cbcvebase.
CVE-2021-40490
published 2021-09-03

CVE-2021-40490: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

PriorityP429high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.31%
21.8th percentile
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

Affected

22 ranges
VendorProductVersion rangeFixed in
debiandebian_linux——
debiandebian_linux——
debianlinux< linux 5.14.6-1 (bookworm)linux 5.14.6-1 (bookworm)
fedoraprojectfedora——
fedoraprojectfedora——
linuxlinux_kernel>= 0 < 5.10.46-55.10.46-5
linuxlinux_kernel>= 0 < 5.14.6-15.14.6-1
linuxlinux_kernel>= 0 < 5.14.6-15.14.6-1
linuxlinux_kernel>= 0 < 5.14.6-15.14.6-1
linuxlinux_kernel>= 0 < 4.15.0-161.1694.15.0-161.169
linuxlinux_kernel>= 0 < 5.4.0-89.1005.4.0-89.100
linuxlinux_kernel>= 0 < 4.4.0-222.2554.4.0-222.255
linuxlinux_kernel>= 3.8 < 4.4.2844.4.284
linuxlinux_kernel>= 4.10 < 4.14.2474.14.247
linuxlinux_kernel>= 4.15 < 4.19.2074.19.207
linuxlinux_kernel>= 4.20 < 5.4.1455.4.145
linuxlinux_kernel>= 4.5 < 4.9.2834.9.283
linuxlinux_kernel>= 5.11 < 5.13.155.13.15
linuxlinux_kernel>= 5.14 < 5.14.25.14.2
linuxlinux_kernel>= 5.5 < 5.10.635.10.63
msrccbl2_kernel_5.10.78.1-1_on_cbl_mariner_2.0——
msrccm1_kernel_5.10.64.1-2_on_cbl_mariner_1.0——

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian7.0HIGH
vendor_msrc7.0HIGH
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.