CVE-2021-28964Race Condition in Linux

Severity
4.7MEDIUMNVD
OSV7.8OSV6.5OSV5.3
EPSS
0.1%
top 75.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 22
Latest updateMay 24

Description

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6

Affected Packages5 packages

Debianlinux/linux_kernel< 5.10.26-1+3
Ubuntulinux/linux_kernel< 5.4.0-74.83+1
NVDlinux/linux_kernel5.11.8
debiandebian/linux< linux 5.10.26-1 (bookworm)

Also affects: Debian Linux 9.0, Fedora 32, 33, 34

🔴Vulnerability Details

6
GHSA
GHSA-rrj4-3rqr-76cq: A race condition was discovered in get_old_root in fs/btrfs/ctree2022-05-24
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities2022-04-01
OSV
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.8, linux-kvm, linux-oracle, linux-raspi vulnerabilities2021-06-08
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.2021-06-08
OSV
linux-oem-5.10 vulnerabilities2021-05-11

📋Vendor Advisories

6
Ubuntu
Linux kernel vulnerabilities2022-04-01
Ubuntu
Linux kernel vulnerabilities2021-06-08
Ubuntu
Linux kernel (OEM) vulnerabilities2021-05-11
Red Hat
kernel: race condition in get_old_root function in fs/btrfs/ctree.c because of a lack of locking on an extent buffer before a cloning operation2021-03-16
Microsoft
A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent2021-03-09

💬Community

1
Bugzilla
CVE-2021-28964 kernel: race condition in get_old_root function in fs/btrfs/ctree.c because of a lack of locking on an extent buffer before a cloning operation2021-03-22
CVE-2021-28964 — Race Condition in Debian Linux | cvebase