 22327bd7988f21de3a53c1373f3b81542bfe1f44, >= aa98d7cf59b5b0764d3502662053489585faf2fe < 8c0f024f29e055840a5a89fe23b96ae3f921afed, >= aa98d7cf59b5b0764d3502662053489585faf2fe < 4c7c44ee1650677fbe89d86edbad9497b7679b5c, >= 2.6.18, >= 2.6.18 < 4.9.311, >= 4.10 < 4.14.276, >= 4.15 < 4.19.238, >= 4.20 < 5.4.189, >= 5.5 < 5.10.110, >= 5.11 < 5.15.33, >= 5.16 < 5.16.19, >= 5.17 < 5.17.2

Fixed versions

4.9.311, 4.14.276, 4.19.238, 5.4.189, 5.10.110, 5.15.33, 5.16.19, 5.17.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-416